Dynamic Tunnel Creation for Scalable Distributed WLAN
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current centralized WLAN architectures are not scalable and create bottlenecks due to manual configuration overhead and inefficient bandwidth utilization, especially in larger networks, where data traffic must pass through a single controller.
Innovation Solution
A method that dynamically and automatically creates tunnels between access points and the nearest capable access or aggregation device in a distributed WLAN network, using topology and capability information to optimize data traffic routing and security, eliminating the need for manual configuration and enhancing scalability.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If a centralized WLAN architecture is used, then security control is centralized and manageable, but network scalability is limited and bandwidth utilization is inefficient due to all traffic passing through the controller
Solution Approach 1:
The patent segments the WLAN architecture by distributing tunnel termination capabilities from the centralized controller to multiple access devices (APs, bridges, switches). This segmentation enables scalable network growth without requiring all traffic to pass through a single controller, while the controller retains centralized security policy management. The segmentation resolves the contradiction by allowing both scalability improvement and configuration complexity management.
2Adaptability or versatility
If manual configuration of distributed WLAN architecture is performed, then network topology flexibility is achieved, but configuration overhead increases significantly especially for larger architectures
Solution Approach 1:
The patent implements self-service by enabling access devices to automatically discover and establish tunnels with capable peer devices without manual configuration. The system autonomously determines tunnel endpoints based on capability information exchanged between devices, eliminating the time-consuming manual configuration process while maintaining flexible topology adaptation. This resolves the contradiction between topology flexibility and configuration time.
3Reliability
If tunnels are manually configured in distributed WLAN, then security control is established, but substantial manual configuration changes are required for network topology changes
Solution Approach 1:
The patent applies dynamics by making the tunnel configuration adaptive and automatic. When network topology changes occur, the system dynamically rediscovers capable access devices and automatically reconfigures tunnels without manual intervention. This maintains reliable security control through automated capability verification while dramatically improving configuration maintenance ease by eliminating manual changes.
4Reliability
If all data traffic is communicated through the WLAN controller, then centralized security management is achieved, but network bottlenecks occur and bandwidth utilization is inefficient
Solution Approach 1:
The patent extracts the data traffic forwarding function from the centralized controller and distributes it to access devices. The controller retains only security policy management and control plane functions, while data planes are distributed to capable access devices that terminate tunnels locally. This extraction eliminates network bottlenecks and improves bandwidth utilization while maintaining centralized security management through the controller's policy enforcement.
Data Source
AI summary
A device receives topology and capability information associated with an access point, access devices, and aggregation devices of a wireless local area network (WLAN), and determines, based on the topology and capability information, a nearest capable access device or aggregation device to the access point. The device also provides an instruction that instructs the access point or the nearest capable access device or aggregation device to create a tunnel between the access point and the nearest capable access device or aggregation device. The access point or the nearest capable access device or aggregation device creates the tunnel between the access point and the nearest capable access device or aggregation device based on the instruction.