Method and system for forwarding internet protocol (ip) data packets at a multiple wan network gateway

Abstract

The present invention discloses methods and systems for forwarding Internet Protocol (IP) data packets at a first network gateway. The first network gateway comprises a plurality of wide area network (WAN) network interfaces and at least one local area network (LAN) network interface. A first WAN network interface of the plurality of WAN network interfaces is not assigned with an IP address. When first IP data packets are received through the first WAN network interface, the first network gateway inspects the first IP data packets. The first IP data packets are forwarded through one of the at least one LAN network interfaces when it is determined not to intercept the first IP data packets. When the first network gateway receives second IP data packets through one of the at least one LAN network interface, the first network gateway inspects the second IP packets. The first network gateway then forwards the second IP data packets through one of the plurality of WAN network interfaces when it is determined not to intercept the second IP data packets.

1 . A method for forwarding Internet Protocol (IP) data packets at a first network gateway, wherein the first network gateway comprises a plurality of wide area network (WAN) network interfaces and at least one local area network (LAN) network interface, wherein a first WAN network interface of the plurality of WAN network interfaces is not assigned with an IP address; comprises:
 (a) when received first IP data packets through the first WAN network interface:
 (i) inspecting the first IP data packets, 
 (ii) determining whether to intercept the first IP data packets; 
 (iii) forwarding the first IP data packets through one of the at least one LAN network interfaces when determined not to intercept the first IP data packets: 
   (b) when received second IP data packets through one of the at/east one LAN network interface and the second IP data packets are reachable through the first WAN network interface:
 (i) inspecting the second IP data packets; 
 (ii) determining whether to intercept the second IP data packets; and 
 (iii) forwarding the second IP data packets through one of the plurality of WAN network interfaces when determined not to intercept the second IP data packets. 
   
     
     
         2 . The method of  claim 1 , wherein step (a)(i) is performed by inspecting payloads of the first IP data packets. 
     
     
         3 . The method of  claim 1 , wherein step (b)(i) is performed by inspecting payloads of the second IP data packets. 
     
     
         4 . The method of  claim 1 , wherein step (a)(i) is performed by inspecting destination port of the first IP data packets. 
     
     
         5 . The method of  claim 1 , wherein step (b)(i) is performed by inspecting destination port of the second IP data packets. 
     
     
         6 . The method of  claim 1 , further comprising:
 (c) creating third data packets:   (d) transmitting third data packets through the first WAN network interface; and   wherein source address of the third data packets is an IP address reachable through one of the at least one LAN network interface.   
     
     
         7 . The method of  claim 6 , wherein the third data packets are responses to the first data packets and wherein the first data packets comprises management instructions. 
     
     
         8 . The method of  claim 1 , further comprising:
 (c) creating fourth data packets;   (d) transmitting fourth data packets through one of the at least one LAN network interface; and   wherein source address of the fourth data packets is an IP address reachable through the first WAN network interface.   
     
     
         9 . The method of  claim 8 , wherein the fourth data packets are responses to the second data packets and wherein the second data packets comprises management instructions. 
     
     
         10 . The method of  claim 8 , wherein the at least one LAN network interface is not assigned with an IP address. 
     
     
         11 . A first network gateway for forwarding Internet Protocol (IP) data packets, wherein the first network gateway comprises:
 a plurality of wide area network (WAN) network interfaces; wherein a first WAN network interface of the plurality of WAN network interfaces is not assigned with an IP address;   at least one local area network (LAN) network interface;   at least one processing unit;   at least one non-Transitory storage medium storing program instructions executable by the at least one processing unit for:   (a) when received first IP data packets through the first WAN network interface:
 (i) inspecting the first IP data packets, 
 (ii) determining whether to intercept the first IP data packets; 
 (iii) forwarding the first IP data packets through one of the at least one LAN network interfaces when determined not to intercept the first IP data packets; 
   (b) when received second IP data packets through one of the at least one LAN network interface and the second IP data packets are reachable through the first WAN network interface:
 (i) inspecting the second IP data packets; 
 (ii) determining whether to intercept the second IP data packets; and 
 (iii) forwarding the second IP data packets through one of the plurality of WAN network interfaces when determined not to intercept the second IP data packets; 
   
     
     
         12 . The first network gateway of  claim 11 , wherein step (a)(i) is performed by inspecting payloads of the first IP data packets. 
     
     
         13 . The first network gateway of  claim 11 , wherein step (b)(i) is performed by inspecting payloads of the second IP data packets. 
     
     
         14 . The first network gateway of  claim 11 , wherein step (a)(i) is performed by inspecting destination port of the first IP data packets. 
     
     
         15 . The first network gateway of  claim 11 , wherein step (b)(i) is performed by inspecting destination port of the second IP data packets. 
     
     
         16 . The first network gateway of  claim 11 , wherein the non-transitory storage medium further storing program instructions for:
 (c) creating third data packets;   (d) transmitting third data packets through the first WAN network interface; and   wherein source address of the third data packets is an IP address reachable through one of the at least one LAN network interface.   
     
     
         17 . The first network gateway of  claim 16 , wherein the third data packets are responses to the first data packets and wherein the first data packets comprises management instructions. 
     
     
         18 . The first network gateway of  claim 11 , wherein the non-transitory storage medium further storing program instructions for:
 (c) creating fourth data packets,   (d) transmitting fourth data packets through one of the at least one LAN network interface; and   wherein source address of the fourth data packets is an IP address reachable through the first WAN network interface.   
     
     
         19 . The first network gateway of  claim 18 , wherein the fourth data packets are responses to the second data packets and wherein the second data packets comprises management instructions. 
     
     
         20 . The first network gateway of  claim 18 , wherein the at least one LAN network interface is not assigned with an IP address.