CN100403697C - Network Management Method - Google Patents

Abstract

The present invention discloses a network management method. A gateway system is used for performing the centralized management of network devices. The standard configuration files of the network device are saved in the gateway system. When the network devices access the gateway system, or the gateway system inquires the network devices, network device detect whether the changes of the operating configuration files occur or not; if the changes occur, the network devices send notices the gateway system, and the gateway system receives the notices and downloads the saved standard configuration files to the network devices. Thus, the network devices carry out configuration recovery according to the received standard configuration files. The present invention can effectively monitor and recover the configurations of the network devices and ensure the safe operation of the network devices.

Description

Network Management Method

technical field

The invention relates to the technical field of network communication, in particular to a network management method.

Background technique

With the continuous development of the network, the number of operators or enterprise network equipment has increased sharply, and the physical distribution of the equipment is also very scattered. The service deployment, configuration modification, and policy monitoring of a large number of branch equipment in the network are all costly. Centralized Management, through centralized configuration and management of the network by the server, the workload of network management, maintenance, and upgrade can be concentrated from one plane to the server, greatly reducing the workload of maintenance personnel.

In network management applications, some regulatory departments hope to centrally monitor the operating status and business development of branch devices under their jurisdiction through a certain network management system. Access to illegal websites is restricted, and the supervisory department can centrally and timely monitor and manage the configuration modification and business deployment of branches in the jurisdiction area through the network management software at the headquarters, which will greatly improve management efficiency and greatly save management costs.

For example, BIMS (Branch Intelligent Management System) is used to realize centralized and effective management and monitoring of DHCP (Dynamic Host Configuration Protocol) or network devices located behind NAT (Network Address Translation) gateways.

BIMS manages devices in a passive manner.

BIMS is divided into two parts, the device side and the BIMS management center side, that is, the network management side. The two parties use the HTTP (Hypertext Transfer Protocol) protocol for communication, that is, the network management acts as the HTTP Server (HTTP server), and the device acts as the HTTP Client (HTTP client). , relying on the equipment to actively access the BIMS periodically to realize the management of the equipment. When the device actively accesses the network management, it reports the current configuration file of the device and the characteristic information of the device software, and the network management judges whether the device needs to be updated.

BIMS uses ID to identify devices, that is, the device side needs to configure a fixed and unique ID for each device, instead of depending on the IP address of the device, so the device has a public network or private network IP address or IP address often Any change will not affect the identification of the device by the network management system.

BIMS can monitor changes in equipment configuration and can automatically restore to the standard configuration specified by the administrator. The implementation process is shown in Figure 1:

BIMS specifies a configuration file for a certain device as the standard configuration of the device, that is, the baseline configuration. When the device accesses each time, it reads the FLASH (flash memory), searches for the startup configuration file, then reads the startup configuration file from the FLASH, sends a message carrying the startup configuration file information to the BIMS, and uploads the startup configuration file to the BIMS , BIMS compares the configuration file with the baseline configuration file. If they are consistent, BIMS does not need to download the startup configuration file again; if they are inconsistent, it needs to download the startup configuration file, as shown in the figure.

In the existing technology, BIMS only supports the monitoring of changes in the startup configuration file. If the user modifies the device configuration without performing a storage operation, the BIMS cannot find out; moreover, if the running configuration file changes instead of the startup configuration file BIMS cannot obtain the modified operating configuration and monitor it, so the security of network devices cannot be guaranteed. In addition, this method needs to transmit the entire configuration file to the network management system, which consumes a lot of system resources.

Contents of the invention

The purpose of the present invention is to provide a network management method to overcome the disadvantage that the prior art cannot fully guarantee the operation safety of network equipment, further improve network management efficiency, and ensure the safe operation of network equipment.

For this reason, the present invention provides following technical scheme:

A network management method, which centrally manages network devices through a network management system, said method comprising the steps of:

saving the standard configuration file of the network device on the network management system;

The network device detects whether its operating configuration file has changed at moment one;

If there is a change, the network device notifies the network management system;

After receiving the notification, the network management system will download the saved standard configuration file to the network device;

The network device performs configuration recovery based on the received standard configuration file.

