Method and system for redirecting networked traffic
First Claim
Patent Images
1. A method of redirecting network traffic from an uncontrolled access network to a controlled access network, the method comprising:
- receiving, from a first network element, a plurality of Internet Protocol (IP) packets initially routed to an intended destination address on a first destination network element on the uncontrolled access network;
re-writing IP packet header information of at least one IP packet based on a service class of the first network element to redirect the at least one IP packet to a destination address differing from the intended destination address;
encapsulating, at a first intermediate network device, the at least one IP packet with rewritten IP packet header information;
receiving, at a second intermediate network device, the at least one encapsulated IP packet having rewritten IP packet service class header information;
performing, based on the rewritten IP packet service class header information and on a route map directive, IP address matching by comparing the rewritten IP packet service class header information to an access control list; and
if the rewritten IP packet header information matches an item from the access control list, redirecting the at least one IP packet through an interface tunnel specified in a route map directive to a redirected destination address of a second destination network element, different from the first destination network element, on the controlled access network.
2 Assignments
0 Petitions
Accused Products
Abstract
A method of redirecting network traffic from a first, uncontrolled network to a second, controlled network by rewriting the Type of Service field in the header information of an Internet Protocol (IP) packet so as to include a service code indicating that the IP packet cannot access the uncontrolled network, thereby redirecting the network traffic to a second network element.
-
Citations
13 Claims
-
1. A method of redirecting network traffic from an uncontrolled access network to a controlled access network, the method comprising:
-
receiving, from a first network element, a plurality of Internet Protocol (IP) packets initially routed to an intended destination address on a first destination network element on the uncontrolled access network; re-writing IP packet header information of at least one IP packet based on a service class of the first network element to redirect the at least one IP packet to a destination address differing from the intended destination address; encapsulating, at a first intermediate network device, the at least one IP packet with rewritten IP packet header information; receiving, at a second intermediate network device, the at least one encapsulated IP packet having rewritten IP packet service class header information; performing, based on the rewritten IP packet service class header information and on a route map directive, IP address matching by comparing the rewritten IP packet service class header information to an access control list; and if the rewritten IP packet header information matches an item from the access control list, redirecting the at least one IP packet through an interface tunnel specified in a route map directive to a redirected destination address of a second destination network element, different from the first destination network element, on the controlled access network. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8)
-
-
9. A method of redirecting network traffic from an uncontrolled access network to a controlled access network, the method comprising:
-
receiving an Internet Protocol (IP) packet identifying an intended destination address on the uncontrolled access network in IP packet header information; re-writing IP packet header information on an IP packet to redirect the IP packet to a destination address differing from the intended destination address; encapsulating, at a first intermediate network device, the IP packet with rewritten IP packet header information based on a service class of a network element; performing IP address matching by comparing the IP packet header information to an access control list; and redirecting the IP packet to a redirected destination address on the controlled access network through an interface tunnel specified in a route map directive if the rewritten IP packet service class header information matches an item from the access control list. - View Dependent Claims (10, 11, 12, 13)
-
Specification