JP2020155938A - Network control device, system, method, and program - Google Patents

Abstract

To provide a network control device etc., capable of contributing to facilitation of recovery from trouble and normalcy confirmation in a centralized control type network.SOLUTION: A network control device is configured to: acquire static information and first dynamic information from network apparatus, and then save them as history information; calculate first topology information based upon the first dynamic information and saves it as history information; acquire second dynamic information from a new replacing network apparatus; calculate second topology information based upon the second dynamic information; compare the first topology information and second topology information with each other to specify that a network apparatus being actuated is a new network apparatus; set the static information, saved as the history information, to the new network apparatus; and compare the static information and second dynamic information set to the new network apparatus with the static information and first dynamic information saved as the history information to determine whether the network is normal.SELECTED DRAWING: Figure 4

Description

The present invention relates to network control devices, systems, methods, and programs.

In a normal network, when replacing a failed network device (also called a switch), log in to the network device after connecting a new network device and set the config (config file), or communication is performed after the setting is completed. It is necessary to check the operation to see if it can be done normally. Only those who have skills related to network devices can set the config and check the operation, and if those who have the skills cannot respond immediately, there is a problem that it takes a long time to restore the network.

On the other hand, in recent years, SDN (Software-Defined Networking) technology, which separates data transfer and network control and centrally controls network devices using a single software, has become widespread. In SDN, a plurality of network devices are centrally managed by a network control device (also referred to as a controller). As a result, the network configuration and settings can be flexibly and dynamically changed, network management becomes easy, and the burden on the network administrator can be reduced.

There is OpenFlow as one technology to realize SDN. OpenFlow is composed of an OpenFlow switch and an OpenFlow controller that controls the OpenFlow switch. The OpenFlow switch does not require the user to log in to the network device and reconfigure it, but it must be a network device that supports OpenFlow. In addition, since the usage of the OpenFlow switch is significantly different from that of other network devices, users who use other network devices have a high threshold for replacing the network device. Therefore, a method with little change from the usage of other network devices is desired.

Here, as a method of reducing the burden on the network administrator when the network device is replaced, there are the methods of Patent Documents 1 to 3.

Patent Document 1 discloses a method of automatically setting backup data acquired from a network device before replacement after replacement of the network device.

Further, in Patent Document 2, the parameter setting value in the normal operating state and the Up / Down state of the interface are registered in advance in the network device as self-check item data, and are actually used periodically when the power is turned on and during the operation. A method of checking whether there is a difference between the value of each operating parameter and the pre-registered value is disclosed.

Further, Patent Document 3 discloses a method of comparing with information possessed by a network management system after exchanging network devices.

Japanese Unexamined Patent Publication No. 2016-1196669 Japanese Unexamined Patent Publication No. 2010-287971 Japanese Unexamined Patent Publication No. 2000-163344

The following analysis is provided by the inventor of the present application.

However, the methods of Patent Documents 1 to 3 have the following problems.

In the method of Patent Document 1, the normality of the network is not confirmed after the backup data is set in the network device after the exchange.

In the method of Patent Document 2, since the parameters at the normal time are stored inside the network device, when the network device fails and is replaced, the same settings as the parameters of the network device before the replacement can be restored. Can not. Further, the method of Patent Document 2 is intended only for detecting an abnormality in an operating network device, and is not intended for restoring the settings of a network device.

In the method of Patent Document 3, a predetermined reconnection process is performed with the network management system after the unit is replaced, but the network management system does not operate until the network device is specified.

A main object of the present invention is to provide network control devices, systems, methods, and programs that can contribute to facilitating failure recovery and normality confirmation in a centralized management network.

The network control device according to the first viewpoint is a network control device that manages at least one network device that transfers packets based on static information. The network control device acquires static information and first dynamic information from at least one of the network devices and saves them as history information, and calculates first topology information based on the first dynamic information. The process of saving as history information, the process of acquiring at least the second dynamic information from the new network device exchanged from the network device, and the process of calculating the second topology information based on the second dynamic information. And the process of identifying that the activated network device is the new network device by comparing the first topology information and the second topology information, and the static stored as the history information. The process of setting information in the new network device, the static information and the second dynamic information set in the new network device, and the static information and the first one stored as the history information. The process of determining the normality of the network is performed by comparing the dynamic information with the dynamic information.

The network management system according to the second viewpoint includes the network control device according to the first viewpoint and at least one network device communicably connected to the network control device.

The network management method according to the third viewpoint is a network management method for managing at least one network device that performs packet transfer based on static information by using a network control device. The network management method includes a step of acquiring static information and a first dynamic information from at least one of the network devices and storing them as history information, and calculating a first topology information based on the first dynamic information. A step of saving as history information, a step of acquiring at least a second dynamic information from a new network device exchanged from the network device, and a step of calculating a second topology information based on the second dynamic information. And the step of identifying that the activated network device is the new network device by comparing the first topology information with the second topology information, and the static stored as the history information. The step of setting information in the new network device, the static information and the second dynamic information set in the new network device, and the static information and the first one stored as the history information. It includes a step of determining the health of the network by comparing it with the dynamic information.

The program according to the fourth viewpoint is a program to be executed by a network control device that manages at least one network device that transfers packets based on static information. The program acquires static information and first dynamic information from at least one of the network devices and saves them as history information, and calculates the first topology information based on the first dynamic information and history. A process of saving as information, a process of acquiring at least the second dynamic information from a new network device exchanged from the network device, and a process of calculating the second topology information based on the second dynamic information. By comparing the first topology information with the second topology information, the process of identifying that the activated network device is the new network device and the static information stored as the history information are obtained. The process set in the new network device, the static information and the second dynamic information set in the new network device, and the static information and the first dynamic stored as the history information. By comparing the information with the information, the process of determining the normality of the network is executed.

