JP2007158764A - Setup information generation system device, and method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To generate setup information of a group of network connection devices for preventing the occurrence of interruption in a communication path even when there is an incommunicable path in a network. <P>SOLUTION: A path searching part 125 specifies a path for connecting switches 110A and 110B connected to a terminal constituting a VLAN (virtual local area network) on the basis of information about a physical connection state of network connection devices stored in a network topology information database 121 and a connection state by a spanning tree stored in a spanning tree information database 122, and a redundant path searching part 126 specifies redundant paths of the specified path. A VAN setup information generating part 127 generates a VLAN setup information table obtained by accumulating the redundant paths. <P>COPYRIGHT: (C)2007,JPO&INPIT

Description

  The present invention relates to a technique for generating information related to settings of network connection devices when communication is performed in a group of terminals connected to a network.

  In order to flexibly configure a network in accordance with the usage form of a communication terminal, a VLAN (Virtual Local Area Network) that sets a virtual group on the network is used.

  In addition, when there is a loop in the connection path in the network, in order to prevent data from circulating in the loop, a specific port of the network connection device constituting the loop is shifted to a state incapable of communication. Therefore, a technique is adopted in which the network is made into a tree structure (spanning tree) in which no loop exists (see, for example, Patent Document 1).

Japanese Patent Laying-Open No. 2005-086460

  When there is a port that cannot communicate in the network, such as when a spanning tree is set up in the network, it is impossible to connect because the communication at a specific port is impossible. If a configuration for performing communication in a group such as VLAN using a certain port is set, communication is blocked at the port where connection is impossible.

  Therefore, an object of the present invention is to generate setting information of a network connection device for preventing a communication path from being blocked even when there is a port in which communication is impossible in the network.

  In order to solve the above problems, the present invention specifies whether or not communication is possible for each port of a network connection device, and excludes network connection devices connected to a port where communication is disabled. Then, setting information of the network connection device when performing communication with a group of terminals connected to the network is generated.

  For example, the present invention provides a setting information generation system comprising a network connection device that forms a network, and a computer that generates setting information of the network connection device when performing communication in a group of terminals connected to the network connection device. The network connection device includes connection information for identifying the network connection device connected to each port of the own network connection device, and a port that is configured to prevent communication in the own network connection device. Status information for specifying, the computer specifies a port from which communication is disabled based on the status information acquired from the network connection device, and a network connected to the port Connected devices from network connected devices A route search unit for identifying a connection route between network connection devices connected to terminals belonging to the group, excluding the network connection device connected to the port, identified from the obtained connection information; Setting information having identification information for identifying a network connection device included in a connection path and information for specifying a port used in the network connection device when performing communication in the group is generated from the connection information. And a setting information generation unit.

  As described above, according to the present invention, setting information for a group of network connection devices when performing communication in a network group except for the network connection device connected to a port incapable of communication is generated. Therefore, even when a spanning tree is set in the network, it is possible to generate setting information for setting a group of network connection devices so that the communication path is not blocked.

  FIG. 1 is a schematic diagram of a VLAN setting information generation system 100 according to the first embodiment of the present invention.

  The VLAN setting information generation system 100 includes switches 110A and 110B as network connection devices and a VLAN setting information generation server 120. The VLAN setting information generation server 120 is connected to a LAN 140 formed by a plurality of switches 110A and 110B, and a plurality of terminals 141 are connected to the LAN 140.

  The switches 110A and 110B include a database unit 111 and a control unit 112, as illustrated.

  Here, although not shown, each of the switches 110A and 110B is provided with a plurality of ports, and in each of these ports, it is determined that communication is permitted or not for each port. To do. It should be noted that whether each port can communicate or not is determined by a spanning tree as a conventional technique.

  The database unit 111 stores management information of the LAN 140. In the present embodiment, as this management information, at least the IP addresses of the own switches 110A and 110B, the port numbers of the respective ports, and the devices connected to the respective ports (in the present embodiment, the switches 110A and 110B and the terminal 141). Alternatively, a MAC address as identification information of the VLAN setting information generation server 120) and information on whether communication is possible or not for each port are stored.

  The control unit 112 performs control for grouping a plurality of ports (not shown) formed in the switches 110A and 110B and causing each group to function as an independent LAN. Since this is a control normally performed by a conventional VLAN-compatible switch, description thereof is omitted.

  In addition, the control unit 112 transmits information stored in the database unit 111 to the VLAN setting information generation server 120 in response to a request from the VLAN setting information generation server 120 described later.

  The switches 110A and 110B configured as described above can be realized by a VLAN-compatible switching hub. As will be described later, in this embodiment, since the network 140 is managed using SNMP (Simple Network Management Protocol), the control unit 112 can perform the function of an agent in SNMP. In addition, the database unit 111 can perform a function of MIB (Management Information Base).

  The VLAN setting information generation server 120 includes a network topology information database 121, a spanning tree information database 122, a network information collection unit 123, an input information analysis unit 124, a route search unit 125, a redundant route search unit 126, a VLAN A setting information generation unit 127, a time measurement unit 128, a storage unit 129, a transmission / reception unit 130, an input unit 131, and a display unit 132 are provided.

  The network topology information database 121 stores a network topology information table 121a (see FIG. 2) that is physical connection information of the switches 110A and 110B.

  As shown in FIG. 2, the network topology information table 121a is provided with a device name input field 121b, an update time input field 121c, and a connection information field 121d. It has a port number input field 121e, a connection destination input field 121f, and a connection destination type input field 121g.

