Patent ID: 11882029
Assignee: JUNIPER NETWORKS, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 10:
11. A non-transitory computer-readable medium storing a set of instructions, the set of instructions comprising:
one or more instructions that, are executed by one or more processors of an ingress network device of a multiprotocol label switching (MPLS) network, to cause the ingress network device to:
exchange Internet key exchange (IKE) messages with an egress network device of the MPLS network to establish a security association between the ingress network device and the egress network device;
receive a packet destined for a destination network device;
encrypt, using a secure function, the packet to generate an encrypted packet;
generate an MPLS packet comprising:
an MPLS header that includes:
a label associated with a label-switched path (LSP) from the ingress network device to an egress network device of the MPLS network that is associated with the destination network device, and
a secure function indicator,

a secure MPLS data header that includes information identifying the secure function, and
an MPLS payload that includes the encrypted packet; and

forward, based on the label, the MPLS packet.