SSID-Linked VPN Packet Forwarding Without VLAN Overhead
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods for routing packets from wireless access point router (AP) clients to a virtual private network (VPN) either increase CPU and memory load or result in packet dropping when the VPN is not operating, and are not convenient.
Innovation Solution
Create a SSID and associate it with a VPN profile, enabling packet forwarding through the VPN when established, and disabling the SSID when the VPN is not established, without the need for VLANs or IP address subnets.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If VLAN is created for SSID and routing rule is created for VLAN to use VPN, then packet routing to VPN is achieved, but CPU and memory load increases
Solution Approach 1:
The patent merges the SSID configuration with VPN profile association, combining what were previously separate operations (VLAN creation and routing rule creation) into a single integrated operation. This reduces the number of separate CPU processing steps and memory allocations required, thereby reducing overall system load while maintaining reliable packet routing.
Solution Approach 2:
The VPN profile serves multiple functions: it stores VPN configuration parameters, establishes the virtual connection, and automatically generates routing rules. This multi-functional approach eliminates the need for separate VLAN creation and manual routing rule configuration, reducing CPU and memory resources consumed by multiple separate data structures.
2Reliability
If IP address subnet is assigned for devices and routing rule is created for subnet to use VPN, then packet routing to VPN is achieved, but CPU and memory load increases
Solution Approach 1:
The patent combines subnet assignment with VPN profile creation into a single operation. Instead of separately assigning IP subnets and creating routing rules, the system creates a VPN profile that simultaneously establishes the virtual connection and configures routing, reducing CPU processing steps and memory usage.
Solution Approach 2:
The VPN profile automatically generates and applies routing rules without requiring separate manual configuration steps. The system self-configures the routing necessary for VPN traffic, eliminating the need for administrators to separately create routing rules for each subnet, thereby reducing CPU load.
3Reliability
If VPN is not established, then SSID can be disabled to prevent packet dropping, but service availability decreases
Solution Approach 1:
The patent implements preliminary action by pre-configuring VPN profiles and SSIDs before actual VPN connection establishment. The system prepares all necessary routing rules and configuration parameters in advance, so when a VPN is established, packets can be immediately routed without delay or dropping, maintaining service availability.
Solution Approach 2:
The system monitors VPN establishment status and provides feedback to control whether SSID traffic should be routed through the VPN. When VPN establishment fails, the system receives feedback and automatically adjusts routing behavior to prevent packet dropping, ensuring continuous service availability by adapting to the actual VPN state.
Data Source
AI summary
The present invention discloses methods and systems for forward packets received from a SSID at a wireless access point to a VPN. The SSID and VPN are associated. The VPN is created according to a VPN profile. When the VPN is established, the SSID is enabled. When the VPN is not established, the SSID is disabled.