Hewlett Packard Enterprise Development LP

Shubham Saloni

Abhiruchi Dakshinkar

Nethra Muniyappa

Wei Hu

Rishabh Gupta

Gaurav Patwardhan

Sachin Ganu

Qiang Zhou

Andre Beaudin

Manoj Thawani

Myung Cheol Kim

Tejas Sathe

Rajarshi Bhattacharyya

Eloy Jr Galdones

Denis Houle

An example method for managing transmit powers of a networking device is presented. A network management device is configured to determine an expected path loss value at a receiver of a first networking device based at least on the distance between the first networking device and the second networking device. Further, the network management device receives a measured path loss value relative to the second networking device from the first networking device. The network management device then determines a target transmit power for the transmitter of the second networking device based on the measured path loss value and an offset value. The offset value is determined based on the expected path loss value and the measured path loss value. After determining the target transmit power, the network management device sends an instruction to the second networking device to operate the transmitter at the target transmit power.

Managing transmit power of networking devices

An example method of allocating channels to access points (AP) is presented. A network manager may determine weights of the APs based on a channel metric and a location metric for APs. Further, the network manager may identify a first set of APs based on the weights and allocate a dedicated first channel to each of the first set of APs for its sole use. Accordingly, each of the first set of APs may use a respective dedicated first channel thereby reducing the performance impact on other APs. Further, the network manager may identify a second set of APs based on the weights and allocate second channels for sharing among the second set of APs. Since the second set of APs does not share any channel with the first set of APs, the performance of the second set of APs may not be impacted due to the first set of APs.

Channel allocation in wireless local area network

In a computer network, communication connections may be established between client devices and network devices. An algorithm may be generated and used as a method to identify and resolve issues with Uplink communications between client devices and network devices. When an issue with an Uplink communication is identified, a total number of issues with the communication may be determined. Determining that the total number of issues with a communication is greater than a threshold, the client device associated with the communication may be deauthenticated from the respective network device. After a client device is deauthenticated from a network device, the total number of deauthentications may be determined with the network device. Determining the total number of deauthentications with a network device is greater than a threshold, the radio of the network device may be disabled to deauthenticate all connected client devices. Solutions may be implemented according to the issues identified.

Strategy to ensure continual user experience and system performance if an Uplink is stuck

Systems and methods are provided for ensuring client device connectivity in a deployment pursuant to regulatory updates impacting channel usage or availability. An access point (AP) or AP controller may obtain a client-supported channel list, and detect existence of a regulatory update impacting channel usage in the network device. An AP-supported channel list is compared to the client-supported channel list, and a determination is made regarding which client devices associated to an AP do not support channel usage changes resulting from the regulatory update. Distribution of channels of the AP-supported channel list is controlled among one or more radios of APs in a deployment based on AP density of the deployment, and the determination regarding which client devices do not support the channel usage changes.

Seamless regulatory access point updates ensuring continual client connectivity

A set of AP radios in a wireless network deployment for which configurations are to be deployed is identified. Those configurations deemed to be likely to cause a coverage hole are flagged as high-risk. A candidate deployment order for deploying configurations to the set of AP radios is determined based on deployment ordering criteria. The ordered APs are grouped into candidate deployment batches and a batch refinement process is performed to ensure that no neighbor AP radio is in a same deployment batch as an AP designated to receive a high-risk configuration deployment. The configurations are then deployed to the AP radios in accordance with the refined deployment batches. For any candidate deployment batch that includes a flagged AP radio and a neighbor AP radio, one of the radios is removed from the deployment batch and placed in a re-order list, which is separately subjected to ordering and batching processes.

Mitigation of radio frequency (RF) outages on a wireless network

A set of AP radios to which configurations are to be deployed is identified. A candidate deployment order for deploying configurations to the set of AP radios is determined by an order-deploy algorithm. The algorithm seeks to spread out configuration deployments to AP radios both spatially and temporally such that APs that are located close to one another in the network receive their configuration updates as part of different deployment batches with delay periods introduced between consecutive batch deployments. The algorithm orders the set of APs by iterating through a network factor hierarchy to place APs that share certain network factors such as the same band or channel close to one another in the candidate deployment order and place APs that share certain other network factors (e.g., same switch, RF domain, and/or RF partition) far from one another in the order.

Examples of techniques for handling unsolicited probe responses are disclosed. In an example, occurrence of an attack on an access point (AP) in an enterprise Wireless Local Area Network (WLAN) is detected based on an unsolicited probe response and Robust Security Network Information Element (RSN IE). Responsive to detecting the attack, unsolicited probe responses at the AP is disabled. Further, Fast initial Link Setup (FILS) discovery at the AP is enabled.

