Connectivity system for multi-tenant access networks
AssigneeCisco Technology, Inc.
InventorsRajeev Koodli, Anand Oswal
Life of this patent
Estimating the term…
Abstract
A system may provide connectivity service in a multi-tenant network. A first node in the multi-tenant network can receive data packets, each of the data packets identifying one of a plurality of tenant devices. The first node can determine an Internet Protocol (IP) address associated with each of the data packets. The first node can determine a Virtual Local Area Network Identifier (VLAN ID) based on the IP address, the VLAN ID being a unique identifier of a respective one of the tenants. The first node can add the VLAN ID of a corresponding one of the tenants into a header of each of the data packets. The first node can transport the data packets to a second node in the multi-tenant network via a multi-tenant network tunnel protocol.
Claims20
A system for providing connectivity service in a multi-tenant network, comprising:
- a first node;
- a second node in communication with the first node over the multi-tenant network;
- the first node configured to receive a plurality of data packets, each of the data packets identifying one of a plurality of tenant devices, wherein each of the plurality of tenant devices is associated with one of a plurality of tenants;
- the first node further configured to determine an Internet Protocol (IP) address associated with each of the data packets;
- the first node further configured to determine a Virtual Local Area Network Identifier (VLAN ID) based on the IP address, the VLAN ID being a unique identifier of a respective one of the tenants;
- the first node further configured to add the VLAN ID of a corresponding one of the tenants into a header of each of the data packets;
- and
- the first node further configured to transport the data packets to the second node via a multi-tenant network tunnel protocol.
A method for forwarding data packets in a multi-tenant network, comprising:
- receiving with a first node a plurality of data packets associated with a plurality of tenant devices, wherein each of the plurality of tenant devices is associated with one of a plurality of tenants;
- determining with the first node an Internet Protocol (IP) address associated with each of the data packets;
- determining with the first node a tenant identifier based on the IP address, the tenant identifier being a unique identifier of a respective one of the tenants;
- adding with the first node the tenant identifier corresponding to one of the tenants into a header of each of the data packets;
- and
- transporting the data packets between the first node and a second node via a multi-tenant network tunnel protocol.
A tangible computer-readable media comprising a plurality of instructions for execution with a processor, the tangible computer-readable medium comprising:
- instructions executable to receive data packets from a tenant device associated with one of a plurality of tenants;
- instructions executable to identify a tenant from among the plurality of tenants based on the received data packets;
- instructions executable to insert an identifier uniquely associated with the tenant in a header of the data packets;
- instructions executable to transport the data packets from a customer premises equipment (CPE) device to a mobile gateway via a multi-tenant network tunnel protocol, wherein the data packets include the identifier associated with the tenant;
- instructions executable to determine a policy profile of the tenant based on the identifier;
- and
- instructions executable to apply policy rules to the data packets based on the policy profile.
Dependencies are inferred from the claim text.