JP2010146437A - Management system, management method, control method and program - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To provide a management system for rapidly acquiring a failure situation of a device to be managed, to accurately make a response in a short time, and to provide a management device, a control method and a program. <P>SOLUTION: The management device which connects a circuit with a plurality of devices to be managed by use of a predetermined setting value includes: a storage means which stores the setting value for each of the devices; a display means which displays connection methods with the circuit and the devices on a screen in a selectable manner; a detection means which detects a connecting state of the management device with the circuit; and a connection request means which reads the setting value according to a connection method and device selected on the screen and the connecting state detected by the detection means, and requests the selected device to connect with the management device. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a management system and management apparatus for managing remotely managed devices that can communicate via a communication line such as a network, and a control method and program therefor, and in particular, manages a plurality of remotely managed devices. The present invention relates to a management system, a management apparatus, a control method thereof, and a program capable of specifying a location where a failure occurs when a failure occurs.

  In Patent Document 1, a terminal information storage unit that stores an IP address of a terminal connected to a communication network and attribute information of the terminal in association with each other, and transmits at least response request information to each IP address in a specified range A response request transmission unit that receives the response information from the terminal in which the IP address in the specified range is set in response to the response request, and outputs a list of IP addresses of the terminal that transmitted the response information An address monitoring apparatus that can easily grasp the usage status of an IP address in each department in a company that is provided with a network connection terminal list output unit is disclosed.

In Patent Document 2, a monitoring device connected to an external network through a firewall that restricts communication from the outside together with a user system issues a maintenance command to access and execute a remote support device while avoiding communication restriction autonomously. The maintenance command acquired from the holding unit and executed for the user system (internal device) is executed, the execution result is sent to the remote support device, and the remote support device is configured to store the execution result in the result holding unit. Enables remote maintenance by executing maintenance-related commands and collecting and analyzing the result data at remote maintenance bases as before, even for user systems that restrict external communications with a firewall. A remote maintenance system is disclosed.
JP 2006-324884 A JP 2007-272607 A

  If a network failure actually occurs when the network configuration becomes complicated as in the present situation, the task of isolating it becomes considerably complicated. That is, for example, when a monitoring center performs a service for monitoring a plurality of managed devices of a plurality of customers, the customer receives a telephone contact such as a slow network, and the customer who has been contacted by another managed device When switching monitoring to a managed device and checking the current status, there are a wide variety of line connections from the monitoring center to the managed device (dedicated digital line, IP-VPN, general Internet line, etc.). Once the current session is disconnected and the LAN cable is connected and the IP address is changed, the session needs to be turned on, and it is difficult to quickly grasp the status of the managed device.

  If the operation status of the managed device cannot be acquired even if connection is attempted, there are a wide variety of devices that cause the current complex network. For example, failure of a firewall on the customer site side between the managed device and a router connected to the outside, failure of the managed device itself, failure of the network of the customer side to which the managed device is connected (for example, The occurrence of a broadcast storm or the like may occur, and the failure of the firewall on the monitoring center side or the router connected to the outside almost simultaneously with the failure on the customer side may be small.

  However, with the above-mentioned conventional technology, even if monitoring from the outside is possible, contact the person in charge of access management for each individual device or check the operating status of the firewall on the monitoring center side or the router connected to the outside. It is necessary to check individually. For example, in the prior art described in Patent Document 2, when the execution result cannot be received from the monitoring device, whether the cause is the monitoring device on the remote support device side or the network device such as a firewall on the monitoring device side, or It is not easy to determine whether the network device is on the remote support device side.

  Especially in a monitoring center that needs to monitor the status of various managed devices of multiple customers, the management software differs for each managed device and intermediate network device, and the administrator ID and password are different. The above-mentioned management device (management personal computer) is restarted to change the IP address and the network cable connected to the management device is forced to be changed, and the cause separation operation is extremely complicated.

  For this reason, there has been a situation in which it is impossible to deal with before the occurrence of network failures increases, and it takes a long time to solve the failures.

  An object of the present invention is to provide a management system, a management device, a control method thereof, and a program capable of solving such a problem and quickly grasping a failure status of a managed device and dealing with it accurately in a short time. It is.

