# US 2006/0179480 A1 · Method for interconnecting virtual private networks in non-connected mode

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2006/0179480 A1
- Document ID: US20060179480A1
- Status: Published application
- Kind: A1
- Application number: 10/546,292
- Filed: 2003-12-24
- Published: 2006-08-10
- Earliest claimed: 2003-02-20
- Assignees: 6Wind
- Inventors: Vincent Jardin; Alain Ritoux
- Web page: https://patentgrep.com/patent/US20060179480A1

## CPC

- H04L 61/00: Network arrangements, protocols or services for addressing or naming
- H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

The invention consists in implanting an encapsulation mechanism (ME) in an operator access router, whereby said encapsulation mechanism can calculate a header for messages that the transmitter site (B1) wishes to send to the receiver site (Bn′), said header containing at least one prefix concerning the service provided by the operator, a virtual private network identifier (VPNB), a destination site (Bn′) network prefix and a suffix which consists of a field of bits which can assume any particular value.

## Claims

### Claim 1

A method for interconnecting virtual private networks in non-connected mode, so as to provide transmission of messages between interfaces of routers in order to transport data between a transmitter site and a receiver site, via an access router of an operator, said method consisting of setting up in this router or via a customer access router an encapsulation mechanism suited to calculate a header for the messages that the transmitter site wishes to send to the receiver site, this header comprising at least one prefix relating to the service provided by the operator, a virtual private network identifier, a network prefix of the destination site, and a suffix which consists of a field of bits which may assume any value.

### Claim 2 (depends on 1)

The method according to claim 1, using IPv6 type addressing wherein the addresses are coded on 128 bits.

### Claim 3 (depends on 1)

The method according to claim 1, wherein the interconnections between the networks of the operators are carried out by migration tunnels.

### Claim 4 (depends on 2)

The method according to claim 2, using service quality mechanisms already existing in the networks in order to provide network traffic engineering services analogous to those of label switching virtual private networks.

### Claim 5 (depends on 1)

The method according to claim 1, wherein the packet flow is forwarded in the non-connected mode by a core network.

### Claim 6 (depends on 1)

The method according to claim 1, using multicast multi-hop type routing for propagating information from private network/access router pairs to this private network between the end routers of the virtual private network, without loading an internal switching table, when the core network provides support for routing of this type.

### Claim 7 (depends on 1)

The method according to claim 1, using unicast type routing tables for providing the forwarding service between the private networks, in the absence of multicast type routing support.

### Claim 8 (depends on 1)

The method according to claim 1, comprising encryption and authentication of the messages for making the non-connected virtual private networks secure by means of technologies relying on security.

### Claim 9 (depends on 1)

The method according to claim 1, wherein said encapsulation mechanism is laid out in an access router of the operator or in a customer access router located at the edge of the core network, and in that the packets encapsulated by this mechanism are decapsulated by the access router of the operator or by the customer access router associated with the destination network.

### Claim 10 (depends on 1)

The method according to claim 1, wherein encapsulation mechanism uses a routing table which determines the nodes through which the packets should pass inside the core network.

### Claim 11 (depends on 1)

The method according to claim 1, wherein, to solve the problems for forwarding the packets, the aforesaid mechanism builds destination addresses appearing in the following form:
Address of IFAk=PREFservice:PREFfeed:VPNA:Ni::Sx/(M+Mf+MVPN+Mi)
Expression wherein:
PREFservice/M is the network prefix used for the service provided by the operator
Ni/Mi is one of the (IPv4 or IPv6) prefixes of the destination site (Ak) which is reachable by the destination interface (IFAk)
VPNA is the identifier of the common virtual private network to which belong sites Aj and Ak, VPNA being coded on MVPN bits PREFfeed/Mf is a constant field of bits with which the length of the address may be adjusted
Sx is a field of bits which may assume any value and which is a suffix of the address.