Optionally, the moment one is when the network device accesses the network management system, and the network device triggers the access to the network management system in the following manner:

The timed access period expires or is triggered immediately through the command line of the network device.

Optionally, the first moment is when the network management system queries the network equipment, and the network management system triggers the query of the network equipment in the following manner:

The scheduled query period expires or is triggered immediately through the command line of the network management system.

The step of detecting whether the operating configuration file has been changed by the network device includes:

The network device saves the running configuration file information at startup as the baseline running configuration file information of the network device locally;

During the running process, it is determined whether the running configuration file has changed by comparing its current running configuration file information with the reference running configuration file information.

Optionally, the network device compares its current running configuration file information with full-text information or summary information of the baseline running configuration file information.

Preferably, the network device notifies the network management system that its operating configuration file has changed through specific parameters.

Optionally, the method further includes:

When the network device notifies the network management system, it sends its current running configuration file information to the network management system;

Optionally, the network management system records the alarm information after receiving the notification.

A network management method, which centrally manages network devices through a network management system, said method comprising the steps of:

saving the standard configuration file of the network device on the network management system;

When the network device accesses the network management system or the network management system queries the network device, the network device transmits the summary and size of its startup configuration file to the network management system;

The network management system judges whether the startup configuration file of the network device has changed according to the summary and the size of the startup configuration file and the standard configuration file saved therein;

If it is judged that the startup configuration file of the network device has changed, the saved standard configuration file will be downloaded to the network device;

The network device performs configuration recovery based on the received standard configuration file.

Preferably, the method further comprises:

When the network device accesses the network management system for the first time or the network management system queries the network device for the first time, the network device reads the startup configuration file from the flash memory FLASH, and saves the summary information of the startup configuration file in the memory of the device.

Preferably, the method further comprises:

The network device verifies the received standard configuration file;

Delete its original startup configuration file after the verification is passed, and save the standard configuration file in the flash memory FLASH, and notify the network management system file verification to pass;

After receiving the notification from the network device, the network management system responds to the network device with a file confirmation message;

After the network device receives the file confirmation message sent by the network management system, it restarts and restores the configuration.

A network management method, which centrally manages network devices through a network management system, said method comprising the steps of:

saving the standard configuration file of the network device on the network management system;

The network management system monitors the startup configuration file of the network device, and the network device monitors its own running configuration file;

When the network management system detects that the startup configuration file of the network device has changed or when the network device detects that its own running configuration file has changed, the network management system will download the standard configuration file saved by itself to the network device;

The network device performs configuration recovery based on the received standard configuration file.

The step of monitoring the startup configuration file of the network equipment by the network management system includes:

When the network device accesses the network management system or the network management system queries the network device, the network device transmits the summary and size of its startup configuration file to the network management system;

The network management system judges whether the startup configuration file of the network device has changed according to the summary and size of the startup configuration file and the standard configuration file saved by itself.

The step of monitoring the startup configuration file of the network device by the network management system also includes:

When the network device accesses the network management system for the first time or the network management system queries the network device for the first time, the network device reads the startup configuration file from the flash memory FLASH, and saves the summary information of the startup configuration file in the memory of the device.

The step of monitoring the running configuration file by the network device includes:

The network device saves the running configuration file information at startup as the baseline running configuration file information of the network device locally;

determining whether its running configuration file has changed by comparing its current running configuration file information with the baseline running configuration file information during the running process;

If the network device detects that its operating configuration file has changed, it will notify the network management system.

It can be seen from the above technical solutions provided by the present invention that the present invention centrally manages network devices through the network management system, and reserves standard configuration files on the network management system. For the startup configuration file on the device side, it is not necessary to upload all the information of the startup configuration file every time, only the summary information of the startup configuration file is sent to the network management system, so that the network management system compares the summary information with the standard configuration file retained , to monitor the device startup configuration file, thereby effectively reducing the consumption of device and system resources. For small network devices, it can effectively shorten the interval of accessing the server and optimize its business performance.

In the present invention, when the network device is started, the network device itself obtains its operation configuration file information as the reference buildrun information of the device. When the device regularly accesses the network management system or the network management system queries network devices, if the current buildrun information is found to be inconsistent with the device's baseline buildrun information, the network management system will be notified, and the network management system will record the alarm information. In this way, once the operating configuration of the equipment is changed, the network management system can obtain the changed configuration in time, which can be used as the basis for the supervision department to manage the branches. If it is further necessary to restore the buildrun information of the device, the network system will send the reserved standard configuration file to the device, so that the network device can restore the configuration according to the configuration file specified by the network management system.

