Virtual private networks

• US 6,516,417 B1
• Filed: 08/07/1998
• Issued: 02/04/2003
• Est. Priority Date: 08/07/1998
• Status: Expired due to Term

• Current Assignee: RPX Clearinghouse LLC (RPX Corporation)
• Original Assignee: Nortel Networks Limited (Nortel Networks Corporation)
• Inventors: Yuen, Matthew, Jamieson, Dwight, Pegrum, Michael Scott
• Primary Examiner(s): LE, DIEU MINH T
• Application Number:
  US09/131,190
• Time in Patent Office: 1,642 Days
• Field of Search: 713/200, 713/201, 713/202, 709/223, 709/226, 709/324, 714/4
• US Class Current: 726/15
• CPC Class Codes: H04L 63/0272 Virtual private networks

Abstract

A system and method of automatically configuring virtual private networks is provided. The virtual private networks disclosed, include multiple routers selectively connectable to the shared network, such that each of the routers is assigned at least one: shared network address, private network address and virtual private network identifier. Each router includes a controller configured to communicate a router configuration message over the shared network to other members of the same virtual private network. The router configuration message informs the other members of the virtual private network the address of the router and what devices are connected to the router.

Claims

1. Virtual private networks which enable private communications over a shared network, between at least two private networks comprising:

a first router, coupled to the shared network;

a second router, coupled to the first router via said shared network;

wherein each of said first and second routers is assigned at least one shared network address, at least one private network address, and at least one virtual private network identifier;

a controller coupled to the first router, the controller configured to periodically communicate a Virtual Private Network (VPN) configuration message over the shared network to the second router, wherein said VPN configuration message includes said at least one shared network address, said at least one private network address and said at least one virtual private network identifier associated with the first router, said VPN configuration message for notifying the second router of a VPN configuration of the at least one of the plurality of routers.

2. The virtual private networks according to claim 1 wherein the second router only processes the VPN configuration message if said virtual private network identifier included therein identifies a virtual private network of which said second router is a member.

3. The virtual private network according to claim 2 wherein said controller is further configured to communicate a router discovery message over the shared network, the router discovery message for identifying other routers on the shared network having a matching virtual private network identifier.

4. The virtual private network according to claim 1 wherein:

communications between said plurality of routers occurs through encapsulated transmissions.

5. A virtual private network which enables private communication over a shared network between at least two actual networks comprising:

a plurality of routing means, logically coupled together across a shared network, for routing communications between said actual networks; and

determining means, coupled to each of said plurality of routing means, for determining all members of a virtual private network, said determining means comprising means for periodically soliciting the shared network to identify routing means that share a common virtual private network identifier.

6. The virtual private network according to claim 5 wherein said determining means comprises:

a controller configured to communicate a routing means configuration message to all members of said virtual private network.

7. The virtual private network according to claim 6 wherein said controller is further configured to communicate a routing means discovery message.

8. The virtual private network according to claim 5 wherein:

communications between said plurality of routing means occurs through encapsulated transmissions.

9. A device for establishing a secure connection to another device on a network, the device comprising:

means for automatically periodically signaling the presence of the device on the network, the means including an identifier for identifying each secure connection of which the device is a member; and

means for receiving, at the device, signals from other devices coupled to the network, including means for comparing identifiers received from the other devices in the network to identify devices in the network that share common secure connections.