Virtual Private Network Client Internet Protocol Conflict Detection
The present disclosure discloses a network device and/or method for virtual private network client Internet Protocol (IP) address conflict detection in the wireless network. The network device receives, from a VPN client, a message that includes a first private IP address corresponding to a VPN client, and re-allocates a second private IP address corresponding to the same VPN client. The second private IP address resolves an IP address conflict between a tentative private IP address allocated for the VPN client by the VPN server within the wireless network and the first private IP address allocated for the VPN client by an ISP server external to the wireless network. The network device also transmits the first private IP address and the second private IP address in a single message, such as a single IP data packet, to the VPN client.
1 . A method comprising:
receiving, at a network device in a wireless network, a message from a virtual private network (VPN) client, wherein the message comprises a first private Internet Protocol (IP) address corresponding to the VPN client; and
re-allocating, by the network device, a second private IP address corresponding to the VPN client, wherein the second private IP address resolves an IP address conflict between a tentatively allocated private IP address corresponding to the VPN client and the first private IP address.
2 . The method of claim 1 , further comprising:
allocating, by the network device, the tentative private IP address corresponding to the VPN client;
extracting, by the network device, the first private IP address from the received message; and
determining, by the network device, whether the tentative private IP address is in conflict with the first private IP address.
3 . The method of claim 2 , wherein re-allocating the second private IP address corresponding to the VPN client is performed in response to determining that the tentative private IP address is in conflict with the first private IP address.
4 . The method of claim 1 , wherein the second private IP address is different from the tentatively allocated IP address corresponding to the VPN client.
5 . The method of claim 1 , further comprising:
transmitting, by the network device, the second private IP address and the first private IP address to the VPN client in a single message in response to re-allocating the second private IP address.
6 . The method of claim 5 , wherein the second private IP address is included as an inner IP address in the single message, and wherein the first private IP address is include as an outer IP address in the single message.
7 . The method of claim 1 ,
wherein the first private IP address is allocated by an ISP server external to the wireless network, and
wherein the tentatively allocated IP address and the second private IP address are both allocated by a VPN server within the wireless network.
8 . A network device comprising:
a processor;
a memory;
a receiving mechanism coupled to the processor, the receiving mechanism to receive a message from a virtual private network (VPN) client, wherein the message comprises a first private Internet Protocol (IP) address corresponding to the VPN client; and
an assigning mechanism coupled to the processor, the assigning mechanism to re-allocating a second private IP address corresponding to the VPN client, wherein the second private IP address resolves an IP address conflict between a tentatively allocated private IP address corresponding to the VPN client and the first private IP address.
9 . The network device of claim 8 ,
wherein the assigning mechanism further allocates the tentative private IP address corresponding to the VPN client; and
wherein the network device further comprises a detecting mechanism coupled to the process, the detecting mechanism to extract the first private IP address from the received message, and to determine whether the tentative private IP address is in conflict with the first private IP address.
10 . The network device of claim 9 , wherein the assigning mechanism re-allocates the second private IP address corresponding to the VPN client in response to the detecting mechanism determines that the tentative private IP address is in conflict with the first private IP address.
11 . The network device of claim 8 , wherein the second private IP address is different from the tentatively allocated IP address corresponding to the VPN client.
12 . The network device of claim 8 , further comprising a transmitting mechanism coupled to the processor, the transmitting mechanism to transmit the second private IP address and the first private IP address to the VPN client in a single message in response to re-allocating the second private IP address.
13 . The network device of claim 12 , wherein the second private IP address is included as an inner IP address in the single message, and wherein the first private IP address is include as an outer IP address in the single message.
14 . The network device of claim 8 ,
wherein the first private IP address is allocated by an ISP server external to the wireless network, and
wherein the tentatively allocated IP address and the second private IP address are both allocated by a VPN server within the wireless network.
15 . A non-transitory computer-readable storage medium storing embedded instructions that are executed by one or more mechanisms implemented within a network device to perform a plurality of operations comprising:
receiving a message from a virtual private network (VPN) client of a wireless network, wherein the message comprises a first private Internet Protocol (IP) address corresponding to the VPN client; and
re-allocating a second private IP address corresponding to the VPN client, wherein the second private IP address resolves an IP address conflict between a tentatively allocated private IP address corresponding to the VPN client and the first private IP address.
16 . The non-transitory computer-readable storage medium of claim 15 , wherein the plurality of operations further comprises:
allocating the tentative private IP address corresponding to the VPN client;
extracting the first private IP address from the received message; and
determining whether the tentative private IP address is in conflict with the first private IP address.
17 . The non-transitory computer-readable storage medium of claim 16 , wherein re-allocating the second private IP address corresponding to the VPN client is performed in response to determining that the tentative private IP address is in conflict with the first private IP address.
18 . The non-transitory computer-readable storage medium of claim 15 , wherein the second private IP address is different from the tentatively allocated IP address corresponding to the VPN client.
19 . The non-transitory computer-readable storage medium of claim 15 , wherein the plurality of operations further comprises:
transmitting the second private IP address and the first private IP address to the VPN client in a single message in response to re-allocating the second private IP address.
20 . The non-transitory computer-readable storage medium of claim 19 , wherein the second private IP address is included as an inner IP address in the single message, and wherein the first private IP address is include as an outer IP address in the single message.
21 . The non-transitory computer-readable storage medium of claim 15 ,
wherein the first private IP address is allocated by an ISP server external to the wireless network, and
wherein the tentatively allocated IP address and the second private IP address are both allocated by a VPN server within the wireless network.