By comprehensively utilizing the monitoring method of the device startup configuration file and the operation configuration file in the present invention, the device does not need to read the FLASH multiple times to complete the monitoring of the startup configuration file, and only access the network management system or the network management system for the first time after the device starts. When the system queries the network device, it reads the FLASH, reads the startup configuration file information, and saves the summary information of the startup configuration file in the memory of the device, and does not repeat such operations when other access times arrive, only the device itself Detect whether its running configuration file changes, and notify the network management system if there is a change. In this way, the supervision of the device configuration files by the network management system is ensured, and the safe operation of the network devices is ensured.

Description of drawings

Figure 1 is the monitoring process of the existing BIMS system for network equipment;

Fig. 2 is the implementation flowchart of the first embodiment of the method of the present invention;

Fig. 3 is the implementation flowchart of the second embodiment of the method of the present invention;

Fig. 4 is the implementation flowchart of the third embodiment of the method of the present invention;

Fig. 5 is the monitoring process of the startup configuration file of the device by the network management side in the third embodiment of the present invention;

Fig. 6 is a flow of monitoring its running configuration file at the device side in the third embodiment of the present invention.

Detailed ways

The core of the invention is to centrally manage the network equipment through the network management system, and reserve standard configuration files on the network management system. When the network device accesses the network management system or the network management system queries the network device, the network device reads the startup configuration file information in the flash memory FLASH, calculates and saves the summary and size of the startup configuration file, and sends it to the network management system, and the network management system will It is compared with the standard configuration file, and if they are inconsistent, the network management system downloads the standard configuration file, so that the network equipment performs configuration recovery according to the configuration file specified by the network management system. As for the running configuration file of the network device, the device itself detects, and when the network device is started, the network device obtains its running configuration file information as the baseline buildrun information of the device. When the device accesses the network management system or the network management system queries network devices, if the current buildrun information is found to be inconsistent with the device's baseline buildrun information, the network management system will be notified.

Furthermore, the network management system can comprehensively utilize the supervision of the device startup configuration file and the network device's monitoring of its operation configuration file to ensure the safe operation of the device.

In order to enable those skilled in the art to better understand the solution of the present invention, the present invention will be further described in detail below in conjunction with the accompanying drawings and embodiments.

With reference to Fig. 2, Fig. 2 is the implementation process of the first embodiment of the method of the present invention, in this embodiment, the startup configuration file of network equipment is supervised by the network management system, once the startup configuration file of discovery equipment changes, then to The device downloads the standard configuration file, forces the device to restart, and restores the configuration according to the configuration file specified by the network management system.

The process includes the following steps:

Step 201: Save the standard configuration file of the network device on the network management system.

Step 202: When the network device accesses the network management system or the network management system queries the network device, the network device transmits the digest (for example, MD5 digest) and size of its startup configuration file to the network management system.

This embodiment can be adapted to network management systems with various working modes. For example, the network management system can query the network equipment, the timing query period expires or trigger the network management system to query the network equipment immediately through the network management system command line; The device actively accesses the network management system, and the timed access period expires or the network device's access to the network management system is triggered immediately through the command line of the network device.

When a network device accesses the network management system or the network management system queries the network device, the network device needs to obtain its startup configuration file information from the FLASH, and calculate the summary and size of the startup configuration file based on the information.

Step 203: The network management system judges whether the startup configuration file of the network device has changed according to the summary and size of the startup configuration file received and the standard configuration file saved therein.

If not changed, go to step 204: end this monitoring process.

If changed, go to step 205: the network management system downloads the saved standard configuration file to the network device.

Step 206: The network device restores the configuration according to the received standard configuration file.

In order to further ensure the accuracy of the standard configuration file received by the network device, the standard configuration file received by the network device can be verified first, such as length, CRC (cyclic redundancy check), etc., to confirm the standard After the configuration file is correct, delete the original startup configuration file, and save the standard configuration file to FLASH. At this point, the network device can be restarted immediately, and the configuration can be restored according to the standard configuration file. The network device can also notify the network management system that the file has passed the verification after the standard configuration file is verified correctly. After receiving the notification from the network device, the network management system responds to the network device with a file confirmation message. After that, reboot and restore the configuration.

