US 12,238,099 B2
Systems and methods for generating contextual labels
Stefan Olofsson, Dubai (AE); Ijsbrand Wijnands, Leuven (BE); and Hendrikus G. P. Bosch, Aalsmeer (NL)
Assigned to CISCO TECHNOLOGY, INC., San Jose, CA (US)
Filed by Cisco Technology, Inc., San Jose, CA (US)
Filed on May 24, 2023, as Appl. No. 18/323,183.
Application 18/323,183 is a continuation of application No. 16/562,867, filed on Sep. 6, 2019, granted, now 11,683,308.
Claims priority of provisional application 62/858,191, filed on Jun. 6, 2019.
Prior Publication US 2023/0300134 A1, Sep. 21, 2023
This patent is subject to a terminal disclaimer.
Int. Cl. H04L 9/40 (2022.01); H04L 12/46 (2006.01); H04L 61/256 (2022.01)
CPC H04L 63/0892 (2013.01) [H04L 12/4641 (2013.01); H04L 63/0272 (2013.01); H04L 63/0823 (2013.01); H04L 63/083 (2013.01); H04L 63/168 (2013.01); H04L 61/2571 (2013.01)] 25 Claims
OG exemplary drawing
 
1. An apparatus, comprising:
one or more processors; and
one or more computer-readable non-transitory storage media coupled to the one or more processors and comprising instructions that, when executed by the one or more processors, cause the apparatus to perform operations comprising:
receiving a user credential from a remote access client over a network;
communicating the user credential to an authentication server;
receiving a user attribute from the authentication server;
generating one or more contextual instructions based on the user attribute and one or more application traffic policies, wherein:
the one or more contextual instructions comprises routing instructions; and
the routing instructions map one or more applications to a Virtual Private Network (VPN) routing/forwarding (VRF) instance; and
transmitting a message to the remote access client, wherein:
the message includes the one or more contextual instructions;
the one or more contextual instructions comprise a contextual label;
the remote access client uses the one or more contextual instructions to forward data packets associated with the one or more applications to the VPN VRF instance; and
the remote access client adds the contextual label to the data packets.