Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Network systems and architectures with multiple load balancers and network access controllers. In some implementations, an apparatus is provided. The apparatus includes a memory to store packets and a packet forwarding component operatively coupled to the memory. The packet forwarding component receives an encapsulated packet from a tunnel device via a first tunnel. The first tunnel is coupled to the tunnel device and the packet forwarding component. The encapsulated packet is generated by the tunnel device based on a data packet received from an access point. The packet forwarding component identifies a first network access controller from a plurality of network access controllers. The plurality of network access controllers are coupled to the packet forwarding component via a set of tunnels. The packet forwarding component forwards the encapsulated packet to the first network access controller via a second tunnel of the set of tunnels.

Abstract: Network architecture with network access controllers. In one embodiment, a method is disclosed. The method includes receiving a packet from a client device via an ingress network interface, wherein the packet comprises a first medium access control (MAC) address indicating a default network access controller. The method also includes identifying a source MAC address of the packet, wherein the source MAC address indicates a second MAC address of the client device. The method further includes identifying a second network access controller based on the source MAC address. The method further includes updating, by a packet forwarding component, a destination MAC address to indicate a third MAC address of the second network access controller. The method further includes forwarding the packet to the second network access controller via an egress network interface.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Network systems and architectures with multiple load balancers and network access controllers. In some implementations, an apparatus is provided. The apparatus includes a memory to store packets and a packet forwarding component operatively coupled to the memory. The packet forwarding component receives an encapsulated packet from a tunnel device via a first tunnel. The first tunnel is coupled to the tunnel device and the packet forwarding component. The encapsulated packet is generated by the tunnel device based on a data packet received from an access point. The packet forwarding component identifies a first network access controller from a plurality of network access controllers. The plurality of network access controllers are coupled to the packet forwarding component via a set of tunnels. The packet forwarding component forwards the encapsulated packet to the first network access controller via a second tunnel of the set of tunnels.

Abstract: A wireless electronic device is provided. The wireless electronic device includes a first antenna and a first transceiver operatively coupled to the first antenna. The first transceiver is configured to receive and transmit data signals of a wireless communications network in a first frequency band. The first antenna is positioned to receive and transmit in a first direction. The wireless electronic device further includes a second antenna and a second transceiver operatively coupled to the second antenna and the first transceiver. The second transceiver is configured to receive and transmit data signals of the wireless communications network in a second frequency band. The second antenna is positioned to receive and transmit in a second direction being opposite to the first direction.

Abstract: Network architecture with network access controllers. In one embodiment, a method is disclosed. The method includes receiving a packet from a client device via an ingress network interface, wherein the packet comprises a first medium access control (MAC) address indicating a default network access controller. The method also includes identifying a source MAC address of the packet, wherein the source MAC address indicates a second MAC address of the client device. The method further includes identifying a second network access controller based on the source MAC address. The method further includes updating, by a packet forwarding component, a destination MAC address to indicate a third MAC address of the second network access controller. The method further includes forwarding the packet to the second network access controller via an egress network interface.

Abstract: A wireless electronic device is provided. The wireless electronic device includes a first antenna and a first transceiver operatively coupled to the first antenna. The first transceiver is configured to receive and transmit data signals of a wireless communications network in a first frequency band. The first antenna is positioned to receive and transmit in a first direction. The wireless electronic device further includes a second antenna and a second transceiver operatively coupled to the second antenna and the first transceiver. The second transceiver is configured to receive and transmit data signals of the wireless communications network in a second frequency band. The second antenna is positioned to receive and transmit in a second direction being opposite to the first direction.

Abstract: Techniques to assign nodes in a network to groups of nodes includes grouping nodes on a network into groups based on host connection set data by identifying bi-connected components in the host connection set data; and merging groups with similar connection habits as determined by examining the host connection set data into larger groups.

Abstract: Techniques for correlating different results of role grouping includes receiving two sets of grouping of nodes on a network, grouping of the nodes according to connection characteristics of the nodes in the groups, each of the sets having associated identifications and correlating associated identifications of one set with those of the other set so that the two groups have the same identifications, if the member hosts of each set of groups have nearly identical connection habits.

Abstract: A method for authenticating an end user in a network environment is provided that includes positioning an identification element in a first device that is operable to provide an interface for an end user. The first device is further operable to communicate with an internet protocol (IP) network and with a second device. The end user is then authenticated with a selected one of the first and second devices through the IP network using the identification element such that the end user may operate the first and second devices in multiple access networks that cooperate to provide connectivity to the end user. Each of the access networks is operable to facilitate communications between the end user and the IP network.

Abstract: Techniques for correlating different results of role grouping includes receiving two sets of grouping of nodes on a network, grouping of the nodes according to connection characteristics of the nodes in the groups, each of the sets having associated identifications and correlating associated identifications of one set with those of the other set so that the two groups have the same identifications, if the member hosts of each set of groups have nearly identical connection habits.

Abstract: Techniques to assign nodes in a network to groups of nodes includes grouping nodes on a network into groups based on host connection set data by identifying bi-connected components in the host connection set data; and merging groups with similar connection habits as determined by examining the host connection set data into larger groups.