Wireless intrusion prevention
AssigneeArista Networks, Inc.
InventorsJatin Parekh, Anubhav Gupta, Amogh Dasture, Nadeem Akhtar
Life of this patent
Estimating the term…
Abstract
A networking system may disrupt an unauthorized wireless connection to the network. In particular, the networking system may detect a wireless connection between a client device and an unauthorized wireless access point. The networking system may receive a probe request management frame from the client device. The network system may, responsive to the detection of the wireless connection, send a probe response management frame to the client device.
Claims20
A method of disrupting an unauthorized Wi-Fi connection to a network, the method comprising:
- detecting a wireless connection between a client device in the network and an unauthorized wireless access point, wherein the client device is an authorized client device;
- detecting a wireless local area network (WLAN) media access control (MAC) Probe Request management frame from the client device;
- and
- responsive to detecting the wireless connection, sending a WLAN MAC Probe Response management frame to the client device.
One or more non-transitory computer-readable storage media comprising computer-executable instructions that, when executed by one or more processors for a wireless intrusion prevention system, cause the one or more processors to:
- identify a control signal indicative of an external network connection between a client device and an unauthorized wireless access point, the external network connection utilizing Management Frame Protection (MFP) that encrypts communication of some types of wireless local area network (WLAN) media access control (MAC) management frames;
- and
- send a WLAN MAC management frame to the client device, in response to the identified control signal indicative of the external network connection utilizing MFP, to disrupt the external network connection.
A method of operating a wireless access point to disrupt an unauthorized wireless connection to a network that includes the wireless access point, the method comprising:
- generating a control signal indicative of an external network connection between a client device and an external wireless access point in an external network, the external network connection utilizing Management Frame Protection (MFP);
- and
- causing the wireless access point to send a wireless local area network (WLAN) media access control (MAC) Probe Response management frame to the client device based at least in part on the generated control signal indicative of the external network connection utilizing MFP.
Dependencies are inferred from the claim text.