JP2004007295A - Network apparatus and control method of network - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a network apparatus and a control method of network capable of relieving a network management load. <P>SOLUTION: The network apparatus interconnecting a service providing side network and a user side network is provided with: a user data management section 2 for managing commands and passwords; a telnet / serial access control section 3 for performing a telnet protocol processing, access control via a serial interface, and user authentication using a password; a command control section 1 for performing the CLI (Command Line Interface) management and discriminating approval / reject of a command by referencing a permission command list to share the commands; a command processing section 4 for processing each command; and a timer management section 5 for managing a performance time or a performance interval of the commands, and comparing the permission command lists to discriminate the approval / reject of the command so as to allow the user side network to control the network apparatus. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network device and a network control method, and more particularly, to a network device and a network control method capable of reducing network management.
[0002]
[Prior art]
At the connection point between the service providing network and the user network, the user must obtain the consent of the service provider when controlling the equipment on the service providing network, so the user changes the connection and other conditions. When doing so, the configuration was changed after coordinating the changes with the service provider.
[0003]
[Problems to be solved by the invention]
However, in such a network control method, it takes time to perform an emergency response or the like when a failure occurs, and it is necessary to set traffic control such that connection conditions change in units of time or day of the week. The network administrator must check for each setting, and there is a problem that both the service provider (network administrator) and the user take time to perform network management.
[0004]
The present invention has been made in view of the above problems, and a main object of the present invention is to provide a network device and a network control method capable of solving the above problems.
[0005]
[Means to solve the problem]
In order to achieve the above object, a network device of the present invention is a network device for connecting a service providing network and a user side network, and is a user who manages user data including at least user identification information and a permission command list. Data management means, connection control means for performing access control with reference to the network and referring to the user identification information, determination of permission / rejection of a command transmitted with reference to the permission command list, and the command And a command processing unit that processes each of the commands, and the network device is controlled by the user-side network when the preset permission command is transmitted. Things.
[0006]
In the present invention, further comprising a timer management means for managing the execution date and time or execution cycle of the command, when the time designation command is transmitted, at the execution date and time or execution cycle specified by the user, the user side network, A configuration in which network devices are controlled can be adopted.
[0007]
Further, the network control method of the present invention is a method of controlling a network in a network device connecting a service providing network and a user network, wherein at least user identification information and permission set by the service providing network are set. Registering user data including a command list; notifying the user of the registered user identification information; authenticating the user for access from the user-side network; A step of determining permission / rejection of a command transmitted from the user by referring to the command; a step of distributing the permitted command; and a step of processing the distributed command, using a preset permission command. By Serial is a user-side network which enables the control of the network device.
[0008]
In the present invention, further, when a setting request of a time designation command is received from a user, a step of acquiring the execution date and time or execution cycle of the command, and a step of acquiring the command input according to the execution date and time or execution cycle of the acquired command. And a step of managing the execution, wherein the network device can be controlled by the user-side network at a set date and time or period.
[0009]
As described above, according to the present invention, in the configuration setting of a network device such as a router, a network management side that provides a network service creates an authorization command list for each user, and enables a configuration setting corresponding to the user for each user. This makes it possible for the user to freely set a configuration change such as traffic control according to the usage conditions (time, day of the week, etc.) of each user, thereby reducing the time required for network management work.
[0010]
BEST MODE FOR CARRYING OUT THE INVENTION
In a preferred embodiment of the network device according to the present invention, a network device that connects a service providing network and a user network is provided with a user data management unit that performs command management and password management, a telnet protocol process, Telnet / serial connection control unit for performing access control via serial and user authentication using a password; CLI management; and command control for judging permission / rejection of commands with reference to a permission command list and distributing commands. Unit, a command processing unit that processes each command, and a timer management unit that manages the execution time or execution interval of the command, the command transmitted from the user-side network and a preset permission command. Allow / deny by comparing with list By determining, it is possible to control the network devices from the user side network.