The program can be recorded on a computer-readable storage medium. The storage medium may be a non-transient such as a semiconductor memory, a hard disk, a magnetic recording medium, or an optical recording medium. Further, in the present disclosure, it is also possible to embody it as a computer program product. The program is input to a computer device via an input device or an external communication interface, stored in a storage device, drives a processor according to a predetermined step or process, and steps the processing result including an intermediate state as necessary. Each can be displayed via a display device, or can communicate with the outside via a communication interface. Computer devices for this purpose, for example, typically include a processor, a storage device, an input device, a communication interface, and, if necessary, a display device that can be connected to each other by a bus.

According to the first to fourth viewpoints, it is possible to contribute to facilitating failure recovery and normality confirmation in a centralized management network.

It is a block diagram which shows typically an example of the structure of the network management system which concerns on Embodiment 1. FIG. It is a block diagram which shows typically the structure of the network control apparatus in the network management system which concerns on Embodiment 1. FIG. It is a block diagram which shows typically the structure of the network equipment in the network management system which concerns on Embodiment 1. FIG. It is a flowchart which schematically shows the operation of the network management system which concerns on Embodiment 1. It is a block diagram which shows typically an example of the structure of the network management system which concerns on Embodiment 2. It is a flowchart which schematically shows the operation of the network management system which concerns on Embodiment 2. It is a block diagram which shows typically an example of the structure of the network management system which concerns on Embodiment 3. It is a flowchart which schematically shows the operation of the network management system which concerns on Embodiment 3. It is a block diagram which shows typically an example of the structure of the network management system which concerns on Embodiment 4. It is a block diagram which shows the structure of a hardware resource schematically.

In the present disclosure described below, the network control device according to mode 1 and its modified mode can be appropriately selected and combined.

As the network control device according to the mode 1, it is a network control device that manages at least one network device that transfers packets based on static information, and static information and first dynamic from at least one of the network devices. A process of acquiring information and saving it as history information, a process of calculating the first topology information based on the first dynamic information and saving it as history information, and at least a new network device exchanged from the network device. The process of acquiring the second dynamic information from the network, the process of calculating the second topology information based on the second dynamic information, and the process of comparing the first topology information with the second topology information are started. A process of identifying that the network device that has been performed is the new network device, a process of setting the static information saved as the history information in the new network device, and a process of setting the new network device in the new network device. A process of determining the normality of the network by comparing the static information and the second dynamic information with the static information and the first dynamic information stored as the history information. It is possible to do.

As a modification mode of the network control device according to the mode 1, a process of allocating an address to the new network device in response to a request from the new network device is performed before the process of acquiring the second dynamic information. It can be carried out. Further, as a modification mode of the network control device according to the mode 1, when allocating an address to the new network device, the packet transfer function of the new network device can be disabled. Further, as a modification mode of the network control device according to the mode 1, a process of setting the activation of a predetermined function in the new network device is performed in response to a request from the new network device, and the second dynamic The process of acquiring the information can be performed after the setting for enabling the predetermined function has been made. Further, as a modification mode of the network control device according to the mode 1, after the process of acquiring the second dynamic information, the new network device and other network devices are based on the acquired second dynamic information. It is possible to perform a process of detecting that and are adjacent to each other. Further, as a modification mode of the network control device according to the mode 1, based on the comparison result between the first topology information and the second topology information and the contents of the static information stored as the history information. , The process of determining whether or not the network configuration is looping, and when the network configuration is looping, an alarm is output without setting the static information for the new network device. Processing and can be performed. Further, as a modification mode of the network control device according to the mode 1, in the process of calculating the first topology information and saving it as history information, is there any network device that is not managed based on the first topology information? It can include a process of determining whether or not the network device is not managed, and a process of saving the first topology information of the network device as history information when the network device is not managed.

In the present disclosure, the network management system according to the mode 2 can include a network control device according to the mode 1 and at least one network device communicably connected to the network control device.

In the present disclosure, as a network management method according to mode 3, a network management method for managing at least one network device that performs packet transfer based on static information by using a network control device, and at least one said network. A step of acquiring static information and a first dynamic information from a device and saving it as history information, a step of calculating a first topology information based on the first dynamic information and saving it as history information, and at least the above. The step of acquiring the second dynamic information from the new network device exchanged from the network device, the step of calculating the second topology information based on the second dynamic information, the first topology information and the second A step of identifying that the activated network device is the new network device by comparing with the topology information, and a step of setting the static information saved as the history information in the new network device. By comparing the static information and the second dynamic information set in the new network device with the static information and the first dynamic information stored as the history information. It is possible to include a step of determining the health of the network.

In the present disclosure, as a program according to mode 4, static information and first dynamic information are transmitted from at least one network device to a network control device that manages at least one network device that transfers packets based on static information. The process of acquiring and saving as history information, the process of calculating the first topology information based on the first dynamic information and saving it as history information, and at least from a new network device exchanged from the network device. It has been started by comparing the process of acquiring the second dynamic information, the process of calculating the second topology information based on the second dynamic information, and the first topology information and the second topology information. The process of identifying that the network device is the new network device, the process of setting the static information stored as the history information in the new network device, and the process of setting the new network device in the new network device. A process of determining the normality of the network by comparing the static information and the second dynamic information with the static information and the first dynamic information stored as the history information. It is possible to execute it.

