Configuration of enterprise gateways

• US 20040081173A1
• Filed: 10/15/2002
• Published: 04/29/2004
• Est. Priority Date: 10/15/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Feather, Arthur E.
• Granted Patent: US 7,391,748 B2
• Time in Patent Office: Days
• US Class Current: 370/395.54
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 2101/375 Access point names [APN]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method for configuring enterprise gateways includes determining an enterprise internet protocol (IP) address that identifies the interface of an enterprise gateway. The interface couples to one or more components of an enterprise network. An enterprise domain name associated with the enterprise network is determined. An address for a border gateway within an operator network is determined. The operator network links the enterprise gateway to the one or more mobile nodes. A configuration request is communicated to the border gateway. The configuration request includes the enterprise domain name. Operator configuration information is received from the border gateway. The operator configuration information includes an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.

Claims

1. A method for configuring enterprise gateways comprising:

determining an enterprise internet protocol (IP) address that identifies the interface of an enterprise gateway, the interface coupling to one or more components of an enterprise;

determining an enterprise domain name associated with the enterprise network;

determining an address for a border gateway within an operator network, the operator network linking the enterprise gateway to the one or more mobile nodes;

communicating a configuration request to the border gateway, the configuration request comprising the enterprise domain name; and

receiving operator configuration information from the border gateway, the operator configuration information comprising an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.

2. The method of claim 1, wherein the operator configuration information further comprises an administrative internet protocol (IP) address to which the operator network may transmit packets for receipt by the enterprise gateway, the method further comprising configuring a second interface of the enterprise gateway to receive packets addressed to the administrative IP address.

3. The method of claim 1, further comprising:

coupling the enterprise gateway to the border gateway with a fixed link; and

determining the address for the border gateway by communicating an address request on the fixed link and receiving the address from the border gateway on the fixed link in response to the request.

4. The method of claim 1, further comprising:

coupling the enterprise gateway to the border gateway using a public network;

determining an internet protocol (IP) address for the border gateway;

establishing a secure link across the public network between the enterprise gateway and the border gateway; and

communicating the configuration request to the border gateway using the secure link.

5. The method of claim 4, wherein determining the IP address for the border gateway comprises prompting a user to input an identifier for the border gateway, wherein the identifier is either an internet domain name or the IP address for the border gateway.

6. The method of claim 1, further comprising:

receiving a network access request from the border gateway, the network access request generated by a serving node to request access for a mobile node to services of the enterprise network, the network access request comprising an identifier for the mobile node, the access point name, a user identifier, and a password;

determining authorization of the network access request using the user identifier and the password; and

establishing a communication channel through the border gateway to the serving node if the network access request is authenticated, the communication channel for the transport of packets between the mobile node and the enterprise network.

7. The method of claim 1 further comprising maintaining the operator configuration information received from the border gateway in a volatile memory.

8. A method for configuring an enterprise gateway comprising:

receiving a configuration request from an enterprise gateway, the configuration request comprising an enterprise domain name associated with an enterprise network;

determining operator configuration information associated with the enterprise domain name in the configuration request; and

communicating the operator configuration information to the enterprise gateway, the operator configuration information comprising an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.

9. The method of claim 8, wherein the operator configuration information further comprises an administrative internet protocol (IP) address to which an operator network may transmit packets for receipt by the enterprise gateway.

10. The method of claim 8, wherein determining operator configuration information comprises:

maintaining mapping information in the memory, the mapping information mapping the enterprise domain name for one more enterprise gateways to operator configuration information associated with each enterprise gateway; and

determining whether the memory includes mapping information associated with the enterprise domain name included in the configuration request.

11. The method of claim 8, further comprising:

receiving a request for data communications from a mobile node communicating with the operator network, the request for data communications comprising a request for data from the enterprise network;

determining an enterprise gateway configured to provide access to the enterprise network; and

forwarding the request to the IP address of the enterprise gateway.

12. The method of claim 11, further comprising:

maintaining usage information tracking communications between the mobile nodes and the enterprise gateway; and

communicating the usage information to a billing module.

13. An enterprise gateway for communicating data communications between a mobile node and an enterprise network comprising:

a processor operable to;

determine an enterprise internet protocol (IP) address that identifies the interface of an enterprise gateway of an enterprise network;

determine an address for a border gateway within an operator network, the operator network linking the enterprise gateway and one or more mobile nodes;

determine an enterprise domain name associated with the enterprise network; and

generate a configuration request that comprises the enterprise domain name; and

a first interface of the enterprise gateway, the first interface coupling to one or more components of the enterprise network and operable to;

transmit the configuration request to the border gateway, the configuration request comprising the enterprise domain name; and

receive operator configuration information from the border gateway, the operator configuration information comprising an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.

14. The enterprise gateway of claim 13, wherein the operator configuration information further comprises an administrative internet protocol (IP) address to which the operator network may transmit packets for receipt by the enterprise gateway, and the enterprise gateway further comprises a second interface configured to receive packets addressed to the administrative IP address.

15. The enterprise gateway of claim 13, wherein the first interface is further operable to:

couple the enterprise gateway to the border gateway using a fixed link; and

communicate an address request on the fixed link to determine the address for the border gateway by communicating and receiving the address from the border gateway on the fixed link in response to the request.

