CN108259214B - Configuration command management method, device and machine-readable storage medium - Google Patents
Configuration command management method, device and machine-readable storage medium Download PDFInfo
- Publication number
- CN108259214B CN108259214B CN201710769221.9A CN201710769221A CN108259214B CN 108259214 B CN108259214 B CN 108259214B CN 201710769221 A CN201710769221 A CN 201710769221A CN 108259214 B CN108259214 B CN 108259214B
- Authority
- CN
- China
- Prior art keywords
- command
- configuration command
- management
- configuration
- management mode
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
Abstract
The present disclosure provides a configuration command management method, apparatus, and machine-readable storage medium, the method comprising: when a management message is received, analyzing a configuration command and a management mode from the management message; determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode; and if so, executing the configuration command. By the technical scheme, the robustness and the reliability of configuration command management can be improved, and service interruption can be avoided.
Description
Technical Field
The present invention relates to the field of network management technologies, and in particular, to a method and an apparatus for managing configuration commands, and a machine-readable storage medium.
Background
With the rapid development of services such as cloud computing and big data and the application of a network device virtualization technology, a plurality of managers such as a network manager and a cloud management platform are provided for a network device, that is, both the network manager and the cloud management platform can manage the network device, and the network device can receive a configuration command issued by the network manager and can also receive a configuration command issued by the cloud management platform. However, when the network administrator issues the configuration command to the network device, the network administrator manually operates the configuration command, so that the configuration command issued by the cloud management platform to the network device is easily deleted, thereby causing service interruption of the network device.
For example, after the cloud management platform issues the configuration command a to the network device, the network administrator may delete the configuration command a, but the deletion operation is a false deletion, and after the configuration command a is deleted by the network administrator by mistake, because the configuration command a is issued by the cloud management platform, the network administrator cannot recover the configuration command a for the network device, thereby causing a serious network accident and causing service interruption.
Disclosure of Invention
The present disclosure provides a configuration command management method, the method comprising:
when a management message is received, analyzing a configuration command and a management mode from the management message;
determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode;
and if so, executing the configuration command.
The present disclosure provides a configuration command management apparatus, the apparatus comprising: the analysis module is used for analyzing a configuration command and a management mode from the management message when the management message is received; the determining module is used for determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between a configuration command and a management mode; and the processing module is used for executing the configuration command when the determination result is that the configuration command exists.
The present disclosure provides a machine-readable storage medium having stored thereon computer instructions that, when executed, perform the following:
when a management message is received, analyzing a configuration command and a management mode from the management message;
determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode;
and if so, executing the configuration command.
Based on the technical scheme, in the embodiment of the disclosure, the configuration command can be protected, and the configuration command is prevented from being executed incorrectly, so that the robustness and reliability of the management of the configuration command can be improved, a serious network accident can be avoided, and the service interruption can be avoided.
Drawings
In order to more clearly illustrate the embodiments of the present disclosure or the technical solutions in the prior art, the drawings needed to be used in the description of the embodiments of the present disclosure or the prior art will be briefly described below, it is obvious that the drawings in the following description are only some embodiments described in the present disclosure, and other drawings can be obtained by those skilled in the art according to the drawings of the embodiments of the present disclosure.
FIG. 1 is a schematic diagram of an application scenario in one embodiment of the present disclosure;
FIG. 2 is a flow diagram of a configuration command management method in one embodiment of the present disclosure;
FIG. 3 is a block diagram of a configuration command management device in one embodiment of the present disclosure;
fig. 4 is a hardware configuration diagram of a network device in one embodiment of the present disclosure.
Detailed Description
The terminology used in the embodiments of the disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. As used in this disclosure and the claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein is meant to encompass any and all possible combinations of one or more of the associated listed items.
It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information in the embodiments of the present disclosure, such information should not be limited by these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present disclosure. Depending on the context, moreover, the word "if" as used may be interpreted as "at … …" or "when … …" or "in response to a determination".
The embodiment of the disclosure provides a configuration command management method, which can be applied to a network device, where the network device has two or more managers, and the managers may be a network manager, a cloud management platform, and the like, that is, the network manager and the cloud management platform may manage the network device, and the network device may receive a configuration command issued by the network manager and may also receive a configuration command issued by the cloud management platform.
