Abstract: A method for network flow metadata processing at a network packet broker is described herein. The method includes, receiving, as input at a network packet broker, network traffic flow data, aggregating the network traffic flow data over a predefined time period to generate Internet protocol (IP) flow feature vectors containing metadata parameters associated with one or more particular endpoint devices, and providing the IP flow feature vectors to a machine learning element in the network packet broker. The method further includes identifying, by the machine learning element, anomalies existing in the metadata parameters included in the IP flow feature vectors, and automatically configuring one or more filter elements in the network packet broker in response to detecting the identified anomalies of the IP flow feature vectors.

Abstract: A method for network flow metadata processing at a network packet broker is described herein. The method includes, receiving, as input at a network packet broker, network traffic flow data, aggregating the network traffic flow data over a predefined time period to generate Internet protocol (IP) flow feature vectors containing metadata parameters associated with one or more particular endpoint devices, and providing the IP flow feature vectors to a machine learning element in the network packet broker. The method further includes identifying, by the machine learning element, anomalies existing in the metadata parameters included in the IP flow feature vectors, and automatically configuring one or more filter elements in the network packet broker in response to detecting the identified anomalies of the IP flow feature vectors.

Abstract: An apparatus includes a first port and a second port operably coupled to a format conversion module each of which is at least partially disposed within a housing. The first port is operably coupled to a cable configured to transfer a first data unit having a first format associated with a first communication medium to the first port. The format conversion module receives the first data unit from the first port and converts the first data unit from the first format to a second format associated with a second communication medium to produce a second data unit. The second port is operably coupled to a wireless access point that is physically distinct from the housing. The second port is configured to receive the second data unit and send the second data unit to the wireless access point.

Abstract: A device receives capability information associated with a next hop device of a wireless local area network (WLAN). The device also determines, based on the capability information, whether the next hop device is capable of implementing security for traffic, where the security includes a media access control (MAC) security standard and a layer 2 link security standard. The device further creates, via the MAC security standard, a secure channel with the next hop device when the next hop device is capable of providing security for traffic.

Abstract: A housing includes a mount projection defining a first notch, a second notch, and a recessed wall. At least a portion of the recessed wall defines a substantially conical cross-sectional shape between a maximum width and a length from a leading portion to a line associated with the maximum width. The mount projection is configured to complimentarily mate to a bracket defining a recessed wall with a maximum width, corresponding to the maximum width of the mount projection, and a length, corresponding to the length of the mount projection, from a leading portion to a line associated with the maximum width. The mount projection is releasably retained within an opening of the bracket when a first projection and a second projection of the bracket are disposed within the first notch and the second notch, respectively, of the mount projection.

Abstract: An apparatus includes a first port and a second port operably coupled to a format conversion module each of which is at least partially disposed within a housing. The first port is operably coupled to a cable configured to transfer a first data unit having a first format associated with a first communication medium to the first port. The format conversion module receives the first data unit from the first port and converts the first data unit from the first format to a second format associated with a second communication medium to produce a second data unit. The second port is operably coupled to a wireless access point that is physically distinct from the housing. The second port is configured to receive the second data unit and send the second data unit to the wireless access point.

Abstract: A housing includes a mount projection defining a first notch, a second notch, and a recessed wall. At least a portion of the recessed wall defines a substantially conical cross-sectional shape between a maximum width and a length from a leading portion to a line associated with the maximum width. The mount projection is configured to complimentarily mate to a bracket defining a recessed wall with a maximum width, corresponding to the maximum width of the mount projection, and a length, corresponding to the length of the mount projection, from a leading portion to a line associated with the maximum width. The mount projection is releasably retained within an opening of the bracket when a first projection and a second projection of the bracket are disposed within the first notch and the second notch, respectively, of the mount projection.

Abstract: A device receives capability information associated with a next hop device of a wireless local area network (WLAN). The device also determines, based on the capability information, whether the next hop device is capable of implementing security for traffic, where the security includes a media access control (MAC) security standard and a layer 2 link security standard. The device further creates, via the MAC security standard, a secure channel with the next hop device when the next hop device is capable of providing security for traffic.

