System to map remote lan hosts to local IP addresses

• US 20020186698A1
• Filed: 06/12/2001
• Published: 12/12/2002
• Est. Priority Date: 06/12/2001
• Status: Abandoned Application

• Current Assignee: Netluminous Technologies, Inc.
• Original Assignee: Netluminous Technologies, Inc.
• Inventors: Ceniza, Glen
• Application Number:
  US09/879,639
• Publication Number:
  US 20020186698A1
• Time in Patent Office: Days
• US Class Current: 370/401
• CPC Class Codes: H04L 12/4641 Virtual LANs, VLANs, e.g. virtual private networks [VPN] LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/2514 between local and global IP addresses
• CPC Class Codes: H04L 61/2535 Multiple local networks, e.g. resolving potential IP address conflicts
• CPC Class Codes: H04L 69/16 Implementation or adaptation of Internet protocol [IP], of transmission control protocol [TCP] or of user datagram protocol [UDP]
• CPC Class Codes: H04L 69/161 Implementation details of TCP/IP or UDP/IP stack architecture; Specification of modified or new header fields
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

On a plurality of IP networks where each network is remote from every other network and is connected to the internet by a VPN-router, a method of sending IP packets from a host on a home network to hosts on remote networks by assigning a network ID to each network, assigning IP addresses to hosts on each network, assigning virtual IP addresses to the home network where each virtual IP address represents a host on one of the remote networks and each virtual IP address has the same network ID as the home network, assigning virtual IP addresses to each remote network where the virtual IP addresses represent a host on the home network and each virtual IP address has the same network ID as the remote network to which it is assigned; creating, in each VPN-router, tables that cross reference each virtual IP address assigned to the VPN-router'"'"'s network to the I network ID of the remote network of the host which the virtual IP address represents, and cross referencing the IP address of each host on the VPN-router'"'"'s network to the virtual IP addresses representing those hosts on other networks; and sending a plurality of IP packets from one or more hosts on the home network to one or more hosts on remote networks by addressing the packets to virtual IP addresses assigned to the home network representing the destination hosts on the remote networks.

Claims

1. On a plurality of IP networks, each of said plurality of networks being remote from every other network, each said network being connected to the internet by a VPN-router, a method of sending an IP packet from a host on one of said plurality of networks to a host on another of said plurality of networks, comprising the steps of:

a. assigning a netID to each network of said plurality of networks;

b. assigning an IP address to each host on each said network, said IP address for each said host having the same netID as the network to which said host is attached, each said host having a hostID that is unique to said host'"'"'s network;

c. for each said network, assigning a virtual IP address to said network representing a host on a remote network, said virtual IP address having the same netID as said network and a hostID that is unique to said network;

d. creating in each said VPN-router connected to each said network, one or more tables cross referencing each virtual IP address on said network to the netID of the remote network of the host which said virtual IP address represents, and cross referencing each host attached to said network to each virtual remote IP address representing said host on each remote network;

e. sending an IP packet from a host on one of said plurality of networks to a host on another of said plurality of networks, said IP packet.

2. A method of sending an IP packet as claimed in claim 1 wherein one of said networks is a home network and the remaining networks in said plurality of networks are remote networks, said IP addresses and said virtual IP addresses assigned to said home network being taken from a range of reserved private IP addresses, said range being one of three blocks of IP addresses, a first block comprising contiguous IP addresses from 10.0.0.0 and extending through 10.255.255.255, a second block comprising contiguous IP addresses from 172.16.0.0 and extending through 172.16.255.255, and a third block comprising contiguous the IP addresses from 192.168.0.0 and extending through 192.168.255.255.

3. A method of sending an IP packet as claimed in claim 2 wherein IP addresses and virtual IP addresses assigned to said remote networks are taken from the same said range of reserved private IP addresses as said IP addresses and virtual IP addresses assigned to said home network.

