Method for enabling mobility of client devices in large scale unified networks
Embodiments herein include systems and methods for providing a mechanism to enable smooth, seamless, and reliable connectivity for wireless devices in a unified network. The system supports roaming of mobile units across mobility switches. A given mobile unit can retain its IP address in both intra-subnet and inter-subnet roaming scenarios. The given mobile unit also retains its membership to a mobility VLAN to which it had been assigned, even during roaming scenarios. Embodiments include a framework for wireless switches to advertise VLANs they support to peer wireless switches in the mobility domain, and to advertise their capability to act as VLAN servers for those VLANs. Embodiments support VLAN membership management capabilities that allow access points and peer wireless switches to request wireless switches to add VLANs to the tunnels they share.
1. A computer-implemented method comprising:
establishing, by a mobility agent, a first mobility tunnel between a first mobility switch and a second mobility switch within a mobility domain, the mobility domain providing connectivity over a wireless network for mobile units, the first mobility switch and the second mobility switch being network switches that process data traffic from one or more mobile units, the first mobility tunnel providing a connection for control messaging between the first and second mobility switches;
exchanging, by the mobility agent, advertisements between the first mobility switch and the second mobility switch via the first mobility tunnel, the advertisements identifying mobility Virtual Local Area Networks (VLANs) for which each respective mobility switch acts as a mobility VLAN server, the first mobility switch acting as a first mobility VLAN server for a first mobility VLAN;
establishing, by the mobility agent, a first access tunnel between the first mobility switch and a first access point device, the first access point device having a network connection to the first mobility switch, the first access point device providing wireless network connectivity to one or more mobile units;
establishing, by the mobility agent, a second access tunnel between the second mobility switch and a second access point device, the second access point device having a network connection to the second mobility switch, the second access point device providing wireless network connectivity to one or more mobile units within the mobility domain;
receiving, by the mobility agent, a request to add the second mobility switch as a member of the first mobility VLAN, the request received via the first mobility tunnel in response to a first mobile unit attempting to connect to the first mobility VLAN via the second mobility switch, the first mobile unit being a member of the first mobility VLAN;
receiving, by the mobility agent, a request to add the second access point device as a member of the first mobility VLAN, the request received via the second access tunnel in response to the first mobile unit attempting to connect to the first mobility VLAN via the second access point device; and
adding, by the mobility agent, the first mobility tunnel as a member of the first mobility VLAN to enable the second mobility switch to access the first mobility VLAN in order to handle traffic to and from the first mobile unit as part of the first mobility VLAN.
2. The computer-implemented method of claim 1 , wherein adding the first mobility tunnel as a member of the first mobility VLAN enables the first mobile unit to retain an Internet Protocol (IP) address assigned to the first mobile unit as part of membership in the first mobility VLAN, the second mobility switch being part of a different subnet than the first mobility switch.
3. The computer-implemented method of claim 1 , further comprising:
receiving, by the mobility agent, a request from the second mobility switch to move the first mobility VLAN to the second mobility switch, the request received in response to the first mobile unit attempting to connect to the first mobility VLAN via the second access point device; and
causing, by the mobility agent, the second mobility switch to act as the first mobility VLAN server.
4. The computer-implemented method of claim 1 , wherein exchanging advertisements between the first mobility switch and the second mobility switch includes recording respective access to mobility VLANs in a VLAN server table at each respective mobility switch.
5. The computer-implemented method of claim 1 , wherein the mobility domain providing wireless network connectivity for mobile units includes the first mobility VLAN being mapped to a static VLAN on the first mobility switch, wherein each mobility switch provides network connectivity to both mobile units and wired computing devices.
6. The computer-implemented method of claim 5 , further comprising:
load balancing, by the mobility agent, a number of mobility VLANs assigned to each mobility switch based on a computing load that each mobility switch can support.
7. The computer-implemented method of claim 1 , wherein the wireless network further comprises at least two distinct mobility domains, the method further comprising:
exchanging, by the mobility agent, advertisements between mobility switches across the two distinct mobility domains to provide access across the two distinct mobility domains to the first mobility VLAN while selectively preventing access to other mobility VLANs across the two distinct mobility domains, wherein the first mobile unit retains an IP address assigned to the first mobile unit as part of its membership in the first mobility VLAN in both intra-subnet and inter-subnet roaming scenarios.
