System and method for enabling communication between networks with overlapping IP address ranges
AssigneeAviatrix Systems, Inc.
InventorsXiaobo Sherry Wei, Pankaj Manglik, Sunil Kishen
Life of this patent
Estimating the term…
Abstract
A method is described that enables communication between two disjoined networks with overlapping IP address ranges. An intermediary function in each of the networks and a unique IP address pool are deployed to facilitate the communication. This method also enables communications between one network with a group of networks with overlapping IP address ranges.
Claims18
A computerized method for enabling communications between networks with overlapping Internet Protocol (IP) address ranges, the computerized method comprising:
- receiving a first message from a first computing device operating within a first virtual private network for transmission to a second computing device operating within a second virtual private network different than the first virtual private network;
- determining whether the first virtual private network and the second virtual private network include overlapping private IP address ranges;
- responsive to determining that the first virtual private network and the second virtual private network including overlapping private IP address ranges,
- substituting a private IP address within the first message with a selected unique, non-overlapping private IP address, the non-overlapping private IP address being outside an IP address range allocated to the first virtual private network, and
- transmitting the first message to the second computing device;
- and
- responsive to determining that the first virtual private network and the second virtual private network include non-overlapping private IP address ranges, transmitting a second message in response to the first message without substituting the private IP address within the second message with another private IP address.
A computerized method for enabling communications between networks with overlapping Internet Protocol (IP) address ranges, the computerized method comprising:
- receiving a first message from a first computing device operating within a first virtual private network for transmission to a second computing device operating within a second virtual private network different than the first virtual private network;
- determining whether the first virtual private network and the second virtual private network include overlapping private IP address ranges;
- responsive to determining that the first virtual private network and the second virtual private network including overlapping private IP address ranges,
- substituting a private IP address within the first message with a selected unique, non-overlapping private IP address, the non-overlapping private IP address being outside an IP address range allocated to the first virtual private network, and
- transmitting the first message to the second computing device;
- and
- responsive to the first virtual private network and the second virtual private network including non-overlapping private IP address ranges,
- refraining from substituting a source IP address associated with a second message, being in response to the first message, with a private IP address within an IP address range that is outside an address range allocated to the second private network.
A device operating within a first virtual private network that controls transmissions to a second virtual private network, comprising:
- one or more processors;
- and
- a non-transitory storage medium coupled to the one or more processors, the non-transitory storage medium comprises an address translation control module and a data store,
- wherein the address translation control module being software that, when executed by the one or more processors, controls a substitution of a first private IP address, included in a first message received from a first computing device residing within the first virtual private network for transmission to a second computing device residing within the second virtual private network, with a second private IP address outside a private IP address range allocated to the first virtual private network by at least
- (i) sending a query message to determine whether the first virtual private network and the second virtual private network include overlapping private IP address ranges,
- (ii) responsive to determining that the first virtual private network and the second virtual private network including overlapping private IP address ranges, (a) substituting the first private IP address within the first message with the second private IP address being a selected unique, non-overlapping private IP address, the non-overlapping private IP address being outside an IP address range allocated to the first virtual private network and (b) transmitting the first message to the second computing device, and
- (iii) responsive to determining that the first virtual private network and the second virtual private network include non-overlapping private IP address ranges, transmitting a second message in response to the first message without substituting the first private IP address operating as a source IP address for the second message with another private IP address.
A computerized method for enabling communications between at least a first virtual private network and a second virtual private network with overlapping Internet Protocol (IP) address ranges, the method comprising:
- receiving a first message from a first computing device operating within the first virtual private network for transmission to a second computing device operating within the second virtual private network being different than the first virtual private network;
- determining whether the first virtual private network and the second virtual private network include overlapping private IP address ranges;
- responsive to the first virtual private network and the second virtual private network including overlapping private IP address ranges, (i) substituting a source IP address within the first message with a unique, non-overlapping private IP address, the non-overlapping private IP address being outside of an IP address range allocated to the first virtual private network and (ii) transmitting the first message to the second computing device;
- and
- responsive to the first virtual private network and the second virtual private network including non-overlapping private IP address ranges, transmitting a second message in response to the first message without substitution of an IP source address of the response message with another private IP address.
A computerized method for enabling communications between at least a first virtual private network and a second virtual private network with overlapping Internet Protocol (IP) address ranges, the method comprising:
- receiving a first message from a first computing device operating within the first virtual private network for transmission to a second computing device operating within the second virtual private network being different than the first virtual private network;
- determining whether the first virtual private network and the second virtual private network include overlapping private IP address ranges;
- responsive to the first virtual private network and the second virtual private network including overlapping private IP address ranges, (i) substituting a source IP address within the first message with a unique, non-overlapping private IP address, the non-overlapping private IP address being outside of an IP address range allocated to the first virtual private network and (ii) transmitting the first message to the second computing device;
- and
- responsive to the first virtual private network and the second virtual private network including non-overlapping private IP address ranges,
- refraining from substituting the source IP address associated with the response to the first message with a private IP address that is outside an IP address range allocated to the second virtual private network.
Dependencies are inferred from the claim text.