Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Network systems and architectures with multiple load balancers and network access controllers. In some implementations, an apparatus is provided. The apparatus includes a memory to store packets and a packet forwarding component operatively coupled to the memory. The packet forwarding component receives an encapsulated packet from a tunnel device via a first tunnel. The first tunnel is coupled to the tunnel device and the packet forwarding component. The encapsulated packet is generated by the tunnel device based on a data packet received from an access point. The packet forwarding component identifies a first network access controller from a plurality of network access controllers. The plurality of network access controllers are coupled to the packet forwarding component via a set of tunnels. The packet forwarding component forwards the encapsulated packet to the first network access controller via a second tunnel of the set of tunnels.

Abstract: Network architecture with network access controllers. In one embodiment, a method is disclosed. The method includes receiving a packet from a client device via an ingress network interface, wherein the packet comprises a first medium access control (MAC) address indicating a default network access controller. The method also includes identifying a source MAC address of the packet, wherein the source MAC address indicates a second MAC address of the client device. The method further includes identifying a second network access controller based on the source MAC address. The method further includes updating, by a packet forwarding component, a destination MAC address to indicate a third MAC address of the second network access controller. The method further includes forwarding the packet to the second network access controller via an egress network interface.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Network systems and architectures with multiple load balancers and network access controllers. In some implementations, an apparatus is provided. The apparatus includes a memory to store packets and a packet forwarding component operatively coupled to the memory. The packet forwarding component receives an encapsulated packet from a tunnel device via a first tunnel. The first tunnel is coupled to the tunnel device and the packet forwarding component. The encapsulated packet is generated by the tunnel device based on a data packet received from an access point. The packet forwarding component identifies a first network access controller from a plurality of network access controllers. The plurality of network access controllers are coupled to the packet forwarding component via a set of tunnels. The packet forwarding component forwards the encapsulated packet to the first network access controller via a second tunnel of the set of tunnels.

Abstract: Cloud based router with policy enforcement. In some implementations, a system is provided. The system includes a plurality of access points. The plurality of access points receive data packets from a plurality of client devices. The system also includes a plurality of tunnel devices coupled to the plurality of access points. The plurality of tunnel devices generate encapsulated packets based on the data packets received by the plurality of access points. The system further includes a plurality of packet forwarding components coupled to the plurality of tunnel devices via a first set of tunnels. The plurality of packet forwarding components receive the encapsulated packets from the plurality of tunnel devices and forward the encapsulate packets. The system further includes a plurality of network access controllers coupled to the plurality of packet forwarding components via a second set of tunnels.

Abstract: Network architecture with network access controllers. In one embodiment, a method is disclosed. The method includes receiving a packet from a client device via an ingress network interface, wherein the packet comprises a first medium access control (MAC) address indicating a default network access controller. The method also includes identifying a source MAC address of the packet, wherein the source MAC address indicates a second MAC address of the client device. The method further includes identifying a second network access controller based on the source MAC address. The method further includes updating, by a packet forwarding component, a destination MAC address to indicate a third MAC address of the second network access controller. The method further includes forwarding the packet to the second network access controller via an egress network interface.