Per-Subscriber Virtual Segmentation of an Active Ethernet Network on Multi-Tenant Properties

A method comprising the steps of:

• a. configuring, by an operator front end, a subscriber account associated with subscriber authentication credentials, which includes assigning of a pre-shared key associated with and unique to the subscriber account, where the subscriber account is assigned a separate, unique segment configured to operate on an active ethernet network shared by a plurality of subscribers each occupying a unit of a multi-tenant property, the first subscriber associated with a first unit of the multi-unit property;
• b. configuring, by the operator front end, a second subscriber account associated with subscriber authentication credentials, which includes assigning of a second pre-shared key associated with and unique to the second subscriber account, where the second subscriber account is assigned a second unique segment, the second subscriber associated with a second unit of the multi-unit property;
• c. implementing, by a subscriber front end, a subscriber front-end interface, wherein subscriber authentication credentials associated with a subscriber account are collected;
• d. implementing, by a second subscriber front end, a second subscriber front-end interface, wherein subscriber authentication credentials associated with a second subscriber account are collected;
• e. creating, by an orchestrator backend, a separate virtual gateway associated with and unique to the subscriber account and a second, separate virtual gateway associated with and unique to the second subscriber account upon authentication of each subscriber authentication credentials, said virtual gateways each being assigned a unique public IP address, wherein configuration changes unique to the subscriber account are permitted to be selectively applied by the virtual gateway that is specific to one or more segments of the subscriber account through the subscriber front end and the second subscriber front end and configuration changes unique to the second subscriber account are permitted to be selectively applied by the second virtual gateway that is specific to one or more segments of the second subscriber account through the second subscriber front end;
• d. storing, in a shared database, subscriber data associating the virtual gateway, the subscriber account, and the pre-shared key and subscriber data associating the virtual gateway, the subscriber account, and the pre-shared key;
• and
• e. onboarding, by an orchestrator backend, a subscriber first device associated with the subscriber account using the pre-shared key unique to the subscriber account and a second subscriber first device associated with the second subscriber account using the second pre-shared key unique to the second subscriber account.

A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising:

• a. providing an active ethernet network shared by a plurality of subscriber accounts each associated with occupation of a unit of a multi-tenant property, where each of the plurality of subscriber accounts is assigned a separate, unique segment configured to operate on an active ethernet network shared by a plurality of subscriber accounts;
• b. configuring, by an operator front end, a subscriber account associated with subscriber authentication credentials, which includes assigning of a pre-shared key associated with and unique to the subscriber account;
• c. implementing, by a subscriber front end, a subscriber front-end interface, wherein subscriber authentication credentials associated with a subscriber account are collected;
• d. creating, by an orchestrator backend, a separate virtual gateway associated with and unique to the subscriber account upon authentication of subscriber authentication credentials, said virtual gateway being assigned a unique public IP address, wherein configuration changes unique to the subscriber account are permitted to be selectively applied by the virtual gateway that are specific to one or more segments of the subscriber account through the subscriber front end;
• e. storing, in a shared database, subscriber data associating the virtual gateway, the subscriber account, and the pre-shared key;
• and
• f. onboarding, by an orchestrator backend, a subscriber first device associated with the subscriber account using the pre-shared key unique to the subscriber account.