Hereinafter, embodiments will be described with reference to the drawings. In addition, when the drawing reference reference numerals are attached in this application, they are solely for the purpose of assisting understanding, and are not intended to be limited to the illustrated aspects. Further, the following embodiments are merely examples, and do not limit the present invention. Further, the connecting line between blocks such as drawings referred to in the following description includes both bidirectional and unidirectional. The one-way arrow schematically shows the flow of the main signal (data), and does not exclude interactivity. Further, in the circuit diagram, the block diagram, the internal configuration diagram, the connection diagram, and the like shown in the disclosure of the present application, although not explicitly stated, an input port and an output port exist at the input end and the output end of each connection line, respectively. The same applies to the input / output interface. The program is executed via a computer device, which comprises, for example, a processor, a storage device, an input device, a communication interface, and a display device as required, and the computer device is in the device or through the communication interface. It is configured to be able to communicate with external devices (including computers) regardless of whether it is wired or wireless.

[Embodiment 1]
The network management system according to the first embodiment will be described with reference to the drawings. FIG. 1 is a block diagram schematically showing an example of the configuration of the network management system according to the first embodiment. FIG. 2 is a block diagram schematically showing a configuration of a network control device in the network management system according to the first embodiment. FIG. 3 is a block diagram schematically showing a configuration of a network device in the network management system according to the first embodiment.

The network management system 1 is a system that centrally manages the network devices 20A and 20B to be managed by using the network control device 10 (see FIG. 1). Note that FIG. 1 is an example in which two network devices 20A and 20B exist in the network management system 1, but the present invention is not limited to this, and at least one network device exists in the network management system. do it.

The network control device 10 is a device that manages the network devices 20A and 20B (see FIG. 1). The network control device 10 can be, for example, a physical machine (for example, a physical server) or a virtual machine (for example, a virtual server) operating on the physical machine. The network control device 10 can manage at least one network device (two in FIG. 1). The network control device 10 is communicably connected to the network devices 20A and 20B via a dedicated line or a network. The network control device 10 has a function of storing various data and has a function of performing predetermined information processing by executing a program. The network control device 10 gives instructions to the network devices 20A and 20B. The network control device 10 periodically acquires information on the network devices 20A and 20B and stores them internally as history information. By executing a predetermined program, the network control device 10 has a device management unit 11, a history information management unit 12, a topology management unit 13, and a DHCP (Dynamic Host Configuration Protocol) server unit as virtual functional units. 14 and the file transfer unit 15 are realized (see FIG. 2).

The device management unit 11 is a functional unit that manages information on network devices (20A and 20B in FIG. 1) to be managed (see FIG. 2). The device management unit 11 sets the config for the network devices 20A and 20B. The device management unit 11 acquires various information from the network devices 20A and 20B.

The history information management unit 12 is a functional unit that manages history information acquired from network devices (20A and 20B in FIG. 1) (see FIG. 2). The history information management unit 12 saves the acquired history information.

Here, the history information includes static information, dynamic information, and topology information. Static information is information that is not affected by changes in the environment, and includes, for example, a configuration file. A config file is a file that describes various setting conditions such as a program running on a computer and an operating system. Further, the dynamic information is information generated by dynamically learning the network devices 20A and 20B, and includes, for example, a MAC (Media Access Control) table, an ARP (Address Resolution Protocol) table, a routing table, and the like. .. The MAC table is a table in which a MAC address and a LAN (Local Area Network) port name are associated with each other. The ARP table is a table in which an IP address and a MAC address are associated with each other. The routing table is a table that lists the routes to the destinations of individual networks. Topology information is information indicating the physical and logical form (shape, hierarchy, etc.) of a network.

The topology management unit 13 is a functional unit that manages topology information (see FIG. 2). The topology management unit 13 calculates the topology information based on the dynamic information acquired from each of the network devices 20A and 20B. The topology management unit 13 receives the DHCP request (also referred to as DHCP request packet) from the exchanged network device (either 20A or 20B), and the exchanged network device (20A) acquired by the device management unit 11 , 20B) and the topology information stored in the history information management unit 12 are compared, and the network device (either 20A or 20B) after replacement is specified.

The DHCP server unit 14 is a functional unit that assigns (assigns) an IP (Internet Protocol) address to network devices (20A and 20B in FIG. 1) (see FIG. 2). The DHCP server unit 14 receives a DHCP request from the exchanged network device (either 20A or 20B), and thereby assigns an IP address to the network device (20A or 20B). Send a response message. Here, DHCP is an application layer protocol that automatically assigns IP addresses to network devices 20A and 20B. The DHCP request is a request for requesting the assignment of an IP address to a network device. Further, "paying out" means assigning an IP address to a network device (either 20A or 20B) when dynamically assigning an IP address.

The file transfer unit 15 is a function of transferring a file to a network device (20A, 20B in FIG. 1) (see FIG. 2). Files include config files and software files. The file transfer unit 15 has functions of a TFTP (Trivial File Transfer Protocol) server, an FTP (File Transfer Protocol) server, and an HTTP (Hyper Text Transfer Protocol) server.

