Patent ID: 8675559

Claim:
An access point device having a processor for a wireless LAN for isolating an end station from a plurality of end stations to support segregation of network traffic between the end station and the plurality of end stations, the access point device serving as a common access point for communication in the wireless LAN, the access point device configured to: implement a location update protocol for updating forwarding tables of bridges that connect together other access points; receive a request from said end station that is an association request or a probe request; and process said request by: determining for said request a basic service set (BSS) that is unknown to said access point device at the time of receipt of said request by said access point device; receiving at least one parameter defining said BSS; establishing said BSS based at least on said at least one parameter; establishing a security association with said end station within said BSS wherein the security association includes at least two keys, one key for encryption and another key for computing an authentication code; and sending a response to said end station that includes a BSSID of said established BSS: wherein said access point device switches said end station to a Class-3 virtual BSS by responding to said station's association request with an association response MMPDU whose source address (Address 2 Field) or BSSID (Address 3 field) is a Class-3 virtual BSSID for that virtual BSS.