Per user and network routing tables

• US 6,982,978 B1
• Filed: 02/28/2002
• Issued: 01/03/2006
• Est. Priority Date: 12/02/1998
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Xu, Xi, Chu, Jie, Lou, Shuxian, Dos Santos, Maria Alice, Zhang, Shujin, Jin, Jane Jiaying
• Primary Examiner(s): Ton, Dang
• Assistant Examiner(s): TRAN, PHUC H
• Application Number:
  US10/086,396
• Time in Patent Office: 1,405 Days
• Field of Search: 370/392, 370/401, 370/235, 370/357, 370/359, 370/360, 370/378, 370/383, 370/394, 370/400
• US Class Current: 370/392
• CPC Class Codes: H04L 45/04 Interdomain routing, e.g. hierarchical routing

Abstract

A gateway is provided which routes a packet sent from a user to a connected network utilizing a per-user routing table. This is accomplished by extracting a source address from the packet; finding a per-user routing table corresponding to the source address, the per-user routing table containing entries corresponding to one or more currently accessible networks for the user and the range of network addresses corresponding to the currently accessible networks; extracting a destination address from the packet; seeking an entry in the matching per-user routing table with a range of network addresses containing the destination address; routing the packet to a matching network if the destination address is contained within one of the ranges of network addresses for the currently accessible networks; and routing the packet to a default network if the destination address is not contained within one of the ranges of network addresses for the currently accessible networks. This allows different users to have access to a different set of networks and allows a user to select the network he wishes to access. The gateway may also guarantee that packet are routed through a particular destination ISP or network by looking up the destination ISP or network in a table, each entry in the table having a router network address corresponding to each network currently accessible; establishing a tunneling session to the matching router network address; and forwarding the packet to the router network address through the tunneling session.

Claims

1. A gateway for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, said packet having a destination network, the gateway including:

a table unique to the user, each entry in said table having a router network address corresponding to each network currently accessible;

a destination network table entry searcher coupled to said table;

a tunneling session initiator coupled to said matching network router; and

a packet forwarder coupled to said tunneling session initiator.

2. The gateway of claim 1, wherein said table is contained in a service profile.

3. The gateway of claim 1, wherein said matching network router is coupled to an accessible network corresponding to a range of addresses in which a destination address is found.

4. The gateway of claim 1, wherein said tunneling session initiator is coupled to a matching network router if said destination address of the packet is contained within one of said entries.

5. The gateway of claim 1, wherein said tunneling session initiator is coupled to a default network router if said destination address of the packet is not contained within one or said entries.

6. The gateway of claim 5, wherein said default network router is coupled to the largest accessible network.

7. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform method steps for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, said packet having a destination network, said method steps comprising:

looking up said destination network in a table, each entry in said table having a router network address corresponding to each network currently accessible, wherein said table corresponds only to the user;

establishing a tunneling session to said corresponding router network address; and

forwarding the packet to said corresponding router network address through said tunneling session.

8. A gateway for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, said packet having a destination network, the gateway including:

a table unique to the user, each entry in said table having a router network address corresponding to each network currently accessible;

a destination network table entry searcher coupled to said table;

a matching network router coupled to said destination network table entry searcher if the destination network is listed in said table;

a tunneling session initiator coupled to said matching network router; and

a packet forwarder coupled to said tunneling session initiator.

9. The gateway of claim 8, wherein said table is contained in a service profile.

10. An apparatus for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, including:

means for extracting a source address from the packet;

means for finding a per-user routing table corresponding to said source address, said per-user routing table corresponding only to the user and containing entries corresponding to one or more currently accessible networks for the user and the range of network addresses corresponding to said currently accessible networks;

means for extracting a destination address from the packet;

means for seeking an entry in said matching per-user routing table with a range of network addresses containing said destination address;

means for routing the packet to a matching network if said destination address is contained within one of said ranges of network addresses for said currently accessible networks; and

means for routing the packet to a default network if said destination address is not contained within one of said ranges of network addresses for said currently accessible networks.

11. The apparatus of claim 10, wherein said matching network is said accessible network corresponding to said range of addresses in which said destination address is found.

12. The apparatus of claim 10, wherein said default network is the largest accessible network.

13. An apparatus for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, including:

means for extracting a source address from the packet;

means for finding a per-user routing table corresponding to said source address, said per-user routing table corresponding only to the user and containing entries corresponding to one or more currently accessible networks for the user and the range of network addresses corresponding to said currently accessible networks;

means for extracting a destination address from the packet;

means for seeking an entry in said matching per-user routing table with a range of network addresses containing said destination address;

means for routing the packet to a matching network if said destination address is contained within one of said ranges of network addresses for said currently accessible networks; and

means for ignoring said packet and alerting the user to that effect if said destination address is not contained within one of said ranges of network addresses for said currently accessible networks.

14. The apparatus of claim 13, wherein said matching network is said accessible network corresponding to said range of addresses in which said destination address is found.

15. An apparatus for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, said packet having a destination network, the apparatus including:

means for looking up said destination network in a table, each entry in said table having a router network address corresponding to each network currently accessible;

means for establishing a tunneling session to said matching router network address; and

means for forwarding the packet to said router network address through said tunneling session.

16. The apparatus of claim 15, wherein said table is contained in a service profile.

17. An apparatus for routing a packet sent from a user in a system in which the user may be connected to multiple networks simultaneously, including:

means for extracting a source address from the packet;

means for finding a per-user routing table corresponding to said source address, said per-user routing table corresponding only to the user and containing entries corresponding to one or more accessible networks for the user and the range of network addresses corresponding to said currently accessible networks;

means for extracting a destination address from the packet;

means for reading the entries of said matching per-user routing table, looking for a range of network addresses containing said destination address;

means for determining a destination network based upon a matching entry in said per-user routing table if said destination address is contained within one of said ranges of network addresses for said currently accessible networks;

means for routing the packet to a default network if said destination address is not contained within one of said ranges of network addresses for said currently accessible networks,

means for looking up said destination network in a table, each entry in said table having a router network address corresponding to each network currently accessible;

means for establishing a tunneling session to said corresponding router network address; and

means for forwarding the packet to said router network address through said tunneling session.

18. The apparatus of claim 17, wherein said destination network is one of said accessible networks corresponding to said range of addresses in which said destination address is found.

19. The apparatus of claim 17, wherein said default network is the largest accessible network.

20. The apparatus of claim 17, wherein said table is contained in a service profile.

21. An apparatus for routing a packet sent from a user in a system in a system in which the user may be connected to multiple networks simultaneously, including:

means for extracting a source address from the packet;

means for finding a per-user routing table corresponding to said source address, said per-user routing table corresponding only to the user and containing entries corresponding to one or more accessible networks for the user and the range of network addresses corresponding to said currently accessible networks;

means for extracting a destination address from the packet;

means for reading the entries of said matching per-user routing table, looking for a range of network addresses containing said destination address;

means for determining a destination network based upon a matching entry in said per-user routing table if said destination address is contained within one of said ranges of network addresses for said currently accessible networks;

means for ignoring said packet and alerting the user to that effect if said destination address is not contained within one of said ranges of network addresses for said currently accessible networks;

means for looking up said destination network in a table, each entry in said table having a router network address corresponding to each network currently accessible;

means for establishing a tunneling session to said corresponding router network address; and

means for forwarding the packet to said corresponding router network address through said tunneling session.

22. The apparatus of claim 21, wherein said matching network is one of said accessible network corresponding to said range of addresses in which said destination address is found.

23. The apparatus of claim 21, wherein said table is contained in a service profile.