Detecting VLAN misconfiguration
AssigneeJuniper Networks, Inc.
InventorJisheng Wang
Life of this patent
Estimating the term…
Abstract
Disclosed are methods for detecting misconfigured VLANs. In some embodiments, traffic on a VLAN across multiple access points is categorized. Traffic on the VLAN at a single access point is then also categorized. The categorization of the VLAN traffic at the single access point can be in response to, for example, communication errors or other conditions. The two categorizations are then compared to determine if the VLAN traffic at the AP is consistent with the VLAN traffic across a network (e.g., an enterprise network). If the VLAN traffic at the AP is generally consistent with that across the network, this may indicate that a downstream network component, such as a switch or router, is misconfigured. Thus, some embodiments programmatically reconfigure the downstream component to forward traffic for the VLAN.
Claims19
A system, comprising:
- hardware processing circuitry;
- and
- one or more hardware memories comprising instructions that configure the hardware processing circuitry to:
- categorize a first set of network traffic communicated between a plurality of access points (APs) and a network component over a virtual local area network (VLAN);
- based on detecting one or more errors in a second set of network traffic communicated over the VLAN, categorize the second set of network traffic communicated between a particular AP of the plurality of APs and the network component over the VLAN;
- based on a comparison of the categorization of the second set of network traffic and the categorization of the first set of network traffic, detect a misconfiguration of the VLAN associated with the particular AP and the network component;
- and
- based on the detected misconfiguration of the VLAN associated with the particular AP and the network component, perform an action.
A method comprising:
- categorizing, by one or more hardware processors, a first set of network traffic communicated between a plurality of access points (APs) and a network component over a virtual local area network (VLAN);
- based on detecting one or more errors in a second set of network traffic communicated over the VLAN, categorizing, by the one or more hardware processors, the second set of network traffic communicated between a particular AP of the plurality of APs and the network component over the VLAN;
- based on a comparison of the categorization of the second set of network traffic and the categorization of the first set of network traffic, detecting, by the one or more hardware processors, a misconfiguration of the VLAN associated with the particular AP and the network component;
- and
- based on the detected misconfiguration of the VLAN associated with the particular AP and the network component, performing, by the one or more hardware processors, an action.
Non-transitory computer-readable storage media comprising instructions that when executed configure hardware processing circuitry to perform operations comprising:
- Categorizing a first set of network traffic communicated between a plurality of access points (APs) and a network component over a virtual local area network (VLAN);
- based on detecting one or more errors in a second set of network traffic communicated over the VLAN, categorizing the second set of network traffic communicated between a particular AP of the plurality of APs and the network component over the VLAN;
- based on a comparison of the categorization of the second set of network traffic and the categorization of the first set of network traffic, detecting a misconfiguration of the VLAN associated with the particular AP and the network component;
- and
- based on the detected misconfiguration of the VLAN associated with the particular AP and the network component, performing an action.
Dependencies are inferred from the claim text.