SERVICE ACCESS USING A SERVICE ADDRESS

• US 20100218247A1
• Filed: 02/20/2009
• Published: 08/26/2010
• Est. Priority Date: 02/20/2009
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Karim, Samer J., Statia, Jeromy S., Nice, Nir
• Granted Patent: US 8,874,693 B2
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: H04L 2101/659 Internet protocol version 6 [IPv6] addresses
• CPC Class Codes: H04L 61/5046 Resolving address allocation conflicts; Testing of addresses testing when self-assigning an address H04L61/5092
• CPC Class Codes: H04L 61/5084 Providing for device mobility network addressing or numbering for mobility support in wireless networks H04W8/26; mobile IP H04W80/04
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/164 at the network layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 69/167 Adaptation for transition between two IP versions, e.g. between IPv4 and IPv6 translation of Internet protocol [IP] addresses H04L61/2503
• CPC Class Codes: H04W 12/00 Security arrangements; Authentication; Protecting privacy or anonymity

Abstract

A method is disclosed that includes assigning a service address to a service of a private network. The service of the private network is accessible, via a gateway, by a client computer. The method also includes turning off duplicate address detection at the gateway. The gateway is associated with a public network address that is different from the service address.

Claims

1. A method, comprising:

assigning a service address to a service of a private network that is accessible, via a gateway, by a client computer; and

turning off duplicate address detection at the gateway,

wherein the gateway is accessible at a public network address that is different from the service address.

2. The method of claim 1, further comprising:

receiving a request from the client computer to access the service of the private network at the gateway, wherein the request is directed to the service address; and

routing the request from the gateway to the private network.

3. The method of claim 2, wherein the service address includes an Internet Protocol version six (IPv6) address assigned to an external network interface card (NIC) of the gateway, and wherein the request from the client computer is directed to the IPv6 address assigned to the external NIC of the gateway.

4. The method of claim 1, wherein the private network includes a corporate network, and wherein the service includes one of an Internet Protocol Security (IPSec) tunnel mode service, a domain name service (DNS), and a forward proxy service.

5. The method of claim 1, wherein the client computer accesses the service of the private network via the gateway when the client computer is located at a first location.

6. The method of claim 1, wherein the service of the private network is accessible by the client computer via a second gateway, and wherein the method further comprises turning off duplicate address detection at the second gateway, wherein the second gateway has a second public network address that is different from the service address.

7. The method of claim 6, further comprising:

receiving a request to access the service of the private network at the second gateway, wherein the request is directed to the service address; and

routing the request from the second gateway to the private network.

8. The method of claim 6, wherein the client computer accesses the service of the private network via the second gateway when the client computer is located at a second location.

9. The method of claim 1, wherein the client computer communicates with the gateway using an Internet Protocol version six (IPv6) transition technology protocol.

10. A computer-readable storage medium, comprising:

instructions, that when executed by a processor at a gateway, cause the processor to assign a service address to a service of a private network that is accessible, via the gateway, by a client computer; and

instructions, that when executed by the processor at the gateway, cause the processor to turn off duplicate address detection at the gateway;

wherein the gateway is accessible at a public network address that is different from the service address.

11. The computer-readable storage medium of claim 10, further comprising:

instructions, that when executed by the processor at the gateway, cause the gateway to respond to a request received from the client computer to access the service of the private network, wherein the request is directed to the service address; and

instructions, that when executed by the processor at the gateway, cause the gateway to route the request from the gateway to the private network.

12. The computer-readable storage medium of claim 11, wherein the client computer communicates with the gateway using an Internet Protocol version six (IPv6) transition technology protocol, wherein the service address includes an IPv6 address assigned to an external network interface card (NIC) of the gateway, and wherein the request from the client computer is directed to the IPv6 address assigned to the external NIC of the gateway.

13. The computer-readable storage medium of claim 10, wherein the client computer communicates with the gateway using an Internet Protocol version four (IPv4) protocol, and wherein the service address is assigned to a virtual network interface card (NIC) of the gateway.

14. The computer-readable storage medium of claim 10, wherein the client computer communicates with the gateway using an Internet Protocol version four (IPv4) protocol, and wherein a virtual private network (VPN) connection is established between the client computer and the gateway.

15. A method, comprising:

accessing a service at a first time via a first gateway, the first gateway associated with a first Internet Protocol (IP) address, wherein duplicate address detection is turned off at the first gateway; and

accessing the service at a second time via a second gateway, the second gateway associated with a second IP address, wherein duplicate address detection is turned off at the second gateway,

wherein the service is accessed at the first gateway and at the second gateway using a service address, wherein the service address is different from the first IP address and the second IP address.

16. The method of claim 15, wherein the service is accessed via a portable computer using the service address without modifying service configuration information at the portable computer between the first time and the second time.

17. The method of claim 16, wherein the service address includes an Internet Protocol Security (IPSec) IP address, and wherein the portable computer is configured to access the service of a private network via the IPSec IP address.

18. The method of claim 15, wherein the service address includes an Internet Protocol version six (IPv6) address, and wherein the IPv6 address is assigned to a first external network interface card (NIC) of the first gateway and to a second external NIC of the second gateway.

19. The method of claim 15, further comprising:

accessing the service at a third time via a third gateway, the third gateway associated with a third IP address, wherein duplicate address detection is turned off at the third gateway; and

wherein the service is accessed at the third gateway using the service address, wherein the service address is different from the third IP address.

20. The method of claim 15, wherein the first gateway is located at a first location, the second gateway is located at a second location, and the third gateway is located at a third location.