Wireless local area network access management

• US 20030120821A1
• Filed: 10/15/2002
• Published: 06/26/2003
• Est. Priority Date: 12/21/2001
• Status: Abandoned Application

• Current Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Original Assignee: Avago Technologies General IP PTE Limited (Broadcom, Inc.)
• Inventors: Thermond, Jeffrey L., Martin, Richard G.
• Application Number:
  US10/271,968
• Publication Number:
  US 20030120821A1
• Time in Patent Office: Days
• US Class Current: 709/250
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04W 12/03 Protecting confidentiality, e.g. by encryption
• CPC Class Codes: H04W 12/08 Access security
• CPC Class Codes: H04W 28/00 Network traffic management; Network resource management
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices

Abstract

Wireless Access Points (WAPs) of a Wireless Local Area Network (WLAN) are managed to reduce registration and authentication overhead for roaming wireless terminals. In one embodiment, during initial registration with a first WAP, at least some other WAPs receive registration information regarding the wireless terminal. When the wireless terminal roams to other WAPs, registration information is present and registration latency is reduced. Visitor access to the network is supported in a limited fashion. Visiting wireless terminals are provided with limited access to the WLAN via a Virtual Private Network (VPN). The VPN is configured to service communications for visiting wireless terminals by routing communications from/to the edge of the network and by precluding access to other portions of the WLAN.

Claims

1. In a premises based Wireless Local Area Network (WLAN) that includes a wired network infrastructure, a plurality of Wireless Access Points (WAPs) coupled to the wired network infrastructure, and a network manager coupled to the wired network infrastructure, a method of operation comprising:

receiving, at a servicing WAP of the plurality of WAPs, a service request from a wireless terminal;

sending, by the servicing WAP to the network manager, a registration request for the wireless terminal;

determining, by the network manager, that the wireless terminal is to be allowed access to the WAP;

responding, from the network manager to the servicing WAP, that the wireless terminal is to be allowed access to the WAP;

providing, by the servicing WAP, WLAN service to the wireless terminal;

providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal;

receiving, at another servicing WAP of the plurality of WAPs, a request for service from the wireless terminal; and

based upon registration information previously received from the network manager, providing, by the another servicing WAP, WLAN service to the wireless terminal resulting in reduced latency in receiving service from the another servicing WAP.

2. The method of claim 1, wherein WLAN service is provided by the another servicing WAP without requiring a registration request from the another servicing WAP to the network manager.

3. The method of claim 1, wherein providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal includes providing the registration information to each other of the plurality of WAPs.

4. The method of claim 1, wherein providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal includes providing the registration information to a subset of the other WAPs of the plurality of WAPs.

5. The method of claim 1, wherein:

determining, by the network manager, that the wireless terminal is to be allowed access to the WAP includes determining that the wireless terminal is a visitor to the WLAN and assigning a Virtual Private Network (VPN) ID to the wireless terminal;

responding, from the network manager to the servicing WAP, that the wireless terminal is to be allowed access to the WAP includes providing the servicing WAP with the VPN ID; and

providing, by the servicing WAP, WLAN service to the wireless terminal includes;

routing all communications received from the wireless terminal to an edge node of the WLAN; and

precluding the wireless terminal'"'"'s access to other portions of the WLAN.

6. The method of claim 1, wherein the network manager is embodied in a multi-layer switch that also performs switching operations within the WLAN.

7. In a premises based Wireless Local Area Network (WLAN) that includes a wired network infrastructure, a plurality of Wireless Access Points (WAPs) coupled to the wired network infrastructure, and a network manager coupled to the wired network infrastructure, a method of operation comprising:

receiving, at a servicing WAP of the plurality of WAPs, a service request from a wireless terminal;

sending, by the servicing WAP to the network manager, a registration request for the wireless terminal;

determining, by the network manager, that the wireless terminal is visiting the WLAN, is to be allowed access to the WAP, but is allowed limited access to the WLAN;

assigning a Virtual Private Network (VPN) ID to the wireless terminal;

responding, from the network manager to the servicing WAP, with the VPN ID;

providing, by the servicing WAP, WLAN service to the wireless terminal; and

routing, by the servicing WAP, all communications received from the wireless terminal to an edge node of the WLAN.

