Abstract: Operations include determining that a subset of devices, from a plurality of devices, are executing a same application, located in a same geographical location, or correspond to a same user. Responsive to the determining operation, a group with the subset of devices is created and communication between the devices is supported.

Abstract: Operations include determining that a subset of devices, from a plurality of devices, are executing a same application, located in a same geographical location, or correspond to a same user. Responsive to the determining operation, a group with the subset of devices is created and communication between the devices is supported.

Abstract: Operations include determining that a subset of devices, from a plurality of devices, are executing a same application, located in a same geographical location, or correspond to a same user. Responsive to the determining operation, a group with the subset of devices is created and communication between the devices is supported.

Abstract: A network device to provide per-user firewall capabilities. The network device identifies a user associated with a received frame and a role of the user. The network device determines the firewall actions to be taken for the frame based on the role of the associated user. The user role may be dynamically changed by an administrator or automatically. A user role may be altered based on the authentication level of the user. The network device provides a system where a customized authentication experience may be provided for each user and services and permissions may be managed on a per-user basis.

Abstract: Operations include determining that a subset of devices, from a plurality of devices, are executing a same application, located in a same geographical location, or correspond to a same user. Responsive to the determining operation, a group with the subset of devices is created and communication between the devices is supported.

Abstract: Client traffic normally passes from a client to an access node, and from the access node through a tunnel to a controller, and then through another tunnel from the controller to the destination access node, and the destination client. When initiated by the controller, the access nodes establish a peer-to-peer tunnel for suitable client traffic, bypassing the “slow” tunnels through the controller with a “fast” peer-to-peer tunnel. Traffic through this “fast” tunnel may be initiated once the tunnel is established, or traffic for the “fast” tunnel may be queued up until traffic has completed passing through the “slow” tunnel. Slow tunnel traffic may be timed out, and queued traffic released after a preset time since the last packet was sent through the slow tunnel. The identity of the last packet sent through the slow tunnel may be retained, and queued traffic released when an acknowledgement for that packet is received.

Abstract: The present disclosure discloses a method and network device for overlaying one or more broadcast groups over virtual local area networks in a wireless network. The network device receives a broadcast/multicast message from a member device of a broadcast group. The broadcast group includes a subset of devices sharing at least one common property. The broadcast/multicast message is to be received by other member devices, but not by non-member devices of the first broadcast group. Furthermore, the broadcast group includes one of (i) a subset of devices from a single virtual local area network, and (ii) at least two subsets of devices from different virtual local area networks. The network device then determines the broadcast group associated with the received broadcast/multicast message based on the common property, and then transmits the received broadcast/multicast message to other member devices in the broadcast group.

Abstract: The present disclosure discloses a method and network device for overlaying one or more broadcast groups over virtual local area networks in a wireless network. The network device receives a broadcast/multicast message from a member device of a broadcast group. The broadcast group includes a subset of devices sharing at least one common property. The broadcast/multicast message is to be received by other member devices, but not by non-member devices of the first broadcast group. Furthermore, the broadcast group includes one of (i) a subset of devices from a single virtual local area network, and (ii) at least two subsets of devices from different virtual local area networks. The network device then determines the broadcast group associated with the received broadcast/multicast message based on the common property, and then transmits the received broadcast/multicast message to other member devices in the broadcast group.

Abstract: A network device to provide per-user firewall capabilities. The network device identifies a user associated with a received frame and a role of the user. The network device determines the firewall actions to be taken for the frame based on the role of the associated user. The user role may be dynamically changed by an administrator or automatically. A user role may be altered based on the authentication level of the user. The network device provides a system where a customized authentication experience may be provided for each user and services and permissions may be managed on a per-user basis.

Abstract: In general, one embodiment of the invention relates to a method of operation where the type of an incoming Media Access Control (MAC) frame is initially determined. Based on such determination, the MAC frame is processed locally at an access point if the MAC frame is one of a first group of MAC frames. Otherwise, the MAC frame is processed remotely at a switch communicatively coupled to the access point.