Patent ID: 7818409

Claim:
Apparatus, comprising: a plurality of internet protocol (IP) services aggregation switches for communicating between respective access networks and a core network, each of said IP services aggregation switches communicating with at least one respective VPN customer user, wherein said IP services aggregation switches communicate with said at least one VPN customer user via at least one enhanced integrated access device (EIAD); and a dynamic virtual private network (VPN) manager, for providing customer network management and policy server functions, including a user interface enabling remote management of a VPN by a VPN customer user; said VPN having at least one of a defined quality of service (QoS) parameter, a defined security parameter and a corresponding billing rate, at least one of said QoS parameter and said security parameter being adapted in response to user commands provided to said dynamic VPN manager by said VPN customer user; said dynamic VPN manager adapting at least one of said IP services aggregation switches and at least one of said EIAD to provide a bidirectional QoS for at least one IP flow.