RESTRICTING BROADCAST AND MULTICAST TRAFFIC IN A WIRELESS NETWORK TO A VLAN

摘要

Traffic broadcast to a VLAN is restricted. To do so, a plurality of stations are associated with a BSSID (basic service set identifier). A first VLAN is configured by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key. One or more frames addressed to the first VLAN are received. The one or more frames are encrypted with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames. The one or more encrypted VLAN frames are broadcast to the plurality of stations associated with the BSSID.

主权项

1. A computer-implemented method, in an access point of a wireless network, for restricting broadcast traffic to a VLAN, the method comprising the steps of:
associating a plurality of stations with a BSSID (basic service set identifier); configuring a first VLAN by sending a first group key to each station from the plurality of stations that is a member of the first VLAN, wherein each VLAN is associated with a unique group key; receiving one or more frames addressed to the first VLAN; encrypting the one or more frames with the first group key to prevent stations without the first group key from being able to decrypt the one or more frames; and broadcasting the one or more encrypted VLAN frames to the plurality of stations associated with the BSSI; wherein at least one station from the first VLAN is handed-off to a different access point while retaining membership in the first VLAN.