  In order to solve the above problems, a management apparatus according to the present invention is a management apparatus that performs line connection with a plurality of devices to be managed using predetermined setting values, and stores the setting values for each of the devices to be managed. Storage means, display means for selectively displaying a connection method with the line and the managed device, detection means for detecting a connection state between the management apparatus and the line, and selected by the screen display The setting value is read according to the connection method, the managed device, and the connection state detected by the detecting unit, and the selected device is selected to connect the selected managed device and the management device. And connection request means for requesting the device to be managed.

  In order to solve the above problems, a management system of the present invention is a management system in which a plurality of management target devices and a management device are connected via a relay device, and the management device is provided for each management target device. Storage means for storing the setting value, display means for selectively displaying a connection method with the line and the management target device, detection means for detecting a connection state between the management apparatus and the line, The setting value is read according to the connection method selected on the screen display, the management target device, and the connection state detected by the detection unit, and the selected management target device and the management device are connected. And a connection request means for requesting the selected managed device, and the relay device stores a setting storage means for storing the setting value for each managed device and a connection request received from the management device. A first collation unit that collates a match / mismatch between the set value of the management target device included in the storage unit and the set value stored in the storage unit, and the collation of the first collation unit matches A first transfer means for transferring a connection request to the managed device, and a match between the set value of the managed device included in the connection request received from the managed device and the set value stored in the storage means / A second collating unit for collating mismatches, and a second transfer unit for transferring the connection request to the management apparatus when the collation of the second collating unit matches.

  In order to solve the above problems, a control program of the present invention is a control program for a management system in which a plurality of management target devices and a management device are connected via a relay device, and the management device is managed by the management target Storage means for storing the set value for each device, display means for selectively displaying a connection method with the line and the management target equipment, and detection means for detecting a connection state between the management apparatus and the line And reading the set value according to the connection method selected on the screen display, the management target device, and the connection state detected by the detection means, and the selected management target device and the management device Functioning as a connection requesting unit that requests the selected management target device to connect to the relay device, a setting storage unit that stores the setting value for each management target device, and the tube A first collation unit that collates a match / mismatch between the set value of the management target device included in the connection request received from the apparatus and the set value stored in the storage unit; and the collation of the first collation unit Stored in the storage unit and the setting value of the management target device included in the connection request received from the management target device, the first transfer unit that transfers the connection request to the management target device A second collating unit that collates the match / mismatch with the set value and a second transfer unit that transfers the connection request to the management apparatus when the collation of the second collating unit matches.

  ADVANTAGE OF THE INVENTION According to this invention, it becomes possible to grasp | ascertain rapidly the failure condition of the several management object apparatus of a remote place, and to cope with it accurately in a short time.

  DESCRIPTION OF EXEMPLARY EMBODIMENTS Hereinafter, preferred embodiments to which the invention is applied will be described in detail with reference to the accompanying drawings.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings. First, FIG. 1 is a diagram showing a system configuration in an embodiment of the present invention.

  The management device 110 in FIG. 1 is, for example, a personal computer, a workstation, a PDA (Personal Data Assistant) having a communication function, or a mobile phone compatible with a network, and has a hardware configuration as shown in FIG. Built-in or connected to an external display via a display adapter.

  The relay router 120 cooperates while communicating with the management apparatus 110 to execute various relay processes between the management terminal 110 and each managed device. Specifically, it relays communication using a specific port between a specific IP address on the inbound side and a specific IP address on the outbound side, and relays communication only for a specific MAC address or host name. I can do it. The FireWall 130 and the general router 140 also execute various relay processes similar to the relay router 120.

  The relay router 120 is connected to a relay device (FireWall 130, telephone switch 190, or general router 140) via a plurality of lines, and each line is connected to one or a plurality of management targets via the relay device and the communication line 100. It can be connected to a device (managed device A170 to managed device D200). The relay router 120 is connected to a management target device E (not shown) via a dedicated digital line (not shown).