The network devices 20A and 20B are devices that connect the networks so that they can communicate with each other (see FIG. 1). For the network devices 20A and 20B, for example, a layer 2 switch, a layer 3 switch, and a layer 4 switch can be used. The network devices 20A and 20B are communicably connected to the network control device 10 via a dedicated line or a network. The network device 20A is communicably connected to the terminal 30A via a wired or wireless connection. The network device 20B is communicably connected to the terminal 30B via a wire or wireless. The network devices 20A and 20B have a function of storing various data and a function of performing predetermined information processing by executing a program. The network devices 20A and 20B perform packet transfer based on the config file. The network devices 20A and 20B realize the static information management unit 21, the dynamic information management unit 22, and the packet transfer unit 23 as virtual functional units by executing a predetermined program (FIG. FIG. 3).

The static information management unit 21 is a functional unit that manages static information (see FIG. 3). The static information management unit 21 acquires static information from the network control device (10 in FIG. 1) and stores it inside itself. Here, the static information includes a configuration file and the like.

The dynamic information management unit 22 is a functional unit that manages dynamic information (see FIG. 3). The dynamic information management unit 22 stores the dynamic information. Here, the dynamic information includes a MAC table, an ARP table, a routing table, and the like.

The packet transfer unit 23 is a functional unit that transfers packets (see FIG. 3). The packet transfer unit 23 transfers the packet received from the terminal (30A, 30B in FIG. 1) based on the dynamic information.

The terminals 30A and 30B are terminals that perform information processing (see FIG. 1). For the terminals 30A and 30B, for example, personal computers, notebook terminals, tablet terminals, smartphones and the like can be used. The terminal 30A is communicably connected to the network device 20A via a wired or wireless connection. The terminal 30B is communicably connected to the network device 20B via a wired or wireless connection. The terminals 30A and 30B perform predetermined information processing by executing a program.

The operation of the network management system according to the first embodiment will be described with reference to the drawings. FIG. 4 is a flowchart schematically showing the operation of the network management system according to the first embodiment.

First, the dynamic information management unit 22 of the network devices 20A and 20B periodically collects information on adjacent network devices (step A1).

Here, for information collection, for example, when the network device 20A collects, the network device 20A transmits an LLDP (Link Layer Discovery Protocol) packet including information of the network device 20B periodically transmitted from the adjacent network device 20B. It can be done by receiving. The same can be performed when the network device 20B collects. Here, LLDP is a protocol that periodically collects information on adjacent network devices. Further, the collected information is information on adjacent network devices necessary for generating dynamic information. For example, the information collected by the network device 20A includes the host name, interface name, MAC address, LAN port name, and IP address of the adjacent network device 20B. In the network devices 20A and 20B that have collected the information, the host name, the interface name, and the like stored in the LLDP packet are stored in association with the interface name that received the LLDP packet. Dynamic information is also referred to as MIB (Management Information Base) information. MIB information is a database for managing devices in a communication network.

Next, the dynamic information management unit 22 of the network devices 20A and 20B generates dynamic information based on the acquired information (step A2).

Here, the dynamic information can include a MAC table, an ARP table, and a routing table. The dynamic information can be configured by associating, for example, the host name and interface name of the network device 20A with the host name and interface name of the network device 20B. The host name and interface name of the network device 20A are stored in the network device 20A itself, and the host name and interface name of the network device 20B are stored in the network device 20B itself.

Next, the dynamic information management unit 22 of the network devices 20A and 20B saves the generated dynamic information in itself (step A3).

Next, the device management unit 11 of the network control device 10 acquires static information and dynamic information from the network devices 20A and 20B (step A4).

Here, in order to acquire static information and dynamic information, the network control device 10 requests network devices 20A and 20B (for example, a request by SMNP, Telnet, SSH (Secure Shell), NETCONF (Network Configuration Protocol), or the like. ) Is transmitted, the network devices 20A and 20B that have received the request read the static information and the dynamic information stored in themselves and transmit the request to the network control device 10, and the network control device 10 receives the request from the network devices 20A and 20B. It can be done by receiving the static information and the dynamic information of.

Next, the device management unit 11 of the network control device 10 stores the static information and the dynamic information acquired from the network devices 20A and 20B in the history information management unit 12 as history information (step A5).

Next, the topology management unit 13 of the network control device 10 calculates the topology information based on the dynamic information acquired from the network devices 20A and 20B (step A6).

Next, the topology management unit 13 of the network control device 10 saves the calculated topology information in the history information management unit 12 (step A7).

After that, the network device 20A is replaced with a new network device 20A when a failure or the like occurs (step A8). Hereinafter, the old network device 20A used so far will be referred to as a network device 20A before replacement, and the new network device 20A to be used from now on will be referred to as a network device 20A after replacement.

Next, when the static information management unit 21 of the exchanged network device 20A is activated, it transmits a DHCP request to the network control device 10 (step A9). At this time, since the static information does not exist in the static information management unit 21 of the exchanged network device 20A, the packet transfer unit 23 of the exchanged network device 20A disables the packet transfer function.

Next, when the DHCP server unit 14 of the network control device 10 receives the DHCP request from the exchanged network device 20A, the DHCP server unit 14 generates a DHCP response message for assigning an IP address to the exchanged network device 20A (. Step A10).

Here, the DHCP response message includes the IP address assigned to the exchanged network device 20A, the IP address of the network control device 10, and the information of the file transfer unit 15. The information of the file transfer unit 15 can include, for example, each file path of the TFTP server, the FTP server, and the HTTP server.

Next, the DHCP server unit 14 of the network control device 10 transmits the generated DHCP response message to the exchanged network device 20A (step A11).

