Multimedia over internet protocol border controller for network-based virtual private networks

• US 7,782,897 B1
• Filed: 06/04/2008
• Issued: 08/24/2010
• Est. Priority Date: 08/26/2004
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Mohaban, Shai
• Primary Examiner(s): Pham; Chi H
• Assistant Examiner(s): BOAKYE, ALEXANDER O
• Application Number:
  US12/132,884
• Time in Patent Office: 811 Days
• Field of Search: 370/466, 370/467, 370/469, 370/473, 370/474, 370/392, 370/396, 370/389, 370/401, 370/400, 370/471, 370/395.53, 370/395.52, 370/351, 370/393, 709/242, 709/239
• US Class Current: 370/466
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/50 using label swapping, e.g. multi-protocol label switch [MPLS]
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2535 Multiple local networks, e.g. resolving potential IP address conflicts
• CPC Class Codes: H04L 65/1069 Session establishment or de-establishment

Abstract

A method for communicating packet multimedia data between a source endpoint and a destination endpoint is disclosed, wherein at least the source endpoint is within a virtual private network, and comprises the steps of receiving, at a signaling controller, a first signaling packet from the source endpoint, wherein the source endpoint is within a virtual private network; determining whether the source endpoint and destination endpoint may communicate directly over the same virtual private network; when the source endpoint and destination endpoint cannot communicate directly over the same virtual private network, associating a unique identifier of the source endpoint with a virtual private network identification marker; when the source endpoint and destination endpoint can communicate directly over the same virtual private network, instructing the source endpoint and destination endpoint to communicate media packets directly.

Claims

1. A network element for communicating packet data between a source endpoint and a destination entity, wherein the source endpoint and destination entity are within virtual private networks (VPNs) having potentially overlapping address spaces, the network element comprising:

means for receiving a first signaling packet from the source endpoint;

means for registering the source endpoint by creating and storing a mapping of an IP address value, a port number value, and a virtual private network identifier (VPN ID) for the source endpoint to an IP address value and a port number for a network element;

means for modifying a header of the first signaling packet to use the IP address value and port number value of the network element;

means for modifying a payload of the first signaling packet to conform the first signaling packet to a signaling protocol; and

means for forwarding the first signaling packet to the destination entity.

2. The network element of claim 1, further comprising:

means for receiving an additional signaling packet;

means for modifying a header of the additional signaling packet based on the stored mapping; and

means for forwarding the additional signaling packet to the destination entity.

3. The network element of claim 1, wherein the network element is a border controller.

4. The network element of claim 1, wherein the network element comprises:

a signaling controller;

a media controller that is communicatively coupled to the signaling controller; and

a packet processor that is coupled to the media controller.

5. The network element of claim 1, wherein the source endpoint is logically positioned behind a firewall or a network address translation device.

6. The network element of claim 1, wherein the destination entity is in a carrier network.

7. A system comprising:

a plurality of different virtual private networks (VPNs) having potentially overlapping address spaces;

a source endpoint located in a first one of the VPNs and a destination entity located in a second one of the VPNs;

a network element comprising;

a storage medium to store a mapping of an IP address value, a port number value, and a VPN identifier for the source endpoint to an IP address value and a port number value for the network element, and

a packet processor to modify a header of a signaling packet from the source endpoint in accordance with the mapping to use the IP address value and port number value of the network element,

wherein the packet processor further modifies a payload of the packet to conform the packet to a signaling protocol and forwards the packet to the destination entity.

8. A method for communicating packet multimedia data between a source endpoint and a destination endpoint, wherein at least the source endpoint is within a virtual private network, the method comprising the steps of:

receiving, at a signaling controller, a signaling packet for call initiation from the source endpoint, wherein the source endpoint is within a virtual private network;

determining whether the source endpoint and destination endpoint may communicate directly;

when the source endpoint and destination endpoint cannot communicate directly, instructing a media controller to allocate an IP address and port number value; and

when the source endpoint and destination endpoint can communicate directly, instructing the source endpoint and destination endpoint to communicate media packets directly.

9. A system for communicating packet multimedia data between a source endpoint and a destination endpoint, one or both of which may be part of one or more virtual private networks, the system comprising:

a signaling controller having one or more processors and a computer-readable medium; and

a media controller that is communicatively coupled to the signaling controller and to a packet multimedia data network,

wherein the computer-readable medium comprises one or more sequences of instructions for communicating packet multimedia data between a source endpoint and a destination endpoint, wherein at least the source endpoint is within a virtual private network that is coupled to the packet multimedia data network, which instructions, when executed by the one or more processors, cause the one or more processors to;

receive, at the signaling controller, a signaling packet for call initiation from the source endpoint, wherein the source endpoint is within a virtual private network;

determine whether the source endpoint and destination endpoint may communicate directly;

when the source endpoint and destination endpoint cannot communicate directly, instruct the media controller to allocate an IP address and port number value for use in network address translation for media packets for the call; and

when the source endpoint and destination endpoint can communicate directly, instruct the source endpoint and destination endpoint to communicate media packets directly.

10. The system of claim 9, wherein the system is located within a centralized office that provides services to the endpoints and that is owned or operated by a carrier of the packet multimedia data network.