  A so-called browser or client application is installed in the management apparatus 110, and various plug-in software, Java (registered trademark) applet, and the like can be installed in the browser in advance, or downloaded from the outside and executed. The managed device A 170 and the managed device B 180 on the customer side of the monitoring center are connected to the communication line 100 via the external router A 150. The managed device C160 is connected to the communication line 100 via the external router B155. Further, the telephone exchange 190 and the management target device D200 are connected by a public analog line.

  Each managed device may be, for example, a personal computer or workstation installed with network management software, or a router or intelligent hub installed with network management software. The communication line 100 is typically the Internet, IP-VPN, ISDN, telephone line, dedicated digital line, ATM, frame relay line, communication satellite line, cable TV line, wireless line for data broadcasting, or the like. What is necessary is just to be able to transmit and receive data approximately.

  FIG. 2 is a diagram showing a hardware configuration of the management device 110 and the relay router 120 in the embodiment of the present invention. In FIG. 2, a CPU 21, a RAM 22, a ROM 23, a communication adapter 24, a video adapter 25, a keyboard 26, a mouse 27, a hard disk 28, and a CD-ROM drive 29 are connected to each other via a system bus 20. The system bus 20 means, for example, a PCI bus, an AGP bus, a memory bus, and the like. Further, in FIG. 2, a connection chip between each bus, a keyboard interface, and an input / output interface such as a so-called SCSI or ATAPI are omitted.

  The CPU 21 performs various operations such as four arithmetic operations and comparison operations and hardware control based on an operation system program and an application program. The RAM 22 stores an operation system (OS) program and application programs read from a storage medium such as a CD-ROM or CD-R mounted in the hard disk 28 or the CD-ROM drive 29, and various work files at the time of execution. The input data is stored, and the CPU 21 controls the execution of each program.

  The ROM 23 stores in advance a startup program (boot program), a so-called BIOS (Basic Input Output System) that manages input / output of each hardware in cooperation with the operation system, and the like. The communication adapter 24 performs communication with the outside through a network in cooperation with a communication program of an operation system controlled by the CPU, and a so-called LAN adapter (NIC) is a typical example. The display adapter 25 generates an image signal to be output to the display device. The management apparatus 110 has a built-in display (for example, a liquid crystal display) connected to the display adapter. The keyboard 26 and mouse 27 are used to input instructions to the management device 110. In the management apparatus 110, a touch panel and various operation buttons may be used instead of the keyboard 26 and the mouse 27.

  The hard disk 28 includes an operation system, application programs shown in the flowcharts of FIGS. 6 to 11, screen information as part of an application program for displaying each screen shown in FIG. 4 on the display of the management apparatus 110, and FIG. Each database and table, such as the connection method table for the management apparatus 110 shown, the history information DB shown in FIG. 14, the error master shown in FIG. 15, and the master file are stored. The management device 110 may use a nonvolatile memory that is also used as the RAM 22 instead of the hard disk 28. In addition, the connection method table for the relay router 120 shown in FIG. 13 and the history information DB shown in FIG. 14 are similarly stored in the hard disk of the relay router 120, and the setting registration of FIG. 11 is performed by the management device 110 and the relay router 120. By executing the processing, the contents of the connection method table for the relay router 120 and the connection method table for the management apparatus 110 are updated.

  The DVD-ROM drive 29 is used to install a storage medium such as a DVD-ROM, DVD-R / W, or a so-called Blu-ray disc and install an application program on the hard disk 28. Needless to say, a DVD-R / W drive, a so-called Blu-ray drive, an MO drive, or the like may be used instead of the DVD-ROM drive.

[Example 1]
Next, an embodiment will be described with reference to FIGS.

  FIG. 3 is a functional block diagram of the management device 110 and the relay router 120 in the embodiment of the present invention.

  The management device 110 is a management device that connects a plurality of devices to be managed using predetermined setting values, and includes a transmission / reception control unit 31 that controls communication with the relay router 120, and the setting values for each of the management target devices. A management target device storage unit 35 (storage unit according to claim 1), a display unit 33 that displays a screen for selecting a connection method to the line and the management target device (display unit according to claim 1) A detecting unit 32 (detecting means of claim 1) for detecting a connection state between the management device and the line, the connection method selected on the screen display, the managed device, and the detecting means The connection request unit 34 that reads out the set value according to a connection state and requests the selected management target device to connect the selected management target device and the management device. Request means) and It is provided.

