Pre-authentication across an 802.11 layer-3 IP network

• US 20080056272A1
• Filed: 08/31/2006
• Published: 03/06/2008
• Est. Priority Date: 08/31/2006
• Status: Active Grant

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Symbol Technologies, Inc. (Zebra Technologies Corporation)
• Inventors: Batta, Puneet
• Granted Patent: US 7,869,438 B2
• Time in Patent Office: Days
• US Class Current: 370/395.5
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/062 Pre-authentication
• CPC Class Codes: H04W 80/02 Data link layer protocols
• CPC Class Codes: H04W 80/04 Network layer protocols, e.g. mobile IP [Internet Protocol]
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]

Abstract

A method for pre-authentication in a wireless network is disclosed. The method begins by receiving, from a mobile client device, an Ethernet pre-authentication frame having an Ethernet address corresponding to a destination infrastructure device in the wireless network. Based upon a network mapping table, the method determines an internet protocol (IP) address that is mapped to the Ethernet address of the destination infrastructure device. The Ethernet pre-authentication frame is encapsulated inside an IP packet having the IP address. Then, the method routes the IP packet to the destination infrastructure device across WLANs with a different VLAN or subnetwork boundary in the wireless network.

Claims

1. A method for fast-roaming in a wireless network, the method comprising:

receiving, from a mobile client device, an Ethernet pre-authentication frame having an Ethernet address corresponding to a destination infrastructure device in the wireless network;

determining an internet protocol (IP) address that is mapped to the Ethernet address of the destination infrastructure device;

encapsulating the Ethernet pre-authentication frame inside an IP packet having the IP address; and

sending the IP packet to the destination infrastructure device.

2. A method according to claim 1, wherein the determining step further comprises accessing a network mapping database.

3. A method according to claim 2, wherein the network mapping database comprises a local database.

4. A method according to claim 1, wherein the determining step further comprises determining the IP address from information sent via the wireless network.

5. A method according to claim 2, further comprising statistically configuring the network mapping database.

6. A method according to claim 1, wherein the Ethernet pre-authentication frame includes a MAC address of the mobile client device.

7. A method according to claim 1, wherein the IP packet includes:

a BSSID of the destination infrastructure device; and

a MAC address of the mobile client device.

8. An infrastructure device configured for operation in a wireless network, the infrastructure device comprising:

a communication module configured to wirelessly receive, from a mobile client device, an Ethernet pre-authentication frame having an Ethernet address corresponding to a destination infrastructure device in the wireless network; and

a processing logic element coupled to the communication module and configured to;

map the Ethernet address to an internet protocol (IP) address corresponding to the destination infrastructure device;

encapsulate the Ethernet pre-authentication frame inside an IP packet having the IP address; and

send the IP packet to the destination infrastructure device.

9. An infrastructure device according to claim 8, wherein the Ethernet pre-authentication frame includes a MAC address of the mobile client device.

10. An infrastructure device according to claim 8, wherein the IP packet includes:

a BSSID of the destination infrastructure device; and

a MAC address of the mobile client device.

11. An infrastructure device according to claim 8, further comprising a memory module coupled to the processing logic element and configured to store a network mapping database.

12. A method for fast-roaming in a wireless network comprising:

receiving, from an infrastructure device in the wireless network, an internet protocol (IP) packet that encapsulates an Ethernet pre-authentication frame; and

extracting the ethernet pre-authentication frame from the IP packet to obtain pre-authentication information.

13. A method according to claim 12, further comprising pre-authenticating a mobile client device that has sent the ethernet pre-authentication frame to the infrastructure device.

14. A method according to claim 13, further comprising:

processing a pre-authentication request based upon the pre-authentication information; and

sending a pre-authentication reply, in response to the pre-authentication request, to the mobile client device.

15. A method according to claim 12, wherein the Ethernet pre-authentication frame includes:

a BSSID of a destination infrastructure device; and

a MAC address of a mobile client device.

16. A method according to claim 12, wherein the IP packet further comprises:

a BSSID of a destination infrastructure device;

a MAC address of a mobile client device; and

an IP address of a destination infrastructure device.

17. An infrastructure device configured for operation in a wireless network, the infrastructure device comprising:

a communication module configured to receive, from an infrastructure device in the wireless network, an internet protocol (IP) packet that encapsulates an Ethernet pre-authentication frame; and

a processing logic element coupled to the communication module and configured to extract the Ethernet pre-authentication frame from the IP packet.

18. An infrastructure device according to claim 17, wherein the processing logic element is further configured to pre-authenticate a mobile client device that has sent the Ethernet pre-authentication frame to the infrastructure device.

19. An infrastructure device according to claim 18, wherein the processing logic element is further configured to:

process a pre-authentication request based upon information extracted from the IP packet; and

send a pre-authentication reply, in response to the pre-authentication request, to the mobile client device.

20. A method for fast-roaming in a wireless network, the method comprising:

receiving, from a mobile client device in the wireless network, a pre-authentication frame in accordance with a first network communication scheme, the pre-authentication frame including a first location identifier for a destination infrastructure device in the wireless network;

mapping the first location identifier to a second location identifier for the destination infrastructure device;

encapsulating the pre-authentication frame inside a routing frame that is configured for compliance with a second network communication scheme, the routing frame including the second location identifier for the destination infrastructure device; and

sending the routing frame to the destination infrastructure device.

21. A method according to claim 20, wherein the mapping step further comprises accessing a network mapping database.

22. A method according to claim 21, wherein the network mapping database comprises a local database.

23. A method according to claim 21, wherein the network mapping database comprises a remote database.

24. A method according to claim 20, wherein the mapping step further comprises determining the second location identifier from information sent wirelessly via the wireless network.

25. A method according to claim 20, wherein the first network communication scheme is compliant with an Ethernet protocol.

26. A method according to claim 20, wherein the second network communication scheme is compliant with an internet protocol (IP).

27. A method according to claim 20, wherein the pre-authentication frame includes a MAC address of the mobile client device.

28. A method according to claim 20, wherein the routing frame includes:

a BSSID of the destination infrastructure device; and

a MAC address of the mobile client device.