8. The method of claim 1 , wherein the requests to add the second mobility switch and the second access point device as members of the first mobility VLAN each comprise a first mobility VLAN identifier and a requested action, the method further comprising:
receiving, by the mobility agent, a first response indicating acceptance of the request to add the second mobility switch as a member of the first mobility VLAN, wherein the first response comprises the first mobility VLAN identifier and a result code.
9. The method of claim 8 , further comprising:
receiving, by the mobility agent, a second response indicating acceptance of the request to add the second access point as a member of the first mobility VLAN, wherein the second response comprises the first mobility VLAN identifier and a second result code; and
adding, by the mobility agent, the second access tunnel as a member of the first mobility VLAN, wherein adding the first mobility tunnel and the second access tunnel as members of the first mobility VLAN enables the first mobile unit to retain an IP address assigned to the first mobile unit as part of membership in the first mobility VLAN, the second mobility switch being part of a different subnet than the first mobility switch.
10. A computer system comprising:
a memory;
a processor;
a communications interface;
an interconnection mechanism coupling the memory, the processor and the communications interface, the memory storing instructions to carry out functionality of a mobility agent that, when executed by the processor, cause the system to perform the operations of:
establishing a first mobility tunnel between a first mobility switch and a second mobility switch within a mobility domain, the mobility domain providing connectivity over a wireless network for mobile units, the first mobility switch and the second mobility switch being network switches that process data traffic from one or more mobile units, the first mobility tunnel providing a connection for control messaging between the first and second mobility switches;
exchanging advertisements between the first mobility switch and the second mobility switch via the first mobility tunnel, the advertisements identifying mobility Virtual Local Area Networks (VLANs) for which each respective mobility switch acts as a mobility VLAN server, the first mobility switch acting as a first mobility VLAN server for a first mobility VLAN;
establishing a first access tunnel between the first mobility switch and a first access point device, the first access point device having a network connection to the first mobility switch, the first access point device providing wireless network connectivity to one or more mobile units;
establishing a second access tunnel between the second mobility switch and a second access point device, the second access point device having a network connection to the second mobility switch, the second access point device providing wireless network connectivity to one or more mobile units within the mobility domain;
receiving a request to add the second mobility switch as a member of the first mobility VLAN, the request received via the first mobility tunnel in response to a first mobile unit attempting to connect to the first mobility VLAN via the second mobility switch, the first mobile unit being a member of the first mobility VLAN;
receiving a request to add the second access point device as a member of the first mobility VLAN, the request received via the second access tunnel in response to the first mobile unit attempting to connect to the first mobility VLAN via the second access point device; and
adding the first mobility tunnel as a member of the first mobility VLAN to enable the second mobility switch to access the first mobility VLAN in order to handle traffic to and from the first mobile unit as part of the first mobility VLAN.
11. The computer system of claim 10 , wherein adding the first mobility tunnel as a member of the first mobility VLAN enables the first mobile unit to retain an Internet Protocol (IP) address assigned to the first mobile unit as part of membership in the first mobility VLAN, the second mobility switch being part of a different subnet than the first mobility switch.
12. The computer system of claim 10 , wherein the memory stores further instructions that when executed by the processor cause the system to perform the operations of:
receiving a request from the second mobility switch to move the first mobility VLAN to the second mobility switch, the request received in response to the first mobile unit attempting to connect to the first mobility VLAN via the second access point device; and
causing the second mobility switch to act as the first mobility VLAN server.
13. The computer system of claim 10 , wherein exchanging advertisements between the first mobility switch and the second mobility switch includes recording respective access to mobility VLANs in a VLAN server table at each respective mobility switch.
14. The computer system of claim 10 , wherein the mobility domain providing wireless network connectivity for mobile units includes the first mobility VLAN being mapped to a static VLAN on the first mobility switch, wherein each mobility switch provides network connectivity to both mobile units and wired computing devices.
15. The computer system of claim 14 , wherein the memory stores further instructions that when executed by the processor cause the system to perform the operation of:
load balancing a number of mobility VLANs assigned to each mobility switch based on a computing load that each mobility switch can support.
16. The computer system of claim 10 , wherein the wireless network further comprises at least two distinct mobility domains and wherein the memory stores further instructions that when executed by the processor cause the system to perform the operation of:
exchanging advertisements between mobility switches across the two distinct mobility domains to provide access across the two distinct mobility domains to the first mobility VLAN while selectively preventing access to other mobility VLANs across the two distinct mobility domains, wherein the first mobile unit retains an IP address assigned to the first mobile unit as part of its membership in the first mobility VLAN in both intra-subnet and inter-subnet roaming scenarios.
