Abstract: A troubleshooting system. In particular implementations, a method includes receiving a request for troubleshooting, where the request comprises identifying information for a wireless client having a connection problem. The method further includes identifying network nodes that are sources of log data associated with connection activity of the wireless client, and invoking troubleshoot logging on one or more central controllers for the wireless client. The method further includes polling the identified network nodes for the log data, and identifying one or more potential causes of the connection problem based on correlating the data logs.

Abstract: A troubleshooting system. In particular implementations, a method includes collecting, from a first wireless network element, PEM state associated with a wireless client having a connection problem, and collecting log data associated with the wireless client from the first wireless network elements and one or more other wireless network elements. The method further includes correlating the PEM state and log data based on a network security protocol employed by the wireless client, where the network security protocol corresponds to an expected sequence of events. The correlating includes correlating events and messages collected based on the expected sequence of events, and comparing the correlated sequence of events to a data store of diagnostic information to identify one or more possible causes of the connection problem.

Abstract: A packet loss reduction system. In particular implementations, a method includes responsive to indications of roaming intent of a wireless client relative to currently associated wireless access point, determining if a traffic stream associated with the wireless client is to be proactively buffered by one or more potential wireless access points; conditionally transmitting a command to the one or more potential wireless access points to cause the potential, wireless access points to set up resources to proactively buffer packets of the traffic stream; duplicating received packets of the traffic stream destined for the wireless client; and transmitting the duplicate packets to the potential wireless access points for storage in a proactive stream buffer.

Abstract: A wireless access point selection system. In particular implementations, a method includes receiving a notification that identifies a wireless access point that detects radar on an operating channel and identifies the operating channel; updating neighbor lists of one or more neighboring wireless access points to remove the wireless access point from the neighbor list, where the neighbor list comprises neighbor wireless access points, corresponding operating channels, and corresponding enable indications, where each enable indication indicates if a channel availability check is required before performing active scanning; and transmitting the updated neighbor list to the neighboring wireless access points. In one implementation, a system provides a DFS enable indication to wireless clients so they can know whether a channel availability check is required prior to transmitting.

Abstract: Embodiments of the present invention include a method, an apparatus, and logic encoded in one or more computer-readable tangible medium to carry out a method. One method includes tagging packets and forwarding packets in a wireless mesh network using stored forwarding information for the tag, wherein the forwarding information is according to a centrally determined routing method and tag distribution method.

Abstract: Methods and systems for use in a wireless client that includes one or more wireless network interfaces for communicating with at least one access point wherein the method enables the wireless client to validate the authenticity and integrity of received management frames. The method includes receiving a protected wireless network management frame from an access point verifying a message integrity check (MIC) appended to the protected wireless network management frame. One or more security policies are then conditionally applied based on a failure to verify the MIC.

Abstract: Methods, apparatuses and systems facilitating containment of the effects of rogue or unauthorized access points on wireless computer network environments. Embodiments of the present invention support one to a plurality of rogue containment methodologies. A first rogue containment type involves identification of the physical connection of the rogue access point to the wired network infrastructure and, thus, allows for disabling of that physical connection to contain the rogue access point. Other rogue containment methods involve wireless techniques for containing the effect of rogue access points. As discussed below, the rogue containment functionality described herein can be applied to a wide variety of wireless network system architectures.

Abstract: A dynamic rate limiting mechanism for wireless mesh networks. In particular implementations, a method comprising monitoring one or more clients associated with a wireless mesh network and the respective hop counts of the clients to a root mesh node of the wireless mesh network; determining, responsive ton one or more events, a client data rate for one or more clients of the wireless mesh network based on the number of current clients and the respective hop counts of the current clients; and applying the client data rate to the wireless mesh network.

Abstract: In one embodiment, a method includes receiving security context information relevant to a connection between a wireless network infrastructure component and a wireless client, wherein the security context information comprises at least, an identification of the wireless client, and wherein the security context information identifies any security protocols associated with the connection; validating the connection based on the security context information; and transmitting the security context information to one or more detector wireless access points.

Abstract: Methods, apparatuses and systems facilitating automated detection of rogue wireless access points in a wireless network environment. The present invention, in one embodiment, integrates automated detection of rogue access points into wireless network systems. As discussed more fully below, the present invention can be applied to a variety of wireless network system architectures.

