Patent ID: 7447901
Filing Date: 2008-11-04
Classification: H04L

Abstract:
1. A method for dynamically establishing a secure virtual private network, the method comprising the computer-implemented steps of: associating a network security policy with a virtual private network interface at a first network device, wherein the first network device comprises a spoke router; sending an address resolution request to an address resolution server, wherein the address resolution request is sent by the first network device and requests an address resolution for a second network device, wherein the address resolution request specifies a virtual private network endpoint address of the second network device, and wherein the second network device comprises a second spoke router; in response to sending said address resolution request, receiving input that indicates an association of said virtual private network endpoint address to a corresponding routable network address of said second network device, wherein said routable network address of the second network device is a dynamically assigned network address; wherein the routers comprise routers in a communication network; in response to the receiving said input that indicates said association, issuing, to a security protocol module at the first network device, a message that includes the routable network address of the second network device and the network security policy associated with the virtual private network interface at the first network device; receiving said message at said security protocol module at said first network device; in response to receiving said message at said security protocol module, generating encryption state information for encrypting and transmitting network traffic from the first network device to the second network device, based on the message; wherein the encryption state information includes one or more of: