Abstract: An example method of allocating channels to access points (AP) is presented. A network manager may determine weights of the APs based on a channel metric and a location metric for APs. Further, the network manager may identify a first set of APs based on the weights and allocate a dedicated first channel to each of the first set of APs for its sole use. Accordingly, each of the first set of APs may use a respective dedicated first channel thereby reducing the performance impact on other APs. Further, the network manager may identify a second set of APs based on the weights and allocate second channels for sharing among the second set of APs. Since the second set of APs does not share any channel with the first set of APs, the performance of the second set of APs may not be impacted due to the first set of APs.

Abstract: Systems and methods are provided for ensuring client device connectivity in a deployment pursuant to regulatory updates impacting channel usage or availability. An access point (AP) or AP controller may obtain a client-supported channel list, and detect existence of a regulatory update impacting channel usage in the network device. An AP-supported channel list is compared to the client-supported channel list, and a determination is made regarding which client devices associated to an AP do not support channel usage changes resulting from the regulatory update. Distribution of channels of the AP-supported channel list is controlled among one or more radios of APs in a deployment based on AP density of the deployment, and the determination regarding which client devices do not support the channel usage changes.

Abstract: Examples described herein relate to an investigator device and a method for determining a condition of an antenna of an access point (AP). At least one investigator device may receive one or more antenna condition test frames transmitted via a plurality of antennas of the AP Further, the at least one investigator device may determine an average received signal strength indicator (RSSI) value corresponding to each of the plurality of antennas based on the one or more antenna condition test frames. A condition of the plurality of antennas of the AP may be determined based on a relative comparison between the average RSSI value corresponding to each of the plurality of antennas of the AP. Moreover, in some examples, the at least one investigator device may send a notification to an administrator of the AP based on the condition of the plurality of antennas.

Abstract: Examples described herein relate to a method for managing association of a client device with a virtual access point (VAP) hosted on an access point (AP). The method includes monitoring, by the AP, data traffic corresponding to the client device associated with a first VAP. The first VAP is mapped to a first Multiple Basic Service Set Identifier (MBSSID) set configured with a first quality of service (QoS) parameter. The AP also hosts a second VAP mapped to a second MBSSID set configured with a second QoS parameter. Further, the AP determines a communication demand of the client device based on the data traffic. Furthermore, the AP steers the client device to the second VAP based on the communication demand and the second QoS parameter, and communicates with the client device through the second VAP.

Abstract: Examples of techniques for handling unsolicited probe responses are disclosed. In an example, occurrence of an attack on an access point (AP) in an enterprise Wireless Local Area Network (WLAN) is detected based on an unsolicited probe response and Robust Security Network Information Element (RSN IE). Responsive to detecting the attack, unsolicited probe responses at the AP is disabled. Further, Fast initial Link Setup (FILS) discovery at the AP is enabled.

Abstract: An access point (AP) in a deployment may be attacked by a rogue AP. The rogue AP may transmit fake beacons that include a fake/incorrect basic service set (BSS) color that does not match the BSS color assigned to/used by the AP under attack. Due to this BSS color mismatch, stations associated to the AP under attack may switch to the fake/incorrect BSS color, and communications between the AP under attack and the stations may be disrupted, and can eventually lead to service denial. Systems and methods are provided for leveraging the BSS color feature to identify when a rogue AP is attacking another AP. Upon detecting an attack, the BSS color feature may be disabled to mitigate the level of service disruption to the AP under attack and the stations associated to that AP.

Abstract: Examples described herein relate to an investigator device and a method for determining a condition of an antenna of an access point (AP). At least one investigator device may receive one or more antenna condition test frames transmitted via a plurality of antennas of the AP Further, the at least one investigator device may determine an average received signal strength indicator (RSSI) value corresponding to each of the plurality of antennas based on the one or more antenna condition test frames. A condition of the plurality of antennas of the AP may be determined based on a relative comparison between the average RSSI value corresponding to each of the plurality of antennas of the AP. Moreover, in some examples, the at least one investigator device may send a notification to an administrator of the AP based on the condition of the plurality of antennas.

Abstract: Systems and methods are provided for leveraging uplink (U)L scheduling information obtained by way of Quality of Service (QoS) Null/QoS Data frames and Media Access Control (MAC) headers transmitted by any station (STA). This UL scheduling information can be read by any access point (AP) in an extended service set (ESS), and used to improve network performance. For example, an AP may use such UL scheduling information (from STAs associated to co-channel APs in the same ESS) to minimize the latency for UL latency-sensitive traffic in that ESS. Additionally, an AP may use such UL scheduling information to minimize contention amongst STAs connected to different APs on the same channel in the same ESS, thereby improving system capacity.

Abstract: An access point (AP) in a deployment may be attacked by a rogue AP. The rogue AP may transmit fake beacons that include a fake/incorrect basic service set (BSS) color that does not match the BSS color assigned to/used by the AP under attack. Due to this BSS color mismatch, stations associated to the AP under attack may switch to the fake/incorrect BSS color, and communications between the AP under attack and the stations may be disrupted, and can eventually lead to service denial. Systems and methods are provided for leveraging the BSS color feature to identify when a rogue AP is attacking another AP. Upon detecting an attack, the BSS color feature may be disabled to mitigate the level of service disruption to the AP under attack and the stations associated to that AP.

