| US 7,542,476 B2 | ||
| Method and system for manipulating IP packets in virtual private networks | ||
| Guy Almog, Herzelia (Israel); and Eitan Bar, Tel-Aviv (Israel) | ||
| Assigned to Flash Networks Ltd, Herzliya (Israel) | ||
| Filed on Aug. 27, 2004, as Appl. No. 10/928,836. | ||
| Claims priority of provisional application 60/499236, filed on Aug. 29, 2003. | ||
| Prior Publication US 2005/0047329 A1, Mar. 03, 2005 | ||
| Int. Cl. H04L 12/26 (2006.01) | ||
| U.S. Cl. 370—401 [370/465] | 25 Claims |
| 1. A communication system for facilitating communication with a remote client over an IP network, wherein at least a portion
of the IP network includes a specific network segment, the communication system comprising:
a central operator premises that includes:
a local communication unit; and
a local manipulator having a second copy of a decentralized table;
a remote operator zone that includes:
a remote communication unit, the remote communication unit being communicatively coupled to the local communication unit through
the specific network segment; and
a remote manipulator having a first copy of the decentralized table;
a corporate local area networks;
the communication system being operable to manage a VPN tunnel between the remote client communicatively coupled to a remote
VPN unit and a corporate client communicatively coupled to a corporate VPN unit through the central operator and the remote
operator zone by:
receiving a first packet of a new VPN connection from the remote VPN at the remote manipulator;
creating a decentralized table entry with an identifier that is associated with the source and destination IP addresses of
the VPN packet and synchronizing the second copy of the decentralized table at the local manipulator;
modifying the destination IP address of the packet to be the IP address associated with the local manipulator;
receiving a packet, at the central operator premises, from the remote manipulator, the packet including data to identify an
appropriate entry in the decentralized table; and
modifying the destination address of the packet to be the IP address according to the data in the identified entry at the
second copy of the decentralized table.
|