Abstract: Automatically configuring split DNS operation in a wireless network device connected to a network. The wireless network device snoops one or more exchanged DHCP messages to obtain domain name(s) associated with the organization that are now used as target domain name suffix(es) for split DNS operations. For subsequent DNS queries, information within the message is analyzed to determine if the request includes a domain delimiter. If no delimiter, the DNS query message is sent to an internal DNS server that is located within an organization. If a delimiter exists, but the domain name in the message matches one of the target domain name suffixes, the DNS query message is sent to the internal DNS server as well. Otherwise, the DNS query message is routed over a different communication path.

Abstract: A non-transitory computer readable medium for location based access includes instructions which, when executed by one or more devices, causes performance of operations including identifying a physical location of a client device, determining that the physical location of the client device meets a criterion for allowing access through an entryway, identifying a permission level associated with the client device, determining that the permission level associated with the client device meets a criterion for allowing access through the entryway, and, responsive at least to determining that the criterion have been met, allowing access through the entryway.

Abstract: A method is described for intelligently toggling request-to-send/clear-to-send (RTS/CTS) mechanisms on and off for a channel between an access point and a client device. In particular, the method may determine one or more characteristics related to the transmission of frames and toggle RTS/CTS based on these characteristics. The characteristics may describe (1) the airtime used to transmit frames, (2) the data rate used to transmit frames, (3) traffic measurements on the wireless channel between the access point and the client device, (4) overlapping basic service set traffic measurements, and (5) the number of data units included in frames to be transmitted. By toggling RTS/CTS on and off based on network/channel and frame conditions/characteristics, the method ensures that RTS/CTS is enabled when frame collisions are likely and/or channel capacity is low and disabled when frame collisions are unlikely and the overhead associated with RTS/CTS outweighs the potential benefits.

Abstract: According to one embodiment, a non-transitory computer readable medium is described that comprises instructions which, when executed by one or more hardware processors, cause dynamic determination of one or more transmission parameters for transmitting a particular network packet of a plurality of network packets. The transmission parameters are determined based on (a) a classification associated with the particular network packet and (b) one or more current conditions. Subsequent to this determination, the particular network packet is transmitted using the one or more transmission parameters.

Abstract: Various techniques and systems are provided for executing call admission control in a cluster deployment including the sharing of call and capacity information between controllers in a cluster to make call capacity decisions for an access point.

Abstract: A network system and the method is described that splits media identification logic and media classification and/or general data session processing/management logic into separate controllers (e.g., between the local controllers and a service controller). By separating media identification logic and media classification logic (or general media processing/management logic), the system and method allows for greater flexibility and scalability in a network system employing a service controller. In particular, by allowing the local controllers to perform media identification and to construct a single packet that characterizes/describes a media session, the system avoids the need to transmit multiple data packets of a media session to the service controller for classification of the session.

Abstract: A system with a device including a hardware processor is configured to perform operations: receiving, by the device, a message over a wired medium, wherein the message has a frame including (a) a MAC address as a source MAC address for the frame and (b) a second MAC address as a destination MAC address for the frame, extracting, by the device, the frame from the message received over the wired medium, and wirelessly transmitting, by the device, the frame without modifying the source MAC address and without modifying the destination MAC address.

Abstract: According to one embodiment of the invention, a network device comprises a plurality of antennas comprising a first antenna, wherein the first antenna comprises: a first set of one or more elements that form an Alford loop and that is configured for electrical excitation via a current transmitted over a conductive medium from a signal source and a second set of one or more elements that is configured for electromagnetic induction without contact with the conductive medium from the signal source.

Abstract: The present invention comprises a system and method for determining an estimated position of a wireless mobile client device operating in a communications environment covered by a wireless local area network. The received signal strength of the wireless mobile client device is measured by one or more access points serving devices in the communications environment. In a preferred embodiment, the error between the received signal strength measured by the access points and the expected received signal strength at a plurality of locations in the communications environment is calculated. The location of the device is determined from the error.

Abstract: A system includes: multiple access points, the multiple access points including at least a first access point and a second access point; the system performs operations including: receiving, by the second access point from a client device, a data packet to be transmitted to a device outside of the system; forwarding the data packet by the second access point to the first access point; assigning, by the first access point, a first sequence number to the data packet to be used for transmitting the data packet outside of the system; transmitting the data packet with the first sequence number to the device outside of the system.

Abstract: The present disclosure discloses a method and network device for providing location approximation and discovery of wired servers in a network. Specifically, a network device can store information indicating that a first client device, with a first set of one or more characteristics, selected a particular shared device from a plurality of shared devices of a first type. The network device then receives, from a second client device, a request for a shared device of the first type. Subsequently, the network device determines that the second client device is associated with the same first set of characteristics as the first client device that selected the particular shared device. Responsive to such determination, the network device presents the particular shared device as an option for selection by the second client device.