  In the device name input field 121b, ID information of the switches 110A and 110B to be created in the network topology information table 121a (in this embodiment, IP addresses of the switches 110A and 110B) is input.

  In the update time input field 121c, the date and time when the network topology information table 121a is updated (created) based on the time information measured by the time measuring unit 128 described later is input.

  In the port number input field 121e, the port numbers of the switches 110A and 110B specified in the device name input field 121b are input.

  In the connection destination input field 121f, ID information (in this embodiment, the IP address of the device) of the device connected to the port specified by the port number input in the port number input column 121e is input.

  In the connection destination type input field 121f, the type of the device specified in the connection destination input field 121e is input. In this embodiment, when the connection destination device is the VLAN setting information generation server 120 or the terminal 141, “terminal” is input in this field, and when the connection destination device is the switches 110A and 110B, Although “device” is entered in this field, the present invention is not limited to this mode.

  The network topology information table 121a is created for each of the switches 110A and 110B.

  As will be described later, the information input in these fields includes information collected by the network information collection unit 123 from the database unit 111 of each of the switches 110A and 110B and an identification information table 123a (stored in the storage unit 129). And the information stored in (see FIG. 4).

  The spanning tree information database 122 stores a spanning tree information table 122a (see FIG. 3) that is information related to the spanning tree of each of the switches 110A and 110B.

  As shown in FIG. 3, the spanning tree information table 122a is provided with a device name input field 122b, an update time input field 122c, and a communication state information field 122d, and a communication state information field 122d. Has a port number input field 122e and a status input field 122f.

  In the device name input field 122b, ID information of the switches 110A and 110B to be created in the spanning tree information table 122a (in this embodiment, IP addresses of the switches 110A and 110B) is input.

  In the update time input field 122c, the date and time when the spanning tree information table 122a is updated (created) is input based on the time information measured by the time measuring unit 128 described later.

  In the port number input field 122d, the port numbers of the switches 110A and 110B specified in the device name input field 122b are input.

  The status input field 122e identifies whether the port specified by the port number in the port number input field 122d is enabled, disabled, or not connected in the spanning tree setting. Enter information. In the present embodiment, “FWD” is input when communication is possible, “BLK” is input when communication is not possible, and “−” is input when connection is not established. However, the present invention is not limited to such a mode as long as these states can be identified.

  Note that the spanning tree information table 122a is created for each of the switches 110A and 110B.

  Further, as will be described later, information to be entered in these fields is acquired by the network information collection unit 123 collecting information stored in the database unit 111 of each switch 110A, 110B.

  The network information collection unit 123 acquires necessary information from the identification information table 123a stored in the storage unit 129, which will be described later, and the switches 110A and 110B that form the network 140, and obtains the network topology information table 121a, A spanning tree information table 122a is generated and stored in the network topology information database 121 and the spanning tree information database 122, respectively.

  Specifically, first, the network information collection unit 123 acquires the MAC address of each switch from the identification information table 123 a stored in the storage unit 129. Then, the transmission of the IP address of each switch 110A, 110B, the port number of each port in each switch 110A, 110B, the MAC address of the device connected to each port, and communication enable / disable information for each port The request is transmitted to each of the switches 110A and 110B via the transmission / reception unit 130 described later.

  Then, these pieces of information sent from the switches 110A and 110B are received via a transmitting / receiving unit 130 described later, and the network topology information database 121 and the spanning tree information database 122 are used with the IP addresses of the switches 110A and 110B as keys. When there is a table 121a, 122a in which the corresponding IP address is set in the device name input fields 121b, 122b, the respective input fields are updated with the received information, and the updated date and time are input. Input in columns 121c and 122c.

  In the connection destination input field 121f of the network topology information table 121a, the IP address corresponding to the MAC address of the device connected to each port is extracted and input from the identification information table 123a, and the connection destination type input field 121f is input. For this, the type corresponding to the MAC address of the device connected to each port is extracted from the identification information table 123a and input.

  On the other hand, if there is no table 121a, 122a in which the corresponding IP address is set in the device name input fields 121b, 122b, a network topology information table 121a and a spanning tree information table 122a are created, and the received information is stored in a predetermined format. The date and time when these tables 121a and 122a are created are input to the update time input fields 121c and 122c and stored in the respective databases.

  As shown in FIG. 4, the identification information table 123a includes an IP address input field 123b, a MAC address input field 123c, and a type input field 123d.

  In the IP address input field 123b, the IP address of the device connected to the LAN 140 is input.

  In the MAC address input field 123c, the MAC address of the LAN connection device used by the device connected to the LAN 140 is input.

  In the type input field 123d, when the device specified in the IP address input field 123b and the MAC address input field 123c is the VLAN setting information generation server 120 or the terminal 141, “terminal” is input in this field. In addition, when the devices are the switches 110A and 110B, “device” is input in this column, but the present invention is not limited to such a mode.

  For the identification information table 123a, necessary information is acquired from network management software and the necessary information is input in advance.

  The input information analysis unit 124 uses the network device information that identifies the IP addresses of the switches 110A and 110B to which the terminals 141A and 141B to be included in the VLAN or the terminals 141A and 141B to be included in the VLAN are directly connected, as shown in FIG. The information table 124a is generated and stored in the storage unit 129 described later.

  Specifically, each IP address is read from the network device information, and the network topology information database 121 is searched using the read IP address as a key. Then, the network topology information table 121a in which the read IP address is input to the connection destination input field 121f is specified, and the connection destination type input field 121g corresponding to the read IP address is referred to, thereby setting the network device information. It is confirmed whether the device specified by the specified IP address is a “terminal” or a “device”.

