Cisco Technology, Inc.

Ramesh Kalimuthu

Jan Vilhuber

Michael Lee Sullenberger

Yogesh Kalley

Philippe J Marcais

A method comprises receiving a request for secure network traffic from a device having a private network address at a source node, obtaining the private network address of a requested destination device at a destination node from a route server based on signaling information associated with the request, obtaining the public network address of the destination node associated with the private network address, creating in response to the request a virtual circuit between the source node and the destination node based on the public network address of the destination node, and encrypting network traffic for transporting at least from the source node to the destination node through the virtual circuit. The process is dynamic in that the virtual circuit is created in response to the request. Hence, the process operates as if a fully meshed network exists but requires less provisioning and maintenance than a fully meshed network architecture. Furthermore, the process is readily scalable as if a hub and spoke network exists but is more suitable for delay-sensitive traffic, such as voice and video, than a hub and spoke network architecture.

Method and apparatus for dynamically securing voice and other delay-sensitive network traffic

A request is received for secure network traffic from a device having a private network address at a source node. The private network address of a requested destination device is obtained at a destination node from a route server based on signaling information associated with the request. The public network address of the destination node associated with the private network address is obtained. In response to the request, a virtual circuit is created between the source node and the destination node based on the public network address of the destination node. Network traffic is encrypted for transport at least from the source node to the destination node through the virtual circuit. Creating the virtual circuit dynamically in response to the request functions like a fully meshed network but requires less provisioning and maintenance. The process is readily scalable, as with a hub and spoke network but with less delay.

Devices, softwares and methods dynamically allocate bandwidth in ATM SVC connections. If there is an increase in the rate of demand, additional switched virtual circuits are opened for adding bandwidth. If demand decreases, some of the additional switched virtual circuits may be closed. A single pipe need be established for a number of these switched virtual circuits, to not affect operation of the upper network layers.

Growing community of inventors

Fremont, CA, United States of America

Ramesh Kalimuthu