Avaya Inc.

Extreme Networks, Inc.

Seung Bong Han

Sunil Menon

Carl Keene

Sanket Ravindra Tandulwadkar

Wu Miao

Yong Seok Joo

Binoj Pattathiparambil Gangadharan

Seemant Choudhary

Shashi Hosakere Ankaiah

Vivek Lakshminarayana Atreya

Seetharam V Rao

Prashantkumar Sthavarmath

Prashanth Kumar

Thanh Phan

Hao Li

Generating PKI credentials for authenticating a networking appliance attempting to attach to a network includes: receiving a certificate signing request (CSR) from the networking appliance, wherein the CSR comprises credential data associated with an identity of the networking appliance; generating an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer; and returning the appliance certificate to the networking appliance.

Public key infrastructure exchange using netconf for Openflow enabled switches

Implementations generally relate methods, systems, and computer readable media for discovery of an open network adapter. In some implementations, a method includes receiving, by a software-defined network (SDN) controller, a notification of an open networking adapter (ONA) establishing a connection with a switch, the ONA having an address associated therewith. The method further includes identifying the switch based on a lookup of the address of the ONA in forwarding tables of a neighboring switch of the SDN controller. The method further includes applying a service profile configuration to a port of the switch where the ONA is connected.

Discovery and configuration of an open networking adapter in a fabric network

Authenticating a networking appliance attempting to attach to a network includes receiving a request from the networking appliance to attach to the network, wherein the request comprises credential data associated with the networking appliance and a certificate authority (CA) certificate associated with the computer; receiving at least one value associated with an identity of the networking appliance; and authenticating the identity of the networking appliance based on both a) the at least one value associated with the identity of the networking appliance; and b) the appliance certificate.

Certificate-based dual authentication for openflow enabled switches

Authenticating a networking appliance attempting to attach to a network includes receiving at least one value associated with an identity of the networking appliance; receiving a certificate signing request (CSR) from the networking appliance, wherein the CSR comprises credential data associated with the identity of the networking appliance; and generating an appliance certificate based on the credential data and a certificate authority (CA) certificate associated with the computer. The method also includes returning the appliance certificate to the networking appliance; receiving a request from the networking appliance to attach to the network; and authenticating the identity of the networking appliance based on both a) the at least one value associated with the identity of the networking appliance; and b) the appliance certificate.

Customer-centric workflow for initial on-boarding of an OpenFlow enabled switch

One or more implementations can include methods, systems and computer readable media for client location discovery. In some implementations, the method can include receiving, at an access point, a location discovery request message from a client and sending a request from the access point to a location server requesting location information for the client, when a location server is available. The method can also include receiving location information from the location server, when a location server is available and providing the access point location as location information, when a location server is not available. The method can further include sending the location information as a response to the client.

Client location discovery

Embodiments of the present technology provide out-of-band captive portal devices, networks, and methods. An example of a method includes executing a redirection of a client request for network access to a captive portal login, initiating an association between the wireless controller and the client, receiving authentication credentials of client from the captive portal login, negotiating a change of authorization with a wireless controller in accordance with RFC 5176 protocol, wherein the controller includes a mapping to a captive portal Internet Protocol (IP) address, and redirecting the client to a URL specified in the client request for network access.

Captive portal systems, methods, and devices

Methods, systems and computer readable media for provisioning VPN phones are disclosed.

Provisioning VPN phones

A method, apparatus and computer program product for providing secure policy enforcement for mobile devices is presented. A mobile device is connected to a computer system, the computer system having an active Virtual Private Network (VPN) tunnel with a VPN gateway. The computer system runs a security policy check on the mobile device. A determination is made whether the mobile device passed the security policy check and when the mobile device does pass the security policy check, a certificate is issued to the mobile device. The mobile device then uses the certificate to connect to a VPN.

Growing community of inventors

Tracy, CA, United States of America

Seung Bong Han