Method for deploying a virtual private network

• US 20040158601A1
• Filed: 02/06/2003
• Published: 08/12/2004
• Est. Priority Date: 02/06/2003
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Graves, David, Shomo, Rob, Wing, Julie, Madhavan, Sajeev
• Granted Patent: US 7,447,751 B2
• Time in Patent Office: Days
• US Class Current: 709/200
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A system for automatically deploying a VPN device comprises a resource abstraction layer coupled to the VPN device, for providing the device with a configuration specific to it, and a uniform interface coupled to the RAL, for providing the VPN device with a configuration that is not specific to the device.

Claims

1. In a network environment, a system for automatically deploying a Virtual Private Network (VPN) device, comprising:

a resource abstraction layer (RAL) coupled to said VPN device, for providing said device with a configuration specific to said device; and

a uniform interface coupled to said RAL, for providing said VPN device with a configuration that is not specific to said device.

2. The system as recited in claim 1 wherein said RAL is coupled to a console comprising said device.

3. The system as recited in claim 2 wherein said console comprises a feature selected from the group consisting essentially of a Command Line Interface (CLI) and an Application Program Interface (API).

4. The system as recited in claim 1, further comprising an event controller, wherein said event controller comprises said uniform interface and said RAL.

5. The system as recited in claim 4 wherein said event controller further comprises:

a database for storing information relating to said device;

a plurality of logical database access classes coupled to said database, for accessing said database;

an allocator coupled to said plurality of logical database access classes, for allocating said VPN device;

a wirer coupled to said plurality of logical database access classes, for connecting said device into said network environment; and

an activator, coupled selectively to said allocator and to said uniform interface and said RAL, for activating said uniform interface and said RAL.

6. The system as recited in claim 5, further comprising:

an unwirer coupled to said plurality of logical database access classes, for placing said VPN device in a standby mode;

an updater coupled to said plurality of logical database access classes, for updating said plurality of logical database access classes with information relating to said device; and

an eraser coupled to said plurality of logical database access classes, for de-configuring said VPN device.

7. The system as recited in claim 1, wherein said configuration specific to said device comprises a command selected from the group consisting essentially of:

initializing a firmware resource comprising said VPN device;

booting said VPN device;

adding a host name to said VPN device;

configuring a network interface comprising said VPN device; and

storing a copy of said configuration specific to said device and said configuration that is not specific to said device.

8. The system as recited in claim 7, wherein said network interface comprises an Internet Protocol (IP).

9. The system as recited in claim 8, wherein said IP comprises an IP selected from the group consisting essentially of a public IP, network gateway IP, and a private IP.

10. The system as recited in claim 8 wherein said private IP comprises a protocol selected from the group consisting essentially of Secure Internet Protocol (IPSec) and Secure Socket Layer (SSL).

11. The system as recited in claim 9, wherein said private IP configures a VPN tunnel.

12. The system as recited in claim 1, wherein said configuration not specific to said device comprises a command selected from the group consisting essentially of:

access console;

get information;

power on; and

logical configuration.

21. The method as recited in claim 12, further comprising:

placing said VPN in a standby mode;

updating said configuration not specific to said device and said configuration specific to said device; and

deleting said VPN.

13. In a provisionable data network, an automated method of deploying a device comprising a Virtual Private Network (VPN), comprising:

receiving a request for said deploying said VPN;

in response to said receiving, automatically activating a device driver;

in response to said activating, automatically configuring said device with a configuration not specific to said device; and

further in response to said activating, automatically configuring said device with a configuration specific to said device.

14. The automated method as recited in claim 13, wherein said configuration not specific to said device comprises a command selected from the group consisting essentially of:

access console;

get information;

power on; and

logical configuration.

15. The automated method as recited in claim 13, wherein said configuration specific to said device comprises a command causing an action selected from the group consisting essentially of:

initializing a firmware resource comprising said VPN device;

booting said VPN device;

adding a host name to said VPN device;

configuring a network interface comprising said VPN device; and

storing a copy of said configuration specific to said device and said configuration that is not specific to said device.

16. The method as recited in claim 15 wherein said network interface comprises an Internet Protocol (IP).

17. The method as recited in claim 16, wherein said IP comprises an IP selected from the group consisting essentially of a public IP, network gateway IP, and a private IP.

18. The method as recited in claim 17 wherein said private IP comprises a protocol selected from the group consisting essentially of Secure Internet Protocol (IPSec) and Secure Socket Layer (SSL).

19. The method as recited in claim 17, wherein said private IP configures a VPN tunnel.

20. The method as recited in claim 13, further comprising:

allocating said VPN; and

wiring said VPN.

22. In a computer system of a provisionable data network, a computer usable medium having a computer readable program code embodied therein for causing said computer system to perform an automated method for deploying a device comprising a Virtual Private Network (VPN), said method comprising:

in response to receiving a request for deploying said VPN, automatically activating a device driver;

in response to said activating, automatically configuring said device with a configuration not specific to said device; and

further in response to said activating, automatically configuring said device with a configuration specific to said device.

23. The computer usable medium as recited in claim 22, wherein said configuration not specific to said device comprises a command selected from the group consisting essentially of:

access console;

get information;

power on; and

logical configuration.

24. The computer usable medium as recited in claim 22, wherein said configuration specific to said device comprises a command causing an action selected from the group consisting essentially of:

initializing a firmware resource comprising said VPN device;

booting said VPN device;

adding a host name to said VPN device;

configuring a network interface comprising said VPN device; and

storing a copy of said configuration specific to said device and said configuration that is not specific to said device.

25. The computer usable medium as recited in claim 24 wherein said network interface comprises an Internet Protocol (IP).

26. The computer usable medium as recited in claim 25, wherein said IP comprises an IP selected from the group consisting essentially of a public IP, network gateway IP, and a private IP.

28. The computer usable medium as recited in claim 26, wherein said private IP configures a VPN tunnel.

29. The computer usable medium as recited in claim 22, wherein said method further comprises:

allocating said VPN; and

wiring said VPN.

30. The computer usable medium as recited in claim 22, wherein said method further comprises:

placing said VPN in a standby mode;

updating said configuration not specific to said device and said configuration specific to said device; and

deleting said VPN.

27. The computer usable medium as recited in 26 wherein said private IP comprises a prtocol selected from the group consisting essentially of Secure Internet Protocol (IPSec) and Secure Socket Layer (SSL).