Internet protocol authentication in layer-3 multipoint tunneling for wireless access points

• US 20050270992A1
• Filed: 11/19/2004
• Published: 12/08/2005
• Est. Priority Date: 05/05/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Gourlay, Douglas, Sanzgiri, Ajit
• Granted Patent: US 7,616,613 B2
• Time in Patent Office: Days
• US Class Current: 370/310.200
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

Enhanced tunnel communication mode creation, management and tuning in a network that includes wireless access points (APs) and user authentication. Tunnels can be dynamically managed to adapt to the changing topology of a network with APs. User devices such as mobile phones, laptop computers, personal digital assistants, or other devices can be added or dropped from an assigned AP. APs, routers, switches or other devices can also be added, removed, or modified in their network characteristics. Special control is also provided for IP multicast, Dynamic Host Configuration Protocol (DHCP), Address Resolution Protocol (ARP) and other network features.

Claims

1. A method for transferring information in a digital network, wherein the network includes a router, an access point, a user device, and a plurality of other devices all coupled to the network, the method comprising

creating a multipoint tunnel communication mode to transfer information from the user device to at least one of the other devices;

using a routing configuration to route communications over the multipoint tunnel; and

modifying the routing configuration in response to a discovered host.

2. The method of claim 1, wherein a host includes an access point.

3. The method of claim 1, wherein a host includes a user device.

4. The method of claim 1, wherein modifying includes adding a discovered host.

5. The method of claim 1, wherein modifying includes removing a discovered host that has been added.

6. The method of claim 1, wherein modifying includes changing a characteristic of the host.

7. The method of claim 6, wherein a characteristic includes a physical location.

8. The method of claim 1, further comprising optimizing transfer of DHCP packets.

9. The method of claim 1, further comprising optimizing transfer of ARP packets.

10. The method of claim 1, further comprising

optimizing IP multicast.

11. An apparatus-for transferring information in a digital network, wherein the network includes a router, an access point, a user device, and a plurality of other devices all coupled to the network, the apparatus comprising

means for creating a multipoint tunnel communication mode to transfer information from the user device to at least one of the other devices;

means for using a routing configuration to route communications over the multipoint tunnel; and

means for modifying the routing configuration in response to a discovered host.

12. An apparatus for transferring information in a digital network, wherein the network includes a router, an access point, a user device, and a plurality of other devices all coupled to the network, the apparatus comprising

a processor for executing instructions;

a machine-readable medium including

one or more instructions for creating a multipoint tunnel communication mode to transfer information from the user device to at least one of the other devices;

one or more instructions for using a routing configuration to route communications over the multipoint tunnel; and

one or more instructions for modifying the routing configuration in response to a discovered host.

13. A machine-readable medium including instructions for transferring information in a digital network, wherein the network includes a router, an access point, a user device, and a plurality of other devices all coupled to the network, the machine-readable medium comprising

one or more instructions for creating a multipoint tunnel communication mode to transfer information from the user device to at least one of the other devices;

one or more instructions for using a routing configuration to route communications over the multipoint tunnel; and

one or more instructions for modifying the routing configuration in response to a discovered host.

14. A method for transferring information in a digital network, wherein the digital network includes a plurality of mobile nodes and a network device, the method comprising

configuring at least a subset of the plurality of mobile nodes on a first multipoint tunnel interface;

associating a policy with the first multipoint tunnel interface; and

re-configuring the at least a subset of the plurality of mobile nodes according to a criterion.

15. The method of claim 14, wherein the policy includes quality of service factors.

16. The method of claim 14, wherein the policy includes an access control list.

17. The method of claim 14, wherein the criterion includes a creation of a multipoint interface.

18. The method of claim 14, wherein the criterion includes a deletion of a multipoint interface.

19. The method of claim 14, wherein the criterion includes a modification of a tunnel attribute.

20. The method of claim 14, wherein the criterion includes a change in a tunnel state.

21. A method for communicating in a mobile network, the method comprising:

creating a plurality of tunnels in a mobile network, wherein each tunnel has a predefined attribute;

assigning at least one of the created plurality of tunnels to a mobile device; and

using the assigned tunnel to communicate with the mobile device.

22. The method of claim 21, wherein the plurality of tunnels comprise a multipoint tunneling system.

23. The method of claim 21, wherein the predefined attribute includes policy information.

24. The method of claim 23, wherein the policy information includes access control.

25. The method of claim 23, wherein policy information includes quality of service.

26. The method of claim 23, wherein policy information includes network address translation information.

27. The method of claim 23, wherein policy information includes policy-based routing information.

28. The method of claim 21, wherein a tunnel includes an endpoint, wherein the mobile device is associated with an access point, wherein the access point is associated with the endpoint.

29. The method of claim 21, wherein the predefined attribute includes an internet protocol address.

30. The method of claim 21, wherein the predefined attribute includes tunnel encapsulation information.

31. The method of claim 21, wherein the predefined attribute includes security information.