Method of connecting security gateway to mesh network
View Patent ↗In this invention we disclose methods for incorporating a security gateway within a wireless mesh network. In one embodiment, the wireless mesh network is a heterogeneous mesh network. In one embodiment, a gateway node, which is part of the wireless mesh network, requests a connection to the core network through a security gateway. The security gateway responds by creating an IPSec tunnel and a GRE tunnel within the IPSec tunnel from itself to the gateway node. Once the gateway node is communicatively coupled to the security gateway via secure tunneling, the gateway node sends a mesh routing protocol to the security gateway.
1. A method of incorporating a security gateway within a mesh network comprising:
receiving at a security gateway a request to initiate creation of an internet protocol (IP) security tunnel from the security gateway to a gateway node, the gateway node being a mesh node of a mesh network;
creating the IP security tunnel from the security gateway to the gateway node;
creating a generic routing encapsulation (GRE) Layer 2 tunnel inside of the IP security tunnel;
requesting at the security gateway an IP-protocol mesh routing table from the gateway node; and
receiving at the security gateway the IP-protocol mesh routing table from the gateway node,
wherein the IP-protocol mesh routing table includes a route to a second non-gateway mesh node via the gateway node.
2. The method of claim 1 , further comprising analyzing, at the security gateway, the mesh routing table to determine a routing path for data transmission with improved mesh throughput.
3. The method of claim 1 , further comprising advertising a default route.
4. The method of claim 1 , wherein the security gateway is at a second mesh node of the mesh network.
5. The method of claim 1 , further comprising sending the mesh routing table to a core network server.
6. The method of claim 1 , further comprising:
requesting and receiving a second mesh routing table from a second gateway node;
keeping the mesh routing table independent from the second gateway node; and
keeping the second mesh routing table independent from the gateway node.
7. The method of claim 1 , wherein the mesh routing table is a single route.
8. The method of claim 1 , wherein the mesh routing table is a portion of a routing table.
9. A non-transitory computer readable storage medium, storing thereon a computer program comprising instructions that, when executed by a computer system, cause the computer system to perform operations comprising:
receiving at a security gateway a request to initiate creation of an internet protocol (IP) security tunnel from the security gateway to a gateway node, the gateway node being a mesh node of a mesh network;
creating the IP security tunnel from the security gateway to the gateway node;
creating a generic routing encapsulation (GRE) Layer 2 tunnel inside of the IP security tunnel;
requesting at the security gateway an IP-protocol mesh routing table from the gateway node; and
receiving at the security gateway the IP-protocol mesh routing table from the gateway node,
wherein the IP-protocol mesh routing table includes a route to a second non-gateway mesh node via the gateway node.
10. The non-transitory computer readable storage medium of claim 9 , the instructions further comprising analyzing, at the security gateway, the mesh routing table to determine a routing path for data transmission with improved mesh throughput.
11. The non-transitory computer readable storage medium of claim 9 , the instructions further comprising advertising a default route.
12. The non-transitory computer readable storage medium of claim 9 , wherein the security gateway is at a second mesh node of the mesh network.
13. The non-transitory computer readable storage medium of claim 9 , the instructions further comprising sending the mesh routing table to a core network server.
14. The non-transitory computer readable storage medium of claim 12 , the instructions further comprising:
requesting and receiving a second mesh routing table from a second gateway node;
keeping the mesh routing table independent from the second gateway node; and
keeping the second mesh routing table independent from the gateway node.
15. The non-transitory computer readable storage medium of claim 9 , wherein the mesh routing table is a single route.
16. The non-transitory computer readable storage medium of claim 9 , wherein the mesh routing table is a portion of a routing table.