Next, when the static information management unit 21 of the network device 20A receives the DHCP response message from the network control device 10, it generates a request message based on the information of the file transfer unit 15 included in the DHCP response message. (Step A12). Here, the request message is a message for requesting the following predetermined function config file, and can be, for example, a request message based on TFTP, FTP, or HTTP.

Next, the static information management unit 21 of the network device 20A transmits the generated request message to the network control device 10 (step A13).

Next, when the file transfer unit 15 of the network control device 10 receives the request message from the network device 20A, the file transfer unit 15 sets the activation of predetermined functions (LLDP function, SNMP (Simple Network Management Protocol) function, and Telnet function). Generate a predetermined function config file (step A14).

Here, the LLDP function is a function of periodically collecting information on adjacent network devices by LLDP packets. The LLDP function is enabled so that the information in the received LLDP packet can be stored inside the network device. The SNMP function is a function for monitoring and controlling network devices connected to a network via the network. The Telnet function is a function that provides general-purpose bidirectional 8-bit communication between terminals and processes.

Next, the file transfer unit 15 of the network control device 10 transmits the generated predetermined function config file to the network device 20A (step A15).

Next, when the static information management unit 21 of the network device 20A receives the predetermined function config file from the network control device 10, the predetermined function (here, the LLDP function, the SNMP function, and the Telnet function) according to the predetermined function config file. ) Is activated (step A16).

Next, the dynamic information management unit 22 of the exchanged network device 20A collects information on the adjacent network device 20B when the LLDP function is enabled (step A17).

Here, the information can be collected by the exchanged network device 20A receiving the LLDP packet including the information of the network device 20B periodically transmitted from the adjacent network device 20B.

Next, the dynamic information management unit 22 of the exchanged network device 20A generates dynamic information based on the acquired information (step A18).

Next, the dynamic information management unit 22 of the network device 20A after the exchange stores the generated dynamic information in the dynamic information management unit 22 (step A19).

Next, the device management unit 11 of the network control device 10 acquires dynamic information from the exchanged network device 20A and the network device 20B when the predetermined function config file is transmitted by the file transfer unit 15 (step). A20).

Here, for the acquisition of dynamic information, the network control device 10 transmits an SNMP request to the exchanged network device 20A and the network device 20B, and the exchanged network device 20A and the exchanged network device 20A that received the SNMP request, and This can be done by the network device 20B reading out the dynamic information stored in itself and transmitting it to the network control device 10, and the network control device 10 receiving the dynamic information from the network devices 20A and 20B. At this stage, static information is not set in the network device 20A after replacement.

Next, in the topology management unit 13 of the network control device 10, the exchanged network device 20A and the network device 20B are adjacent to each other based on the dynamic information acquired from the exchanged network device 20A and the network device 20B. (Step A21).

Next, the topology management unit 13 of the network control device 10 calculates the topology information based on the dynamic information acquired from the exchanged network device 20A and the network device 20B (step A22).

Next, the topology management unit 13 of the network control device 10 compares the topology information calculated based on the dynamic information of the exchanged network device 20A and the network device 20B with the topology information in the history information. By doing so, it is specified that the activated network device is the replaced network device 20A (step A23).

Next, the topology management unit 13 of the network control device 10 is set to the specified network device 20A after replacement and the network device 20A before replacement stored in the history information management unit 12 by using Telnet. Set the static information (config file, etc.) that was used (step A24).

Next, when the packet transfer unit 23 of the exchanged network device 20A completes the setting of static information, the packet transfer function is enabled and the transfer of the packet received from the terminal 30A is started (step A25).

Next, the device management unit 11 of the network control device 10 acquires static information and dynamic information from the network device 20A when the exchanged network device 20A starts packet transfer and enters the operating state (step A26). ..

Here, for the acquisition of static information and dynamic information, the network control device 10 makes a request to the network device 20A (for example, a request by SMNP, Telnet, SSH (Secure Shell), NETCONF (Network Configuration Protocol), etc.). The network device 20A that has transmitted and received the request reads out the static information and the dynamic information stored in itself and transmits the static information and the dynamic information to the network control device 10, and the network control device 10 transmits the static information and the operation from the network device 20A. This can be done by receiving the target information.

Next, the device management unit 11 of the network control device 10 receives static information and dynamic information acquired from the network device 20A after replacement, and static information of the network device 20A before replacement stored in the history information. And the dynamic information are compared with each other to determine the normality of the network (whether or not the state of the network has been restored) (step A27).

Here, in the determination of normality, the difference between the static information and the dynamic information acquired from the exchanged network device 20A and the past static information and the dynamic information stored in the history information management unit 12. Determines whether or not exceeds a preset threshold value. If it is below the threshold value, it is determined to be normal, and if it exceeds the threshold value, it is determined to be abnormal.

Next, the device management unit 11 of the network control device 10 outputs (display, voice output, transmission, etc.) the determination result of normality (step A28), and then ends.

According to the first embodiment, the network control device 10 automatically identifies the network device 20A after the replacement and determines the normality, so that the network device 20A can be replaced and the normality after the replacement occurs when a failure occurs. Confirmation can be performed easily, which can contribute to performing confirmation work with less effort.

[Embodiment 2]
The network control system according to the second embodiment will be described with reference to the drawings. FIG. 5 is a block diagram schematically showing an example of the configuration of the network management system according to the second embodiment.

