Aruba Networks Patent Applications

SYSTEM AND METHODS FOR ENABLING SIMULTANEOUS TRANSMIT AND RECEIVE IN THE SAME WIFI BAND WITHIN A DEVICE

Granted: December 4, 2014
Application Number: 20140355491
Disclosed herein, one embodiment of the disclosure is directed to a system, apparatus, and method for enabling simultaneous transmit and receive in the same Wi-Fi band within a device by first obtaining a first information corresponding to a first set of signals to be transmitted wirelessly by a first antenna of a first device and transmitting, by the first antenna of the first device, the first set of signals. Then, a second set of signals comprising: (a) the first set of signals…

MITIGATING INTERFERENCE IN WIRELESS SYSTEMS

Granted: November 27, 2014
Application Number: 20140348004
According to one embodiment of the invention, a non-transitory computer readable medium for configuring a noise floor of a network device based on the detection of a non-Wi-Fi signal is described. One embodiment of the non-transitory computer readable medium comprises instructions that detect a non-Wi-Fi signal, determine a noise floor based on at least one attribute of the non-Wi-Fi signal and configure the noise floor of the network device such that the network device receives signals…

Determining WLAN Edges

Granted: October 2, 2014
Application Number: 20140293966
Determining whether a station is at the edge of wireless local area network (WLAN) coverage. In an IEEE 802.11 wireless network comprising one or more access points (APs) which may optionally be connected to one or more controllers, with wireless clients connected to those APs. Station S connected to AP A collects reports such as beacon reports which contains information on all APs station S can hear, including signal strengths. AP A collects a neighbor report which contains information…

INITIATING PEER-TO-PEER TUNNELS

Granted: September 25, 2014
Application Number: 20140289338
Initiating peer-to-peer tunnels between clients in a mobility domain. Client traffic in a mobility domain normally passes from the initiating client to an access node, and from the access node through a tunnel to a controller, and then through another tunnel from the controller to the destination access node, and the destination client. When initiated by the controller, the access nodes establish a peer-to-peer tunnel for suitable client traffic, bypassing the “slow” tunnels through…

METHOD AND SYSTEM FOR DYNAMIC DETERMINATION OF POTENTIAL ACCESS POINTS FOR PROPAGATING CLIENT INFORMATION

Granted: September 18, 2014
Application Number: 20140274037
A method includes determining a subset, of a set of access points, that a client device is likely to roam to from a first access point in the set of access points; transmitting to each of the subset of access points, without transmitting to a second access point in the set of access points that is not included in the subset, information associated with the client device; wherein the information associated with the client device is used by the client device or by the third access point…

SYSTEM AND METHOD FOR DETECTION OF ROGUE ROUTERS IN A COMPUTING NETWORK

Granted: September 18, 2014
Application Number: 20140283029
A method and apparatus for detecting the presence of a rogue router in a computer network is described. The method may include transmitting a router solicitation message. The method may also include receiving a plurality of response messages to the router solicitation message from a first plurality of router devices, wherein the response messages are used to perform an operation other than assigning an internet protocol (IP) address to the device.

SYSTEM AND METHOD FOR THE AUTOMATED CONTAINMENT OF AN UNAUTHORIZED ACCESS POINT IN A COMPUTING NETWORK

Granted: September 18, 2014
Application Number: 20140282905
A method and apparatus for automatic containment of unauthorized access points in a computing network is described. The method may include receiving data indicative of at least a device identifier corresponding to an unauthorized access point. The method may also include, in response to locating the received device identifier in a listing of device identifiers that are associated with data transmissions through the network device, identifying a port of a network device as the port to…

System and Method for Offloading Cryptographic Functions to Support a Large Number of Clients in a Wireless Access Point

Granted: September 18, 2014
Application Number: 20140281488
The present disclosure discloses a method and network device for offloading cryptographic functions to support a large number of clients. Specifically, a network device receives a packet corresponding to a client device via an interface, and determines whether a first hardware module that performs cryptographic operations on a per-client basis overflows. If first hardware module overflows, the network device retrieves a cryptographic key for the packet, and sends the received packet with…

INITIATING PEER-TO-PEER TUNNELS

Granted: September 18, 2014
Application Number: 20140280733
Initiating peer-to-peer tunnels between clients in a mobility domain. Client traffic in a mobility domain normally passes from the initiating client to an access node, and from the access node through a tunnel to a controller, and then through another tunnel from the controller to the destination access node, and the destination client. When initiated by the controller, the access nodes establish a peer-to-peer tunnel for suitable client traffic, bypassing the “slow” tunnels through…

