Novell, Inc.

Tasman Networks, Inc

Alampoondi E Natarajan

Radia Joy Perlman

Nehal Bhau

Anand S Athreya

Nicholas Brailas

Joseph L Gervais

Radia Joy Porlman

Umesh Muniyappa

Michael D Allen

Michael Terzich

Nicholas Michael Brailas

A VLAN tagging unit associated with a WAN is used to add VLAN tags based upon logical interfaces. In one example, data received across the logical interface is tagged with an associated VLAN ID by the unit. In another embodiment, flow-based VLAN tagging is done in which in addition to the logical interface other indications are used in the VLAN tagging.

System and method for connecting geographically distributed virtual local area networks

A method and apparatus for establishing a virtual private network provides a technique for automatically configuring nodes of the network. The nodes are established to include a master node. Each node includes a public key and a private key for cryptographic communication in a first mode, such as RSA. Configuration data regarding communication in the network is provided to the master node. The configuration data is securely transferred into each other node from the master node. Nodes communicate with each other based upon a configuration data. The configuration data can include cryptographic key data related to a second cryptographic mode such as Diffie-Hellman.

Method and apparatus for providing a virtual private network

The present invention is an address mapping gateway, used in an internetwork link, that associates all nodes in a domain with a single network number (referred to as a domain network address), and provides gateway-mapped node addresses that are unique within the domain. The address mapping gateway dynamically substitutes the 'globally-unique' domain network address and the 'domain-unique' gateway-mapped node address for a network number and node address, respectively, of a network layer address of a packet header received from a source node in the domain. Conversely, when a packet is received for a destination node in the domain, the address mapping gateway substitutes the originally-assigned network number and node address for the domain network address and gateway-mapped node address, respectively, prior to forwarding the packet to the node. Specifically, the address mapping gateway maintains an address mapping table that provides a cross-reference between (1) a source node address and the network number of the local network in which the node resides, and (2) a gateway-mapped node address generated by the address mapping gateway. Upon receipt of a packet from the source node, the address mapping gateway creates a mapping entry in the address mapping table that node and performs an address translation to a globally-unique network layer address. On the other hand, upon receipt of a packet destined for a destination node in the domain, the address mapping gateway locates the mapping entry for the packet's gateway-mapped node address and performs a reverse address translation to the originally-assigned network layer address.

Internetwork address mapping gateway

Growing community of inventors

San Jose, CA, United States of America

Alampoondi E Natarajan