[0011]
【Example】
An embodiment of the present invention will be described with reference to FIGS. 1 to 4 in order to describe the above-described embodiment of the present invention in further detail. FIG. 1 is a diagram schematically illustrating a configuration of a network device according to an embodiment of the present invention, and FIGS. 2 to 4 are flowcharts illustrating a network control method of the embodiment.
[0012]
As shown in FIG. 1, a network device 10 of the present embodiment connects a service providing network and a user network, and includes a command control unit 1, a user data management unit 2, a telnet / serial connection control. It comprises a unit 3, each command processing unit 4, and a timer management unit 5.
[0013]
The command control unit 1 performs CLI (Command Line Interface) management via serial communication and telnet, and executes command distribution processing. Further, the command control unit 1 determines permission / rejection of the input command based on the user data of the user data management unit 2.
[0014]
The user data management unit 2 manages commands that can be controlled for each user and manages passwords. This user unit information is set by the network service provider.
[0015]
The telnet / serial connection control unit 3 performs telnet protocol processing and access control via serial. At the time of access from the user, the login name and the password are confirmed based on the management information of the user data management unit 2.
[0016]
Each command processing unit 4 performs a process corresponding to the command distributed by the command control unit 1.
[0017]
The timer management unit 5 manages the time for executing the time designation command, sets a timer from the user data management unit 2 when the time designation command is registered, and notifies the user data management unit 2 of a timer when the time is reached. .
[0018]
The operation of the network device 10 having the above configuration will be described in detail with reference to FIGS. FIG. 2 is a flowchart showing a procedure for setting and deleting the service provider to permit the user to control the network device 10. FIG. 3 is a flowchart showing the procedure based on the user information set by the service provider. FIG. 5 is a flowchart showing a procedure in which the user controls the network device 10. FIG. 4 is a flowchart showing control when the user inputs a timed command.
[0019]
First, a method of setting and deleting a control command of the network device 10 will be described with reference to FIG.
[0020]
In step S101, the telnet / serial connection control unit 3 receives a user information setting command from a service provider.
[0021]
Next, in step S102, the command control unit 1 obtains information from the telnet / serial connection control unit 3, and requests the service provider to set a login name, a password, and a permitted command list. This request may be input in a conversational manner or may be set at once. The permission command list may be checked for permission / rejection for all commands. However, in order to simplify the setting, several types of lists (templates) for which permission / rejection is checked in advance are prepared. It may be in a format to be selected. In order to enhance security, a network address setting of a user's access source may be added.
[0022]
Next, in step S103, when a setting instruction from the service provider is received, the command control unit 1 checks in step S104 whether or not the command is forcibly terminated. ) Is returned (step S105). This forced termination is used when the user information is set in a conversation format or when the setting is invalidated halfway.
[0023]
In addition, as a result of checking whether or not the forced termination is performed, if the termination is not the forced termination, the existing user data information is acquired from the user data management unit 2 (step S106). Then, in step S107, the command control unit 1 checks whether there is any data that overlaps with the existing data, including a character check or the like, and whether the data can be handled as normal data.
[0024]
If the check result is abnormal, the user is prompted to re-enter from the setting request of the user's login name, password, and permission command list in step S102. If the setting data is normal, the user data set in the user data The result is stored (step S108), and this normal result is returned as a user information setting command response (normal) (step S109). Note that the user data management unit 2 can store a plurality of user data.
[0025]
Next, a procedure when a user information deletion command is received from a service provider will be described below.
[0026]
First, the telnet / serial connection control unit 3 receives a user information deletion command from the service provider. The command control unit 1 obtains the information, and in step S111, requests the login name and password of the user to be deleted. This request may be input in a conversational manner or may be set at once.
[0027]
Next, when the deletion data from the service provider is specified in step S112, the user data management unit 2 that has obtained the information from the command control unit 1 performs a deletion process of the user data in step S113. Thereafter, a command response is returned (step S114). At this time, if there is no data to be deleted, or if the data could not be deleted normally, this is returned as a command response.
