System and method of automatically handling internet key exchange traffic in a virtual private network
AssigneeInternational Business Machines Corporation
InventorEdward B. Boden
Life of this patent
Estimating the term…
Abstract
A system and method for automatically handling Internet Key Exchange (IKE) traffic in a Virtual Private Network (VPN) is provided. Specifically, under the present invention, a VPN gateway node is first searched for IKE traffic permit filters. If none are found, IKE traffic is permitted to flow in and out of the VPN gateway node. The present invention also provides IKE traffic management so that outbound IKE traffic can be guided and secured in a proper fashion.
Claims31
A system for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), comprising:
- a filter detection system for searching for IKE traffic permit filters;
- an IKE traffic enablement system for automatically allowing IKE traffic to flow if the IKE traffic permit filters are not detected;
- and
- an IKE traffic management system for managing the IKE traffic through VPN connections.
A system for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), comprising:
- a filter detection system for searching for IKE traffic permit filters on a first node;
- an IKE traffic enablement system for automatically allowing IKE traffic to flow between the first node and a second node if the IKE traffic permit filters are not detected;
- and
- an IKE traffic management system for managing outbound IKE traffic from the first node to the second node, wherein the outbound IKE traffic is guided outside of a VPN connection between the first node and the second node.
A method for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), comprising the steps of:
- searching for IKE traffic permit filters on a first node;
- automatically allowing IKE traffic to flow in and out of the first node if the IKE traffic permit filters are not detected;
- and
- managing outbound IKE traffic from the first node, wherein the outbound IKE traffic is guided outside of a particular VPN connection to which it pertains.
A method for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), comprising the steps of:
- searching for IKE traffic permit filters on a first node;
- automatically allowing IKE traffic to flow between the first node and a second node if the IKE traffic permit filters are not detected;
- and
- establishing security associations between the first node and the second node for an outer VPN connection.
A method for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), comprising the steps of:
- searching for IKE traffic permit filters on a first node;
- automatically allowing IKE traffic to flow between the first node and a second node if the IKE traffic permit filters are not detected;
- establishing security associations between the first node and the second node for an outer VPN connection;
- automatically allowing IKE traffic to flow between the first node and a remote node;
- establishing security associations between the first node and the remote node for a nested VPN connection within the outer VPN connection;
- and
- managing outbound IKE traffic from the first node, wherein the outbound IKE traffic pertaining to the outer VPN connection is guided outside of the outer VPN connection, and wherein the outbound IKE traffic pertaining to the nested VPN connection is guided outside of the nested VPN connection.
A program product stored on a recordable medium for automatically handling Internet Key Exchange (IKE) traffic in a virtual private network (VPN), which when executed, comprises:
- program code configured to search for IKE traffic permit filters;
- program code configured to automatically allow IKE traffic to flow if the IKE traffic permit filters are not detected;
- and
- program code configured to manage the IKE traffic through VPN connections.
Dependencies are inferred from the claim text.