METHOD AND SYSTEM FOR DETERMINING A LOCATION OF WIRELESS DEVICE

Granted: September 18, 2014
Application Number: 20140274112
A system for (a) determining a first direction from a first device toward a second device based on a first set of WiFi® wireless signals received by at least one antenna of the first device from the second device, (b) determining a second direction from a third device toward the second device based on a second set of WiFi® wireless signals received by at least one antenna of the third device from the second device, and (c) based at least on a first location of the first device, the…

APPARATUS AND METHOD AGGREGATION AT ONE OR MORE LAYERS

Granted: September 18, 2014
Application Number: 20140269752
A method for performing aggregation at one or more layers starts with an AP placing at a first layer one or more received frames in a queue at the AP. When a transmit scheduler is ready to transmit an aggregated frame corresponding to the queue, the AP may iteratively select a plurality of frames selected from the one or more received frames, and aggregate at the first layer the plurality of frames into the aggregated frame. The number of frames included in an aggregated frame may be…

Distributed Network Layer Mobility for Unified Access Networks

Granted: September 18, 2014
Application Number: 20140269648
The present disclosure discloses a method and network device providing distributed network layer mobility for unified access networks. The method eliminates the need for a secure tunnel between a home network device and a foreign network device when a client roams from the home network device to the foreign network device. The disclosed network device receives an association request from a client device in a wireless network; identifies a first wireless virtual local area network (VLAN)…

Dynamic Beamforming Configuration Based on Network Conditions

Granted: September 18, 2014
Application Number: 20140269370
A method includes steering client devices to access points that potentially increase capacity of communications using beamformed transmissions. In particular, this includes determining the best access points for beamforming to a particular client or a group of clients in the network for an improved throughput performance in the deployment or a subset of access points.

APPARATUS, SYSTEM AND METHOD FOR LOAD BALANCING TRAFFIC TO AN ACCESS POINT ACROSS MULTIPLE PHYSICAL PORTS

Granted: September 18, 2014
Application Number: 20140269285
A method for load balancing traffic from controller to destination access point (AP) via switch across multiple physical ports starts with controller receiving a packet from a source client device that is destined for destination client device associated with destination AP. The controller may select, based on an identifier associated with source or destination client device, a first or a second controller IP address. Controller may encapsulate the packet to generate an encapsulated…

Channel Width Configuration Based on Network Conditions

Granted: September 18, 2014
Application Number: 20140269280
A method includes determining an optimized channel width between client devices and access points based on network conditions in a wireless network. In particular, the channel widths may be optimized to reduce airtime usage on access points and eliminate a high density condition while the client devices are steered to access points that provide the greatest channel capacity gains based on signal-to-noise-ratios for each spatial stream in a beamformed transmission.

Distributed Functionality Across Multiple Network Devices

Granted: September 11, 2014
Application Number: 20140258478
According to one embodiment, a method comprises an operation of identifying a plurality of network devices, and detecting a presence of firewall processing functionality in a subset of the network devices. At least one of the network devices not in the firewall subset is configured to forward packets to a network device of the subset for firewall processing.

DETERMINATION OF MULTICAST AND CODING RATE

Granted: September 11, 2014
Application Number: 20140254464
According to one embodiment of the invention, wireless spectrum and battery power conservation is achieved through an adaptable multicast group communication scheme. This involves a method for controlling the multicast transmission rate based on a first operation of receiving information from a multicast receiving device that is a member of a multicast group. Based on this information and potentially other information from other member devices, the modulation and coding rate for the…

BALANCING LOAD ACROSS RADIO FREQUENCY CHANNELS

Granted: September 11, 2014
Application Number: 20140254362
The present disclosure discloses a network device and method for advertising channel load. The disclosed network device aggregates a number of clients that are associated with the network device on a specific wireless communication channel, and advertises the aggregated number to a client on the specific wireless communication channel. Further, the network device can receive aggregated load information on the specific wireless communication channel from another management network device,…

Secure Configuration of a Headless Networking Device

Granted: September 4, 2014
Application Number: 20140247943
The secure configuration of a headless networking device is described. A label associated with the headless networking device is scanned and a public key is determined. scanning a label associated with a networking device. A configuration process is initiated for the networking device using the public key associated with the networking device that was determined based on the scanned label.

METHOD AND APPARATUS FOR POLICY-BASED NETWORK ACCESS CONTROL WITH ARBITRARY NETWORK ACCESS CONTROL FRAMEWORKS

Granted: August 21, 2014
Application Number: 20140237543
A method and apparatus for integrating various network access control frameworks under the control of a single policy decision point (PDP). The apparatus supports pluggable protocol terminators to interface to any number of access protocols or backend support services. The apparatus contains Trust and Identity Mediators to mediate between the protocol terminators and a canonical policy subsystem, translating attributes between framework representations, and a canonical representation…