Back to results
US 9,756,013 B2Granted
Distributed mapping of address and port (MAP) between a provider edge device and customer premise equipment devices
AssigneeCisco Technology, Inc.
InventorsRajiv Asati, Wojciech Dec, Yixing Ruan
Life of this patent
Estimating the term…
Abstract
In one embodiment, a provider edge (PE) device in a computer network determines an IPv4 address and link-layer address for each adjacent customer premise equipment (CPE) device, and assigns each CPE device a unique IPv6 address. The PE device stores a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each adjacent CPE, the mapping bound by a CPE session context, and uses the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device.
Claims21
A method, comprising:
- determining, by a provider edge (PE) device in a computer network, an IPv4 address and link-layer address for each customer premise equipment (CPE) device that is connected to a provider network through the PE device, wherein the PE device is a next hop from the CPE device;
- assigning, by the PE device, each CPE device a unique IPv6 address;
- in response to assigning, storing, by the PE device, a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each CPE device that is connected to the provider network through the PE device, the mapping bound by a CPE session context, wherein the CPE session context is at least one of an IP Session, IP Connectivity Access Session (IP-CAN), or a Service-Flow;
- and
- using, by the PE device, the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device, wherein the key-pair mapping is separated from stateful forwarding associated with a particular port range within bounds of port range restriction information executing on each CPE respectively;
- and
- communicating, by the PE device, the converted network traffic to and from the particular CPE.
4 more elements
A method, comprising:
- receiving, by a customer premise equipment (CPE) device in a computer network, a shared and public IPv4 address for the CPE device along with port range restriction information;
- enabling the CPE device with port-restricted NAT44;
- configuring the CPE device to use a particular port range within bounds of the port range restriction information;
- communicating IPv4 packets with an IPv6-connected provider edge (PE) device that connects CPE device to a provider network, a CPE session context of the IPv4 packets allowing the PE device to convert between IPv4 and IPv6 for all network traffic to and from the CPE device, wherein the PE device is a next hop from the CPE device, wherein the CPE session context is at least one of an IP Session, IP Connectivity Access Session (IP-CAN), or a Service-Flow, wherein key-pair mapping is executed on the PE and stateful forwarding is executed on the CPE device, and
- receiving an IPv6 prefix for the CPE device from the PE device, wherein the IPv6 prefix bound under a session keyed by an IPv4 address and link-layer addresses combination of the CPE device.
2 more elements
An apparatus, comprising:
- one or more network interfaces to communicate as a provider edge (PE) device in a computer network;
- a processor coupled to the network interfaces and adapted to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed operable to:
- determine an IPv4 address and link-layer address for each customer premise equipment (CPE) device that connects to a provider network through the apparatus;
- assign each CPE device a unique IPv6 address;
- store a key-pair mapping between the unique IPv6 address and combined IPv4 and link-layer address for each CPE device that is connected to the provider network through the PE device, the mapping bound by a CPE session context, wherein the CPE session context is at least one of an IP Session, IP Connectivity Access Session (IP-CAN), or a Service-Flow, wherein the PE device is a next hop from the CPE device;
- and
- use the CPE session context to convert between IPv4 and IPv6 for all network traffic to and from a particular CPE device, wherein the key-pair mapping is separated from stateful forwarding associated with a particular port range within bounds of port range restriction information executing on each CPE respectively;
- and
- communicating the converted network traffic to and from the particular CPE.
8 more elements
An apparatus, comprising:
- one or more network interfaces to communicate as a customer premise equipment (CPE) device in a computer network;
- a processor coupled to the network interfaces and adapted to execute one or more processes;
- and
- a memory configured to store a process executable by the processor, the process when executed operable to:
- receive a shared and public IPv4 address for the CPE device along with port range restriction information;
- enable the CPE device with port-restricted NAT44;
- configure the CPE device to use a particular port range within hounds of the port range restriction information;
- communicate IPv4 packets with a IPv6-connected provider edge (PE) device that connects the apparatus to a provider network, a CPE session context of the IPv4 packets allowing the PE device to convert between IPv4 and IPv6 for all network traffic to and from the CPE device, wherein the CPE session context is at least one of an IP Session, IP Connectivity Access Session (IP-CAN), or a Service-Flow, wherein the PE device is a next hop from the CPE device, wherein the key-pair mapping is separated from stateful forwarding executing on the CPE device;
- receive an IPv6 prefix for the CPE device from the PE device, wherein the IPv6 prefix bound under a session Keyed by an IPv4 address and link-layer addresses combination of the CPE device.
6 more elements
Dependencies are inferred from the claim text.