Patent ID: 11895100
Assignee: CISCO TECHNOLOGY, INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 14:
15. A method performed at a first site in a multi-site network that includes a first site and a second site, the method comprising:
receiving, at a first software-defined networking (SDN) controller that manages the first site and from a multi-site controller (MSC) for the multi-site network, an encryption key and an indication that the encryption key is configured to decrypt encrypted packets sent from the second site of the multi-site network, wherein the encryption key was sent to the MSC from a second SDN controller that manages the second site;
storing, by the first SDN controller and at the first site, an association between the encryption key and a value indicating the second site;
deploying, by the first SDN controller, the encryption key to a network device in the first site that is configured to receive traffic from the second site;
sending a deployment status to the MSC indicating the deployment of the encryption key to the network device;
receiving, at the first site, an encrypted packet from the second site;
determining that the encrypted packet was sent from the second site;
identifying the encryption key based at least in part on the encrypted packet being sent from the second site and the association between the encryption key and the value; and
decrypting the encrypted packet using the encryption key.