  When the device specified by the IP address is “terminal”, the IP address input in the device name input field 121b of the network topology information table 121a is input to the input information table 124a. ", The IP address read from the network device information is input to the input information table 124a.

  Here, for the network device information, the user of the VLAN setting information generation server 120 inputs the IP address of the switch 110A, 110B directly connected to the terminal 141A, 141B to be included in the VLAN or the terminal 141A, 141B to be included in the VLAN. What is necessary is just to produce | generate by designating via the part 131 or the display part 132, and what about the data format will be what can identify the IP address of these terminals 141A and 141B or the switches 110A and 110B May be in any form.

  As shown in FIG. 5, the input information table 124a includes identification information of the switches 110A and 110B to which the terminals 141A and 141B to be included in the VLAN are directly connected (in this embodiment, the IP addresses of the switches 110A and 110B). ) In each input field 124b.

  The route search unit 125 reads the IP addresses of the switches 110A and 110B set in the input information table 124a stored in the storage unit 129, which will be described later, and duplicates a pair of two IP addresses combined by the read IP address. Create everything to avoid. For example, a pair with another IP address is generated for each IP address, and a pair of IP addresses is created by deleting a pair of overlapping IP addresses from the generated pair.

  Then, one of these IP addresses in the pair is set as the start point, the other is the end point, and the path of the switches 110A and 110B from the start point to the end point is connected to a port that cannot communicate with the spanning tree. Search is performed via the switches 110A and 110B other than the switches 110A and 110B, and the path information is collected in the path information table 125a shown in FIG.

  The specific generation process of the route information table 125a will be described later with reference to the flowchart shown in FIG.

  As shown in FIG. 6, the route information table 125a generated by the route search unit 125 includes a route name input column 125b, a start point input column 125c, an end point input column 125d, and a route information column 125e. The path information column 125e has a device name input column 125f and a port number input column 125g.

  Identification information for identifying a route is input to the route name input field 125b.

  In the start point input field 125c, the IP addresses of the switches 110A and 110B that are set as the start points are input.

  In the end point input field 125d, the IP addresses of the switches 110A and 110B that are set as end points are input.

  The device name input field 125f and the port number input field 125g are connected to the IP addresses of the switches 110A and 110B that are the starting points in the top line of this field and the switches 110A and 110B that are input in the line immediately below this field. The port numbers of the output ports are input in the respective columns, and the IPs of the switches 110A and 110B having the input ports connected to the output ports of the switches 110A and 110B specified in the row immediately below in the respective rows The address and the port number of the input port are input in the respective columns, the IP address of the switch 110A, 110B is input in the line immediately below, and the output port connected to the switch 110A, 110B is input in the next line. Repeat the input of the port number in each column, and the switch 110 which is the end point in the lowest row And input switch 110A which is input to the IP address and the row immediately above its 110B, and a port number of the input port connected to the 110B to the respective column.

  That is, the path information column 125e includes a device name input column 125e and a port number input column 125f, and switches 110A and 110B as end points from the IP addresses of the switches 110A and 110B as start points and the port numbers of output ports. Up to the IP address and the port number of the input port until the IP address of the connected switch 110A, 110B and the port number of the input port are input, and the IP address of the switch 110A, 110B and the output port The rows in which the port numbers are input are alternately formed in the order in which they are connected.

  The route information table 125a is created for each set of the switches 110A and 110B as the start points and the switches 110A and 110B as the end points, that is, for each route, and the created route information table 125a is stored in the storage unit 129.

  The redundant route search unit 126 generates a link information table 126a (see FIG. 7) that uses a pair of directly connected switches 110A and 110B as links from the route information table 125a generated by the route search unit 125. In addition, a redundant path information table 126i (see FIG. 8) that specifies the detour in each link is generated.

  Specific generation processing of the link information table 126a and the redundant path information table 126i will be described later with reference to the flowchart shown in FIG.

  As shown in FIG. 7, the link information table 126a generated by the redundant route search unit 126 includes a route name input column 126b and a link information column 126c. It has a link name input field 126d, a start device name input field 126e, an output port number input field 126f, an end device name input field 126g, and an input port number input field 126h.

  In the path name input field 126b, the identification information input in the path name input field 125b of the path information table 125a that is the creation target of the link information table 126a is input.

  Identification information for identifying each link is entered in the link name input field 126d.

  Here, as described above, the links are the IP addresses of the switches 110A and 110B and the port numbers of the output ports forming the connection paths, and the ports of the input ports of the switches 110A and 110B connected to the output ports. It is a set of a number and an IP address.

  In the start device name input field 126e, the IP addresses of the switches 110A and 110B that are the output sources of the links are input.

  In the output port number input column 126f, the port numbers of the output ports of the switches 110A and 110B that are the output sources of the links are input.

  In the end point device name input field 126g, the IP addresses of the switches 110A and 110B that are input destinations of the links are input.

  In the input port number input field h, the port numbers of the input ports of the switches 110A and 110B that are input destinations of the links are input.

  The generated link information table 126a is stored in the storage unit 129.

  The redundant route information table 126i generated by the redundant route search unit 126 includes a redundant route name input field 126j, a target route name input field 126k, and a target link name input field 126l as shown in FIG. The redundant path information column 126m has a device name input column 126n and a port number input column 126o.

  In the redundant path name input field 126j, identification information for identifying the searched redundant path is input.

