公开(公告)号：US20160337235A1

公开(公告)日：2016-11-17

申请号：US14870722

申请日：2015-09-30

Applicant: Cisco Technology, Inc.

Inventor： James N. GUICHARD ,  Paul QUINN ,  Javed ASGHAR ,  Reinaldo PENNO ,  Yixing RUAN ,  Carlos M. PIGNATARO

IPC: H04L12/741 ,  H04L12/851

CPC classification number: H04L12/4633 ,  H04L63/0272

Abstract: A method for applying network services to data traffic forwarded between virtual private network (VPN) sites includes: receiving a data packet addressed to a target site associated with the VPN, determining services to be applied to the data packet according to a service chain, where the determining is a function of at least one of the VPN, the origin site or the target site, adding an indication of a VPN forwarding context onto the data packet, encapsulating the data packet with Network Service Header encapsulation, where a header for the encapsulated data packet indicates at least the service chain; forwarding the encapsulated data packet in accordance with the service chain, receiving the encapsulated data packet at the end of the service chain, terminating the service chain, removing the encapsulation, and forwarding the data packet to a target destination per the indication of a VPN forwarding context.

Abstract translation: 将网络服务应用于在虚拟专用网（VPN）站点之间转发的数据流量的方法包括：接收寻址到与VPN相关联的目标站点的数据分组，根据服务链确定应用于数据分组的服务，其中 所述确定是VPN，原始站点或目标站点中的至少一个的功能，将VPN转发上下文的指示添加到数据分组上，用网络服务报头封装封装数据分组，其中封装的报头 数据包至少指示服务链; 根据服务链转发封装的数据包，在服务链的末尾接收封装的数据包，终止服务链，去除封装，并根据VPN转发的指示将数据包转发到目标目标 上下文