Juniper Networks, Inc.

Mist Systems, Inc.

Nortel Networks Corporation

Symbol Technologies, LLC

Motorola Solutions, Inc.

Nicolas Dade

Randall Wayne Frei

Robert J Friday

Oscar S Ernohazy

Linker Cheng

Sujai Hajela

Guy Goldstone

Kumara Das Karunakaran

Jacob Thomas

Helge Szwerinski

Vibhu Vivek

Rajesh Vijayakumar

Anurag Verma

Methods and apparatus for controlling access to and/or forwarding of communicated information, e.g. traffic, in a wireless communication system are described. The key, e.g., PSK, used to secure data that is transmitted to an access point for communication to a destination device is taken into consideration when deciding whether or not to provide the destination device access to the communicated content. The decision of whether or not to provide the destination device access to a communication may involve deciding whether or not to forward the received data to another device, e.g., another access point, for delivery to the destination device and/or may involve deciding whether or not to transmit the data to the destination device. If the destination device is not associated with, e.g., does not have access to and/or authorization to use, the key used to secure the received data, the data is not communicated to the destination device.

Methods and apparatus for performing access and/or forwarding control in wireless networks such as WLANS

A wireless access point system includes a processor configured to tap event data and process the event data using a plurality of event filters. Each event filter of the plurality of event filters applies event criteria to detect one or more types of events. The wireless access point system includes a memory configured to store the tapped event data. The wireless access point system includes a communication interface configured to report a report of a detected event type. At least a portion of the report is correlated to analyze a performance of a wireless network.

Monitoring wireless access point events

A wireless access point system includes a processor configured to tap event data and process the event data using a plurality of event filters. Each event filter of the plurality of event filters applies event criteria to detect one or more types of events. The wireless access point system includes a memory configured to store the tapped event data. A communication interface configured to report a report of a detected event type. At least a portion of the report is correlated to analyze a performance of a wireless network.

A first set of access rules is received from an access configuration service. The first set of access rules specifies addresses of devices authorized for a first user. A second set of access rules is received from the access configuration service. The second set of the access rules specifies addresses of devices authorized for a second user. At a wireless access point, a network packet associated with the first user is received. The first set of access rules is applied to filter the network packet.

Access enforcement at a wireless access point

Methods and systems are provided for improving a firewall implemented at a WLAN infrastructure device (WID). The WID includes a stateful firewall that implements firewall rules based on an ESSID of the WID to specify whether traffic is allowed to or from the ESSID. For example, in one implementation of such a firewall rule, packets that are required to be sent out on all wired ports can be blocked from being flooded out on WLANs (e.g., the packet is allowed to pass only to the wired ports). A method and system are provided for preventing a malicious wireless client device (WCD) that is transmitting undesirable traffic from using RF resources by deauthenticating the malicious WCD to remove it from the WLAN and blacklisting it to prevent it from rejoining the WLAN for a time period. Method and systems are also provided for either 'on-demand' and/or predicatively communicating state information regarding an existing firewall session.

Wireless local area network infrastructure devices having improved firewall features

A system and methods of managing entries in a cuckoo hash table that is subject to manipulation by a plurality of concurrent processors are provided. The cuckoo hash table is used to maintain a plurality of keys, along with their data items, in a plurality of entries. In accordance with an operating method, a first command for the cuckoo hash table is processed, and the first command is associated with a first processor of the plurality of concurrent processors. In addition, invalid conditions associated with concurrent processing of a second command for the cuckoo hash table are prevented or minimized. The second command is associated with a second processor of the plurality of concurrent processors. As one example, the operating method manages the situation where concurrent push commands create a race condition. As another example, the operating method manages the situation where a lookup or delete command from one processor competes with a push command from another processor.

Lookup table arrangement and related management method for accommodating concurrent processors

A method and apparatus of establishing a connection between a wireless device and a second device includes maintaining a state of the connection between the wireless device and the second device, and receiving an indication that a wireless link to the wireless device has been lost or may be lost. In response to the receiving the indication that the wireless link to the wireless device has been lost or may be lost, the state of the connection is transitioned from a first state to a second state.

Growing community of inventors

Santa Cruz, CA, United States of America

Nicolas Dade