  In the target route name input column 126k, the identification information input to the route name input column 125b of the route information table 125a from which the link to be searched is extracted is input.

  In the target link name input field 126l, the link name of the link to be searched (identification information input to the link name input field 126c of the link information table 126a) is input.

  In the device name input field 126n, the IP addresses of the switches 110A and 110B of the redundant path (detour path) are input.

  In the port number input field 126o, the port number of the output port or input port of the switches 110A and 110B of the redundant route (bypass route) is entered.

  Here, the redundant path information column 126m of the redundant path information table 126i first displays the IP addresses of the switches 110A and 110B that are the starting points of the links that are the search targets of the redundant path and the port numbers of the output ports in the top row. The IP address of the switch 110A, 110B connected to the output port and the port number of the input port are input to the line immediately below, and the IP address of the switch 110A, 110B is input to the line immediately below And the port number of the output port, and the IP address of the switches 110A and 110B connected to the output port and the port number of the input port are repeatedly input in the line immediately below, thereby ending the link. Until the IP addresses of the switches 110A and 110B and the port numbers of the input ports are reached. To identify the route of.

  Note that the redundant route search unit 126 searches for redundant routes by a preset number for each link, and generates a redundant route information table 126h for each searched redundant route. Here, it is desirable that the number of redundant routes to be searched can be appropriately changed by the user of the VLAN setting information generation server 120 via the input unit 131 and the display unit 132 described later.

  The generated redundant path information table 126i is stored in the storage unit 129 described later.

  The VLAN setting information generation unit 127 generates the VLAN setting information table 127a (see FIG. 9) from the data input to the path information table 125a and the redundant path information table 126i stored in the storage unit 129.

  As shown in FIG. 9, the VLAN setting information table 127a is provided with a VLAN name input column 127b and a VLAN setting information column 127c. The VLAN setting information column 127c includes a device name input column 127d. , A port number input field 127e and a VLAN tag information input field 127f.

  Identification information for identifying the designed VLAN is entered in the VLAN name input field 127b.

  In the device name input column 127d, the IP addresses of the switches 110A and 110B input to the device name input column 125f of the route information table 125a and the device name input column 126n of the redundant route information table 126i are input.

  The port number input column 127d corresponds to the port number input in the port number input column 125f of the route information table 125a and the port number input column 126o of the redundant route information table 126i with the IP address input in the device name input column 127c. Type in the line you want.

  In the VLAN tag information input field 127e, when a VLAN tag is set for the port specified in the port number input field 127d, identification information indicating that fact (in the present embodiment, “tagged”), a VLAN tag is set. If not, identification information (in this embodiment, “untagged”) indicating that is input. Here, using the IP address specified in the device name input field 127c as a key, the network topology information table 121a in which this IP address is input in the device name input field 121b is searched from the network topology information database 121, and the corresponding network is searched. In the topology information table 121a, when “device” is input in the connection destination type input field 121f corresponding to the port of the port number specified in the port number input field 127d, “tagged” is input and “terminal” ”Is entered,“ untagged ”is entered.

  The device name input field 127c and the port number input field 127d are preferably input so that the switches 110A and 110B are continuous.

  The VLAN setting information table 127a generated in this way is stored in the storage unit 129 described later.

  Note that the VLAN setting information table 127a generated in this way is configured by setting the VLAN according to the information of “tagged” or “untagged” for each switch and port shown in this table, so that the physical setting of the switch is performed. A VLAN can be easily constructed in consideration of the connection status and the connection status of the spanning tree.

  The time measurement unit 128 measures the date and time using the date and time acquired from the RTC (Real Time Clock) when the VLAN setting information generation server 120 is activated as an initial value.

  As described above, the storage unit 129 includes the identification information table 123a, the input information table 124a, the path information table 125a, the link information table 126a, the redundant path information table 126i, and the VLAN setting information table 127a. Remember.

  The transmission / reception unit 130 transmits / receives data to / from the switches 110A and 110B.

  The input unit 131 is an input device such as a mouse or a keyboard.

  The display unit 132 is a display device such as a display.

  The VLAN setting information generation server 120 configured as described above can be realized by a so-called computer. Specifically, the network information collection unit 123, the input information analysis unit 124, the route search unit 125, the redundant route search unit 126, the VLAN setting information generation unit 127, and the time measurement unit 128 are programs stored in the auxiliary storage device. Is executed by a CPU (Central Process Unit), and the network topology information database 121 and the spanning tree information database 122 can be realized by storing necessary information in an auxiliary storage device such as a hard disk. The storage unit 129 can be realized by storing necessary information in an auxiliary storage device such as a main memory or a hard disk, and the transmission / reception unit 130 can be realized by a NIC (Network Interface Card).

  In the present embodiment, since the network 140 is managed using SNMP, the network information collection unit 123 can perform the function of a manager in SNMP.

  The overall processing flow of the VLAN setting information generation system 100 configured as described above will be described with reference to the flowchart shown in FIG.

  First, the network information collection unit 123 of the VLAN setting information generation server 120 acquires necessary information from the identification information table 123a and the switches 110A and 110B stored in the storage unit 129, and acquires the network topology information database 121 and spanning. Register in the tree information database 122 (S150).

  Next, the input information analysis unit 124 of the VLAN setting information generation server 120 analyzes and inputs the network device information that identifies the switch 110A, 110B directly connected to the terminal that wants to configure the VLAN or the terminal that wants to configure the VLAN. The information table 124a is generated (S151).

