Automatic on-boarding agent for IOT edge routers in connected vehicles

1. A method comprising:

establishing, by a master on-boarding agent executing remotely of a vehicle, a virtual private network (VPN) connection with a local on-boarding agent executed by a gateway of the vehicle, wherein the local on-boarding agent and the gateway are executing locally on the vehicle;

receiving, at the master on-boarding agent and via the VPN connection, vehicle data obtained by the local on-boarding agent from a co-pilot system of the vehicle;

configuring, by the master on-boarding agent and based on the received vehicle data, the gateway of the vehicle with a network configuration, wherein the network configuration includes an Internet Protocol (IP) address for the gateway; and

coordinating, by the master on-boarding agent and based on the network configuration, application of a security policy to the gateway.

2. The method as in claim 1 , wherein the master on-boarding agent establishes the VPN connection via a head end router.

3. The method as in claim 1 , further comprising:

configuring, by the master on-boarding agent and using the vehicle data, a subscriber identification module (SIM) card of the gateway.

4. The method as in claim 1 , wherein the vehicle data obtained by the local on-boarding agent includes a vehicle identifier for the vehicle.

5. The method as in claim 4 , further comprising:

providing, by the master on-boarding agent, the vehicle identifier and the IP address to a cloud-based gateway manager, wherein the gateway manager supervises the gateway via a wide area network (WAN) using the vehicle identifier and the IP address.

6. The method as in claim 4 , wherein the local on-boarding agent uses the vehicle identifier as a VPN identifier for the gateway in the established VPN connection.

7. The method as in claim 1 , wherein the master on-boarding agent obtains the IP address from an IP address management (IPAM) service using the received vehicle data.

8. The method as in claim 1 , wherein the vehicle data obtained by the local on-boarding agent includes a bundle identifier for the vehicle that is a combination of identifiers for components of the vehicle, and wherein the local on-boarding agent uses the bundle identifier as a VPN identifier for the gateway in the established VPN connection.

9. The method as in claim 1 , wherein the local on-boarding agent uses a serial number of the gateway as part of a VPN identifier for the gateway in the established VPN connection.

10. The method as in claim 9 , wherein the master on-boarding agent receives the serial number of the gateway encoded as a private IPv6 address.

11. An apparatus, comprising:

one or more network interfaces to communicate with a network;

a processor coupled to the network interfaces and configured to execute one or more processes; and

a memory configured to store a process executable by the processor, the process when executed configured to:

establish a virtual private network (VPN) connection with a local on-boarding agent executed by a gateway of a vehicle, wherein the local on-boarding agent and the gateway are executing locally on the vehicle;

receive, via the VPN connection, vehicle data obtained by the local on-boarding agent from a co-pilot system of the vehicle;

configure, based on the received vehicle data, the gateway of the vehicle with a network configuration, wherein the network configuration includes an Internet Protocol (IP) address for the gateway; and

coordinate, based on the network configuration, application of a security policy to the gateway,

wherein the apparatus comprises a master on-boarding agent executing remotely of the vehicle.

12. The apparatus as in claim 11 , wherein the apparatus establishes the VPN connection via a head end router.

13. The apparatus as in claim 11 , wherein the process when executed is further configured to:

configure, using the vehicle data, a subscriber identification module (SIM) card of the gateway.

14. The apparatus as in claim 11 , wherein the vehicle data obtained by the local on-boarding agent includes a vehicle identifier for the vehicle.

15. The apparatus as in claim 14 , wherein the process when executed is further configured to:

provide the vehicle identifier and the IP address to a cloud-based gateway manager, wherein the gateway manager supervises the gateway via a wide area network (WAN) using the vehicle identifier and the IP address.

16. The apparatus as in claim 14 , wherein the local on-boarding agent uses the vehicle identifier as a VPN identifier for the gateway in the established VPN connection.

17. The apparatus as in claim 11 , wherein the master on-boarding agent obtains the IP address from an IP address management (IPAM) service using the received vehicle data.

18. The apparatus as in claim 11 , wherein the vehicle data obtained by the local on-boarding agent includes a bundle identifier for the vehicle that is a combination of identifiers for components of the vehicle, and wherein the local on-boarding agent uses the bundle identifier as a VPN identifier for the gateway in the established VPN connection.

19. The apparatus as in claim 11 , wherein the local on-boarding agent uses a serial number of the gateway as part of a VPN identifier for the gateway in the established VPN connection.

20. A tangible, non-transitory, computer-readable medium storing program instructions that cause a master on-boarding agent to execute a process comprising:

establishing, by the master on-boarding agent which executes remotely of a vehicle, a virtual private network (VPN) connection with a local on-boarding agent executed by a gateway of the vehicle, wherein the local on-boarding agent and the gateway are executing locally on the vehicle;

receiving, at the master on-boarding agent and via the VPN connection, vehicle data obtained by the local on-boarding agent from a co-pilot system of the vehicle;

configuring, by the master on-boarding agent and based on the received vehicle data, the gateway of the vehicle with a network configuration, wherein the network configuration includes an Internet Protocol (IP) address for the gateway; and

coordinating, by the master on-boarding agent and based on the network configuration, application of a security policy to the gateway.