[0028]
In this manner, the service provider can save and delete the login name, the password, and the permitted command list with respect to the user data management unit 2 of the network device 10.
[0029]
Next, with reference to FIG. 3, a procedure in which the user controls the network device 10 based on the user information set by the service provider will be described.
[0030]
First, the service provider sets information for a user in the network device 10 according to the flowchart of FIG. 2, and notifies the corresponding user of a login name and a password. In FIG. 3, it is assumed that the user has accessed the telnet / serial connection control unit 3 (step S201).
[0031]
In this case, first, the telnet / serial connection control unit 3 requests the user to specify a login name, and waits for a response (step S202). After the login name is specified by the user (step S203), a request for a password is made and a response is waited for (step S204). After the password is specified by the user (step S205), all the existing login names and password data are acquired from the user data management unit 2 (step S206), and in step S207, the comparison with the corresponding login name and password is performed. (In this case, if the access source network address is additionally specified in S102 of FIG. 2, this network address is also a target to be compared. Access is permitted only when all three values match. That is.)
[0032]
If there is no match with any login name or password, or if no user data is registered, access is denied in step S208. If there is data having the same login name and password, the user data (login name and password) being accessed is temporarily secured in the command control unit 1 in step S209, and the access by the corresponding user data is performed in step S210. Allow
[0033]
Next, the processing when a certain command is received from the user (step S211) will be described below.
[0034]
The command control unit 1 receiving this information acquires the command data of the user from the user data management unit 2 (Step S212). This is to check from the user name and the password whether or not the specified command permits the input. The command control unit 1 having obtained the result determines whether or not the input of the command specified in step S213 is permitted. If command input is not permitted, (NG) is returned as a command response for the user (step S214). If command input is permitted, command distribution processing is performed (step S215), and the corresponding command processing unit 4 is notified.
[0035]
The notified command processing unit 4 performs processing corresponding to the command (step S216), creates a command response (step S217), and returns a command response (OK) for the user (step S218).
[0036]
As described above, the command control unit 1 determines whether the command is permitted or rejected with reference to the preset permission command list, so that the user side network can control the network device 10 using a predetermined command. This makes it possible to reduce the network management work of the network administrator.
[0037]
Next, with reference to FIG. 4, a control procedure when the user inputs a timed command will be described.
[0038]
The timed command is a setting command for executing a command specified by defining an execution time. First, in step S301, the telnet / serial connection control unit 3 receives a time-limit command setting request from the user. In step S302, the command control unit 1 that has received the request returns a specification request to specify which of the cycle of executing the command and the date and time. Along with this, the telnet / serial connection control unit 3 receives an instruction for specifying either the cycle / date and time from the user (step S303), and upon receiving the instruction, the command control unit 1 sets the command input interval when the cycle is specified, When the date and time are specified, the request for specifying the command input date and time is returned to the user (step S304). Then, the telnet / serial connection control unit 3 receives an instruction to specify the insertion interval / input date and time from the user (step S305), and upon receiving the instruction, the command control unit 1 requests the command to be input at the time specified in step S304. Is returned to the user (step S306). When the input command is specified by the user, the command control unit 1 notifies the user data management unit 2 that all the data for processing the timed command has been prepared.
[0039]
The user data management unit 2 makes a timer setting request to the timer management unit 5 in step S308, and the timer management unit 5 that has received the timer setting activates the timer (step S309). Also, the user data management unit 2 saves all data set by the command in step S310, and returns a command response to the timed command setting request to the user (step S311).
[0040]
After that, when the corresponding time comes, the timer management unit 5 requests the user data management unit 2 to process the timed command, and stops the timer (step S312). The user data management unit 2 performs a command search in step S313, and if there is no corresponding time designation command, sends an alarm notification to the user indicating that processing could not be normally performed (step S314). For example, command distribution processing is performed in step S315, and command processing (step S316) and command response (step S317) are performed in each command processing unit 4. Upon receiving the command response, the user data management unit 2 notifies the user of an alarm indicating that the time designation command has been normally processed (step S318).
