Abstract: Systems and methods are provided for new network device provisioning without Internet access. One method may include a method of network device provisioning without Internet access, the method including entering a pre-shared key (PSK) in a dynamic host configuration protocol (DHCP) message, obtaining the PSK from a set of DHCP message options by an onboarding network device requesting to join a private network, presenting the PSK, by the onboarding network device, to a network management system (NMS) of the private network, validating the PSK by the NMS, and updating an inventory list of the NMS to include the onboarding network device in the inventory list.

Abstract: Systems and methods are provided for dynamic virtual private network concentrators (VPNC) gateway selection and on-demand VRF-ID configuration. A dynamic VPNC gateway selection component can dynamically route to a particular VPNC gateway based on multiple user-specific factors, including: a) behavior of users on the network; and b) performance of a destination service/device. A dynamic VPNC gateway selection component can rank a user based on one or more factors relating to the behavior of the user. Also, the dynamic VPNC gateway selection component can determine whether a VPNC gateway at a data center is healthy, and whether a destination service at the data center is healthy. The dynamic VPNC gateway selection component can dynamically select a VPNC gateway from a plurality of VPNC gateways at the data center for communicating forwarded traffic from the user based on the user's ranking if either the VPNC gateway or the service are unhealthy.

Abstract: A method for troubleshooting and resolving access point device uplink failures. The method includes detecting an unresponsive access point on a wired computer network. In addition, the method includes retrieving a record of peer access points to determine the peer access points for the unresponsive access point. Further, the method proceeds to sending a first request to a peer access point of the unresponsive access point to query the unresponsive access point for a response over a wireless network. In response to the query, the network management system sends a notification that the unresponsive access point has a cable malfunction if the unresponsive access point responds to the query. Furthermore, the method includes, in response to the query, sending a notification to the network management system to inform that the unresponsive access point has a power malfunction if the unresponsive access point fails to respond to the query.

Abstract: A method for use in managing a networked computing system includes: receiving a trigger for a migration of a plurality of local migration artifacts from a first deployment state associated with an on-premises network management system to a second deployment state; and migrating the plurality of local migration artifacts from the first deployment state associated with the on-premises network management system to the second deployment state associated with the cloud-based provisioning system. The migration is seamless and includes reconciling at least one local migration artifact of the plurality of local migration artifacts with a plurality of remote migration artifacts maintained by the cloud-based provisioning system.

Abstract: A method for managing bandwidth may include identifying a first tier of applications and a second tier of applications, determining a number of user sessions associated with at least one application among the first tier of applications and the second tier of applications, each user session consuming a percentage of bandwidth of at least one communication channel in a network, and baselining a second tier application bandwidth use for each user session associated with the second tier of applications to determine a first interval and a second interval.

Abstract: Systems and methods are provided for network device configuration update. A method includes selecting a group of network devices to receive a configuration update; ranking the network devices according to an importance; updating each of the network devices in order of the ranking, from least important to most important, comprising: generating a first health score for the network device, the first health score representing a performance level of the network device prior to the configuration update; updating a configuration of the network device according to the configuration update subsequent to generating the first health score; generating a second health score for the updated network device subsequent to updating the configuration of the network device; and responsive to the second health score being lower than the first health score by more than a predetermined score threshold, rolling back the configuration update for the network devices that have been updated.

Abstract: Examples relate to a BC network including a plurality of network devices deployed in a network. The plurality of network devices includes an authoritative network device that generates a transaction in a distributed ledger. The transaction includes location information of a new public key certificate to be deployed in each of the network devices. In order to verify the transaction, a network device of the plurality of network devices verifies, using a smart contract, whether the new public key certificate is valid and whether the new public key certificate is different from a previously recorded public key certificate in the distributed ledger. In response to successful verification by at least a predefined number of network devices of the plurality of network devices, each of the network device record the transaction in the distributed ledger.

Abstract: Some examples relate to managing multicast group traffic. In an example, a switch anchor controller receives a request for a multicast group from an associated network switch in a multicast-capable network. The associated network switch registers to the switch anchor controller in the multicast-capable network. In response to the request, the switch anchor controller selects a non-anchor controller in the multicast-capable network to serve the multicast group to the associated network switch. The switch anchor controller provides the information related to the non-anchor controller to the associated network switch, which in response creates a specific multicast tunnel between the associated network switch and the non-anchor controller to transfer multicast traffic related to the multicast group.

Abstract: Examples described herein provide for associating a network device to a network management system (NMS). Examples herein include determining, by a network orchestrator, a set of embeddings indicative of characteristics of the network device and each of a plurality of instances of the NMS. Examples herein include determining, by the network orchestrator for each of the plurality of instances, a probability score based on the set of embeddings, wherein the probability score is indicative of a likelihood of the network device to be associated with the instance. Examples herein further include, based on the probability score for each of the plurality of instances, selecting, by the network orchestrator, a first instance of the plurality of instances to associate with the network device. Examples herein include associating, by the network orchestrator, the network device to the first instance.

Abstract: An example non-transitory, computer-readable medium includes instructions that cause a device to determine, for uplinks of a branch gateway, a link health baseline. The instructions further cause the device to determine, for a set of criticality classes, a class link health baseline for each link health baseline, based on the link health baseline and a tolerance level of each criticality class. The instructions further cause the device to calculate, based in part on weighted parameters of the class link health baselines and an uplink cost, a path quality threshold score for each application category and for each uplink. The instructions further cause the device to select, for each application category, a primary uplink and a secondary uplink based on the path quality threshold scores. The instructions further cause the device to route network traffic through the primary uplink of the application category assigned to the network traffic.

