QOS-based virtual private network using ATM-based internet virtual connections

• US 6,636,516 B1
• Filed: 03/07/2000
• Issued: 10/21/2003
• Est. Priority Date: 03/17/1999
• Status: Expired due to Fees

• Current Assignee: NEC Corporation
• Original Assignee: NEC Corporation
• Inventors: Yamano, Shigeki
• Primary Examiner(s): VANDERPUYE, KENNETH N
• Application Number:
  US09/520,238
• Time in Patent Office: 1,323 Days
• Field of Search: 370/395.1, 370/389, 370/401, 370/395.21, 370/395.52
• US Class Current: 370/395.52
• CPC Class Codes: H04L 12/4608 LAN interconnection over ATM networks
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 12/5601 Transfer mode dependent, e.g. ATM
• CPC Class Codes: H04L 2012/562 Routing
• CPC Class Codes: H04L 2012/5621 Virtual private network [VPN]; Private-network - network-interface (P-NNI)
• CPC Class Codes: H04L 2012/5651 Priority, marking, classes
• CPC Class Codes: H04L 45/10 Routing in connection-oriented networks, e.g. X.25 or ATM
• CPC Class Codes: H04L 47/10 Flow control; Congestion control
• CPC Class Codes: H04L 47/2491 Mapping quality of service [QoS] requirements between different networks

Abstract

In a virtual private network (VPN) established over an ATM-over-Internet, a connection setup table has multiple entries, each including a pair of IP addresses identifying source and destination nodes of the VPN, a QoS parameter, an ATM address field, and a virtual connection (VC) field. When a VPN packet is received, a corresponding entry of the table that contains IP addresses of the packet is detected and the table entry is searched for contents of said ATM address and VC fields. If the ATM address field contains no data, an IP header is appended to the VPN packet to formulate an address resolution request packet, which is forwarded to the Internet. An address resolution reply packet is received and a destination ATM address contained therein is stored into the ATM address field. If the ATM address field contains a destination ATM address and the VC field contains no data, a virtual connection is established to the destination ATM address according to the QoS parameter of the corresponding table entry and the connection identifier of the established connection is stored in the VC field. If the VC field contains a connection identifier, the VPN packet is sent over a virtual connection according to the connection identifier.

Claims

1. A router for building a virtual private network (VPN) through an ATM (asynchronous transfer mode) network configured as part of a public switched packet network, the router comprising:

a connection setup table having a plurality of entries, each entry including a pair of internet protocol (IP) addresses respectively identifying source and destination nodes of the virtual private network, a quality-of-service parameter, an ATM address field, and a virtual connection (VC) field; and

control circuitry for (a) receiving a VPN packet and detecting a corresponding entry in said table that contains IP addresses of the packet and making a search through the corresponding table entry for contents of the ATM address field and the VC field thereof, (b) appending an IP header to the VPN packet, if said ATM address field contains no data, to formulate an address resolution request packet and forwarding the packet to said public switched packet network, (c) receiving an address resolution reply packet therefrom and storing a destination ATM address contained in the reply packet into said ATM address field, and (d) if said ATM address field contains a destination ATM address and said VC field contains no data, establishing a virtual connection to the destination ATM address according to the quality-of-service parameter of the corresponding table entry and storing a connection identifier identifying the established virtual connection in said VC field, and if said VC field contains a connection identifier, forwarding said VPN packet over an established virtual connection identified by the connection identifier.

2. A router as claimed in claim 1, wherein said control circuitry is arranged to append an IP header to said VPN packet to formulate an IP packet if said corresponding entry is not detected in said table and forward the IP packet to said public switched packet network.

3. A router as claimed in claim 1, wherein each entry of said connection setup table includes an on/off field, further comprising:

a time table having a plurality of entries respectively corresponding to the entries of said connection setup table for mapping time schedule data; and

triggering circuitry for monitoring the time schedule data of each entry of the time table and storing an indication in the on/off field of each entry of the connection setup table according to the monitored data of the corresponding entry of the time table,

wherein said control circuitry is arranged to enable or disable contents of each entry of the connection setup table depending on the indication stored in the on/off field of the entry.

4. A router as claimed in claim 3, wherein said control circuitry is arranged to receive a time schedule signal and alter said time table according to the received time schedule signal.

5. A method of building a virtual private network (VPN) through an ATM (asynchronous transfer mode) network configured as part of a public switched packet network, said virtual private network including a connection setup table having a plurality of entries, each entry including a pair of internet protocol (IP) addresses respectively identifying source and destination nodes of the virtual private network, a quality-of-service parameter, an ATM address field, and a virtual connection (VC) field, the method comprising the steps of:

a) receiving a VPN packet and detecting a corresponding entry in said table including IP addresses of the packet and making a search through the corresponding table entry for contents of said ATM address and VC fields;

b) if said ATM address field contains no data, appending an IP header to the VPN packet to formulate an address resolution request packet and forwarding the packet to said public switched packet network;

c) receiving an address resolution reply packet and storing a destination ATM address contained therein into said ATM address field; and

d) if said ATM address field contains a destination ATM address and said VC field contains no data, establishing a virtual connection to the destination ATM address according to the quality-of-service parameter of the corresponding table entry and storing a connection identifier identifying the established virtual connection in said VC field, and if said VC field contains a connection identifier, forwarding said VPN packet over a virtual connection according to the connection identifier.

6. A method as claimed in claim 5, wherein the step (a) comprises the steps of appending an IP header to said VPN packet to formulate an IP packet if said corresponding entry is not detected in said connection setup table and forwarding the IP packet to said public switched packet network.

7. A method as claimed in claim 5, wherein each entry of said connection setup table includes an on/off field, and wherein said virtual private network further includes a time table having a plurality of entries respectively corresponding to the entries of said connection setup table for mapping time schedule data, further comprising the steps of:

monitoring the time schedule data of each entry of the time table and storing an indication in the on/off field of each entry of the connection setup table according to the monitored data of the corresponding entry of the time table; and

enabling or disabling contents of each entry of the connection setup table depending on the indication stored in the on/off field of the entry.

8. A method as claimed in claim 7, further comprising the steps of receiving a time schedule signal and altering said time table according to the received time schedule signal.