CN112636968B

CN112636968B - Network scheme construction method, device, readable medium and equipment

Info

Publication number: CN112636968B
Application number: CN202011505114.3A
Authority: CN
Inventors: 张青; 佘春燕; 王如柳; 谭吟汐; 陈建友
Original assignee: China Construction Bank Corp
Current assignee: China Construction Bank Corp
Priority date: 2020-12-18
Filing date: 2020-12-18
Publication date: 2023-03-28
Anticipated expiration: 2040-12-18
Also published as: CN112636968A

Abstract

The application provides a method, a device, a readable medium and equipment for constructing a network scheme, wherein the method for constructing the network scheme outputs each selected model in model selection operation by responding to the model selection operation; the model is formed by connecting a plurality of pre-configured network devices belonging to a specific network role according to a specific topological relation; models are used to implement specific functions in the network; the network role is a type of network equipment with a plurality of specific technical attributes; the technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol; responding to the model combination operation, and performing combination connection configuration on the topological relation between each output model to obtain a preliminary network scheme; and responding to the communication configuration operation, and configuring the communication configuration information between the network equipment and the network equipment in the preliminary network scheme to obtain a target network scheme, so that the network scheme does not need to be written manually, the efficiency of constructing the scheme is improved, and the error rate is reduced.

Description

Network scheme construction method, device, readable medium and equipment

Technical Field

The present application relates to the field of computer technologies, and in particular, to a method, an apparatus, a readable medium, and a device for constructing a network scheme.

Background

In the prior art, a network scheme designer needs to design and construct a network scheme capable of meeting the user requirements according to the user requirements. Specifically, the design and construction process of the existing network scheme is mostly written manually. In the process of manually writing the network scheme, the device information of various devices required to be used and the topological relationship among the multiple devices need to be manually configured to complete the construction of the network scheme.

Because the devices involved in the process of constructing the network scheme are too many and the information required to be manually designed and configured is too much, the workload of the process of manually writing the network scheme is too large, the efficiency is low, and the problem of configuration errors is easy to occur. Moreover, when a plurality of network scheme designers design a network scheme together, different designers configure different device information of devices in the network scheme and topological relationships among the devices, so that errors due to inconsistent configurations exist after the devices are combined into a complete network scheme.

Disclosure of Invention

Based on the defects of the prior art, the application provides a method, a device, a readable medium and equipment for constructing a network scheme, so as to improve the construction efficiency of the network scheme.

The first aspect of the present application discloses a method for constructing a network scheme, including:

outputting each selected model in the model selection operation in response to the model selection operation; the model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation; the model is used for realizing specific functions in the network; the network role is a type of network equipment with a plurality of specific technical attributes; the technical attribute is a specific function attribute of the network equipment; the technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol;

responding to model combination operation, and performing combination connection configuration on the output topological relation between the models to obtain a preliminary network scheme;

and responding to the communication configuration operation, and configuring the communication configuration information between the network equipment and the network equipment in the preliminary network scheme to obtain a target network scheme.

Optionally, in the method for constructing a network scheme, the communication configuration information between the network device and the network device includes: at least one of a communication protocol between the network devices, a communication bandwidth between the network devices, and a communication port between the network devices.

Optionally, in the method for constructing a network scheme, after outputting each model selected in the model selection operation in response to the model selection operation, the method further includes:

and for each network role in each output model, responding to the technical attribute selection operation of the network role, selecting the technical attribute selected by the technical attribute selection operation from a plurality of specific technical attributes of the network role, and taking the selected technical attribute as the technical attribute actually required by the network role in the target network scheme.

Optionally, in the method for constructing a network scheme, before the responding to the communication configuration operation and configuring the communication configuration information between the network device and the network device in the preliminary network scheme to obtain the target network scheme, the method further includes:

and responding to network role instantiation operation for each network role in the preliminary network scheme, and performing instantiation configuration on parameters corresponding to basic configuration protocols of each technical attribute of the network roles.

Optionally, in the method for constructing the network scheme, each of the network roles has an application program interface API corresponding to a plurality of technical attributes; and the technical attribute corresponding API is used for calling and viewing the technical attribute.

A second aspect of the present application discloses a method for checking a network scheme, including:

acquiring a checking equipment list; wherein the checking the device manifest comprises: identification information of each network device to be checked;

for each network device in the check device list, determining design state configuration information of the network device in a target network scheme by using the identification information of the network device; wherein, the target network scheme is constructed by any one method of claims 1 to 5; the design configuration information of the network device in the target network scheme includes: the network device is configured with a basic configuration protocol and basic configuration protocol corresponding parameters of each technical attribute of the network role which the network device belongs to in the target network scheme;

determining running state configuration information of the network equipment when the network equipment actually implements and runs the target network scheme by using the identification information of the network equipment; wherein the running state configuration information of the network device when actually implementing and running the target network scheme includes: the technical attribute of the network equipment when the target network scheme is actually implemented and operated, a basic configuration protocol of the technical attribute when the technical attribute is actually implemented and a parameter corresponding to the basic configuration protocol;

comparing the design state configuration information with the operation state configuration information of the network equipment to determine the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment;

and storing the difference configuration information between the design state configuration information and the running state configuration information of the network equipment.

Optionally, in the checking method of the network scheme, if each of the network roles has an application program interface API corresponding to a plurality of technical attributes, determining, by using the identification information of the network device, design state configuration information of the network device in a target network scheme for each of the network devices in the checking device list, where the method includes:

for each network device in the checking device list, determining, by using the identification information of the network device, identification information of a network role that the network device belongs to in the target network scheme, identification information of each technical attribute that the network role belongs to, and a corresponding parameter of a basic configuration protocol of each technical attribute in the target network scheme;

and aiming at the API corresponding to each technical attribute of the network role which the network equipment belongs to in the target network scheme, calling the API corresponding to the technical attribute of the network equipment by utilizing the identification information of the network equipment, the identification information of the technical attribute and the corresponding parameter of the basic configuration protocol of the technical attribute in the target network scheme to obtain the basic configuration protocol which is pre-configured in the target network scheme and the corresponding parameter of the basic configuration protocol of the technical attribute.