8. The method of claim 7, further comprising:

providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal including the VPN ID.

receiving, at another servicing WAP of the plurality of WAPs, a request for service from a wireless terminal; and

based upon registration information previously received from the network manager, providing, by the another servicing WAP, WLAN service to the wireless terminal based upon the VPN ID.

9. The method of claim 7, wherein WLAN service is provided by the another servicing WAP without requiring a registration request from the another servicing WAP to the network manager.

10. The method of claim 7, wherein providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal includes providing the registration information to each other of the plurality of WAPs.

11. The method of claim 7, wherein providing, by the network manager to at least one other WAP of the plurality of WAPs, registration information regarding the wireless terminal includes providing the registration information to a subset of the other WAPs of the plurality of WAPs, wherein the subset of the other WAPs service designated visitor areas within a serviced premises.

12. The method of claim 7, wherein the network manager is embodied in a multi-layer switch that also performs switching operations within the WLAN.

13. In a premises based Wireless Local Area Network (WLAN) that includes a wired network infrastructure, a plurality of Wireless Access Points (WAPs) coupled to the wired network infrastructure, and a network manager coupled to the wired network infrastructure, a method of operation comprising:

receiving a service request at a WAP of the plurality WAPs from a visiting wireless terminal;

determining that the wireless terminal should have visitor access rights to the WLAN;

allocating a Virtual Private Network (VPN) for the service of the wireless terminal;

establishing the VPN between the WAP and an external network; and

servicing the wireless terminal using the VPN between the WAP and the external network.

14. The method of claim 13, wherein the WLAN precludes the wireless terminal from accessing components of the WLAN other than the WAP and a WLAN component that couples the WLAN to the external network.

15. A Wireless Local Area Network (WLAN) comprising:

a network infrastructure;

a plurality of Wireless Access Points (WAPs) coupled to the network infrastructure;

a network manager coupled to the network infrastructure;

wherein a servicing WAP of the plurality of WAPs receives a service request from a wireless terminal;

wherein the servicing WAP sends a registration request to the network manager requesting registration of the wireless terminal;

wherein the network manager determines that the wireless terminal is to be allowed access to the WAP;

wherein the network manager responds to the servicing WAP that the wireless terminal is to be allowed access to the WAP;

wherein the servicing WAP provides WLAN service to the wireless terminal;

wherein the network manager provides registration information regarding the wireless terminal to at least one other WAP of the plurality of WAPs;

wherein another servicing WAP of the plurality of WAPs receives a service request from the wireless terminal; and

wherein the another servicing WAP provides service to the wireless terminal based upon registration information previously received from the network manager and so that latency in handoff is reduced.

16. The WLAN of claim 15, wherein WLAN service is provided by the another servicing WAP without requiring a registration request from the another servicing WAP to the network manager.

17. The WLAN of claim 15, wherein the registration information regarding the wireless terminal is provided to each other of the plurality of WAPs.

18. The WLAN of claim 15, wherein the registration information regarding the wireless terminal is provided to a subset of the other WAPs of the plurality of WAPs.

19. A Wireless Local Area Network (WLAN) comprising:

a network infrastructure;

a plurality of Wireless Access Points (WAPs) coupled to the network infrastructure;

a network manager coupled to the network infrastructure;

wherein a WAP of the plurality WAPs receives a service request from a visiting wireless terminal;

wherein the network manager determines that the wireless terminal should have visitor access rights to the WLAN;

wherein the network manager allocates a Virtual Private Network (VPN) for the service of the wireless terminal;

wherein the network manager establishes the VPN between the WAP and an external network; and

wherein the WLAN services the wireless terminal using the VPN between the WAP and the external network.

20. The WLAN of claim 19, wherein the WLAN precludes the wireless terminal from accessing components of the WLAN other than the WAP and a WLAN component that couples the WLAN to the external network.