VIRTUAL PRIVATE NETWORK SYSTEM AND METHOD

• US 20090199290A1
• Filed: 03/17/2008
• Published: 08/06/2009
• Est. Priority Date: 02/01/2008
• Status: Abandoned Application

• Current Assignee: McAfee, Inc. (McAfee, LLC)
• Original Assignee: Secure Computing Corporation (McAfee, LLC)
• Inventors: Craig, Philip, McCullough, David, Essebier, Tom
• Application Number:
  US12/049,703
• Publication Number:
  US 20090199290A1
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0485 Networking architectures for enhanced packet encryption processing, e.g. offloading of IPsec packet processing or efficient security association look-up
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

One embodiment of the application provides a method and system for receiving at a gateway device a plurality of virtual private network tunnels to be routed to a Local Area Network (LAN), routing a first portion of the plurality of virtual private network tunnels to at least one slave device coupled to the gateway device, performing IPsec processing of the first portion of the plurality of virtual private network tunnels using at least one slave device, forwarding the first portion of the plurality of virtual private network tunnels after IPsec processing to at the gateway device and routing the plurality of virtual private network tunnels to the LAN.

Claims

1. A system comprising:

a gateway device coupled to a LAN and configured to provide a plurality of Virtual Private Network (VPN) tunnels between the Local Area Network (LAN) and a public network;

at least one slave device coupled to the gateway device configured to perform IPsec processing of a first portion of the plurality of virtual private network tunnels and return the first portion of the plurality of virtual private network tunnels back to the gateway device for firewall processing; and

a plurality of devices coupled to the LAN and configured to communicate using at least one of the plurality of VPN tunnels.

2. The system of claim 1, wherein the gateway device is configured to operate as a firewall device between the LAN and the public network.

3. The system of claim 1, wherein the at least one slave device is configured to encrypt the first portion of the plurality of virtual private network tunnels.

4. The system of claim 1, wherein the at least one slave device is configured to perform key processing for a first portion of the plurality of virtual private network tunnels.

5. The system of claim 1, wherein a first slave device includes an n-port switch configured to communicate with a second slave device.

6. The system of claim 1, further comprising:

a multi-port switch to couple at least one slave device to the gateway device.

7. The system of claim 1, wherein at least one slave device is coupled to the gateway device using a Local Area Network (LAN).

8. The system of claim 1, wherein the slave devices are coupled to the gateway device in a daisy chain configuration.

9. A method comprising:

receiving at a gateway device a plurality of virtual private network tunnels to be routed to a Local Area Network (LAN);

routing a first portion of the plurality of virtual private network tunnels to at least one slave device coupled to the gateway device;

performing IPsec processing of the first portion of the plurality of virtual private network tunnels using at least one slave device;

forwarding the first portion of the plurality of virtual private network tunnels after IPsec processing to the gateway device; and

routing the plurality of virtual private network tunnels to the LAN.

10. The method of claim 9, wherein performing IPsec processing of the first portion of the plurality of virtual private network tunnels includes encrypting the first portion of the plurality of virtual private network tunnels.

11. The method of claim 9, wherein performing IPsec processing of the first portion of the plurality of virtual private network tunnels includes performing key processing of the first portion of the plurality of virtual private network tunnels.

12. The method of claim 9, wherein forwarding the first portion of the plurality of virtual private network tunnels includes forwarding the first portion of the plurality of virtual private network tunnels using the LAN.

13. The method of claim 9, wherein forwarding the first portion of the plurality of virtual private network tunnels includes forwarding the first portion of the plurality of virtual private network tunnels using a second LAN.

14. The method of claim 9, wherein receiving at a gateway device a plurality of virtual private network tunnels to be routed to a Local Area Network (LAN) includes receiving at a VPN server the plurality of virtual private network tunnels to be routed to the Local Area Network (LAN).

15. A computer readable medium encoded with instructions, wherein the instructions when executed comprising:

receiving at a gateway device a plurality of virtual private network tunnels to be routed to a Local Area Network (LAN);

routing a first portion of the plurality of virtual private network tunnels to at least one slave device coupled to the gateway device;

performing IPsec processing of the first portion of the plurality of virtual private network tunnels using at least one slave device;

forwarding the first portion of the plurality of virtual private network tunnels after IPsec processing to the gateway device; and

routing the plurality of virtual private network tunnels to the LAN.

16. The computer readable medium of claim 15, wherein performing IPsec processing of the first portion of the plurality of virtual private network tunnels includes encrypting the first portion of the plurality of virtual private network tunnels.

17. The computer readable medium of claim 15, wherein performing IPsec processing of the first portion of the plurality of virtual private network tunnels includes performing key processing of the first portion of the plurality of virtual private network tunnels.

18. The computer readable medium of claim 15, wherein forwarding the first portion of the plurality of virual private network tunnels includes forwarding the first portion of the plurality of virual private network tunnels using the LAN.

19. The computer readable medium of claim 15, wherein forwarding the first portion of the plurality of virtual private network tunnels includes forwarding the first portion of the plurality of virual private network tunnels using a second LAN.

20. The computer readable medium of claim 15, wherein receiving at a gateway device a plurality of virual private network tunnels to be routed to a Local Area Network (LAN) includes receiving at a VPN server the plurality of virtual private network tunnels to be routed to the Local Area Network (LAN).