A third aspect of the present application discloses a network scheme constructing apparatus, including:

a selection unit configured to output each model selected in a model selection operation in response to the model selection operation; the model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation; the model is used for realizing specific functions in the network; the network role is a type of network equipment with a plurality of specific technical attributes; the technical attribute is a specific function attribute of the network equipment; the technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol;

the combination unit is used for responding to model combination operation and carrying out combination connection configuration on the topological relation between each output model to obtain a preliminary network scheme;

and the configuration unit is used for responding to the communication configuration operation and configuring the communication configuration information between the network equipment and the network equipment in the preliminary network scheme to obtain a target network scheme.

Optionally, in the apparatus for constructing a network scheme, the communication configuration information between the network device and the network device includes: at least one of a communication protocol between the network device and the network device, a communication bandwidth between the network device and the network device, and a communication port between the network device and the network device.

Optionally, in the above apparatus for constructing a network scheme, the apparatus further includes:

and the selecting unit is used for responding to the technical attribute selecting operation of the network role aiming at each network role in each output model, selecting the technical attribute selected by the technical attribute selecting operation from a plurality of specific technical attributes of the network role, and taking the selected technical attribute as the technical attribute actually required by the network role in the target network scheme.

and the instantiation unit is used for responding to network role instantiation operation for each network role in the preliminary network scheme and performing instantiation configuration on the parameters corresponding to the basic configuration protocol of each technical attribute of the network roles.

Optionally, in the building apparatus of the network scheme, each of the network roles has an application program interface API corresponding to a plurality of technical attributes; and the technical attribute corresponding API is used for calling and viewing the technical attribute.

A fourth aspect of the present application discloses a device for checking a network scheme, including:

the acquisition unit is used for acquiring a checking equipment list; wherein the checking of the device inventory comprises: identification information of each network device to be checked;

a first determining unit, configured to determine, for each network device in the checked device list, design state configuration information of the network device in a target network scheme by using identification information of the network device; wherein the target network scheme is constructed by any one of the methods of the first aspect; the design configuration information of the network device in the target network scheme includes: the network device is configured with a basic configuration protocol and basic configuration protocol corresponding parameters of each technical attribute of the network role which the network device belongs to in the target network scheme;

a second determining unit, configured to determine, by using the identifier information of the network device, operating state configuration information of the network device when the target network scheme is actually implemented and operated; wherein the running state configuration information of the network device when actually implementing and running the target network scheme includes: the technical attribute of the network equipment when the target network scheme is actually implemented and operated, a basic configuration protocol of the technical attribute when the technical attribute is actually implemented and a parameter corresponding to the basic configuration protocol;

the comparison unit is used for comparing the design state configuration information and the operation state configuration information of the network equipment to determine the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment;

and the storage unit is used for storing the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment.

Optionally, in the checking apparatus of the network scheme, if each of the network roles has an application program interface API corresponding to a plurality of technical attributes, the first determining unit includes:

a first determining subunit, configured to determine, for each network device in the check device list, identification information of a network role that the network device belongs to in the target network scheme, identification information of each technical attribute that the network role belongs to, and a basic configuration protocol corresponding parameter of each technical attribute in the target network scheme, by using identification information of the network device;

and the calling subunit is configured to, for an API corresponding to each technical attribute of a network role to which the network device belongs in the target network scheme, call the API corresponding to the technical attribute of the network device by using the identification information of the network device, the identification information of the technical attribute, and a parameter corresponding to a basic configuration protocol of the technical attribute in the target network scheme, so as to obtain a basic configuration protocol and a parameter corresponding to the basic configuration protocol, which are pre-configured in the target network scheme, of the technical attribute.

A fifth aspect of the application discloses a computer readable medium having a computer program stored thereon, wherein the program when executed by a processor performs the method of any of the first aspects or the method of any of the second aspects.

A sixth aspect of the present application discloses an apparatus comprising:

one or more processors;

a storage device having one or more programs stored thereon;

the one or more programs, when executed by the one or more processors, cause the one or more processors to implement a method as in any one of the first aspects, or a method as in the second aspect.

It can be seen from the foregoing technical solutions that, in the method for constructing a network scheme provided in this embodiment of the present application, the model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation, and is used to implement a specific function in a network, the network role is a type of network device having a plurality of specific technical attributes, the technical attribute is a specific function possessed by the network device, and the technical attribute is determined by a preconfigured basic configuration protocol and a parameter corresponding to the basic configuration protocol. Therefore, only the model selection operation needs to be responded, each selected model in the model selection operation is output, the model combination operation is responded, the combination connection configuration is carried out on the topological relation between each output model, a preliminary network scheme is obtained, then the communication configuration operation is responded, the communication configuration information between the network equipment and the network equipment in the preliminary network scheme is configured, the target network scheme can be obtained, the configuration information of each network equipment and the topological relation between each network equipment do not need to be written manually, the construction efficiency of the network scheme is improved, and errors caused by manual configuration of the network scheme are reduced.

Drawings

In order to more clearly illustrate the embodiments of the present invention or the technical solutions in the prior art, the drawings used in the description of the embodiments or the prior art will be briefly described below, it is obvious that the drawings in the following description are only embodiments of the present invention, and for those skilled in the art, other drawings can be obtained according to the provided drawings without creative efforts.

Fig. 1 is a schematic flowchart of a method for constructing a network scheme according to an embodiment of the present application;

fig. 2 is a schematic diagram of a process for constructing a network scheme according to an embodiment of the present application;

fig. 3 is a schematic flowchart of a checking method of a network scenario according to an embodiment of the present application;

fig. 4 is a schematic flowchart of a method for determining design state configuration information of a network device in a target network scenario according to an embodiment of the present application;

fig. 5 is a schematic structural diagram of a construction apparatus of a network scheme according to an embodiment of the present application;

fig. 6 is a schematic structural diagram of a checking apparatus of a network scheme according to an embodiment of the present application.

Detailed Description

The technical solutions in the embodiments of the present invention will be clearly and completely described below with reference to the drawings in the embodiments of the present invention, and it is obvious that the described embodiments are only a part of the embodiments of the present invention, and not all of the embodiments. All other embodiments, which can be derived by a person skilled in the art from the embodiments given herein without making any creative effort, shall fall within the protection scope of the present invention.