  Next, the route search unit 125 of the VLAN setting information generation server 120 creates a set of IP addresses of the switches 110A and 110B that are the start and end points for creating a route from the input information table 124a, and the network topology information database 121 and spanning Necessary information is searched from the tree information database 122 to generate the route information table 125a (S152). The processing in this step will be described in detail using the flowchart shown in FIG.

  Next, the redundant route search unit 126 of the VLAN setting information generation server 120 generates a link information table 126a based on the route information table 125a, searches for a redundant route for each link, and generates a redundant route table 126h ( S153). The processing at this step will be described in detail using the flowchart shown in FIG.

  Next, the VLAN setting information table 127a is generated based on the route information table 125a, the redundant route information table 126i, and the network topology information table 121a (S154).

  FIG. 11 is a flowchart of the generation process of the route information table 125a.

  First, the route search unit 125 of the VLAN setting information generation server 120 reads the input information table 124a from the storage unit 129 and selects two switches 110A and 110B selected from the switches 110A and 110B input to the input information table 124a. Are generated so as not to overlap (S160). For example, a combination of switches is generated by generating a set of switches in which another switch corresponds to one switch, and deleting duplicates from the generated set of switches.

  Next, one unsearched group is selected from the generated groups, one switch 110A, 110B is set as the start point, the other switch 110A, 110B is set as the end point (S161), and the switch 110A, 110B as the start point is searched. The target switch is set (S162).

  Then, the hop count h from the switches 110A and 110B that are the starting points is initialized to “1” (S163).

  Next, the network topology information table 121a of the search target switch is read from the network topology information database 121, and the port connected to the terminal is specified by referring to the connection destination type input field 121g of the network topology information table 121a. (S164).

  Then, the spanning tree information table 122a of the search target switch is read from the spanning tree information database 122, and the port where communication is disabled is specified by referring to the status input field 122f of the spanning tree information table 122a (S165). ).

  Further, the network topology information table 121a of the switch connected to the search target switch is read from the network topology information database 121, and by referring to the device name input field 121b and the port number input field 121e of the network topology information table 121a, The port connected to the search target switch is searched, and then the spanning tree information table 122a is read from the spanning tree information database 122 to determine whether or not communication of the port connected to the search target switch is disabled. Check. If communication with the port connected to the search target switch is disabled, the network topology information table 121a of the search target switch is read from the network topology information database 121, and the device name of the network topology information table 121a is read. By referring to the input field 121b and the port number input field 121e, the port connected to the switch that cannot communicate is specified (S166).

  Next, the switches 110A and 110B connected to the ports other than the ports specified in step S164, step S165, and step S166 are changed to search target switches (S167).

  Then, it is confirmed whether the number of hops from the starting switches 110A and 110B to the search target switch is “h”, and when it is not “h” (S168), the processing of steps S164 to S167 is performed. repeat.

  On the other hand, when the number of hops from the start point switches 110A and 110B to the search target switch is “h” (S168), it is determined whether or not the search target switch matches the end point switches 110A and 110B. Determination is made (S169).

  If the search target switch does not match the end switches 110A and 110B (S169), "1" is added to the hop count h (S170), and the processing from step S164 to step S169 is repeated.

  On the other hand, when the search target switch matches the end point switches 110A and 110B (S169), the route from the start point switches 110A and 110B to the end point switches 110A and 110B is route information. The information table 125a is generated (S171).

  Then, it is confirmed whether or not the route has been searched for in all the groups. If the route has not been searched for in all the groups (S172), the processing from step S161 to step S171 is repeated.

  FIG. 12 is a flowchart of a process for creating the redundant path information table 126i.

  First, the redundant route search unit 126 of the VLAN setting information generation server 120 refers to the route information column 125e of the route information table 125a and sets each pair of IP addresses and port numbers of the switches 110A and 110B connected to each other. A link information table 126a as a link is generated (S180).

  Here, as shown in FIG. 6, the route information column 125e of the route information table 125a includes the IP address of the switches 110A and 110B and the port number of the input port or output port from the upper row. Since they are alternately inputted in the order of connection in the lower row, a pair of IP address and port number specified by a pair of two rows in order from the top becomes each link.

  Next, one unsearched link is selected from the link information table 126a, and the switches 110A and 110B as the starting points are set as search target switches (S181).

  Then, the number of redundant route searches for each link is set to n (S182).

  Further, the number of hops from the switches 110A and 110B as the starting points is set to “1” which is an initial value (S183).

  Next, the port connected to the end point switch is identified by referring to the connection destination input field 121f of the network topology information table 121a of the search target switch (S184).

  Further, the port connected to the terminal is identified by referring to the connection destination type 121g in the network topology information table 121a of the search target switch (S185).

  Then, by referring to the port number input field 121e and the connection destination input field 121f of the network topology information table 121a of the search target switch, the switch 110A that is input to the ports other than the ports specified in Step S183 and Step S184, 110B is changed to a search target switch (S186).

  Next, it is confirmed whether the number of hops from the starting switches 110A and 110B to the search target switch is “h”, and when it is not “h” (S186), the processing of steps S184 to S186 is performed. repeat.

  On the other hand, when the number of hops from the starting switches 110A and 110B to the search target switch is “h” (S187), one unconfirmed switch is selected from the search target switches (S188) and selected. It is determined whether or not the search target switch matches the end switches 110A and 110B (S189).

  When the selected search target switch matches the end switches 110A and 110B (S188), the redundant path information table 126i is generated (S190).

  Then, it is confirmed whether or not the generated redundant path information table 126i has been generated, which is the number set for each link (S191).

