Abstract: Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Abstract: A method including receiving, in a controller, from a client device in a network, a resolution query specifying a host name, is provided. The method includes parsing the resolution query to determine whether the host name is associated with an core host or with a public host, and directing the resolution query to a remote domain name system server dedicated to service the core host when the host name is associated with an enterprise name. The method also includes directing the resolution query to a local domain name system server when the host name is associated with a public service provided by the public host. A system to perform the above method is also provided.

Abstract: Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Abstract: An example branch gateway (BG) of a local area network (LAN) includes processing circuitry and a memory. The memory includes instructions that cause the BG to determine that a network traffic load of the BG is greater than that of another BG. The instructions further cause the BG to determine that a first network traffic load skew between the BG and the other BG is greater than a first threshold. The instructions further cause the BG to select a first virtual local area network (VLAN) of a set of VLANs of the LAN, wherein network traffic of client devices of the first VLAN is routed through the BG based on a master role of the first VLAN being assigned to the BG. The instructions further cause the BG to transmit a message to the other BG that assigns the master role of the first VLAN to the other BG.

Abstract: An example controller may include processing circuitry and memory including instructions that when executed by the processing circuitry cause the processing circuitry to circuitry cause the processing circuitry to receive a dynamic host configuration protocol (DHCP) configuration from a management server; determine, based on the DHCP configuration, a network device communicatively coupled to the controller, identify an action to be performed by the network device to accommodate the DHCP configuration; and transmit a message to the determined network device indicating the DHCP configuration and the determined action, wherein the network device performs the determined action in response to the receipt of the message.

Abstract: A method including receiving, in a controller, from a client device in a network, a resolution query specifying a host name, is provided. The method includes parsing the resolution query to determine whether the host name is associated with an core host or with a public host, and directing the resolution query to a remote domain name system server dedicated to service the core host when the host name is associated with an enterprise name. The method also includes directing the resolution query to a local domain name system server when the host name is associated with a public service provided by the public host. A system to perform the above method is also provided.

Abstract: A method including receiving, in a controller, from a client device in a network, a resolution query specifying a host name, is provided. The method includes parsing the resolution query to determine whether the host name is associated with an core host or with a public host, and directing the resolution query to a remote domain name system server dedicated to service the core host when the host name is associated with an enterprise name. The method also includes directing the resolution query to a local domain name system server when the host name is associated with a public service provided by the public host. A system to perform the above method is also provided.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.

Abstract: Systems and methods are provided for redistributing virtual private network tunnels among a plurality of virtual private network concentrators. The method includes receiving, from each of the virtual private network concentrators, a respective utilization indicator; selecting a source one of the virtual private network concentrators according to the utilization indicators; selecting a destination one of the virtual private network concentrators according to the utilization indicators; selecting one of the virtual private network tunnels connected to the source one of the virtual private network concentrators; and transferring the selected one of the virtual private network tunnels from the source one of the virtual private network concentrators to the destination one of the virtual private network concentrators.

Abstract: An example, controller may include processing circuitry and memory including instructions that when executed by the processing circuitry cause the processing circuitry to circuitry cause the processing circuitry to receive a dynamic host configuration protocol (DHCP) configuration from a management server; determine, based on the DHCP configuration, a network device communicatively coupled to the controller, identify an action to be performed by the network device to accommodate the DHCP configuration; and transmit a message to the determined network device indicating the DHCP configuration and the determined action, wherein the network device performs the determined action in response to the receipt of the message.

Abstract: A method including receiving, in a controller, from a client device in a network, a resolution query specifying a host name, is provided. The method includes parsing the resolution query to determine whether the host name is associated with an core host or with a public host, and directing the resolution query to a remote domain name system server dedicated to service the core host when the host name is associated with an enterprise name. The method also includes directing the resolution query to a local domain name system server when the host name is associated with a public service provided by the public host. A system to perform the above method is also provided.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.