Abstract: Methods and systems are described for determining an optimal access point for a client device based on the relative difference between signal strengths of wireless signals received by the client device from access points. In particular, the signal strengths of wireless signals received by a client device from access points are determined without receipt of signal strength and/or transmit power information from the client device. Instead, the signal strength difference value may be determined based on known characteristics of signals transmitted by the access points and known characteristics of signals received by the access points from the client device. This relative difference value may thereafter be used to determine an appropriate access point to provide network access to the client device.

Abstract: A network system and the method is described that splits media identification logic and media classification and/or general data session processing/management logic into separate controllers (e.g., between the local controllers and a service controller). By separating media identification logic and media classification logic (or general media processing/management logic), the system and method allows for greater flexibility and scalability in a network system employing a service controller. In particular, by allowing the local controllers to perform media identification and to construct a single packet that characterizes/describes a media session, the system avoids the need to transmit multiple data packets of a media session to the service controller for classification of the session.

Abstract: The present disclosure discloses a method and a network device for performing DHCP release on behalf of a user in dynamic network environments. Specifically, a network device determines that a client device is no longer using a first Internet Protocol (IP) address assigned to the client device. In response to the determining that the client device is no longer using the first IP address, the network device then generates a Dynamic Host Configuration Protocol (DHCP) release message on behalf of the client device for removing the assignment of the first IP address to the client device. Moreover, the network device transmits the DHCP release message to a DHCP server.

Abstract: The present disclosure discloses a method and system for partitioning WLAN in order to separate network traffic from different WLANs. Specifically, a network device receives a packet from a client connected to a first network device on an access network. The network device then determines that the received packet is associated with a VLAN that is pre-configured on the first network device based on the access network to which the client is connected. Furthermore, the network device transmits the packet to a MAC layer switching device, which is not configured with the VLAN that is pre-configured on the network device. The packet includes one of a DHCP discovery message, an ARP request message, a unicast message, a multicast message, and a broadcast message. The unicast message will be transmitted to the second network device on the pre-configured VLAN prior to being transmitted to another network device outside the pre-configured VLAN.

Abstract: Described herein are systems, devices, techniques and products for managing the dynamic assignment of media access control (MAC) addresses to wireless network devices, such as by identifying a dynamically assigned MAC address before, after, or during a wireless association process and communicating the dynamically assigned MAC address to a wireless network device. Also disclosed are systems, devices, techniques and products for preventing a denial of service attack on a wireless access point's association table, such as by requiring devices that associate with a wireless access point to respond to a query from the wireless access point shortly after association.

Abstract: The present disclosure discloses a method and network device for providing tiered network access based on user actions. Specifically, a network device can identify a social action performed by a user, where the social action is performed while the user is logged into a social network application. Furthermore, the network device can select a network access level of a plurality of network access levels based on the social action. Accordingly, the network device grants a client device corresponding to the user access to a network based on the selected network access level. Note that the network access level is selected from the plurality of network access levels based on a plurality of social actions performed by the user.

Abstract: The present disclosure discloses a method and a network device for adaptive resource allocation in congested wireless local area network deployment. Specifically, a network device dynamically assigns priorities of client devices associated with a remote access point based at least on an application type or a traffic type corresponding to each client device. Further, the network device transmits the priorities of the client devices to the remote access point in response to the wired uplink being unavailable. The priorities of the client devices facilitate the remote access point to limit a number of client devices connected to the remote access point subsequent to the wired uplink being unavailable.

Abstract: A non-transitory computer readable medium includes instructions which, when executed by one or more processors cause performance of operations, including: receiving feedback information related to a receipt of packets by a receiving device, the packets being transmitted by a source device, modifying the feedback information to obtain modified information related to the receipt of the packets by the receiving device, and transmitting, to the source device, the modified information related to the receipt of the packets by the receiving device.

Abstract: Described herein are systems, methods and computer program products for controlling operation of wireless beacons, such as Bluetooth Low Energy beacons. Multiple beacons may be controlled centrally or may work together in a cooperative fashion such that signals can be exchanged between or repeated by beacons in order to allow for signals received at one beacon to reach another beacon without requiring further central interaction. Power settings of beacons may be altered to change power consumption or to change a detectable range of the beacons.

Abstract: Processing of MLD control packets in an access point (AP) connected to a digital network. According to the present invention, an AP in a network converts MLD queries from multicast to unicast and sends these unicast packets to each client of the AP. These MLD query packets may be filtered or restricted by per-user client rules These MLD query packets may also be tagged as high priority packets to speed their delivery. The AP also suppresses the retransmission of MLD Join packets to clients of the AP.

Abstract: The present disclosure discloses a system and a method for providing power save aware multicast support. Specifically, a network device first determines that each of a first subset of client devices, of a plurality of client devices, is associated with a first characteristic indicating that the first subset of client devices is not in a power save mode. Based at least on the first determination, the network device transmits a message in a multicast format to the first subset of client devices. Second, the network device determines that each of a second subset of client devices, of the plurality of client devices, is associated with a second characteristic indicating that the second subset of client devices is in a power save mode. Based at least on the second determination, the network device transmits the message in a unicast format to each of the second subset of client devices.

