Ubiquiti Inc.

Ruckus Wireless, Inc.

Juniper Networks, Inc.

Palo Alto Research Center Inc.

Powercloud Systems, Inc.

Bo-chieh Yang

Ted Tsei Kuo

Robert J Pera

Keh-Ming Luoh

Sriram Dayanandan

Tyan-Shu Jou

Tian-Yuan Lin

Yuan-Hsiang Lee

Ming Sheu

Abhiram Madhugiri Shamsundar

Li-Jen Wang

Andrea Peiro

Jason Sun Woan

Simon E M Barber

Jeffrey Abramowitz

Diana Kathryn Smetters

Jude Lee

Ming-Jye Sheu

Patrick G Jabbaz

Jeffrey D Abramowitz

Ted T Kuo

Yuang-Hsiang Lee

Techniques are described by which a network management system (NMS) provides a common user interface (UI) to enable a user to collectively configure network devices to establish an EVPN topology. For example, an NMS is configured to: generate data representative of a common UI comprising UI elements representing a plurality of network devices to be configured in an EVPN topology; receive, via the common UI, an indication of a user input selecting one or more of the UI elements representing selected network devices; generate UI elements representing a plurality of ports of the selected network devices; receive, via the common UI, an indication of a user input selecting the UI elements representing one or more selected ports; and generate, based on the one or more selected network devices and one or more selected ports, topology relationship information of the one or more selected devices to establish the EVPN topology.

Configuration of EVPN topologies using a user interface

Apparatus and methods are provided for protecting network resources, particularly in association with automatic provisioning of new client devices. A global PKI (Public Key Infrastructure) scheme is rooted at a globally available server. Roots of PKIs for individual organizations also reside at this server or another globally available resource. To enable access to an organization's network, one or more authenticators are deployed, which may be co-located with access points or other network components. After a client device enabler (CDE) and an authenticator perform mutual authentication with certificates issued within the global PKI, the CDE is used to provision a new client device for the organization. After the client is provisioned, it and an authenticator use certificates issued within the per-organization PKI to allow the client access to the network.

Apparatus and methods for protecting network resources

One embodiment of the present invention provides a system for configuring an access point in a wireless network. During operation, the access point discovers one or more existing access points associated with the wireless network. The access point then obtains a set of configuration information from one existing access point, and synchronizes a local timestamp counter to a selected existing access point, thereby allowing the access point to be configured without using a centralized management station.

Distributed seamless roaming in wireless networks

A PoE-enabled wireless device facilitates providing wireless access to a local area network (LAN) by receiving power from an Ethernet cable. The device includes a first Ethernet port that can receive a power signal. The device also includes a second Ethernet port that facilitates coupling the apparatus to the LAN, and includes a wireless module to provide a wireless network connection to the LAN. Specifically, the wireless module receives power from the power signal of the first Ethernet port to provide the wireless network connection. The wireless device can also include a third Ethernet port for providing power and a network connection to a remote network device. The wireless device can use the third Ethernet port to send an external-reset signal to the remote network device, which facilitates remotely resetting a configuration of the remote network device without having to physically access the remote network device.

Wireless gateway adapter for a power-over-ethernet port

Systems and methods for authentication using paired dynamic secrets in secured wireless networks are provided. Each authenticated user is assigned a random secret generated so as to be unique to the user. The secret is associated with a wireless interface belonging to the user, so that no other wireless interface may use the same secret to access the network. The secret may be updated either periodically or at the request of a network administrator, and reauthentication of the wireless network may be required.

Dynamic authentication in secured wireless networks

Systems and methods for provisioned configuration of wireless devices to allow access to restricted wireless networks are provided. Using an open wireless or wired network, a user of a wireless device may be authenticated. A configuration application, which includes the parameters and policies of the provisioned configuration, is generated, transferred to, and executed on the wireless device. Following configuration by the application, the wireless device is allowed to access the restricted wireless network within the parameters and policies of the provisioned configuration.

Provisioned configuration for automatic wireless connection

Growing community of inventors

San Jose, CA, United States of America

Bo-chieh Yang