Layered approach for representing and analyzing virtual private network services

摘要

A method, apparatus and computer-program product for logically representing and analyzing a Virtual Private Network (VPN) in a plurality of functional representation layers is disclosed. The method, which is typical of the invention, comprises the steps of representing selected physical and logical components of said VPN as a plurality of configuration non-specific objects determined for each said functional representation layers, organizing selected ones of said objects within selected ones of said functional representation layers, wherein said object are selected from the group consisting of: VPNService, ServiceConnectionPath, ForwarderEndpoint, TunnelGroup, Tunnel, TunnelHop, TunnelIn/Out, SignalingProtocolEndpoint, SignalingProtocollSession and SignalingProtocolService, representing relationships among said physical and logical components as configuration non-specific representations within and among said functional representation layers, wherein Endpoint objects provide communication among said functional representation layers, which are among a group of Service, Service connection, Transport and Protocol layers.