Abstract: During operation, a mesh network access point (MAP) may communicate, via multiple mesh paths in a mesh network with the one or more root access points (RAPs), uplink packets or frames to or from at least two electronic devices. Notably, at a given time, the MAP uses a first mesh path in the mesh paths to communicate a first subset of the uplink packets or frames associated with a first electronic device in the two electronic devices and uses a second (different) mesh path in the mesh paths to communicate a second subset of the uplink packets or frames associated with a second electronic device in the two electronic devices. Moreover, the MAP may dynamically distribute the first electronic device or the second electronic device over the multiple mesh paths, e.g., based at least in part on one or more communication-performance metrics of the mesh paths and/or the mesh network.

Abstract: An access point that selectively provides a multicast domain name system (mDNS) message is described. During operation, the access point may receive an mDNS message, where the mDNS message includes an identifier of a group (such as a user group). For example, the identifier of the group may be included in the mDNS message when the mDNS message includes discovery information for a service. Moreover, the identifier may specify the portion of a subnet in a wireless local area network (WLAN) in a geographic region, such as a room, a floor or a building. Then, the access point may determine whether the access point or an electronic device is included in the group. When the access point or the electronic device is in the group, the access point may selectively provide the mDNS message addressed to the electronic device. Otherwise, the access point may drop the mDNS message.

Abstract: An electronic device (such as an access point) that selectively performs authentication to a network is described. During operation, the electronic device provides an identity request addressed to the second electronic device. Then, the electronic device receives, associated with the second electronic device, an identity response. In response, when the authentication computer is unavailable, the electronic device accesses, in memory, a predefined hash function and associated authentication parameters for an authentication technique. Next, the electronic device performs authentication with the second electronic device based at least in part on the predefined hash function, where the authentication is compatible with the authentication technique (a type of EAP). Moreover, the electronic device generates an encryption key, and establishes secure communication with the second electronic device by performing a four-way handshake with the second electronic device based at least in part on the encryption key.

Abstract: An access point is described. During operation, the access point may provide, addressed to a computer, a location request. In response, the access point may receive, associated with the computer, a location response that includes location information specifying an address of a controller of the access point, where the computer may be located in a same subnet in the network as the access point and/or the controller may be located in a different subnet in a network than the access point. For example, the computer may be a lightweight access point protocol (LWAPP) proxy for at least some management functions of the controller. Then, the access point may provide, addressed to the controller, a configuration request. Next, the access point may receive, associated with the controller, a configuration response that includes second information specifying a configuration of the access point.

Abstract: During operation, a mesh network access point (MAP) may communicate, via multiple mesh paths in a mesh network with the one or more root access points (RAPs), uplink packets or frames to or from at least two electronic devices. Notably, at a given time, the MAP uses a first mesh path in the mesh paths to communicate a first subset of the uplink packets or frames associated with a first electronic device in the two electronic devices and uses a second (different) mesh path in the mesh paths to communicate a second subset of the uplink packets or frames associated with a second electronic device in the two electronic devices. Moreover, the MAP may dynamically distribute the first electronic device or the second electronic device over the multiple mesh paths, e.g., based at least in part on one or more communication-performance metrics of the mesh paths and/or the mesh network.

Abstract: An access point that selectively provides a multicast domain name system (mDNS) message is described. During operation, the access point may receive an mDNS message, where the mDNS message includes an identifier of a group (such as a user group). For example, the identifier of the group may be included in the mDNS message when the mDNS message includes discovery information for a service. Moreover, the identifier may specify the portion of a subnet in a wireless local area network (WLAN) in a geographic region, such as a room, a floor or a building. Then, the access point may determine whether the access point or an electronic device is included in the group. When the access point or the electronic device is in the group, the access point may selectively provide the mDNS message addressed to the electronic device. Otherwise, the access point may drop the mDNS message.