  Here, when the generated redundant path information table 126i has not been generated, which is the number set for each link (S191), or when the search target switch does not match the end switch 110A, 110B (S189) It is confirmed whether there is an unconfirmed search target switch. If there is an unconfirmed search target switch (S192), the process returns to step S188 to continue the process, and whether there is an unconfirmed search target switch. If there is no unconfirmed search target switch (S192), “1” is added to the hop count h (S193), and the processing is continued from step S185.

  On the other hand, when the generated redundant path information table 126i has been generated by n which is the set number for each link (S191), it is confirmed whether or not the redundant path has been searched for all the links. If the redundant route is not searched for by the link (S194), the processing from step S181 to step S193 is repeated.

  In the embodiment described above, the switches 110A and 110B having a plurality of ports are used. However, the present invention is not limited to such a mode. For example, by causing a computer to execute predetermined software, virtual switching is performed in the computer. The present invention can also be applied to a case where a VLAN is configured using such a switch by providing the above switch.

  Furthermore, regarding the network device information in the present embodiment, the IP of the switches 110A and 110B to which the user of the VLAN setting information generation server 120 wants to be included in the VLAN 141 or the terminals 141A and 141B that are desired to be included in the VLAN are directly connected. Although it is generated by designating an address via the input unit 131 or the display unit 132, the present invention is not limited to such a mode. For example, similar information is specified in another computer or other software May be used.

  In addition, in this embodiment, the VLAN setting information table 127a is formed including the port number of the switch directly connected to the terminal 141 (the port number in which “untagged” is input in the VLAN tag information input field 127e). However, it is also possible to generate a VLAN setting information table from which such port numbers are deleted. By generating such a VLAN setting information table, it is possible to change the VLAN to which the terminal connected to this port belongs by changing the setting of the port specified by such a port number.

  FIG. 13 is a schematic diagram of a VLAN setting information generation system 200 according to the second embodiment of the present invention.

  As illustrated, the VLAN setting information generation system 200 includes switches 210A and 210B and a VLAN setting information generation server 220. As in the first embodiment, the VLAN setting information generation server 220 includes a plurality of VLAN setting information generation servers 220. Are connected to a LAN 140 formed by the switch switches 210A and 210B, and a plurality of terminals 141 are connected to the LAN 140. Note that a VLAN is already configured in the switches 210A and 210B in the present embodiment.

  The switches 210A and 210B include a database unit 211 and a control unit 212, as illustrated.

  Although not shown, like the first embodiment, each of the switches 210A and 210B is provided with a plurality of ports, and a spanning tree as a prior art is assigned to each of these ports. Suppose that communication is enabled or disabled for each port.

  The database unit 211 in the present embodiment stores the same information as in the first embodiment, and stores information related to the VLAN assigned to each port.

  Here, the VLAN-related information stored in the database unit 211 includes at least VLAN identification information for identifying the set VLAN, the port number of the port where the VLAN is set, and the port where the VLAN is set. Has a MAC address which is identification information for identifying the terminal 141 or the switches 210A and 210B to which is connected.

  The control unit 212 according to the present embodiment performs the same function as that of the first embodiment. In addition, in response to a request from the VLAN setting information generation server 220 described later, information on the VLAN stored in the database unit 211 is displayed as VLAN setting information. Transmit to the generation server 120.

  The switches 210A and 210B configured as described above can be realized by a VLAN-compatible switching hub, as in the first embodiment. Also in this embodiment, since the network 140 is managed using SNMP, the control unit 212 can perform the function of an agent in SNMP. It is supposed to be able to fulfill its functions.

  The VLAN setting information generation server 220 in this embodiment includes a network topology information database 121, a spanning tree information database 122, a network information collection unit 123, an input information analysis unit 124, a route search unit 125, and a redundant route search unit. 126, VLAN setting information generation unit 127, time measurement unit 130, storage unit 229, transmission / reception unit 130, input unit 131, display unit 132, VLAN information acquisition unit 223, duplication information generation unit 234, It is equipped with.

  Here, in this embodiment, compared to the first embodiment, a VLAN information acquisition unit 223 and a duplicate information generation unit 234 are provided, and the data generated by these is also stored in the storage unit 229. Since is the same as that of the first embodiment, matters relating to these changes will be described below.

  The VLAN information acquisition unit 223 acquires VLAN information from each of the switches 210A and 210B forming the network 140, creates an existing VLAN setting information table, and stores it in the storage unit 229.

  Specifically, first, the MAC addresses of the switches 210A and 210B are acquired from the identification information table 123a stored in the storage unit 229. Then, a transmission request for information regarding the VLAN is transmitted to each of the switches 210A and 210B via the transmission / reception unit 130, and information regarding the VLAN returned from each of the switches 210A and 210B is received via the transmission / reception unit 130.

  Then, based on the received VLAN information and the information stored in the identification information table 123a stored in the storage unit 229, the existing table set in the same table format as the VLAN setting information table 127a shown in FIG. A VLAN setting information table is generated and stored in the storage unit 229.

  In addition, the VLAN information acquisition unit 223 extracts the IP address input in the device name input field of the line in which “untagged” is input in the VLAN tag information input field of the generated existing VLAN setting information table. A second input information table is generated.

  The second input information table has the same format as the input information table in the first embodiment, so that the route search unit 125, the redundant route search unit 126, and the VLAN setting information generation unit 127 The VLAN setting information table can be created from the input information table.

