초록 ▼

A network device that translates addresses of machines on physically separate networks and filters packets at the link, network and transport layers implements a virtual LAN over interconnected computer networks transparent to the computer networks. Using authentication and encryption, a secure conn

A network device that translates addresses of machines on physically separate networks and filters packets at the link, network and transport layers implements a virtual LAN over interconnected computer networks transparent to the computer networks. Using authentication and encryption, a secure connection between these network devices over a public wide area network implements a virtual private network and enables the definition of virtual LANs over the virtual private network. The network device has three tables for network address translation, routing, and filtering. A controller processes each incoming packet by translating network addresses to determine the destination of the packet, routing the packet to the determined location and filtering the packet according to filters defined for traffic between the source destination of the packet. If the packet is to be directed to a wide area network, encryption and authentication procedures can be provided to ensure secure transmission of the packet.

대표청구항 ▼

[ What is claimed is:] [1.] A network device comprising:a first interface for connection to a first local area network of machines having a link layer, a network layer and a transport layer;a second interface for connection to a second local area network of machines having a link layer, a network la

[ What is claimed is:] [1.] A network device comprising:a first interface for connection to a first local area network of machines having a link layer, a network layer and a transport layer;a second interface for connection to a second local area network of machines having a link layer, a network layer and a transport layer;wherein the network device has a media access control address on each of the first and second local area networks;a mapping table for mapping network addresses at the network layer of machines on the second local area network to the media access control address of the network device on the first local area network;means for routing packets from machines on the first local area network to machines on the second local area network according to the mapping table; andmeans for filtering packets using information in the packets from the link, network and transport layers.