# US 12,114,198 B2 · Prioritizing wireless access technologies in an enterprise fabric

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 12,114,198 B2
- Document ID: US12114198B2
- Status: Granted
- Kind: B2
- Application number: 18/359,392
- Filed: 2023-07-26
- Published: 2023-11-16
- Granted: 2024-10-08
- Earliest claimed: 2021-07-23
- Assignees: Cisco Technology, Inc.
- Applicants: Cisco Technology, Inc.
- Inventors: Prakash C. Jain; Sanjay K. Hooda; Vinay Saini
- Web page: https://patentgrep.com/patent/US12114198B2

## CPC

- H04W 28/0226: {based on location or mobility (handoff or reselection H04W36/00; mobile application services making use of the location of users or terminals H04W4/02)}
- H04L 12/4633: {Interconnection of networks using encapsulation techniques, e.g. tunneling}
- H04W 84/10: Small scale networks; Flat hierarchical networks
- H04W 84/12: WLAN [Wireless Local Area Networks]
- H04W 88/08: Access point devices
- H04W: WIRELESS COMMUNICATION NETWORKS (broadcast communication H04H; communication systems using wireless links for non-selective communication, e.g. wireless extensions H04M1/72)
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

An enterprise network may receive a WiFi packet associated with a 5G service (or other type of service) at an access point (AP) in the enterprise network. The enterprise network determines whether the WiFi packet satisfies a first-packet policy associated with the 5G service, where the first-packet policy controls access to a tunnel for traversing the enterprise network to reach the 5G service. If the packet satisfies the policy, the enterprise network queries a map server to identify a location of a 5G border in the enterprise network that is connected to the 5G service. The enterprise network can transmit the WiFi packet on the tunnel with priority to meet SLA using the location of the 5G border.

## Claims

### Claim 1

A method, comprising:
receiving a WiFi packet associated with a 5G service at an access point (AP) in an enterprise network;
determining that the WiFi packet satisfies a first-packet policy associated with the 5G service, wherein the first-packet policy controls access to a tunnel for traversing the enterprise network to reach the 5G service;
identifying a location of a 5G border in the enterprise network that is connected to the 5G service; and
transmitting the WiFi packet, based on priority, on the tunnel using the location of the 5G border.

### Claim 2 (depends on 1)

The method of claim 1, wherein a locator ID separation protocol (LISP) map server is used to identify the location of the 5G border.

### Claim 3 (depends on 2)

The method of claim 2, further comprising, before receiving the WiFi packet:
registering an enterprise border connected to the enterprise network with the LISP map server as the 5G border; and
receiving a request at the LISP map server for the 5G border to set up the tunnel.

### Claim 4 (depends on 3)

The method of claim 3, further comprising, before receiving the WiFi packet:
specifying, in the first-packet policy, at least one of: a type of device, a type of application generating the WiFi packet, or a user that can access the 5G service; and
at the LISP map server, receiving the first-packet policy from an enterprise network architecture.

### Claim 5 (depends on 4)

The method of claim 4, further comprising, before receiving the WiFi packet:
requesting the first-packet policy from the LISP map server;
receiving a 5G border instance identification for the 5G service; and
creating the tunnel between egress and ingress tunnel routers.

### Claim 6 (depends on 5)

The method of claim 5, further comprising clearing and disconnecting the LISP map server and the egress and ingress tunnel routers when no WiFi packets are detected over the tunnel.

### Claim 7 (depends on 6)

The method of claim 6, further comprising:
withdrawing the AP from the tunnel; and
disconnecting the egress and ingress tunnel routers from the 5G border.

### Claim 8

A computing system, comprising:
one or more processors; and
memory storing an application configured to, when executed by any combination of the one or more processors, perform an operation, the operation comprising:
receiving a WiFi packet associated with a service at an access point (AP) in an enterprise network, wherein the service is accessible using a different network than the enterprise network;
determining that the WiFi packet satisfies a first-packet policy associated with the service, wherein the first-packet policy controls access to a tunnel for traversing the enterprise network to reach the service;
identifying a location of a border in the enterprise network that is connected to the service; and
transmitting the WiFi packet, based on priority, on the tunnel using the location of the border.

### Claim 9 (depends on 8)

The computing system of claim 8, wherein a locator ID separation protocol (LISP) map server is used to identify the location of the border.

### Claim 10 (depends on 9)

The computing system of claim 9, wherein the operation further comprises, before receiving the WiFi packet:
registering an enterprise border connected to the enterprise network with the LISP map server as the border; and
receiving a request at the LISP map server for the border to set up the tunnel.

### Claim 11 (depends on 10)

The computing system of claim 10, wherein the operation further comprises, before receiving the WiFi packet:
specifying, in the first-packet policy, at least one of: a type of device, a type of application generating the WiFi packet, or a user that can access the service; and
at the LISP map server, receiving the first-packet policy from an enterprise network architecture.

### Claim 12 (depends on 11)

The computing system of claim 11, wherein the operation further comprises, before receiving the WiFi packet:
requesting the first-packet policy from the LISP map server;
receiving a border instance identification for the service; and
creating the tunnel between egress and ingress tunnel routers.

### Claim 13 (depends on 12)

The computing system of claim 12, wherein the operation further comprises:
clearing and disconnecting the LISP map server and the egress and ingress tunnel routers when no WiFi packets are detected over the tunnel;
withdrawing the AP from the tunnel; and
disconnecting the egress and ingress tunnel routers from the border.

### Claim 14 (depends on 8)

The computing system of claim 8, wherein the different network comprises one of: a cellular network or a fiber or cable network.

### Claim 15

A non-transitory computer readable medium having program instructions embodied therewith, the program instructions executable by any combination or one or more processors to perform an operation, the operation comprising:
receiving a WiFi packet associated with a service at an access point (AP) in an enterprise network, wherein the service is accessible using a different network than the enterprise network;
determining that the WiFi packet satisfies a first-packet policy associated with the service, wherein the first-packet policy controls access to a tunnel for traversing the enterprise network to reach the service;
identifying a location of a border in the enterprise network that is connected to the service; and
transmitting the WiFi packet, based on priority, on the tunnel using the location of the border.

### Claim 16 (depends on 15)

The non-transitory computer readable medium of claim 15, wherein a locator ID separation protocol (LISP) map server is used to identify the location of the border.

### Claim 17 (depends on 16)

The non-transitory computer readable medium of claim 16, wherein the operation further comprises, before receiving the WiFi packet:
registering an enterprise border connected to the enterprise network with the LISP map server as the border; and
receiving a request at the LISP map server for the border to set up the tunnel.

### Claim 18 (depends on 17)

The non-transitory computer readable medium of claim 17, wherein the operation further comprises, before receiving the WiFi packet:
specifying, in the first-packet policy, at least one of: a type of device, a type of application generating the WiFi packet, or a user that can access the service; and
at the LISP map server, receiving the first-packet policy from an enterprise network architecture.

### Claim 19 (depends on 18)

The non-transitory computer readable medium of claim 18, wherein the operation further comprises, before receiving the WiFi packet:
requesting the first-packet policy from the LISP map server;
receiving a border instance identification for the service; and
creating the tunnel between egress and ingress tunnel routers.

### Claim 20 (depends on 19)

The non-transitory computer readable medium of claim 19, wherein the operation further comprises clearing and disconnecting the LISP map server and the egress and ingress tunnel routers when no WiFi packets are detected over the tunnel.