Aerohive Networks, Inc.

Extreme Networks, Inc.

Aruba Networks, Inc.

Carl Steven Mower

Matthew Alan Palmer

Steven Mayhew

A method of intelligently sorting packets/datagrams for sending through appropriate branches of a N-way split VPN tunnel according to embodiments of the present invention allow for efficient movement of network traffic to and from a remote network location. Intelligent sorting may be based on a wide range of criteria in order to implement different policies. For example, datagrams may be sorted for sending through the branches of a 3-way split tunnel so that all traffic from a remote network location ultimately destined to servers at a central location may be sent via a secure VPN tunnel, all traffic that matches a 'white-list' of trusted external sites may be sent directly to and from these sites to the remote network location, and all other traffic may be redirected through a Web service that scrubs and filters the traffic to/from questionable sites. Furthermore, the VPN tunnel may be chosen to minimize latency, to detour around network failures, or to conserve energy by minimizing the number of routers a datagram passes through.

Intelligent sorting for N-way secure split tunnel

A method of configuring a virtual network comprises: running a user-interactive business requirements wizard from a server, the wizard collecting business requirements from a user; translating the business requirements into technical requirements for a network configuration using the server; selecting a network configuration from a network configuration database using the server, the selecting utilizing the technical requirements; testing the network configuration using a processor; monitoring the testing and generating new facts regarding performance of the network configuration, using the processor; feeding back the new facts to the server for use by the server in the selecting; and repeating the selecting, testing, monitoring and generating, and feeding back, until the server determines a criterion for network stability has been reached. The method may include automatically discovering local network characteristics using a networking device, prior to the selecting, sending the characteristics to the server for use by the server in the selecting.

Virtualization of networking services

The present disclosure discloses a system and method for providing guest WiFi authentication based on physical proximity to a dedicated access point in a guest wireless network. Specifically, a network device determines that a client device associated with a guest user is located within close physical proximity to a particular access point in a guest wireless network, and authenticates the client device for guest wireless network access based on its close physical proximity to the particular access point without requiring any guest user registration. In particular, the network device determines a first signal strength level of a wireless signal received from the client device by the particular access point, and determines that the first signal strength level exceeds a threshold. The threshold is based on difference between signal strength levels of the wireless signal received at the client device and at a distance corresponding to the close physical proximity.

Guest WiFi authentication based on physical proximity

A method of configuring a networking device comprises: collecting data regarding the networking device; conveying the data to a remote server; selecting configuration slice instances based on the data using the server, wherein templates for the slice instances are stored on the server; compiling the configuration slice instances using the server; and delivering the compiled configuration slice instances to the networking device; wherein the slice instances are coherent sub-sections of configuration settings for the networking device.

Configuring network devices using compilations of coherent subsections of configuration settings

Networking as a Service (NaaS) delivers network services using remote appliances controlled by a hosted, multi-tenant management system. The system may include a heartbeating process for communication between a web-based server and appliances, in which the appliances periodically contact the management system on the server. The heartbeating process allows the appliances to maintain a completely up-to-date configuration. Furthermore, heartbeating allows for comprehensive monitoring of appliances and for software distribution. The system may also include means for authenticating appliances, without the need for pre-installed PSKs or certificates.

Growing community of inventors

Sunnyvale, CA, United States of America

Carl Steven Mower