Abstract: Examples include detection of a status of an uplink in an SD-WAN. Some examples use a predicted probe profile determined based on predicted RTT values generated using a machine learning algorithm for estimating whether the uplink is failed. In response to estimating that the uplink is failed, some examples compute a confidence level value and determine whether the estimated failure of the uplink is acceptable based on the confidence level value to detect a status of the uplink.

Abstract: Dynamic path steering utilizing automatic generation of user threshold profiles is described. An example of a storage medium includes instructions for obtaining a threshold policy for a first application, the threshold policy including a set of threshold values for operational parameters; generating a migration score for a first user, the migration score based at least in part on a user score for the first user; generating a set of secondary threshold values for the first user based at least in part on the migration score and the set of threshold values; enabling operation of the first application for the first user using a first network uplink; monitoring network parameter values in operation of the first application; and upon detecting an operational parameter value exceeding a secondary threshold value, migrating operation of the first application for the first user from the first network uplink to a second network uplink.

Abstract: Some examples relate to identifying a dynamic network parameter probe interval in an SD-WAN. In an example, a controller may define a probe profile of an uplink in the SD-WAN. The probe profile of the uplink may include a static probe interval and a probe retry value. The controller may determine the value of the network parameter for the uplink, prior to expiration of a static probe timer interval. If the value of the network parameter is in negative deviation with a baseline value of the network parameter, the controller may identify a dynamic probe interval for each successive determination of the value of the network parameter. The identification of the dynamic probe interval for a given successive determination may depend on at least one previously determined value of the network parameter. The controller may initiate duplicate network traffic on a secondary uplink in the SD-WAN.

Abstract: An example branch gateway includes processing circuitry and a memory including instructions that cause the branch gateway to perform various functions. The various functions include determining a first uplink health threshold, determining a second uplink health threshold, calculating migration thresholds for a set of non-critical applications, determining that a QoS threshold of a critical application is likely to be imminently breached, selecting a least critical application, based on the migration threshold of the least critical application, and migrating the least critical application from the first uplink to a second uplink.

Abstract: Systems and methods are provided for seamless and automatic upgrade of access points in a facility with minimal disruption, particularly, for important users of a network. The access points may be ranked, and the rankings may be aggregated to identify a sub-region of the facility with the lowest ranked access points. Various sub-sets of the access points in the identified sub-region can be updated separately so that spatial coverage by the other sub-sets maintains continuous access within the sub-region during the updates. Updates to later sub-sets and/or sub-regions can be performed contingent on the success of the earlier updates. In this way, updates can be verified on access points used by lower-priority users such as guest users of the network to avoid disruption of access to more important users such as executives or safety workers on the network.

Abstract: An example branch gateway includes processing circuitry and a memory including instructions that cause the branch gateway to perform various functions. The various functions include determining a first uplink health threshold, determining a second uplink health threshold, calculating migration thresholds for a set of non-critical applications, determining that a QoS threshold of a critical application is likely to be imminently breached, selecting a least critical application, based on the migration threshold of the least critical application, and migrating the least critical application from the first uplink to a second uplink.

Abstract: The present disclosure provides an improved computing system to determine a suitability of a RF plan and a dynamic wireless network system. The method includes receiving uploads of RF plans associated with wireless network deployments which provided wireless network capability throughout each respective deployment area. Further, storing the uploaded RF plans with in a network storage cloud. In addition, training a predictive model with the stored uploaded RF plans. The dynamic wireless network system disclosed herein includes a plurality of internet-of-things devices within a deployment area. The system further includes at least one network device communicatively coupled to each of the plurality of internet-of-things devices, wherein the at least one network device has access to a trained predictive model that is to determine a number of access points and a layout of the access points within the deployment area based on a set of characteristics associated with the deployment area.

Abstract: Systems and methods are provided for seamless and automatic upgrade of access points in a facility with minimal disruption, particularly, for important users of a network. The access points may be ranked, and the rankings may be aggregated to identify a sub-region of the facility with the lowest ranked access points. Various sub-sets of the access points in the identified sub-region can be updated separately so that spatial coverage by the other sub-sets maintains continuous access within the sub-region during the updates. Updates to later sub-sets and/or sub-regions can be performed contingent on the success of the earlier updates. In this way, updates can be verified on access points used by lower-priority users such as guest users of the network to avoid disruption of access to more important users such as executives or safety workers on the network.

Abstract: Systems and methods are provided for network device configuration update. A method includes selecting a group of network devices to receive a configuration update; ranking the network devices according to an importance; updating each of the network devices in order of the ranking, from least important to most important, comprising: generating a first health score for the network device, the first health score representing a performance level of the network device prior to the configuration update; updating a configuration of the network device according to the configuration update subsequent to generating the first health score; generating a second health score for the updated network device subsequent to updating the configuration of the network device; and responsive to the second health score being lower than the first health score by more than a predetermined score threshold, rolling back the configuration update for the network devices that have been updated.

Abstract: A method for use in managing a networked computing system includes: receiving a trigger for a migration of a plurality of local migration artifacts from a first deployment state associated with an on-premises network management system to a second deployment state; and migrating the plurality of local migration artifacts from the first deployment state associated with the on-premises network management system to the second deployment state associated with the cloud-based provisioning system. The migration is seamless and includes reconciling at least one local migration artifact of the plurality of local migration artifacts with a plurality of remote migration artifacts maintained by the cloud-based provisioning system.