Restricting broadcast and multicast traffic in a wireless network to a vlan
AssigneeMeru Networks
InventorsMohan RAM, Sung-Wook HAN
Life of this patent
Estimating the term…
Abstract
Traffic broadcast to a VLAN is restricted. To do so, a plurality of stations are associated with a BSSID (basic service set identifier). A first VLAN is configured by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key. One or more frames addressed to the first VLAN are received. The one or more frames are encrypted with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames. The one or more encrypted VLAN frames are broadcast to the plurality of stations associated with the BSSID.
Claims21
A computer-implemented method, in an access point of a wireless network, for restricting broadcast traffic to a VLAN, comprising:
- associating a plurality of stations with a BSSID (basic service set identifier);
- configuring a first VLAN by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key;
- receiving one or more frames addressed to the first VLAN;
- encrypting the one or more frames with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames;
- and
- broadcasting the one or more encrypted VLAN frames to the plurality of stations associated with the BSSID.
A non-transitory computer-readable medium storing instructions that, when executed by a processor, perform a method in an access point of a wireless network, for restricting broadcast traffic to a VLAN, the method comprising:
- associating a plurality of stations with a BSSID (basic service set identifier);
- configuring a first VLAN by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key;
- receiving one or more frames addressed to the first VLAN;
- encrypting the one or more frames with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames;
- and
- broadcasting the one or more encrypted VLAN frames to the plurality of stations associated with the BSSID.
An access point of a wireless network, for restricting broadcast traffic to a VLAN, comprising:
- associating a plurality of stations with a BSSID (basic service set identifier);
- configuring a first VLAN by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key;
- receiving one or more frames addressed to the first VLAN;
- encrypting the one or more frames with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames;
- and
- broadcasting the one or more encrypted VLAN frames to the plurality of stations associated with the BSSID.
Dependencies are inferred from the claim text.