Multi-hop point-to-point protocol

• US 6,449,272 B1
• Filed: 05/08/1998
• Issued: 09/10/2002
• Est. Priority Date: 05/08/1998
• Status: Expired due to Term

• Current Assignee: WSOU Investments, LLC (WSOU Holdings, LLC)
• Original Assignee: Lucent Technologies, Inc. (Nokia Corporation)
• Inventors: Rai, Girish, Chuah, Mooi Choo
• Primary Examiner(s): Hsu, Alpus H.
• Assistant Examiner(s): SHAND, ROBERTA A
• Application Number:
  US09/074,745
• Time in Patent Office: 1,586 Days
• Field of Search: 370/352, 370/320, 370/331, 370/389, 370/392, 370/401, 370/420, 370/466, 370/473, 709/201, 709/203, 709/217, 709/218, 709/230, 709/232, 709/236
• US Class Current: 370/389
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/168 specially adapted for link layer protocols, e.g. asynchronous transfer mode [ATM], synchronous optical network [SONET] or point-to-point protocol [PPP]
• CPC Class Codes: H04L 69/324 in the data link layer [OSI layer 2], e.g. HDLC
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]

Abstract

A virtual dial-up service is provided via multiple Internet Service Provides (ISPs). In particular, a remote user accesses the virtual dial-up service by establishing a connection to a serving ISP. The Serving ISP establishes a first tunnel to an anchor ISP. The latter establishes a tunnel to, e.g., a private intranet. As a result, a virtual private network (VPN) service is provided that enables remote access, via multiple tunnels, to a private network.

Claims

1. A method for use in a packet server, the method comprising the steps of:

establishing a multi-hop packet tunnel between other packet endpoints; and

relaying messages between the other packet endpoints over the multi-hop packet tunnel, wherein the relaying step includes the step of modifying packet processing delay information included in any of the messages to include a packet processing delay for the packet server before relaying these messages between the other packet endpoints.

2. The method of claim 1 wherein the establishing step includes the steps of:

establishing a first packet tunnel to one packet endpoint; and

establishing a second packet tunnel to another packet endpoint.

3. The method of claim 2 further comprising the step of tracking connection information, the connection information including a tunnel identification value for the first packet tunnel and a tunnel identification value for the second packet tunnel.

4. The method of claim 1 wherein the relaying step includes the step of modifying at least some of the messages before relaying them between the other packet endpoints.

5. The method of claim 1 wherein the relaying step includes the step of modifying tunnel identification information in at least some of the messages before relaying them between the other packet endpoints.

6. The method of claim 1 wherein the packet server uses an Internet Protocol that supports multiple tunnels.

7. The method of claim 6 wherein the Internet Protocol is a form of Layer 2 Tunneling Protocol.

8. A method for use in a packet server for providing a virtual dial-up service, the method comprising the steps of:

establishing a first packet tunnel with a first packet server;

establishing a second packet tunnel with a second packet server; and

relaying messages between the first packet tunnel and the second packet tunnel, wherein the relaying step includes the step of modifying packet processing delay information included in any of the messages to include a packet processing delay for the packet server before relaying these messages between the first and the second packet tunnel.

9. The method of claim 8 wherein the establishing a first packet tunnel step includes the step of receiving a message from the first packet server including information identifying the first packet server and a tunnel identifier for the first packet tunnel.

10. The method of claim 8 wherein the relaying step includes the step of modifying at least some of the messages before relaying them between the first and the second packet tunnels.

11. The method of claim 8 further comprising the step of tracking connection information, the connection information including a tunnel identification value for the first packet tunnel and a tunnel identification value for the second packet tunnel.

12. The method of claim 8 wherein the relaying step includes the step of modifying tunnel identification information in at least some of the messages before relaying them between the first packet tunnel and the second packet tunnel.

13. A packet server comprising:

a processing element for causing to be established a first packet tunnel to one packet endpoint and a second packet tunnel to another packet endpoint; and

a memory element for storing connection information relating the two packet tunnels together, wherein the process causes modification of packet processing delay information included in any of the messages to include a packet processing delay for the packet server before causing them to be relayed between the other packet endpoints.

14. The apparatus of claim 13 wherein the processing element causes messages to be relayed between the first packet tunnel and the second packet tunnel.

15. The apparatus of claim 14 wherein the processor causes modification of tunnel identification information in at least some of the messages before causing them to be relayed between the other packet endpoints.

16. A packet server apparatus of the type used to provide access to a virtual private network service, the packet server characterized by a multi-hop tunnel protocol such that the packet server relays message between different tunnels connected to other packet servers, wherein the packet server modifies packet processing delay information included in any of the messages to include a packet processing delay for the packet server before relaying these messages between hops.

17. The apparatus of claim 16 wherein the packet server modifies at least some of the messages before relaying them between hops.

18. The apparatus of claim 16 wherein the packet server modifies tunnel identification information in at least some of the messages before relaying them between hops.

19. A method for use in a packet server for providing access to a virtual private network (VPN) service at a location other than a user'"'"'s anchor location, the method comprising the steps of:

accepting point-to-point protocol connections with users for accessing the virtual private network service, said point to point connections establishing a VPN connection with a server LAC device to enable an alternate VPN connection location; and

causing to be established a first packet tunnel between said anchor LAC device and said server LAC device using predetermined messages of a modified protocol and to establish a second packet tunnel to another packet endpoint;

such that the packet server is disposed between hops and relays messages between hops.

20. The method of claim 19 wherein the accepting multi-hop tunnel connections step includes the step of modifying at least some of the messages before relaying them between hops.

21. The method of claim 19 wherein the accepting multi-hop tunnel connections step includes the step of modifying tunnel identification information in at least some of the messages before relaying them between hops.

22. The method of claim 19 wherein the accepting multi-hop tunnel connections includes the step of modifying packet processing delay information included in any of the messages to include a packet processing delay for the packet server before relaying these messages between hops.

23. The method of claim 19 wherein the packet server uses an Internet Protocol that supports multiple tunnels.

24. The method of claim 23 wherein the Internet Protocol is a form of Layer 2 Tunneling Protocol.

25. The method of claim 19, wherein said messages are selected from the group consisting of start-control-connect request, start-control-connect-reply and start-control-connection -connect.

26. Apparatus for use in a packet network, the apparatus comprising:

a packet server for a) accepting point-to-point protocol connections with users for accessing the virtual private network service and b) accepting multi-hop tunnel connections with other packet servers to establish alternate connection locations for said users, said server utilizing predetermined messages of a modified protocol to extend a virtual private network connection to said alternate locations using said multi-hop tunnel locations, such that the packet server is disposed between hops and relays messages between hops.

27. The apparatus of claim 26, wherein the packet server modifies at least some of the messages before relaying them between hops.

28. The apparatus of claim 26 wherein the packet server modifies tunnel identification information in at least some of the messages before relaying them between hops.

29. The apparatus of claim 26 wherein the packet server modifies packet processing delay information included in any of the messages to include a packet processing delay for the packet server before relaying these messages between hops.

30. The method of claim 26, wherein said messages are selected from the group consisting of start-control-connect request, start-control-connect-reply and start-control-connection connect.

31. An anchor LAC device capable of establishing a VPN connection with a server LAC device to enable an alternate VPN connection location to a user comprising:

a processing element for causing to be established a first packet tunnel between said anchor LAC device and said server LAC device using predetermined messages of a modified L2TP protocol and to establish a second packet tunnel to another packet endpoint; and

a memory element for storing connection information relating the two packet tunnels together, said first packet tunnel enabling said VPN connection to occur through said server LAC.