  The VLAN setting information table generated by the same processing as that of the first embodiment from the above-described second input information table is used as the second VLAN setting information table and stored in the storage unit 229.

  The duplicate information generation unit 234 compares the VLAN setting information column of the existing VLAN setting information table stored in the storage unit 229 with the VLAN setting information column of the second VLAN setting information table, and compares the device name input column and port number. A line in which the same value is input in the input field and the VLAN tag information input field is specified, and information on the specified line is extracted to generate the VLAN setting information duplication table 234a shown in FIG.

  As shown in FIG. 14, the VLAN setting information duplication table 234a is provided with a VLAN name input column 234b and a VLAN configuration duplication information column 234c, and the VLAN configuration duplication information column 234c is a device name input column. It has a field 234d, a port number input field 234e, and a VLAN tag information input field 234f.

  In the VLAN name input field 234b, identification information for identifying the existing VLAN whose information has been acquired by the VLAN information acquisition unit 233 is input.

  In the device name input field 234d, the port number input field 234e, and the VLAN tag information input field 234f, the duplication information generation unit 234 uses the VLAN setting information field in the existing VLAN setting information table and the VLAN setting information in the second VLAN setting information table. Information set in the device name input column, port number input column, and VLAN tag information input column in the row where the same value is input in the column is input.

  Then, the duplication information generation unit 234 generates an existing VLAN configuration diagram [see FIG. 15A] in which switches connected from the existing VLAN setting information table stored in the storage unit 229 are connected by a line, Further, an automatic design VLAN configuration diagram [see FIG. 15B] in which switches connected from the second VLAN setting information table are connected by a line can be generated and displayed on the display unit 132 on one screen. Like that. In the automatic design VLAN configuration diagram as shown in FIG. 15B, the paths of the switches 210A and 210B set in the VLAN configuration duplication information table are indicated by bold lines, so that the existing VLAN and the second VLAN The difference from the VLAN setting information generated from the input information can be easily grasped.

  The storage unit 229 in the present embodiment stores the same information as in the first embodiment, and also stores the existing VLAN setting information table and the second VLAN setting information table as described above.

  The VLAN setting information generation server 220 configured as described above can be realized by a so-called computer as in the first embodiment. Specifically, the network information collection unit 123, the input information analysis unit 124, the route search unit 125, the redundant route search unit 126, the VLAN setting information generation unit 127, and the time measurement unit 128 include a VLAN information acquisition unit 233 and duplicate information generation. The unit 234 can be realized by executing a program stored in an auxiliary storage device by a CPU (Central Process Unit). The network topology information database 121 and the spanning tree information database 122 are stored in an auxiliary storage device such as a hard disk. It can be realized by storing necessary information, the storage unit 229 can be realized by storing necessary information in an auxiliary storage device such as a main memory or a hard disk, and the transmission / reception unit 130 is provided with a NIC (Network Interface). Can be realized by e Card).

  Also in this embodiment, since the network 140 is managed using SNMP, the network information collection unit 123 and the VLAN information acquisition unit 233 can function as a manager in SNMP. .

  The overall processing flow of the VLAN setting information generation system 200 configured as described above will be described with reference to the flowchart shown in FIG.

  First, the VLAN information acquisition unit 233 of the VLAN setting information generation server 220 acquires information on existing VLANs from the switches 210A and 210B, and generates an existing VLAN setting information table (S250).

  Then, from the generated existing VLAN setting information table, a second input information table composed of the IP address of the switch directly connected to the terminal 141 with the existing VLAN is generated (S251).

  Next, the route searching unit 125 of the VLAN setting information generation server 220 creates a pair of IP addresses of the switches 210A and 210B that are the starting point and the ending point for creating a route from the second input information table, and the network topology information database 121. Then, necessary information is retrieved from the spanning tree information database 122 to generate a route information table (S252).

  Next, the redundant route search unit 126 of the VLAN setting information generation server 220 generates a link information table based on the route information table, searches for a redundant route for each link, and generates a redundant route information table (S253). .

  Next, a second VLAN setting information table is generated based on the path information table, redundant path information table, and network topology information table (S254).

  The duplication information generation unit 234 of the VLAN setting information generation server 220 collects information duplicated in these tables based on the existing VLAN setting information table and the second VLAN setting information table. Is generated (S255).

  Then, the duplication information generation unit 234 of the VLAN setting information generation server 220 creates a comparison diagram as shown in FIG. 15 and displays it on the display unit 132 (S256).

  In the second embodiment, the VLAN setting information table 127a can also be generated by the procedure shown in FIG.

  In the embodiment described above, the information of the switches 110 and 210 is acquired using SNMP. However, the present invention is not limited to this mode. For example, necessary information is acquired from the switches 110 and 210 using Telnet. It is also possible to do. That is, a command for logging in to the switches 110 and 210 from the VLAN setting information generation servers 120 and 220 with Telnet and displaying the information to be acquired, for example, “show vlan” when acquiring VLAN information, and spanning tree information are acquired. In this case, necessary information can be acquired by inputting “show spanning-tree”.

  Further, the processing of the VLAN setting information generation servers 120 and 220 in the embodiment described above can be appropriately distributed among a plurality of servers. For example, the network topology information database 121 or the spanning tree information database 122 can be stored in a database server, or another server can be in charge of processing performed by the network information collection unit 123 or the VLAN information acquisition unit 233. It is.