As shown in fig. 1, which is a schematic diagram of a BRAS (Broadband Remote Access Server) architecture with a separation of a Control Plane and a forwarding Plane, the Control Plane may be implemented by a BRAS-CP (Control Plane) device, the BRAS-CP device is positioned as a user Control management component, the forwarding Plane may be implemented by a BRAS-DP (Data Plane) device, and the BRAS-DP device is positioned as a three-layer network edge and a user policy enforcement component. In this application scenario, the BRAS-DP device is a network device with multiple managers. Of course, fig. 1 is only one example of the embodiment of the present disclosure, and the type of the network device is not limited as long as the network device has two or more administrators.
In one example, in the process of managing the network device by the network administrator and the cloud management platform, the management manners adopted by the network administrator and the cloud management platform may include, but are not limited to: a Console Management mode, a Network Configuration Protocol (Netconf) Management mode, a Telnet Management mode, a Secure Shell (SSH) Management mode, a Management Information Base (MIB) Management mode, a Technical Report (TR 069) Management mode, a World Wide WEB (WEB) Management mode, a Software Defined Network (SDN) Management mode, and the like. Of course, the above management manner is only an example of the embodiment of the present disclosure, and the type of the management manner is not limited in detail.
In the application scenario, referring to fig. 2, which is a flowchart of a configuration command management method provided in the embodiment of the present disclosure, the configuration command management method may be applied to a network device, and the method may include:
In one example, when a network administrator/cloud management platform needs to create a configuration command on a network device, a management message may be sent to the network device in a certain management manner, where the management message carries the configuration command and the management manner. When receiving the management message, the network device may parse a configuration command (e.g., a ppoe-server work-mode) and a management manner (e.g., a Netconf management manner) from the management message.
In another example, when the network administrator/cloud management platform needs to operate (e.g., modify or delete) an existing configuration command (e.g., pppoe-server work-mode) on the network device, a management message is sent to the network device in a certain management manner, where the management message carries the configuration command (another configuration command for operating the existing configuration command) and the management manner. When receiving the management message, the network device may parse a configuration command (e.g., an undoo pppoe-server work-mode configuration command for deleting a pppoe-server work-mode) and a management manner (e.g., a Netconf management manner) from the management message.
The command set may include a plurality of command items, each command item is used to record a corresponding relationship between the configuration command and a management manner, and the management manner (e.g., one or more management manners) recorded in the command item is a management manner allowing the configuration command to be operated, that is, has a right to operate the configuration command. For example, the command item 1 includes a corresponding relationship between the configuration command 1 and the Netconf management mode, and the command item 2 includes a corresponding relationship between the configuration command 2 and the Console management mode, based on which only the Netconf management mode allows the configuration command 1 to be operated, and the other management modes do not allow the configuration command 1 to be operated; further, only the Console management manner allows the operation of the configuration command 2, and the other management manners do not allow the operation of the configuration command 2.
In one example, the process for determining whether there is a command item in the command set that matches the configuration command and the management mode may include, but is not limited to, the following modes: the method comprises the steps that firstly, the command set is inquired through the configuration command, and a management method corresponding to the configuration command is obtained; if the obtained management mode comprises the management mode in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set. The second mode is that the command set is inquired through the management mode to obtain a configuration command corresponding to the management mode; if the obtained configuration command comprises the configuration command in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set.
In one example, the process for "executing the configuration command in the management message" may include, but is not limited to: and creating the configuration command, or deleting or modifying the existing configuration command according to the configuration command. In another example, the procedure for "refusing to execute the configuration command in the management message" may include, but is not limited to: refusing to create the configuration command, or refusing to delete the existing configuration command or modify the existing configuration command according to the configuration command.
Wherein, creating the configuration command may refer to: the configuration command, i.e., buildrun, is established and run on the network device, so that the configuration command is validated on the network device. Further, refusing to create the configuration command may refer to: the configuration command is denied being set up and run on the network device.
If the configuration command is used to operate an existing configuration command, that is, the configuration command is related to the existing configuration command, and if the configuration command is used to delete an existing configuration command, the configuration command may be an undoo-p-server work-mode. In addition, the above-mentioned deleting operation or modifying operation of the existing configuration command according to the configuration command means: and running the configuration command on the network equipment, namely deleting the existing configuration command according to the configuration command, so that the existing configuration command fails on the network equipment. In addition, the refusing to delete or modify the existing configuration command according to the configuration command means that: the configuration command is rejected from running on the network device, i.e. the existing configuration command is not deleted according to the configuration command, and the existing configuration command continues to take effect on the network device.
