Dynamic bringup of secure tunneling of access-controlled network domain interconnect traffic

Abstract

Methods and devices provide improved secure tunneling of interconnect traffic across access-controlled network domains, by configuring network devices according to a dynamic tunnel bringup method to discover peer network devices, establish a tunnel gateway in a security association, monitor a security association session status, and update routing and forwarding tables in accordance. A processing unit of a network device configures the network device to discover a peer network device; update a next hop in a local routing table; establish a tunnel endpoint; encapsulate an encrypted packet with a SA tag; monitor a SA session status; and advertise routing information based on a monitored SA session status.

Dependencies are inferred from the claim text.