4. A method of sending an IP packet as claimed in claim 1 wherein said IP packet is sent from a first host attached to a first network in said plurality of networks, said first host having an IP address on said first network, to a second host attached to a second network in said plurality of networks, said second host having an IP address on said second network, said first and second networks being attached to the internet and being remote from each other, comprising the further steps of:

a. said first host sending an IP packet to a first VPN-router connecting said first network to the internet, said IP packet having a header that includes a destination IP address and a source IP address, said destination IP address being a virtual IP address assigned to said first network representing said second host, and said source IP address being said IP address of said first host on said first network;

b. said first VPN-router receiving said IP packet, determining the virtual remote IP address representing said first host upon said second network, replacing said source IP address with said virtual remote IP address representing said first host upon said second network, encapsulating said IP packet as a payload within an encapsulating IP packet, providing said encapsulating IP packet with a destination IP address of a second remote VPN-router connecting said second network to the internet, and sending said encapsulating IP packet to the internet for routing and delivery to said second VPN-router;

c. said second VPN-router receiving said encapsulating IP packet, decapsulating said encapsulating IP packet to recover said IP packet, determining the IP address of said second host on said second network, replacing said destination IP address of said IP packet with said IP address of said second host on said second network, and sending said IP packet to said second network for delivery to said second host.

5. A method of sending an IP packet as claimed in claim 4, further comprising the steps of:

a. said first host encrypting the payload of said IP packet prior to sending said IP packet to said first VPN-router; and

b. said second host decrypting said payload of said IP packet upon receiving said IP packet from said second VPN-router.

6. A method of sending an IP packet from a first host attached to a first network to a second host attached to a second network, and sending a second IP packet from said second host to said first host, said first and second networks being attached to the internet, comprising the steps of:

a. assigning a first IP address to said first host attached to said first network, said first IP address comprising a netID and a hostID that is unique to said first network;

b. assigning a second and third IP address to a first VPN-router connecting said first network to the internet, said second IP address being assigned to said VPNrouter'"'"'s interface to said first network and having the netID of said first network and a hostID that is unique to said first network, said third IP address being assigned to said first VPN-router'"'"'s interface with the internet and being a globally unique IP address;

c. assigning a fourth IP address as a virtual IP address to represent, on said first network, said second host, said second host being attached to said second network that is attached to the internet and that is remote from said first network, said fourth IP address having the netID of said first network and a hostID that is unique to said first network;

d. assigning a fifth IP address to said second host attached to said second network, said fifth IP address having the netID of said second network and a hostID that is unique to said second network;

e. assigning a sixth and seventh IP address to a second VPN-router connecting said second network to the internet, said sixth IP address being assigned to said VPN-router'"'"'s interface to said second network and having the netID of said second network and a hostID that is unique to said second network, said seventh IP address being assigned to said second VPN-router'"'"'s interface with the internet and being a globally unique IP address;

f. assigning an eighth IP address as a virtual IP address to represent, on said second network, said first host, said eighth IP address having the netID of said second network and a hostID that is unique to said second network;

g. creating a table in said first VPN-router whereby said fourth IP address is cross referenced to said seventh IP address, and said first IP address is cross referenced to said eighth IP address;

h. creating a table in said second VPN-router whereby said eighth IP address is cross referenced to said third IP address, and said fourth IP address is cross referenced to said fifth IP address;

i. sending said first IP packet from said first host, said first IP packet having as its destination IP address said fourth IP address and having as its source address said first IP address;

j. receiving said first IP packet at said first network interface of said first VPN-router, replacing said source IP address in said first IP packet with said eighth IP address, encapsulating said first IP packet as a payload within a first encapsulating IP packet having as its destination IP address said seventh IP address, and sending said first encapsulating IP packet to the internet for routing to said second VPN-router;

k. receiving said first encapsulating IP packet at said second VPN-router, decapsulating said payload to obtain said first IP packet, examining said first IP packet to determine said first IP packet'"'"'s destination, replacing said first IP packet'"'"'s destination IP address with said fifth IP address, and placing said first IP packet on said second network for delivery to said second host;

l. receiving said first IP packet at said second host, and sending a second IP packet from said second host to said first host.

