Abstract: A method may determine the location and/or motion of a client device. Based on these determinations, the method may 1) delay a potential move of the client device to a new access point until the client device reaches a non-transitional or less dense area or is stationary, 2) delay a potential move of the client device to a new access point while the client device is on the edge of the network environment, 3) compute a probable destination of the client device and wait until this destination is reached before triggering movement to a new access point, 4) reduce the effects caused by shadowing, 5) guide the client device to more proximate access points, and 6) guide the client device to dedicated proximate access points when client devices are relatively motionless. Accordingly, the method dynamically leverages client device location and motion to intelligently assign client devices to access points.

Abstract: The present disclosure discloses a method and network device for automatic delivery traffic indication message (DTIM) interval control for better mobile power save performance. The disclosed network device determines one or more characteristics for at least one client device connected to an Access Point (AP). The network device then dynamically selects a DTIM interval for the AP based on the characteristics for the at least one client device, and configures the AP to transmit a DTIM beacon frame at a frequency based on the dynamically selected DTIM interval. Alternatively, the network device can determine one or more characteristics for a client device, and dynamically select a Virtual Access Point (VAP) for providing network access to the client device based on the characteristics for the client device and a DTIM interval configured for the VAP, and then cause the client device to connect to the VAP.

Abstract: A method includes computing a minimum sensitivity threshold value for a particular wireless device, configuring the particular wireless device to receive wireless signals with a signal strength higher than the minimum sensitivity threshold value, distributing the minimum sensitivity threshold value to other wireless devices, and configuring the other wireless devices based on the minimum sensitivity threshold value for the particular wireless device.

Abstract: The present disclosure discloses a method and a network device for performing content filtering on SPDY connections. Specifically, a network device receives, from a client device, a first control frame identifying a first maximum number of unsolicited unacknowledged messages related to a web resource that can be transmitted by a web server. The network device transmits to the web server a second control frame identifying a second and different maximum number of unsolicited unacknowledged messages related to the web resource that can be transmitted by the web server. In some embodiments, the network device establishes a first connection with the client device without forwarding the request to the web server, and a second connection with the web server. Further, the network device inspects data in the unsolicited unacknowledged messages and forwards at least portion of the data to the client device using the first connection.

Abstract: The present disclosure discloses a method and a network device for failure detection of nodes in a cluster. Specifically, a network device transmits data to another device at a first time. The network device then receives an acknowledgment of the data from the second device at a second time. Next, the network device determines a Round Trip Time (RTT) for the first device and the second device based on the first time and the second time. Based on the RTT, the network device determines a first frequency for transmitting a heartbeat protocol message between the first device and the second device, and transmits a heartbeat protocol message between the first device and the second device at the first frequency.

Abstract: The present disclosure discloses a method and a network device for efficient mobile client device roaming in a wireless local area network with multiple access points. Specifically, a network device determines a first received signal strength value for a first set of signals transmitted between a client device and a first access point during a first time period; and, determines a second received signal strength value for a second set of signals transmitted between a client device and the access point during a second time period. Based on the first and the second signal strength values, the network device computes a change in signal strength value corresponding to wireless communication between the client device and the first access point. Based on the change in signal strength value, the network device selects the access point from a plurality of access points for providing network access to the client device.

Abstract: The present disclosure discloses a method and a network device for session aware access point load balancing. Specifically, a network device monitors data corresponding to a plurality of client devices associated with a first access point. Then, the network device determines whether the data matches particular criteria. Responsive to determining that the data matches the particular criteria, the network device select at least a first client device of the plurality of client devices for disassociation and/or de-authentication. Moreover, the network device causes disassociation and/or de-authentication of the first client device from the first access point.

Abstract: According to one embodiment, a system and computer-readable storage medium for storage of software directed to the management of associations between network devices is described. The computer-readable storage medium comprising instructions which, when executed by at least one hardware processor on a network device, causes performance of operations, comprising: (1) determining a desired operating state for a client device under analysis, the client device being associated with a first network device of a plurality of network devices; (2) detecting if a triggering event has occurred based on a comparison of the desired operating state for the client device under analysis to an actual operating state for the client device under analysis; and (3) in response to detecting that the triggering event has occurred, causing the client device to wirelessly connect to a second network device of the plurality of network devices in lieu of the first network device.

Abstract: System and methods are provided for dynamically assigning wireless channels to priority groups based on characteristics of the channels, the environment in which the channels will be used, regulatory requirements, and/or capabilities of client devices. Thereafter, channels may be intelligently assigned to access points to achieve one or more goals. For example, wireless channels may be assigned to access points to ensure balanced coverage throughout the network system for client devices of each type/capability, to minimize effects of wireless interference in the network system, to increase fault tolerance in the network system, and/or to generally improve the coverage and quality of connections in the network system.

Abstract: A method includes a particular user application, without operating system kernel access, performing the operations of: identifying a set of applications that a user has permission to access, receiving a request to a access a particular application of the set of applications, and causing execution of the particular application.

