Multi-access interface for internet protocol security
A method, system, and computer-usable medium are disclosed for providing a multi-access interface for network traffic, comprising: receiving information regarding topology of a virtual private network and storing the topology in the form of a routing table. A method, system, and computer-usable medium are disclosed for providing an interface for network traffic, comprising: in a virtual private network comprising a plurality of tunnels delivering only information associated with Open Systems Interconnect stack Level 3, receiving a network communication and performing multicast forwarding among the plurality of tunnels using multicast forwarding from Open Systems Interconnect stack Level 2. A method, system, and computer-usable medium are disclosed for providing an interface for network traffic, comprising, in a virtual private network: establishing a connection between a first node of the virtual private network and a second node serving as a virtual private network broker and fetching, by the first node from the virtual private network broker, information regarding one or more other nodes of the virtual private network.
1. A computer-implemented method for providing a multi-access interface for network traffic, comprising, in a virtual private network comprising a plurality of tunnels delivering only information associated with Open Systems Interconnect stack Level 3:
receiving a network communication;
performing multicast forwarding among the plurality of tunnels using multicast forwarding from Open Systems Interconnect stack Level 2, wherein performing multicast forwarding comprises forwarding multicast messages without verifying a time-to-live (TTL) value of the multicast messages and forwarding multicast messages to non-routable multicast addresses;
building a logical loop free topology of the virtual private network by modifying an Open Systems Interconnect Level 2 spanning tree protocol to operate at Open Systems Interconnect Level 3;
determining gateways of the virtual private network which are configured to receive multicast messages; and
limiting the multicast forwarding to the gateways of the virtual private network which are configured to receive multicast messages.
2. The computer-implemented method of claim 1 , wherein performing multicast forwarding comprises forwarding among the tunnels of the plurality of tunnels which reside in an Open Systems Interconnect Level 2 network.
3. The computer-implemented method of claim 1 , further comprising building multicast group delivery trees of nodes within the virtual private network by dividing gateways of the virtual private network into a plurality of multicast groups.
4. The computer-implemented method of claim 1 , further comprising, if the virtual private network has a hub-and-spoke topology, identifying, by a spoke gateway of the virtual private network, and selecting a single hub of the spoke gateway as multicast-enabled and exchanging multiple traffic only with the single hub.
5. The computer-implemented method of claim 1 , further comprising, if the virtual private network has a hub-and-spoke topology, building a logical loop free topology of the virtual private network by using Open Systems Interconnect Level 2 connectivity and performing forwarding between hub nodes of the hub-and-spoke topology.
6. The computer-implemented method of claim 1 , further comprising, if the virtual private network has a hub-and-spoke topology, utilizing full mesh connectivity among hub nodes.
7. The computer-implemented method of claim 6 , further comprising, when a hub receives multicast traffic from other than another hub, forwarding the multicast traffic to identified spoke nodes and all hub nodes.
8. The computer-implemented method of claim 6 , further comprising, when a hub receives multicast traffic from another hub, forwarding the multicast traffic only to identified spoke nodes.