Referring to fig. 1, the embodiment of the present application discloses a method for constructing a network scheme, including:

s101, responding to the model selection operation, and outputting each selected model in the model selection operation.

The model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation. The models are used to implement specific functions in the network. A network role is a class of network devices that have a particular number of technical attributes. The technical attribute is a specific function attribute of the network equipment, and is set by a pre-configured basic configuration protocol and a parameter corresponding to the basic configuration protocol.

Specifically, a plurality of models are pre-configured, and each model is used for implementing a specific function in the network, such as a model for implementing a firewall function, a model for implementing a server access function, a model for implementing an internet access function, and a model for implementing a login authentication function. While a particular function in a network may be configured with a number of different models. The model is formed by connecting a plurality of pre-configured network devices belonging to a specific network role according to a specific topological relation. Therefore, multiple models implementing the same specific function may have different topological relationships, and multiple network devices belonging to a specific network role may also be selected differently.

A network role is a class of network devices that have a particular number of technical attributes. The specific plurality of technical attributes that different network roles have are different. The technical attribute is a specific functional attribute possessed by the network device, such as a technical attribute of a Link Layer Discovery Protocol (LLDP) that is opened, a technical attribute of creating a virtual local area network, and the like. The technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol. For example, for a technical attribute of starting the LLDP, a basic configuration Protocol of the technical attribute is a management IP address of the LLDP to be configured, and a specific management Internet Protocol (IP) address of the LLDP is specified as a specific parameter specifying the basic configuration Protocol.

It should be noted that the parameters corresponding to the basic configuration protocol of the technical attributes may be configured in advance, or may be configured by the user when the user instantiates the constructed network scheme subsequently. And the basic configuration protocol of the technical attribute does not necessarily have parameter values, namely, some technical attributes only need to set the technical configuration protocol.

The device implementing the embodiment shown in fig. 1 may output all preconfigured models for selection by the user, and then the user may select a model that can meet the specific requirements of the current network scheme, perform a model selection operation on the device implementing the embodiment shown in fig. 1, and the device outputs each selected model in the model selection operation by responding to the model selection operation.

Optionally, the device executing the embodiment shown in fig. 1 may also directly analyze specific requirements of the listed network solutions, and analyze which models can meet the requirements of the network solutions. And then automatically executing model selection operation, selecting a model from all the pre-configured models, and selecting at least one model which can meet the requirements of the network scheme. And then outputs each model selected in the model selection operation. I.e. the model selection operation may be performed by the user or by the device.

It should be noted that, in the process of executing step S101, in addition to the selection of the required model, the number of the required models may also be selected, that is, for the same model, in addition to the selection of outputting the model, the number of the required models may also be selected. For example, the FW model shown in fig. 2 may be selected by a model selection operation if two FW models are needed for a network scheme to be constructed according to a user requirement.

There are many ways of outputting each model selected in the model selection operation by the device, for example, the model may be displayed and output in an image manner or in a text list manner.

For example, referring to fig. 2, the model 201 in fig. 2 is a server access model, and fig. 2 shows the model 201 having 2 network devices belonging to the

network role

7 and 2 network devices belonging to the network role 2. The network role 7 has technical attributes of Open Shortest Path First (OSPF), policy Based Routing (PBR), device Link Detection (LLDP), and the like. The network role 2 has technical attributes such as Spanning Tree (STP), access Control Lists (ACL), and LLDP. The network device of the home network role 7 is in the convergence layer, the device of the home network role 2 is in the access layer, and the access server can be realized by the model 201 shown in fig. 2. The model 202 in fig. 2 is a Firewall (FW) model, where the model 202 HAs a network device belonging to a network role FW, and the network role FW HAs technical attributes such as High Availability (HA), network monitoring technology Flow, and Application Layer Gateway (ALG).

Optionally, in a specific embodiment of the present application, each model selected in the model selection operation output in step S101 may be subjected to technical attribute selection editing. In some application scenarios, it may not be necessary to use all preconfigured technical attributes for the device to which a certain network role in the output model belongs. For example, in the model shown in fig. 2, although the network role 7 is preconfigured with the technical attributes such as OSPF, PBR, and LLDP, in the process of constructing the network scheme, for the user requirement, the network role 7 only needs to use the two technical attributes, namely PBR and LLDP, and does not need to have the OSPF technical attribute, so that after step S101 is executed, a plurality of technical attributes of the network role 7 can be selected, and only the technical attributes needed in the currently constructed network scheme are selected.

Specifically, in an embodiment of the present application, after the step S101 is executed, the method further includes:

and aiming at each network role in each output model, responding to the technical attribute selection operation of the network role, selecting the technical attribute selected by the technical attribute selection operation from a plurality of specific technical attributes of the network role, and taking the selected technical attribute as the technical attribute actually required by the network role in the target network scheme.

Aiming at each network role in each output model, the equipment outputs a plurality of specific technical attributes preconfigured by the network role, the user selects the plurality of preconfigured technical attributes according to the functional requirements of the user on the network role, and the required technical attributes are selected to be used as the technical attributes actually required by the network role in a target network scheme.

And S102, responding to the model combination operation, and performing combination connection configuration on the topological relation between each output model to obtain a preliminary network scheme.

The model combining operation is an operation of combining the models in step S101. If there are more than one models selected in step S101, the topological relationships between the models need to be configured, so that the multiple models are combined into a preliminary network scheme.

The topological relation among each model is configured mainly to enable network equipment among a plurality of models to successfully realize communication, so that a primary network scheme obtained after combination can meet the requirements of users. Since the topology relationship between the network devices in the preconfigured model is already configured, but the topology relationship between the selected model and the model is not configured, the topology relationship between each output model needs to be configured in a combined connection manner in response to the model combining operation, so as to clarify the topology relationship between all the network devices.

Specifically, configuring the combined connection of the topological relationships between each of the output models means configuring the connection relationships between the network devices in the plurality of models output in step S101. For example, the topological relationship between the a model and the B model is: the network device 1 in the a model and the network device 2 in the B model have a communication connection relationship, and the network device 3 in the a model and the network device 4 in the B model have a communication connection relationship.