Abstract: The present disclosure discloses a method and system for partitioning WLAN in order to separate network traffic from different WLANs. Specifically, a network device receives a packet from a client connected to a first network device on an access network. The network device then determines that the received packet is associated with a VLAN that is pre-configured on the first network device based on the access network to which the client is connected. Furthermore, the network device transmits the packet to a MAC layer switching device, which is not configured with the VLAN that is pre-configured on the network device. The packet includes one of a DHCP discovery message, an ARP request message, a unicast message, a multicast message, and a broadcast message. The unicast message will be transmitted to the second network device on the pre-configured VLAN prior to being transmitted to another network device outside the pre-configured VLAN.

Abstract: According to one embodiment, a system and computer-readable storage medium for storage of software directed to the management of associations between network devices is described. The computer-readable storage medium comprising instructions which, when executed by at least one hardware processor on a network device, causes performance of operations, comprising: (1) determining a desired operating state for a client device under analysis, the client device being associated with a first network device of a plurality of network devices; (2) detecting if a triggering event has occurred based on a comparison of the desired operating state for the client device under analysis to an actual operating state for the client device under analysis; and (3) in response to detecting that the triggering event has occurred, causing the client device to wirelessly connect to a second network device of the plurality of network devices in lieu of the first network device.

Abstract: Systems, methods and apparatuses for mitigating a wireless networking problem of a wireless network are disclosed. One method includes determining, by an analytics engine, a problem associated with the wireless network, wherein the analytics engine is operative as a central intelligence for detection, analyzing, classifying, root-causing, or controlling the wireless network. The method further includes receiving, by the analytics engine, a collected user input and state information, mapping, by at least the analytics engine, a problem signature of the user input and the state information to at least one of a number of possible problem network conditions, determining, by the analytics engine, instructions for alleviating the problem based on the mapping of the problem signature, and providing, by the analytics engine, the instructions.

Abstract: The present disclosure discloses a system and method for determining deterioration in call quality between one or more wireless end-users based on codec characteristics. Specifically, a network device determines a codec associated with a call between two client devices. Then, the network device determines a transmission rate based on the codec. Moreover, the network device estimates a number of packets to be received by an access point that a first client device is associated with based on the transmission rate, and compares the estimated number of packets to an actual number of packets received by the access point. If a difference between the estimated number and the actual number of packets exceeds a threshold, the network device diagnoses that a poor call quality associated with the call is due to either the first client device or network connectivity between the first client device and the access point.

Abstract: Methods and systems are described for assigning the proper internet protocol (IP) address to a client device following authentication of the client device on a network. In particular, at commencement of an authentication procedure of the client device, a role is associated with the client device that denies all DHCP renews/requests. By assigning a role to the client device 103 with a “deny DHCP renew/request” rule at the commencement of an authentication procedure, the systems and methods described herein ensure that a race condition does not allow the client device to renew an IP address in an old segment of the network. Accordingly, the client device may avoid a possibly improper IP address in a segment of the network system in which the client device is no longer associated with or operating on.

Abstract: According to embodiments of the present disclosure, a managed network device assigns to itself an IP address, in absence of a DHCP service, in a link local address space within a wireless network. The system further responds to a network frame received from another device based on the assigned IP address in the link local address space. The network frame can be a network traffic frame, a control path frame, and/or a management frame. The control path frame comprises a source IP address and a destination IP address that correspond to internal IP addresses in the link local address space that are self-assigned by managed network devices. The management frame comprises the self-assigned internal IP address for the managed network device, and provides for management of managed network devices in the wireless network through a single IP address when a virtual controller is configured for the wireless network.

Abstract: The present disclosure discloses a method and a network device for session aware access point load balancing. Specifically, a network device monitors data corresponding to a plurality of client devices associated with a first access point. Then, the network device determines whether the data matches particular criteria. Responsive to determining that the data matches the particular criteria, the network device select at least a first client device of the plurality of client devices for disassociation and/or de-authentication. Moreover, the network device causes disassociation and/or de-authentication of the first client device from the first access point.

Abstract: The present disclosure discloses a system and a method for displaying mobile trails for mobile client devices. Specifically, a network device obtains a plurality of performance measurements and a corresponding plurality of physical locations for a client device over a period of time. Then the network device generates a plurality of visual representations for the client device over the period of time, each visual representation representing a respective performance measurement and a respective physical location at a respective time during the period of time. Moreover, the network device can display, store, and/or transmit a map of a physical environment with the plurality of visual representations.

Abstract: A system and a method are described that reduce or eliminate inefficiencies caused by double encryption in network tunnel communications. In particular, a set of virtual tunnels may be established that require a lower level of encryption in comparison to a full-encryption tunnel. Upon determining that a session is end-to-end encrypted, the system and method described herein may assign the session to one of the virtual tunnels instead of the full-encryption tunnel. By intelligently assigning sessions to virtual tunnels when encryption has already been applied, double encryption may be avoided, which will improve throughput and decrease processor usage. However, in cases where a session is not end-to-end encrypted, the full-encryption tunnel may be utilized to ensure secure communications are maintained between gateways.