In one example, after creating the configuration command, the network device may further parse address information (e.g., an IP address) of the administrator from the management message, that is, a source IP address of the management message, and record a mapping relationship between the address information and the configuration command. In addition, before performing a deletion operation or a modification operation on an existing configuration command according to the configuration command, the network device may further analyze address information (such as an IP address, that is, a source IP address of the management message) of the administrator from the management message, and query the mapping relationship through the configuration command to obtain address information corresponding to the configuration command. If the address information in the management message is the same as the address information in the mapping relation, executing the process of deleting operation or modifying operation to the existing configuration command according to the configuration command. If the address information in the management message is different from the address information in the mapping relation, deleting operation or modifying operation of the existing configuration command according to the configuration command is forbidden. That is, only the same administrator can use the configuration command to operate the existing configuration command, so that the security of the existing configuration command can be ensured.
Based on the above technical solution, in the embodiment of the present disclosure, an existing configuration command may be protected, and the existing configuration command is prevented from being executed incorrectly. Moreover, the configuration command can be operated only by a management mode with the authority to operate a certain configuration command, so that the robustness and the reliability of the management of the configuration command can be improved, serious network accidents can be avoided, and the interruption of services can be avoided.
In one example, a priority may also be set for each management mode and a priority may be set for each configuration command. Thus, when the priority of the management mode is higher than that of the configuration command, the configuration command can be operated, so that the management mode with high priority can operate the configuration command with low priority.
Based on this, in one example, after determining whether there is a command item matching the configuration command and the management manner in the command set, if not, the configuration command in the management message is not directly rejected to be executed, but the priority of the management manner is first acquired and the priority of the configuration command is acquired. If the priority of the management mode is higher than the priority of the configuration command, the management mode which is recorded in the command set and allows the configuration command to be operated can be notified to the manager, so that the manager can resend the management message by adopting the management mode which allows the configuration command to be operated. If the priority of the management mode is not better than the priority of the configuration command, the configuration command in the execution management message may be rejected, that is, step 204 is performed.
In one example, the process for "obtaining the priority of the management mode and obtaining the priority of the configuration command" may include, but is not limited to: the mapping table can be inquired through the management mode to obtain the priority corresponding to the management mode; in addition, the command set can be queried through the configuration command, and the priority corresponding to the configuration command is obtained. The mapping table may be used to record a correspondence between a management manner and a priority; in addition, the command set may be used to record the correspondence between the configuration commands and the priorities.
In one example, when the management method is analyzed from the management message, information representing the management method is carried in the management message based on the "Console management method, Netconf management method, Telnet management method, SSH management method, MIB management method, TR069 management method, WEB management method, SDN management method", and therefore, the management method carried in the management message can be identified from the information.
The above technical solutions of the embodiments of the present disclosure are described below with reference to specific application scenarios.
In this application scenario, the network device may establish a mapping table and a command set, where the command set may be a command tree. As shown in table 1, which is an example of a mapping table, the mapping table is used to record the correspondence between the management manner and the priority. As shown in table 2, the command set is an example of a command set, and the command set is used to record the correspondence relationship between configuration commands, priorities, and management manners. Of course, table 1 and table 2 are only an example, and in practical applications, the structure is not limited to this, for example, the command set is a tree structure, and table 2 is only an example given for the purpose of illustration, as long as the command set can record the corresponding relationship between the configuration command, the priority, and the management manner.
TABLE 1
| Management mode | Management mode identification | Priority level |
| Console management mode | 1 | 0 |
| Netconf management mode | 2 | 1 |
| Telnet management mode | 3 | 1 |
| SSH management mode | 4 | 1 |
| Management Information Base (MIB) management mode | 5 | 1 |
| TR069 management mode | 6 | 1 |
| WEB management mode | 7 | 1 |
| SDN management mode | 8 | 1 |
TABLE 2
| Configuration commands | Management mode | Priority level |
| pppoe-server work-mode | 2 | 1 |
| undo pppoe-server work-mode | 2 | 1 |
| vpn-target{STRING<3-21>} | 1 | 1 |
| undo vpn-target{STRING<3-21>} | 1 | 1 |
| import route-policy | 0 | 1 |
| undo import route-policy | 0 | 1 |
As can be seen from table 1, the priority of the Console management system is 0, and the priority of the other management systems is 1, indicating that the priority of the Console management system is higher than the priority of the other management systems. Of course, the priority in table 1 is only an example, and is not limited thereto, and the priority in the Netconf management mode may be 0.
