Zero touch provisioning of virtual local access networks (vlans) for switch-connected access points
AssigneeFortinet, Inc.
InventorsSekhar Sumanth Gorajala Chandra, Joseph Robison Mihelich
Life of this patent
Estimating the term…
Abstract
Secure mode is enabled on a secured port of a plurality of ports of the switch automatically provisions new access point in cooperation with a Wi-Fi controller. An access point profile is received from the Wi-Fi controller and forwarded to the new access point. The access point profile assigns VLAN IDs for the one or more VLANs to service set identifiers (SSIDs). Subsequent data traffic received from the new access point is forwarded according to a VLAN ID. A management access points automatically provisions VLAN configurations upstream to the switch and the Wi-Fi controller.
Claims11
A method in a switch in an enterprise network communicatively coupled to a Wi-Fi controller and a Wi-Fi network, for zero touch provisioning of virtual local access networks (VLANs) for access points communicatively coupled to the switch, the method comprising the steps of:
- enabling a secure mode on a secured port of a plurality of ports of the switch to provide a secure access point link to access points that connect downstream of the switch, wherein at least one other port of the plurality of ports is communicatively connected to an access point of a plurality of access points that are part of one or more VLANs;
- detecting connection of a new access point, with a local access network (LAN) segment to the secured port, wherein the new access point hosts at least one station that is part of the one or more VLANs;
- authorizing the new access point through the Wi-Fi controller;
- automatically receiving an access point profile from the Wi-Fi controller and forwarding to the new access point, wherein the access point profile assigns VLAN IDs for the one or more VLANs to service set identifiers (SSIDs);
- and
- forwarding data traffic received from the new access point according to a VLAN ID over at least one of the plurality of ports.
A non-transitory computer-readable medium storing source code in a switch in an enterprise network communicatively coupled to and a Wi-Fi controller and a Wi-Fi network that, when executed by a processor, performs a method for zero touch provisioning of virtual local access networks (VLANs) for access points communicatively coupled to the switch, the method comprising:
- enabling a secure mode on a secured port of a plurality of ports of the switch to provide a secure access point link to access points that connect downstream of the switch, wherein at least one other port of the plurality of ports is communicatively connected to an access point of a plurality of access points that are part of one or more VLANs;
- detecting connection of a new access point, with a local access network (LAN) segment to the secured port, wherein the new access point hosts at least one station that is part of the one or more VLANs;
- authorizing the new access point through the Wi-Fi controller;
- automatically receiving an access point profile from the Wi-Fi controller and forwarding to the new access point, wherein the access point profile assigns VLAN IDs for the one or more VLANs to service set identifiers (SSIDs);
- and
- forwarding data traffic received from the new access point according to a VLAN ID over at least one of the plurality of ports.
A switch in an enterprise network communicatively coupled to a Wi-Fi controller and a Wi-Fi network, for zero touch provisioning of virtual local access networks (VLANs) for access points communicatively coupled to the switch, the switch comprising:
- a processor;
- a plurality of ports communicatively coupled to the processor and to the data communication network and to the enterprise network;
- and
- a memory, communicatively coupled to the processor and storing modules, comprising:
- a mode toggler configured to enable a secure mode on a secured port of the plurality of ports of the switch to provide a secure access point link to access points that connect downstream of the switch, wherein at least one other port of the plurality of ports is communicatively connected to an access point of a plurality of access points that are part of one or more VLANs;
- an access point authorization module configured to detect connection of a new access point, with a local access network (LAN) segment to the secured port, wherein the new access point hosts at least one station that is part of the one or more VLANs;
- and
- a VLAN configuration module configured to authorize the new access point through the Wi-Fi controller;
- wherein the VLAN configuration module automatically receives an access point profile from the Wi-Fi controller and forwards to the new access point, wherein the access point profile assigns VLAN IDs for the one or more VLANs to service set identifiers (SSIDs),
- wherein data traffic received from the new access point according to a VLAN ID is forwarded over at least one of the plurality of ports.
Dependencies are inferred from the claim text.