Abstract: Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for job management in a distributed network include a prioritizer that determines a priority level for a job and inserts the job into a priority queue based on the priority level, a scheduler that, for each element in the distributed network, requests the priorities of one or more jobs scheduled for execution, evaluates, based on the priorities of the one or more jobs scheduled for execution, the priority of a particular job with respect to the element, determines, based on the priorities, that the network element is free to perform job processes, and upon determining that a network element is free, scheduling a particular job for execution, and an executor that determines that all local and remote resources required for the scheduled job are available and executes the job according to processes defined within the distributed network.

Abstract: Methods and systems for context-aware distributed computing. In one aspect, a system includes a work administrator system; an API; a worker module; and a work administrator. One or more worker modules register with one or more work administrators. The worker modules may inform the work administrators of their processing capabilities and capacity. The work administration system receives a request for processing via the API. A work administrator parses a request into one or more discrete work requests and publishes each work request to the worker modules. The worker modules notify the work administrator whether they can perform the work, along with load and capabilities. The work administrator a worker module to perform each work request. When a worker module completes the work, it notifies the work administrator. The work administration system may aggregate the results from one or more worker modules and provide a response via the API.

Abstract: A wireless network device only installs configuration information that is wirelessly received from a provisioning device if the wireless network device successfully authenticates a security token it receives from the provisioning device. The provisioning device can obtain the security token by scanning a label associated with the wireless network device or by other methods.

Abstract: A wireless mesh access point receives a first notification of firmware download availability. In response to the first notification, the wireless mesh access point downloads a firmware file from a peer from which the first notification was received. The wireless mesh access point loads the downloaded firmware file into a firmware memory associated with operation of a processor. The wireless mesh access point then transmits a second notification of firmware download availability to one or more other peers.

Abstract: A wireless mesh access point (AP) determines a candidate set of Basic Service Set Identifiers (BSSIDs) or other unique identifiers by monitoring for detection of a set of wireless communications, each bearing a unique identifier. The AP selects a candidate unique identifier from the candidate set. The AP establishes a wireless communication link with a controller of a wireless mesh network associated with the candidate unique identifier. The AP transmits a request to the controller to join the wireless mesh network associated with the candidate unique identifier. The AP receives a response from the controller indicating either acceptance or rejection of the request. If the response indicates rejection, the AP rejects one or more unique identifiers in the candidate set in response to reason information included in the rejection.

Abstract: A wireless network switch device includes wired-network switch circuitry and wireless local-area network (WLAN) radio devices integrated together within a common housing. WLAN antennas that are distributed about the WLAN coverage area can be coupled to antenna ports on the device housing. Channels are assigned to the WLAN radio devices and corresponding antennas in a manner that promotes minimization of signal interference between adjacent WLAN radio devices in the housing as well between adjacent antennas.

Abstract: A wireless network switch device includes wired-network switch circuitry and wireless local-area network (WLAN) radio devices integrated together within a common housing. WLAN antennas that are distributed about the WLAN coverage area can be coupled to antenna ports on the device housing. Channels are assigned to the WLAN radio devices and corresponding antennas in a manner that promotes minimization of signal interference between adjacent WLAN radio devices in the housing as well between adjacent antennas.

Abstract: A rogue access point in a wireless local-area network can be disabled by an authorized access point wirelessly transmitting a layer-2 broadcast packet. If a rogue access point receives this broadcast packet, it will forward a copy to the switch to which it is connected. The switch then determines whether the port on which the copy of the broadcast packet is received is associated an authorized access point port. If the switch determines the port is not an authorized access point port, the switch shuts down the port.

Abstract: A server responds to a DHCP request for an IP address by setting a subnet in accordance with whether the client's MAC address is recognized as previously having been authenticated or otherwise associated with a policy. If the client has not been authenticated, the server provides a captive portal to enforce authentication. A routing device positioned in the network between clients and the server controls access to network resources by routing communications from clients in accordance with subnet addressing, where each subnet is associated with a policy.

Abstract: A wireless network device only installs configuration information that is wirelessly received from a provisioning device if the wireless network device successfully authenticates a security token it receives from the provisioning device. The provisioning device can obtain the security token by scanning a label associated with the wireless network device or by other methods.

Abstract: A server responds to a DHCP request for an IP address by setting a subnet in accordance with whether the client's MAC address is recognized as previously having been authenticated or otherwise associated with a policy. If the client has not been authenticated, the server provides a captive portal to enforce authentication. A routing device positioned in the network between clients and the server controls access to network resources by routing communications from clients in accordance with subnet addressing, where each subnet is associated with a policy.

Abstract: A wireless mesh access point (AP) determines a candidate set of Basic Service Set Identifiers (BSSIDs) or other unique identifiers by monitoring for detection of a set of wireless communications, each bearing a unique identifier. The AP selects a candidate unique identifier from the candidate set. The AP establishes a wireless communication link with a controller of a wireless mesh network associated with the candidate unique identifier. The AP transmits a request to the controller to join the wireless mesh network associated with the candidate unique identifier. The AP receives a response from the controller indicating either acceptance or rejection of the request. If the response indicates rejection, the AP rejects one or more unique identifiers in the candidate set in response to reason information included in the rejection.

Abstract: A rogue access point in a wireless local-area network can be disabled by an authorized access point wirelessly transmitting a layer-2 broadcast packet. If a rogue access point receives this broadcast packet, it will forward a copy to the switch to which it is connected. The switch then shuts down the port on which it received the forwarded copy of the broadcast packet.

Abstract: A wireless mesh access point receives a first notification of firmware download availability. In response to the first notification, the wireless mesh access point downloads a firmware file from a peer from which the first notification was received. The wireless mesh access point loads the downloaded firmware file into a firmware memory associated with operation of a processor. The wireless mesh access point then transmits a second notification of firmware download availability to one or more other peers.

Abstract: A rogue access point in a wireless local-area network can be disabled by an authorized access point wirelessly transmitting a layer-2 broadcast packet. If a rogue access point receives this broadcast packet, it will forward a copy to the switch to which it is connected. The switch then determines whether the port on which the copy of the broadcast packet is received is associated an authorized access point port. If the switch determines the port is not an authorized access point port, the switch shuts down the port.

Abstract: A method and apparatus for network access control includes an apparatus for granting a computing device access to a network, the apparatus having a plurality of substantially similar access devices, wherein each access device comprises a status-determination module to determine an access status based at least in part on whether the computing device is compliant with an access policy, an access-grant module configured for receiving an access status corresponding to the computing device from one or more of the access devices, and granting the computing device access to the network according to at least one of the access status determined by the status-determination module or the received access status.

Abstract: A method and apparatus for network access control includes an apparatus for granting a computing device access to a network, the apparatus having a plurality of substantially similar access devices, wherein each access device comprises a status-determination module to determine an access status based at least in part on whether the computing device is compliant with an access policy, an access-grant module configured for receiving an access status corresponding to the computing device from one or more of the access devices, and granting the computing device access to the network according to at least one of the access status determined by the status-determination module or the received access status.