Hewlett Packard Enterprise Development LP

Hangzhou H3c Technologies Co., Ltd

Xiaoping Han

Songer Sun

Ming Xue

According to an example, in a method for redirecting virtual machine traffic a virtual switch may be implemented in a physical server. In addition, a packet sent from a first virtual machine to a second virtual machine may be detected, in which the first virtual machine and the second virtual machine are in the same virtual local area network (VLAN), and in which the packet has a first VLAN label that identifies the VLAN. Moreover, the first VLAN label may be replaced with a second VLAN label in the packet, in which the second VLAN label differs from the first VLAN label, and the packet may be sent to an uplink switch, in which the uplink switch may send the packet to a network security module.

Redirecting virtual machine traffic

A method, system and gateway for remotely accessing an MPLS VPN are provided. In the method, multiple virtual interfaces are established in an SSL VPN gateway, one virtual interface is bound with one VPN, different VPN users are differentiated according to authentication and authorization information of users, and the authentication and authorization information of the users is respectively bound with corresponding VPNs. When the SSL VPN gateway receives a packet sent by a user, an inner label and an outer label are added to the packet according to a VPN instance bound with the user; when receiving a response packet from a resource server, the SSL VPN gateway searches for a VPN instance according to the VPN label, and forwards the response packet to the user through the SSL connection according to the found VPN instance.

Growing community of inventors

Beijing, China

Xiaoping Han