Abstract: In one embodiment, a device identifies a plurality of access points of a wireless network. The device also identifies a plurality of mobile nodes of a mobile system. The device establishes a first label-switched path in the wireless network that comprises a wireless link between a first mobile node in the plurality of mobile nodes and a first access point in the plurality of access points. The device establishes a second label-switched path in the wireless network that comprises a wireless link between a second mobile node of the mobile system and a second access point in the plurality of access points.

Abstract: In one embodiment, a device identifies a path of travel of a mobile system. The device subdivides the path of travel into a plurality of zones. The device generates time-slotted channel hopping schedules for the plurality of zones, each time-slotted channel hopping schedule having an associated zone among the plurality of zones. The device causes the mobile system to communicate wirelessly with networking infrastructure located along the path of travel, in accordance with a particular one of the time-slotted channel hopping schedules while the mobile system is located in its associated zone.

Abstract: In one embodiment, a mobile system scans wireless channels for any upcoming access points using a dedicated monitor radio of the mobile system. The mobile system identifies a particular wireless channel in use by an upcoming access point. The mobile system notifies a second radio of the mobile system of the particular wireless channel. The mobile system performs a handoff between a current access point and the upcoming access point in part by switching the second radio of the mobile system to the particular wireless channel of the upcoming access point.

Abstract: In one embodiment, a networking device receives packets of a traffic flow destined for a mobile system. The networking device sends a first flowlet of the traffic flow towards the mobile system via a first wireless access point. The networking device determines an idle time between the first flowlet and a second flowlet of the traffic flow. The networking device sends, based on the idle time, the second flowlet towards the mobile system via a second wireless access point.

Abstract: Various implementations disclosed herein provide a method for authenticating users to an enterprise network using closed subscriber groups. The method includes determining whether the client device is associated with a subscriber group that corresponds to the enterprise network. The method further includes granting the client device access to the enterprise network in response to determining that the client device is associated with the subscriber group that corresponds to the enterprise network.

Abstract: In one embodiment, a networking device receives packets of a traffic flow destined for a mobile system. The networking device sends a first flowlet of the traffic flow towards the mobile system via a first wireless access point. The networking device determines an idle time between the first flowlet and a second flowlet of the traffic flow. The networking device sends, based on the idle time, the second flowlet towards the mobile system via a second wireless access point.

Abstract: Techniques are provided that rotate a device address used to identify a wireless client device on a wireless network. The wireless client device and at least one network infrastructure component identify a plurality of device addresses associated with the wireless client device. In some embodiments, the plurality of device addresses are generated via a corresponding plurality of invocations of a stateful random number generator, such as a cryptographically secure pseudorandom number generator.

Abstract: A wireless client device communicates, to an access point over a secure channel, a mapping of a dynamic device address to a stable device address. By communicating the mapping, the access point is able to determine that packets received from two different device addresses originate from a common device. The access point is then able to maintain an association between the originating device and other network resources assigned or allocated to the originating device, such as IP addresses or infrastructure station address, which is used to identify the originating device to other devices outside the network in some embodiments.

Abstract: Systems, methods, and computer-readable media are provided for an efficient roaming management method using a single association identifier token for associating with different access points. In one aspect of the present disclosure, a network controller includes memory having computer-readable instructions stored therein and one or more processors. The one or more processors are configured to execute the computer-readable instructions to receive a request from an endpoint to connect to a first access point; generate association identification token (e.g., PMK and PMKID) for the endpoint to connect to the first access point; and distribute the association identification token to a second access point prior to the endpoint attempting to connect to the second access point, the association identification token being used by the second access point to validate a subsequent request by the endpoint to connect to the second access point.

Abstract: In one example, a Network Policy Function (NPF) obtains a first identifier for a User Equipment (UE) based on communications between the UE and a first access network of a system, and an Internet Protocol (IP) address used by the UE to communicate over the first access network. The NPF obtains a second identifier for the UE based on communications between the UE and a second access network of the system. The NPF determines that the UE used the IP address to communicate over the first access network of the system based on a correlation between the first identifier for the UE and the second identifier for the UE. The NPF provides the IP address to the UE, and the UE uses the IP address to communicate over the second access network.

Abstract: In one embodiment, a device identifies a plurality of access points of a wireless network. The device also identifies a plurality of mobile nodes of a mobile system. The device establishes a first label-switched path in the wireless network that comprises a wireless link between a first mobile node in the plurality of mobile nodes and a first access point in the plurality of access points. The device establishes a second label-switched path in the wireless network that comprises a wireless link between a second mobile node of the mobile system and a second access point in the plurality of access points.

