IP Library Granted Patent US 10,069,647
Granted Patent B2
US 10,069,647 · App. 15/484,092 · Granted Sep 4, 2018

Intelligent bridging of Wi-Fi flows in a software defined network (SDN)

Inventors: Lakshmi Narayana Dronadula (Munnekolala, IN); Ajay Malik (Sunnyvale, CA); Avinash Bhagtani (Pleasanton, CA); Saurabh Agarwal (Bangalore, IN); Nuwas Ponnambathayil (Panathur, IN)
Assignee: Fortinet, Inc.
H04L12/4633H04L12/462H04L12/4625H04L43/062H04L65/60H04W84/12
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 10,069,647
App. No.
15/484,092
Granted
Sep 4, 2018
Kind
B2
Abstract

Wi-Fi flows are intelligently bridged in a software-defined network (SDN) controller of a wireless communication network that centrally coordinates data plane behavior. A default mode tunnels packets received at an access point to the SDN controller for layer 2 routing decisions. A bridging policy concerning bridging of specific types of traffic flows for the wireless communication network is received at the SDN. Data plane traffic flow for each of a plurality of access points distributed around the wireless communication network is centrally monitored. New data streams tunneled to the SDN controller are matched to bridging policies with deep packet inspection. Responsive to matching, the tunnel mode is converted to a bridge mode by sending a rule concerning the new data stream to the access point. As a result, subsequent packets of the new data stream are transferred at the access point without tunneling additional packets to the SDN controller).

Claims (17)

1. A computer-implemented method for intelligent bridging of Wi-Fi flows in a software-defined network (SDN) controller in a wireless communication network by centrally coordinating data plane behavior, the method comprising the steps of:

centrally monitoring data plane traffic flow at each of the plurality of access points distributed around the wireless communication network;

receiving a new data stream at the SDN controller from an access point of the plurality of access points, the new data stream being tunneled from the access point in a default tunneling mode for new data streams at the access point, the new data stream comprising at least one packet sent from a first station to a second station;

matching the new data stream to a bridging policy; and

responsive to the match, converting the tunnel mode to a bridge mode by sending a rule concerning the new data stream to the access point so that subsequent packets of the new data stream are transferred at the access point without tunneling additional packets to the SDN controller.

2. The method of claim 1 , wherein the rule concerning the new data stream is an OpenFlow rule that affects handling of packets at layer 2.

3. The method of claim 1 , wherein converting of tunneling mode to bridge mode occurs at the access point.

4. The method of claim 1 , wherein converting of tunneling mode to bridge mode occurs at a Wi-Fi controller, the Wi-Fi controller receiving packets as forwarded by the access point.

5. The method of claim 1 , wherein matching the bridging policy to the new data stream comprises matching an application or service of the bridging policy to an application or service of the new data stream.

6. The method of claim 1 , wherein matching the bridging policy to the new data stream comprises matching a source address or a destination address of the bridging policy to a source address or a destination address of the new data stream.

7. The method of claim 1 , wherein responsive to not matching the new data stream to the bridging policy, not sending a rule concerning the new data stream to the access point so that subsequent packets of the new data stream continue to be tunneled to the SDN controller.

8. The method of claim 1 , wherein at least two of the plurality of access points implementing the rules are manufactured by different vendors and have distinct operating systems.

9. A non-transitory computer-readable medium storing source code that, when executed by a processor, performs a method for intelligent bridging of Wi-Fi flows in a software-defined network (SDN) controller in a wireless communication network by centrally coordinating data plane behavior, the method comprising the steps of:

centrally monitoring data plane traffic flow at each of the plurality of access points distributed around the wireless communication network;

receiving a new data stream at the SDN controller from an access point of the plurality of access points, the new data stream being tunneled from the access point in a default tunneling mode for new data streams at the access point, the new data stream comprising at least one packet sent from a first station to a second station;

matching the new data stream to a bridging policy; and

responsive to the match, converting the tunnel mode to a bridge mode by sending a rule concerning the new data stream to the access point so that subsequent packets of the new data stream are transferred at the access point without tunneling additional packets to the SDN controller.

Assignments (2)
MERGER Recorded Feb 28, 2018
From: MERU NETWORKS, INC.
To: FORTINET, INC
Reel/Frame 045474/0392 →
MERGER Recorded Jan 23, 2018
From: MERU NETWORKS, INC.
To: FORTINET, LLC
Reel/Frame 045112/0786 →
Continuity (2)
Continuation 14693878 · Apr 23, 2015
Related Publication 20170279637A1 · Sep 28, 2017
Cited By (1)
US 12,556,979