Methods and systems for providing network connectivity to a secure access service edge (SASE) domain via an ISP
AssigneeVersa Networks, Inc.
InventorsChitresh Yadav, Rahul Vaidya, Apurva Mehta
Life of this patent
Estimating the term…
Abstract
Methods and system for providing network connectivity are disclosed. In an example, a method for providing network connectivity involves receiving from an Internet Service Provider (ISP) an access ID and an IP address at a SASE domain, wherein the access ID and the IP address correspond to a subscriber of the ISP, generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address to an access ID-to-tenant mapping, and forwarding traffic received at the SASE domain from a Broadband Network Gateway (BNG) of the ISP according to the IP address-to-tenant mapping.
Claims18
A method for providing network connectivity, the method comprising:
- receiving from an Internet Service Provider (ISP) an access ID and an IP address at a Secure Access Service Edge (SASE) domain, wherein the access ID corresponds to a subscriber of the ISP and the IP address is assigned to a customer premise equipment (CPE) that is used by the subscriber to access the ISP, wherein the IP address is assigned to the CPE by the ISP and the access ID and the IP address are received at the SASE domain only after access to the ISP is granted to the CPE by an authentication authorization accounting (AAA) server of the ISP using the access ID that corresponds to the subscriber of the ISP for an authentication process between the CPE and the AAA server of the ISP, wherein access to the ISP that is granted to the CPE by the AAA server of the ISP is used as a proxy of trust by the SASE domain for gaining access to services provided by the SASE domain;
- generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address that were received from the ISP to an access ID-to-tenant mapping;
- and
- forwarding traffic received at the SASE domain from a Broadband Network Gateway (BNG) of the ISP according to the IP address-to-tenant mapping.
A non-transitory computer readable medium that stores computer readable instructions, which when executed on one or more processors, implements a method for providing network connectivity, the method comprising:
- receiving from an Internet Service Provider (ISP) an access ID and an IP address at a Secure Access Service Edge (SASE) domain, wherein the access ID corresponds to a subscriber of the ISP and the IP address is assigned to a customer premise equipment (CPE) that is used by the subscriber to access the ISP, wherein the IP address is assigned to the CPE by the ISP and the access ID and the IP address are received at the SASE domain only after access to the ISP is granted to the CPE by an authentication authorization accounting (AAA) server of the ISP using the access ID that corresponds to the subscriber of the ISP for an authentication process between the CPE and the AAA server of the ISP, wherein access to the ISP that is granted to the CPE by the AAA server of the ISP is used as a proxy of trust by the SASE domain for gaining access to services provided by the SASE domain;
- generating an IP address-to-tenant mapping at the SASE domain by applying the access ID and the IP address that were received from the ISP to an access ID-to-tenant mapping;
- and
- forwarding traffic received at the SASE domain from a Broadband Network Gateway (BNG) of the ISP according to the IP address-to-tenant mapping.
A method for providing network connectivity, the method comprising:
- receiving from an Internet Service Provider (ISP) an access ID and an IP address at a Secure Access Service Edge (SASE) controller, wherein the access ID and the IP address correspond to a subscriber of the ISP and the IP address is assigned to a customer premise equipment (CPE) that is used by the subscriber to access the ISP, wherein the IP address is assigned to the CPE by the ISP and the access ID and the IP address are received at the SASE domain only after access to the ISP is granted to the CPE by an authentication authorization accounting (AAA) server of the ISP using the access ID that corresponds to the subscriber of the ISP for an authentication process between the CPE and the AAA server of the ISP, wherein access to the ISP that is granted to the CPE by the AAA server of the ISP is used as a proxy of trust by the SASE domain for gaining access to services provided by the SASE domain;
- generating an IP address-to-tenant mapping at the SASE controller by applying the access ID and the IP address that were received from the ISP to an access ID-to-tenant mapping;
- distributing the IP address-to-tenant mapping from the SASE controller to a SASE gateway;
- and
- forwarding traffic received at the SASE gateway from a device via the ISP according to the IP address-to-tenant mapping.
Dependencies are inferred from the claim text.