Abstract: Systems, methods, and computer-readable media are provided for an efficient roaming management method using a single association identifier token for associating with different access points. In one aspect of the present disclosure, a network controller includes memory having computer-readable instructions stored therein and one or more processors. The one or more processors are configured to execute the computer-readable instructions to receive a request from an endpoint to connect to a first access point; generate association identification token (e.g., PMK and PMKID) for the endpoint to connect to the first access point; and distribute the association identification token to a second access point prior to the endpoint attempting to connect to the second access point, the association identification token being used by the second access point to validate a subsequent request by the endpoint to connect to the second access point.

Abstract: In one embodiment, a client device having a plurality of radios obtains a list of basic service set identifiers (BSSIDs) for a plurality of wireless access points of a wireless network. The client device associates each of the plurality of radios of the client device with a different wireless access point of the wireless network, based on the obtained list of BSSIDs. The client device receives a copy of a data packet from a particular one of the associated wireless access points. Each of the associated wireless access points receives a replicated copy of the data packet to be transmitted towards the client device. The device causes the associated wireless access points to cease further transmission of their copies of the data packet by acknowledging receipt of the data packet to the particular wireless access point.

Abstract: Techniques to adaptively support/enable a wireless network feature for certain wireless client devices without hampering the performance or connectivity of wireless client devices which do not support that wireless network feature. An access point or wireless network controller adaptively enables a wireless network feature without advertising support for the wireless network feature in a wireless network-standard compliant manner to allow one or more wireless clients that support the wireless network feature to use the wireless network feature when associated to the access point while enabling association of one or more wireless clients that do not support the wireless network feature.

Abstract: In one embodiment, a gateway to a Layer-3 network forms a first Layer-2 tunnel between the gateway and a first wireless access point (AP) that communicates wirelessly with a first mobile node of a mobile system (MS) via a first wireless connection. The gateway generates a mapping that associates an onboard device of the MS with the first AP and an identifier for the MS, based on traffic conveyed via the first Layer-2 tunnel and associated with the onboard device, the traffic comprising a header that indicates the identifier for the MS. The gateway receives, from a second AP, an indication that the MS is roaming from the first wireless connection to a second wireless connection, the indication including the identifier for the MS. The gateway updates the mapping to associate the onboard device of the MS with a second AP, based on the indication that the MS is roaming.

Abstract: Techniques to adaptively support/enable a wireless network feature for certain wireless client devices without hampering the performance or connectivity of wireless client devices which do not support that wireless network feature. An access point or wireless network controller adaptively enables a wireless network feature without advertising support for the wireless network feature in a wireless network-standard compliant manner to allow one or more wireless clients that support the wireless network feature to use the wireless network feature when associated to the access point while enabling association of one or more wireless clients that do not support the wireless network feature.

Abstract: Methods are provided for extending sponsored Wi-Fi guest access capability to other enterprise tools and/or access technologies such as private access networks including private LTE and 5G networks. The methods include a controller detecting a user equipment (UE) that is connected to a guest access service provided by a wireless local access network (WLAN) and generating a profile for the guest access service. The methods further include the controller providing, to the UE, the profile to cause the UE to connect to the guest access service provided by another access network.

Abstract: A network management center includes a Dynamic Host Configuration Protocol (DHCP) server. The network management center obtains from an identity server, client information indicating authentication of a client device in a wireless network that is connected to a network fabric. The network management center obtains from an edge node in the network fabric an Internet Protocol (IP) address request for the client device. The IP address request including a fabric domain identifier associated with the edge node. The network management center allocates an IP address for the client device based on the client information obtained from the identity server and the fabric domain identifier contained in the IP address request obtained from the edge node. The network management center provides to the edge node an Identifier Locator Addressing (ILA) address based on the IP address.

Abstract: Embodiments identify a station that rotates an over the air station address. As address rotation was not originally designed into wireless networks, the rotation can introduce communication challenges for the station. The embodiments derive that traffic referencing two different over the air station addresses are associated with a single common station. This is accomplished by determining a similarity between properties of two sets of traffic. A first set of traffic references the first over the air station address and a second set of traffic references the second over the air station address. If the properties common across the two sets of traffic indicate sufficient similarity, the embodiments determine that both sets of traffic are associated with a single device. Network configuration of the device is then adjusted based on the determination.

Abstract: A network management center includes a Dynamic Host Configuration Protocol (DHCP) server. The network management center obtains from an identity server, client information indicating authentication of a client device in a wireless network that is connected to a network fabric. The network management center obtains from an edge node in the network fabric an Internet Protocol (IP) address request for the client device. The IP address request including a fabric domain identifier associated with the edge node. The network management center allocates an IP address for the client device based on the client information obtained from the identity server and the fabric domain identifier contained in the IP address request obtained from the edge node. The network management center provides to the edge node an Identifier Locator Addressing (ILA) address based on the IP address.