Handling unsolicited probe responses

Examples described herein relate to an investigator device and a method for determining a condition of an antenna of an access point (AP). At least one investigator device may receive one or more antenna condition test frames transmitted via a plurality of antennas of the AP Further, the at least one investigator device may determine an average received signal strength indicator (RSSI) value corresponding to each of the plurality of antennas based on the one or more antenna condition test frames. A condition of the plurality of antennas of the AP may be determined based on a relative comparison between the average RSSI value corresponding to each of the plurality of antennas of the AP. Moreover, in some examples, the at least one investigator device may send a notification to an administrator of the AP based on the condition of the plurality of antennas.

Determining antenna condition

An access point (AP) in a deployment may be attacked by a rogue AP. The rogue AP may transmit fake beacons that include a fake/incorrect basic service set (BSS) color that does not match the BSS color assigned to/used by the AP under attack. Due to this BSS color mismatch, stations associated to the AP under attack may switch to the fake/incorrect BSS color, and communications between the AP under attack and the stations may be disrupted, and can eventually lead to service denial. Systems and methods are provided for leveraging the BSS color feature to identify when a rogue AP is attacking another AP. Upon detecting an attack, the BSS color feature may be disabled to mitigate the level of service disruption to the AP under attack and the stations associated to that AP.

Detection and mitigation of BSS color related attacks on high efficiency networks

Systems and methods are provided for leveraging uplink (U)L scheduling information obtained by way of Quality of Service (QoS) Null/QoS Data frames and Media Access Control (MAC) headers transmitted by any station (STA). This UL scheduling information can be read by any access point (AP) in an extended service set (ESS), and used to improve network performance. For example, an AP may use such UL scheduling information (from STAs associated to co-channel APs in the same ESS) to minimize the latency for UL latency-sensitive traffic in that ESS. Additionally, an AP may use such UL scheduling information to minimize contention amongst STAs connected to different APs on the same channel in the same ESS, thereby improving system capacity.

Systems and methods for minimizing latency and contention using QoS frame scheduling information

A method for protecting 802.11 ax networks includes receiving, by an access point, a plurality of Single User (SU) Quality of Service (QOS) NULL frames from a station, tracking, by the access point as the plurality of SU QOS NULL frames are received, a variable in one or more of the plurality of SU QOS NULL frames, determining, by the access point and based on tracking the variable, the station is suspicious, sending, by the access point and in response to determining the station is suspicious, a request to check a status of the variable, determining, by the access point and based on a response to the request, the station is under attack, and flagging, by the access point, the station as under an attack.

Protecting 802.11 ax networks from QOS Null attacks

Operation of a wireless network access point (AP) to communicate with a first set of one or more wireless client devices using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable basic service set (BSS) identifier of the wireless AP. The BSS identifier is utilized to identify overlapping BSSs (OBSSs). A first set of one or more wireless client devices communicate using a wireless protocol in which spatial reuse of channels is supported via at least a dynamically configurable BSS identifier of the wireless AP. The BSS identifier is utilized to identify OBSSs. Unauthorized network activity is detected based on the BSS identifier and a received BSS identifier associated with the received transmissions. A dynamic adjustment is made to one of the BSS identifiers of the AP or the received BSS identifier in response to detected unauthorized network activity.

Basic service set (BSS) color-based containment and mitigation

Examples of block acknowledgement negotiations are described. In an example, a request to establish a BA session is sent by a first computing device (first device) to a second computing device (second device). A timer for receipt of a response to the request is initialized. A BA successful response is received by the first device after the timer has timed out. A request to terminate the BA session is sent by the first device to the second device. After sending the request to terminate the BA session, BA negotiation is reinitiated by the first device based on an updated inactivity timer, so that there are greater chances of successfully establishing a BA session. In an example, if the second device ignores the request to terminate the BA session then it sends a BA reject response to the first device. After receiving the BA reject response, the first device waits for the inactivity timer before reinitiating BA negotiations, so that the second device clears its states thereby increasing chances of successful BA renegotiations.

Adaptive block acknowledgement negotiations

A method for processing a denial of service (DOS) includes: receiving a de-authentication/disassociation (D/D) frame by an access point (AP), determining by the AP a state of security association establishment between the AP and a client device, maintaining a connection between the AP and the client device if the security association is incomplete, sending a probe packet from the AP to the client device if security association is complete and the connection between the AP and the client device is in a non-PMF (protected management frames) setting, maintaining the connection if the client device responds to the probe packet, and terminating the connection if the client device does not respond to the probe packet.

Growing community of inventors

Santa Clara, CA, United States of America

Shubham Saloni