Abstract: Services in a network device are added through providing virtual environments. Virtualization allows services based on other platforms or architectures to be run with minimum modification and in a secure manner. Connecting services to the host through a stateful firewall allows dynamic integration, and passes only traffic of interest to the service. Virtualization allows services written for different instruction architectures to be supported. Multiple virtualized environments each supporting a service may be run.

Abstract: According to one embodiment, a method comprises automatically uploading device information from a first network device in a first operating state to a second network device in response to an event, such as an initial power up. The second network device is part of the cloud, and thus, providing cloud-based services. Subsequent to the uploading of the device information, the first network device receives information controlling the operation of the first network device based on the device information.

Abstract: The present disclosure discloses a method and a network device for client association management based on estimated session duration. Specifically, a network device determines that a client device is on an active session. The client device is associated with a first access point of a plurality of access points. The network then estimates a remaining duration of the active session to obtain an estimated remaining duration. Responsive at least to the estimated remaining duration of the active session being greater than a threshold value, the network device causes the client device to associate with a second access point different than the first access point. Responsive at least to the estimated remaining duration of the active session being less than the threshold value, the network device refrains from causing the client device to associate with the second access point.

Abstract: The present disclosure discloses a method and a network device for causing client devices to renew DHCP IP addresses based on link local addresses. Specifically, the network device provides for detecting that a wireless client device has been self-assigned with an automatic IP address, and for de-authenticating the wireless client device such that the wireless client device restarts the authentication process and the DHCP process subsequently without excessive delay. In particular, the network device may receive a packet from a wireless client device. The network device then determines that a source or destination IP address of a received packet corresponding to the wireless client device is a link local IP address. Responsive to determining that the source IP address is a link local IP address, the network device transmits at least one message that causes the wireless client device to request a new IP address.

Abstract: The present disclosure discloses a method and a network device for detecting use of wrong IP addresses by wireless client devices. Specifically, the network device maintains a range of valid IP addresses for a particular IP subnet. Also, the network device receives a message from a wireless client device by an access point on the particular IP subnet. The network device then determines a source IP address in the message received on the particular IP subnet. Further, the network device determines that the source IP address does not match the range of valid IP addresses for the particular IP subnet. Responsive at least to determining that the source IP address does not match the range of valid IP addresses for the particular IP subnet, the network device transmits at least one message that causes the wireless client device to request a new IP address.

Abstract: A system and method is described that computes an estimated current location for a client device based on both the detected current location and the predicted current location of the client device. By utilizing the predicted current location, the system and method may account for and compensate for anomalies and inaccuracies in the detected current location. Accordingly, the system and method provides a more accurate estimation for the current location of the client device based on examination of heuristics and a priori environmental data. In particular, the system and method compensates for detected locations that are impossible or improbable based on previous locations of the client device, the layout of the environment in which the client device is traversing, data describing the user of the client device, and/or data describing the client device.

Abstract: The present disclosure discloses a system and method for classifying Wi-Fi signals from Fourier transform samples. Generally, classifying Wi-Fi signals from Fourier transform samples includes: collecting and dividing Fourier transform samples into frequency blocks; determining the bandwidth for the Fourier transform sample; and determining whether the Fourier transform sample corresponds to a narrowband signal. Further, if a determination is made that the Fourier transform sample does not correspond to a narrowband signal, channel utilization is calculated based on a determination that the FFT sample corresponds to a Wi-Fi signal. If it is determined that the Fourier transform sample corresponds to a narrowband signal, then a determination is made that the FFT sample corresponds to a Wi-Fi signal based on certain criteria. The certain criteria may include one or more of a slope value, a number of sub-peak bins, an analysis of adjacent channels, characteristic matching, or other criteria.

Abstract: According to one embodiment of the disclosure, a non-transitory computer-readable medium comprising instructions which, when executed by one or more hardware processors, causes performance of operations. One of these operations comprises transmitting, from a first device to a second device, a first plurality of frames using a first polarization configuration for a first antenna corresponding to the first device. Based on feedback information associated with the first plurality of frames, a second polarization configuration, which is different than the first polarization configuration, is selected for transmitting a second plurality of frames. Thereafter, the second plurality of frames is transmitted from the first device to the second device using the second polarization configuration for the first antenna.

Abstract: A system with at least one device including a hardware processor, performs the steps of receiving, by the system, a packet from a second system to be transmitted to a third system, forwarding, by the system to the third system, the packet received from the second system; modifying a portion of the packet to obtain a modified packet that falsely identifies a fourth system as a source of the modified packet, and transmitting, by the system to the third system, the modified packet identifying the fourth system as the source of the modified packet.

Abstract: A method for performing aggregation at one or more layers starts with an AP placing at a first layer one or more received frames in a queue at the AP. When a transmit scheduler is ready to transmit an aggregated frame corresponding to the queue, the AP may iteratively select a plurality of frames selected from the one or more received frames, and aggregate at the first layer the plurality of frames into the aggregated frame. The number of frames included in an aggregated frame may be based on at least one of: a dynamically updated rate of transmission associated with a size of the frames, a class of the frames, a transmission opportunity value associated with the class of the frames and a total projected airtime for transmitting the aggregated frame. Other embodiments are also described.