Abstract: A wireless discovery and communication mechanism to facilitate configuration, management and performance tasks associated with wireless network environments. In certain embodiments, access elements transmit and receive neighbor messages on a periodic basis to neighboring access elements. The neighbor messages can include configuration and/or protocol information to allow the access elements or associated devices to discover each other over the air. The present invention can be applied to a variety of wireless network architectures, such as a plurality of distributed, substantially autonomous access points, or to a hierarchical wireless network system comprising central control elements, each supervising and controlling one or more access elements as described more fully below.

Abstract: Methods, apparatuses and systems facilitating location or containment of rogue or unauthorized access points on wireless computer network environments. Embodiments of the present invention support one to a plurality of rogue containment methodologies. A first rogue containment type involves identification of the physical connection of the rogue access point to the wired network infrastructure and, thus, allows for disabling of that physical connection to contain the rogue access point. Other rogue containment methods involve wireless techniques for containing the effect of rogue access points. In some embodiments, the present invention provides methods, apparatuses and systems facilitating network location of rogue access points to determine whether one or more rogue containment methodologies should be applied. As discussed below, the rogue location and containment functionality described herein can be applied to a wide variety of wireless network system architectures.

Abstract: In one embodiment, a method for facilitating authentication and ease the configuration of authentication includes receiving a credential type selection and selecting one or more authentication types based on the credential type selection and one or more policies set by the administrators. The policies can be preconfigured or dynamically pushed or fetched and updated to the client.

Abstract: In a fixed channel wireless network system with a limited number of channels, assignment of the fixed channels between remote client elements and access elements is made systematically according to a set of criteria accounting for network loading and interference, then channel assignments are dynamically updated according to a priority to maintain optimal network performance with changing conditions of load and interference. The channel utilization problem is address at a system level rather than at a local level by treating the system as a three dimensional color mapping problem. All noise is treated as having a source in virtual access elements with an appropriate performance metric. The performance metric is used to select a channel set that minimize chances of interference and maximize user performance. Specifically, there are several parameter matrices which are managed and updated by a central resource management element, namely signal strength between elements, interference, and load.

Abstract: Methods, apparatuses and systems enabling real-time analysis of coverage and other performance attributes of distributed or networked systems, such as wireless computer network environments. In one embodiment, the present invention utilizes information obtained from monitoring wireless communications in a wireless network system from remote client elements to access elements in relation to at least one attribute, such as signal strength and signal-to-noise ratio (SNR). Although the present invention has application to a variety of wireless network architectures, in one embodiment, the present invention is implemented in a wireless Local Area Network (WLAN) system having a hierarchical architecture comprising a central control element associated with at least one access element.

Abstract: Methods, apparatuses and systems directed to wireless discovery mechanism that facilitates the deployment and configuration of managed access elements in a wireless network system. In one embodiment, the present invention can be utilized to achieve a viral wireless discovery and configuration mechanism wherein un-configured access elements discovery network devices with which to exchange configuration information through wireless messages transmitted by configured access elements. Once configured, the newly installed access elements may then provide wireless messages to other un-configured access elements which receive configuration information in the same manner. In other embodiments, the wireless discovery mechanism can be used alternatively, as a supplement to, or as part of an enhancement to Layer 2 and 3 discovery mechanisms.

Abstract: In a wireless Local Area Network (WLAN) system, a hierarchical architecture is provided which employs a protocol which divides protocol processing functions between a plurality of substantially identical access elements in which reside time-critical protocol functions, such as acknowledgment and retransmission of packets, and a centralized control element which provides control and management functions related to dynamic configuration of wireless networks, such as processing of network management messages (e.g., authentication and association), load control, channel control, and handoff, processing of physical layer information, and processing of channel characteristics, propagation, interference or noise, for the plurality of access elements in the WLAN without loss of information about the wireless characteristics of the access elements.

Abstract: A method and apparatus as provided that simplifies the software required for modifying the contents of a register. By adding one gate to the register, a single command can be written to the register to modify the states of multiple bits. The system reduces software overhead significantly when multiple registers must be modified.