Methods and apparatus for virtual private network based mobility
AssigneeCisco Technology, Inc.
InventorsKeng Leung, Alpesh S. Patel
Life of this patent
Estimating the term…
Abstract
Methods and apparatus for enabling VPN based mobility are provided. A VPN client having a client subnetwork address corresponding to a particular subnetwork can create a VPN tunnel using an enterprise address from a VPN server. Using the VPN tunnel, the VPN client can establish sessions with a variety of destination nodes including destination nodes on a private or enterprise network associated with the VPN server. When the client moves, the VPN client can acquire a new address that may correspond to a new subnetwork, but the VPN server provides the VPN client with the same enterprise address. Accordingly, the VPN client can maintain existing sessions with destination nodes using the same enterprise address.
Claims63
A method for allowing VPN based mobile communications in a network having a VPN server and a VPN client, the method comprising:
- receiving a first message from the VPN client, the first message having a first address associated with a first subnetwork as a source address and an enterprise address as an encapsulated address;
- maintain an association between the enterprise address and the VPN client;
- receiving a second message from the VPN client, the second message having a second address associated with a second subnetwork as the source address and the enterprise address as the encapsulated address, wherein using the some enterprise address allows VPN based mobile communications when a VPN client moves from the first subnetwork to the second subnetwork.
An apparatus for allowing VPN based mobile communications in a network having a VPN server and a VPN client, the apparatus comprising:
- means for receiving a first message from the VPN client, the first message having a first address associated with a first subnetwork as a source address and an enterprise address as an encapsulated address;
- means for maintaining an association between the enterprise address and the VPN client;
- means for receiving a second message from the VPN client, the second message having a second address associated with a second subnetwork as the source address and the enterprise address as the encapsulated address, wherein using the same enterprise address allows VPN based mobile communications when a VPN client moves from the first subnetwork to the second subnetwork.
A computer readable medium comprising computer code for allowing VPN based mobile communications in a network having a VPN server and a VPN client, the computer readable medium comprising:
- computer code for receiving a first message from the VPN client, the first message having a first address associated with a first subnetwork as a source address and an enterprise address as an encapsulated address;
- computer code for maintaining an association between the enterprise address and the VPN client,
- computer code for receiving a second message from the VPN client, the second message having a second address associated with a second subnetwork as the source address and the enterprise address as the encapsulated address, wherein using the same enterprise address allows VPN based mobile communications when a VPN client moves from the first subnetwork to the second subnetwork.
A method for allowing communication in a network having a VPN server and a VPN client, the method comprising:
- transmitting a first message to the VPN server with a first address associated with a first subnetwork as a source address and an enterprise address as an encapsulated address;
- detecting a change in location of the VPN client from the first subnetwork to a second subnetwork;
- transmitting a second message to the VPN server with a second address associated with the second subnetwork as the source address and the enterprise address as the encapsulated address, wherein encapsulating the same enterprise address allows communication when a VPN client moves from a first subnetwork to a second subnetwork.
An apparatus for allowing communication in a network having a VPN server and a VPN client, the apparatus comprising:
- memory,
- a processor coupled to memory, the processor configured to transmit a first message to the VPN server with a first address associated with a first subnetwork as a source address and an enterprise address as an encapsulated address, detect a change in location of the VPN client from the first subnetwork to a second subnetwork and transmit a second message to the VPN server with a second address associated with the second subnetwork as the source address and the enterprise address as the encapsulated address, wherein encapsulating the same enterprise address allows communication when a VPN client moves from a first subnetwork to a second subnetwork.
Dependencies are inferred from the claim text.