IP Library › Granted Patent US 11,799,688
Granted Patent B2
US 11,799,688 · App. 17/106,931 · Granted Oct 24, 2023

Method for managing virtual private network, and device

Inventors: Shunwan Zhuang (Beijing, CN); Haibo Wang (Beijing, CN); Penghui Mi (Dongguan, CN); Yunan Gu (Beijing, CN); Gang Yan (Beijing, CN); Zhenbin Li (Beijing, CN)
Assignee: HUAWEI TECHNOLOGIES CO., LTD.
H04L12/4675H04L45/02H04L45/04H04L45/34H04L45/507
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 11,799,688
App. No.
17/106,931
Granted
Oct 24, 2023
Kind
B2
Abstract

In a method for managing a VPN, a routing device establishes a BMP session with a BMP server. The routing device allocates a VPN label associated with a VPN instance, wherein the VPN instance is used for communication between the routing device and another routing device. Then, the routing device sends, to the BMP server, a BMP message that carries the VPN label. Because the routing device sends the VPN label through the BMP message, the routing device does not need to establish a BGP peer relationship with the BMP server to send the VPN label.

Claims (40)

1. A method implemented by a first routing device, wherein the method comprises:

establishing a Border Gateway Protocol (BGP) Monitoring Protocol (BMP) session with a BMP server;

allocating a virtual private network (VPN) label associated with a VPN instance for communication between the first routing device and a second routing device, wherein the VPN label is configured to be carried-in data packets received by the first routing device from the second routing device; and

sending, to the BMP server, a BMP message comprising the VPN label.

2. The method of claim 1 , wherein the BMP message is an extended peer up notification message comprising a type-length-value (TLV), and wherein the TLV comprises the VPN label.

3. The method of claim 1 , wherein the BMP message is a newly-defined BMP message comprising a protocol data unit (PDU), and wherein the PDU comprises the VPN label.

4. The method of claim 3 , wherein the PDU comprises an identifier of the VPN instance and a corresponding relationship between the VPN label and an Internet Protocol (IP) address segment to which an IP address of a user equipment (UE) belongs.

5. The method of claim 1 , wherein the VPN label is a multi-protocol label switching (MPLS) label or a Segment Routing over IPv6 (SRv6) segment identifier (SID).

6. The method of claim 1 , further comprising:

receiving, from the second routing device, a data packet whose destination is a user equipment (UE) and which comprises the VPN label;

deleting the VPN label in the data packet to obtain a processed data packet; and

sending the processed data packet to the UE based on the VPN label.

7. The method of claim 1 , further comprising establishing a BGP session between the first routing device and the second routing device, wherein the VPN label is allocated in response to establishing the BGP session between the first routing device and the second routing device.

8. The method of claim 1 , wherein the VPN label identifies the VPN instance.

9. A first routing device comprising:

a memory configured to store instructions; and

one or more processors coupled to the memory and configured to execute the instructions to:

establish a Border Gateway Protocol (BGP) Monitoring Protocol (BMP) session with a BMP server;

allocate a virtual private network (VPN) label associated with a VPN instance for communication between the first routing device and a second routing device, wherein the VPN label is configured to be carried in data packets received by the first routing device from the second routing device; and

send, to the BMP server, a BMP message comprising the VPN label.

10. The first routing device of claim 9 , wherein the BMP message is an extended peer up notification message comprising a type-length-value (TLV), and wherein the TLV comprises the VPN label.

11. The first routing device of claim 9 , wherein the BMP message is a newly-defined BMP message comprising a protocol data unit (PDU), and wherein the PDU comprises the VPN label.

12. The first routing device of claim 11 , wherein the PDU comprises an identifier of the VPN instance and a corresponding relationship between the VPN label and an Internet Protocol (IP) address segment to which an IP address of a user equipment (UE) belongs.

13. The first routing device of claim 9 , wherein the VPN label is a multi-protocol label switching (MPLS) label or a Segment Routing over IPv6 (SRv6) segment identifier (SID).

14. The first routing device of claim 9 , wherein the one or more processors are further configured to:

receive, from the second routing device, a data packet whose destination is a user equipment (UE) and which comprises the VPN label;

delete the VPN label in the data packet to obtain a processed data packet; and

send the processed data packet to the UE based on the VPN label.

15. The first routing device of claim 9 , wherein the one or more processors are further configured to establish a BGP session between the first routing device and the second routing device, and wherein the VPN label is allocated in response to establishing the BGP session between the first routing device and the second routing device.

16. The first routing device of claim 9 , wherein the VPN label identifies the VPN instance.

17. A computer program product comprising instructions stored on a non-transitory computer-readable medium that, when executed by one or more processors, cause a first routing device to:

establish a Border Gateway Protocol (BGP) Monitoring Protocol (BMP) session with a BMP server;

allocate a virtual private network (VPN) label associated with a VPN instance for communication between the first routing device and a second routing device, wherein the VPN label is configured to be carried in data packets received by the first routing device from the second routing device; and

send, to the BMP server, a BMP message comprising the VPN label.

18. The computer program product of claim 17 , wherein the one or more processors are further configured to execute the instructions to cause the first forwarding device to:

receive, from the second routing device, a data packet whose destination is a user equipment (UE) and which comprises the VPN label;

delete the VPN label in the data packet to obtain a processed data packet; and

send the processed data packet to the UE based on the VPN label.

19. The computer program product of claim 17 , wherein the one or more processors are further configured to execute the instructions to cause the first forwarding device to establish a BGP session between the first routing device and the second routing device, and wherein the VPN label is allocated in response to establishing the BGP session between the first routing device and the second routing device.

20. The computer program product of claim 17 , wherein the VPN label identifies the VPN instance.

Assignments (1)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded May 11, 2021
From: ZHUANG, SHUNWAN; WANG, HAIBO; MI, PENGHUI; GU, YUNAN; YAN, GANG; LI, ZHENBIN
To: HUAWEI TECHNOLOGIES CO., LTD.
Reel/Frame 056200/0515 →
Priority Claims (1)
CN 201810555302.3 · Jun 1, 2018 · national
Continuity (2)
Continuation PCTCN2019088912 · May 29, 2019
Related Publication 20210083902A1 · Mar 18, 2021