The second embodiment is a modification of the first embodiment, and is an example in which the connection is erroneously configured in a loop after exchanging the network device 20A. For example, as shown in FIG. 5, the network device 20A is connected to the network device 20C, the network device 20C is connected to the network device 20B, and the network device 20C is connected to the network control device 10, and the network devices 20A to 20C. This is the case when there is a loop configuration between them. Other configurations are the same as those in the first embodiment.

Next, the operation of the network management system according to the second embodiment will be described with reference to the drawings. FIG. 6 is a flowchart schematically showing the operation of the network management system according to the second embodiment.

Regarding the operation of the network control system according to the second embodiment, the operation from the start to the activation of the predetermined function by the network device 20A is the same as the operation of the first embodiment (steps A1 to A16 in FIG. 4). The network device 20C that is not replaced performs the same operation as the network device 20B that is not replaced. Further, in the acquisition of static information and dynamic information corresponding to step A4 in FIG. 4, the device management unit 11 of the network control device 10 acquires static information and dynamic information from the network devices 20A, 20B, and 20C. To do.

Next, when the LLDP function is enabled, the dynamic information management unit 22 of the network device 20A collects information on the adjacent network devices 20B and 20C (step B1).

Here, the information is collected by receiving the LLDP packet including the information of the network devices 20B and 20C which are periodically transmitted from the adjacent network devices 20B and 20C, respectively, by the network device 20A after the exchange. Can be done.

Next, the dynamic information management unit 22 of the exchanged network device 20A generates dynamic information based on the acquired information (step B2).

Next, the dynamic information management unit 22 of the network device 20A after the exchange stores the generated dynamic information in the dynamic information management unit 22 (step B3).

Next, when the predetermined function config file is transmitted by the file transfer unit 15, the device management unit 11 of the network control device 10 acquires dynamic information from the exchanged network devices 20A and the network devices 20B and 20C. (Step B4).

Here, for the acquisition of dynamic information, the network control device 10 transmits an SNMP request to the exchanged network device 20A and the network devices 20B and 20C, and the exchanged network device 20A receives the SNMP request. Then, the network devices 20B and 20C read the dynamic information stored in themselves and transmit it to the network control device 10, and the network control device 10 receives the dynamic information from the network devices 20A, 20B and 20C. It can be carried out. At this stage, static information is not set in the network device 20A after replacement.

Next, the topology management unit 13 of the network control device 10 bases the exchanged network devices 20A and the exchanged network devices 20B and 20C based on the dynamic information acquired from the exchanged network devices 20A and the network devices 20B and 20C. It is detected that and are adjacent to each other (step B5).

Next, the topology management unit 13 of the network control device 10 calculates the topology information based on the dynamic information acquired from the exchanged network devices 20A and the network devices 20B and 20C (step B6).

Next, the topology management unit 13 of the network control device 10 receives the topology information calculated based on the dynamic information of the exchanged network devices 20A and the network devices 20B and 20C, the topology information in the history information, and the topology information. By comparing the above, it is specified that the activated network device is the replaced network device 20A (step B7).

Next, the topology management unit 13 of the network control device 10 has a comparison result of the topology information and static information (config file, etc.) set in the network device 20A before exchange stored in the history information management unit 12. It is detected that the network configuration is looping based on the content of the static information to be applied to the network device 20A (step B8).

Next, when the topology management unit 13 of the network control device 10 detects that the network configuration is looping, it outputs (displays) an alarm without setting static information for the network device 20A after replacement. , Audio output, transmission, etc.) (step B9), and then end.

According to the second embodiment, the network control device 10 automatically identifies the network device 20A after replacement and detects that the network configuration is looped, so that the network device 20A can be replaced when a failure occurs. It becomes possible to easily confirm the loop of the network configuration after the exchange, which can contribute to performing the confirmation work with less effort. In particular, the packet transfer unit 23 of the network device 20A does not set the static information from the network control device 10 and does not enable the packet transfer function, so that it is possible to prevent a packet loop from occurring.

[Embodiment 3]
The network control system according to the third embodiment will be described with reference to the drawings. FIG. 7 is a block diagram schematically showing an example of the configuration of the network management system according to the third embodiment.

The third embodiment is a modification of the first embodiment, in which the network device 20A is the management target of the network control device 10, but the network device 20B connected adjacent to the network device 20A is the network control device 10. This is an example when it is not managed. For example, as shown in FIG. 7, the network device 20A is connected to the network control device 10, and the network device 20B is not connected to the network control device 10. Other configurations are the same as those in the first embodiment.

Next, the operation of the network management system according to the third embodiment will be described with reference to the drawings. FIG. 8 is a flowchart schematically showing the operation of the network management system according to the third embodiment.

Regarding the operation of the network control system according to the third embodiment, the operation from the start until the dynamic information generated is stored in the network devices 20A and 20B itself is the operation of the first embodiment (steps A1 to A3 in FIG. 4). The same is true.

Next, the device management unit 11 of the network control device 10 acquires static information and dynamic information from the network device 20A (step C1). Since the network device 20B is not connected to the network control device 10, the network control device 10 does not acquire static information and dynamic information from the network device 20B.

Next, the device management unit 11 of the network control device 10 stores the static information and the dynamic information acquired from the network device 20A in the history information management unit 12 as history information (step C2).

Next, the topology management unit 13 of the network control device 10 calculates the topology information based on the dynamic information acquired from the network device 20A (step C3).

Next, the topology management unit 13 of the network control device 10 detects that the network device 20B is not managed by the network control device 10 based on the calculated topology information (step C4).

