×

Conditional BGP advertising for dynamic group VPN (DGVPN) clients

  • US 7,720,995 B2
  • Filed: 06/08/2007
  • Issued: 05/18/2010
  • Est. Priority Date: 06/08/2007
  • Status: Active Grant
First Claim
Patent Images

1. A method, performed by a first host to determine if communication with a second host is allowed within a group of at least two hosts, comprising:

  • determining, at the first host, if the host includes a group security policy for secure communication between the hosts within the group, wherein;

    wherein the first host controls a first subnet, the first subnet being part of the group; and

    the second host controls a second subnet, the second subnet being part of the group;

    advertising routing information from the first host to a second host within the group if the first host includes the group security policy, wherein advertising routing information includes;

    providing an advertisement message including;

    a routing prefix, identifying the first subnet;

    a group reference identifying the group security policy; and

    a hash combining the routing prefix with the reference;

    encrypting the advertisement message using the group security policy; and

    sending the encrypted advertisement message to the second host;

    refraining from advertising routing information from the first host to the second host if the first host does not include the group security policy;

    receiving, at the first host, a routing announcement from the second host, including routing information;

    if the routing announcement from the second host includes a second group reference identifying the group security policy, placing the routing information within a routing table contained in the first host; and

    if the routing announcement from the second host does not include the second group reference identifying the group security policy, refraining from placing the routing information within the routing table for the first host.

View all claims
  • 1 Assignment
Timeline View
Assignment View
    ×
    ×