As can be seen from tables 1 and 2, the priority of the Console management method is 0, the priority of all the configuration commands is 1, which means that the priority of the Console management method is higher than the priority of all the configuration commands, and therefore, the Console management method can operate all the configuration commands and has the highest management authority.
As can be seen from table 2, the command set is used to record the corresponding relationship among the configuration command, the priority, and the management manner, and of course, the command set may also include other contents, and the contents of the command set are not limited. In table 2, the number in the management method is a management method identifier corresponding to the management method, and for example, 2 in the management method indicates a Netconf management method, 1 in the management method indicates a Console management method, and 0 in the management method indicates all the management methods. In practical applications, the command set shown in table 3 may be used.
TABLE 3
Based on the application scenario, in an example, when the cloud management platform needs to create a configuration command "pppoe-server work-mode" on the network device, a management message is sent to the network device in a Netconf management manner, where the management message carries the "pppoe-server work-mode" and the Netconf management manner. After receiving the management message, the network device analyzes the management modes of the "pppoe-server work-mode" and the Netconf from the management message. Then, by querying the command set shown in table 2 or table 3, it may be determined that the management manner corresponding to the "pppo-server work-mode" is a Netconf management manner, that is, the management manner in the command set includes a Netconf management manner in the management message, that is, the Netconf management manner is a management manner allowing to operate the "pppo-server work-mode", and a (building) configuration command "pppo-server work-mode" is created at the network device. In addition, the network device may further analyze address information of the administrator from the management message (for example, a source address of the management message, that is, address information of the cloud management platform), and record a mapping relationship between the address information and the "pppoe-server work-mode".
Further, when the network administrator needs to delete the "ppoe-server work-mode" of the network device, a management message may be sent to the network device in a Telnet management manner, and the management message carries a configuration command "undo ppoe-server work-mode" and the Telnet management manner. After the network device receives the management message, the network device may parse the "undo pppoe-server work-mode" and the Telnet management mode from the management message, and query the command set shown in table 2 or table 3 by using the "undo pppoe-server work-mode", so as to determine that the management mode corresponding to the "undo pppoe-server work-mode" is the Netconf management mode, that is, the management mode in the command set does not include the Telnet management mode in the management message, that is, the Telnet management mode is a management mode that does not allow the operation of the "undo pppoe-server work-mode".
Then, the network device queries the table 1 to obtain a priority 1 of the Telnet management mode, and the network device queries the table 2 or the table 3 to obtain a priority 1 of the undo-pppoe-server work-mode, that is, the priority 1 of the Telnet management mode is not greater than the priority 1 of the undo-pppoe-server work-mode, so that the deletion of the "pppoe-server work-mode" of the network device is refused, and the user can be prompted to have no right to perform the deletion operation, thereby achieving the purpose of protecting the configuration command "pppoe-server work-mode".
When the network administrator/cloud management platform needs to delete the "ppoe-server work-mode" of the network device, a management message can be sent to the network device in a Console management mode, and the management message carries a configuration command of the "undo ppoe-server work-mode" and the Console management mode. After receiving the management message, the network device parses "undo ppoe-server work-mode" and the Console management mode from the management message, and determines that the management mode corresponding to "undo ppoe-server work-mode" is the Netconf management mode by querying the command set shown in table 2 or table 3, that is, the management mode in the command set does not include the Console management mode in the management message, that is, the Console management mode is a management mode that does not allow the operation of "undo ppoe-server work-mode".
The network device queries the table 1 to obtain a priority 0 of the Console management mode, and the network device queries the table 2 or the table 3 to obtain a priority 1 of the "undo ppoe-server work-mode", that is, the priority 0 of the Console management mode is greater than the priority 1 of the "undo ppoe-server work-mode", so that the manager (network administrator/cloud management platform) is notified of the management mode (Netconf management mode) that allows the "undo ppoe-server work-mode" to be operated, and the manager retransmits the management message by using the management mode.
After receiving the notification message carrying the Netconf management mode, the cloud management platform sends a management message to the network device in the Netconf management mode, wherein the management message carries a configuration command 'undo ppoe-server work-mode' and the Netconf management mode. After receiving the management message, the network device parses "undo ppoe-server work-mode" and a Netconf management mode from the management message, and determines that the management mode corresponding to "undo ppoe-server work-mode" is a Netconf management mode by querying a command set shown in table 2 or table 3 by "undo ppoe-server work-mode", that is, the management mode in the command set includes the Netconf management mode in the management message, that is, the Netconf management mode is a management mode allowing operation of "undo ppoe-server work-mode". Then, the network device analyzes the address information of the administrator (i.e., the address information of the cloud management platform) from the management message, and since the address information of the administrator is the same as the address information in the mapping relationship (e.g., the mapping relationship between the address information of the cloud management platform and the "pppo-server work-mode"), the "pppo-server work-mode" may be deleted.
