Extreme Networks, Inc.

Manish M Rathi

Vipin Kumar Jain

Victor Lin

Shehzad T Merchant

Balaji Srinivasan

Derek H Pitcher

Jia-Ru Li

Matthew R Peters

Amit K Maitra

Jiang Wu

Natalie Forood

Jeff Ronne

Rajesh Sharma

Tim Aiken

A wireless computer network includes components cooperating together to prevent access intrusions by detecting unauthorized devices connected to the network, disabling the network connections to the devices, and then physically locating the devices. The network can detect both unauthorized client stations and unauthorized edge devices such as wireless access points (APs). The network can detect intruders by monitoring information transferred over wireless channels, identifying protocol state machine violations, tracking roaming behavior of clients, and detecting network addresses being improperly used in multiple locations. Upon detecting an intruder, the network can automatically locate and shut off the physical/logical port to which the intruder is connected.

Method and system for detecting and preventing access intrusion in a network

Devices, systems and related methods are disclosed for improving operational security of a network and/or network devices, such as wireless access points (APs). In the disclosed systems, a network device is not fully operational until it is attached to a network and downloads sensitive information. The information is stored in the network device so that when the device is disconnected from the network, the sensitive information is erased from the device, making the device inoperative and removing sensitive information, such as passwords, network security keys, or the like. Disabling the network device in this manner not only prevents the theft of sensitive network access information, by also discourages theft of the device itself because it cannot be used on another network without the configuration information. In addition to downloading configuration information, the network device can also download an executable image that is likewise not permanently resident on the device.

Apparatus, method and system for improving network security

A method and system for auto discovery of authenticator for network login is described. The system includes an authenticator discovery controller of a packet forwarding device that helps a user discover the IP address of the packet forwarding device and directs the user to a network login page. The method includes intercepting a request for a web page from a user who is connected to a packet forwarding device that prevents the user from accessing a network, directing the user to a network login page, authenticating the user, and allowing the user to access the network when the user is authenticated.

Method and system for auto discovery of authenticator for network login

A network switch having a unified, adaptive management paradigm for wireless network devices is disclosed. The switch includes configurable ports for connecting devices. A software application running on the switch allows a network administrator to selectively configure each port to support either a wired device or wireless device. Configuration information and software images that are needed for operation of the wireless device are associated with the port. When a wireless device is first plugged into the switch port, it downloads its configuration directly from the switch port. By storing the configuration information and images at the switch and automatically downloading them to the wireless devices, the task of configuring the devices is greatly simplified for the network administrator. This is particularly advantageous in heterogeneous network environments that support both wired and wireless devices, and where wireless device are readily moved to different ports.

Unified, configurable, adaptive, network architecture

A network management application (NMA) obtains identification information identifying a network device. The NMA searches a storage area for a directory corresponding to the identification information. When the NMA locates the directory corresponding to the identification information, the NMA searches the directory for a file containing descriptions of the attributes of the network device. When the NMA locates the file containing the attribute descriptions, the NMA generates an image of the network device in accordance with the attribute descriptions.

Dynamic device management and deployment

A method for configuring and managing network elements comprising receiving a request at a network element to monitor at least one object on the network element; logging information by the network element in response to a change in value of the object; transmitting an indication from the network element of the change in value of the object; and receiving a request at the network element to read the information logged on the network element in response to the transmitted indication.

Growing community of inventors

San Jose, CA, United States of America

Manish M Rathi