For example, referring to fig. 2, the process of performing the configuration of the combined connection on the topological relation between the model 201 and the model 202 is as follows: network device E in one of models 202 is connected to network device a and network device B in model 201, respectively. And the network device F in the other model 202 is connected with the network device a and the network device B in the model 201 respectively to complete the combined connection configuration, so as to obtain a preliminary network scheme.

Optionally, the model combination operation may be to drag the connection combination model by a mouse, or to connect the combination model by inputting a command, or to automatically connect the combination model according to the port configuration of each network device or the port planning of the network role. The specific form of the model combining operation is many, including but not limited to what is proposed in the embodiments of the present application.

And responding to the model combination operation, and obtaining a preliminary network scheme after carrying out combination connection configuration on the topological relation between each output model. The preliminary network scheme obtained in step S102 includes all the network devices that need to be used, the network role to which each network device belongs, the technical attribute of each network role, and the topological relationship among all the network devices.

Optionally, in a specific embodiment of the present application, after the step S102 is executed, the method further includes:

and responding to the identification configuration operation of the network equipment, and configuring identification information for each network equipment.

Specifically, in order to better distinguish and configure the information related to each network device in the preliminary network scheme, it is necessary to configure distinguishable identification information for each network device. The identification information may specifically be a number, a name, or the like. The identification configuration operation may be performed by a user or may be performed automatically by the device. The device may automatically add a unique identifier to each network device to distinguish the network devices. Or the user inputs the identification information corresponding to each network device (i.e. performs the identification configuration operation), and then the device responds to the user operation to configure the identification information for each network device.

For example, referring to fig. 2, in model 201 of fig. 7-2, two network devices belonging to role 7, configured to be identified as network device a and network device B, respectively, after the model combining operation, and two network devices belonging to network role 2, named network role C and network role D, respectively, after the model combining operation. In the two FW models 202, the network devices belonging to the role FW are named as network device E and network device F, respectively, in the preliminary network scenario obtained after the combination operation.

S103, responding to the communication configuration operation, and configuring the communication configuration information between the network equipment and the network equipment in the preliminary network scheme to obtain a target network scheme.

Although the topology relationship between each network device is clarified in the preliminary network scheme obtained in step S102, how to implement communication between a specific network device and a network device still needs to be configured, so that a mode (i.e., communication configuration information) for implementing communication between the network device and the network device needs to be configured by responding to a communication configuration operation, so as to obtain a target network scheme. The target network scheme obtained in step S103 can be applied to an actual implementation deployment network scheme. And the working personnel can implement and develop the design according to the target network scheme, so that the requirements of users are met.

Optionally, in a specific embodiment of the present application, the communication configuration information between the network devices includes: at least one of a communication protocol between the network device and the network device, a communication bandwidth between the network device and the network device, and a communication port between the network device and the network device.

Specifically, the communication configuration information between the network devices may be all preconfigured, or may be partially preconfigured, and some configured by the communication configuration operation. For example, the communication bandwidth between the network devices may be 4 × 40g by default, and the communication protocol between the network devices and the communication ports between the network devices need to be configured by the user by performing the communication configuration operation.

Alternatively, a user may input communication configuration information between the network devices to the device implementing the embodiment in fig. 1, and complete the communication configuration operation by specifying a communication protocol between any two network devices, specifying a communication bandwidth between any two network devices, and specifying a communication port between any two network devices. After the device responds to the communication configuration operation, the device configures the communication configuration information between the network device and the network device appointed by the user in the preliminary network scheme to obtain a target network scheme which can be used for actual execution.

For example, referring to fig. 2, after responding to the communication configuration operation, the communication bandwidths between the network device E and the network devices a and B are configured as 4 × 40g, and the communication bandwidths between the network device F and the network devices a and B are configured as 4 × 40g. And the communication bandwidth between network device a and network device B is configured as 4 × 40g. The communication bandwidth between network device C and network device D is configured as 2 x 40g. The communication bandwidth between network device a and network device C is configured to be 2 × 40g, and the communication bandwidth between network device B and network device D is configured to be 2 × 40g.

The communication configuration information between the network devices in the target network scheme may be directly displayed on the target network scheme, or may be displayed in a specific table, and the implementation of the embodiment of the present application is not affected by the difference in the display manner of the communication configuration information.

Optionally, in a specific embodiment of the present application, before executing step S103, the method further includes:

and aiming at each network role in the preliminary network scheme, responding to the instantiation operation of the network role, and performing instantiation configuration on the parameters corresponding to the basic configuration protocol of each technical attribute of the network role.

Specifically, the technical attribute of the network role is set by a pre-configured basic configuration protocol and a parameter corresponding to the basic configuration protocol. Specifically, for each technical attribute, there may be a plurality of basic configuration protocols for implementing a specific function of the technical attribute, and thus it is necessary to pre-configure the basic configuration protocols for implementing the specific function. The implementation of the basic configuration protocol requires configuring parameters of the protocol (i.e. configuring parameters corresponding to the basic configuration protocol), such as a password requiring configuration standard, an address corresponding to a specified protocol, and so on. The parameters corresponding to the basic configuration protocol can be instantiated, operated and configured through the network role, or can be pre-configured.

Specifically, the network role instantiation operation refers to an operation of performing instantiation configuration on parameters corresponding to the basic configuration protocol of each technical attribute of the network role. For example, if a basic configuration Protocol of a technical attribute of a certain network role is an Internet Protocol (IP) address of a management network to be configured with an LLDP, when a network role instantiation operation is performed, a specific IP address of the LLDP is specified, and after the network role instantiation operation is responded, the IP address specified by the network role instantiation operation is determined as the IP address of the LLDP.

In actual application, parameters corresponding to the basic configuration protocol may be set according to different application scenarios, so that a network role instantiation operation is required, and the parameters corresponding to the basic configuration protocol of each technical attribute of the network role are instantiated and configured, so that the target network scheme finally obtained in step S103 can be deployed in an actual application scenario.

