Abstract: Techniques are provided for configuring wireless switches within a mobility domain. In one implementation, a first designated wireless switch and a first client wireless switch are configured as part of a first mobility area of the mobility domain. An internal peering session is established between the first client wireless switch and the first designated wireless switch in the first mobility area. A second designated wireless switch is configured as part of a second mobility area of the mobility domain, and an external peering session is established between the first designated wireless switch in the first mobility area and the second designated wireless switch in the second mobility area.

Abstract: An enterprise network is provided which includes a central site, a network and a remote site communicatively coupled to the central site over the network. The central site includes a first termination device in communication with a restricted network segment including at least one server. The remote site includes an infrastructure device, an authorized access wireless local area network (WLAN), and an unauthorized access WLAN. The infrastructure device comprises a second termination device which communicates with the first termination device over the network. The authorized access WLAN allow communications with the central site via the second termination device over a tunnel coupling the first termination device to the second termination device, whereas the unauthorized access WLAN allows communications with the network via the second termination device.

Abstract: Techniques and technologies are provided in which wireless switches, each supporting their own subnet, are configured as part of a mobility domain. Each wireless switch in the mobility domain can discover other wireless switches in the mobility domain upon joining the network, and establish a peering session with each of the other switches within the mobility domain. This can involve establishing a data tunnel, which operates according to GRE-over-IP, and a control connection between each pair of the wireless switches in the mobility domain. Each data tunnel carries complete Layer-2 (L2) packets between the first wireless switch and the second wireless switch. Each L2 packet comprises L2 header information (e.g., a VLAN identifier), and is made available at the destination wireless switch of the data tunnel. Each control connection comprises a peering session over Internet Protocol (IP) which operates according to the transmission control protocol (TCP).

Abstract: In a network comprising a first subnet comprising a first WLAN associated with a home wireless switch a second subnet comprising a second WLAN associated with a first current wireless switch and a third subnet comprising a third WLAN associated with a second current wireless switch, methods are provided for forwarding a Broadcast/Multicast (BCMC) packet generated by a first wireless client device when the first wireless client device roams from the first subnet to the second subnet and a second wireless device roams from the first subnet to the third subnet. Other methods are provided for forwarding a BCMC packet generated by a wired host to a first wireless client device when the first wireless client device roams from the first subnet to the second subnet and to a second wireless device when the second wireless device roams from the first subnet to the third subnet.

Abstract: In a network which includes a first subnet which includes a home wireless switch which includes at least one first interface, and a second subnet which includes a current wireless switch, a method is provided for applying a first set of original security policies associated with the at least one first interface to a packet transmitted from a particular wireless communication device after the particular wireless communication device roams from the first subnet to the second subnet. A method is also provided for applying a first set of original security policies associated with the at least one first interface to a packet being transmitted to a particular wireless communication device after the particular wireless communication device roams from the first subnet to the second subnet.

Abstract: Techniques and technologies are provided for relaying control messages between wireless switches in different mobility areas of a mobility domain. For example, the mobility domain can be divided into a first mobility area having a first designated wireless switch and a second mobility area having a second designated wireless switch. When the first designated wireless switch receives a control message from a first client wireless switch associated with the first designated wireless switch, and the first designated wireless switch can relay the control message from the first designated wireless switch to a second client wireless switch, associated with the first designated wireless switch, with which the first designated wireless switch has an internal peering session in the first mobility area.

Abstract: Techniques and technologies are provided for enabling wireless switches in a mobility domain to discover other wireless switches in a mobility domain across layer 3 (L3) subnets.

Abstract: Techniques and technologies are provided for recovering from failure of a home wireless switch in a network of wireless switches which includes an initial home wireless switch of at least one wireless client device in a first mobility domain, a backup home wireless switch in the first mobility domain, and other peer wireless switches in the first mobility domain.

Abstract: Techniques and technologies are provided for restarting a first wireless switch when the first wireless switch fails. For example, after the first wireless switch fails, the first wireless switch transmits a restart message to its peer wireless switches to begin re-establishing peering sessions with peer wireless switches. The first wireless switch resets its home wireless client database (HWCDb) with information from its data plane wireless client database (KWCDb), and transmits the updated information in its HWCDb to its peer wireless switches. The peer wireless switches store this information in their respective control plane wireless client databases (CPWCDbs), and initially mark the wireless client devices in the respective CPWCDbs as stale entries.

Abstract: An enterprise network is provided which includes a central site, a network and a remote site communicatively coupled to the central site over the network. The central site includes a first termination device in communication with a restricted network segment including at least one server. The remote site includes an infrastructure device, an authorized access wireless local area network (WLAN), and an unauthorized access WLAN. The infrastructure device comprises a second termination device which communicates with the first termination device over the network. The authorized access WLAN allow communications with the central site via the second termination device over a tunnel coupling the first termination device to the second termination device, whereas the unauthorized access WLAN allows communications with the network via the second termination device.