1 is a schematic diagram of a VLAN setting information generation system 100 according to the first embodiment. Schematic of the network topology information table 121a. Schematic of the spanning tree information table 122a. Schematic of the identification information table 123a. Schematic of the input information table 124a. Schematic diagram of the route information table 125a. Schematic of the link information table 126a. Schematic diagram of redundant path information table 126h. Schematic of the VLAN setting information table 127a. 4 is a flowchart showing an overall processing flow of the VLAN setting information generation system 100. The flowchart of the creation process of a route information table. The flowchart of a creation process of a redundant route information table. The schematic diagram of the VLAN setting information generation system 200 which is 2nd embodiment. Schematic of the VLAN setting information duplication table 234a. Schematic which shows the comparative example of the existing VLAN block diagram and an automatic design VLAN block diagram. 4 is a flowchart showing the overall processing flow of the VLAN setting information generation system 200.

Explanation of symbols

100, 200 VLAN configuration information generation system 110, 210 Switch 120, 220 VLAN configuration information generation server 121 Network topology information database 122 Spanning tree information database 123 Network information collection unit 124 Input information analysis unit 125 Route search unit 126 Redundant route search unit 127 VLAN setting information generation unit 233 VLAN information acquisition unit 234 Duplicate information generation unit

Claims (10)

A network connection device that forms a network, and a computer that generates setting information of the network connection device when communication is performed in a group of terminals connected to the network connection device.
The network connection device is used for specifying connection information for specifying a network connection device connected to each port of the own network connection device, and a port that is configured to prevent communication in the own network connection device. Status information,
The computer
A port that cannot be communicated is specified from the status information acquired from the network connection device, and a network connection device that is connected to the port is specified from the connection information acquired from the network connection device. A route search unit that searches for a connection route between network connection devices to which terminals belonging to the group are connected, excluding network connection devices connected to the port;
Configuration information having identification information for identifying a network connection device included in the connection path and information for specifying a port used in the network connection device when performing communication in the group is generated from the connection information. A setting information generation unit to perform,
A setting information generation system characterized by The setting information generation system according to claim 1,
The status information is for identifying a port that cannot be communicated by a spanning tree set in the local network connection device,
A setting information generation system characterized by The setting information generation system according to claim 1,
Further comprising a redundant route search unit for extracting a set of network connection devices connected to each other in the connection route and searching for a redundant route for each set;
The setting information generation unit includes identification information for identifying the network connection device included in the redundant route, and information for specifying a port used in the network connection device when performing communication on the redundant route. Further generating setting information,
A setting information generation system characterized by The setting information generation system according to claim 1,
The network connection device further stores group specifying information for specifying a network connection device connected to a port used when communication is performed in a group of terminals connected to the network,
The computer
From the group identification information acquired from the network connection device, identification information for identifying the network connection device used when performing communication in the group, and the network connection when performing communication in the group A group of identification information for identifying a network connection device and information for identifying a port used in the network connection device is generated by generating existing setting information including information for specifying a port used by the device. It is determined whether or not it is included in both the information and the setting information, and identification information for identifying the network connection device included in both of them and the port used in the network connection device are specified. Further comprising a duplication information generation unit for generating duplication information having
A setting information generation system characterized by A setting information generation device that generates setting information of the network connection device when performing communication in a group of terminals connected to a network formed by the network connection device,
Connection information for specifying the network connection device connected to each port of each network connection device forming the network, and a situation for specifying a port that cannot be communicated with in each network connection device A storage unit for storing information;
Identify the port that is not allowed to communicate from the status information, identify the network connection device connected to the port from the connection information, except for the network connection device connected to the port, Search for a connection route between network connection devices to which terminals belonging to a group are connected, identification information for identifying the network connection device included in the connection route, and the network when performing communication in the group Comprising an arithmetic processing unit for generating setting information having information for identifying a port used in the connected device;
A setting information generation device characterized by the above. The setting information generation device according to claim 5,
The status information is for identifying a port that cannot be communicated by a spanning tree set in the local network connection device,
A setting information generation device characterized by the above. The setting information generation device according to claim 5,
The arithmetic processing unit extracts a set of network connection devices connected to each other in the connection route, searches for a redundant route for each set, and identifies the network connection device included in the redundant route. Generating setting information further comprising identification information for identifying and information for identifying a port to be used in the network connection device when performing communication on the redundant path,
A setting information generation device characterized by the above. A setting information generation method for generating setting information of the network connection device when performing communication in a group of terminals connected to a network formed by the network connection device,
A connection information acquisition process for acquiring connection information for identifying a network connection device connected to each port of each network connection device forming the network;
Status information acquisition process for acquiring status information for identifying a port that is not allowed to communicate with each network connection device;
Identify the port that is not allowed to communicate from the status information, identify the network connection device connected to the port from the connection information, except for the network connection device connected to the port, A connection route search process for searching for a connection route between network connection devices to which terminals belonging to the group are connected;
Setting information for generating setting information having identification information for identifying the network connection device included in the connection path, and information for specifying a port used in the network connection device when performing communication in the group Providing a generation process;
A method for generating setting information. The setting information generation method according to claim 8,
The status information acquired in the status information acquisition process specifies a port that is not allowed to communicate by a spanning tree set in the local network connection device,
A method for generating setting information. The setting information generation method according to claim 8,
Further comprising a redundant route search step of extracting a pair of network connection devices connected to each other in the connection route and searching for a redundant route for each set;
In the setting information generation process, identification information for identifying the network connection device included in the redundant route, and information for specifying a port used in the network connection device when performing communication on the redundant route, Furthermore, it is a process of generating setting information that has,
A method for generating setting information.

Images