Optionally, in an embodiment of the present Application, each network role has a plurality of Application Programming Interfaces (APIs) corresponding to technical attributes. The technical attribute API of the network role is used to call view technical attributes. Specifically, the basic configuration protocol for viewing the technical attributes and the parameters corresponding to the basic configuration protocol may be invoked. The network role may be that only part of the technical attributes have the API, or that all the technical attributes have the API, which is determined according to the actual requirements. Since the embodiment shown in fig. 1 may further need to check specific information in the target network scheme after the target network scheme is finally obtained, and compare the difference between the target network scheme and the actually deployed and implemented scheme, if each network role has an API corresponding to a plurality of technical attributes, during the checking, a specific configuration of the plurality of technical attributes of each network role in the target network scheme may be determined through API call, so as to facilitate the checking process of the network scheme.

In the prior art, the construction process of the network scheme is input manually, so that the efficiency is low, and the problem of configuration error is easy to occur.

In the method for constructing the network scheme provided by the embodiment of the application, the model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation, the model is used for realizing a specific function in a network, the network role is a type of network device with a plurality of specific technical attributes, the technical attributes are the specific functions of the network device, and the technical attributes are determined by a preconfigured basic configuration protocol and corresponding parameters of the basic configuration protocol. Therefore, only the model selection operation needs to be responded, each selected model in the model selection operation is output, the model combination operation is responded, the combination connection configuration is carried out on the topological relation between each output model, a preliminary network scheme is obtained, then the communication configuration operation is responded, the communication configuration information between the network equipment and the network equipment in the preliminary network scheme is configured, the target network scheme can be obtained, the configuration information of each network equipment and the topological relation between each network equipment do not need to be written manually, the construction efficiency of the network scheme is improved, and errors caused by manual configuration of the network scheme are reduced.

Referring to fig. 3, based on the method for constructing a network scheme provided in the embodiment of the present application, the embodiment of the present application correspondingly discloses a method for checking a network scheme, so as to check a target network scheme constructed in the embodiment shown in fig. 1, which specifically includes the following steps:

s301, obtaining a checking equipment list, wherein the checking equipment list comprises: identification information of each network device to be checked.

The network device to be checked belongs to the network device in the target network scheme. The target network scheme is constructed by any one of the construction methods of the network schemes proposed by the above method embodiments. The list of checking devices may include identification information of all network devices in the target network scheme, or may include only identification information of some network devices in the target network scheme. For example, when the actual deployment implements the target network operation scheme, and a certain function cannot be jointly implemented between some network devices, the network devices may be listed in the list of the checking devices.

It should be noted that the apparatus for implementing the embodiment shown in fig. 3 may be the same apparatus for implementing the embodiment shown in fig. 1, or may be another apparatus. Whether the device implementing the embodiment shown in fig. 3 corresponds to the device implementing the embodiment shown in fig. 1 does not affect the implementation of the embodiment shown in fig. 3.

The identification information of the network device is the specific information of the network device, and according to the identification information of each network device included in the checking device list, which network devices need to be checked currently can be known.

S302, determining, by using the identification information of the network device, design state configuration information of the network device in a target network scheme for each network device in the checked device list, where the target network scheme is constructed by any one of the construction methods of the network schemes proposed in the above method embodiments, and the design state configuration information of the network device in the target network scheme includes: the network device is used for configuring the network role in the target network scheme, and comprises a pre-configured basic configuration protocol of each technical attribute of the network role to which the network device belongs in the target network scheme and a basic configuration protocol corresponding parameter.

Specifically, it can be seen from the method for constructing a network scheme in the foregoing embodiments that the target network scheme constructed by the method for constructing a network scheme proposed in the foregoing embodiments includes design state configuration information corresponding to each network device, that is, includes a basic configuration protocol for pre-configuration of each technical attribute of a network role that each network device belongs to in the target network scheme, and a parameter corresponding to the basic configuration protocol.

Therefore, after determining which network device in the target network scheme needs to be checked through the identification information of the network device, the design state configuration information of the network device in the target network scheme can be obtained from the device in which the target network scheme is stored, and further how the network device is configured in the design process of the target network scheme is obtained. The configuration information of the network device is used for explaining a specific configuration mode of the network device in the target network scheme.

Alternatively, the identification information of each network device in the target network scheme, the network role to which the network device belongs, the technical attribute of the network role, the pre-configured basic configuration protocol of the technical attribute, and the corresponding parameter of the basic configuration protocol may be pre-stored. Namely, the identification information of each network device in the target network scheme and the design state configuration information corresponding to each network device are prestored. After the check device list is obtained by executing step S301, the identification information of each network device in the check device list is traversed, and for each network device in the check device list, the network role that the network device belongs to in the target network scheme and the design state configuration information of the network role in the target network scheme are found by using the identification information of the network device.

Optionally, referring to fig. 4, in an embodiment of the present application, if each network role has APIs corresponding to multiple technical attributes, an implementation manner of step S302 is executed, including:

s401, aiming at each network device in the checking device list, by using the identification information of the network device, the identification information of the network role of the network device in the target network scheme, the identification information of each technical attribute of the network role and the corresponding parameter of the basic configuration protocol of each technical attribute in the target network scheme are determined.

Specifically, according to the target network scheme, the identification information of each network device in the target network scheme, the identification information of the network role to which each network device belongs in the target network scheme, the identification information of each technical attribute of each network role, and the corresponding parameter of the basic configuration protocol of each technical attribute in the target network scheme are stored in an associated manner in advance. Further, for each network device in the checked device list, the identification information of the network role that the network device belongs to in the target network scheme, the identification information of each technical attribute that the network role belongs to, and the corresponding parameter of the basic configuration protocol of each technical attribute in the target network scheme can be found out by using the identification information of the network device.

For example, for the target network scheme shown in fig. 2, if the identifier information of one network device in the checked device list is the network device a, it may be determined, by using the network device a, that the network device a belongs to the network role 7 in the target network scheme, and the network role 7 is preconfigured with OSPF, PBR, and LLDP technical attributes, and basic configuration protocol corresponding parameters of the LLDP technical attributes: management IP address of LLDP.

S402, aiming at each API corresponding to the technical attribute of the network role of the network device in the target network scheme, calling the API of the network role of the network device by utilizing the identification information of the network device, the identification information of the technical attribute and the corresponding parameter of the basic configuration protocol of the technical attribute in the target network scheme to obtain the basic configuration protocol and the corresponding parameter of the basic configuration protocol, which are pre-configured in the target network scheme, of the technical attribute.

Specifically, if each network role has a plurality of APIs corresponding to technical attributes, the API of the network role to which the network device belongs in the target network scheme may be called by using, as input parameters, the identification information of the network device, the identification information of the technical attributes, and parameters corresponding to the basic configuration protocol of the technical attributes in the target network scheme, to obtain the basic configuration protocol and parameters corresponding to the basic configuration protocol, which are pre-configured in the target network scheme, of the technical attributes.

It should be noted that, if the basic configuration protocol in the technical attribute of a part of network roles does not have a modifiable parameter, the input parameter may only be the identification information of the network device and the identification information of the technical attribute, and finally, the basic configuration protocol for the pre-configuration of the technical attribute in the target network scenario may be obtained.

For example, for the target network solution shown in fig. 2, if it is desired to view the LLDP technical attribute in the network role 7 to which the network device a belongs, the network device a, the LLDP technical attribute, and the management IP address of the LLDP only need to be used as input parameters, and an API call is performed to obtain the basic configuration protocol of the LLDP technical attribute in the target network solution of the network device a and corresponding parameters.

S303, determining, by using the identifier information of the network device, running state configuration information of the network device when the target network scheme is actually implemented, where the running state configuration information of the network device when the target network scheme is actually implemented includes: the technical attribute of the network device when actually implementing the target network scheme, the basic configuration protocol of the technical attribute when actually implementing, and the corresponding parameter of the basic configuration protocol.

The running state configuration information of the network device when the target network scheme is actually implemented refers to the configuration information of the network device when the target network scheme is actually run.

And determining running state configuration information of the network equipment when the network equipment actually implements the running target network scheme by utilizing the identification information of the network equipment. Specifically, when the target network scheme is actually implemented, differences may exist between the technical attributes configured by the network device, the basic configuration protocol of the technical attributes in actual implementation, and corresponding parameters of the basic protocol, and the target network scheme. For example, a network device is pre-configured with OSPF, PBR, and LLDP technical attributes in a target network scenario, where the management IP address of LLDP is 192.168.1.1. And the technical attributes configured when the network device is actually implemented are OSPF and LLDP, wherein the management IP address of the LLDP is 192.168.1.2. It is apparent that there is a difference between the design-state configuration and the run-state configuration of the target network scheme.

It should be noted that there are many embodiments for executing step S303, for example, the running state configuration information may be obtained through API call, or the running state configuration information of the network device when the target network scheme is actually implemented may be found by using the identification information of the network device through the actual implementation table when the target network scheme is actually implemented. The implementation of the embodiment of the present application is not affected by the difference in the specific implementation of the step S303.

S304, comparing the design state configuration information with the operation state configuration information of the network equipment, and determining the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment.

When checking the target network scheme, the difference between the design state and the operation state of the target network scheme is mainly compared to check the problem existing in the process of implementing the target network scheme. For example, in the target network scheme, a basic configuration protocol corresponding to a technical attribute of a certain network device is different from a basic configuration protocol corresponding to the technical attribute in actual implementation and operation, so that the device cannot operate due to the fact that the device is not suitable for the protocol.

Therefore, the design state configuration information and the operation state configuration information of the network device acquired in step S302 need to be compared to determine the difference configuration information between the design state configuration information and the operation state configuration information of the network device. Specifically, the difference configuration information of each network device may be output by traversing the design state configuration information and the operation state configuration information of each network device, or the difference configuration information may be output by pre-embedding a comparison program template, checking and comparing the design state configuration information and the operation state configuration information of each network device.

There are many ways to output the different configuration information between the design state configuration information and the operation state configuration information of the network device, for example, only the different configuration information may be output, the consistent configuration information may not be output, or the consistent configuration information and the different configuration information may be output separately.

In the prior art, because the target network schemes are all manually input and written, the relevant configuration information of each network device in the target network schemes is not standardized enough, and particularly, under the condition that a plurality of network scheme designers design the target network schemes together, the problem that the relevant configuration information of each network device is not standardized enough and is inconsistent enough is more obvious, so that when the target network schemes are checked, the design state configuration information and the operation state configuration information of each network device in the target network schemes can only be manually compared, and not only is the checking efficiency low, but also the reliability is low.

In the embodiment of the present application, since the target network scheme is constructed by using the network scheme construction methods proposed in the above method embodiments, the design state configuration information of each preconfigured network device is configured in a standardized manner, the design state configuration information of the network device and the operation state configuration information of the network device can be automatically obtained, and then the design state configuration information and the operation state configuration information of the network device are automatically compared to determine the difference configuration information between the design state configuration information and the operation state configuration information of the network device, so that the problem of inconsistency of the configuration information of each network device is not required, the design state configuration information and the operation state configuration information are manually compared, the checking efficiency is improved, and the reliability is also higher.

S305, storing the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment.

And storing the difference configuration information between the design state configuration information and the operation state configuration information of the network equipment so as to facilitate follow-up staff to check the problems of the target network scheme in the actual implementation process according to the difference configuration information and perform follow-up maintenance and improvement.

In the method for checking a network scheme provided by the embodiment of the application, the target network scheme is constructed by the method for constructing the network scheme provided by each embodiment, but not manually written, and the problem that configuration information is not standardized is avoided, so that for each network device in the checking device list, the design state configuration information of the network device in the target network scheme is determined by using the identification information of the network device, then the operation state configuration information of the network device when the target network scheme is actually implemented is determined by using the identification information of the network device, the difference configuration information between the design state configuration information and the operation state configuration information of the network device is determined by comparing the design state configuration information and the operation state configuration information of the network device, the automatic checking of the network scheme is realized, the design state configuration information and the operation state configuration information of each network device do not need to be manually compared, and the checking efficiency and reliability are improved.

Referring to fig. 5, based on the method for constructing a network scheme provided in the embodiment of the present application, the embodiment of the present application correspondingly discloses a device for constructing a network scheme, including: a selection unit 501, a combination unit 502, and a configuration unit 503.