16. The enterprise gateway of claim 13, wherein the first interface is further operable to:

couple the enterprise gateway to the border gateway using a public network; and

communicate the configuration request to the border gateway over a secure link across the public network between the enterprise gateway and the border gateway.

17. The enterprise gateway of claim 16, wherein the processor is further operable to prompt a user to input an identifier for the border gateway, wherein the identifier is either an internet domain name or the IP address for the border gateway.

18. The enterprise gateway of claim 13, wherein the first interface is further operable to receive a network access request from the border gateway, the network access request being generated by a serving node to request access for a mobile node to services of the enterprise network, the network access request comprising an identifier for the mobile node, the access point name, a user identifier, and a password.

19. The enterprise gateway of claim 18, wherein the processor is further operable to establish a communication channel through the border gateway to the serving node if the network access request is authorized, the communication channel for the transport of packets between the mobile node and the enterprise network.

20. The enterprise gateway of claim 13, wherein the processor is further operable to maintain the operator configuration information received from the border gateway in a volatile memory.

21. A border gateway for communicating data communications between a mobile node and an enterprise network comprising:

a first interface operable to receive a configuration request from an enterprise gateway, the configuration request comprising an enterprise domain name associated with an enterprise network;

a processor operable to;

determine operator configuration information associated with the enterprise domain name included in the configuration request, the operator configuration information comprising an access point name assigned to a enterprise network and for use by one or more mobile nodes to request access to the enterprise network; and

communicate the operator configuration information to the enterprise gateway through the first interface.

22. The border gateway of claim 21, wherein the operator configuration information further comprises an administrative internet protocol (IP) address to which the operator network may transmit packets for receipt by the enterprise gateway.

23. The border gateway of claim 21, wherein the processor is further operable to:

maintain mapping information in the memory, the mapping information mapping the enterprise domain name for one more enterprise gateways to operator configuration information associated with each enterprise gateway; and

determine whether the memory includes mapping information associated with the enterprise domain name included in the configuration request.

24. The border gateway of claim 21, wherein the processor is further operable to:

receive requests for data communications from a mobile node communicating with the operator network, the request for data communications comprising a request for data from the enterprise network;

determine that the enterprise gateway is configured to provide access to the enterprise network; and

forward the request to the IP address of the enterprise gateway.

25. The border gateway of claim 24, wherein the processor is further operable to:

maintain usage information tracking communications between the mobile nodes and the enterprise gateway; and

communicate the usage information to a billing module.

26. Logic for configuring enterprise gateways, the logic embodied in a computer-readable medium and operable to:

determine an enterprise internet protocol (IP) address that identifies the interface of an enterprise gateway, the interface coupling to one or more components of an enterprise;

determine an enterprise domain name associated with the enterprise network;

determine an address for a border gateway within an operator network, the operator network linking the enterprise gateway to one or more mobile nodes;

communicate a configuration request to the border gateway, the configuration request comprising the enterprise domain name; and

receive operator configuration information from the border gateway, the operator configuration information comprising an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.

27. The logic of claim 26, wherein operator configuration information further comprises an administrative internet protocol (IP) address to which the operator network may transmit packets for receipt by the enterprise gateway, the logic further operable to configure a second interface of the enterprise gateway to receive packets addressed to the administrative IP address.

28. The logic of claim 26, wherein the logic is further operable to:

couple the enterprise gateway to the border gateway using a fixed link; and

determine the address for the border gateway by communicating an address request on the fixed link and receiving the address from the border gateway on the fixed link in response to the request.

29. The logic of claim 26, wherein the logic is further operable to:

couple the enterprise gateway to the border gateway using a public network;

determine an internet protocol (IP) address for the border gateway;

establishing a secure link across the public network between the enterprise gateway and the border gateway; and

communicating the configuration request to the border gateway using the secure link.

30. The logic of claim 29, wherein the logic is further operable to determine the address for the border gateway by prompting a user to input an identifier for the border gateway, wherein the identifier is either an internet domain name or the IP address for the border gateway.

31. The logic of claim 26, wherein the logic is further operable to:

receive a network access request from the border gateway, the network access request generated by a serving node to request access for a mobile node to services of the enterprise network, the network access request comprising an identifier for the mobile node, the access point name, a user identifier, and a password;

determining authorization of the network access request using the user identifier and the password; and

establishing a communication channel through the border gateway to the serving node if the network access request is authorized, the communication channel for the transport of packets between the mobile node and the enterprise network.

32. The logic of claim 26 wherein the logic is further operable to maintain the operator configuration information received from the border gateway in a volatile memory.

33. A system for configuring enterprise gateways comprising:

means for determining an enterprise internet protocol (IP) address that identifies the interface of an enterprise gateway, the interface coupling to one or more components of an enterprise network;

means for determining an enterprise domain name associated with the enterprise network;

means for determining an address for a border gateway within an operator network linking to mobile units, the border gateway communicating with the enterprise gateway;

means for communicating a configuration request to the border gateway, the configuration request comprising the enterprise domain name; and

means for receiving operator configuration information from the border gateway, the operator configuration information comprising an access point name assigned to the enterprise network and for use by the mobile nodes to request access to the enterprise network.