After receiving the notification message carrying the Netconf management mode, the network administrator sends a management message to the network device in the Netconf management mode, wherein the management message carries a configuration command 'undo ppoe-server work-mode' and the Netconf management mode. After receiving the management message, the network device parses "undo ppoe-server work-mode" and a Netconf management mode from the management message, and determines that the management mode corresponding to "undo ppoe-server work-mode" is a Netconf management mode by querying a command set shown in table 2 or table 3 by "undo ppoe-server work-mode", that is, the management mode in the command set includes the Netconf management mode in the management message, that is, the Netconf management mode is a management mode allowing operation of "undo ppoe-server work-mode". The network device analyzes address information of a manager (namely, address information used by a network manager, the address information is different from the address information of the cloud management platform) from the management message, and the address information of the manager is different from the address information in the mapping relation (for example, the mapping relation between the address information of the cloud management platform and the "pppo-server work-mode"), so that the "pppo-server work-mode" of the network device is rejected to be deleted, and a user is prompted to have no right to delete the network device.
Based on the same technical concept as the method described above, an embodiment of the present disclosure further provides a configuration command management apparatus, where the method may be applied to a network device, and as shown in fig. 3, for a schematic structural diagram of the configuration command management apparatus, the configuration command management apparatus may include: the analysis module 301 is configured to, when receiving a management message, analyze a configuration command and a management manner from the management message; a determining module 302, configured to determine whether a command item matching the configuration command and the management manner exists in a command set; each command item in the command set is used for recording the corresponding relation between a configuration command and a management mode; and the processing module 303 is configured to execute the configuration command when the determination result is that the configuration command exists.
In an example, the determining module 302 is specifically configured to, in a process of determining whether a command item matching the configuration command and the management manner exists in a command set, query the command set through the configuration command to obtain the management manner corresponding to the configuration command; if the obtained management mode comprises the management mode in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; and if the obtained management mode does not comprise the management mode in the management message, determining that no command item matched with the configuration command and the management mode exists in the command set.
In an example, the determining module 302 is specifically configured to, in a process of determining whether a command item matching the configuration command and the management manner exists in a command set, query the command set through the management manner to obtain the configuration command corresponding to the management manner; if the obtained configuration command comprises the configuration command in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; and if the obtained configuration command does not comprise the configuration command in the management message, determining that no command item matched with the configuration command and the management mode exists in the command set.
In an example, the processing module 303 is specifically configured to create the configuration command in a process of executing the configuration command, or delete an existing configuration command according to the configuration command, or modify an existing configuration command according to the configuration command;
the processing module 303 is further configured to, after the configuration command is created, parse address information of a manager from the management message, and record a mapping relationship between the address information and the configuration command;
the processing module 303 is further configured to, before performing a deletion operation or a modification operation on an existing configuration command according to the configuration command, parse address information of a manager from the management message, and query a mapping relationship through the configuration command to obtain address information corresponding to the configuration command; if the address information in the management message is the same as the address information in the mapping relation, deleting or modifying the existing configuration command according to the configuration command, otherwise, forbidding deleting or modifying the existing configuration command according to the configuration command.
In an example, the processing module 303 is further configured to, when the determination result of the determining module 302 is that the configuration command does not exist, obtain a priority of the management mode and a priority of the configuration command; and if the priority of the management mode is superior to that of the configuration command, notifying a manager of the management mode which is recorded in the command set and allows the configuration command to be operated.
In an example, the processing module 303 is further configured to, in a process of obtaining the priority of the management manner and the priority of the configuration command, query a mapping table through the management manner to obtain the priority corresponding to the management manner; inquiring a command set through the configuration command to obtain the priority corresponding to the configuration command; the mapping table is used for recording the corresponding relation between the management mode and the priority; the command set is used for recording the corresponding relation between the configuration command and the priority.
For the network device provided in the embodiment of the present disclosure, from a hardware level, a schematic diagram of a hardware architecture may specifically refer to fig. 4. The method comprises the following steps: a machine-readable storage medium and a processor, wherein:
a machine-readable storage medium: the instruction code is stored.
A processor: the instruction codes stored in the machine-readable storage medium are communicated with the machine-readable storage medium, read and executed, and the configuration command management operation disclosed by the above example of the disclosure is realized.