Abstract: Provisioning remote access points for use in a telecommunication network. A remote access point contains identity information established during manufacturing; this identity information may be in the nature of a digital certificate. The identity information is stored in the remote access point, and may be stored in a Trusted Platform Module if present. When the remote access node is powered up in unprovisioned state, outside the manufacturing environment, it attempts to establish an internet connection via a first wired interface, and queries a user for information representing the TCP/IP address of its controller via a second wired interface. Once an internet connection is present, and a TCP/IP address has been provided, the remote access point attempts to connect to the controller at that address. Once a connection is established, controller and access point exchange and verify each other's identities.

Abstract: The present disclosure discloses a method and system for displaying an HTTPS block page without SSL inspection. Specifically, a network device snoops a first message transmitted between a client device and a network resource. The first message is transmitted as part of a SSL Handshake between the client device and the network resource to establish a SSL session. Moreover, the network device determines whether the client device is authorized to access the network resource. If not, the network device blocks the establishment of a SSL session between the client device and the network resource, and spoofs the network resource for establishing the SSL session between the client device and the network device instead of establishment of the SSL session between the client device and the network resource. Otherwise, the network device refrains from blocking the establishment of the SSL session between the client device and the network resource.

Abstract: According to one embodiment of the invention, a system for providing a dynamic user-customizable beacon information element (IE) is described. One embodiment of the system comprises an access point comprising a hardware processor wherein the system is configured to perform operations comprising: periodically transmitting, by an access point, a first beacon frame comprising a plurality of IEs, based on user input, configuring at least one IE of the plurality of IEs in the first beacon frame, modifying the at least one IE in the first beacon frame based at least on the user input to obtain a second beacon frame comprising a modified IE based on the user input and periodically transmitting, by the access point, the second beacon frame comprising the modified IE.

Abstract: A computer readable medium comprising instructions which, when executed, cause performance of operations comprising: successfully establishing a Bluetooth connection between a Bluetooth Low Energy (BLE) device and another device, receiving, by the BLE device from the other device, a request for a change in a configuration, determining, by the BLE device, if the BLE device is in a configuration-changes-enabled state, responsive to determining that the BLE device is in a configuration-changes-enabled state, changing the configuration based on the request, and responsive to determining that the BLE device is not in a configuration-changes-enabled state, refraining from changing the configuration.

Abstract: The present disclosure discloses a method and network device for intelligent handling of voice calls from mobile voice client devices. In some embodiments, the network device detects that a load, corresponding to a plurality of client devices associated with an access point, exceeds a particular threshold value. In some embodiments, the network device detects that a call quality for a current ongoing call, corresponding to a first client device associated with an access point, is below a first threshold value. In response, the network device selects a particular client device, of the plurality of client devices associated with the access point, for disassociation with the access point. The network device then causes the particular client device to disassociate with the access point.

Abstract: A method includes steering client devices to access points that potentially increase capacity of communications using beamformed transmissions. In particular, this includes determining the best access points for beamforming to a particular client or a group of clients in the network for an improved throughput performance in the deployment or a subset of access points.

Abstract: A combination and correlation of data from multiple sensors in a wireless digital network is described. Sensors such as spectrum monitors, access points, and wireless client devices provide spectrum data to one or more central stations connected to the network. Spectrum data from multiple sensors is combined and correlated to provide insight into network operation such as spectrum maps, detection-range maps, and for network diagnostics. Sensors providing spectrum data may be synchronized. Correlating spectrum data from synchronized sensors allows more accurate location of sources such as interferers. The known EIRP of certain wireless devices may be used to improve location estimates, and these devices may be used as calibrations sources for sensors in the wireless network.

Abstract: A system or method that receives a current request from a client, and responds to the current request based on signal strength associated with a previous request. If the current request is received on a non-preferred communication band, and a previous request was received on a preferred communication band within a pre-determined time, the system determines whether the signal strength associated with the previous request is weaker than a pre-determined threshold signal strength level for the preferred communication band. If so, the system responds to the current request. Otherwise, the system ignores the current request. If no recent request on the preferred communication band is received, and the signal strength associated with the current request is weaker than a pre-determined threshold signal strength level for the non-preferred communication band, the system responds to the current request on the non-preferred communication band. Otherwise, the system ignores the current request.

Abstract: A system for (a) determining a first direction from a first device toward a second device based on a first set of WiFi® wireless signals received by at least one antenna of the first device from the second device, (b) determining a second direction from a third device toward the second device based on a second set of WiFi® wireless signals received by at least one antenna of the third device from the second device, and (c) based at least on a first location of the first device, the first direction from the first device toward the second device, a second location of the third device, and the second direction from the third device toward the second device: determining a third location of the second device.