Method and apparatus for managing a virtual private network
First Claim
1. A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising:
- receiving a command specifying an operation on a virtual private network;
wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses;
determining which virtual private network gateways are affected by the command;
translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network;
wherein translating the command involves retrieving network addresses associated with the at least one higher-level object;
wherein the configuration parameters specify lower-level network addresses; and
transmitting the configuration parameters to the virtual private network gateways affected by the command.
18 Assignments
0 Petitions
Accused Products
Abstract
The present invention provides a method and an apparatus for managing a virtual private network operating over a public data network. This public data network has been augmented to include a plurality of virtual private network gateways so that communications across the virtual private network are channeled through the virtual private network gateways. One embodiment of the present invention includes a system that operates by receiving a command specifying an operation on the virtual private network. The system determines which virtual private network gateways are affected by the command. The system then automatically translates the command into configuration parameters for virtual private network gateways affected by the command. These configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network. The system then transmits the configuration parameters to the virtual private network gateways affected by the command, so that the virtual private network gateways are configured to implement the command.
494 Citations
22 Claims
-
1. A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising:
-
receiving a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and transmitting the configuration parameters to the virtual private network gateways affected by the command. - View Dependent Claims (2, 3, 4, 5, 6, 7, 8, 9, 10, 11, 12)
-
-
13. A method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising:
-
receiving, at a virtual private network management station coupled to the public data network, a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying groups of addresses on the public data network between which communications are to be transmitted securely; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; transmitting the configuration parameters securely to the virtual private network gateways affected by the command; and updating a database to reflect changes on the virtual private network caused by the operation specified in the command.
-
-
14. A program storage device storing instructions that when executed by a computer perform a method for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the method comprising:
-
receiving a command specifying an operation on a virtual private network; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; determining which virtual private network gateways are affected by the command; translating automatically the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and transmitting the configuration parameters to the virtual private network gateways affected by the command.
-
-
15. An apparatus for managing virtual private networks operating over a public data network, the public data network including a plurality of virtual private network gateways so that communications across virtual private networks are channeled through the virtual private network gateways, the apparatus comprising:
-
a computer system coupled to the public data network; a user interface within the computer system for receiving a command from a user; wherein the command specifies the operation in terms of at least one higher-level object without specifying network addresses; a command handler in communication with the user interface for handling the command received by the user interface; a translation module in communication with the command handler for translating the command into configuration parameters for virtual private network gateways affected by the command, the configuration parameters specifying how the virtual private network gateways handle communications between specific groups of addresses on the public data network; wherein translating the command involves retrieving network addresses associated with the at least one higher-level object; wherein the configuration parameters specify lower-level network addresses; and a communication module in communication with the translation module for communicating the configuration parameters to virtual private network gateways. - View Dependent Claims (16, 17, 18, 19, 20, 21, 22)
-
Specification