VPN router and VPN identification method by using logical channel identifiers

• US 7,054,319 B2
• Filed: 03/20/2001
• Issued: 05/30/2006
• Est. Priority Date: 06/02/2000
• Status: Expired due to Term

• Current Assignee: Alaxala Networks Corporation (Fortinet Inc.)
• Original Assignee: Hitachi, Ltd.
• Inventors: Sakamoto, Kenichi, Sugai, Kazuo, Akahane, Shinichi
• Primary Examiner(s): Chin, Wellington
• Assistant Examiner(s): HO, CHUONG T
• Application Number:
  US09/811,440
• Publication Number:
  US 20010050914A1
• Time in Patent Office: 1,897 Days
• Field of Search: 370/401, 370/392, 370/389, 370/469, 370/395.52, 370/466, 370/409, 370/410, 370/395.1, 370/394, 370/395.53, 370/356, 370/357, 370/355, 370/390, 370/395.31, 370/395.32, 370/467, 370/242, 709/249, 709/203, 709/238, 709/239, 709/245, 709/242
• US Class Current: 370/395.53
• CPC Class Codes: H04L 12/4608 LAN interconnection over ATM networks
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 2012/5621 Virtual private network [VPN]; Private-network - network-interface (P-NNI)
• CPC Class Codes: H04L 2012/5665 Interaction of ATM with other protocols
• CPC Class Codes: H04L 2012/5669 Multiprotocol over ATM [MPOA]
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing

Abstract

A VPN edge router with the ability of identifying VPNs by using the identifiers of logical channels multiplexed on a single input line.

Claims

1. A router connected a core network, a first local area network (LAN) belonging to a first virtual private network (VPN), a second LAN belonging to a second VPN, a third LAN belonging to a third VPN and a fourth LAN belonging to a fourth VPN, comprising:

a memory;

a first interface for accommodating a first line connected to the first LAN and the second LAN, and for receiving multiplexed IP packets from the first and the second LANs via the first line, the IP packets from the first and the second LANs being encapsulated by a first protocol;

a second interface for connected to the core network;

means for identifying which of the first VPN and the second VPN to which an IP packet received at the first interface belongs by header information of the first protocol; and

means for registering, in the memory, header information of the first protocol as a VPN identifier for identifying which of the first VPN and the second VPN to which an IP packet received from the first line belongs,

wherein IP packets from the third and the fourth LANs being encapsulated by a second protocol different from the first protocol.

2. A router according to claim 1, further comprising:

a first routing table for the first VPN, the first routing table mapping each IP addresses used in the first VPN to each of capsule headers used in the core network;

a second routing table for the second VPN, the second routing table mapping each IP addresses used in the second VPN to each of capsule headers used in the core network; and

a processing unit for adding an capsule header used in the core network to an IP packet belonging to the first VPN by referring the first routing table.

3. A router according to claim 1, wherein the first protocol is an asynchronous transfer mode protocol and the header information is expressed in combined VPI and VCI values;

and

wherein the second protocol is a Point-to-point Protocol (PPP) over a Synchronous Optical Network (SONET).

4. A method of setting up a router connected to a core network, a first local area network (LAN) belonging to a first virtual private network (VPN), a second LAN belonging to a second VPN, a third LAN belonging to a third VPN and a fourth LAN belonging to a fourth VPN, wherein the router receives multiplexed IP packets from the first and the second LANs via a first line, the IP packets from the first and the second LANs being encapsulated by a firt protocol, receives IP packets from the third LAN via a second line and IP packets form the fourth LAN via a third line, the IP packets from the third and the fourth LANs being encapsulated by a second protocol different from the first protocol and has a memory, the method comprising the steps of:

registering header information of the first protocol as a VPN identifier for identifying which of the first VPN and the second VPN to which an IP packet received from the first line belongs to the memory;

registering physical interface numbers assigned to interface between the router and the second line and interface between the router and the third line as a VPN identifier for identifying which of the third VPN and the forth VPN to which an IP packet received either the second line or the third line belongs.

5. A method of setting up a router according to claim 4, further comprising the step registering to the memory:

a first routing table for the first VPN, the first routing table mapping each IP addresses used in the first VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the first line having the corresponding IP address;

a second routing table for the second VPN, the second routing table mapping each IP addresses used in the second VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the first line having the corresponding IP address;

a third routing table for the third VPN, the third routing table mapping each IP addresses used in the third VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the second line having the corresponding IP address;

a fourth routing table for the fourth VPN, the fourth routing table mapping each IP addresses used in the fourth VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the third line having the corresponding IP address.

6. A method of setting up a router according to claim 4, wherein the first protocol is an asynchronous transfer mode protocol and the header information is expressed in combined VPI and VCI;

and

wherein the second protocol is a Point-to-point Protocol (PPP) over a Synchronous Optical Network (SONET).

