Translating network address

Patent metadata

Field	Value
Publication number	US-9871762-B2
Application number	US-201414899471-A
Country	US
Kind code	B2
Filing date	Aug 27, 2014
Priority date	Aug 30, 2013
Publication date	Jan 16, 2018
Grant date	Jan 16, 2018

Abstract

In a process of establishing a tunnel between a Hub device and a Spoke device, the Hub device in a DVPN obtains a public address and port information of a device in a public network after the public address and the port information are translated through a NAT device. The Hub device transmits the public address and the port information of the Spoke device to a server in the DVPN, so that another Spoke device obtains the public address and the port information to establish a direct tunnel with the Spoke device.

First claim

What is claimed is:

1. A method for translating a network address, comprising:
obtaining, by a Hub device in a Dynamic Virtual Private Network (DVPN), a packet from a first Spoke device to establish a tunnel between the Hub device and the first Spoke device;
determining whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
in response to determining that the public network address carried in the packet head of the packet is dissimilar to the public network address carried in the payload of the packet:
obtain the public network address and port information carried in the packet head; and
determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device; and

based on the determination that the public network address and the port information have been translated through the NAT device, transmitting, by the Hub device, the public address and the port information of the first Spoke device to a server in the DVPN so a second Spoke device can establish a direct tunnel with the first Spoke device.

2. The method of claim 1 , further comprising:
transmitting, by the second Spoke device, a request packet to the server when there are data stream to be transmitted from the second Spoke device to the first Spoke device;
receiving, by the second Spoke device, a response packet corresponding to the request packet, wherein the response packet carries the public address and the port information of the first Spoke device, the response packet is transmitted from the server, so that the second Spoke device uses the public address and the port information of the first Spoke device to establish the direct connection with the first Spoke device.

3. The method of claim 1 , wherein the tunnel established between the Hub device and the first Spoke device comprises at least one of an Internet Protocol Security (IPSec) tunnel and a DVPN User Datagram Protocol (UDP) tunnel.

4. The method of claim 1 , wherein the public network comprises an Ipv4 network.

5. An apparatus for translating a network address, comprising:
a memory comprising instructions; and
a processor to execute the instructions to:
obtain a packet from a Spoke device to establish a tunnel between a Hub device and the Spoke device;
determine whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
in response to a determination that the public network address carried in the packet head of the packet is dissimilar to the public network address carried in the payload of the packet:
obtain the public network address and port information carried in the packet head; and
determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device; and

based on the determination that the public network address and the port information have been translated through the NAT device, transmit the public address and the port information to a server in a Dynamic Virtual Private Network (DVPN) so another Spoke device is able to establish a direct tunnel with the first Spoke device.

6. The apparatus of claim 5 , wherein the tunnel established between the Hub device and the Spoke device comprises at least one of an Internet Protocol Security (IPSec) tunnel and a DVPN User Datagram Protocol (UDP) tunnel.

7. The apparatus of claim 5 , wherein the public network comprises an Ipv4 network.

8. A non-transitory machine readable storage medium comprising instructions that, when executed, cause a machine to at least:
obtain a packet from a Spoke device to establish a tunnel between a Hub device and the Spoke device;
determine whether a public network address carried in a packet head of the packet is dissimilar to a public network address carried in a payload of the packet;
in response to a determination that the public network address carried in a packet head of the packet is dissimilar to the public network address carried in a payload of the packet:
obtain the public network address and port information carried in the packet head; and
determine that the public network address and the port information carried in the packet head have been translated through a network address translation (NAT) device; and

based on the determination that the public network address and the port information have been translated through the NAT device, transmit the public address and the port information of the Spoke device to a server in a Dynamic Virtual Private Network (DVPN) so another Spoke device is able to establish a direct tunnel with the first Spoke device.

9. The non-transitory storage medium of claim 8 , wherein the tunnel established between the Hub device and the Spoke device comprises at least one of an Internet Protocol Security (IPSec) tunnel and a DVPN User Datagram Protocol (UDP) tunnel.

10. The non-transitory storage medium of claim 8 , wherein the public network comprises an Ipv4 network.

Assignees

• Hangzhou H3C Tech Co Ltd
• Hewlett Packard Entpr Dev Lp

Inventors

• Mao Yu

Classifications

• H04L12/4633 Primary

  Interconnection of networks using encapsulation techniques, e.g. tunneling · CPC title

• H04L45/74

  Address processing for routing · CPC title

• H04L61/2557

  Translation policies or rules · CPC title

• H04L61/2517

  using port numbers · CPC title

• H04L61/2514

  between local and global IP addresses · CPC title