Method and system for providing network access to PPP clients

• US 6,985,935 B1
• Filed: 12/20/2000
• Issued: 01/10/2006
• Est. Priority Date: 12/20/2000
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Yager, Charles T., Zhang, Shujin
• Primary Examiner(s): Etienne, Ario
• Assistant Examiner(s): JACOBS, LASHONDA T
• Application Number:
  US09/745,293
• Time in Patent Office: 1,847 Days
• Field of Search: 709/203, 709223-229, 370400-401, 370/410, 370/420, 370/422, 370462-463
• US Class Current: 709/219
• CPC Class Codes: H04L 12/2856 Access arrangements, e.g. Internet access asynchronous transfer mode networks H04L12/5601; broadband local area networks H04L12/2801; optical access or distribution networks H04Q11/0067; access to open networks H04L12/5691; digital subscriber line end-user equipment and bit-level processing of data on a PSTN-based network H04M11/00; home network gateways H04L12/2834; wireless access networks H04W
• CPC Class Codes: H04L 12/2859 Point-to-point connection between the data network and the subscribers encapsulation H04L12/4633; virtual LANs H04L12/4641; routing of packets H04L45/00
• CPC Class Codes: H04L 12/2872 Termination of subscriber connections
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/168 specially adapted for link layer protocols, e.g. asynchronous transfer mode [ATM], synchronous optical network [SONET] or point-to-point protocol [PPP]
• CPC Class Codes: H04L 69/324 in the data link layer [OSI layer 2], e.g. HDLC

Abstract

A system provides computer network access to PPP clients. The system includes (a) receiving a PPP session creation request from a client, the PPP session creation request including a control protocol frame encapsulated therein, (b) obtaining user domain information associated with the PPP session creation request, (c) setting up a Layer 2 tunnel according to a parameter contained in the control protocol frame, (d) creating an ingress PPP object associated with an incoming PPP session, a host object associated with the client, and an egress PPP object associated with the Layer 2 tunnel, (e) creating an egress IP object based upon obtained user domain information, the egress IP object associated with IP-based forwarding, (f) linking the ingress PPP object, the host object, and the egress PPP object, thereby forwarding data packets from a PPP session with the client over the Layer 2 tunnel, and (g) linking the host object and the egress IP object, thereby forwarding IP frames received from the client over a link other than the Layer 2 tunnel.

Claims

1. A method for providing computer network access, comprising:

receiving a PPP session creation request from a client, said PPP session creation request including a control protocol frame encapsulated therein;

obtaining user domain information associated with said PPP session creation request;

setting up a Layer 2 tunnel for said client according to a parameter contained in said control protocol frame;

creating an ingress PPP object associated with an incoming PPP session, a host object associated with said client, and an egress PPP object associated with said Layer 2 tunnel;

creating an egress IP object based upon obtained user domain information, said egress IP object associated with IP-based forwarding;

linking said ingress PPP object, said host object, and said egress PPP object, thereby forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and

linking said host object and said egress IP object, thereby forwarding IP frames received from said client over a link other than said Layer 2 tunnel.

2. The method according to claim 1, wherein said setting up includes forwarding control protocol negotiations.

3. The method according to claim 1, further including:

receiving an IP address through said Layer 2 tunnel, said IP address having been assigned to said client; and

transferring said IP address to said client.

4. The method according to claim 1, wherein said user domain information is obtained from said PPP session creation request.

5. The method according to claim 1, wherein said user domain information is obtained using a user profile.

6. The method according to claim 1, wherein said user domain information is obtained from user identification information associated with a physical connection of said PPP session creation request.

7. The method according to claim 6, wherein said user domain information is obtained from a line number used by said client for transmitting said PPP session creation request.

8. The method according to claim 1, wherein said user domain information is obtained from user identification information associated with a physical location of said client.

9. The method according to claim 1, further comprising:

maintaining a forwarding information base for said host object, said forwarding information base containing at least one association between a network address and either said ingress PPP object or said egress PPP object.

10. The method according to claim 9, wherein said forwarding information base includes a default link to said egress PPP object.

11. The method according to claim 9, wherein said forwarding information base is stored in the form of a hash table.

12. The method according to claim 1, wherein said creating an ingress PPP object includes creating an access PPP object associated with a PPP connection to said client via a first interface.

13. The method according to claim 12, wherein said creating an egress PPP object includes:

creating a first connection object containing a range of IP addresses;

creating an aggregation PPP object associated with outgoing PPP frames; and

creating a tunnel object associated with Layer 2 tunneling through a second interface.