Abstract: In some embodiments, an apparatus comprises of a ground plane control module included in an antenna system having a set of antenna segments that includes a first antenna segment, a second antenna segment, and a third antenna segment, with each antenna segment associated with a separate ground plane. The ground plane control module is configured to selectively activate the ground plane of the first antenna segment and the second antenna segment such that receive signals and transmit signals are communicated with a first and second user, respectively, when the ground planes of the first and second antenna segments, respectively, are in an activate mode. The ground plane control module is configured to selectively activate the ground plane of the third antenna segment such that the third antenna segment cannot communicate receive signals and transmit signals when the ground plane of the third antenna segment is in a deactivate mode.

Abstract: In some embodiments a method comprises receiving, via a mobile device, registration data for a wireless access point. The method also comprises collection of location information of the mobile device and defining the wireless access point location based on location information of the mobile device. The method further comprises sending an electronic message including the registration data and the wireless access point location information to a provision device such that the provision device provisions the wireless access point.

Abstract: A device receives capability information associated with a next hop device of a wireless local area network (WLAN). The device also determines, based on the capability information, whether the next hop device is capable of implementing security for traffic, where the security includes a media access control (MAC) security standard and a layer 2 link security standard. The device further creates, via the MAC security standard, a secure channel with the next hop device when the next hop device is capable of providing security for traffic.

Abstract: A device receives distances between an access point, located on a floor of a building, and other access points located on the same floor, and determines, based on the distances, relative location information associated with the access point, where the relative location information provides a location of the access point relative to the other access points. The device also determines, using a triangulation method, an actual location of the access point based on the relative location information. The device further maps the actual location of the access point to a floor plan of the floor, and displays the floor plan with the mapped actual location of the access point.

Abstract: A device receives topology and capability information associated with an access point, access devices, and aggregation devices of a wireless local area network (WLAN), and determines, based on the topology and capability information, a nearest capable access device or aggregation device to the access point. The device also provides an instruction that instructs the access point or the nearest capable access device or aggregation device to create a tunnel between the access point and the nearest capable access device or aggregation device. The access point or the nearest capable access device or aggregation device creates the tunnel between the access point and the nearest capable access device or aggregation device based on the instruction.

Abstract: In one embodiment, an apparatus includes a first access point within a wireless network. The first access point is configured to identify a communication device within a radio frequency (RF) range of the first access point. The first access point is also configured to request a session key associated with the communication device from a first network controller associated with the first access point in response to the communication device being identified. The first access point is further configured to receive the session key associated with the communication device from a second network controller associated with a second access point having an RF range partially overlapping the RF range of the first access point.

Abstract: An apparatus includes a processor disposed within an enclosure and configured to connect one or more wireless devices to a network. A first antenna has an orientation of polarization and is disposed within the enclosure. A second antenna has an orientation of polarization and is disposed within the enclosure at a non-zero distance from first antenna. A third antenna has an orientation of polarization and is disposed within the enclosure at a non-zero distance from each of the first antenna and the second antenna. The orientation of polarization of the first antenna is different from the orientation of polarization of the second antenna, and the orientation of polarization of the third antenna is different from the orientation of polarization of the first antenna and the orientation of polarization of the second antenna.

Abstract: An apparatus includes a processor disposed within an enclosure and configured to communicate with multiple wireless devices. A first and a second antenna are disposed within the enclosure. The first antenna is configured to operate within a first band, and the second antenna is configured to operate within a second band. The second band has a center frequency less than a center frequency of the first band. The first antenna is configured to send a signal having a signal strength at a wireless device and associated with the first band, and the second antenna is configured to send a signal having a signal strength at the wireless device and associated with the second band. The signal strength for the signal associated with the first band is greater than the signal strength associated with the second band such that the wireless device selects the first band to communicate with the processor.

Abstract: In one embodiment, an apparatus includes a first access point within a wireless network. The first access point is configured to identify a communication device within a radio frequency (RF) range of the first access point. The first access point is also configured to request a session key associated with the communication device from a first network controller associated with the first access point in response to the communication device being identified. The first access point is further configured to receive the session key associated with the communication device from a second network controller associated with a second access point having an RF range partially overlapping the RF range of the first access point.

Abstract: A device receives distances between an access point, located on a floor of a building, and other access points located on the same floor, and determines, based on the distances, relative location information associated with the access point, where the relative location information provides a location of the access point relative to the other access points. The device also determines, using a triangulation method, an actual location of the access point based on the relative location information. The device further maps the actual location of the access point to a floor plan of the floor, and displays the floor plan with the mapped actual location of the access point.