Secure remote access to devices on overlapping subnets
AssigneeCisco Technology, Inc.
InventorsMichael Freed, Madeline Y. Bernstein, Ruben Erick Escolero, Elango Ganesan
Life of this patent
Estimating the term…
Abstract
In one embodiment, a remote access manager receives an access request from a client to remotely access a device on a local network. The remote access manager generates a universally unique identifier for the access request. The remote access manager sends a response to the client having a one-time use domain name system name that is based on the universally unique identifier. The remote access manager communicates with a web proxy to authorize the client to remotely access the device.
Claims20
A method, comprising:
- receiving, at a remote access manager, an access request from a client to remotely access a device that is part of a subnet on a local network, wherein the local network comprises a different subnet for other devices that have some overlap in Internet Protocol addresses with devices that are part of the subnet;
- generating, by the remote access manager, a universally unique identifier for the access request;
- sending, by the remote access manager, a response to the client having a one-time use domain name system name that is based on the universally unique identifier;
- and
- communicating, by the remote access manager, with a web proxy to authorize the client to remotely access the device.
An apparatus, comprising:
- one or more network interfaces;
- a processor coupled to the one or more network interfaces and configured to execute one or more processes;
- and
- a memory configured to store a process that is executable by the processor, the process when executed configured to:
- receive an access request from a client to remotely access a device that is part of a subnet on a local network, wherein the local network comprises a different subnet for other devices that have some overlap in Internet Protocol addresses with devices that are part of the subnet;
- generate a universally unique identifier for the access request;
- send a response to the client having a one-time use domain name system name that is based on the universally unique identifier;
- and
- communicate with a web proxy to authorize remote access of the device of the local network by the client.
A tangible, non-transitory, computer-readable medium storing program instructions that cause a remote access manager to execute a process comprising:
- receiving, at the remote access manager, an access request from a client to remotely access a device that is part of a subnet on a local network, wherein the local network comprises a different subnet for other devices that have some overlap in Internet Protocol addresses with devices that are part of the subnet;
- generating, by the remote access manager, a universally unique identifier for the access request;
- sending, by the remote access manager, a response to the client having a one-time use domain name system name that is based on the universally unique identifier;
- and
- communicating, by the remote access manager, with a web proxy to authorize remote access of the device of the local network by the client.
Dependencies are inferred from the claim text.