Abstract: In some examples, a non-transitory computer-readable medium may contain instructions executable by a processing resource to collect Wi-Fi data points. The Wi-Fi data points may correspond to a plurality of users of an enterprise for a particular number of days. In some examples, the Wi-Fi data points may indicate a time period during each of the particular number of days when each of the plurality of users was connected to a Wi-Fi network. Instructions may further be executable to determine that a subset of the Wi-Fi data points represent outliers and remove the subset of Wi-Fi data points to create a data set. The data set may comprise non-outlier Wi-Fi data points. Instructions may further be executable to determine a Wi-Fi Adoption Index (WAI) for each of the plurality of users based on the data set.

Abstract: Infrastructure-based client management uses synthesized beacon reports to effect client association with APs in a wireless digital network. Beacon reports are synthesized by having a plurality of APs in the network collect client reports and send those reports to a report process on the network. The report process accumulates client reports from the plurality of APs and selects one or more candidate APs to support a client. Selection may be made on reported SNR, AP loading, channel loading, AP characteristics, or a combination. The report process may produce blacklists and optionally whitelists for use by APs to use in processing client probe and connection requests.

Abstract: A system or method that receives a current request from a client, and responds to the current request based on signal strength associated with a previous request. If the current request is received on a non-preferred communication band, and a previous request was received on a preferred communication band within a pre-determined time, the system determines whether the signal strength associated with the previous request is weaker than a pre-determined threshold signal strength level for the preferred communication band. If so, the system responds to the current request. Otherwise, the system ignores the current request. If no recent request on the preferred communication band is received, and the signal strength associated with the current request is weaker than a pre-determined threshold signal strength level for the non-preferred communication band, the system responds to the current request on the non-preferred communication band. Otherwise, the system ignores the current request.

Abstract: The present disclosure discloses a network device and method for advertising channel load. The disclosed network device aggregates a number of clients that are associated with the network device on a specific wireless communication channel, and advertises the aggregated number to a client on the specific wireless communication channel. Further, the network device can receive aggregated load information on the specific wireless communication channel from another management network device, and further aggregates the load information across multiple wireless networks operating on the same wireless communication channel and coupled to different management network devices.

Abstract: Example implementations relate to neighboring network devices. For example, a non-transitory computer readable medium storing instructions executable by a processing resource can cause a computer to determine a characteristic affecting a subset of a plurality of network devices. The instructions can cause the processing resource to determine that at least two of the subset of the plurality of network devices that are affected by the characteristic are neighbors. The instructions can cause the processing resource to indicate a region to be associated with each network device of the subset based on the determination that at least two of the subset of the plurality of network devices are neighbors.

Abstract: In some examples, a non-transitory computer-readable medium may contain instructions executable by a processing resource to collect Wi-Fi data points. The Wi-Fi data points may correspond to a plurality of users of an enterprise for a particular number of days. In some examples, the Wi-Fi data points may indicate a time period during each of the particular number of days when each of the plurality of users was connected to a Wi-Fi network. Instructions may further be executable to determine that a subset of the Wi-Fi data points represent outliers and remove the subset of Wi-Fi data points to create a data set. The data set may comprise non-outlier Wi-Fi data points. Instructions may further be executable to determine a Wi-Fi Adoption Index (WAI) for each of the plurality of users based on the data set.

Abstract: An example system in accordance with an aspect of the present disclosure includes a controller to store Received Signal Strength Indicator (RSSI) information for an unassociated client detected by an access point (AP) of a wireless network. The controller is to identify that the unassociated client has associated with the wireless network, and identify the AP as a doorway AP in response to the client associating to the AP.

Abstract: Infrastructure-based client management uses synthesized beacon reports to effect client association with APs in a wireless digital network. Beacon reports are synthesized by having a plurality of APs in the network collect client reports and send those reports to a report process on the network. The report process accumulates client reports from the plurality of APs and selects one or more candidate APs to support a client. Selection may be made on reported SNR, AP loading, channel loading, AP characteristics, or a combination. The report process may produce blacklists and optionally whitelists for use by APs to use in processing client probe and connection requests.

Abstract: Embodiments of the present disclosure provide for configuring and managing mesh nodes during occasional failure of mesh nodes or addition of new mesh nodes. The disclosed system first determines whether a mesh node is a mesh portal or a mesh point. If it is a mesh portal, the mesh node will advertise its capacity as a mesh portal to other mesh nodes in the network. If it is a mesh point, the mesh node attempts to automatically recover connection to the wireless mesh network if it identifies a unique wireless network based on its associated network identifier. If more than one network identifiers are discovered, the mesh node delays establishing connection to the wireless mesh network until a selection is received.

Abstract: According to one embodiment, a system and computer-readable storage medium for storage of software directed to the management of associations between network devices is described. The computer-readable storage medium comprising instructions which, when executed by at least one hardware processor on a network device, causes performance of operations, comprising: (1) determining a desired operating state for a client device under analysis, the client device being associated with a first network device of a plurality of network devices; (2) detecting it a triggering event has occurred based on a comparison of the desired operating state for the client device under analysis to an actual operating state for the client device under analysis; and (3) in response to detecting that the triggering event has occurred, causing the client device to wirelessly connect to a second network device of the plurality of network devices in lieu of the first network device.

Abstract: Embodiments of the present disclosure provide for configuring and managing mesh nodes during occasional failure of mesh nodes or addition of new mesh nodes. The disclosed system first determines whether a mesh node is a mesh portal or a mesh point. If it is a mesh portal, the mesh node will advertise its capacity as a mesh portal to other mesh nodes in the network. If it is a mesh point, the mesh node attempts to automatically recover connection to the wireless mesh network if it identifies a unique wireless network based on its associated network identifier. If more than one network identifiers are discovered, the mesh node delays establishing connection to the wireless mesh network until a selection is received.

