Abstract: A computer that segments traffic associated with different entities across heterogeneous networks is described. During operation, the computer may provide, addressed to a second computer, information that specifies a mapping of an identifier of an electronic device in a wireless network and a second identifier of a virtual container for traffic associated with the electronic device in the wireless network to a third identifier of the electronic device in a cellular-telephone network, where the electronic device and the virtual container are associated with an entity. Then, the computer may communicate the traffic between the wireless network and the cellular-telephone network within the virtual container based at least in part on the mapping, where the virtual container isolates the traffic from other traffic in the wireless network. Note that the identifier may include a MAC address and the third identifier may include an IMSI.

Abstract: An apparatus and method provide personal networks to a plurality of tenant entities on a property network, which has a captive portal and a property identification (ID). Virtual Local Area Network (VLAN) are assigned to each of the plurality of tenant entities to define a plurality of personal networks on the property network using dynamic VLAN assignment. Onboarding requests are received from one or more user devices on a specific personal network of the plurality of personal networks. The onboarding requests are processed in a manner permitting intercommunication among the one or more user devices within the specific personal network, to take place across the property network.

Abstract: An apparatus and method provide personal networks to tenants on a multiple dwelling unit (MDU) network. Virtual Local Area Networks (VLANs) are assigned to a plurality of tenants to define a plurality of personal networks on the MDU network such that each of the personal networks is for a different tenant and is assigned a different VLAN. Onboarding requests are received from a plurality of client devices of a tenant for access to a personal network assigned to the tenant such that, when provisioned onto the personal network, intercommunication between the client devices of the tenant across the MDU network within the personal network is provided while access thereto by client devices of other tenants is blocked.

Abstract: An apparatus and method provide personal networks to tenants on a multiple dwelling unit (MDU) network. Virtual Local Area Networks (VLANs) are assigned to a plurality of tenants to define a plurality of personal networks on the MDU network such that each of the personal networks is for a different tenant and is assigned a different VLAN. Onboarding requests are received from a plurality of client devices of a tenant for access to a personal network assigned to the tenant such that, when provisioned onto the personal network, intercommunication between the client devices of the tenant across the MDU network within the personal network is provided while access thereto by client devices of other tenants is blocked.