Dissemination of NAT traversal attributes in a control plane protocol
AssigneeViptela Inc.
InventorLars Olof Stefan Olofsson
Life of this patent
Estimating the term…
Abstract
A method for creating a secure network is provided. The method comprises establishing a controller for a plurality of edge nodes in the network; configuring each edge node to perform a discovery operation to discover Network Address Traversal (NAT) information for any NAT device associated with said edge node; and configuring each edge node to transmit any NAT information discovered through said discovery operation to the controller; and configuring the controller to distribute the NAT information received from the plurality of edge node to each edge node.
Claims16
A method for creating a secure network, comprising:
- establishing a controller for a plurality of edge nodes in the network;
- configuring each edge node to perform a discovery operation to discover Network Address Translator (NAT) information for any NAT device associated with said edge node;
- and
- configuring each edge node to transmit any NAT information discovered through said discovery operation to the controller;
- and
- configuring the controller to distribute the NAT information received from the plurality of edge node to each edge node;
- configuring a first edge node from the plurality of edge nodes to establish a secure communications session with a second edge node from the plurality of edge nodes in accordance with a connection protocol configured based on availability of information selected from the group consisting of policy, NAT information, data plane information, a remote action, and third party stitching information;
- wherein the connection protocol is biased to establish the secure communications session based on policy and based on NAT information associated with the second edge node if said policy is not available.
A method for a first edge node in a network to create a secure communications session with a second edge node in the network, comprising:
- performing a discovery operation by the first edge node to discover Network Address Translator (NAT) information for any NAT device associated with said first edge node;
- and
- transmitting any NAT information discovered through said discovery operation to a controller for the network;
- selectively receiving NAT information for any NAT devices associated with other edge nodes in the network;
- and
- establishing the secure communications in accordance with a connection protocol configured based on availability of information selected from the group consisting of policy, NAT information, data plane information, a remote action, and third party stitching information;
- wherein the connection protocol is biased to establish the secure communications session based on policy and based on NAT information associated with the second edge node if said policy is not available.
A non-transitory computer-readable medium, having stored instructions which when executed by a first edge node in a network causes the first edge node perform a method to create a secure communications session with a second edge node in the network, comprising:
- performing a discovery operation by the first edge node to discover Network Address Translator (NAT) information for any NAT device associated with said first edge node;
- and
- transmitting any NAT information discovered through said discovery operation to a controller for the network;
- selectively receiving NAT information for any NAT devices associated with other edge nodes in the network;
- and
- establishing the secure communications in accordance with a connection protocol configured based on availability of information selected from the group consisting of policy, NAT information, data plane information, a remote action, and third party stitching information;
- wherein the connection protocol is biased to establish the secure communications session based on policy and based on NAT information associated with the second edge node if said policy is not available.
An edge node, comprising:
- a processor;
- and
- a memory coupled to the processor, the memory storing instructions which when executed by the processor causes the edge node to perform a method to create a secure communications session with a second edge node in a network, comprising:
- performing a discovery operation by the first edge node to discover Network Address Translator (NAT) information for any NAT device associated wife said first edge node;
- and
- transmitting any NAT information discovered through said discovery operation to a controller for the network;
- selectively receiving NAT information for any NAT devices associated with other edge-nodes in the network;
- and
- establishing the secure communications in accordance with a connection protocol configured based on availability of information selected from the group consisting of policy, NAT information, data plane information, a remote action, and third party stitching information;
- wherein the connection protocol is biased to establish the secure communications session based on policy and based on NAT information associated with the second edge node if said policy is not available.
Dependencies are inferred from the claim text.