Abstract: According to an example a Dynamic Virtual Private Network (D-VPN) large-scale networking method includes establishing, by a Spoke, a DVPN channel with a Hub; issuing, by the Spoke, subnet information about the Spoke to the Hub; and obtaining, by the Spoke, subnet information about the Hub and another Spoke as well as corresponding private network address of a next hop sent by the Hub.

Abstract: An example of the present disclosure includes a Group Member (GM) registering on a Key Server (KS) in a Group Encrypted Transport Virtual Private Network (GET VPN). The KS is to manage at least one group, and GMs belonging to the same group have the same group ID. The KS receives a group ID and a Security Association, SA, policy list supported by a GM sent by the GM. The KS, according to the group ID, determines a KS SA policy list corresponding to the group, and matches the SA policy list supported by the GM with the KS SA policy list according to a priority. A group SA policy with the highest priority is sent the GM.

Abstract: An example of the present disclosure includes a Group Member (GM) registering on a Key Server (KS) in a Group Encrypted Transport Virtual Private Network (GET VPN). The KS is to manage at least one group, and GMs belonging to the same group have the same group ID. The KS receives a group ID and a Security Association, SA, policy list supported by a GM sent by the GM. The KS, according to the group ID, determines a KS SA policy list corresponding to the group, and matches the SA policy list supported by the GM with the KS SA policy list according to a priority. A group SA policy with the highest priority is sent the GM.

Abstract: A Dynamic Virtual Private Network (DVPN) includes Virtual Private Network (VPN) Address Management (VAM) clients and a VAM server, and each VAM client includes a private gateway address, public address and subnet of the VAM client that are provided to the VAM server when registering in the VAM server. When a source VAM client receives a packet that is sent by a subnet of the source VAM client to a subnet of a destination VAM client, the source VAM client requests the VAM server to provide a next-hop address of subnet, a private gateway address, a public address and subnet of the destination VAM client to establish a DVPN tunnel between the source VAM client and the destination VAM client.

Abstract: According to an example a Dynamic Virtual Private Network (D-VPN) large-scale networking method includes establishing, by a Spoke, a DVPN channel with a Hub; issuing, by the Spoke, subnet information about the Spoke to the Hub; and obtaining, by the Spoke, subnet information about the Hub and another Spoke as well as corresponding private network address of a next hop sent by the Hub.