Patent ID: 8165023
Filing Date: 2012-04-24
Classification: H04L

Abstract:
1. A method, comprising: receiving, at a first routing device, a packet, wherein the packet includes an identifier indicative of one of a plurality of virtual network segments (VNETs) defined for local-area network (LAN) infrastructures separated by a wide-area network infrastructure, and wherein the identifier is stored in a layer 2 portion of the packet; generating a modified packet by removing the identifier from the layer 2 portion of the packet and storing the identifier in a VNET-shim embedded within the packet, wherein the VNET-shim is embedded in between an outer IP header and an encapsulating security payload header of the modified packet, and wherein a copy of the VNET-shim resides within an encrypted payload of the modified packet; and forwarding the modified packet towards a destination in the wide-area network infrastructure.