A selecting unit 501, configured to output each model selected in the model selecting operation in response to the model selecting operation. The model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relation, the model is used for realizing a specific function in a network, the network role is a type of network device with a plurality of specific technical attributes, the technical attributes are specific functional attributes of the network device, and the technical attributes are set by a preconfigured basic configuration protocol and corresponding parameters of the basic configuration protocol.

A combining unit 502, configured to perform combined connection configuration on the output topological relation between each model in response to the model combining operation, so as to obtain a preliminary network scheme.

A configuring unit 503, configured to respond to the communication configuration operation, configure the communication configuration information between the network devices in the preliminary network scheme, to obtain a target network scheme.

Optionally, in a specific embodiment of the present application, the method further includes:

and the instantiation unit is used for responding to network role instantiation operation aiming at each network role in the preliminary network scheme and carrying out instantiation configuration on the parameters corresponding to the basic configuration protocol of each technical attribute of the network role.

Optionally, in a specific embodiment of the present application, each network role has a plurality of APIs corresponding to technical attributes, and the APIs corresponding to the technical attributes are used to call and view all technical attributes of the network role.

The specific principle and the implementation process in the apparatus for constructing a network scheme disclosed in the embodiment of the present application are the same as those in the method for constructing a network scheme disclosed in the embodiment of the present application, and reference may be made to corresponding parts in the method for constructing a network scheme disclosed in the embodiment of the present application, which are not described herein again.

In the apparatus for constructing a network scheme provided in the embodiment of the present application, the model is formed by connecting a plurality of preconfigured network devices belonging to a specific network role according to a specific topological relationship, and the model is used to implement a specific function in a network, and the network role is a type of network device having a plurality of specific technical attributes, the technical attributes are the specific functions of the network device, and the technical attributes are determined by a preconfigured basic configuration protocol and corresponding parameters of the basic configuration protocol. Therefore, only the selection unit 501 needs to respond to the model selection operation, output each model selected in the model selection operation, the combination unit 502 responds to the model combination operation, and performs combination connection configuration on the topological relation between each output model to obtain a preliminary network scheme, and then the configuration unit 503 responds to the communication configuration operation, and configures the communication configuration information between the network devices in the preliminary network scheme to obtain the target network scheme, without manually writing the configuration information of each network device and the topological relation between each network device, thereby improving the construction efficiency of the network scheme and reducing errors caused by manually configuring the network scheme.

Referring to fig. 6, based on the foregoing method for checking a network scheme provided in the embodiment of the present application, the embodiment of the present application correspondingly discloses a device for checking a network scheme, which includes: an acquisition unit 601, a first determination unit 602, a second determination unit 603, a comparison unit 604, and a storage unit 605.

An obtaining unit 601, configured to obtain a list of verified devices. Wherein, the equipment list of checking includes: identification information of each network device to be checked.

A first determining unit 602, configured to determine, for each network device in the checked device list, design state configuration information of the network device in the target network scenario by using the identification information of the network device. The target network scheme is constructed by adopting the construction method of the network scheme provided by the above method embodiments, and the design state configuration information of the network device in the target network scheme comprises the following steps: the network role of the network device in the target network scheme has a pre-configured basic configuration protocol of each technical attribute and a corresponding parameter of the basic configuration protocol.

Optionally, in an embodiment of the present application, if each network role has multiple application program interfaces APIs corresponding to technical attributes, the first determining unit 602 includes: a first determining subunit and a calling subunit.

The first determining subunit is configured to determine, for each network device in the checked device list, identification information of a network role that the network device belongs to in the target network scheme, identification information of each technical attribute that the network role belongs to, and a basic configuration protocol corresponding parameter of each technical attribute in the target network scheme, using the identification information of the network device.

And the calling subunit is used for calling the API corresponding to the technical attribute of the network device by utilizing the identification information of the network device, the identification information of the technical attribute and the corresponding parameter of the basic configuration protocol of the technical attribute in the target network scheme aiming at the API corresponding to each technical attribute of the network role which the network device belongs to in the target network scheme, so as to obtain the basic configuration protocol which the technical attribute is pre-configured in the target network scheme and the corresponding parameter of the basic configuration protocol.

A second determining unit 603, configured to determine, by using the identifier information of the network device, running state configuration information of the network device when the running target network scheme is actually implemented. The running state configuration information of the network device when actually implementing the running target network scheme includes: the technical attribute of the network device when the target network scheme is actually implemented and operated, the basic configuration protocol of the technical attribute when the target network scheme is actually implemented and operated, and the corresponding parameter of the basic configuration protocol.

A comparing unit 604, configured to compare the design state configuration information and the operation state configuration information of the network device, and determine difference configuration information between the design state configuration information and the operation state configuration information of the network device.

A storage unit 605, configured to store the difference configuration information between the design state configuration information and the running state configuration information of the network device.

The specific principle and the implementation process of the device for checking a network scheme disclosed in the embodiment of the present application are the same as those of the method for checking a network scheme disclosed in the embodiment of the present application, and reference may be made to corresponding parts in the method for checking a network scheme disclosed in the embodiment of the present application, which are not described herein again.

In the checking apparatus of the network scheme provided in this embodiment of the application, because the target network scheme is constructed by using the method for constructing the network scheme provided in each of the above embodiments, instead of being manually written, and there is no problem that configuration information is not standardized, the first determining unit 602 can determine, for each network device in the checking device list, design state configuration information of the network device in the target network scheme by using identification information of the network device, and then the second determining unit 603 determines, by using the identification information of the network device, operating state configuration information of the network device when the target network scheme is actually implemented, and the comparing unit 604 determines difference configuration information between the design state configuration information and the operating state configuration information of the network device by comparing the design state configuration information and the operating state configuration information of the network device, thereby implementing automatic checking of the network scheme without manually comparing the design state configuration information and the operating state configuration information of each network device, and improving checking efficiency and checking reliability.

An embodiment of the present application provides a computer-readable medium, on which a computer program is stored, where the program, when executed by a processor, implements a method for constructing any one of the network schemes proposed in the above embodiments, or a method for checking any one of the network schemes proposed in the above embodiments.

