Patent ID: 8612752

Claim:
A method for processing a packet received by a first mesh-enabled access point (MAP), the method comprising: receiving a packet at the first mesh-enabled access point; reading a source address of the packet and a destination address of the packet; determining, based on the source address of the packet, whether the packet is from a known mesh node that the first MAP has previously discovered; wherein if the packet is from a known mesh node: determining whether a mesh forwarding flag is set in the packet, wherein the mesh forwarding flag indicates that the packet is destined for a mesh portal having a wired connection to an external network, and is to be forwarded to a next hop MAP without performing decryption/re-encryption processing on the packet; skipping decryption/re-encryption processing on the packet when the mesh forwarding flag is set in the packet; and forwarding the packet to the next hop MAP towards the mesh portal, and if the packet is not from a known mesh node: determining, based on the destination address, whether the packet is destined for the mesh portal; whereupon retrieving an encryption key corresponding to the mesh portal when the mesh forwarding flag is not set in the packet; encrypting the packet using the encryption key corresponding to the mesh portal; setting a mesh forwarding flag in the packet; and forwarding the packet to the next hop MAP towards the mesh portal.