Here, a machine-readable storage medium may be any electronic, magnetic, optical, or other physical storage device that can contain or store information such as executable instructions, data, and so forth. For example, the machine-readable storage medium may be: a RAM (random Access Memory), a volatile Memory, a non-volatile Memory, a flash Memory, a storage drive (e.g., a hard drive), a solid state drive, any type of storage disk (e.g., an optical disk, a dvd, etc.), or similar storage medium, or a combination thereof.
Based on the same technical concept as the method, the embodiment of the present disclosure further provides a machine-readable storage medium, where the machine-readable storage medium may be applied to a network device, and the machine-readable storage medium stores several computer instructions, and when executed, the computer instructions perform the following processes:
when a management message is received, analyzing a configuration command and a management mode from the management message;
determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode;
and if so, executing the configuration command.
The systems, devices, modules or units illustrated in the above embodiments may be implemented by a computer chip or an entity, or by a product with certain functions. A typical implementation device is a computer, which may take the form of a personal computer, laptop computer, cellular telephone, camera phone, smart phone, personal digital assistant, media player, navigation device, email messaging device, game console, tablet computer, wearable device, or a combination of any of these devices.
For convenience of description, the above devices are described as being divided into various units by function, and are described separately. Of course, the functionality of the various elements may be implemented in the same one or more software and/or hardware implementations in practicing the disclosure.
As will be appreciated by one skilled in the art, embodiments of the present disclosure may be provided as a method, system, or computer program product. Accordingly, the present disclosure may take the form of an entirely hardware embodiment, an entirely software embodiment or an embodiment combining software and hardware aspects. Furthermore, the disclosed embodiments may take the form of a computer program product embodied on one or more computer-usable storage media (including, but not limited to, disk storage, CD-ROM, optical storage, and so forth) having computer-usable program code embodied therein.
The present disclosure is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the disclosure. It will be understood that each flow and/or block of the flow diagrams and/or block diagrams, and combinations of flows and/or blocks in the flow diagrams and/or block diagrams, can be implemented by computer program instructions. These computer program instructions may be provided to a processor of a general purpose computer, special purpose computer, embedded processor, or other programmable data processing apparatus to produce a machine, such that the instructions, which execute via the processor of the computer or other programmable data processing apparatus, create means for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
Furthermore, these computer program instructions may also be stored in a computer-readable memory that can direct a computer or other programmable data processing apparatus to function in a particular manner, such that the instructions stored in the computer-readable memory produce an article of manufacture including instruction means which implement the function specified in the flowchart flow or flows and/or block diagram block or blocks.
These computer program instructions may also be loaded onto a computer or other programmable data processing apparatus to cause a series of operational steps to be performed on the computer or other programmable apparatus to produce a computer implemented process such that the instructions which execute on the computer or other programmable apparatus provide steps for implementing the functions specified in the flowchart flow or flows and/or block diagram block or blocks.
The above description is only an example of the present disclosure and is not intended to limit the present disclosure. Various modifications and variations of this disclosure will be apparent to those skilled in the art. Any modification, equivalent replacement, improvement, etc. made within the spirit and principle of the present disclosure should be included in the scope of the claims of the present disclosure.
Claims (14)
1. A method for configuration command management, the method comprising:
when a management message is received, analyzing a configuration command and a management mode from the management message;
determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode;
if yes, executing the configuration command;
wherein the process of executing the configuration command comprises: analyzing address information of a manager from the management message, and inquiring a mapping relation through the configuration command to obtain address information corresponding to the configuration command; and if the address information in the management message is the same as the address information in the mapping relation, deleting or modifying the existing configuration command according to the configuration command.
2. The method according to claim 1, wherein the process of determining whether there is a command item in the command set that matches the configuration command and the management manner specifically includes:
inquiring a command set through the configuration command to obtain a management mode corresponding to the configuration command;
if the obtained management mode comprises the management mode in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set.
3. The method according to claim 1, wherein the process of determining whether there is a command item in the command set that matches the configuration command and the management manner specifically includes:
inquiring a command set through the management mode to obtain a configuration command corresponding to the management mode;
if the obtained configuration command comprises the configuration command in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set.
4. The method of claim 1, wherein after determining whether there is a command item in the command set that matches the configuration command and the management manner, the method further comprises:
if not, refusing to execute the configuration command.
