Huawei Technologies Co., Limited

Wenxin Bai

Xiaoming Zhu

Jin Kong

An Internet Protocol Security tunnel maintenance method, apparatus, and system including a terminal device that negotiates with a VPN gateway based on a first IP address and according to the IKE protocol, and establishes an IPsec tunnel based on SAs obtained through negotiation; determines, the first IP address changes to a second IP address; sends a first request packet to the VPN gateway, where the first request packet carries the second IP address and a first tunnel identifier, where the first request packet is used to request to update a first SA record, and where the first SA record includes a correspondence between the SAs, the first IP address, and the first tunnel identifier; generates a second tunnel identifier based on the second IP address and a predefined algorithm; and replaces the first tunnel identifier in a second SA record with the second tunnel identifier.

Growing community of inventors

Hangzhou, China

Wenxin Bai