An embodiment of the present application provides an apparatus, including: one or more processors, a storage device, on which one or more programs are stored, the one or more programs, when executed by the one or more processors, causing the one or more processors to implement the method for constructing any one of the network solutions set forth in the embodiments above or the method for checking any one of the network solutions set forth in the embodiments above.

Those skilled in the art can make or use the invention. Various modifications to these embodiments will be readily apparent to those skilled in the art, and the generic principles defined herein may be applied to other embodiments without departing from the spirit or scope of the invention. Thus, the present invention is not intended to be limited to the embodiments shown herein but is to be accorded the widest scope consistent with the principles and novel features disclosed herein.

It is further noted that, herein, relational terms such as first and second, and the like may be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. Also, the terms "comprises," "comprising," or any other variation thereof, are intended to cover a non-exclusive inclusion, such that a process, method, article, or apparatus that comprises a list of elements does not include only those elements but may include other elements not expressly listed or inherent to such process, method, article, or apparatus. Without further limitation, an element defined by the phrases "comprising a," "8230," "8230," or "comprising" does not exclude the presence of additional like elements in a process, method, article, or apparatus that comprises the element.

Claims

1. A method for constructing a network scheme, comprising:

responding to model selection operation, outputting each selected model in the model selection operation, and outputting the quantity required by each model; the network device comprises a plurality of models, a network management module and a network management module, wherein the models are configured in advance, and each model is formed by connecting a plurality of network devices which belong to a specific network role in a specific topological relation in a pre-configuration mode; the model is used for realizing specific functions in the network; the network role is a type of network equipment with a plurality of specific technical attributes; the technical attribute is a specific function attribute of the network equipment; the technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol;

and responding to the communication configuration operation, and configuring communication configuration information between the network equipment and the network equipment in the preliminary network scheme to obtain a target network scheme.

2. The method of claim 1, wherein the communication configuration information between the network devices comprises: at least one of a communication protocol between the network devices, a communication bandwidth between the network devices, and a communication port between the network devices.

3. The method of claim 1, wherein after outputting each selected one of the model selection operations in response to the model selection operation, further comprising:

4. The method of claim 1, wherein the responding to the communication configuration operation configures communication configuration information between the network device and the network device in the preliminary network scenario, and before obtaining the target network scenario, the method further comprises:

5. The method of claim 1, wherein each of the network roles has a plurality of Application Program Interfaces (APIs) corresponding to technical attributes; and the technical attribute corresponding API is used for calling and viewing the technical attribute.

6. A method for checking a network scheme, comprising:

acquiring a checking equipment list; wherein the checking of the device inventory comprises: identification information of each network device to be checked;

for each network device in the checking device list, determining design state configuration information of the network device in a target network scheme by using the identification information of the network device; wherein, the target network scheme is constructed by any one method of claims 1 to 5; the design configuration information of the network device in the target network scheme includes: the network device is configured with a basic configuration protocol and basic configuration protocol corresponding parameters of each technical attribute of the network role which the network device belongs to in the target network scheme;

determining running state configuration information of the network equipment when the network equipment actually runs the target network scheme by using the identification information of the network equipment; wherein the running state configuration information of the network device when actually implementing and running the target network scheme includes: the technical attribute of the network equipment when the target network scheme is actually implemented and operated, a basic configuration protocol of the technical attribute when the technical attribute is actually implemented and a parameter corresponding to the basic configuration protocol;

7. The method of claim 6, wherein if each of the network roles has a plurality of Application Program Interfaces (APIs) corresponding to technical attributes, determining, for each of the network devices in the checked device list, design-state configuration information of the network device in a target network scenario by using identification information of the network device, includes:

for each network device in the check device list, determining, by using the identification information of the network device, identification information of a network role that the network device belongs to in the target network scheme, identification information of each technical attribute that the network device belongs to, and a corresponding parameter of a basic configuration protocol of each technical attribute in the target network scheme;

and for the API corresponding to each technical attribute of the network role of the network device in the target network scheme, calling the API corresponding to the technical attribute of the network device by using the identification information of the network device, the identification information of the technical attribute and the corresponding parameter of the basic configuration protocol of the technical attribute in the target network scheme to obtain the basic configuration protocol and the corresponding parameter of the basic configuration protocol, which are pre-configured in the target network scheme, of the technical attribute.

8. An apparatus for constructing a network scheme, comprising:

a selection unit configured to output each model selected in a model selection operation in response to the model selection operation, and output a number required for each model; the network device comprises a plurality of models, a network server and a network server, wherein the models are configured in advance, and each model is formed by connecting a plurality of network devices which belong to a specific network role in advance according to a specific topological relation; the model is used for realizing specific functions in the network; the network role is a type of network equipment with a plurality of specific technical attributes; the technical attribute is a specific function attribute of the network equipment; the technical attribute is set by a pre-configured basic configuration protocol and corresponding parameters of the basic configuration protocol;

9. An apparatus for verifying a network scheme, comprising:

the device comprises an acquisition unit, a verification unit and a verification unit, wherein the acquisition unit is used for acquiring a list of verification devices; wherein the checking the device manifest comprises: identification information of each network device to be checked;

a first determining unit, configured to determine, for each network device in the checked device list, design state configuration information of the network device in a target network scheme by using identification information of the network device; wherein, the target network scheme is constructed by any one method of claims 1 to 5; the design configuration information of the network device in the target network scheme includes: the network device is configured with a basic configuration protocol and basic configuration protocol corresponding parameters of each technical attribute of the network role which the network device belongs to in the target network scheme;

a second determining unit, configured to determine, by using the identifier information of the network device, running state configuration information of the network device when the target network scheme is actually implemented and run; wherein the running state configuration information of the network device when actually implementing and running the target network scheme includes: the technical attribute of the network equipment when the target network scheme is actually implemented and operated, a basic configuration protocol of the technical attribute when the technical attribute is actually implemented and a parameter corresponding to the basic configuration protocol;

and the storage unit is used for storing the difference configuration information between the design state configuration information and the running state configuration information of the network equipment.

10. A computer-readable medium, on which a computer program is stored, wherein the program, when executed by a processor, implements the method of any one of claims 1 to 5, or the method of claim 6 or 7.