Patent ID: 11882000
Assignee: VMWARE LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 17:
18. A network management system for managing a logical network that spans a plurality of physical sites, the network management system comprising:
a global network manager for receiving global logical network configuration data for the plurality of physical sites; and
at each of the physical sites:
a local network manager for receiving a logical network configuration for the physical site from the global network manager, wherein the logical network configuration for a particular physical site comprises at least one security group definition specifying a set of criteria for belonging to the security group; and
a set of central controllers for distributing logical network configuration data to computing devices that implement the logical network at the physical site, wherein the set of central controllers at the particular physical site translates the security group definition into a set of network addresses of logical network endpoints that match the set of criteria at the particular physical site.