Hewlett Packard Enterprise Development LP

Aruba Networks, Inc.

Hewlett-Packard Development Company, L.p.

Aruba Netwroks, Inc.

Rajalakshmi Manoharan

Brijesh Kumar Yadav

Isaac Theogaraj

Santashil PalChaudhuri

Sandeep Unnimadhavan

Tilak Kumar Adhya

Deepika Dwivedi

Joseph Garcia Baniqued

Venkatesh Ramachandran

Mahesh Kumar Rathinasamy

Methods and systems are described for assigning the proper internet protocol (IP) address to a client device following authentication of the client device on a network. In particular, at commencement of an authentication procedure of the client device, a role is associated with the client device that denies all DHCP renews/requests. By assigning a role to the client devicewith a 'deny DHCP renew/request' rule at the commencement of an authentication procedure, the systems and methods described herein ensure that a race condition does not allow the client device to renew an IP address in an old segment of the network. Accordingly, the client device may avoid a possibly improper IP address in a segment of the network system in which the client device is no longer associated with or operating on.

Client device address assignment following authentication

Methods and systems are described for assigning the proper Internet protocol (IP) address to a client device following authentication of the client device on a network. In particular, at commencement of an authentication procedure of the client device, a role is associated with the client device that denies all DHCP renews/requests. By assigning a role to the client devicewith a 'deny DHCP renew/request' rule at the commencement of an authentication procedure, the systems and methods described herein ensure that a race condition does not allow the client device to renew an IP address in an old segment of the network. Accordingly, the client device may avoid a possibly improper IP address in a segment of the network system in which the client device is no longer associated with or operating on.

Systems and methods are described that configure network devices to dynamically (1) download privilege setting definitions from an authentication server to address a currently connected set of client devices associated with these privilege setting definitions and (2) clear privilege setting definitions that are no longer in use by client devices connected to the network device. In particular, a network device may determine if a privilege setting definition associated with a successfully authenticated client device is locally available on the network device and request the privilege setting definition from the authentication server when not locally available. In some situations, the authentication server may selectively transmit update messages to network devices that may be affected by an update to a privilege setting definition such that the network devices may request this updated privilege setting definition for download.

Dynamic download and enforcement of network access role based on network login context

The present disclosure discloses a network device and/or method for centralized configuration with dynamic distributed address management. The disclosed network device receives, at a first network node, a range of sub network addresses and a specified size for a sub network. The disclosed network device then divides the range of sub network addresses into a plurality of sub-ranges of sub network addresses based on the specified size. Further, the network device allocates the plurality of sub-ranges of sub network addresses to a plurality of sub networks, and transmits an allocated sub-range of sub network addresses to a corresponding sub network at a second network node through an established secure communication channel. Moreover, the network device can retrieve a profile template that includes the range of sub network addresses and the specified size of the sub network; and create a profile based on the profile template.

Centralized configuration with dynamic distributed address management

Methods and systems are described for assigning the proper internet protocol (IP) address to a client device following authentication of the client device on a network. In particular, at commencement of an authentication procedure of the client device, a role is associated with the client device that denies all DHCP renews/requests. By assigning a role to the client device 103 with a 'deny DHCP renew/request' rule at the commencement of an authentication procedure, the systems and methods described herein ensure that a race condition does not allow the client device to renew an IP address in an old segment of the network. Accordingly, the client device may avoid a possibly improper IP address in a segment of the network system in which the client device is no longer associated with or operating on.

An example embodiment includes a method and a network device for detecting use of wrong IP addresses by wireless client devices. Specifically, the network device matins a range of valid IP addresses for a particular IP subnet. Also, the network device receives a message from a wireless client device by an access point on the particular IP subnet. The network device then determines a source IP address in the message received on the particular IP subnet. Further, the network device determines that the source IP address does not match the range of valid IP addresses for the particular IP subnet. Responsive at least to determining that the source IP address does not match the range of valid IP addresses for the particular IP subnet, the network device transmits at least one message that causes the wireless client device to request a new IP address.

Method and system for detecting use of wrong internet protocol address

The present disclosure discloses a method and a network device for causing client devices to renew DHCP IP addresses based on link local addresses. Specifically, the network device provides for detecting that a wireless client device has been self-assigned with an automatic IP address, and for de-authenticating the wireless client device such that the wireless client device restarts the authentication process and the DHCP process subsequently without excessive delay. In particular, the network device may receive a packet from a wireless client device. The network device then determines that a source or destination IP address of a received packet corresponding to the wireless client device is a link local IP address. Responsive to determining that the source IP address is a link local IP address, the network device transmits at least one message that causes the wireless client device to request a new IP address.

Growing community of inventors

Bengaluru, India

Rajalakshmi Manoharan