Using tunneling to enhance remote LAN connectivity

• US 9,160,714 B2
• Filed: 06/30/2003
• Issued: 10/13/2015
• Est. Priority Date: 06/30/2003
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Westberg, Lars, Hevizi, Laszlo, Ayadurai, Vicknesan
• Primary Examiner(s): Ibrahim, Mohamed
• Application Number:
  US10/610,376
• Publication Number:
  US 20040267874A1
• Time in Patent Office: 4,488 Days
• Field of Search: 709/227, 709/230, 709/238, 709/245, 709/249
• US Class Current: 1/1
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04W 4/18 Information format or content conversion, e.g. adaptation by the network of the transmitted or received information for the purpose of wireless delivery to users or terminals
• CPC Class Codes: H04W 76/12 Setup of transport tunnels
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support

Abstract

The address translation capabilities of packet-switched mobile networks are exploited to achieve bidirectional LAN communications therethrough. A multi-dash user VPN can be provided by encapsulating a multi-user LAN communication protocol for traversal of a packet-switched network. By encapsulating a commonly available multi-user LAN communication protocol, for example ethernet, remote LAN connectivity can be extended without requiring any host reconfiguration.

Claims

1. A method of packet-switched communications, the method comprising:

interconnecting two physically separate Local Area Network (LAN) segments, a remote LAN segment and a fixed LAN segment, into one logical LAN segment; and

providing connectivity on a datalink-layer by encapsulating LAN frames or datagrams to create a tunnel from the remote LAN segment through a packet-switched mobile network and a packet-switched fixed network to the fixed LAN segment;

wherein said tunnel is connected to the remote LAN segment via a first bridge, and wherein said tunnel is connected to the fixed LAN segment via a second bridge, such that the tunnel extends from the remote LAN segment to the fixed LAN segment, thereby creating said one logical LAN segment;

wherein said first and second bridges each provide an interface between a physical layer-2 interface of the LAN segments and a logical layer-3 interface of the tunnel;

wherein the remote LAN segment is geographically separate from the fixed LAN segment; and

wherein a host on the fixed LAN segment can communicate bidirectionally with a host on the geographically separate remote LAN segment as though both hosts were connected on the same physical LAN segment.

2. The method of claim 1, wherein said tunnel is an Internet Protocol/User Datagram Protocol (IP/UDP) tunnel.

3. The method of claim 2, wherein said LAN frames or datagrams are Ethernet frames, and said Ethernet frames are encapsulated through said IP/UDP tunnel.

4. The method of claim 1, wherein a multi-user Virtual Private Network (VPN) is created by a combination of a multi-user/multi-host protocol with a tunnelizing encapsulating technique.

5. The method of claim 4, wherein any or all of a first plurality of users/hosts on the remote LAN segment can communicate bidirectionally with any or all of a second plurality of users/hosts on the fixed LAN segment by using said tunnel.

6. The method of claim 1, wherein said packet-switched mobile network includes a network address translator associating User Datagram Protocol (UDP) streams to IP addresses to permit response traffic from a host on the fixed LAN segment to be properly associated with a host on the remote LAN segment to which the response traffic is directed.

7. The method of claim 1, wherein said physical layer-2 interface is an Ethernet interface and said logical interface is an Internet Protocol/User Datagram Protocol (IP/UDP) interface, effectively providing an Ethernet-IP/UDP bridge.

8. An apparatus for packet-switched communications, the apparatus comprising:

processing circuitry configured to interconnect two physically separate Local Area Network (LAN) segments, a remote LAN segment and a fixed LAN segment, into one logical LAN segment;

the processing circuitry further configured to provide connectivity on a datalink-layer by encapsulating LAN frames or datagrams to create a tunnel from the remote LAN segment through a packet-switched mobile network and a packet-switched fixed network to the fixed LAN segment;

the processing circuitry further configured to provide connectivity on the datalink-layer by implementing a tunnel that extends from the remote LAN segment to the fixed LAN segment, thereby creating said logical LAN segment, so that a host on the fixed LAN segment can communicate bidirectionally with a host on the remote LAN segment, which is geographically separate, as though both hosts were connected on the same physical LAN segment;

wherein said tunnel is connected to the remote LAN segment via a first bridge, and wherein said tunnel is connected to the fixed LAN segment via a second bridge, such that the tunnel extends from the remote LAN segment to the fixed LAN segment, thereby creating said one logical LAN segment;

wherein said first and second bridges each provide an interface between a physical layer-2 interface of the LAN segments and a logical layer-3 interface of the tunnel.

