Centralized management of access points

• US 10,038,594 B2
• Filed: 05/03/2017
• Issued: 07/31/2018
• Est. Priority Date: 07/03/2013
• Status: Active Grant

• Current Assignee: Fortinet Inc.
• Original Assignee: Fortinet Inc.
• Inventors: Gorajala Chandra, Sekhar Sumanth, Thangaraj, Selvam
• Primary Examiner(s): Kamara, Mohamed
• Application Number:
  US15/585,465
• Publication Number:
  US 20170237617A1
• Time in Patent Office: 454 Days
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0823 characterised by the purposes of a change of settings, e.g. optimising configuration for enhancing reliability for optimising operational conditions of wireless networks H04W24/02
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 67/10 in which an application is distributed across nodes in the network software deployment G06F8/60; multiprogramming arrangements G06F9/46
• CPC Class Codes: H04W 24/02 Arrangements for optimising operational condition
• CPC Class Codes: H04W 24/10 Scheduling measurement reports ; Arrangements for measurement reports
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Systems and methods are provided for centralized access, control, and management of APs. According to one embodiment, multiple APs of a private IP network are decoupled from potentially transient IP addresses by assigning a unique identifier to each of the multiple APs by an AC. An AC GUI is presented by the AC to an administrator through which (i) commands are provided by the administrator and (ii) the administrator is provided with access to a first AP of the multiple APs responsive to a command received from the administrator though the AC GUI and based upon the first AP'"'"'s assigned unique identifier. The first AP is accessed, controlled or debugged by the AC based on the command. The access to the first AP enables a first AP GUI of the first AP through which the network administrator is provided with an ability to issue multiple commands to the first AP.

Claims

1. A method comprising:

decoupling, by an Access Controller (AC) that manages a plurality of Access Points (APs) of a private Internet Protocol (IP) network, identities of each AP of the plurality of APs from potentially transient IP addresses of the plurality of APs by assigning a unique identifier to each of the plurality of APs;

centralizing access to the plurality of APs, by presenting, by the AC, an AC graphical user interface (GUI) to a network administrator through which commands are provided by the network administrator and through which the network administrator is provided with the ability to interact with the plurality of APs without requiring initiation by the AC of a separate network protocol session for each AP of the plurality of APs; and

interacting, by the AC, with a first AP of the plurality of APs based on a command received from the network administrator through the AC GUI and based upon the first AP'"'"'s assigned unique identifier, wherein said interacting with the first AP enables a first AP GUI or command line interface (CLI) of the first AP through which the network administrator is provided with an ability to issue a plurality of commands to the first AP.

2. The method of claim 1, wherein the first AP GUI or CLI of the first AP further permits access to a second AP GUI or CLI of a second AP of the plurality of APs through which the network administrator is provided with an ability to issue the plurality of commands to the second AP.

3. The method of claim 1, wherein a first command of the plurality of commands causes the first AP to return a report indicative of a current status of the first AP.

4. The method of claim 1, wherein a second command of the plurality of commands causes the first AP to update one or more configuration settings of the first AP.

5. The method of claim 2, wherein the first AP GUI or CLI of the first AP enables access back to the AC GUI.

6. The method of claim 1, further comprising presenting a graphical representation of relationships among the plurality of APs and of relationships between each of the plurality of APs, if any, with the AC within the AC GUI.

7. The method of claim 6, wherein the graphical representation is presented in a form of one or more of a tree layout, a mesh layout, a star layout and a ring layout.

8. The method of claim 6, wherein the graphical representation provides a single view that enables the network administrator to visualize an entire topology represented by the relationships among the plurality of APs and the relationships between each of the plurality of APs, if any, with the AC.

9. The method of claim 8, wherein the graphical representation displays the assigned unique identifier proximate to representations of each of the plurality of APs.

10. The method of claim 1, wherein the AC comprises a cloud-based AC and performs said interacting remotely.

11. A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of an Access Controller (AC) that manages a plurality of Access Points (APs) of a private Internet Protocol (IP) network, cause the one or more processors to perform a method comprising:

decoupling identities of each AP of the plurality of APs from potentially transient IP addresses of the plurality of APs by assigning a unique identifier to each of the plurality of APs;

centralizing access to the plurality of APs, by presenting an AC graphical user interface (GUI) to a network administrator through which commands are provided by the network administrator and through which the network administrator is provided with the ability to interact with the plurality of APs without requiring initiation by the AC of a separate network protocol session for each AP of the plurality of APs; and

interacting with a first AP of the plurality of APs based on a command received from the network administrator through the AC GUI and based upon the first AP'"'"'s assigned unique identifier, wherein said interacting with the first AP enables a first AP GUI or command line interface (CLIO of the first AP through which the network administrator is provided with an ability to issue a plurality of commands to the first AP.

12. The non-transitory computer-readable storage medium of claim 11, wherein the first AP GUI or CLI of the first AP further permits access to a second AP GUI or CLI of a second AP of the plurality of APs through which the network administrator is provided with an ability to issue the plurality of commands to the second AP.

13. The non-transitory computer-readable storage medium of claim 11, wherein a first command of the plurality of commands causes the first AP to return a report indicative of a current status of the first AP.

14. The non-transitory computer-readable storage medium of claim 11, wherein a second command of the plurality of commands causes the first AP to update one or more configuration settings of the first AP.

15. The non-transitory computer-readable storage medium of claim 12, wherein the first AP GUI or CLI of the first AP enables access back to the AC GUI.

16. The non-transitory computer-readable storage medium of claim 11, wherein the method further comprises presenting a graphical representation of relationships among the plurality of APs and of relationships between each of the plurality of APs, if any, with the AC within the AC GUI.

17. The non-transitory computer-readable storage medium of claim 16, wherein the graphical representation is presented in a form of one or more of a tree layout, a mesh layout, a star layout and a ring layout.

18. The non-transitory computer-readable storage medium of claim 16, wherein the graphical representation provides a single view that enables the network administrator to visualize an entire topology represented by the relationships among the plurality of APs and the relationships between each of the plurality of APs, if any, with the AC.

19. The non-transitory computer-readable storage medium of claim 18, wherein the graphical representation displays the assigned unique identifier proximate to representations of each of the plurality of APs.

20. The non-transitory computer-readable storage medium of claim 11, wherein the AC comprises a cloud-based AC and performs said interacting remotely.