Abstract: Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Abstract: Systems and methods are provided for configuring a plurality of network devices to connect to a cloud-based provisioning system via a single web socket connection. The connection may be established between the provisioning system and a first gateway that serves as the entry point to the Internet from a branch office. Other network devices may connect to this first gateway, including such as routers, switches, access points, and second gateways. The single web socket connection can dramatically reduce the number of connections that need to be established with the cloud-based provisioning system.

Abstract: A method for contiguous allocation of Internet Protocol (IP) addresses includes receiving, by a gateway from a network device, a request for an IP address of a plurality of IP addresses, determining, by the gateway, whether the network device is an access point, in response to determining that the network device is an access point, assigning by the gateway, the IP address to the network device from a first contiguous range of the plurality of IP addresses, in response to determining that the network device is not an access point, assigning, by the gateway, the IP address to the network device from a second contiguous range of the plurality of IP addresses, wherein the first contiguous block and the second contiguous block are separate, after assigning and by the gateway, enforcing a policy for the network device based on the IP address of the network device.

Abstract: An example branch gateway (BG) of a local area network (LAN) includes processing circuitry and a memory. The memory includes instructions that cause the BG to determine that a network traffic load of the BG is greater than that of another BG. The instructions further cause the BG to determine that a first network traffic load skew between the BG and the other BG is greater than a first threshold. The instructions further cause the BG to select a first virtual local area network (VLAN) of a set of VLANs of the LAN, wherein network traffic of client devices of the first VLAN is routed through the BG based on a master role of the first VLAN being assigned to the BG. The instructions further cause the BG to transmit a message to the other BG that assigns the master role of the first VLAN to the other BG.

Abstract: An example controller may include processing circuitry and memory including instructions that when executed by the processing circuitry cause the processing circuitry to circuitry cause the processing circuitry to receive a dynamic host configuration protocol (DHCP) configuration from a management server; determine, based on the DHCP configuration, a network device communicatively coupled to the controller, identify an action to be performed by the network device to accommodate the DHCP configuration; and transmit a message to the determined network device indicating the DHCP configuration and the determined action, wherein the network device performs the determined action in response to the receipt of the message.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.

Abstract: A method for contiguous allocation of Internet Protocol (IP) addresses includes receiving, by a gateway from a network device, a request for an IP address of a plurality of IP addresses, determining, by the gateway, whether the network device is an access point, in response to determining that the network device is an access point, assigning by the gateway, the IP address to the network device from a first contiguous range of the plurality of IP addresses, in response to determining that the network device is not an access point, assigning, by the gateway, the IP address to the network device from a second contiguous range of the plurality of IP addresses, wherein the first contiguous block and the second contiguous block are separate, after assigning and by the gateway, enforcing a policy for the network device based on the IP address of the network device.

Abstract: An example, controller may include processing circuitry and memory including instructions that when executed by the processing circuitry cause the processing circuitry to circuitry cause the processing circuitry to receive a dynamic host configuration protocol (DHCP) configuration from a management server; determine, based on the DHCP configuration, a network device communicatively coupled to the controller, identify an action to be performed by the network device to accommodate the DHCP configuration; and transmit a message to the determined network device indicating the DHCP configuration and the determined action, wherein the network device performs the determined action in response to the receipt of the message.

Abstract: Examples disclosed herein relate to a method comprising receiving, at a network device, an authentication message intended for a user from an authentication server. The network device may be registered with the authentication server as a source device for the user. The method may also include determining, by the network device, a management device for the user that is the intended recipient of the authentication message. The authentication server is not configured to securely connect to the management device directly. The method may also include transmitting the authentication message from the network device to the determined management device.