Abstract: A method includes dynamically determining transmission parameters for transmission of beacon frames corresponding to a Wireless Local Area Network (WLAN) supported by an access point. The transmission parameters being based on zero or more client devices connected to the WLAN or monitored data indicative of a load at the access point.

Abstract: The invention includes a computerized method for providing a location based service, the method comprising reporting a location of at least one user client device to a location based service program, querying a database of location based applications of the location based service program to identify one or more location based applications associated with the location of the at least one user client device, and launching at least one of the one or more location based applications on the user client device so as to offer a user experience for the location of the user client device.

Abstract: The present disclosure discloses a system and method for dynamically modifying role based access control for a client based on the activity. Generally, a client device is granted access to a network resource based on a first reputation score assigned to the client device. The activity of the client device is monitored. Responsive to monitoring the activity of the client device, a second reputation score is determined for the client device based on the activity. The access by the client device to the network resource is then modified to be granted based on the second reputation score.

Abstract: The present disclosure discloses a method and a network device for failure detection of nodes in a cluster. Specifically, a network device transmits data to another device at a first time. The network device then receives an acknowledgment of the data from the second device at a second time. Next, the network device determines a Round Trip Time (RTT) for the first device and the second device based on the first time and the second time. Based on the RTT, the network device determines a first frequency for transmitting a heartbeat protocol message between the first device and the second device, and transmits a heartbeat protocol message between the first device and the second device at the first frequency.

Abstract: The present disclosure discloses a method and network device for providing VLAN mismatch detection in networks. Specifically, a network device monitors a plurality of packets received by a first device from a second device to identify a first set of VLAN identifiers indicated by at least one of the plurality of packets. The network device receives from a third device at least one packet tagged with a particular VLAN identifier, whereas the at least one packet to be forwarded by the first device to the second device. The network device then determines whether the particular VLAN identifier is included in the first set of VLAN identifiers indicated by at least one of the plurality of packets received by the first device from the second device. If the particular VLAN identifier is not included in the first set of VLAN identifiers, the network device presents a notification.

Abstract: Methods and systems are described for intelligently steering client devices operating in an enterprise network system to an appropriate access point based on types of traffic on each client device and/or types of traffic on access points. In particular, client devices may be moved to a different access point when the wireless channel provided by a current access point fails to meet the signal strength requirements of latency sensitive traffic utilized by the client device. Client devices may be further steered to new access points based on load conditions on access points. For example, client devices with low priority traffic sessions may be steered away from access points with high traffic load levels. Accordingly, the methods and systems described herein ensure improved network access for latency sensitive access categories and/or access categories that are considered important to an enterprise system with minimal disruptions to these sessions.

Abstract: Described herein are systems, devices, techniques and products for managing the dynamic assignment of media access control (MAC) addresses to wireless network devices, such as by identifying a dynamically assigned MAC address before, after, or during a wireless association process and communicating the dynamically assigned MAC address to a wireless network device. Also disclosed are systems, devices, techniques and products for preventing a denial of service attack on a wireless access point's association table, such as by requiring devices that associate with a wireless access point to respond to a query from the wireless access point shortly after association.

Abstract: A non-transitory computer readable medium comprising instructions which causes performance of operations comprising: receiving, by a second network coordination device, current state information of a client device, including a transmit counter and a receive counter, from a first network coordination device, wherein the first network coordination device is a primary network coordination device for the client device and the second network coordination device is a standby coordination device for the client device; and responsive to detecting a particular event, the second network coordination device (i) transitioning to be the primary network coordination device for the client device, (ii) incrementing the transmit counter by an offset, and (iii) transmitting a message to the client device including the incremented transmit counter is shown.

Abstract: The present disclosure discloses a method and network device for automatic generation of forms for device configurations. Specifically, a network device receives a static configuration document from a user. The network device waits for a content creator to parse through the configuration document and tag various dynamic fields with supported dynamic content tags. The network device can then extract the dynamic variables from the processed document and generate forms to present to the user for the requested information. Next, the network device generates static configuration file(s) corresponding to one or more devices for the user based on the user input values.

Abstract: The present disclosure discloses a method and network device for using mobile devices with validated user network identity as physical identity proof. Responsive to successfully authenticating a client device for network access, a system generates a network credential for the client device and transmits the network credential to the client device. Further, the system detects that the client device is within a range of a short range wireless device that is associated with a particular physical action. Consequently, the system validates the network credential that the client device possesses. Based on the network credential, the system determines that the client device has permissions for performing the particular physical action, and causes performance of the particular physical action.

