Abstract: Embodiments herein describe disconnecting, by an access node, a first device having a first media access control (MAC) address due to a network violation and receiving, by the access node, information about a second device having a second MAC address different from the first MAC address. In one embodiment, the information is generated by a certificate server based on a token generated by the second device. Further, when the access node determines, based on the information, that the second device is the first device, the access node denies a connection request from the second device.

Abstract: A network controller provides proactive notification of a wireless client device's address rotation to layer 2 (L2) and/or layer 3 (L3) devices. Traditional methods of device address discovery rely on broadcasting of address queries across a plurality of links until a path to a device having the queried address responds. As device address changes become more frequent in an effort to improve user privacy, traditional methods of address discovery impose a large burden on networks, reducing their performance and efficiency. By proactively propagating address changes to upstream devices, the need for broadcast oriented address discovery techniques is reduced, resulting in improved network performance.

Abstract: Techniques for wireless network management are provided. A set of characteristics data for a plurality of different wireless networks in a common physical space is collected, and it is determined, based on the set of characteristics data, that the plurality of wireless networks are experiencing spectrum contention. A set of radio frequency (RF) parameter modifications is generated based on the set of characteristics data, and one or more of the plurality of wireless networks are instructed to implement the set of RF parameter modifications. A second set of characteristics data is collected for the plurality of wireless networks.

Abstract: Provided herein are techniques through which a Reconfigurable Intelligent Surface (RIS) device can be controlled to facilitate various wireless local area network (WLAN) communication optimizations. In one example, a method may include providing, by a wireless access point (AP) to an RIS device that includes reflecting elements, tuning information for an RIS tuning procedure that is to be performed by the wireless AP involving a wireless client; performing the RIS tuning procedure with involving wireless client in which the RIS tuning procedure includes performing a plurality of transmissions in which the RIS device is to configure the reflecting elements according to a particular dispersion mode configuration for each transmission; and identifying a guard interval value and a particular dispersion mode configuration of the RIS device that is to be utilized for subsequent transmissions involving the wireless client.

Abstract: Provided herein are techniques through which coordinated steering of a Reconfigurable Intelligent Surface (RIS) device can be utilized according to prioritized time-slices determined for each of multiple wireless access points (APs) for a wireless local area network (WLAN). Coordinated steering of an RIS device by multiple wireless APs according to prioritized time-slices may facilitate seamless roaming for wireless clients between the wireless APs for the WLAN.

Abstract: A network controller provides proactive notification of a wireless client device's address rotation to layer 2 (L2) and/or layer 3 (L3) devices. Traditional methods of device address discovery rely on broadcasting of address queries across a plurality of links until a path to a device having the queried address responds. As device address changes become more frequent in an effort to improve user privacy, traditional methods of address discovery impose a large burden on networks, reducing their performance and efficiency. By proactively propagating address changes to upstream devices, the need for broadcast oriented address discovery techniques is reduced, resulting in improved network performance.

Abstract: A request for a virtual background is received from an endpoint of a participant who is participating in an online meeting. The request includes a description of the virtual background. One or more virtual backgrounds are generated using an image generator based on a command that includes the description of the virtual background. The one or more virtual backgrounds are transmitted to the endpoint. A selection of the virtual background from the one or more virtual backgrounds is received and the selection is used to train the image generator. A request to use the virtual background may be received from a second participant of the online meeting and the virtual background or text used to generate the virtual background may be transmitted to the second participant.

Abstract: In one embodiment, a device receives discovery data generated by a plurality of networking devices in a network. The device determines, based on the discovery data, a hierarchy of layers of the network. The device receives a request by a client that is external to the network to access remotely a particular endpoint in the network. The device configures, and in response to the request, a proxy chain of remote access agents executed by a subset of networking devices from the plurality of networking devices to allow the client to access remotely the particular endpoint, each of those networking devices proxying traffic between different layers of the network.

Abstract: Techniques to determine location-related data for a plurality of access points located in an area in communication with a network by determining that a plurality of access points in a network are associated with a same geographical area including identifying, from among the plurality of access points, a first access point associated with the geographical area, determining first location-related data for the first access point, determining second location-related data for a second access point of the plurality of access points, the second access point being interior to the first access point within the network based at least in part on the second access point having at least a threshold number of the neighbor access points, and exchanging ranging data indicative of a first relative distance between the first access point and the second access point, the ranging data based at least in part on ranging message exchange measurements.

Abstract: A method includes detecting, by a mobile device, a light sequence emitted from a light emitting diode associated with an access point and determining, by the mobile device, an identifier for the access point based on the light sequence. The method also includes reporting, by the mobile device, a geospatial location of the mobile device and the identifier for the access point to an automated frequency coordination (AFC) server to perform AFC for the access point.

Abstract: A first access point of a wireless network minimizes Media Access Control (MAC) address collisions in the wireless network. The first access point receives an association request from a first wireless device. The association request identifies a first MAC address of the first wireless device. The first access point determines whether a second wireless device is associated with the wireless network using the first MAC address. Responsive to a determination that the second wireless device is associated with a second access point of the wireless network, the first access point obtains a virtual MAC address for the first wireless device. The first access point translates between the first MAC address and the virtual MAC address for network traffic of the first wireless device.

