Centralized management of access points

Patent metadata

Field	Value
Publication number	US-9674037-B2
Application number	US-201615076966-A
Country	US
Kind code	B2
Filing date	Mar 22, 2016
Priority date	Jul 3, 2013
Publication date	Jun 6, 2017
Grant date	Jun 6, 2017

Abstract

Systems and methods are provided for centralized access, control, and management of APs. According to one embodiment, multiple APs of a private IP network are decoupled from potentially transient IP addresses by assigning a unique identifier to each of the multiple APs by an AC. An AC GUI is presented by the AC to an administrator through which (i) commands are provided by the administrator and (ii) the administrator is provided with access to a first AP of the multiple APs responsive to a command received from the administrator though the AC GUI and based upon the first AP's assigned unique identifier. The first AP is accessed, controlled or debugged by the AC based on the command. The access to the first AP enables a first AP GUI of the first AP through which the network administrator is provided with an ability to issue multiple commands to the first AP.

First claim

What is claimed is:

1. A method comprising:
decoupling, by an Access Controller (AC) that manages a plurality of Access Points (APs) of a private Internet Protocol (IP) network, identities of each AP of a plurality of APs from potentially transient IP addresses of the plurality of APs by assigning a unique identifier to each of the plurality of APs;
presenting, by the AC, an AC graphical user interface (GUI) to a network administrator through which commands are provided by the network administrator and through which the network administrator is provided with access to a first AP of the plurality of APs responsive to a command received from the network administrator though the AC GUI and based upon the first AP's assigned unique identifier; and
accessing, controlling or debugging, by the AC, the first AP based on the command, wherein the access to the first AP enables a first AP GUI of the first AP through which the network administrator is provided with an ability to issue a plurality of commands to the first AP.

2. The method of claim 1 , wherein the first AP GUI of the first AP further permits access to a second AP GUI of a second AP of the plurality of APs through which the network administrator is provided with an ability to issue the plurality of commands to the second AP.

3. The method of claim 1 , wherein a first command of the plurality of commands causes the first AP to return a report indicative of a current status of the first AP.

4. The method of claim 1 , wherein a second command of the plurality of commands causes the first AP to update one or more configuration settings of the first AP.

5. The method of claim 2 , wherein the first AP CLI of the first AP enables access back to the AC GUI.

6. The method of claim 1 , further comprising presenting a graphical representation of relationships among the plurality of APs and of relationships between each of the plurality of APs, if any, with the AC within the AC GUI.

7. The method of claim 6 , wherein the graphical representation is presented in a form of one or more of a tree layout, a mesh layout, a star layout and a ring layout.

8. The method of claim 6 , wherein the graphical representation provides a single view that enables the network administrator to visualize an entire topology represented by the relationships among the plurality of APs and the relationships between each of the plurality of APs, if any, with the AC.

9. The method of claim 8 , wherein the graphical representation displays the assigned unique identifier proximate to representations of each of the plurality of APs.

10. The method of claim 1 , wherein the AC comprises a cloud-based AC and performs said accessing, controlling or debugging of the plurality of APs remotely.

11. A non-transitory computer-readable storage medium embodying a set of instructions, which when executed by one or more processors of an Access Controller (AC) that manages a plurality of Access Points (APs) of a private Internet Protocol (IP) network, cause the one or more processors to perform a method comprising:
decoupling identities of each Access Point (AP) of the plurality of APs from potentially transient IP addresses of the plurality of APs by assigning a unique identifier to each of the plurality of APs;
presenting an AC graphical user interface (GUI) to a network administrator through which commands are provided by the network administrator and through which the network administrator is provided with access to a first AP of the plurality of APs responsive to a command received from the network administrator though the AC GUI and based upon the first AP's assigned unique identifier; and
accessing, controlling or debugging the first AP based on the command, wherein the access to the first AP enables a first AP GUI of the first AP through which the network administrator is provided with an ability to issue a plurality of commands to the first AP.

12. The non-transitory computer-readable storage medium of claim 11 , wherein the first AP GUI of the first AP further permits access to a second AP GUI of a second AP of the plurality of APs through which the network administrator is provided with an ability to issue the plurality of commands to the second AP.

13. The non-transitory computer-readable storage medium of claim 11 , wherein a first command of the plurality of commands causes the first AP to return a report indicative of a current status of the first AP.

14. The non-transitory computer-readable storage medium of claim 11 , wherein a second command of the plurality of commands causes the first AP to update one or more configuration settings of the first AP.

15. The non-transitory computer-readable storage medium of claim 12 , wherein the first AP CLI of the first AP enables access back to the AC GUI.

16. The non-transitory computer-readable storage medium of claim 11 , wherein the method further comprises presenting a graphical representation of relationships among the plurality of APs and of relationships between each of the plurality of APs, if any, with the AC within the AC GUI.

17. The non-transitory computer-readable storage medium of claim 16 , wherein the graphical representation is presented in a form of one or more of a tree layout, a mesh layout, a star layout and a ring layout.

18. The non-transitory computer-readable storage medium of claim 16 , wherein the graphical representation provides a single view that enables the network administrator to visualize an entire topology represented by the relationships among the plurality of APs and the relationships between each of the plurality of APs, if any, with the AC.

19. The non-transitory computer-readable storage medium of claim 18 , wherein the graphical representation displays the assigned unique identifier proximate to representations of each of the plurality of APs.

20. The non-transitory computer-readable storage medium of claim 10 , wherein the AC comprises a cloud-based AC and performs said accessing, controlling or debugging of the plurality of APs remotely.

Assignees

• Fortinet Inc

Inventors

• Gorajala Chandra Sekhar Sumanth
• Thangaraj Selvam

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L41/0803 Primary

  Configuration setting · CPC title

• H04W24/10

  Scheduling measurement reports {; Arrangements for measurement reports} · CPC title

• H04W80/04

  Network layer protocols, e.g. mobile IP [Internet Protocol] · CPC title

• H04W88/08

  Access point devices · CPC title