-
公开(公告)号:US20090106449A1
公开(公告)日:2009-04-23
申请号:US11875520
申请日:2007-10-19
IPC分类号: G06F15/173
CPC分类号: G06Q30/02
摘要: A method and apparatus for providing dynamic route advertisement based on IP-Sec security associations are disclosed. The method receives a notification for an establishment, a deletion or a modification of a security association for a sub-network. The method then adds or deletes a route for the sub-network based on the security association and dynamically advertises the added or deleted route to one or more peer devices. In one embodiment, the method also receives an advertisement for an added or deleted route from a peer device, identifies at least one IP-Sec client for receiving the advertisement, and establishes or deletes one or more security associations for the at least one identified IP-Sec client.
摘要翻译: 公开了一种基于IP-Sec安全关联提供动态路由广告的方法和装置。 该方法接收关于子网的安全关联的建立,删除或修改的通知。 然后,该方法基于安全关联添加或删除子网的路由,并将添加或删除的路由动态通告给一个或多个对等设备。 在一个实施例中,该方法还从对等设备接收用于添加或删除的路由的广告,识别用于接收广告的至少一个IP-Sec客户端,并且建立或删除用于所述至少一个识别的IP的一个或多个安全关联 -Sec客户端