  Further, the relay router 120 (the relay device of claim 1) is an outbound controller that performs communication control between the inbound first transmission / reception control unit 41 that performs communication control with the management device 110 and the managed device or other relay device. Second transmission / reception control unit 44, a setting storage unit 47 (setting storage means of claim 2) for storing the setting value for each managed device, and the connection request received from the management device A first collation unit (first collation unit according to claim 2) for collating a match / mismatch between a set value of a management target device and the set value stored in the storage unit; A first transfer unit 43 (first transfer means of claim 2) for transferring the connection request to the managed device via the second transmission / reception control unit 44 when the matching is matched; and the managed device Connection request received from A second verification unit 45 (second verification unit according to claim 2) for verifying a match / mismatch between the set value of the managed device to be set and the set value stored in the storage unit; A second transfer unit that transfers the connection request to the management device via the first transmission / reception control unit 41 when the collation of the collation unit is matched. Yes.

  Next, FIG. 4 is a diagram showing a monitoring screen of the management target device of the management apparatus. 4 includes menu buttons 401 to 410, operation buttons 411 to 419, and display fields 420 to 430.

  A file menu 401 is a menu button for registering / saving / editing / deleting a log file. An edit menu 402 is a menu button for editing (registering / changing / deleting) the address of the management target device stored in the connection method table. The error log menu 403 is a menu button for displaying the error log of the management target device recorded in the history information DB stored in the hard disk 28. A search menu 405 is a menu button for displaying a search condition screen for searching for management information (connection method table shown in FIG. 12, history information DB shown in FIG. 14). The status check menu 406 is a menu button for starting a program for checking the latest connection status. FIG. 5 shows a table summarizing the functions of these menu buttons.

  A tool menu 407 is a menu button for changing / saving various security functions, referring to a MAC address, starting a router management function, turning on / off a router session, and selecting / changing an IP address. An option menu 408 is a menu button for performing management authority setting and environment setting. A display menu 409 is a menu button for switching display items of the management target device.

  Next, the minimize button 411 is an operation button for minimizing the screen. The maximize button 412 is an operation button that maximizes the screen. A screen close button 413 is an operation button for closing the screen and ending the processing. Next, a selection button 414 is a button for selecting a target connection destination before performing various displays and editing for a specific connection destination. The collective check button 415 is an operation button for performing a collective connection check including a router in the middle of a specific connection destination. Processing when this button is pressed will be described later.

  A detail display button 416 is an operation button for displaying the details of management information (TCP / IP and DNS settings, browser settings, etc., which are not displayed on the screen in FIG. 4) for a specific connection destination. is there. The edit button 417 is an operation button for changing management information of a specific connection destination. The execution button 418 is a button for executing a request for confirming the current connection status for a specific connection destination. The end button 419 is an operation button for closing the screen and ending the processing, like the screen close button 413.

  Next, the acquisition date / time column 420 is a display column that displays the history of acquiring the management information of the management target device from a new one. The acquisition address column 421 is a column that displays the IP address of the management target device. The Logon column 422 is a display column that displays ON / OFF whether the management target device is currently Logon. The Logoff column 423 is a display column that displays ON / OFF whether the management target device is already Logoff. The detailed status column 424 is a display column that displays the content of an error message (for example, password or address mismatch) in the management information, the error occurrence time, and the like.

  The external connection destination 425 is a display field for displaying the name of the connection destination (customer name or device name of the connection destination). The WAN address 426 is a display field for displaying the global address of the connection destination. The status 427 is a display field for displaying the status (normal / unknown / error) of the connection target management target device. The connection destination type 428 is a display field for displaying the type of management target device (router / firewall / computer / workstation / intelligent hub, etc.). The adapter status 429 is a display field for displaying the status (normal / unknown / error) of the LAN adapter alone. The MAC address 430 is a display field for displaying the MAC address (48 bits) of the LAN adapter.

