Abstract: The present disclosure discloses a method and network device for providing VLAN mismatch detection in networks. Specifically, a network device monitors a plurality of packets received by a first device from a second device to identify a first set of VLAN identifiers indicated by at least one of the plurality of packets. The network device receives from a third device at least one packet tagged with a particular VLAN identifier, whereas the at least one packet to be forwarded by the first device to the second device. The network device then determines whether the particular VLAN identifier is included in the first set of VLAN identifiers indicated by at least one of the plurality of packets received by the first device from the second device. If the particular VLAN identifier is not included in the first set of VLAN identifiers, the network device presents a notification.

Abstract: A computer readable medium storing instructions with functionality for: receiving a first request, from a first client device in a particular IP subnet, to identify a MAC address that corresponds to a particular IP address in the particular IP subnet; transmitting a first response to the first client device that identifies a first MAC address, of a first network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address; receiving a second request, from a second client device in the particular IP subnet, to identify the MAC address that corresponds to the particular IP address; transmitting a second response to the second client device that identifies a second MAC address, of a second network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address, the second MAC address being different than the first MAC address.

Abstract: The present disclosure discloses a method and network device for providing VLAN mismatch detection in networks. Specifically, a network device monitors a plurality of packets received by a first device from a second device to identify a first set of VLAN identifiers indicated by at least one of the plurality of packets. The network device receives from a third device at least one packet tagged with a particular VLAN identifier, whereas the at least one packet to be forwarded by the first device to the second device. The network device then determines whether the particular VLAN identifier is included in the first set of VLAN identifiers indicated by at least one of the plurality of packets received by the first device from the second device. If the particular VLAN identifier is not included in the first set of VLAN identifiers, the network device presents a notification.

Abstract: The present disclosure discloses a method and network device for providing VLAN mismatch detection in networks. Specifically, a network device monitors a plurality of packets received by a first device from a second device to identify a first set of VLAN identifiers indicated by at least one of the plurality of packets. The network device receives from a third device at least one packet tagged with a particular VLAN identifier, whereas the at least one packet to be forwarded by the first device to the second device. The network device then determines whether the particular VLAN identifier is included in the first set of VLAN identifiers indicated by at least one of the plurality of packets received by the first device from the second device. If the particular VLAN identifier is not included in the first set of VLAN identifiers, the network device presents a notification.

Abstract: The present disclosure discloses a network device and/or method for centralized configuration with dynamic distributed address management. The disclosed network device receives, at a first network node, a range of sub network addresses and a specified size for a sub network. The disclosed network device then divides the range of sub network addresses into a plurality of sub-ranges of sub network addresses based on the specified size. Further, the network device allocates the plurality of sub-ranges of sub network addresses to a plurality of sub networks, and transmits an allocated sub-range of sub network addresses to a corresponding sub network at a second network node through an established secure communication channel. Moreover, the network device can retrieve a profile template that includes the range of sub network addresses and the specified size of the sub network; and create a profile based on the profile template.

Abstract: The present disclosure discloses a method and a system for determining whether to use a local authentication server. Specifically, a first network device executing a first authentication server receives a request for authentication from a client device. The first network device determines whether the client device was previously successfully authenticated by a second authentication server executing on a second network device within a particular period of time. If so, the first network device attempts to authenticate the client device using the first authentication server. Otherwise, the first network device declines the request for authentication from the client device.

Abstract: The present disclosure discloses a method and network device for providing location approximation and discovery of wired servers in a network. Specifically, a network device can store information indicating that a first client device, with a first set of one or more characteristics, selected a particular shared device from a plurality of shared devices of a first type. The network device then receives, from a second client device, a request for a shared device of the first type. Subsequently, the network device determines that the second client device is associated with the same first set of characteristics as the first client device that selected the particular shared device. Responsive to such determination, the network device presents the particular shared device as an option for selection by the second client device.

Abstract: A system includes: multiple access points, the multiple access points including at least a first access point and a second access point; the system performs operations including: receiving, by the second access point from a client device, a data packet to be transmitted to a device outside of the system; forwarding the data packet by the second access point to the first access point; assigning, by the first access point, a first sequence number to the data packet to be used for transmitting the data packet outside of the system; transmitting the data packet with the first sequence number to the device outside of the system.

Abstract: A method and computer readable medium for network device workload balancing, including: selecting a particular network device for storing client information associated with a client device; subsequent to the client device disassociating with a first network device, receiving, by the particular network device from the first network device, the client information; and responsive to the client device associating with a second network device: transmitting, by the particular network device, the client information to the second network device, where the client device does not associate with the particular network device between associating with the first network device and the second network device.

Abstract: The present disclosure discloses a method and network device providing distributed network layer mobility for unified access networks. The method eliminates the need for a secure tunnel between a home network device and a foreign network device when a client roams from the home network device to the foreign network device. The disclosed network device receives an association request from a client device in a wireless network; identifies a first wireless virtual local area network (VLAN) that the client device is assigned to; and, allows traffic to or from the client device to be transmitted via the network device on the first wireless VLAN, wherein traffic on at least a second wireless VLAN is transmitted via the network device and segregated from the traffic on the first wireless VLAN.