7. The method of sending a first IP packet from a first host to a second host and sending a second IP packet from said second host to said first host as claimed in claim 6, comprising the further steps of:

l. sending said second IP packet from said second host, said second IP packet having as its destination IP address said eighth IP address and having as its source address said fifth IP address;

m. receiving said second IP packet at said second VPN-router'"'"'s interface to said second network, replacing said source address with said fourth IP address, encapsulating said second IP packet as a payload within a second encapsulating IP packet having as its destination IP address said third IP address, and sending said second encapsulating packet to the internet for routing to said first VPN-router; and

n. receiving said second encapsulating IP packet at said first VPN-router, decapsulating said payload to obtain said second IP packet, examining said second IP packet to determine said second IP packet'"'"'s destination, replacing said second IP packet'"'"'s destination IP address with said first IP address, and placing said second IP packet on said second network for delivery to said first host attached to said first network.

8. A method of sending a plurality of IP packets from one or more hosts attached to a first network to one or more remote hosts attached to one or more networks remote from said first network, said first network and each of said one or more remote networks being connected to the internet by a VPN-router, comprising the steps of:

a. assigning a netID to said first network and to each network of said one or more remote networks;

b. assigning an IP address to each host of said one or more hosts attached to said first network and to each remote host attached to each of said one or more remote networks, each said host'"'"'s IP address having the same netID as the network to which said host is attached, and each said host'"'"'s IP address having a hostID that is unique to said host'"'"'s network;

c. assigning one or more virtual IP addresses to said first network, each said virtual IP address representing one of said one or more remote hosts on said one or more remote networks, each said virtual IP address having the same netID as said first network and a hostID that is unique to said first network;

d. assigning one or more virtual IP addresses to each of said one or more remote networks, each of said one or more virtual IP addresses representing a host on said first network

e. creating in said VPN-router connected to said first network, one or more tables cross referencing each virtual IP address on said first network to the netID of the remote network of the host which said virtual IP address represents, and cross referencing each host attached to said first network to each virtual IP address representing each said host on each of said one or more remote networks;

f. creating in each VPN-router connecting one of said one or more remote networks to the internet one or more tables cross referencing each virtual IP address on said remote network to said first network, and cross referencing the IP address of each remote host on said remote network to the virtual IP address representing said remote host on said first network;

g. sending a plurality of IP packets from one or more said hosts on said first network to one or more said remote hosts on one or more said remote networks, the destination IP address of each IP packet in said plurality of IP packets being the said virtual IP address on said first network of the said remote host to which the said IP packet is sent, and the source IP address of each said IP packet in said plurality of IP packets being the said local IP address of the said host on said first network from which the said IP packet is sent;

f. receiving said plurality of IP packets at said first VPN router and, for each said packet, determining the said source IP address of the said host on said first network sending said IP packet and replacing said source IP address with the said virtual IP address representing said sending host on the said remote network to which said IP packet is being sent, determining the remote network of the remote host to which said IP packet is addressed, encapsulating said IP packet as a payload within an encapsulating IP packet, addressing said encapsulating IP packet for delivery to the said remote VPN-router attached to said remote network, and placing said encapsulating IP packet on the internet, such that a plurality of encapsulating IP packets are routed from said first VPN-router to said one or more remote VPN-routers;

g. for each of said one or more remote VPN-routers attached to one of said one or more remote networks, receiving one or more of said plurality of encapsulating IP packets at said remote VPN-router and, for each of said one or more encapsulating IP packets, decapsulating said encapsulating IP packet to obtain said IP packet, examining said IP packet to determine the said virtual destination IP address, replacing said virtual destination IP address with the IP address of the remote host to which said IP packet is directed on said remote network, and sending said IP packet to said remote network for delivery to said remote host.

9. The method of sending a plurality of IP packets from one or more local hosts attached to a first network to one or more remote hosts attached to one or more remote networks as claimed in claim 8, comprising the further steps of encrypting said one or more IP packets at said first VPN-router prior to encapsulation and transmission to said one or more remote VPN-routers;

and decrypting said one or more IP packets at said one or more remote VPN-routers after decapsulation and before transmission to said one or more remote networks.