Abstract: Methods and systems for providing confidentiality and/or integrity to fragmented packet transmissions, without reassembly of the fragments, across wired and wireless communications networks are disclosed. Encryption of a first fragmented packet can be performed by using an initial encryption state variable and keying material resulting in a first ciphertext fragment and a first encryption state variable. Then encryption of a second fragments packet can be performed by using the first encryption state variable and the keying material resulting in a second ciphertext fragment. Decryption of fragments can be performed in a similar manner as encryption. Computation of a message authentication code can be performed by computing a first hash state value for a first block size of bytes of a first packet fragment using an initial hash state value, and storing the first hash value and a first set of remainder bytes of the first packet fragment.

Abstract: Systems and methods applicable to a unified wired/wireless network device are proposed to address quality of service issues and roaming support for wired and wireless clients in a unified wired/wireless network. The proposed solution can include a hierarchical scheduler and shaper mechanism that is able to flexibly support different quality of service disciplines, i.e., strict-priority, guaranteed bandwidth, deficit-round-robin, etc., to allow different levels of maximum and minimum bandwidth allocation to each user or group of users. The solution can also include a dynamic queue assignment mechanism that allows queues to be moved from one queue-group and/or port to another queue-group and/or port, without losing packets, when a wireless client roams between access points within the unified network.

Abstract: A method and apparatus that makes it possible to have a single unified network where the devices at the edge are able to handle both wired and wireless traffic. Separate devices are not required to handle wired and wireless traffic. Instead the whole enterprise network comprises devices that are agnostic to the nature of the traffic and have all the features required by both wired and wireless traffic.

Abstract: An apparatus provides an integrated single chip solution to solve a multitude of WLAN problems, and especially Switching/Bridging, and Security. In accordance with an aspect of the invention, the apparatus is able to terminate secured tunneled IPSec, L2TP with IPSec, PPTP, SSL traffic. In accordance with a further aspect of the invention, the apparatus is also able to handle computation-intensive security-based algorithms such as Diffie Hellman without significant reduction in traffic throughput. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number of useful networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs.

Abstract: An apparatus provides an integrated single chip solution to solve a multitude of WLAN problems, and especially Switching/Bridging, and Security. In accordance with another aspect of the invention, the apparatus is able to terminate secured tunneled 802.11i, IPSec and L2TP with IPSec traffic. In accordance with a further aspect of the invention, the apparatus is also able to handle computation-intensive security-based algorithms including per packet Initialization Vector generation without significant reduction in traffic throughput. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number of useful networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs.

Abstract: An apparatus provides a hardware-based solution to enable support for L3 switching, network address port translation and application level gateways. The architecture involved in this hardware approach is such that it is scalable for implementation in a variety networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs, such as access points, access point concentrators, wireless-ready wiring closet or edge switches, and wireless co-processors.

Abstract: An apparatus provides an integrated single chip solution to solve Switching/Bridging, Security, Access Control, Bandwidth Management—Quality of Service issues, Roaming—Clean Hand off, Anticipatory Load Management, Location Tracking, Support for Revenue Generating Services—Fine grain QoS, Bandwidth Control, Billing and management. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number of useful networking products that fulfill enterprise security and wired and wireless networking needs. In accordance with a further aspect of the invention, the architecture supports stacking so as to enable the combining of two or more devices to create the equivalent of a single device with a larger port count, depending on system needs and preferences, while also providing support for services such as trunking, mirroring and QoS across all the ports.

Abstract: An apparatus provides an integrated single chip solution to solve Switching/Bridging, Security, Access Control, Bandwidth Management—Quality of Service issues, Roaming—Clean Hand off, Anticipatory Load Management, Location Tracking, Support for Revenue Generating Services—Fine grain QoS, Bandwidth Control, Billing and management. The architecture is such that it not only resolves the problems pertinent to WLAN it is also scalable and useful for building a number of useful networking products that fulfill enterprise security in all possible combinations of wired and wireless networking needs.

Abstract: An apparatus provides a hardware-based solution to enable roaming with session persistence within or between subnets. In accordance with a further aspect of the invention, one approach described herein is based on NAT/NAPT, while another uses aspects of Mobile IP. The architecture involved in both hardware approaches is such that it is scalable for implementation in a variety networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs, such as access points, access point concentrators, wireless-ready wiring closet or edge switches, and wireless co-processors.

Abstract: An apparatus provides an integrated single chip solution to solve a multitude of WLAN problems, and especially Switching/Bridging, and Security. In accordance with an aspect of the invention, the apparatus is able to terminate secured tunneled IPSec and L2TP with IPSec traffic. In accordance with a further aspect of the invention, the architecture can handle both tunneled and non-tunneled traffic at line rate, and manage both types of traffic in a unified fashion. The architecture is such that it not only resolves the problems pertinent to WLAN, it is also scalable and useful for building a number of useful networking products that fulfill enterprise security and all possible combinations of wired and wireless networking needs.