5. The method of claim 1,
the process of executing the configuration command further comprises: creating the configuration command;
after the creating the configuration command, the method further comprises: analyzing the address information of the manager from the management message, and recording the mapping relation between the address information and the configuration command.
6. The method of claim 1, wherein after determining whether there is a command item in the command set that matches the configuration command and the management manner, the method further comprises:
if the configuration command does not exist, acquiring the priority of the management mode and the priority of the configuration command;
and if the priority of the management mode is superior to that of the configuration command, notifying a manager of the management mode which is recorded in the command set and allows the configuration command to be operated.
7. The method of claim 6,
the process of obtaining the priority of the management mode and the priority of the configuration command includes:
inquiring a mapping table through the management mode to obtain the priority corresponding to the management mode;
inquiring a command set through the configuration command to obtain the priority corresponding to the configuration command;
the mapping table is used for recording the corresponding relation between the management mode and the priority;
the command set is used for recording the corresponding relation between the configuration command and the priority.
8. A configuration command management apparatus, characterized in that the apparatus comprises:
the analysis module is used for analyzing a configuration command and a management mode from the management message when the management message is received;
the determining module is used for determining whether a command item matched with the configuration command and the management mode exists in a command set; each command item in the command set is used for recording the corresponding relation between a configuration command and a management mode;
the processing module is used for executing the configuration command when the determination result is that the configuration command exists; the processing module is specifically configured to, in the process of executing the configuration command, parse address information of the administrator from the management message, and query a mapping relationship through the configuration command to obtain address information corresponding to the configuration command; and if the address information in the management message is the same as the address information in the mapping relation, deleting or modifying the existing configuration command according to the configuration command.
9. The apparatus according to claim 8, wherein the determining module is specifically configured to, in the process of determining whether there is a command item matching the configuration command and the management manner in a command set, query the command set through the configuration command to obtain the management manner corresponding to the configuration command; if the obtained management mode comprises the management mode in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set.
10. The apparatus according to claim 8, wherein the determining module is specifically configured to, in the process of determining whether there is a command item matching the configuration command and the management manner in a command set, query the command set by the management manner to obtain the configuration command corresponding to the management manner; if the obtained configuration command comprises the configuration command in the management message, determining that a command item matched with the configuration command and the management mode exists in the command set; otherwise, determining that no command item matched with the configuration command and the management mode exists in the command set.
11. The apparatus of claim 8, wherein the processing module is further configured to create the configuration command during execution of the configuration command;
the processing module is further configured to, after the configuration command is created, parse address information of the administrator from the management message, and record a mapping relationship between the address information and the configuration command.
12. The apparatus according to claim 8, wherein the processing module is further configured to, when the determination result is that the determination result does not exist, obtain a priority of the management mode and a priority of the configuration command; and if the priority of the management mode is superior to that of the configuration command, notifying a manager of the management mode which is recorded in the command set and allows the configuration command to be operated.
13. The apparatus according to claim 12, wherein the processing module is further configured to query a mapping table through the management manner to obtain the priority corresponding to the management manner in the process of obtaining the priority of the management manner and the priority of the configuration command; inquiring a command set through the configuration command to obtain the priority corresponding to the configuration command; the mapping table is used for recording the corresponding relation between the management mode and the priority; the command set is used for recording the corresponding relation between the configuration command and the priority.