  FIG. 6 is an overall flowchart of line connection processing executed in the management apparatus 110, the relay router 120, and the management target device. The management apparatus 110 executes steps S601 to S608 under the control of the CPU 21. The relay router 120 executes steps S621 to S632 under the control of the CPU 21. The managed device A 170 executes steps S641 to S645 under the control of the CPU 21.

  First, in step S601, the management apparatus 110 starts the management program in response to an operation for selecting a program menu on the screen or a double-clicking operation for an icon, and defaults to “network connection” without specifying a connection destination. The process proceeds to step S602.

  In step S602, the management apparatus 110 displays the monitoring screen shown in FIG. A desired connection destination can be selected by a radio button while the monitoring screen is displayed. The process proceeds to step S603 at a predetermined time interval (for example, 100 milliseconds).

  In step S603, the management apparatus 110 determines whether the execution button 418 is pressed with one connection destination selected on the screen of FIG. 4, and the execution button 418 is pressed with one connection destination selected. If YES, the process proceeds to step S604. If the execute button 418 has not been pressed, the process returns to step S602. If the execution button 418 is pressed when no connection destination is selected, a message (not shown) of “Select the connection destination and then press the execution button” is displayed for 5 to 10 seconds. Then, the process returns to step S602.

  In step S604, the management apparatus 110 uses the connection setting information of the connection destination selected in step S603 (parameters of items No. 2 to No. 15 stored in the connection method table for the management apparatus 110 shown in FIG. 12). (Global IP address information of a certain connection request destination, line type indicating the type of connection destination line, network connection name, command or program executed on the managed device at the time of connection, and default parameters as these parameters) Is read from the connection method table and stored in the work area of the RAM 22.

  In step S <b> 605, the management device 110 executes connection request processing using each setting parameter stored in the work area of the RAM 22, and advances the processing to a response message reception waiting state from the relay router 120. Specifically, connection request information to the relay router 120 (IP address of the management apparatus 110 that is the connection request source, connection request destination global IP address, user ID and password of the administrator authority for the connection request destination, and connection time Including, but not limited to, the command or program to be executed on the managed device and each setting parameter such as default command as these parameters, the items No. 2 to No. 15 stored in the connection method table For example, the MAC address of the LAN adapter (NIC) of the management apparatus 110 that is the connection request source may be transmitted. Details of the connection request processing will be described in detail with reference to the flowchart of FIG.

  In step S621, the relay router 120 receives the connection request information transmitted by the management apparatus 110 in step S605 and stores it in the work area of the RAM 22. In step S 622, the relay router 120 sets the connection request destination global IP address and other setting information stored in the work area of the RAM 22 and the connection request destination stored in the connection method table stored in advance in its own hard disk 28. Are matched with the setting information such as the global IP address information, and the matching result (match / mismatch) is stored in the work area of the RAM 22. Details will be described with reference to the flowchart of FIG.

  In step S623, the relay router 120 proceeds with the verification result stored in the work area of the RAM 22. If the collation results match, the process proceeds to step S624. If the collation results do not match, the process proceeds to step S625.

  In step S624, the relay router 120 transfers the connection request information stored in the work area of the RAM 22 in step S621 to the managed device that is the connection destination selected in step S602 via the general router 140, and counts out the timeout. Counting is started after resetting the counter to zero (by a control command for the counter IC or a command to the counter realized by software), and the process proceeds to step S626.

  If the collation results do not match in step S623, in step S625, the relay router 120 uses the error code as a key from the error table in which the error code and the corresponding error message information are stored in the hard disk 28 in advance. Is stored in the work area of the RAM 22, and an error message “the setting information of the connection request destination does not match” generated using the error message information is created and transmitted to the management apparatus 110. In step S606, an error message “connection request destination setting information does not match” is received from the relay router 120 and displayed on a small screen (dialog) including the error message and an “OK” button, and the process is performed in step S607. Proceed to In step S607, the management apparatus 110 determines whether the OK button has been pressed. If the OK button has been pressed, the process returns to S602. If the OK button has not been pressed, the process returns to S606.

  Processing after the relay router 120 transmits a connection request in step S624 when the collation results match in step S623 will be described.

  In step S641, when the managed device that is the connection destination selected in step S602 receives the connection request information via the general router 140, the received connection request information is stored in the work area of the RAM 22, and the process proceeds to step S642.

