Configuration of VPNs

• US 20060259963A1
• Filed: 07/29/2005
• Published: 11/16/2006
• Est. Priority Date: 05/12/2005
• Status: Active Grant

• Current Assignee: Hewlett Packard Enterprise Development LP (Hewlett-Packard Enterprise Company)
• Original Assignee: 3Com Corporation (HP Inc.)
• Inventors: Duncan, Robert, Moran, Mike, Urouhart, Steven James, Maxwell, David John
• Granted Patent: US 7,584,299 B2
• Time in Patent Office: Days
• US Class Current: 726/15
• CPC Class Codes: H04L 12/4675 Dynamic sharing of VLAN information amongst network nodes configuration of the network or of network elements H04L41/08
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0895 Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements
• CPC Class Codes: H04L 45/02 Topology update or discovery

Abstract

The gateway devices in a VPN require configuration when the VPN is set up and to reflect changes. To process the configuration tasks efficiently, a method is described of configuring a virtual private network (VPN) within a shared network, in which a queue of configuration tasks is created for gateway devices belonging to the VPN. The configuration tasks include sending static network routing information to said gateway devices. The tasks are deployed by retrieving a next task from the queue, and interrogating the gateway device to which the task relates, to identifying any change in subnetworks connected thereto since the task was created. If no change is identified, the retrieved task is performed. If, on the other hand, a change is identified, update configuration tasks are created for all relevant gateway devices in the VPN. The update task for each gateway device is then merged with any not yet performed task in the queue for that gateway device, and the task retrieved from the queue merged with the and update task is performed.

Claims

1. A method of configuring a virtual private network (VPN) within a shared network, comprising:

the steps of creating a queue of configuration tasks for gateway devices belonging to the VPN, said configuration tasks including sending static network routing information to said gateway devices; and

repeatedly retrieving a next task from the queue, interrogating the gateway device to which the task relates, to identifying any change in subnetworks connected thereto since the task was created;

if no change is identified, performing the retrieved task;

or if a change is identified, creating update configuration tasks for all relevant gateway devices in the VPN;

merging the update task for each gateway device with any not yet performed task for that gateway device; and

performing the task retrieved from the queue merged with the update task.

2. A method as claimed in claim 1, wherein said changes include addition or deletion of subnetworks.

3. A computer program on computer readable medium loadable into a digital computer or embodied in a carrier wave, said computer program comprising software for performing the steps of claim 1.

5. Apparatus as claimed in claim 3, wherein said changes include addition or deletion of subnetworks.

4. Apparatus for configuring a virtual private network (VPN) within a shared network, comprising:

means for creating a queue of configuration tasks for gateway devices belonging to the VPN, said configuration tasks including sending static network routing information to said gateway devices; and

repeatedly retrieving a next task from the queue, means for interrogating the gateway device to which the task relates, to identifying any change in subnetworks connected thereto since the task was created;

if no change is identified, performing the retrieved task;

or if a change is identified, creating update configuration tasks for all relevant gateway devices in the VPN;

means for merging the update task for each gateway devices with any not yet performed task for that gateway device; and

performing the task retrieved from the queue merged with the update task.

6. A computer program on computer readable medium loadable into a digital computer or embodied in a carrier wave, including the following steps:

program step 100;

interrogate each VPN gateway device to record subnetworks connected to it;

program step 110;

construct queue of configuration tasks for VPN gateway devices;

program step 120;

retrieve task from queue;

program step 130;

interrogate device to which task relates to determine subnetworks connected to it;

program step 140;

any changes in recorded subnetworks? If yes go to step 150. If no go to step 170;

program step 150;

modify current task and other tasks in queue to reflect changes;

program step 160;

create new configuration tasks reflecting changes for gateway devices not having tasks in the queue; and

program step 170;

perform current or modified current task.