Multiple network connections from a single PPP link with network address translation

• US 7,443,865 B1
• Filed: 04/04/2002
• Issued: 10/28/2008
• Est. Priority Date: 04/04/2002
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Chu, Jie, Lou, Shuxian, Dos Santos, Maria Alice, Zhang, Shujin, Jin, Jane Jiaying
• Primary Examiner(s): Jung; Min
• Application Number:
  US10/117,801
• Time in Patent Office: 2,399 Days
• Field of Search: 370/401, 370/402, 370/352, 370/354, 709/227, 709/217, 709/218
• US Class Current: 370/401
• CPC Class Codes: H04L 12/66 Arrangements for connecting between networks having differing types of switching systems, e.g. gateways

Abstract

Multiple simultaneous network connections from a single PPP connection may be accomplished by utilizing a gateway in the following manner. A first network connection is established between the gateway and a first network. A first real network address for the user is then received, the first real network address assigned by the first network. Then, the gateway may establish a network session between the gateway and a second network and receive a second real network address for the user, the second real network address assigned by the second network. A virtual network address may be assigned to the user for network address translation purposes. Additional network connections may be added in a similar manner. Network address translation is then performed on packets traveling between the user and any of the network sessions. This allows each of the simultaneous network connections to gain the benefits of network address translation.

Claims

1. A method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network, the examining further comprising;

extracting a destination network address from the packet;

looking up the destination network address in a routing table;

determining that the destination is the first or second network based upon the listing for the destination network address in the routing table; and

determining that the destination is the first or second network based on a default setting if the destination network address is not listed in the routing table;

performing network address translation on the packet generating a translated packet; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

2. A method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network;

performing network address translation on the packet generating a translated packet, the performing network address translation comprising applying a network address translation mapping scheme to source network address; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

3. The method of claim 2, further including:

receiving a second packet, the second packet sent from the first network or the second network;

performing network address translation on the second packet generating a second translated packet; and

forwarding the second translated packet to the user.

4. A method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network;

performing network address translation on the packet generating a translated packet, the performing network address translation comprising looking up a source network address in a network address translation table; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

5. A network gateway comprising:

a packet receiver adapted to receive a packet sent by a user simultaneously connected to a first network and a second network;

a packet examiner adapted to examine the packet to determine if its destination is the first network or the second network, the packet examiner further comprising;

a network address extractor adapted to extract a destination network address from the packet;

a routing table searcher adapted to look up the destination network address in a routing table;

a network determiner adapted to determine that the destination is the first network or the second network based upon the listing for the destination network address in the routing table; and

the network determiner adapted to further determine that the destination is the first network or the second network based on a default setting if the destination network address is not listed in the routing table;

a network address translator adapted to perform network address translation on the packet generating a translated packet; and

a packet forwarder adapted to forward the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

6. A network gateway comprising:

a packet receiver adapted to receive a packet sent by the user simultaneously connected to a first network and a second network;

a packet examiner adapted to examine the packet to determine if its destination is the first network or the second network;

a network address translator adapted to perform network address translation on the packet generating a translated packet, the network address translator further adapted to apply a network address translation mapping scheme to a source network address; and

a packet forwarder adapted to forward the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

7. The network gateway of claim 6, wherein the packet receiver is further adapted to receive a second packet, the second packet sent from the first network or the second network, the network address translator further adapted to perform network address translation on the second packet generating a second translated packet, and the packet forwarder is further adapted to forward the second translated packet to the user.

8. A network gateway comprising:

a packet receiver adapted to receive a packet sent by a user simultaneously connected to a first network and a second network;

a packet examiner adapted to examine the packet to determine if its destination is the first network or the second network;

a network address translator adapted to perform network address translation on the packet generating a translated packet, the network address translator further adapted to look up a source network address in a network address translation table; and

a packet forwarder adapted to forward the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

9. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network, the examining further comprising;

extracting a destination network address from the packet;

looking up the destination network address in a routing table;

determining that the destination is the first or second network based upon the listing for the destination network address in the routing table; and

determining that the destination is the first or second network based on a default setting if the destination network address is not listed in the routing table;

performing network address translation on the packet generating a translated packet; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

10. A program storage device readably by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network;

performing network address translation on the packet generating a translated packet, the performing network address translation comprising applying a network address translation mapping scheme to a source network address; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

11. The program storage device of claim 10, wherein the method further includes:

receiving a second packet, the second packet sent from the first network or the second network;

performing network address translation on the second packet generating a second translated packet; and

forwarding the second translated packet to the user.

12. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the method comprising:

receiving a packet sent from the user;

examining the packet to determine if its destination is the first network or the second network;

performing network address translation on the packet generating a translated packet, the performing network address translation comprising looking up a source network address in a network address translation table; and

forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

13. A method for communications routing in a system in which a user is connected to a first network and a second network, the method comprising:

receiving a packet sent from the first network or the second network, the packet having a destination address matching a virtual network address for the user stored in a network address translation table;

retrieving a real network address corresponding to the user and to the network from which the packet is received; and

forwarding the packet to the real network address.

14. The method of claim 13, wherein the network address translation table contains an entry corresponding to the virtual network address and the first network, the entry having a first real network address.

15. The method of claim 14 wherein the network address translation table further contains an entry corresponding to the virtual network address and the second network, the entry having a second real network address.

16. The method of claim 13, wherein the virtual network address was assigned using a network address translation allocation scheme.

17. The method of claim 13, wherein the user is connected by the first network through a first tunneling session and the user is connected to the second network through a second tunneling session.

18. The method of claim 17, wherein the first tunneling session and the second tunneling session are L2TP sessions.

19. A network gateway, comprising:

a packet receiver adapted to receive a packet sent from a first network or a second network, the packet having a destination address matching a virtual network address for a user stored in a network address translation table;

a network address translator adapted to retrieve a real network address corresponding to the user and to the network from which the packet is received; and

a packet forwarder adapted to forward the packet to the real network address.

20. The network gateway of claim 19, wherein the network address translation table contains an entry corresponding to the virtual network address and the first network, the entry having a first real network address.

21. The network gateway of claim 20, wherein the network address translation table further contains an entry corresponding to the virtual network address and the second network, the entry having a second real network address.

22. The network gateway of claim 19, wherein the virtual network address was assigned using a network address translation allocation scheme.

23. The network gateway of claim 19, wherein the user is connected to the first network through a first tunneling session and the user is connected to the second network through a second tunneling session.

24. The network gateway of claim 23, wherein the first tunneling session and the second tunneling session are L2TP sessions.

25. An apparatus for communications routing in a system in which a user is connected to a first network and a second network, the apparatus comprising:

means for receiving a packet sent from the first network or the second network, the packet having a destination address matching a virtual network address for the user stored in a network address translation table;

means for retrieving a real network address corresponding to the user and to the network from which the packet is received; and

means for forwarding the packet to the real network address.

26. The apparatus of claim 25, wherein the network address translation table contains an entry corresponding to the virtual network address and the first network, the entry having a first real network address.

27. The apparatus of claim 26, wherein the network address translation table further contains an entry corresponding to the virtual network address and the second network, the entry having a second real network address.

28. The apparatus of claim 25, wherein the virtual network address was assigned using a network address translation allocation scheme.

29. The apparatus of claim 25, wherein the user is connected to the first network through a first tunneling session and the user is connected to the second network through a second tunneling session.

30. The apparatus of claim 29, wherein the first tunneling session and the second tunneling session are L2TP sessions.

31. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for communications routing in a system in which a user is connected to a first network and a second network, the method comprising:

receiving a packet sent from the first network or the second network, the packet having a destination address matching a virtual network address for the user stored in a network address translation table;

retrieving a real network address corresponding to the user and to the network from which the packet is received; and

forwarding the packet to the real network address.

32. An apparatus for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the apparatus comprising:

means for receiving a packet sent from the user;

means for examining the packet to determine if its destination is the first network or the second network, the means for examining further comprising;

means for extracting a destination network address from the packet;

means for looking up the destination network address in a routing table;

means for determining that the destination is the first or second network based upon the listing for the destination network address in the routing table; and

means for determining that the destination is the first or second network based on a default setting if the destination network address is not listed in the routing table;

means for performing network address translation on the packet generating a translated packet; and

means for forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

33. An apparatus for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the apparatus comprising:

means for receiving a packet sent from the user;

means for examining the packet to determine if its destination is the first network or the second network;

means for performing network address translation on the packet generating a translated packet, the means for performing network address translation further comprising means for applying a network address translation mapping scheme to a said source network address; and

means for forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.

34. The apparatus of claim 33, further comprising:

means for receiving a second packet, the second packet sent from the first network or the second network;

means for performing network address translation on the second packet generating a second translated packet; and

means for forwarding the second translated packet to the user.

35. An apparatus for communications routing in a system in which a user is simultaneously connected to a first network and a second network, the apparatus comprising:

means for receiving a packet sent from the user;

means for examining the packet to determine if its destination is the first network or the second network;

means for performing network address translation on the packet generating a translated packet, the means for performing network address translation further comprising means for looking up a source network address in a network address translation table; and

means for forwarding the translated packet to the first network or the second network, depending upon the packet'"'"'s destination.