  In step S642, the management target device performs connection possibility determination processing. Specifically, the user ID and the password of the administrator authority for the connection request destination included in the connection request information are compared with the user ID and the password of the administrator authority stored in advance in the hard disk of the managed device. When authentication is performed and the managed device is connected to an external device, if a predetermined IP address or a predetermined MAC address is requested from the connection request source, it is stored in advance in the hard disk of the managed device. The predetermined IP address or the predetermined MAC address and the IP address or MAC address included in the connection request information are collated to determine a match / mismatch, the determination result is stored in the work area of the RAM 22, and the process is performed in step S643. Proceed to

  In step S643, the management target device refers to the work area of the RAM 22, and if the authentication determination is OK and the connection request source requests a predetermined IP address or a predetermined MAC address, the IP address or MAC address is determined. If the verifications match, the process proceeds to step S644. Even if the authentication process is not OK, or the authentication process is OK, if the connection request source requests a predetermined IP address or a predetermined MAC address, the process is performed when the IP address or the MAC address verification does not match Advances to step S645.

  In step S644, the managed device refers to the log of the managed device (OS, management software, and various logs of the application) by executing the default command for the managed device included in the connection request information. Execute self-diagnostic program to determine whether there is an error. If there is no error, store the status information indicating that it is normal. If there is an error, store the status information including the error code or error content in the work area of the RAM Thereafter, response information (response information including status information, IP address of the management target device, and MAC address of the LAN adapter of the management target device) is transmitted to the relay router 120, and the process returns to step S641.

  In step S645, the device to be managed returns an error message corresponding to the determination result in step S642 (if the authentication process is not OK, an error message “User ID or password does not match”, IP address or MAC address verification matches) If not, an error message “IP address or MAC address is not permitted” is used as status information, response information including this status information is transmitted to the relay router 120, and the process returns to step S641.

  In step S626, the relay router 120 is in a response reception waiting state, and the process proceeds to step S627 at a predetermined timing (for example, at intervals of 0.1 seconds).

  In step S627, if the management apparatus 110 has timed out (for example, 30 seconds to 1 minute has elapsed since the start of counting in step S624), the management apparatus 110 writes in the work area of the RAM 22 that the response of the managed device has timed out, The process proceeds to step S628. When response information is received from the management target device, the response information received from the management target device is written in the work area of the RAM 22, and the process proceeds to step S628. If there is no response from the managed device and no time-out occurs, the process returns to step S626.

  In step S628, the relay router 120 includes the IP address of the management target device and the MAC address of the LAN adapter of the management target device included in the received response information, the IP address of the management target device stored in advance in the connection method table, It is determined whether or not it matches the MAC address of the LAN adapter of the management target device, and the determination result of this IP address mismatch is stored in the work area of the RAM 22. This IP address match determination is always performed. Whether or not to determine whether or not the MAC address of the LAN adapter matches is preset in the connection method table (if the No. 11 adapter MAC address in FIG. 13 has a value, the MAC address is determined). Do). The determination result of coincidence or non-coincidence is written in the work area of the RAM 22, and the process proceeds to step S629.

  In step S629, the relay router 120 records the history information (connection request information and response information in the history information storage area of the history information DB and the matching result stored in the RAM 22 in steps S622 and S628 (address match or mismatch, user ID or password match or mismatch)) is added, and the process proceeds to step S630.

  In step S630, the relay router 120 has written in the work area of the RAM 22 in step S628. The process branches depending on the determination result of match or mismatch. If they match, the process proceeds to step S632. If not, the process proceeds to step S631.

  In step S631, the relay router 120 executes error handling processing until the connection with the management target device is successful when the error content is a timeout. Details will be described with reference to the flowchart of FIG. The result of the error handling process is written in the work area of the RAM 22, and the process proceeds to step S632.

