MACSec Session Recovery Using Keepalive Probes Over WAN

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing network security protocols like MACSec fail to automatically reestablish sessions over wide area networks due to the lack of direct connectivity at the MAC layer, leading to manual intervention being required for reconnection after disruptions.

Innovation Solution

Implementing a keep alive probe mechanism that transmits MACSec HELLO packets over a wide area network to reestablish the MACSec session after detecting a fault, allowing automatic reconnection without manual intervention.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If MACSec session is established over wide area network using VxLAN tunnel, then network security is provided, but automatic reestablishment mechanism is lost when MAC layer connection is disrupted

Engineering Contradiction:

ImproveMACSec session continuityVSAvoidAutomatic reestablishment capability

Core Design Contradiction:

ReliabilityVSExtent of automation

Solution Approach 1:

The patent introduces a keepalive probe mechanism as an intermediary to detect MAC layer connection status and trigger automatic reestablishment of MACSec sessions over wide area networks. The probe acts as a mediator between the disrupted MAC layer connection and the higher-layer MACSec session, enabling automated recovery without manual intervention.

Inventive Principle:

Principle #24Intermediary (Mediator)

Solution Approach 2:

The system implements self-service by automatically detecting connection disruptions through keepalive probes and triggering reestablishment procedures without requiring manual intervention. The MACSec session automatically recovers when the underlying MAC layer connection is restored, making the system self-healing.

Inventive Principle:

Principle #25Self-service

2Reliability

If manual intervention is required to reestablish MACSec session after disruption, then security is maintained, but network downtime increases

Engineering Contradiction:

ImproveNetwork availabilityVSAvoidSession reestablishment time

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent implements preliminary action by continuously sending keepalive probes to detect connection disruptions before they affect data transmission. This early detection enables the system to initiate reestablishment procedures immediately when disruptions occur, minimizing downtime and maintaining high network availability.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The keepalive probe mechanism provides continuous feedback about the status of the MAC layer connection. When the probe detects that the connection is disrupted, it triggers feedback to the MACSec session management, which then automatically initiates reestablishment, creating a closed-loop control system that minimizes downtime.

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS20260040100A1Methods and devices for automatically reestablishing media access control security sessions over wide area networks

Publication Date: 2026.02.05 RUCKUS IP HOLDINGS LLC

AI summary

A first electronic device communicates over a wide area network by establishing a MACSec session with a second electronic device over the wide area network. The MACSec session is thereafter torn down in response to the first electronic device sensing a fault in the MACSec session. Then, one or more keep alive probes are transmitted to the second electronic device over the wide area network. A response to the keep alive probe is thereafter received. The MACSec session may then be automatically reestablished in response to receiving the probe.