Virtual dial-up protocol for network communication

• US 6,754,712 B1
• Filed: 10/02/2002
• Issued: 06/22/2004
• Est. Priority Date: 07/11/2001
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Valencia, Andrew J.
• Primary Examiner(s): Barot, Bharat
• Application Number:
  US10/264,037
• Time in Patent Office: 629 Days
• Field of Search: 709/200-203, 709/227-230, 709/250, 713/151-155, 713/200-201, 370/401
• US Class Current: 709/227
• CPC Class Codes: H04L 12/4633 Interconnection of networks using encapsulation techniques, e.g. tunneling

Abstract

A layer two forwarding protocol (L2F) provides virtual direct dial-up service into private networks through public internet service providers. An authorized remote client appears as a direct dial-up client to the home gateway, even through the client is accessing the home gateway remotely through the ISP. The new forwarding protocol allows the remote client to conduct point-to-point link protocols, such as point-to-point protocol (PPP) and serial line interface protocol (SLIP) directly with the local network home gateway. The network access server changes from a routing mode where a communication protocol is conducted with the client to a switching mode where the POP simply sends data from one port to a tunnel. The tunnel then transmits the data to another port, regardless of the header information on transmitted data packets. The remote client can then be managed through databases controlled by the local network and gain access to resources not typically accessible through the internet. The layer two forwarding protocol conducts an independent authorization session to prevent unauthorized access to the private network and provides point-to-point protocol transport over the internet independently of internet transport protocols.

Claims

1. A system for connecting a remote endpoint to a local network, comprising:

means for connecting to a network access server;

means for sending authorization data that authorizes the network access server to establish a virtual private connection with a local network; and

means for establishing a virtual point-to-point connection with the local network over the virtual private connection through the network access server.

2. A system according to claim 1 including:

means for connecting to the network access server using a point-to-point protocol connection; and

means for projecting the point-to-point protocol connection over the virtual private connection.

3. A system according to claim 1 including means for establishing the virtual private connection at a data link layer.

4. A system according to claim 1 including:

means for sending a keyed random number through the network access server to the local network; and

means for projecting the point-to-point connection to the local network when the keyed random number is authenticated by the local network.

5. A system according to claim 4 including means for using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for generating the keyed random number.

6. A computer readable medium for connecting a remote endpoint to a local network, the computer readable medium comprising:

connecting to a network access server;

sending authorization data that authorizes the network access server to establish a virtual private connection with a local network; and

establishing a virtual point-to-point connection with the local network over the virtual private connection through the network access server.

7. A computer readable medium according to claim 6, the computer readable medium including:

connecting to the network access server using a point-to-point protocol connection; and

projecting the point-to-point protocol connection over the virtual private connection.

8. A computer readable medium according to claim 6, the computer readable medium including establishing the virtual private connection at a data link layer.

9. A computer readable medium according to claim 6, the computer readable medium including:

sending a keyed random number through the network access server to the local network; and

projecting the point-to-point connection to the local network when the keyed random number is authenticated by the local network.

10. A computer readable medium according to claim 9, the computer readable medium including using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for generating the keyed random number.

11. A method for connecting a remote endpoint to a local network, comprising:

connecting to a network access server;

sending authorization data that authorizes the network access server to establish a virtual private connection with a local network; and

establishing a virtual point-to-point connection with the local network over the virtual private connection through the network access server.

12. A method according to claim 11 including:

connecting to the network access server using a point-to-point protocol connection; and

projecting the point-to-point protocol connection over the virtual private connection.

13. A method according to claim 11 including

establishing the virtual private connection at a data link layer.

14. A method according to claim 11 including:

sending a keyed random number through the network access server to the local network; and

projecting the point-to-point connection to the local network when the keyed random number is authenticated by the local network.

15. A method according to claim 14 including using a Challenge Authentication Protocol (CHAP) or Password Authentication Protocol (PAP) for generating the keyed random number.

16. A system, comprising:

a gateway configured to establish a virtual private connection that enables a remote client to conduct a point-to-point session with a local network through a network processing device that resides outside of the local network.

17. A system according to claim 16 wherein the virtual private connection is established at a data link layer of the Open Systems Interconnect (OSI) model.

18. A system according to claim 16 wherein the gateway establishes one end of a tunnel that is used for transporting the point to point session.

19. A system according to claim 16 wherein the gateway receives a dial-up connection from the remote client through the virtual private connection.

20. A processing device, comprising:

a first interface conducting a point-to-point session with a remote client;

a second interface connected to a local network; and

a processor configured to establish a virtual private point-to-point connection between the remote client and the local network.

21. A processing device according to claim 20 wherein the processor attaches a header to data in the point-to-point session that is used by the virtual private point-to-point connection.

22. A processing device according to claim 20 wherein the processor establishes a tunnel through an Internet infrastructure to the local network and transmits the point-to-point session through the tunnel.

23. A processing device according to claim 20 wherein the first interface establishes a dial-up connection with the remote client and the second interface establishes an Internet connection with the local network.

24. A processing device according to claim 21 wherein the virtual private point-to-point connection forwards the point-to-point session over an Internet infrastructure using a data link layer protocol.

25. A processing device according to claim 21 wherein the processor receives a keyed random number from the remote client and forwards the keyed random number to the local network, the processor projecting the point-to-point session to the local network when the keyed random number is authenticated by the local network.

26. A processing device according to claim 25 wherein the processor establishes a tunnel with the local network for forwarding the point-to-point session when the keyed random number is authenticated.

27. A processing device according to claim 21 wherein the processor strips some physical media encoding from frames received in the point-to-point session, encapsulates the stripped frames with a data link layer forwarding protocol and forwards the encapsulated frames to the local network.

28. A processing device according to claim 21 wherein the processor conducts an accounting for the virtual private point-to-point network connection.