Abstract: A method for protecting 802.11 ax networks includes receiving, by an access point, a plurality of Single User (SU) Quality of Service (QOS) NULL frames from a station, tracking, by the access point as the plurality of SU QOS NULL frames are received, a variable in one or more of the plurality of SU QOS NULL frames, determining, by the access point and based on tracking the variable, the station is suspicious, sending, by the access point and in response to determining the station is suspicious, a request to check a status of the variable, determining, by the access point and based on a response to the request, the station is under attack, and flagging, by the access point, the station as under an attack.

Abstract: Operation of a wireless network access point (AP) to communicate with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP. The BSS identifier is utilized to identify overlapping BSSs (OBSSs). A first set of one or more wireless client devices communicate using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable BSS identifier of the wireless AP. The BSS identifier is utilized to identify OBSSs. Unauthorized network activity is detected based on the BSS identifier and a received BSS identifier associated with the received transmissions. A dynamic adjustment is made to one of the BSS identifiers of the AP or the received BSS identifier in response to detected unauthorized network activity.

Abstract: A method for processing a denial of service (DOS) includes: receiving a de-authentication/disassociation (D/D) frame by an access point (AP), determining by the AP a state of security association establishment between the AP and a client device, maintaining a connection between the AP and the client device if the security association is incomplete, sending a probe packet from the AP to the client device if security association is complete and the connection between the AP and the client device is in a non-PMF (protected management frames) setting, maintaining the connection if the client device responds to the probe packet, and terminating the connection if the client device does not respond to the probe packet.

Abstract: Examples of block acknowledgement negotiations are described. In an example, a request to establish a BA session is sent by a first computing device (first device) to a second computing device (second device). A timer for receipt of a response to the request is initialized. A BA successful response is received by the first device after the timer has timed out. A request to terminate the BA session is sent by the first device to the second device. After sending the request to terminate the BA session, BA negotiation is reinitiated by the first device based on an updated inactivity timer, so that there are greater chances of successfully establishing a BA session. In an example, if the second device ignores the request to terminate the BA session then it sends a BA reject response to the first device.

Abstract: Systems and methods are provided for leveraging uplink (U)L scheduling information obtained by way of Quality of Service (QoS) Null/QoS Data frames and Media Access Control (MAC) headers transmitted by any station (STA). This UL scheduling information can be read by any access point (AP) in an extended service set (ESS), and used to improve network performance. For example, an AP may use such UL scheduling information (from STAs associated to co-channel APs in the same ESS) to minimize the latency for UL latency-sensitive traffic in that ESS. Additionally, an AP may use such UL scheduling information to minimize contention amongst STAs connected to different APs on the same channel in the same ESS, thereby improving system capacity.

Abstract: A method for protecting 802.11 ax networks includes receiving, by an access point, a plurality of Single User (SU) Quality of Service (QOS) NULL frames from a station, tracking, by the access point as the plurality of SU QOS NULL frames are received, a variable in one or more of the plurality of SU QOS NULL frames, determining, by the access point and based on tracking the variable, the station is suspicious, sending, by the access point and in response to determining the station is suspicious, a request to check a status of the variable, determining, by the access point and based on a response to the request, the station is under attack, and flagging, by the access point, the station as under an attack.

Abstract: Examples of block acknowledgement negotiations are described. In an example, a request to establish a BA session is sent by a first computing device (first device) to a second computing device (second device). A timer for receipt of a response to the request is initialized. A BA successful response is received by the first device after the timer has timed out. A request to terminate the BA session is sent by the first device to the second device. After sending the request to terminate the BA session, BA negotiation is reinitiated by the first device based on an updated inactivity timer, so that there are greater chances of successfully establishing a BA session. In an example, if the second device ignores the request to terminate the BA session then it sends a BA reject response to the first device.

Abstract: A method for processing a denial of service (DOS) includes: receiving a de-authentication/disassociation (D/D) frame by an access point (AP), determining by the AP a state of security association establishment between the AP and a client device, maintaining a connection between the AP and the client device if the security association is incomplete, sending a probe packet from the AP to the client device if security association is complete and the connection between the AP and the client device is in a non-PMF (protected management frames) setting, maintaining the connection if the client device responds to the probe packet, and terminating the connection if the client device does not respond to the probe packet.

Abstract: Operation of a wireless network access point (AP) to communicate with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP. The BSS identifier is utilized to identify overlapping BSSs (OBSSs). A first set of one or more wireless client devices communicate using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable BSS identifier of the wireless AP. The BSS identifier is utilized to identify OBSSs. Unauthorized network activity is detected based on the BSS identifier and a received BSS identifier associated with the received transmissions. A dynamic adjustment is made to one of the BSS identifiers of the AP or the received BSS identifier in response to detected unauthorized network activity.

Abstract: Aspects of power state synchronization are described. In one embodiment, a device is operated as a group access point in a network. Using the group access point, a network including a plurality of devices is established. In operation, the group access point receives a standby entry indicator from a first device of the plurality of devices. In response, the group access point communicates a halt indicator to at least a second device of the plurality of devices. In various embodiments, the halt indicator indicates a halt of communications to the first device. By halting communications, packet loss by the group access point may be avoided, and data throughput in the network may be optimized. In other aspects, the group access point may receive a standby exit indicator from the first device and, in response, communicate a communications resume indicator to at least the second device.