  In step S632, if the result of the error handling process is written in the work area of the RAM 22, the content of the error and the result of the error handling process (whether the connection is timed out or another managed device at the same location if the connection is timed out) , Whether it can connect to a managed device in another location, whether the general router 140 is normal, whether the relay router 120 is normal, whether the IP address is inconsistent, the MAC address Are read from the work area of the RAM 22 and transmitted to the management apparatus 110 as final response information. If the collation result stored in the work area of the RAM 22 in step S629 is OK (when the process proceeds directly from step S630 to step S632), the final result including the status information received from the managed device and stored in the work area of the RAM 22 is used. Response information is transmitted to the management apparatus 110.

  In step S608, the final response information transmitted by the relay router in step S632 is received and stored in the work area of the RAM 22, and the process returns to S602. In step S602, the final response information received and stored in the work area of the RAM 22 Accordingly, the display of the monitoring screen of FIG. 4 is updated and displayed, and the process proceeds to step S603 at a predetermined timing. Specifically, for example, when there is hardware error response information at a specific external connection destination, a red circle indicating a red signal in the status column of the corresponding external connection destination on the monitoring screen in FIG. Is displayed. When the connection is normally completed, a blue circle indicating a green signal and a “normal” character are displayed in the status column of the corresponding external connection destination on the monitoring screen of FIG. This is the end of the description of FIG.

  Next, a detailed flowchart of the connection request process of FIG. 7 will be described. The detailed flowchart of FIG. 7 is a process executed by the management apparatus 110, and corresponds to step S605 of FIG.

  First, in step S701, the management apparatus 110 acquires whether or not a LAN connection is currently being made from the operation system, and if connected, the name of the network connection, and stores it in the work area of the RAM 22 as the LAN connection status. In step S702, the management apparatus 110 refers to the LAN connection status of the work area in the RAM 22, and if the LAN connection is currently being established, the process proceeds to step S703. If not currently connected to the LAN, the process advances to step S704.

  In step S703, the management apparatus 110 refers to the connection method table and compares the name of the network connection No. 4 in the connection method table of the connection request destination with the name of the network connection being connected to the work area of the RAM 22. If they match, the process proceeds to step S708. If not, the process proceeds to step S704.

  In step S704, the management apparatus 110 acquires the current session information from the operation system and turns off the session. In step S705, the management apparatus 110 disables (turns off) the currently connected LAN connection. In step S706, the management apparatus 110 refers to No. 7 in the connection method table and changes the current IP address to the management apparatus IP address corresponding to the connection request destination. In step S707, the management apparatus 110 refers to No. 4 in the connection method table, acquires a network connection name corresponding to the connection request destination, and performs line connection using this network connection.

  In step S708, the management apparatus 110 acquires current session information from the operation system and determines whether the current session is turned off. If the session is off, the process proceeds to step S709. If the session is on, the process ends. In step S709, the management apparatus 110 turns on a session corresponding to the connection request destination. This is the end of the description of FIG.

  Next, a detailed flowchart of the setting information collating process in FIG. 8 will be described. The detailed flowchart in FIG. 8 is a process executed by the relay router 120, and corresponds to step S622 in FIG.

  The relay router 120 receives the connection request information transmitted by the management apparatus 110 in step S605 and stores it in the work area of the RAM 22. In step S622, the relay router 120 stores the collation result (match / mismatch) in the work area of the RAM 22. Details will be described with reference to the flowchart of FIG.

  In step S801, the relay router 120 sets the connection request destination global IP address and other setting information stored in the work area of the RAM 22 and the connection request destination stored in the connection method table stored in advance in its own hard disk 28. It is checked whether the setting information such as the global IP address information matches. In step S802, the relay router 120 determines whether the connection request received from the management apparatus 110 is a connection request to an external connection destination (a specific management target device) via the relay router 120 or a connection request to the relay router 120 itself. Is determined using the global IP address of the connection request destination included in the connection request, and in the case of a connection request to the relay router 120 itself, the process proceeds to the log search process of FIG. 10 or the setting registration process of FIG. If it is determined that the request is for a connection to an external connection destination, the process proceeds to step S803.

  In step S803, it is determined whether the relay router 120 is currently connected to the outside. If it is determined that it is currently connected, the process proceeds to step S804. If it is determined that it is not currently connected, the process proceeds to step S805. In step S804, the relay router 120 refers to the session memory and determines whether or not the management target device requested to connect from the management apparatus 110 is currently connected. If it is determined that a connection is currently being made to the managed device that requested the connection, the process proceeds to step S812. If it is determined that the device to be managed that is requested to connect is not currently connected, the process proceeds to step S805.

