Abstract: Systems and methods are provided for discoverability detection of network services. The present disclosure provides for a cloud-based network insight server that collects performance information of a network and a network agent, communicating with the cloud-based network insight server, that monitors discoverability of network services hosted by devices on the network. The network agent receives configuration information from the cloud-based network insight server and transmits discoverability states of the devices to the cloud-based network insight server based on executing a service discovery process through an access point on the network.

Abstract: Implementations of the present disclosure relate to resource unit (RU) assignment to combat frequency selective fading. A method comprises determining, at an access point (AP), a plurality of channel qualities of a plurality of resource units (RUs) for a client. The plurality of RUs are configured to be available for communications with a plurality of clients comprising the client. The method further comprises determining, from the plurality of RUs, a target RU for the client based at least in part on the plurality of channel qualities. The target RU is to be used by the client for a following transmission with the AP. A target RU with good channel quality will be assigned to the client, thus the transmission and overall system performance will be enhanced.

Abstract: Systems and methods are provided for adaptively enabling and disabling spatial reuse and adapting BSS color assignments based on various factors associated with a wireless network. A first AP in a wireless network can identify a second AP in a wireless network. The first AP and the second AP may be using the same wireless channel in the wireless network. The first AP can determine a signal strength, such as a received signal strength indicator (RSSI), associated with the second AP. The first AP can adapt its spatial reuse and BSS color assignment according to the signal strength and a signal strength threshold. By adaptively enabling and disabling spatial reuse and adapting BSS color assignments, the disclosed systems and methods provide for improved reuse of wireless mediums while avoiding collisions.

Abstract: Examples described herein mitigate adjacent channel interference for dual radios of a network device. Examples described herein may associate, by a network device, a first client device with a first radio of the network device, associate, by the network device, a second client device with a second radio of the network device, determine that the first and second client devices are within a steering threshold, and based on the determination that the first and second client devices are within the steering threshold, steer, by the network device, the second client device from the second radio to the first radio. Examples described herein may communicate, using the first radio of the network device, with the first and second client devices.

Abstract: Embodiments of the present disclosure relate to transmission of network access information for wireless devices. A method comprises transmitting an authorization request for the wireless device to a server upon receiving a presence announcement message from a wireless device. The method further comprises receiving an authorization response from the server including network access information and bootstrapping information of the wireless device. The method further comprise performing authentication with the wireless device based on the bootstrapping information. The method also comprises transmitting the network access information to the wireless device. The network access information includes a service set identifier (SSID) for a wireless local area network (WLAN) and credential information for the mobile device to access the WLAN.

Abstract: Systems and methods are provided for discoverability detection of network services. The present disclosure provides for a cloud-based network insight server that collects performance information of a network and a network agent, communicating with the cloud-based network insight server, that monitors discoverability of network services hosted by devices on the network. The network agent receives configuration information from the cloud-based network insight server and transmits discoverability states of the devices to the cloud-based network insight server based on executing a service discovery process through an access point on the network.

Abstract: Examples of sensor-based roaming issue identification in a wireless network are disclosed. In an example, a wireless roam for a sensor may be initiated from a source AP to a target AP. Management traffic between the sensor and one of the source AP or the target AP during the wireless roam may be monitored. In response to detecting an anomaly in the management traffic, the wireless roam for the sensor from the source AP to the target AP may be re-initiated. Management traffic capture on the sensor during the reinitiated wireless roam may be initiated. A roaming issue for the sensor may be identified based on analysis of the captured management traffic and the same may be reported.

Abstract: Systems and methods are provided for multiple basic service set identifier (MBSSID) beaconing (from an access point (AP) standpoint) and MBSSID/virtual AP (VAP) scanning (from a client device perspective). To facilitate easier discovery of mesh APs/VAPs, BSSIDs associated with mesh VAPs can be advertised more frequently, e.g., being broadcast as a transmitted or non-transmitted BSSID in each MBSSID beacon. Additionally, information regarding mesh VAPs, such as mesh capability information, can be provided via intermediate discovery beacons or frames such that out-of-band scanning mechanisms can discover mesh VAPs faster. Additionally still, the existence of mesh VAPs can be advertised in a dedicated field of an MBSSID beacon.

Abstract: Systems and methods are provided for zero-touch provisioning of devices, such as sensors, on a network. When a device is unable/cannot access a network via Ethernet, cellular, or near field communications capabilities resident on the device, the device can alternatively be provisioned via an intermediate network device, such as an access point using, e.g., Device Provisioning Protocol or Wi-Fi EasyConnect. A cloud-based network management system may receive a device's bootstrapping information during or after manufacturing of the device. Ultimately, the device, via the intermediate network device, is able to communicate with a back-end, cloud-based network insight system from which configuration parameters for the device may be obtained.

Abstract: Examples described herein relate to a method for establishing a backup connectivity between a sensor and a management system. The sensor may be deployed in an IT infrastructure and configured to execute a one or more predetermined evaluations for the IT network and generate corresponding evaluation result. Thereafter, the sensor may determine whether a connection between the sensor and the management system via a primary connectivity is unsuccessful. In response to determining that the connection between the sensor and the management system via the primary connectivity is unsuccessful, the sensor may establish a backup connectivity by successfully connecting to an available wireless network using a security credential received by the sensor upon successful verification of public key information of the sensor via an authentication server. The sensor then transmits the evaluation result to the management system via the backup connectivity.

