Patent ID: 11924182
Assignee: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 7:
8. A non-transitory computer-readable medium comprising instructions that when executed on a processor cause a first Virtual Private Network (VPN) controller to:
establish a layer-three (L3) VPN tunnel with a client endpoint;
receive, at the first VPN controller, a layer-two (L2) tunnel establishment request to establish an L2 virtual tunnel from the client endpoint over the L3 VPN tunnel;
determine, based on authentication information of the client endpoint, where to forward the L2 tunnel establishment request;
route, based on the determination, the L2 tunnel establishment request from the first VPN controller to a second VPN controller over an established communication tunnel between the first VPN controller and the second VPN controller;
receive, at the first VPN controller, an encapsulated L2 response from the second VPN controller identifying acceptance of the L2 tunnel establishment request, the encapsulated L2 response based on an encapsulation of an L2 response from an L2 responsive device to which the L2 tunnel establishment request was sent by the VPN controller; and
send, from the first VPN controller to the client endpoint, the L2 response derived by decapsulation of the encapsulated L2 response to cause establishment of the L2 virtual tunnel between the client endpoint and the second VPN controller, the establishment of the L2 virtual tunnel being responsive to the L2 tunnel establishment request, and the L2 virtual tunnel embedded within the L3 VPN tunnel.