Next, the topology management unit 13 of the network control device 10 saves the topology information including the information that the network device 20B detected to be out of the management target of the network control device 10 is the non-management target device (step C5). ).

After that, the operation from the replacement of the network device 20A to the activation of the predetermined function by the network device 20A is the same as the operation of the first embodiment (steps A8 to A16 in FIG. 4).

Next, the dynamic information management unit 22 of the network device 20A collects information on the adjacent network device 20B when the LLDP function is enabled (step D1).

Next, the dynamic information management unit 22 of the exchanged network device 20A generates dynamic information based on the acquired information (step D2).

Next, the dynamic information management unit 22 of the network device 20A after the exchange stores the generated dynamic information in the dynamic information management unit 22 (step D3).

Next, the device management unit 11 of the network control device 10 acquires dynamic information from the exchanged network device 20A when the predetermined function config file is transmitted by the file transfer unit 15 (step D4).

Next, the topology management unit 13 of the network control device 10 detects that the exchanged network device 20A and the network device 20B are adjacent to each other based on the acquired dynamic information (step D5).

Next, the topology management unit 13 of the network control device 10 calculates the topology information based on the dynamic information acquired from the exchanged network device 20A (step D6).

Next, the topology management unit 13 of the network control device 10 is activated by comparing the topology information calculated based on the dynamic information of the exchanged network device 20A with the topology information in the history information. It is specified that the network device is the network device 20A after replacement (step D7). Although the network device 20B is not managed by the network control device 10 in step D7, there is no problem in identifying the activated network device.

After that, the operation from the setting of the static information to the output of the determination result is the same as the operation of the first embodiment (steps A24 to A28 in FIG. 4).

According to the third embodiment, even if there is a network device 20B that is not managed by the network control device 10, the network control device 10 automatically identifies the network device 20A after replacement and determines the normality. As a result, it becomes possible to easily replace the network device 20A and confirm the normality after the replacement when a failure occurs, and it is possible to contribute to performing the confirmation work with less labor.

[Embodiment 4]
The network pipeline system according to the fourth embodiment will be described with reference to the drawings. FIG. 9 is a block diagram schematically showing an example of the configuration of the network management system according to the fourth embodiment.

The network management system 1 includes a network control device 10 and at least one network device 20 (see FIG. 9).

The network control device 10 is a device that manages at least one network device 20. The network control device 10 performs a process of acquiring static information and first dynamic information from at least one network device 20 and storing them as history information. The network control device 10 performs a process of calculating the first topology information based on the first dynamic information and storing it as history information. The network control device 10 performs a process of acquiring at least the second dynamic information from a new network device exchanged from the network device. The network control device 10 performs a process of calculating the second topology information based on the second dynamic information. The network control device 10 performs a process of identifying that the activated network device is the new network device by comparing the first topology information and the second topology information. The network control device 10 performs a process of setting static information stored as history information in a new network device. The network control device 10 compares the static information and the second dynamic information set in the new network device with the static information and the first dynamic information stored as the history information of the network. Performs the process of determining normality.

The network device 20 performs packet transfer based on static information.

According to the fourth embodiment, the static information and the second dynamic information set in the new network device are compared with the static information and the first dynamic information stored as the history information, and the network is normal. Since the sex is judged, it can contribute to facilitating failure recovery and normality confirmation in the centralized management network.

The network control device according to the first to fourth embodiment can be configured by so-called hardware resources (information processing device, computer), and one having the configuration illustrated in FIG. 10 can be used. For example, the hardware resource 100 includes a processor 101, a memory 102, a network interface 103, and the like, which are connected to each other by an internal bus 104.

The configuration shown in FIG. 10 is not intended to limit the hardware configuration of the hardware resource 100. The hardware resource 100 may include hardware (for example, an input / output interface) (not shown). Alternatively, the number of units such as the processor 101 included in the device is not limited to the example of FIG. 10, and for example, a plurality of processors 101 may be included in the hardware resource 100. For the processor 101, for example, a CPU (Central Processing Unit), an MPU (Micro Processor Unit), or the like can be used.

For the memory 102, for example, a RAM (Random Access Memory), a ROM (Read Only Memory), an HDD (Hard Disk Drive), an SSD (Solid State Drive), or the like can be used.

For the network interface 103, for example, a LAN (Local Area Network) card, a network adapter, a network interface card, or the like can be used.

The function of the hardware resource 100 is realized by the above-mentioned processing module. The processing module is realized, for example, by the processor 101 executing a program stored in the memory 102. In addition, the program can be downloaded via a network or updated using a storage medium in which the program is stored. Further, the processing module may be realized by a semiconductor chip. That is, the function performed by the processing module may be realized by executing software on some hardware.

Some or all of the above embodiments may also be described, but not limited to:

[Appendix 1]
In the present invention, the form of the network control device according to the first viewpoint is possible.

[Appendix 2]
Prior to the process of acquiring the second dynamic information, a process of allocating an address to the new network device is performed in response to a request from the new network device.
The network control device according to Appendix 1.

[Appendix 3]
When allocating an address to the new network device, the packet transfer function of the new network device is invalid.
The network control device according to Appendix 2.

[Appendix 4]
In response to the request from the new network device, the process of setting the activation of the predetermined function in the new network device is performed.
The process of acquiring the second dynamic information is performed after the setting for enabling the predetermined function is performed.
The network control device according to any one of Supplementary note 1 to 3.