Abstract: The present disclosure discloses a method and a system for determining whether to use a local authentication server. Specifically, a first network device executing a first authentication server receives a request for authentication from a client device. The first network device determines whether the client device was previously successfully authenticated by a second authentication server executing on a second network device within a particular period of time. If so, the first network device attempts to authenticate the client device using the first authentication server. Otherwise, the first network device declines the request for authentication from the client device.

Abstract: A system includes: multiple access points, the multiple access points including at least a first access point and a second access point; the system performs operations including: receiving, by the second access point from a client device, a data packet to be transmitted to a device outside of the system; forwarding the data packet by the second access point to the first access point; assigning, by the first access point, a first sequence number to the data packet to be used for transmitting the data packet outside of the system; transmitting the data packet with the first sequence number to the device outside of the system.

Abstract: A non-transitory computer readable medium when executed by one or more devices, causes performance of operations including forwarding, by a network device, a set of messages corresponding to a particular connection to a server, the set of messages being forwarded between a client device and a server via the network device, receiving, by the network device, a copy of a second set of messages corresponding to the particular connection that are transmitted between the client device and the server via without being transmitted through the network device, and analyzing, by the network device, both sets of messages to obtain a classification associated with the particular connection to the server.

Abstract: The present disclosure discloses a method and network device for providing location approximation and discovery of wired servers in a network. Specifically, a network device can store information indicating that a first client device, with a first set of one or more characteristics, selected a particular shared device from a plurality of shared devices of a first type. The network device then receives, from a second client device, a request for a shared device of the first type. Subsequently, the network device determines that the second client device is associated with the same first set of characteristics as the first client device that selected the particular shared device. Responsive to such determination, the network device presents the particular shared device as an option for selection by the second client device.

Abstract: The present disclosure discloses a method and network device for providing VLAN mismatch detection in networks. Specifically, a network device monitors a plurality of packets received by a first device from a second device to identify a first set of VLAN identifiers indicated by at least one of the plurality of packets. The network device receives from a third device at least one packet tagged with a particular VLAN identifier, whereas the at least one packet to be forwarded by the first device to the second device. The network device then determines whether the particular VLAN identifier is included in the first set of VLAN identifiers indicated by at least one of the plurality of packets received by the first device from the second device. If the particular VLAN identifier is not included in the first set of VLAN identifiers, the network device presents a notification.

Abstract: The present disclosure discloses a network device and/or method for centralized configuration with dynamic distributed address management. The disclosed network device receives, at a first network node, a range of sub network addresses and a specified size for a sub network. The disclosed network device then divides the range of sub network addresses into a plurality of sub-ranges of sub network addresses based on the specified size. Further, the network device allocates the plurality of sub-ranges of sub network addresses to a plurality of sub networks, and transmits an allocated sub-range of sub network addresses to a corresponding sub network at a second network node through an established secure communication channel. Moreover, the network device can retrieve a profile template that includes the range of sub network addresses and the specified size of the sub network; and create a profile based on the profile template.

Abstract: Methods and systems are described for detecting data path loops between ports on a device in a network system. Data path loops may be detected by first detecting data path loop characteristics exhibited by ports on a device. Upon detection of data path loop characteristics, the existence of a data path loop may be verified through the transmission of a broadcast packet through the potentially loopy ports. By first detecting characteristics of a data path loop and thereafter confirming the presence of a loop, the methods and systems described herein ensure that anomalies in data packet and/or port movement are not the product of configuration changes in the network system, but are instead the result of data path loops. By more intelligently identifying data path loops, false positives may be reduced.

Abstract: The present disclosure discloses a network device and/or method for centralized configuration with dynamic distributed address management. The disclosed network device receives, at a first network node, a range of sub network addresses and a specified size for a sub network. The disclosed network device then divides the range of sub network addresses into a plurality of sub-ranges of sub network addresses based on the specified size. Further, the network device allocates the plurality of sub-ranges of sub network addresses to a plurality of sub networks, and transmits an allocated sub-range of sub network addresses to a corresponding sub network at a second network node through an established secure communication channel. Moreover, the network device can retrieve a profile template that includes the range of sub network addresses and the specified size of the sub network; and create a profile based on the profile template.

Abstract: Methods and systems are described for handling traffic in a network system in which a data path loop has been detected. Upon detection of a set of loopy ports, transmission of data packets through these loopy ports may be intelligently controlled through the balancing of data packets accepted or dropped by each port and/or the designation of a favored loopy port for each entry in a bridge table. By selectively and intelligently transmitting data packets through loopy ports, the method and systems described herein ensure that a single loopy port is not overly utilized and load balancing may be realized across the set of loopy ports.

Abstract: A computer readable medium storing instructions with functionality for: receiving a first request, from a first client device in a particular IP subnet, to identify a MAC address that corresponds to a particular IP address in the particular IP subnet; transmitting a first response to the first client device that identifies a first MAC address, of a first network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address; receiving a second request, from a second client device in the particular IP subnet, to identify the MAC address that corresponds to the particular IP address; transmitting a second response to the second client device that identifies a second MAC address, of a second network device in the particular IP subnet, as the MAC address that corresponds to the particular IP address, the second MAC address being different than the first MAC address.