In addition, after the network management system detects that the startup configuration file of the network device has changed, it can also record alarm information and notify the administrator that the configuration of the device has changed. In the present invention, the network device only needs to send the summary and size information of the startup configuration file to the network management system, and does not need to send the content of the entire startup configuration file to the network management system, thereby effectively reducing the time spent on interaction between the network device and the network management system. resource consumption, so that it can further optimize business performance. When the network management system detects that the startup configuration file of the device has changed through the summary information uploaded by the network device, it can also require the device to upload the entire content of the startup configuration file, and the network management system saves the information and keeps it as evidence.

With reference to Fig. 3, Fig. 3 is the implementation process of the second embodiment of the method of the present invention, in this embodiment, monitors its operation configuration file by network device itself, once the operation configuration file of the device is found to be changed, then notify the network management system, the network management system downloads the standard configuration file to the device, forces the device to restart, and restores the configuration according to the configuration file specified by the network management system.

The process includes the following steps:

Step 301: Save the standard configuration file of the network device on the network management system.

Step 302: When the network device accesses the network management system or the network management system queries the network device, the network device detects its current running configuration file.

Likewise, this embodiment can be adapted to network management systems with different working modes. For example, the network management system can query the network equipment, the timing query period expires or the network management system can instantly trigger the network management system to query the network equipment through the command line of the network management system. ; The network device actively accesses the network management system, the timed access period expires or the network device's access to the network management system is triggered immediately through the network device command line.

In order to realize the monitoring of the running configuration file of the network device, when the network device is started, the running configuration file information is obtained from its RAM (Random Access Memory), and the information is saved locally as its reference running configuration file. During the operation of the network device, when it needs to interact with the network management system, compare its current operating configuration file information with the saved baseline operating configuration file information, so as to determine whether its operating configuration file has changed. When making the comparison, you can compare the current run profile information with the full-text or summary information of the baseline run profile information.

Step 303: the network device notifies the network management system of the detection result. An identification parameter indicating whether the running configuration file has changed is carried in the notification message.

In order to make it easier for the network management system to record changes in network device configuration files and provide effective information for system management, when a network device detects that its operating configuration file has changed, it will send a notification of the detection result to the network management system and send its current configuration file information to the network management system. to the network management system. Of course, the network equipment can also be sent according to the requirements of the network management system. After the network management system receives the notification, if it finds that the running configuration file of the network device has changed, it can record the alarm information at this time. If the notification contains the current operating configuration file of the network device, the network management system also needs to record the configuration file information so as to keep it as evidence.

Step 304: After receiving the notification, the network management system determines whether the operation configuration file of the network device has changed according to the identification parameter.

If there is no change, go to step 305: end this monitoring process.

If it has changed, go to step 306: the network management system downloads the saved standard configuration file to the network device.

Step 307: The network device restores the configuration according to the received standard configuration file.

Similarly, in order to ensure the accuracy of the standard configuration file received by the network device, the standard configuration file received by the network device can be verified first, such as length, CRC (cyclic redundancy check), etc., to confirm the After the standard configuration file is correct, delete the original startup configuration file, and save the standard configuration file to FLASH. At this point, the network device can be restarted immediately, and the configuration can be restored according to the standard configuration file. The network device can also notify the network management system that the file has passed the verification after the standard configuration file is verified correctly. After receiving the notification from the network device, the network management system responds to the network device with a file confirmation message. After that, reboot and restore the configuration.

With reference to Fig. 4, Fig. 4 is the implementation process of the third embodiment of the method of the present invention, in this embodiment, the network management system monitors the startup configuration file of the network device, and simultaneously monitors its operation configuration file by the network device itself, Once it is found that the startup configuration file or running configuration file of the device has changed, the network management system will download the standard configuration file to the device, force the device to restart, and restore the configuration according to the configuration file specified by the network management system.

The process includes the following steps:

Step 401: Save the standard configuration file of the network device on the network management system.

Step 402: The network management system monitors the startup configuration file of the network device, and the network device monitors its running configuration file.

