Gateway using multicast to unicast conversion

• US 9,769,056 B2
• Filed: 03/17/2014
• Issued: 09/19/2017
• Est. Priority Date: 03/15/2013
• Status: Active Grant

• Current Assignee: Extreme Networks, Inc.
• Original Assignee: Aerohive Networks Incorporated (Extreme Networks, Inc.)
• Inventors: Gast, Matthew Stuart, Wang, Liang
• Primary Examiner(s): NGUYEN, TU T
• Application Number:
  US14/216,566
• Publication Number:
  US 20140281027A1
• Time in Patent Office: 1,282 Days
• Field of Search: 709238
• CPC Class Codes: H04L 12/1886 with traffic restrictions for efficiency improvement, e.g. involving subnets or subdomains
• CPC Class Codes: H04L 45/16 Multipoint routing

Abstract

A multicast frame directed to a plurality of devices coupled to a network can be received, where the plurality of devices comprising at least one intended recipient device and at least one unintended recipient device. A destination unicast address corresponding to an intended recipient device can be identified. The multicast frame can be converted into a unicast frame directed to the intended recipient device, the unicast frame configured with the destination unicast address. The unicast frame can be blocked from accessing the unintended recipient device. The unicast frame can be provided to the intended recipient device.

Claims

1. A system comprising:

a multicast frame receiving engine configured to receive a multicast frame directed to a multicast group;

a destination unicast engine coupled to the multicast frame receiving engine and configured to identify a unicast address of an intended recipient device and a unicast address of an unintended recipient device, wherein the intended recipient device and the unintended recipient device are members of the multicast group;

a multicast frame expansion engine coupled to the destination unicast engine and configured to convert the multicast frame into a first unicast frame directed to the intended recipient device by inserting a payload of the multicast frame into a payload of the first unicast frame and the unicast address of the intended recipient device into a header of the first unicast frame and convert the multicast frame into a second unicast frame directed to the unintended recipient by inserting the payload of the multicast frame into a payload of the second unicast frame and the unicast address of the unintended recipient device into a header of the second unicast frame;

an unintended recipient device frame removal engine coupled to the multicast frame expansion engine and to the intended recipient device frame providing engine, the unintended recipient device frame removal engine configured to prevent the second unicast frame from being transmitted to the unintended recipient device by dropping the second unicast frame;

an intended recipient device frame providing engine coupled to the multicast frame expansion engine and configured to provide the first unicast frame to the intended recipient device.

2. The system of claim 1, wherein the system is incorporated into a user space of a kernel of a network access device.

3. The system of claim 1, wherein the multicast frame comprises multicast Domain Name Server (mDNS) traffic.

4. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a particular network user.

5. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a user profile associated with a plurality of network users.

6. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a particular network private pre-shared key (PPSK).

7. The system of claim 1, wherein the intended recipient device comprises a plurality of devices associated with a particular virtual local area network (VLAN).

8. The system of claim 1, further comprising a multicast to unicast conversion setup engine coupled to the multicast frame receiving engine, the multicast to unicast conversion setup engine adapted to configure the system to convert all multicasts to the intended recipient device into unicasts to the intended recipient device.

9. The system of claim 1, wherein the system is incorporated into a network access device configured to control access to wireless network traffic.

10. The system of claim 9, wherein the network access device comprises one or more of a switch and a router.

11. A method comprising:

receiving, at a network access device, a multicast frame directed to a multicast group, the multicast group including an intended recipient device and an unintended recipient device;

identifying a unicast address corresponding to the intended recipient device and a unicast address corresponding to the unintended recipient device;

converting the multicast frame into a first unicast frame directed to the intended recipient device by inserting a payload of the multicast frame into a payload of the first unicast frame and the unicast address of the intended recipient device into a header of the first unicast frame;

converting the multicast frame into a second unicast frame directed to the unintended recipient by inserting the payload of the multicast frame into a payload of the second unicast frame and the unicast address of the unintended recipient into a header of the second unicast frame;

preventing the second unicast frame from being transmitted to the unintended recipient device by dropping the second unicast frame;

sending the first unicast frame to the intended recipient device.

12. The method of claim 11, wherein the method is executed in a user space of a kernel of a network access device.

13. The method of claim 11, wherein the multicast frame comprises multicast Domain Name Server (mDNS) traffic.

14. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a particular network user.

15. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a user profile associated with a plurality of network users.

16. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a particular network private pre-shared key (PPSK).

17. The method of claim 11, wherein the intended recipient device comprises a plurality of devices associated with a particular virtual local area network (VLAN).

18. The method of claim 11, further comprising converting all multicasts to the intended recipient device into unicasts to the intended recipient device.

19. The method of claim 11, further comprising controlling access to wireless network traffic using one or more of a switch and a router configured to control access to the wireless network traffic.