Abstract: Embodiments of the present disclosure provide for configuring and managing mesh nodes during occasional failure of mesh nodes or addition of new mesh nodes. The disclosed system first determines whether a mesh node is a mesh portal or a mesh point. If it is a mesh portal, the mesh node will advertise its capacity as a mesh portal to other mesh nodes in the network. If it is a mesh point, the mesh node attempts to automatically recover connection to the wireless mesh network if it identifies a unique wireless network based on its associated network identifier. If more than one network identifiers are discovered, the mesh node delays establishing connection to the wireless mesh network until a selection is received.

Abstract: The present disclosure discloses a method and a network device for performing dynamic detection and application-based policy enforcement of proxy connections in a network. Specifically, a network device receives, from a client device, a packet in a session. The network device then determines whether the packet is transmitted to a proxy. In response to determining that the packet is associated with a different application classification or web content category during the same session, the network device re-applies network firewall policies to determine whether to allow or deny transmission of the packet to the proxy.

Abstract: MU-MIMO provides a mechanism for a wireless network device to transmit to multiple client devices at the same time. When employing MU-MIMO, a network device may group two or more associated client devices, and transmit beamformed signals to each group. In some implementations, a network device may initiate channel sounding. Channel sounding may include transmitting sounding frames to client devices associated with two or more basic service sets. Channel sounding may facilitate beamforming transmissions to client devices associated with the two or more basic service sets. The network device may receive feedback frames from client devices associated with the two or more basic service sets. A feedback frame may indicate how a sounding frame was received. In some implementations, the network device may further construct a feedback table from the feedback frames. The feedback table may facilitate grouping of the client devices for beamforming transmissions.

Abstract: Transitioning voice clients among network resources. A network monitor using IEEE 802.11e QBSS Load IE elements monitors the load on one or more wireless access points. When the load on an access point, as reported in the QBSS Load Element IE exceeds a predetermined threshold, the network monitor sends a message to that AP which causes the AP to send BSS Transition Management Request frames to all connected voice clients which are currently idle. The information passed to the AP and then to the client may include one or more neighboring APs with capacity.

Abstract: The present disclosure discloses a method and network device for control plane protection for various tables using storm prevention entries. Specifically, the disclosed system receives a first packet, and creates an inactive entry in a table. The system then forwards the first packet from a first processor to a second processor for processing. Also, the system associates the inactive entry with a timestamp indicating when the first packet is forwarded to the second processor, and determines a configured interval (CI) associated with the table. Further, the system compares a difference between a current timestamp and the timestamp associated with the inactive entry against the CI upon receiving a second packet. If the difference is longer than the CI, the system associates the inactive entry with the current timestamp, and forwards the second packet to the second processor for processing. Otherwise, the system discards the second packet.

Abstract: A system with at least one device including a hardware processor, performs the steps of receiving, by the system, a packet from a second system to be transmitted to a third system, forwarding, by the system to the third system, the packet received from the second system; modifying a portion of the packet to obtain a modified packet that falsely identifies a fourth system as a source of the modified packet, and transmitting, by the system to the third system, the modified packet identifying the fourth system as the source of the modified packet.

Abstract: A non-transitory computer readable medium storing instructions which, when executed by one or more hardware processors, causes performance of operations including: determining a location associated with a client device, assigning a priority to packets, received from the client device or targeted for the client device, based at least on the location associated with the client device, and processing packets based on the priority assigned to the packets.

Abstract: The present disclosure discloses a method and network device for providing precise and custom location based service discovery application for wired and wireless devices. Specifically, a network device determines a location of a client device. The network device also identifies a first region including the location of the client device, and identifies at least one network device associated with the first region. Responsive at least to determining that the at least one network device is associated with the first region that comprises the location of the client device, the network device selects the at least one network device, from a set of network devices, for presenting as an available resource to the client device.

Abstract: The present disclosure discloses a network device and/or method for centralized configuration with dynamic distributed address management. The disclosed network device receives, at a first network node, a range of sub network addresses and a specified size for a sub network. The disclosed network device then divides the range of sub network addresses into a plurality of sub-ranges of sub network addresses based on the specified size. Further, the network device allocates the plurality of sub-ranges of sub network addresses to a plurality of sub networks, and transmits an allocated sub-range of sub network addresses to a corresponding sub network at a second network node through an established secure communication channel. Moreover, the network device can retrieve a profile template that includes the range of sub network addresses and the specified size of the sub network; and create a profile based on the profile template.

Abstract: According to one embodiment of the invention, a method comprises an operation of determining, by a first digital device, a location of a second digital device providing a network service. Thereafter, information is provided to a digital device requesting the network service based on the determined location of the second digital device.