In actual application, the network management system can specify whether to monitor the device startup configuration file or the device operation configuration file. Of course, it can also specify to monitor the device startup configuration file and the operation configuration file at the same time.

Step 403: When the network management system detects that the startup configuration file of the network device has changed or when the network device detects that its running configuration file has changed, the network management system downloads the saved standard configuration file to the network device.

The network management system can check whether it has changed according to the full text or abstract of the device startup configuration file. Likewise, network devices can be checked for changes to their operating configuration files based on their full text or abstracts. Different working modes can be pre-configured on the network management system, and the equipment can be configured through the network management system. When the network device detects that its operating configuration file has changed, it can send the changed configuration to the network management system, so that the network management system can record the configuration change of the device; the device can also only send a change notification to the network management system.

Step 404: The network device restores the configuration according to the received standard configuration file.

In order to ensure the correctness of the standard configuration file received by the device, it can also be verified and saved after receiving the configuration file. Then restore the original configuration of the device according to the instructions of the network management system or restart immediately.

The monitoring process of the startup configuration file of the device on the network management side is shown in Figure 5:

1. Specify a standard configuration file for network equipment on the network management system, and set the current configuration information function of the monitoring equipment.

2. Read the FLASH after the device is started, obtain the startup configuration file, and save the summary and size of the file.

3. When the network management system queries the network device for the first time or the network device actively accesses the network management system for the first time, the network device sends a message carrying the summary and size information of the startup configuration file to the network management system.

4. The network management system saves the startup configuration file information uploaded by the device.

5. The network management system checks whether the startup configuration file of the device has changed according to the standard configuration file saved by itself. If there is a change, go to step 6; otherwise, end this monitoring process.

6. The network management system issues a standard configuration file to the device.

7. The network device verifies and saves the obtained configuration file.

8. The network device notifies the network management system that the file verification has passed.

9. The network management system responds to the device with a file confirmation message.

10. After the network device receives the confirmation message from the network management system, it restarts and restores the configuration.

The monitoring process of the running configuration file of the device on the device side is shown in Figure 6:

1. Specify a standard configuration file for network equipment on the network management system, and set the current configuration information function of the monitoring equipment.

2. After the device starts, read RAM, obtain and save the running configuration file information.

3. During the operation of the device, when the network management system queries the network device or the network device actively accesses the network management system, the device checks whether its current configuration information is the same as the reference buildrun information. The current profile information can be checked in full text or with its summary information. If they are the same, you only need to report the inspection result to the network management system; if they are different, go to step 4.

4. According to the instructions of the network management system, the device sends a message carrying buildrun information to the network management system. Of course, in a specific application, it is also possible to only notify the network system of the detection result through a specific parameter.

5. If the network device sends buildrun information to the network management system, the network management system saves the information.

6. The network management system issues a standard configuration file to the device.

7. The network device verifies and saves the obtained configuration file.

8. The network device notifies the network management system that the file verification has passed.

9. The network management system responds to the device with a file confirmation message.

10. After the network device receives the confirmation message from the network management system, it restarts and restores the configuration.

The method of the present invention can be applied to various network management systems and network devices, such as BIMS and remote configuration servers. In the system where the network management actively manages the equipment, the network equipment and the network management system can communicate through the SNMP (Simple Network Management Protocol) protocol; in the system where the network management passively manages the equipment, the network equipment and the network management system can communicate Communication takes place via the HTTP (Hypertext Transfer Protocol) protocol.

Utilizing the present invention, the network management system can centrally monitor the running status, business development and other situations of the branch equipment under its jurisdiction in real time. Whether it is the startup configuration file or the running configuration file of the device, the network management system can better monitor it. If the branch device modifies its running configuration, for example, revoking some restrictions on accessing illegal websites, changing certain Some services, etc., so that the network management system can find out in time, and can obtain the configuration information after the device changes, as the basis for the supervision department to manage the branch. At the same time, the device configuration can be automatically restored according to the configuration file specified by the network management system.

While the invention has been described by way of example, those skilled in the art will appreciate that there are many variations and changes to the invention without departing from the spirit of the invention, and it is intended that the appended claims cover such variations and changes without departing from the spirit of the invention.

