Patent ID: 9106618
Filing Date: 2015-08-11
Classification: H04L

Abstract:
1. A method of encrypting data for a network having a plurality of network elements, each of said plurality of network elements having a connection between a respective ingress interface to a respective egress interface of another network element of said plurality of network elements, and a subset of said plurality of network elements comprising a secured domain, the method comprising: at a first network element, which is a member of said subset of network elements and inside the secured domain, encrypting all unencrypted Layer 3 packets as they egress the respective egress interface, wherein said egress interface is enabled for encryption; at said first network element, unencrypting all encrypted Layer 3 packets as they egress the respective egress interface, wherein said egress interface is not enabled for encryption and is outside the secured domain; and at said first network element, leaving encrypted all encrypted Layer 3 packets as they egress the respective egress interface, wherein said egress interface is enabled for encryption.