14. The method according to claim 13, wherein said first connection object includes a list of network addresses.

15. The method according to claim 13, wherein said creating an egress IP object includes:

creating a second connection object containing a range of IP addresses; and

creating a service object associated with IP frame forwarding through a third interface.

16. The method according to claim 15, wherein said second connection object includes a list of network addresses.

17. The method according to claim 15, further comprising maintaining a forwarding information base for said host object, said forwarding information base containing:

an association between said access PPP object and an address of said client; and

a default link to said aggregation PPP object.

18. The method according to claim 17, wherein

said creating said first connection object includes adding into said forwarding information base an association between said aggregation PPP object and a corresponding network address, and

said creating said second connection object includes adding into said forwarding information base an association between said service object and a corresponding network address.

19. A network device for providing computer network access, said network device comprising:

a first interface for receiving a PPP session creation request from a client, said PPP session creation request including a control protocol frame encapsulated therein;

a second interface for forwarding data packets from a PPP session over a Layer 2 tunnel;

a third interface for forwarding IP frames over a link other than said Layer 2 tunnel;

a memory; and

a processor coupled with said first interface, said second interface, said third interfaces, and said memory, said processor including;

a domain information determiner for obtaining user domain information associated with said PPP session creation request;

an object generator for creating objects in said memory, said object generator creating an ingress PPP object associated with an incoming PPP session, a host object associated with said client, an egress PPP object associated with Layer 2 tunneling through said second interface, and an egress IP object associated with IP-based forwarding through said third interface, said egress IP object being created based upon obtained user domain information;

a PPP session forwarder for setting up a Layer 2 tunnel for said client according to a parameter contained in said control protocol frame, and for linking said ingress PPP object, said host object, and said egress PPP object, thereby forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and

an IP frame forwarder for linking said host object and said egress IP object, thereby forwarding IP frames received from said client over a link other than said Layer 2 tunnel.

20. The network device according to claim 19, wherein said ingress PPP object includes an access PPP object associated with a PPP connection with said client via said first interface.

21. The network device according to claim 19, wherein said egress PPP object includes:

a PPP session connection object containing a range of IP addresses;

an aggregation PPP object associated with outgoing PPP frames; and

a tunnel object associated with Layer 2 tunneling through said second interface.

22. The apparatus according to claim 19, wherein said egress IP object includes:

an IP frame connection object containing a range of IP addresses; and

a service object associated with IP frame forwarding through said third interface.

23. The network device according to claim 19, wherein said PPP session forwarder forwards control protocol negotiations when setting up said Layer 2 tunnel.

24. The network device according to claim 19, wherein said PPP session forwarder includes:

an IP address forwarder for receiving an IP address through said Layer 2 tunnel, said IP address having been assigned to said client, and for transferring said IP address to said client.

25. The network device according to claim 19, wherein said domain information determiner obtains said user domain information from said PPP session creation request.

26. The network device according to claim 19, wherein said domain information determiner obtains said user domain information using a service profile.

27. The network device according to claim 19, wherein said domain information determiner obtains said user domain information from user identification information associated with a physical connection of said PPP session creation request.

28. The network device according to claim 27, wherein said domain information determiner obtains said user domain information from a line number used by said client for transmitting said PPP session creation request.

29. The network device according to claim 19, wherein said domain information determiner obtains said user domain information from user identification information associated with a physical location of said client.

30. The network device according to claim 19, further comprising:

a forwarding information base provided for said host object, said forwarding information base containing at least one association between a network address and either said ingress PPP object or said egress PPP object.

31. The network device according to claim 30, wherein said forwarding information base includes a default link to said egress PPP object.

32. The network device according to claim 30, wherein said forwarding information base is stored in the form of a hash table.

33. An apparatus for providing computer network access, said apparatus comprising:

a PPP session receiving interface;

a PPP session Layer 2 tunneling interface;

an IP frame forwarding interface;

a memory, said memory containing;

an ingress PPP object associated with said PPP session receiving interface;

a host object associated with a client requesting network access;

an egress PPP object associated with said PPP session Layer 2 tunneling interface; and

an egress IP object associated with said IP frame forwarding interface; and

a processor coupled with said PPP session receiving interface, said PPP session Layer 2 tunneling interface, said IP frame forwarding interface, and said memory, said processor including;

a user domain information determiner;

an object generator responsive to said user domain information determiner;

a PPP session forwarder linking through said ingress PPP object, said host object, and said egress PPP object; and

an IP frame forwarder linking through said host object and said egress IP object.

34. An apparatus according to claim 33, further comprising:

a forwarding information base associated with said host object, said forwarding information base containing at least one association between a network address and either said ingress PPP object or said egress PPP object.