[Appendix 5]
After the process of acquiring the second dynamic information, a process of detecting that the new network device and another network device are adjacent to each other is performed based on the acquired second dynamic information.
The network control device according to any one of Appendix 1 to 4.

[Appendix 6]
A process of determining whether or not the network configuration is looping based on the comparison result between the first topology information and the second topology information and the content of the static information stored as the history information. ,
A process of outputting an alarm without setting the static information for the new network device when the network configuration is looping.
I do,
The network control device according to any one of Appendix 1 to 5.

[Appendix 7]
In the process of calculating the first topology information and saving it as history information,
Based on the first topology information, a process of determining whether or not there is a network device that is not managed, and
When there is a network device that is not managed, the process of saving the first topology information that excludes the network device as history information, and
including,
The network control device according to Appendix 1.

[Appendix 8]
In the present invention, the form of the network management system according to the second viewpoint is possible.

[Appendix 9]
In the present invention, the form of the network management method according to the third viewpoint is possible.

[Appendix 10]
In the present invention, the form of the program according to the fourth viewpoint is possible.

The disclosures of the above patent documents shall be incorporated into this document by citation. Within the framework of the entire disclosure of the present invention (including the scope of claims and drawings), it is possible to change or adjust the embodiments or examples based on the basic technical idea thereof. Further, various combinations or selections (necessary) of various disclosure elements (including each element of each claim, each element of each embodiment or embodiment, each element of each drawing, etc.) within the framework of all disclosure of the present invention. (Not selected) is possible. That is, it goes without saying that the present invention includes all disclosures including claims and drawings, and various modifications and modifications that can be made by those skilled in the art in accordance with technical ideas. In addition, regarding the numerical values and numerical ranges described in the present application, it is considered that arbitrary intermediate values, lower numerical values, and small ranges are described even if not specified.

1 Network management system 10 Network control device 11 Equipment management department 12 History information management department 13 Topology management department 14 DHCP server department 15 File transfer department 20, 20A, 20B, 20C Network equipment 21 Static information management department 22 Dynamic information management department 23 Packet transfer unit 30A, 30B Terminal 100 Hardware resource 101 Processor 102 Memory 103 Network interface 104 Internal bus

Claims (10)

A network management device that manages at least one network device that transfers packets based on static information.
A process of acquiring static information and a first dynamic information from at least one of the network devices and saving them as history information.
A process of calculating the first topology information based on the first dynamic information and saving it as history information.
At least the process of acquiring the second dynamic information from the new network device exchanged from the network device,
The process of calculating the second topology information based on the second dynamic information and
A process of identifying that the activated network device is the new network device by comparing the first topology information with the second topology information, and
The process of setting the static information saved as the history information in the new network device, and
By comparing the static information and the second dynamic information set in the new network device with the static information and the first dynamic information stored as the history information, the network The process of determining normality and
I do,
Network management device. Prior to the process of acquiring the second dynamic information, a process of allocating an address to the new network device is performed in response to a request from the new network device.
The network management device according to claim 1. When allocating an address to the new network device, the packet transfer function of the new network device is invalid.
The network management device according to claim 2. In response to the request from the new network device, the process of setting the activation of the predetermined function in the new network device is performed.
The process of acquiring the second dynamic information is performed after the setting for enabling the predetermined function is performed.
The network management device according to any one of claims 1 to 3. After the process of acquiring the second dynamic information, a process of detecting that the new network device and another network device are adjacent to each other is performed based on the acquired second dynamic information.
The network management device according to any one of claims 1 to 4. A process of determining whether or not the network configuration is looping based on the comparison result between the first topology information and the second topology information and the content of the static information stored as the history information. ,
A process of outputting an alarm without setting the static information for the new network device when the network configuration is looping.
I do,
The network management device according to any one of claims 1 to 5. In the process of calculating the first topology information and saving it as history information,
Based on the first topology information, a process of determining whether or not there is a network device that is not managed, and
When there is a network device that is not managed, the process of saving the first topology information that excludes the network device as history information, and
including,
The network management device according to claim 1. The network management device according to any one of claims 1 to 7.
With at least one network device communicatively connected to the network management device,
To prepare
Network management system. A network management method that manages at least one network device that transfers packets based on static information using a network management device.
A step of acquiring static information and a first dynamic information from at least one of the network devices and saving them as historical information.
A step of calculating the first topology information based on the first dynamic information and saving it as history information,
At least the step of acquiring the second dynamic information from the new network device exchanged from the network device,
The step of calculating the second topology information based on the second dynamic information, and
By comparing the first topology information with the second topology information, a step of identifying that the activated network device is the new network device, and
A step of setting the static information saved as the history information in the new network device, and
By comparing the static information and the second dynamic information set in the new network device with the static information and the first dynamic information stored as the history information, the network Steps to determine normality and
including,
Network management method. A network management device that manages at least one network device that transfers packets based on static information.
A process of acquiring static information and a first dynamic information from at least one of the network devices and saving them as history information.
A process of calculating the first topology information based on the first dynamic information and saving it as history information.
At least the process of acquiring the second dynamic information from the new network device exchanged from the network device,
The process of calculating the second topology information based on the second dynamic information and
A process of identifying that the activated network device is the new network device by comparing the first topology information with the second topology information, and
The process of setting the static information saved as the history information in the new network device, and
By comparing the static information and the second dynamic information set in the new network device with the static information and the first dynamic information stored as the history information, the network The process of determining normality and
To execute,
program.

Images