9. The apparatus of claim 8, wherein said tunnel is an Internet Protocol/User Datagram Protocol (IP/UDP) tunnel.

10. The apparatus of claim 9, wherein said LAN frames or datagrams are Ethernet frames, and said Ethernet frames are encapsulated through said IP/UDP tunnel.

11. The apparatus of claim 8, wherein said apparatus is configured for combining a multi-user/multi-host protocol with a tunnelizing encapsulating technique to create a multi-user Virtual Private Network (VPN).

12. The apparatus of claim 11, wherein said apparatus is configured for using said tunnel to enable any or all of a first plurality of users/hosts on the remote LAN segment to communicate bidirectionally with any or all of a second plurality of users/hosts on the fixed LAN segment.

13. The apparatus of claim 8, wherein said packet-switched mobile network includes a network address translator configured for associating User Datagram Protocol (UDP) streams to Internet Protocol (IP) addresses to permit response traffic from a host on the fixed LAN segment to be properly associated with a host on the remote LAN segment to which the response traffic is directed.

14. The apparatus of claim 8, wherein said physical layer-2 interface is an Ethernet interface and said logical interface is an IP/UDP interface, effectively providing an Ethernet-IP/UDP bridge.

15. A first bridge for operation with an associated Local Area Network (LAN) segment, the bridge comprising:

an interface configured for receiving LAN frames or datagrams from the associated LAN segment;

processing circuitry configured for encapsulating the LAN frames or datagrams to produce corresponding encapsulated LAN frames or datagrams; and

a tunnel interface configured for outputting said encapsulated LAN frames or datagrams onto a tunnel to another physically separate LAN segment through a packet-switched mobile network and a packet-switched fixed network, wherein said tunnel is connected to the physically separate LAN segment via a second bridge;

wherein said first and second bridges each provide an interface between a physical layer-2 interface of the LAN segments and a logical layer-3 interface of the tunnel;

wherein the associated LAN segment is geographically separate from the physically separate LAN segment; and

wherein a host on the associated LAN segment can communicate bidirectionally with a host on the physically separate remote LAN segment as though both hosts were connected on the same physical LAN segment.

16. The first bridge of claim 15, wherein said interface for receiving LAN frames is an Ethernet interface for receiving Ethernet frames, and said processing circuitry is configured for encapsulating the Ethernet frames for transmission in tunnel packets by prepending thereto Internet Protocol/User Datagram Protocol (IP/UDP) headers, to thereby set up an IP/UDP tunnel which transports the tunnel packets.

17. The first bridge of claim 16, wherein said bridge is configured for:

assigning a unique UDP port number to each Ethernet stream; and

storing associations between UDP port numbers and Ethernet streams.

18. The first bridge of claim 15 wherein said associated LAN segment is one of a remote LAN segment and a fixed LAN segment, and

wherein said physically separate LAN segment is the other of the remote LAN segment and the fixed LAN segment.

19. A second bridge for operation with an associated Local Area Network (LAN) segment, the bridge comprising:

a tunnel interface configured for receiving encapsulated LAN frames or datagrams from another physically separate LAN segment, via a tunnel through a packet-switched mobile network and a packet-switched fixed network, wherein said tunnel is connected to the physically separate LAN segment via a first bridge;

processing circuitry configured for de-encapsulating the received encapsulated LAN frames to obtain corresponding LAN frames or datagrams; and

an interface configured for outputting said LAN frames or datagrams to the associated LAN segment;

wherein said first and second bridges each provide an interface between a physical layer-2 interface of the LAN segments and a logical layer-3 interface of the tunnel;

wherein the associated LAN segment is geographically separate from the physically separate LAN segment; and

wherein a host on the associated LAN segment can communicate bidirectionally with a host on the physically separate remote LAN segment as though both hosts were connected on the same physical LAN segment.

20. The second bridge of claim 19, wherein said tunnel interface for receiving encapsulated LAN frames or datagrams is an IP/UDP tunnel interface, and

wherein said processing circuitry is configured for stripping off headers of the encapsulated LAN frames in order to place raw Ethernet frames on an Ethernet interface to the associated LAN segment.

21. The second bridge of claim 19, wherein said associated LAN segment is one of a remote LAN segment and a fixed LAN segment, and

wherein said physically separate LAN segment is the other of the remote LAN segment and the fixed LAN segment.