Chassis system management through data paths

A method in local network gateway device having multiple processing blades coupled to a data communication network with a remote network gateway device and a local network with a plurality of stations, for preventing key failure in BSS (Basic Service Set) fast transition of a station attempting to connect from a source access point managed by a Wi-Fi controller to the target access point also managed by the Wi-Fi controller, the method comprising the steps of:

• receiving a data packet from a user interface on an I/O board having a user interface and a load balancing engine, coupled to a base channel on a chassis internal switch for chassis management;
• selecting a firewall processing blade to send the data packet over the fabric channel a plurality of firewall processing blades having a local processor, each firewall processing card coupled to the base channel and coupled to a fabric channel on a chassis internal switch for user data traffic;
• receiving the data packet at the firewall processing blade over the fabric channel, and:
• checking for a session matching to the data packet, if a match exists to management data packets the data packet is returned to the I/O board and if a match exists to user data packets the data packet is sent to a firewall service of the firewall processing card,
• if no session match exists, checking for a policy match to the data packet for creating a new session, and
• if no policy match exists, dropping the data packet;
• and
• receiving the data packet at the I/O board returned over the base channel, and:
• checking for a session matching to the data packet, if a session match exists and the data packet is a management data packet, the data packet is sent to a management service at a user level of the I/O board and if not a management data, dropping the data packet,
• if no session match exists, the I/O board checks for a policy match to the data packet for creating a new session, and
• if no policy match exists, dropping the data packet.

A method in a non-transitory computer-readable media in local network gateway device having multiple processing blades coupled to a data communication network with a remote network gateway device and a local network with a plurality of stations, the method for preventing key failure in BSS (Basic Service Set) fast transition of a station attempting to connect from a source access point managed by a Wi-Fi controller to the target access point also managed by the Wi-Fi controller, the method comprising the steps of:

• receiving a data packet from a user interface on an I/O board having a user interface and a load balancing engine, coupled to a base channel on a chassis internal switch for chassis management;
• selecting a firewall processing blade to send the data packet over the fabric channel a plurality of firewall processing blades having a local processor, each firewall processing card coupled to the base channel and coupled to a fabric channel on a chassis internal switch for user data traffic;
• receiving the data packet at the firewall processing blade over the fabric channel, and:
• checking for a session matching to the data packet, if a match exists to management data packets the data packet is returned to the I/O board and if a match exists to user data packets the data packet is sent to a firewall service of the firewall processing card,
• if no session match exists, checking for a policy match to the data packet for creating a new session, and
• if no policy match exists, dropping the data packet;
• and
• receiving the data packet at the I/O board returned over the base channel, and:
• checking for a session matching to the data packet, if a session match exists and the data packet is a management data packet, the data packet is sent to a management service at a user level of the I/O board and if not a management data, dropping the data packet,
• if no session match exists, the I/O board checks for a policy match to the data packet for creating a new session, and
• if no policy match exists, dropping the data packet.