Translating network address
AssigneeHewlett Packard Enterprise Development LP
InventorYu Mao
Life of this patent
Estimating the term…
Abstract
In a process of establishing a tunnel between a Hub device and a Spoke device, the Hub device in a DVPN obtains a public address and port information of a device in a public network after the public address and the port information are translated through a NAT device. The Hub device transmits the public address and the port information of the Spoke device to a server in the DVPN, so that another Spoke device obtains the public address and the port information to establish a direct tunnel with the Spoke device.
Claims10
A method for translating a network address, comprising:
- obtaining, by a Hub device in a Dynamic Virtual Private Network (DVPN), a packet from a first Spoke device to establish a tunnel between the Hub device and the first Spoke device;
- determining whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
- in response to determining that the public network address carried in the packet head of the packet is dissimilar to the public network address carried in the payload of the packet:
- obtain the public network address and port information carried in the packet head;
- and
- determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device;
- and
- based on the determination that the public network address and the port information have been translated through the NAT device, transmitting, by the Hub device, the public address and the port information of the first Spoke device to a server in the DVPN so a second Spoke device can establish a direct tunnel with the first Spoke device.
An apparatus for translating a network address, comprising:
- a memory comprising instructions;
- and
- a processor to execute the instructions to:
- obtain a packet from a Spoke device to establish a tunnel between a Hub device and the Spoke device;
- determine whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
- in response to a determination that the public network address carried in the packet head of the packet is dissimilar to the public network address carried in the payload of the packet:
- obtain the public network address and port information carried in the packet head;
- and
- determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device;
- and
- based on the determination that the public network address and the port information have been translated through the NAT device, transmit the public address and the port information to a server in a Dynamic Virtual Private Network (DVPN) so another Spoke device is able to establish a direct tunnel with the first Spoke device.
A non-transitory machine readable storage medium comprising instructions that, when executed, cause a machine to at least:
- obtain a packet from a Spoke device to establish a tunnel between a Hub device and the Spoke device;
- determine whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
- in response to a determination that the public network address carried in a packet head of the packet is dissimilar to the public network address carried in a payload of the packet:
- obtain the public network address and port information carried in the packet head;
- and
- determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device;
- and
- based on the determination that the public network address and the port information have been translated through the NAT device, transmit the public address and the port information of the Spoke device to a server in a Dynamic Virtual Private Network (DVPN) so another Spoke device is able to establish a direct tunnel with the first Spoke device.
Dependencies are inferred from the claim text.