QOS-based virtual private network using ATM-based internet virtual connections
First Claim
1. A router for building a virtual private network (VPN) through an ATM (asynchronous transfer mode) network configured as part of a public switched packet network, the router comprising:
- a connection setup table having a plurality of entries, each entry including a pair of internet protocol (IP) addresses respectively identifying source and destination nodes of the virtual private network, a quality-of-service parameter, an ATM address field, and a virtual connection (VC) field; and
control circuitry for (a) receiving a VPN packet and detecting a corresponding entry in said table that contains IP addresses of the packet and making a search through the corresponding table entry for contents of the ATM address field and the VC field thereof, (b) appending an IP header to the VPN packet, if said ATM address field contains no data, to formulate an address resolution request packet and forwarding the packet to said public switched packet network, (c) receiving an address resolution reply packet therefrom and storing a destination ATM address contained in the reply packet into said ATM address field, and (d) if said ATM address field contains a destination ATM address and said VC field contains no data, establishing a virtual connection to the destination ATM address according to the quality-of-service parameter of the corresponding table entry and storing a connection identifier identifying the established virtual connection in said VC field, and if said VC field contains a connection identifier, forwarding said VPN packet over an established virtual connection identified by the connection identifier.
1 Assignment
0 Petitions
Accused Products
Abstract
In a virtual private network (VPN) established over an ATM-over-Internet, a connection setup table has multiple entries, each including a pair of IP addresses identifying source and destination nodes of the VPN, a QoS parameter, an ATM address field, and a virtual connection (VC) field. When a VPN packet is received, a corresponding entry of the table that contains IP addresses of the packet is detected and the table entry is searched for contents of said ATM address and VC fields. If the ATM address field contains no data, an IP header is appended to the VPN packet to formulate an address resolution request packet, which is forwarded to the Internet. An address resolution reply packet is received and a destination ATM address contained therein is stored into the ATM address field. If the ATM address field contains a destination ATM address and the VC field contains no data, a virtual connection is established to the destination ATM address according to the QoS parameter of the corresponding table entry and the connection identifier of the established connection is stored in the VC field. If the VC field contains a connection identifier, the VPN packet is sent over a virtual connection according to the connection identifier.
-
Citations
8 Claims
-
1. A router for building a virtual private network (VPN) through an ATM (asynchronous transfer mode) network configured as part of a public switched packet network, the router comprising:
-
a connection setup table having a plurality of entries, each entry including a pair of internet protocol (IP) addresses respectively identifying source and destination nodes of the virtual private network, a quality-of-service parameter, an ATM address field, and a virtual connection (VC) field; and
control circuitry for (a) receiving a VPN packet and detecting a corresponding entry in said table that contains IP addresses of the packet and making a search through the corresponding table entry for contents of the ATM address field and the VC field thereof, (b) appending an IP header to the VPN packet, if said ATM address field contains no data, to formulate an address resolution request packet and forwarding the packet to said public switched packet network, (c) receiving an address resolution reply packet therefrom and storing a destination ATM address contained in the reply packet into said ATM address field, and (d) if said ATM address field contains a destination ATM address and said VC field contains no data, establishing a virtual connection to the destination ATM address according to the quality-of-service parameter of the corresponding table entry and storing a connection identifier identifying the established virtual connection in said VC field, and if said VC field contains a connection identifier, forwarding said VPN packet over an established virtual connection identified by the connection identifier. - View Dependent Claims (2, 3, 4)
a time table having a plurality of entries respectively corresponding to the entries of said connection setup table for mapping time schedule data; and
triggering circuitry for monitoring the time schedule data of each entry of the time table and storing an indication in the on/off field of each entry of the connection setup table according to the monitored data of the corresponding entry of the time table, wherein said control circuitry is arranged to enable or disable contents of each entry of the connection setup table depending on the indication stored in the on/off field of the entry.
-
-
4. A router as claimed in claim 3, wherein said control circuitry is arranged to receive a time schedule signal and alter said time table according to the received time schedule signal.
-
5. A method of building a virtual private network (VPN) through an ATM (asynchronous transfer mode) network configured as part of a public switched packet network, said virtual private network including a connection setup table having a plurality of entries, each entry including a pair of internet protocol (IP) addresses respectively identifying source and destination nodes of the virtual private network, a quality-of-service parameter, an ATM address field, and a virtual connection (VC) field, the method comprising the steps of:
-
a) receiving a VPN packet and detecting a corresponding entry in said table including IP addresses of the packet and making a search through the corresponding table entry for contents of said ATM address and VC fields;
b) if said ATM address field contains no data, appending an IP header to the VPN packet to formulate an address resolution request packet and forwarding the packet to said public switched packet network;
c) receiving an address resolution reply packet and storing a destination ATM address contained therein into said ATM address field; and
d) if said ATM address field contains a destination ATM address and said VC field contains no data, establishing a virtual connection to the destination ATM address according to the quality-of-service parameter of the corresponding table entry and storing a connection identifier identifying the established virtual connection in said VC field, and if said VC field contains a connection identifier, forwarding said VPN packet over a virtual connection according to the connection identifier. - View Dependent Claims (6, 7, 8)
monitoring the time schedule data of each entry of the time table and storing an indication in the on/off field of each entry of the connection setup table according to the monitored data of the corresponding entry of the time table; and
enabling or disabling contents of each entry of the connection setup table depending on the indication stored in the on/off field of the entry.
-
-
8. A method as claimed in claim 7, further comprising the steps of receiving a time schedule signal and altering said time table according to the received time schedule signal.
Specification