35. The apparatus according to claim 34, wherein said forwarding information base is stored in the form of a hash table in said memory.

36. The apparatus according to claim 34, wherein said forwarding information base includes a default link to said egress PPP object.

37. The apparatus according to claim 36, wherein said forwarding information base further includes an association between said egress IP object and a corresponding network address.

38. The apparatus according to claim 33, wherein said ingress PPP object includes an access PPP object associated with a PPP connection to said client via said PPP session receiving interface.

39. The apparatus according to claim 33, wherein said egress PPP object includes:

a PPP session connection object containing a range of IP addresses;

an aggregation PPP object associated with outgoing PPP frames; and

a tunnel object associated with Layer 2 tunneling through said PPP session Layer 2 tunneling interface.

40. The apparatus according to claim 33, wherein said egress IP object includes:

an IP frame connection object containing a second range of IP addresses; and

a service object associated with IP frame forwarding through said IP frame forwarding interface.

41. A system for providing computer network access, comprising:

means for receiving a PPP session creation request from a client, said PPP session creation request including a control protocol frame encapsulated therein;

means for obtaining user domain information associated with said PPP session creation request;

means for setting up a Layer 2 tunnel for said client according to a parameter contained in said control protocol frame;

means for creating an ingress PPP object associated with an incoming PPP session, a host object associated with said client, an egress PPP object associated with said Layer 2 tunnel;

means for creating an egress IP object based upon obtained user domain information, said egress IP object associated with IP-based forwarding;

means for linking said ingress PPP object, said host object, and said egress PPP object, thereby forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and

means for linking said host object and said egress IP object, thereby forwarding IP frames received from said client over a link other than said Layer 2 tunnel.

42. The system according to claim 41, wherein said means for setting up includes means for forwarding control protocol negotiations.

43. The system according to claim 41, further including:

means for receiving an IP address through said Layer 2 tunnel, said IP address having been assigned to said client; and

means for transferring said IP address to said client.

44. The system according to claim 41, wherein said user domain information is obtained from said PPP session creation request.

45. The system according to claim 41, wherein said user domain information is obtained using a user profile.

46. The system according to claim 41, wherein said user domain information is obtained from user identification information associated with a physical connection of said PPP session creation request.

47. The system according to claim 46, wherein said user domain information is obtained from a line number used by said client for transmitting said PPP session creation request.

48. The system according to claim 41, wherein said user domain information is obtained from user identification information associated with a physical location of said client.

49. The system according to claim 41, further comprising:

means for maintaining a forwarding information base for said host object, said forwarding information base containing at least one association between a network address and either said ingress PPP object or said egress PPP object.

50. The system according to claim 49, wherein said forwarding information base includes a default link to said egress PPP object.

51. The system according to claim 49, wherein said forwarding information base is stored in the form of a hash table.

52. The system according to claim 41, wherein said ingress PPP object includes an access PPP object associated with a PPP connection to said client via a first interface.

53. The system according to claim 52, wherein said egress PPP object includes:

a first connection object containing a range of IP addresses;

an aggregation PPP object associated with outgoing PPP frames; and

a tunnel object associated with Layer 2 tunneling through a second interface.

54. The system according to claim 53, wherein said first connection object includes a list of network addresses.

55. The system according to claim 53, wherein said egress IP object includes:

a second connection object containing a range of IP addresses; and

a service object associated with IP frame forwarding through a third interface.

56. The system according to claim 55, wherein said second connection object includes a list of network addresses.

57. The system according to claim 55, further comprising means for maintaining a forwarding information base for said host object, said forwarding information base containing:

an association between said access PPP object and an address of said client; and

a default link to said aggregation PPP object.

58. The system according to claim 57, wherein

said means for creating said first connection object includes means for adding into said forwarding information base an association between said aggregation PPP object and a corresponding network address, and

said means for creating said second connection object includes means for adding into said forwarding information base an association between said service object and a corresponding network address.

59. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a system for providing computer network access, the system including:

receiving a PPP session creation request from a client, said PPP session creation request including a control protocol frame encapsulated therein;

obtaining user domain information associated with said PPP session creation request;

setting up a Layer 2 tunnel for said client according to a parameter contained in said control protocol frame;

creating an ingress PPP object associated with an incoming PPP session, a host object associated with said client, and an egress PPP object associated with said Layer 2 tunnel;

creating an egress IP object based upon obtained user domain information, said egress IP object associated with IP-based forwarding;

linking said ingress PPP object, said host object, and said egress PPP object, thereby forwarding data packets from a PPP session with said client over said Layer 2 tunnel; and

linking said host object and said egress IP object, thereby forwarding IP frames received from said client over a link other than said Layer 2 tunnel.