[0041]
In the case of a time designation command that is performed periodically, a corresponding timer setting request (step S308) is sent to the timer management unit 5, and the timer management unit 5 starts the timer accordingly (step S309). The cycle command is a repetition of the processing of steps S308, S309, and S313 to S317.
[0042]
Finally, when the telnet / serial connection control unit 3 receives a command for specifying a timed command deletion from the user in step S319, the telnet / serial connection control unit 3 notifies the command control unit 1 and the user data management unit 2. The user data management unit 2 sends a timer deletion request to the timer management unit 5 in step S320, and the timer management unit 5 receiving the request deletes the timer in step S321. Also, the user data management unit 2 deletes the information of the corresponding time designation command in step S322, and returns a command response to the user (step S323).
[0043]
As described above, by providing the timer management unit 5, the execution date and time and execution cycle of the command are managed, and the timed command is executed at the date and time or cycle set by the user. The network management work of the network administrator for traffic control can be reduced.
[0044]
【The invention's effect】
As described above, according to the network device and the network control method of the present invention, the user controls the service provider side network device at the connection point between the service provider side network and the user side network connected thereto. As a result, the load of the network management work on the service providing side can be reduced. In addition, the degree of freedom in traffic control on the user side is improved, and it is possible to automatically respond to a change in the connection conditions of the user for each date and time and day of the week.
[0045]
The reason for this is that, conventionally, for the convenience of the user, the change of the transfer condition when transferring from the service providing network to the user side network and the traffic control of various conditions on a time / day basis are performed by the user and the service provider. After adjustment and confirmation, one of them must be set in the service provider side network device, and when the user's connection condition changes due to time or day of the week conditions, it is necessary to set each time. In this case, the user can freely control the network device on the service providing side, including a setting for inputting a command at a designated time, so that adjustment between the user and the service provider can be completed in a short time.
[Brief description of the drawings]
FIG. 1 is a diagram schematically illustrating a configuration of a network device according to an embodiment of the present invention.
FIG. 2 is a flowchart showing a procedure of a control command setting method and a deletion method according to an embodiment of the present invention.
FIG. 3 is a flowchart showing a procedure of controlling a network device according to an embodiment of the present invention.
FIG. 4 is a flowchart illustrating a control procedure when a timed command is input according to an embodiment of the present invention.
[Explanation of symbols]
DESCRIPTION OF SYMBOLS 1 Command control part 2 User data management part 3 telnet / serial connection control part 4 Each command processing part 5 Timer management part 10 Network equipment

Claims (4)

A network device for connecting a service providing network and a user network,
User data management means for managing user data including at least user identification information and an authorization command list; access control means for controlling access to the network and performing user authentication by referring to the user identification information; Command control means for judging permission / rejection of a command transmitted with reference to a list and allocating the command; and command processing means for processing each of the commands. When transmitted, the network device is controlled by the user-side network. Further, a timer management unit that manages a command execution date and time or an execution cycle is provided, and when the time designation command is transmitted, the network device is controlled by the user side network at the execution date and time or the execution cycle specified by the user. The network device according to claim 1, wherein A network control method in a network device that connects a service providing network and a user network,
At least registering user data including user identification information and a permission command list set by the service providing network; notifying the user of the registered user identification information; and accessing from the user network. Authenticating the user with respect to the command, determining whether to permit or reject a command transmitted from the user with reference to the permitted command list, allocating the permitted command, and allocating the allocated command. And controlling the network device by the user-side network by using a preset permission command. Further, when a setting request for a time designation command is received from a user, a step of acquiring an execution date and time or an execution cycle of the command, and a step of managing execution of the input command according to the acquired execution date and time or the execution cycle of the command 4. The network control method according to claim 3, wherein the network device is controlled by the user-side network at a set execution date and time or execution cycle.

Images