Loading patent…
AssigneeHuawei Technologies Co., Ltd.
InventorsZhikang Pian, Tianping Guo, Donglei Pang, Jiajia Dong, Cheng Sheng, Di Hu, Haiyan Jin, Tao Tian
Estimating the term…
This disclosure provides a secure packet transmission method, a method for negotiating an internet protocol security security association (IPsec SA), and a related apparatus, and is applied to a wide area network. In a scenario of crossing a plurality of segments of tunnels, an IPsec SA used for end-to-end security protection is negotiated between a first site edge and a second site edge based on a virtual routing and forwarding (VRF) granularity by extending a border gateway protocol (BGP) route. After performing security protection on a virtual private network (VPN) service packet based on the IPsec SA, the first site edge sends the packet through an overlay end-to-end tunnel between the first site edge and the second site edge, and the second site edge processes the packet based on the IPsec SA, to obtain the VPN service packet.
A method for negotiating an internet protocol security security association (IPsec SA), comprising:
A method for negotiating an internet protocol security security association (IPsec SA), comprising:
A network device, used as a first site edge in a wide area network (WAN), comprising:
Dependencies are inferred from the claim text.