Abstract: Devices, systems, methods, and processes for pre-association sounding executed between a user device and a network device are described herein. The user device may announce its pre-association sounding capability to the network device. The network device, also supporting pre-association sounding, may transmit a plurality of sounding frames to the user device. The user device may process the plurality of sounding frames, determine channel state information (CSI), and transmit the CSI to the network device. The plurality of sounding frames and the CSI may be exchanged between the user device and the network device prior to the user device associating with the network device. By the time the user device associates with the network device, the network device may already have the CSI required for beamforming one or more transmissions towards the user device. Thus, latency overheads associated with sounding are reduced by performing pre-emptive sounding while in a pre-association state.

Abstract: Techniques for wireless communication are disclosed. These techniques include defining a message schedule for fine time measurement (FTM) at a first wireless access point (AP). The techniques further include broadcasting the message schedule to a plurality of wireless stations (STAs) from the first AP. The techniques further include receiving, at the first AP, a plurality of FTM messages from the plurality of STAs, the messages transmitted by the plurality of STAs based on the message schedule. The techniques further include determining a distance between the first AP and each of the plurality of STAs based on the plurality of FTM messages.

Abstract: In one embodiment, a device determines a hierarchy of layers of a network comprising a plurality of networking devices. The device configures, in response to a request by a client to access remotely a particular endpoint in the network, a proxy chain of remote access agents executed by a plurality of networking devices in the network to allow the client to access remotely the particular endpoint. Each of those networking devices proxies traffic between different layers of the hierarchy. The device determines an access policy for the particular endpoint indicative of which commands may be sent to the particular endpoint by the client, based in part on where the particular endpoint is in the hierarchy. The device controls, based on the access policy, whether a command sent by the client is transmitted via the proxy chain to the particular endpoint.

Abstract: A method for calibrating a magnetometer of a device is provided. The method includes collecting, with a portable calibration device having a magnetometer, magnetic field measurements in a spatial region about a mounting location where the device is to be installed for operation, estimating magnetometer compensation parameters to correct for magnetic field distortion at the mounting location based on the magnetic field measurements collected by the portable calibration device, and configuring the device installed at the mounting location based on the magnetometer compensation parameters.

Abstract: Techniques and apparatus for managing a message relaying system are described. One technique includes an access point (AP) detecting a first signal and a second signal from a computing device. A validation of the first signal is performed based on parameters of the first signal and the second signal. After the validation, information associated with the first signal is transmitted to a computing system. In another technique, the computing system may designate one of multiple APs reporting information regarding first signals as a primary reporting AP and designate the remaining APs as secondary reporting APs. The computing system may instruct the secondary reporting APs to refrain from reporting information regarding first signals to the computing system.

Abstract: An authorization device obtains a registration request associated with an end device, the registration request including a new randomized media access control (MAC) address associated with the end device; determines whether the end device is authorized to use the new randomized MAC address; transmits a message to the end device with a first randomly generated number when it is determined that the end device is authorized to use the new randomized MAC address; obtains integrity information associated with the end device, the first integrity information being computed based on the first randomly generated number; transmits a request to a validation system to validate the end device based on the first integrity information; obtains an indication that the end device is validated; determines policies associated with the end device when it is determined that the end device is validated; and applies the policies to the end device.

Abstract: Disclosed are systems, apparatuses, methods, and computer-readable media for identifying a location of a wireless device. A method for identifying a location of a wireless device includes transmitting a request message to the wireless device for identifying a position of the wireless device; receiving a response message from the wireless device; determining first time information based on a time of flight (ToF) of the request message and the response message, wherein the ToF corresponds to a distance of the wireless device from the AP; receiving a second message from a second AP that includes second time information associated with the request message and the response message; receiving a third message from a third AP that includes third time information associated with the request message and the response message; and transmitting location configuration information to the wireless device for the wireless device to determine a position of the wireless device.

Abstract: Various embodiments herein disclose coordinating neighbor discovery between access points (APs) with auxiliary radios and APs without auxiliary radios. A corresponding wireless controller comprises a processor and a memory storing instructions that, when executed, cause the controller to perform operations. The operations comprise grouping APs into a first group of more flexible APs and a second group of less flexible APs and querying the second group of APs for a corresponding broadcast interval. The operations further comprise identifying when the second group of APs is scheduled to broadcast parameters, and a broadcast interval for each AP of the second group of APs and generating a schedule based on the scheduled broadcast and the broadcast interval for each AP of the second group of APs. The operations additionally comprise providing the generated schedule to the first group of APs and the second group of APs.

Abstract: Techniques for dynamically negotiating a service legal agreement (SLA) between a roaming device and a visited network (VN) in an identity federation. An identity profile provided to a user device by an identity provider (IDP) is accessed by the user device. The identity profile includes a first SLA criteria. An advertisement from the VN indicating one or more SLAs supported by the VN is received at the user device. The advertisement is received before the user device has associated with the VN. The IDP and the VN are part of a same identity federation. It is determined that the SLA supported by the VN satisfies the first SLA criteria. Upon that determination, an acceptance is transmitted by the user device to the VN, and the user device is associated with the VN.