Configuration of VPNs

Apparatus for configuring a virtual private network (VPN) within a shared network, comprising:

• means for creating a queue of configuration tasks for gateway devices belonging to the VPN, said configuration tasks including sending static network routing information to said gateway devices;
• means for repeatedly retrieving a next task from the queue;
• and
• means for interrogating the gateway device to which the task relates, to identify any change in subnetworks connected thereto since the task was created;
• wherein, if no change is identified, the retrieved task is performed, otherwise if a change is identified, update configuration tasks are created for all relevant gateway devices in the VPN;
• means for merging the update configuration task for each gateway device with any not yet performed task for that gateway device;
• and
• means for performing the task retrieved from the queue merged with the update task.

A computer program on computer readable medium loadable into a digital computer, including the following steps:

• creating a queue of configuration tasks for gateway devices belonging to the VPN, said configuration tasks including sending static network routing information to said gateway devices;
• and
• repeatedly retrieving a next task from the queue, wherein the retrieving further comprises:
• interrogating the gateway device to which the task relates, to identify any change in subnetworks connected thereto since the task was created;
• if no change is identified, performing the retrieved task;
• otherwise, if a change is identified, creating update configuration tasks for all relevant gateway devices in the VPN;
• merging the update task for each gateway device with any not yet performed task for that gateway device;
• and
• performing the task retrieved from the queue merged with the update task.