Vendor-neutral policy based mechanism for enabling firewall service in an MPLS-VPN service network

摘要

A technique that simplifies managing and configuring firewalls by provisioning a vendor-neutral firewall in an MPLS-VPN service network. In one example embodiment, this is accomplished by creating a vendor-neutral firewall policy using a service activation tool residing in a host server. One of the one or more VPNs requiring the provisioning of the vendor-neutral firewall in the MPLS-VPN service network is then selected. The created vendor-neutral firewall policy is then transformed to form a vendor-specific firewall policy associated with the selected one of the one or more VPNs.

主权项

1. A method for provisioning firewalls in one or more networks comprising:
creating a vendor-neutral firewall policy; selecting one of the one or more networks that requires provisioning a vendor-neutral firewall; transforming the created vendor-neutral firewall policy to a vendor-specific firewall policy as a function of the selected one of the one or more networks; and uploading the vendor-specific firewall policy to at least one router of the selected one of the one or more networks.