INTRA-IP-VPN ACCESS CONTROL SYSTEM AND METHOD

摘要

PROBLEM TO BE SOLVED: To realize access control between subnetworks in a VPN (virtual private network) without reducing the number of VPNs to be housed in a gateway (GW). SOLUTION: An intra-IP-VPN access control system enables packet filtering even inside the same VPN by providing a subnetwork housing edge router and an edge router for access control. The edge router for access control has a means for attaching a VPN identifier for a return to a packet transmitted from an external network side I/F of a gateway device and received from an IP network side I/F and transmitting the packet to its own transfer network address, and a means for transmitting a packet received from a transfer network side I/F and with a VPN identifier for a return attached to the external network side I/F of the gateway device from the IP network side I/F.