Abstract: In a network comprising a first subnet comprising a first WLAN associated with a home wireless switch a second subnet comprising a second WLAN associated with a first current wireless switch and a third subnet comprising a third WLAN associated with a second current wireless switch, methods are provided for forwarding a Broadcast/Multicast (BCMC) packet generated by a first wireless client device when the first wireless client device roams from the first subnet to the second subnet and a second wireless device roams from the first subnet to the third subnet. Other methods are provided for forwarding a BCMC packet generated by a wired host to a first wireless client device when the first wireless client device roams from the first subnet to the second subnet and to a second wireless device when the second wireless device roams from the first subnet to the third subnet.

Abstract: Techniques and technologies are provided for recovering from failure of a home wireless switch in a network of wireless switches which includes an initial home wireless switch of at least one wireless client device in a first mobility domain, a backup home wireless switch in the first mobility domain, and other peer wireless switches in the first mobility domain.

Abstract: Techniques and technologies are provided for querying wireless switches in a first mobility domain about a wireless client device. The first mobility domain comprises a first mobility area and other mobility areas. According to one implementation of these techniques, a first wireless switch in the first mobility domain can determine if the wireless client device is in the first mobility area of the first wireless switch. If the first wireless switch determines that the wireless client device is not already present in the first mobility area, then the first wireless switch can transmit a query message to a first designated wireless switch for the first mobility area. The first designated wireless switch can transmit or forward the query message to its external peer designated wireless switches in the other mobility areas of the first mobility domain.

Abstract: Techniques and technologies are provided for restarting a first wireless switch when the first wireless switch fails. For example, after the first wireless switch fails, the first wireless switch transmits a restart message to its peer wireless switches to begin re-establishing peering sessions with peer wireless switches. The first wireless switch resets its home wireless client database (HWCDb) with information from its data plane wireless client database (KWCDb), and transmits the updated information in its HWCDb to its peer wireless switches. The peer wireless switches store this information in their respective control plane wireless client databases (CPWCDbs), and initially mark the wireless client devices in the respective CPWCDbs as stale entries.

Abstract: Techniques and technologies are provided in which wireless switches, each supporting their own subnet, are configured as part of a mobility domain. Each wireless switch in the mobility domain can discover other wireless switches in the mobility domain upon joining the network, and establish a peering session with each of the other switches within the mobility domain. This can involve establishing a data tunnel, which operates according to GRE-over-IP, and a control connection between each pair of the wireless switches in the mobility domain. Each data tunnel carries complete Layer-2 (L2) packets between the first wireless switch and the second wireless switch. Each L2 packet comprises L2 header information (e.g., a VLAN identifier), and is made available at the destination wireless switch of the data tunnel. Each control connection comprises a peering session over Internet Protocol (IP) which operates according to the transmission control protocol (TCP).

Abstract: Techniques and technologies are provided for resolving conflicts among wireless switches associated with a wireless client device regarding a layer 3 (L3) mobility state of the wireless client device at the wireless switches. A conflict regarding the L3 mobility state of the wireless client device between a first wireless switch and a second wireless switch can be detected. For example, in one implementation, a first wireless switch determines that an L3 mobility state of a wireless client device at the first wireless switch is different than the L3 mobility state of the wireless client device at the second wireless switch. The conflict regarding the L3 mobility state of the wireless client device between the first wireless switch and the second wireless switch can then be resolved.

Abstract: Techniques are provided for configuring wireless switches within a mobility domain. In one implementation, a first designated wireless switch and a first client wireless switch are configured as part of a first mobility area of the mobility domain. An internal peering session is established between the first client wireless switch and the first designated wireless switch in the first mobility area. A second designated wireless switch is configured as part of a second mobility area of the mobility domain, and an external peering session is established between the first designated wireless switch in the first mobility area and the second designated wireless switch in the second mobility area.

Abstract: Techniques and technologies are provided for relaying control messages between wireless switches in different mobility areas of a mobility domain. For example, the mobility domain can be divided into a first mobility area having a first designated wireless switch and a second mobility area having a second designated wireless switch. When the first designated wireless switch receives a control message from a first client wireless switch associated with the first designated wireless switch, and the first designated wireless switch can relay the control message from the first designated wireless switch to a second client wireless switch, associated with the first designated wireless switch, with which the first designated wireless switch has an internal peering session in the first mobility area.

Abstract: Techniques and technologies are provided for enabling wireless switches in a mobility domain to discover other wireless switches in a mobility domain across layer 3 (L3) subnets.

Abstract: In a network including a wireless client device, a home wireless switch of the wireless client device, and a new wireless switch within the same mobility domain as the home wireless switch, the new wireless switch can be configured to become a new home/current wireless switch for the wireless client device, and to transmit a layer 2 (L2) roam message to the home wireless switch, when the new wireless switch determines that the wireless client device has roamed from the home wireless switch to the new wireless switch. The L2 roam message indicates that the wireless client device has roamed within the same VLAN or L3 subnet. The L2 roam message comprises an IP address of the new home wireless switch, and an IP address of the new current wireless switch. The home wireless switch is configured to forward the L2 roam message to peer wireless switches within the mobility domain.