Abstract: The present disclosure discloses a method and system for partitioning WLAN in order to separate network traffic from different WLANs. Specifically, a network device receives a packet from a client connected to a first network device on an access network. The network device then determines that the received packet is associated with a VLAN that is pre-configured on the first network device based on the access network to which the client is connected. Furthermore, the network device transmits the packet to a MAC layer switching device, which is not configured with the VLAN that is pre-configured on the network device. The packet includes one of a DHCP discovery message, an ARP request message, a unicast message, a multicast message, and a broadcast message. The unicast message will be transmitted to the second network device on the pre-configured VLAN prior to being transmitted to another network device outside the pre-configured VLAN.

Abstract: The present disclosure discloses a method and system for partitioning WLAN in order to separate network traffic from different WLANs. Specifically, a network device receives a packet from a client connected to a first network device on an access network. The network device then determines that the received packet is associated with a VLAN that is pre-configured on the first network device based on the access network to which the client is connected. Furthermore, the network device transmits the packet to a MAC layer switching device, which is not configured with the VLAN that is pre-configured on the network device. The packet includes one of a DHCP discovery message, an ARP request message, a unicast message, a multicast message, and a broadcast message. The unicast message will be transmitted to the second network device on the pre-configured VLAN prior to being transmitted to another network device outside the pre-configured VLAN.

Abstract: According to one embodiment, a system and computer-readable storage medium for storage of software directed to the management of associations between network devices is described. The computer-readable storage medium comprising instructions which, when executed by at least one hardware processor on a network device, causes performance of operations, comprising: (1) determining a desired operating state for a client device under analysis, the client device being associated with a first network device of a plurality of network devices; (2) detecting if a triggering event has occurred based on a comparison of the desired operating state for the client device under analysis to an actual operating state for the client device under analysis; and (3) in response to detecting that the triggering event has occurred, causing the client device to wirelessly connect to a second network device of the plurality of network devices in lieu of the first network device.

Abstract: According to embodiments of the present disclosure, a managed network device assigns to itself an IP address, in absence of a DHCP service, in a link local address space within a wireless network. The system further responds to a network frame received from another device based on the assigned IP address in the link local address space. The network frame can be a network traffic frame, a control path frame, and/or a management frame. The control path frame comprises a source IP address and a destination IP address that correspond to internal IP addresses in the link local address space that are self-assigned by managed network devices. The management frame comprises the self-assigned internal IP address for the managed network device, and provides for management of managed network devices in the wireless network through a single IP address when a virtual controller is configured for the wireless network.

Abstract: A system and a method are described that reduce or eliminate inefficiencies caused by double encryption in network tunnel communications. In particular, a set of virtual tunnels may be established that require a lower level of encryption in comparison to a full-encryption tunnel. Upon determining that a session is end-to-end encrypted, the system and method described herein may assign the session to one of the virtual tunnels instead of the full-encryption tunnel. By intelligently assigning sessions to virtual tunnels when encryption has already been applied, double encryption may be avoided, which will improve throughput and decrease processor usage. However, in cases where a session is not end-to-end encrypted, the full-encryption tunnel may be utilized to ensure secure communications are maintained between gateways.

Abstract: According to one embodiment of the disclosure, a non-transitory computer readable medium (CRM) comprising instructions, which when executed by one or more hardware processors, causes performance of operations comprising: listening, by a first digital device in a group of digital devices, for any advertisement for a particular service; responsive to the first digital device not receiving any advertisement for the particular service for a predetermined period of time: transmitting, by the first digital device, a first advertisement for the particular service; and providing, by the first digital device, the particular service.

Abstract: A system or method that receives a current request from a client, and responds to the current request based on signal strength associated with a previous request. If the current request is received on a non-preferred communication band, and a previous request was received on a preferred communication band within a pre-determined time, the system determines whether the signal strength associated with the previous request is weaker than a pre-determined threshold signal strength level for the preferred communication band. If so, the system responds to the current request. Otherwise, the system ignores the current request. If no recent request on the preferred communication band is received, and the signal strength associated with the current request is weaker than a pre-determined threshold signal strength level for the non-preferred communication band, the system responds to the current request on the non-preferred communication band. Otherwise, the system ignores the current request.

Abstract: Automatically configuring split DNS operation in a wireless network device connected to a network. The wireless network device snoops one or more exchanged DHCP messages to obtain domain name(s) associated with the organization that are now used as target domain name suffix(es) for split DNS operations. For subsequent DNS queries, information within the message is analyzed to determine if the request includes a domain delimiter. If no delimiter, the DNS query message is sent to an internal DNS server that is located within an organization. If a delimiter exists, but the domain name in the message matches one of the target domain name suffixes, the DNS query message is sent to the internal DNS server as well. Otherwise, the DNS query message is routed over a different communication path.

Abstract: A system and a method are described that reduce or eliminate inefficiencies caused by double encryption in network tunnel communications. In particular, a set of virtual tunnels may be established that require a lower level of encryption in comparison to a full-encryption tunnel. Upon determining that a session is end-to-end encrypted, the system and method described herein may assign the session to one of the virtual tunnels instead of the full-encryption tunnel. By intelligently assigning sessions to virtual tunnels when encryption has already been applied, double encryption may be avoided, which will improve throughput and decrease processor usage. However, in cases where a session is not end-to-end encrypted, the full-encryption tunnel may be utilized to ensure secure communications are maintained between gateways.