Method and Related Apparatus for Authenticating Access of Virtual Private Cloud
AssigneeHuawei Technologies Co., Ltd.
InventorsYing Liu, Shihui Hu, Delei Yu
Life of this patent
Estimating the term…
Abstract
A method can be used for authenticating access of a virtual private cloud, which are used for performing VPC access authentication between networks that communicate with each other using an IP routing protocol. A VPN routing device receives a request for accessing a virtual private network VPN by a virtual private cloud VPC. The request is sent by a cloud manager. The request for accessing a VPN by a VPC carries an identifier of a bearer network of a target VPN and a VPN identifier. The VPN routing device sends the VPC access request to a network edge device corresponding to the identifier of the bearer network. The VPC access request carries the VPN identifier.
Claims20
A method for authenticating access of a virtual private cloud (VPC), the method comprising:
- receiving, by a virtual private network (VPN) routing device, a request for accessing a VPN by a VPC, wherein the request is sent by a cloud manager and carries an identifier of a bearer network of a target VPN and a VPN identifier;
- and
- sending, by the VPN routing device, the VPC access request to a network edge device corresponding to the identifier of the bearer network, wherein the VPC access request carries the VPN identifier.
A method for authenticating access of a virtual private cloud (VPC), the method comprising:
- receiving, by a cloud manager, a VPC creation request, wherein the VPC creation request comprises an identifier of a bearer network of a target virtual private network (VPN) and a VPN identifier;
- searching, by the cloud manager, for a VPN routing device connected to the bearer network according to the identifier of the bearer network;
- and
- sending, by the cloud manager, a request for adding a VPC into a VPN to the VPN routing device, wherein the request for accessing a VPN by a VPC carries the identifier of the bearer network and the VPN identifier.
A method for authenticating access of a virtual private cloud (VPC), the method comprising:
- receiving, by a cloud manager, a VPC creation request, wherein the VPC creation request comprises a virtual private network (VPN) identifier of a target VPN and wherein it's the target VPN corresponds to a unique bearer network;
- and
- sending, by the cloud manager, a request for adding a VPC into a VPN to a VPN routing device connected to the bearer network, wherein the request for accessing a VPN by a VPC carries the VPN identifier.
A method for authenticating access of a virtual private cloud (VPC), the method comprising:
- receiving, by a network edge device, a VPC access request sent by a virtual private network (VPN) routing device, wherein the VPC access request carries a VPN identifier of a target VPN;
- sending, by the network edge device, an authentication request to an authentication system to which a bearer network of the target VPN corresponds, wherein the authentication request carries the VPN identifier;
- determining that the authentication is successful;
- receiving, by the network edge device, a VPN configuration parameter sent by the authentication system;
- and
- returning an authentication response to the VPN routing device, wherein the authentication response carries the VPN configuration parameter.
A method for deleting a virtual private cloud (VPC), the method comprising:
- receiving, by a cloud manager, a first VPC deletion request, wherein the first VPC deletion request carries a VPC identifier;
- searching, by the cloud manager, for a bearer network of a target virtual private network (VPN) according to the VPC identifier;
- determining a VPN routing device connected to the bearer network and a network edge device address;
- and
- sending, by the cloud manager, a second VPC deletion request to the VPN routing device, wherein the second VPC deletion request carries the network edge device address and the VPC identifier.
A virtual private network (VPN) routing device, comprising:
- a first receiving unit, configured to receive a request for accessing a VPN by a virtual private cloud (VPC), sent by a cloud manager, wherein the request for accessing a VPN by a VPC carries an identifier of a bearer network of a target VPN and a VPN identifier;
- and
- a sending unit, configured to send the VPC access request to a network edge device corresponding to the identifier of the bearer network, wherein the VPC access request carries the VPN identifier.
A virtual private network (VPN) routing device, comprising:
- a VPN request receiving unit, configured to receive a request for accessing a VPN by a virtual private cloud (VPC), sent by a cloud manager, wherein the request for accessing a VPN by a VPC carries a VPN identifier of a target VPN, and the target VPN corresponds to a unique network edge device;
- and
- an access request sending unit, configured to send the VPC access request to the network edge device, wherein the VPC access request carries the VPN identifier.
A network edge device, comprising:
- an access request receiving unit, configured to receive a virtual private cloud (VPC) access request sent by a virtual private network (VPN) routing device, wherein the VPC access request carries a VPN identifier of a target VPN;
- an authentication request sending unit, configured to send an authentication request to an authentication system a bearer network of the target VPN corresponds to, wherein the authentication request carries the VPN identifier;
- and
- an authentication responding unit, configured to, if the authentication is successful, receive a VPN configuration parameter sent by the authentication system and to return an authentication response to the VPN routing device, wherein the authentication response carries the VPN configuration parameter.
Dependencies are inferred from the claim text.