7. A method of setting up a router connected to a core network, a first local area network (LAN) belonging to a first virtual private network (VPN), a second LAN belonging to a second VPN, a third LAN belonging to a third VPN and a fourth LAN belonging to a fourth VPN, wherein the router receives multiplexed IP packets from the first and the second LANs via a first line, the IP packets from the first and the second LANs being encapsulated by a first protocol, the IP packets from the third and the fourth LANs being encapsulated by a second protocol different from the first protocol and has a memory, the method comprising the step of:

registering, in the memory, header information of the first protocol as a VPN identifier for identifying which of the first VPN and the second VPN to which an IP packet received from the first line belongs.

8. A method of setting up a router according to claim 7, further comprising the steps of:

registering, to the memory, a first routing table for the first VPN, the first routing table mapping each IP addresses used in the first VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the first line having the corresponding IP address; and

registering, to the memory, a second routing table for the second VPN, the second routing table mapping each IP addresses used in the second VPN to each of capsule headers used in the core network, each of the capsule headers is adding to an IP packet from the first line having the corresponding IP address.

9. A method of setting up a router according to claim 7, wherein the first protocol is an Asynchronous Transfer Mode (ATM) protocol and the header information is expressed in combined VPI and VCI;

and

wherein the second protocol is a Point-to-point Protocol (PPP) over a Synchronous Optical Network (SONET).

10. A router connected to a core network, a first Local Area Network (LAN) belonging to a first Virtual Private Network (VPN), a second LAN belonging to a second VPN, a third LAN belonging to a third VPN, and a fourth LAN belonging to a fourth VPN, comprising:

means for receiving IP packets from the first and the second LANs being encapsulated by a first protocol;

a first interface connected to the core network;

a second interface for accommodating a first line connected to the third LAN and a second line connected to the fourth LAN, and for receiving IP packets from the third LAN via the first line and the IP packets from the fourth LAN via the second line, the IP packets from the third and the fourth LANs being encapsulated by a second protocol different from the first protocol;

means for identifying which of the third VPN and the fourth VPN to which an IP packet received at the second interface belongs by physical interface numbers assigned to interface between the second interface and the first line and interface between the second interface and the second line; and

means for registering physical interface numbers assigned to interface between the second interface and the first line and interface between the second interface and the second line as a VPN identifier for identifying which of the third VPN and the fourth VPN to which an IP packet received either the first line or the second line belongs.

11. A router according to claim 10, further comprising:

a first routing table for the third VPN, the first routing table mapping each IP addresses used in the third VPN to each of capsule headers used in the core network;

a second routing table for the fourth VPN, the second routing table mapping each IP addresses used in the fourth VPN to each of capsule headers used in the core network; and

a processing unit for adding a capsule header used in the core network to an IP packet belonging to the third VPN by referring the first routing table and adding a capsule header used in the core network to an IP packet belonging to the fourth VPN by referring the second routing table.

12. A router according to claim 10, wherein the first protocol is an Asynchronous Transfer Mode (ATM) protocol and the header information is expressed in combined VPI and VCI values, and

wherein the second protocol is a Point-to-point Protocol (PPP) over a Synchronous Optical Network (SONET).

13. A method of setting up a router connected to a core network, a first Local Area Network (LAN) belonging to a first Virtual Private Network (VPN), a second LAN belonging to a second VPN, a third LAN belonging to a third VPN and a fourth LAN belonging to a fourth VPN, said router having a memory, said method comprising the steps of:

receiving IP packets from the first and the second LANs being encapsulated by a first protocol, and receiving IP packets from the third LAN via a first line and IP packets from the fourth LAN via a second line, the IP packets from the third and the fourth LANs being encapsulated by a second protocol different from the first protocol; and

registering physical interface numbers assigned to interface between the router and the first line and interface between the router and the second line as a VPN identifier for identifying which of the third VPN and the fourth VPN to which an IP packet received either the first line or the second line belongs.

14. A method of setting up a router according to claim 13, further comprising the steps:

registering, to the memory, a first routing table for the third VPN, the third routing table mapping each IP addresses used in the third VPN to each of capsule headers used in the core network, each of the capsule header is adding to an IP packet from the first lien having the corresponding IP address; and

registering, to the memory, a second routing table for the fourth VPN, the second routing table mapping each IP addresses used in the fourth VPN to each of capsule header sued in the core network, each of the capsule headers is adding to an IP packet from the second line having the corresponding IP address.

15. A method of setting up a router according to claim 13, wherein the first protocol is an ATM protocol and the header information is expressed in combined VPI and VCI;

and

wherein the second protocol is a Point-to-point Protocol (PPP) over a Synchronous Optical Network (SONET).