Claims (15)

1. a network management method, the network equipment is carried out centralized management by network management system, it is characterized in that, described method comprises steps: saving the standard configuration file of the network device on the network management system; The network device detects whether its operating configuration file has changed at moment one; If there is a change, the network device notifies the network management system; After receiving the notification, the network management system will download the saved standard configuration file to the network device; The network device performs configuration recovery based on the received standard configuration file. 2. The method according to claim 1, wherein the moment one is when the network equipment accesses the network management system, the network equipment triggers the access to the network management system in the following manner: The timed access period expires or is triggered immediately through the command line of the network device. 3. method according to claim 1, is characterized in that, when described moment one is that network management system inquires about network equipment, network management system triggers the inquiry to network equipment by the following manner: The scheduled query period expires or is triggered immediately through the command line of the network management system. 4. The method according to claim 1, wherein the step of detecting whether the operating configuration file has changed by the network device comprises: The network device saves the running configuration file information at startup as the baseline running configuration file information of the network device locally; During the running process, it is determined whether the running configuration file has changed by comparing its current running configuration file information with the reference running configuration file information. 5. The method of claim 4, wherein, The network device compares its current operating profile information with the full-text or summary information of the baseline operating profile information. 6. The method of claim 1, wherein, A network device notifies the network management system that its operating configuration file has changed through specific parameters. 7. The method according to claim 1 or 6, wherein the method further comprises: When the network device notifies the network management system, it sends its current running configuration file information to the network management system. 8. The method according to claim 1 or 6, wherein the method further comprises: After receiving the notification, the network management system records the alarm information. 9. A network management method, which centrally manages network equipment through a network management system, characterized in that said method comprises the steps of: saving the standard configuration file of the network device on the network management system; When the network device accesses the network management system or the network management system queries the network device, the network device transmits the summary and size of its startup configuration file to the network management system; The network management system judges whether the startup configuration file of the network device has changed according to the summary and the size of the startup configuration file and the standard configuration file saved therein; If it is judged that the startup configuration file of the network device has changed, the saved standard configuration file will be downloaded to the network device; The network device performs configuration recovery based on the received standard configuration file. 10. The method of claim 9, further comprising: When the network device accesses the network management system for the first time or the network management system queries the network device for the first time, the network device reads the startup configuration file from the flash memory FLASH, and saves the summary information of the startup configuration file in the memory of the device. 11. The method according to claim 9 or 10, wherein the method further comprises: The network device verifies the received standard configuration file; Delete its original startup configuration file after the verification is passed, and save the standard configuration file in the flash memory FLASH, and notify the network management system file verification to pass; After receiving the notification from the network device, the network management system responds to the network device with a file confirmation message; After the network device receives the file confirmation message sent by the network management system, it restarts and restores the configuration. 12. A network management method, which centrally manages network equipment through a network management system, characterized in that the method comprises the steps of: saving the standard configuration file of the network device on the network management system; The network management system monitors the startup configuration file of the network device, and the network device monitors its own running configuration file; When the network management system detects that the startup configuration file of the network device has changed or when the network device detects that its own running configuration file has changed, the network management system will download the standard configuration file saved by itself to the network device; The network device performs configuration recovery based on the received standard configuration file. 13. The method according to claim 12, wherein the step of monitoring the startup configuration file of the network device by the network management system comprises: When the network device accesses the network management system or the network management system queries the network device, the network device transmits the summary and size of its startup configuration file to the network management system; The network management system judges whether the startup configuration file of the network device has changed according to the summary and size of the startup configuration file and the standard configuration file saved by itself. 14. The method according to claim 13, wherein the step of monitoring the startup configuration file of the network device by the network management system further comprises: When the network device accesses the network management system for the first time or the network management system queries the network device for the first time, the network device reads the startup configuration file from the flash memory FLASH, and saves the summary information of the startup configuration file in the memory of the device. 15. The method according to any one of claims 12 to 14, wherein the step of monitoring the operating configuration file by the network device comprises: The network device saves the running configuration file information at startup as the baseline running configuration file information of the network device locally; determining whether its running configuration file has changed by comparing its current running configuration file information with the baseline running configuration file information during the running process; If the network device detects that its operating configuration file has changed, it will notify the network management system.

Images