14. A computer readable storage medium having stored thereon computer instructions that, when executed, perform the following:
when a management message is received, analyzing a configuration command and a management mode from the management message;
determining whether a command item matched with the configuration command and the management mode exists in a command set;
each command item in the command set is used for recording the corresponding relation between the configuration command and the management mode;
if yes, executing the configuration command;
wherein the process of executing the configuration command comprises: analyzing address information of a manager from the management message, and inquiring a mapping relation through the configuration command to obtain address information corresponding to the configuration command; and if the address information in the management message is the same as the address information in the mapping relation, deleting or modifying the existing configuration command according to the configuration command.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710769221.9A CN108259214B (en) | 2017-08-31 | 2017-08-31 | Configuration command management method, device and machine-readable storage medium |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN201710769221.9A CN108259214B (en) | 2017-08-31 | 2017-08-31 | Configuration command management method, device and machine-readable storage medium |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN108259214A CN108259214A (en) | 2018-07-06 |
| CN108259214B true CN108259214B (en) | 2021-03-23 |
Family
ID=62721167
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN201710769221.9A Active CN108259214B (en) | 2017-08-31 | 2017-08-31 | Configuration command management method, device and machine-readable storage medium |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN108259214B (en) |
Families Citing this family (2)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN110532121B (en) * | 2019-08-20 | 2022-08-26 | 新华三大数据技术有限公司 | Service module positioning method and device |
| CN111176763B (en) * | 2019-12-31 | 2023-03-31 | 杭州迪普科技股份有限公司 | Method and device for calling help function of command |
Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1859153A (en) * | 2005-07-22 | 2006-11-08 | 上海华为技术有限公司 | Method for setting user's power in communication system |
| CN1905476A (en) * | 2005-07-29 | 2007-01-31 | 中兴通讯股份有限公司 | Managing system and method for terminal products |
| CN101051937A (en) * | 2006-05-10 | 2007-10-10 | 华为技术有限公司 | User's power managing method and system based on XML |
| CN101110702A (en) * | 2007-08-14 | 2008-01-23 | 中兴通讯股份有限公司 | Method for command line interface authority classification and system thereof |
| JP5220712B2 (en) * | 2009-09-09 | 2013-06-26 | 日本電信電話株式会社 | Management server device, device management system, and device management method |
| CN103647826A (en) * | 2013-12-10 | 2014-03-19 | 国家电网公司 | Instruction level user permission control method in Telnet mode |
| CN104518907A (en) * | 2014-09-05 | 2015-04-15 | 深圳市华讯方舟科技有限公司 | Network device and network management system management authority limit synchronizing method |
-
2017
- 2017-08-31 CN CN201710769221.9A patent/CN108259214B/en active Active
Patent Citations (7)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN1859153A (en) * | 2005-07-22 | 2006-11-08 | 上海华为技术有限公司 | Method for setting user's power in communication system |
| CN1905476A (en) * | 2005-07-29 | 2007-01-31 | 中兴通讯股份有限公司 | Managing system and method for terminal products |
| CN101051937A (en) * | 2006-05-10 | 2007-10-10 | 华为技术有限公司 | User's power managing method and system based on XML |
| CN101110702A (en) * | 2007-08-14 | 2008-01-23 | 中兴通讯股份有限公司 | Method for command line interface authority classification and system thereof |
| JP5220712B2 (en) * | 2009-09-09 | 2013-06-26 | 日本電信電話株式会社 | Management server device, device management system, and device management method |
| CN103647826A (en) * | 2013-12-10 | 2014-03-19 | 国家电网公司 | Instruction level user permission control method in Telnet mode |
| CN104518907A (en) * | 2014-09-05 | 2015-04-15 | 深圳市华讯方舟科技有限公司 | Network device and network management system management authority limit synchronizing method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN108259214A (en) | 2018-07-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN108632074B (en) | Service configuration file issuing method and device | |
| CN106713049B (en) | Monitoring alarm method and device | |
| US10225145B2 (en) | Method and device for updating client | |
| WO2021051878A1 (en) | Cloud resource acquisition method and apparatus based on user permission, and computer device | |
| KR101956486B1 (en) | Method and system for facilitating terminal identifiers | |
| US10447703B2 (en) | VNF package operation method and apparatus | |
| CN108848034B (en) | Network equipment and table entry learning method | |
| US9223640B2 (en) | Strategy based event notification chain | |
| CN109714239B (en) | Management message issuing method, VNFM (virtual network management frequency) equipment and server | |
| CN108289034B (en) | A kind of fault discovery method and apparatus | |
| CN104572727A (en) | Data querying method and device | |
| CN106134141A (en) | A kind of method and device updating network service describer NSD | |
| WO2020224238A1 (en) | Blockchain node depolyment method, device and equipment, and storage medium | |
| CN113486339A (en) | Data processing method, device, equipment and machine-readable storage medium | |
| CN109800571B (en) | Event processing method and device, storage medium and electronic device | |
| CN108259214B (en) | Configuration command management method, device and machine-readable storage medium | |
| CN110808839A (en) | Processing method, device, equipment and medium for block chain abnormal data | |
| CN114208114A (en) | Multi-view security context per participant | |
| US10033603B2 (en) | System monitoring device | |
| CN109784051A (en) | Protecting information safety method, device and equipment | |
| US10693731B2 (en) | Flow entry management method and device | |
| CN115499487B (en) | Updating method and device of server configuration file, storage medium and equipment | |
| CN113872951B (en) | Hybrid cloud security policy issuing method and device, electronic equipment and storage medium | |
| CN106533882B (en) | Message processing method and device | |
| EP4155923A1 (en) | Virtualized network function deployment method, management and orchestration platform, and medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |