Methods for associating an IP address to a user via an appliance

摘要

The present disclosure describes methods and systems for efficiently assigning, managing and querying virtual private network (VPN) addresses intranet IP (IIP) addresses of users, such as SSL VPN users on an enterprise network. The disclosure describes techniques and policies for assigning previously-assigned VPN addresses of a user to subsequent sessions of the user as the user logs in multiple times or roams between access points. The disclosure also describes a configurable user domain naming policy so that one can query the VPN address of a user by an easily referable host name identifying the user. The appliance and/or client agent provides techniques for applications to seamlessly and transparently communicate on the VPN using the VPN address of the user or client on the private network.

主权项

1. A method for assigning an intranet address to a user by an intermediary device, the method comprising:
(a) receiving, by a device intermediary to at least one client and at least one server, a request to establish a session of a first user with a first network; (b) determining, by the device responsive to a policy, one or more intranet addresses to assign to the first user, the one or more intranet addresses for assigning to one or more sessions of the first user and different from addresses of processors supporting a session of the first user; and (c) assigning, by the device, to the established session of the first user as an internet protocol address on the first network, a first intranet address from the one or more intranet addresses, the first intranet address previously assigned to another session of the first user, each of the one or more intranet addresses different from a second intranet address assigned by the device to a second user.