17. The computer system of claim 10 , wherein the requests to add the second mobility switch and the second access point device as members of the first mobility VLAN each comprise a first mobility VLAN identifier and a requested action and wherein the memory stores further instructions that when executed by the processor cause the system to perform the operation of:
receiving a first response indicating acceptance of the request to add the second mobility switch as a member of the first mobility VLAN, wherein the first response comprises the first mobility VLAN identifier and a result code;
receiving a second response indicating acceptance of the request to add the second access point as a member of the first mobility VLAN, wherein the second response comprises the first mobility VLAN identifier and a second result code; and
adding the second access tunnel as a member of the first mobility VLAN, wherein adding the first mobility tunnel and the second access tunnel as members of the first mobility VLAN enables the first mobile unit to retain an IP address assigned to the first mobile unit as part of membership in the first mobility VLAN, the second mobility switch being part of a different subnet than the first mobility switch.
18. A non-transitory computer-storage medium having instructions stored thereon to carry out functionality of a mobility agent, such that the instructions, when carried out by a processing device, cause the processing device to perform the operations of:
establishing a first mobility tunnel between a first mobility switch and a second mobility switch within a mobility domain, the mobility domain providing connectivity over a wireless network for mobile units, the first mobility switch and the second mobility switch being network switches that process data traffic from one or more mobile units, the first mobility tunnel providing a connection for control messaging between the first and second mobility switches;
exchanging advertisements between the first mobility switch and the second mobility switch via the first mobility tunnel, the advertisements identifying mobility Virtual Local Area Networks (VLANs) for which each respective mobility switch acts as a mobility VLAN server, the first mobility switch acting as a first mobility VLAN server for a first mobility VLAN;
establishing a first access tunnel between the first mobility switch and a first access point device, the first access point device having a network connection to the first mobility switch, the first access point device providing wireless network connectivity to one or more mobile units;
establishing a second access tunnel between the second mobility switch and a second access point device, the second access point device having a network connection to the second mobility switch, the second access point device providing wireless network connectivity to one or more mobile units within the mobility domain;
receiving a request to add the second mobility switch as a member of the first mobility VLAN, the request received via the first mobility tunnel in response to a first mobile unit attempting to connect to the first mobility VLAN via the second mobility switch, the first mobile unit being a member of the first mobility VLAN;
receiving a request to add the second access point device as a member of the first mobility VLAN, the request received via the second access tunnel in response to the first mobile unit attempting to connect to the first mobility VLAN via the second access point device; and
adding the first mobility tunnel as a member of the first mobility VLAN to enable the second mobility switch to access the first mobility VLAN in order to handle traffic to and from the first mobile unit as part of the first mobility VLAN.
19. The non-transitory computer-storage medium of claim 18 , wherein the wireless network further comprises at least two distinct mobility domains, the non-transitory computer-storage medium having further instructions stored thereon that, when carried out by the processing device, cause the processing device to perform the operation of:
exchanging advertisements between mobility switches across the two distinct mobility domains to provide access across the two distinct mobility domains to the first mobility VLAN while selectively preventing access to other mobility VLANs across the two distinct mobility domains, wherein the first mobile unit retains an Internet Protocol (IP) address assigned to the first mobile unit as part of its membership in the first mobility VLAN in both intra-subnet and inter-subnet roaming scenarios.
20. The non-transitory computer-storage medium of claim 18 , wherein the requests to add the second mobility switch and the second access point device as members of the first mobility VLAN each comprise a first mobility VLAN identifier and a requested action, the non-transitory computer-storage medium having further instructions stored thereon that, when carried out by the processing device, cause the processing device to perform the operation of:
receiving a first response indicating acceptance of the request to add the second mobility switch as a member of the first mobility VLAN, wherein the first response comprises the first mobility VLAN identifier and a result code;
receiving a second response indicating acceptance of the request to add the second access point as a member of the first mobility VLAN, wherein the second response comprises the first mobility VLAN identifier and a second result code; and
adding the second access tunnel as a member of the first mobility VLAN, wherein adding the first mobility tunnel and the second access tunnel as members of the first mobility VLAN enables the first mobile unit to retain an IP address assigned to the first mobile unit as part of membership in the first mobility VLAN, the second mobility switch being part of a different subnet than the first mobility switch.