Patent ID: 7984495
Filing Date: 2011-07-19
Classification: H04L

Abstract:
1. A method comprising: generating, by processing logic running on a security appliance, a free list having a first plurality of numbers; the processing logic randomizing the free list, wherein the first plurality of numbers in the randomized free list are possible candidates of a tunnel index for a security association (SA) of a virtual private network (VPN) tunnel between a first private network and a second private network during negotiation to establish the VPN tunnel, wherein the tunnel index is included in packets sent via the VPN tunnel; the processing logic selecting a number from the randomized free list to build the tunnel index; the processing logic assigning the tunnel index built to the SA of the VPN tunnel; the processing logic releasing the tunnel index when the SA is deleted; and the processing logic re-inserting the released tunnel index into the randomized free list such that randomness of the randomized free list is preserved, wherein said re-inserting comprises