Abstract: Systems and methods are provided for transmitting low latency traffic in next generation wireless local area networks. A new Media Access Control (MAC) layer frame can be transmitted by an AP to establish a reserved time period during which interference from/collisions with other stations transmitting non-high priority data is avoided. Stations with non-high priority data queued for transmission can defer accessing a channel on which to effectuate the transmission until the reserved time period expires.

Abstract: Systems and methods are provided for encryption enhancement for a multi-link operation. Various subsets of addresses (or all addresses) associated with the frame are set to a determined known value, allowing encryption of the mac protocol data unit (MPDU) at a controller without knowledge of which particular link the frames will be sent. The multi-link devices (MLDs) used in the above communication may conduct communications in compliance with the IEEE 802.11be standard.

Abstract: Systems and methods are provided for transmitting low latency traffic in next generation wireless local area networks. A new Media Access Control (MAC) layer frame can be transmitted by an AP to establish a reserved time period during which interference from/collisions with other stations transmitting non-high priority data is avoided. Stations with non-high priority data queued for transmission can defer accessing a channel on which to effectuate the transmission until the reserved time period expires.

Abstract: Systems and methods are provided for opportunistic spatial reuse. In various embodiments, the disclosed systems and methods provide for mechanisms for enabling and disabling spatial reuse in a wireless network as appropriate based on the deployment of the wireless network. In some embodiments, spatial reuse can be enabled and disabled based on various factors, such as channel utilization. In some embodiments, spatial reuse can be enabled and disabled as appropriate for various types of traffic in a wireless network. For example, spatial reuse can be enabled and disabled for downlink traffic (e.g., traffic from an access point to a client device), for uplink traffic (e.g., traffic from a client device to an access point), for multicast or broadcast traffic (e.g., traffic distributed to multiple recipients), or for certain modes of transmission (e.g., single user beamformed transmission, Dual Carrier Modulated transmission).

Abstract: Systems and methods are provided for aggregating Media Access Control (MAC) Protocol Data Units (MPDUs) destined for different peers, and may have the same or different source address information, e.g., within the same or across different virtual access points (VAPs). For example, trigger frames used to signal to devices which subchannel(s) those devices can utilize, may be aggregated. For example, a multi-VAP/multi-device block acknowledgement for acknowledging packets transmitted to devices belonging to different VAPs can be sent as an aggregated MPDU.

Abstract: Examples described herein relate to a method and a management system for evaluating an information technology (IT) infrastructure's vulnerability to a network attack. The management system determines whether a vulnerability evaluation template corresponding to a network attack is uploaded in a template repository. In response to determining that the vulnerability evaluation template is uploaded in the template repository, the management system transmits the vulnerability evaluation template to a sensor deployed in the IT infrastructure. The vulnerability evaluation template, when executed by the sensor, causes the sensor to generate an assessment indicative of a vulnerability of the IT infrastructure to the network attack. The management system receives the assessment from the sensor and reports it via a dashboard.

Abstract: Systems and methods are provided for multiple basic service set identifier (MBSSID) beaconing (from an access point (AP) standpoint) and MBSSID/virtual AP (VAP) scanning (from a client device perspective). To facilitate easier discovery of mesh APs/VAPs, BSSIDs associated with mesh VAPs can be advertised more frequently, e.g., being broadcast as a transmitted or non-transmitted BSSID in each MBSSID beacon. Additionally, information regarding mesh VAPs, such as mesh capability information, can be provided via intermediate discovery beacons or frames such that out-of-band scanning mechanisms can discover mesh VAPs faster. Additionally still, the existence of mesh VAPs can be advertised in a dedicated field of an MBSSID beacon.

Abstract: Examples described herein mitigate adjacent channel interference for dual radios of a network device. Examples described herein may associate, by a network device, a first client device with a first radio of the network device, associate, by the network device, a second client device with a second radio of the network device, determine that the first and second client devices are within a steering threshold, and based on the determination that the first and second client devices are within the steering threshold, steer, by the network device, the second client device from the second radio to the first radio. Examples described herein may communicate, using the first radio of the network device, with the first and second client devices.

Abstract: Systems and methods are configured to receive a first request to schedule a Time To Wake (TWT) service period (SP) for a first station. The first request can be based on individual TWT protocol. That the TWT SP satisfies a threshold level of similarity with an existing TWT SP maintained for a group of at least one station scheduled to communicate over the existing TWT SP can be determined. The group can include a second station. The first station can be assigned to the group. A first packet can be transmitted to the first station and a second packet can be transmitted to the second station over the existing TWT SP.

Abstract: Dynamic configuration of multiple radios of an access point is described. An example of an access point includes a processor; a memory; hardware filters; and a first set of radio chains and antennas, the access point including a first radio mode for operation as a single radio on a first channel to service a first BSS and a second radio mode for operation as a first radio on the first channel and a second radio on a second channel to perform an additional service, wherein the access point is to provide dynamic configuration of the radios including, upon determining that operation of the first channel to service the first BSS is not compatible with a particular hardware filter of the first radio, migrating the first BSS from the first radio to the second radio to service on the second channel, and providing the additional service on the first channel.