CPC H04L 63/0485 (2013.01) [H04L 63/0272 (2013.01); H04L 63/0853 (2013.01)] | 20 Claims |
1. A first Virtual Private Network (VPN) controller comprising:
a processor; and
a non-transitory storage medium storing instructions executable on the processor to:
establish a layer-three (L3) VPN tunnel with a client endpoint;
receive, at the first VPN controller, a layer-two (L2) tunnel establishment request to establish an L2 virtual tunnel from the client endpoint over the L3 VPN tunnel;
determine, based on authentication information of the client endpoint, where to forward the L2 tunnel establishment request;
route, based on the determination, the L2 tunnel establishment request to a second VPN controller over an established communication tunnel between the first VPN controller and the second VPN controller;
receive, at the first VPN controller, an encapsulated L2 response from the second VPN controller identifying acceptance of the L2 tunnel establishment request, the encapsulated L2 response based on an encapsulation of an L2 response from an L2 responsive device to which the L2 tunnel establishment request was sent by the second VPN controller; and
send, from the first VPN controller to the client endpoint, the L2 response derived by decapsulation of the encapsulated L2 response to cause establishment of the L2 virtual tunnel second VPN controller, the establishment of the L2 virtual tunnel being responsive to the L2 tunnel establishment request, and the L2 virtual tunnel embedded within the L3 VPN tunnel.
|