METHOD AND ARRANGEMENT FOR QOS DIFFERENTIATION OF VPN TRAFFIC ACROSS DOMAINS

摘要

A node in a first network domain and a method performed thereby for transmitting a data packet to a VPN client in a second network domain, the node and the VPN client being part of a VPN, wherein the first and second network domain are connected by means of a third network domain are provided. The method comprises receiving, from an application server, a first packet comprising a first IP header and a payload; and determining a DCSP. The method further comprises adding a second header comprising the determined DCSP and an IP address of a VPN client resulting in a second packet and encrypting the second packet. Further the method comprises adding a third header to the encrypted second packet resulting in a third packet, the third header comprising a destination address of a node in the second network domain, and transmitting the third packet in an IP tunnel terminating at the node in the second network domain.

主权项

1. A method performed by a node in a first network domain for transmitting a data packet to a Virtual Private Network, VPN, client in a second network domain wherein the node and the VPN client are part of a VPN, wherein the first network domain and second network domain are connected by means of a third network domain the method comprising:
receiving, from an application server, a first packet comprising a first Internet Protocol, IP, header and a payload; determining a Differentiated Service Code Point, DCSP; adding a second header comprising the determined DCSP resulting in a second packet; encrypting the second packet; adding a third header to the encrypted second packet resulting in a third packet, wherein the third header comprises a destination address of a node in the second network domain; and transmitting the third packet in an IP tunnel terminating at the node in the second network domain.