Cisco Technology, Inc.

Aruba Networks, Inc.

Cisc Technology, Inc.

Merwyn Andrade

Partha Narasimhan

David E Halasz

Pradeep Iyer

John Richard Taylor

Robert Charles Meier

Silvano Gai

Keith McCloghrie

Pauline Shuen

Victor J Griswold

Richard D Rebo

Kent Huntley Headrick

A wireless network is adapted with a wireless network switch in communication with a plurality of access points, which are in communication with one or more stations. Specifically, a network device may receive a plurality of request messages on a plurality of wireless communication channels through a plurality of access points. The request messages are originated from a single station. Furthermore, the network can extract a plurality of channel identifiers from the request messages, and generates a filtered radio frequency neighborhood list dynamically based on the extracted channel identifiers.

System and method for centralized station management

In one embodiment of the invention, a wireless network is adapted with a wireless network switch in communication with a plurality of access points, which are in communication with one or more stations. Coupled to the access points over an interconnect, the wireless network switch is adapted to receive a DEAUTHENTICATION message sent by one of the plurality of access points in the same coverage area of the station so as to detect the DEAUTHENTICATION message and to block communications between the plurality of access points and the station in response to determining that the DEAUTHENTICATION message is invalid.

According to one embodiment of the invention, a method comprises an exchange of messages between an access point and a wireless network switch. One message, a PROXY IGMP JOIN message, is transmitted to the access point for propagation to a multicast router. This is performed so that multicast data associated with the multicast group identified by the PROXY IGMP JOIN message is routed to the access point without any unnecessary involvement by the wireless network switch.

Efficient multicast control processing for a wireless network

According to one embodiment of the invention, a method comprises detecting, by a wireless network switch, a new association between an access point and a wireless station. Thereafter, a first message is transmitted from the wireless network switch. The first message is adapted to cause the access point to (i) join a multicast group to which the wireless station is a member and (ii) transmit a multicast message directly to a multicast router without routing the multicast message via the wireless network switch.

A method of detecting a rogue access point is disclosed. A message is directed from a supplicant to a network through a first access point. A response message is received by the supplicant from the first access point. The supplicant can determine the first access point is a rogue access point based on whether the response message from the first access point is in nonconformity with a predetermined expectation. After the access point is determined to be a rogue access point, it is reported to the network through a valid network access point, after the supplicant is authenticated to the network.

Rogue access point detection

In an example embodiment, a system for providing a Virtual Local Area Network (VLAN) by use of encryption states or encryption keys for identifying a VLAN. A table of data including a VLAN and an associated encryption state or key is provided for assignment of encryption states or keys, for devices in a wireless local area network.

Network partitioning using encryption

Architecture for providing access to an IEEE 802.1x network. A trust relationship is created between a switch of the network and an access point of the network such that the access point is authorized to communicate over the network. The trust relationship is then extended from the access point to a wireless client requesting connection to the network such that access to the network by said wireless client is authorized.

Enhanced trust relationship in an IEEE 802.1&#xd7;network

In one embodiment, the invention relates to utilization of a single interconnect to support the transmission of data, power and serial control information to an access point. The interconnect comprises at least three and perhaps four twisted pairs such as a CAT-5 cable.

Mechanism for deploying an access point within a WLAN using a single interconnect

A system for rapidly switching at least one virtual local area network (VLAN) from a first loop-free topology to a second loop-free topology in response to a failure within the first loop-free topology. Each VLAN has one 'logical' VLAN which represents the network entities organized into the VLAN and a set of 'physical' VLANs each having its own VLAN designation. For each physical VLAN, a different loop-free topology is defined, although only one physical VLAN is &#x201c;active&#x201d; at any given time. Messages associated with the logical VLAN are tagged with the designation of the currently active physical VLAN, and forwarded along its loop-free topology. Upon detecting a failure in the loop-free topology, the logical VLAN is rapidly switched to the loop-free topology defined by a second, back-up physical VLAN. Following the switch, messages associated with the logical VLAN are tagged with the designation of this back-up VLAN and are forwarded along its loop-free topology.

Fast convergence with topology switching

Enhanced trust relationship in an IEEE 802.1x network

A system for providing a Virtual Local Area Network (VLAN) by use of an encryption states or encryption keys for identifying a VLAN. A table of data including a VLAN and an associated encryption state or key is provided for assignment of encryption states or keys, for devices in a wireless local area network.

A method of detecting a rogue access point is disclosed. A message is directed from a supplicant to a network through an access point. A network response message is received by the supplicant from the access point. A step of determining whether the access point is one of a valid network access point and a rogue access point is performed based on whether the received network response message is respectively in conformity or nonconformity with predetermined expectations. If the access point is determined to be a rogue access point, it is reported to the network. If the access point is determined to be a valid network access point, the supplicant is authenticated to the network.

Rogue AP detection

A system for rapidly switching at least one virtual local area network (VLAN) from a first loop-free topology to a second loop-free topology in response to a failure within the first loop-free topology. Each VLAN has one &ldquo;logical&rdquo; VLAN which represents the network entities organized into the VLAN and a set of &ldquo;physical&rdquo; VLANs each having its own VLAN designation. For each physical VLAN, a different loop-free topology is defined, although only one physical VLAN is &ldquo;active&rdquo; at any given time. Messages associated with the logical VLAN are tagged with the designation of the currently active physical VLAN, and forwarded along its loop-free topology. Upon detecting a failure in the loop-free topology, the logical VLAN is rapidly switched to the loop-free topology defined by a second, back-up physical VLAN. Following the switch messages associated with the logical VLAN are tagged with the designation of this back-up VLAN and are forwarded along its loop-free topology.

Growing community of inventors

San Jose, CA, United States of America

Merwyn Andrade