  In step S805, the relay router 120 refers to the connection method table using the global IP address of the connection destination as a key, and refers to the reference result (whether or not the record of the corresponding global IP address has been registered in the connection method table). In step S806, the relay router 120 refers to the work area of the RAM 22 and if the record of the corresponding global IP address has been registered in the connection method table, the process proceeds to step S807. If not registered, the process advances to step S814.

  In step S807, the relay router 120 transmits a connection destination request to the management target device. Specifically, it sends a ping to the managed device, resets the ping timeout measurement counter, and starts the measurement. In step S808, the relay router 120 waits for a ping response from the managed device, and advances the process to step S809 at a predetermined timing (about 0.1 second).

  In step S809, the relay router 120 determines whether or not there is a response. If there is a response, the process proceeds to step S810. If there is no response, the process proceeds to step S813. In step S813, the relay router 120 proceeds to step S814 when a timeout (no ping response for a predetermined time) occurs or an error occurs. If no timeout or error occurs, the process returns to step S808.

  In step S810, the relay router 120 compares the MAC address of the LAN adapter included in the response from the managed device with the adapter MAC address No. 11 in the connection method table, and writes a match / mismatch in the work area of the RAM 22. Include. In step S811, the relay router 120 refers to the work area of the RAM 22, and proceeds to step S812 when the setting data matches. If the setting data do not match, the process proceeds to step S814.

  In step S812, the relay router 120 assigns an event number and adds a record to the history information DB shown in FIG. Specifically, each parameter of the network connection of the operation system is read using information included in the connection request information stored in the work area of the RAM 22 and the name of the network connection as a key, and a record is added to the history information DB. In this case, “0” indicating the start or end of the connection is recorded as the event type. In step S814, the relay router 120 refers to the error master using the error code stored in the work area of the RAM 22. In step S815, the relay router 120 stores the error content in the work area of the RAM 22.

  In step S816, the relay router 120 reads each parameter of the network connection of the operation system using the information included in the connection request information stored in the work area of the RAM 22 and the name of the network connection as keys, and further, the work area of the RAM 22 A record is added to the history information DB by using the error code and error content stored in the log information. In this case, “1” indicating an error or failure is recorded as the event type. This is the end of the description of FIG.

  Next, detailed processing for handling errors in FIG. 9 will be described. The detailed flowchart of FIG. 9 corresponds to step S631 of FIG. 6 and is a process mainly executed by the relay router 120.

  Prior to the processing of FIG. 9, the following processing is performed. In step S622 (step S810), the relay router 120 compares the MAC address of the LAN adapter included in the response from the managed device with the adapter MAC address of No. 11 in the connection method table, and finds a match / mismatch in the RAM 22. Stored in the work area. When the response from the management target device times out in step S627, information indicating that the response of the management target device has timed out is stored in the work area of the RAM 22. When response information is received from the management target device in step S627, the response information received from the management target device is stored in the work area of the RAM 22. In step S628, the IP address match / mismatch determination result is also stored in the work area of the RAM 22.

  First, in step S901, the relay router 120 reads whether there is information indicating that the response of the management target device has timed out in step S627 and the response information stored in the RAM 22 from the management target device. In step S902, the relay router 120 determines whether there is response information (response data). In step S903, if the relay router 120 determines that there is response data in step S902, the process proceeds to step S906. If it is determined that there is no response data, the process proceeds to step S904.

  In step S904, the relay router 120 transmits the connection request information to the management target device again. Next, in step S921, the management target device receives connection request information and stores it in the work area of the RAM 22 in the same manner as in step S641. In step S922, the management target device executes the same processing as in steps S642 to S645 (connection possibility determination, log reference processing, self-diagnostic program), and transmits response information including status information to the relay router. In step S905, the relay router 120 determines whether the connection with the management target device is successful using the response information received from the management target device, and stores the determination result in the work area of the RAM 22.

  In step S906, if the connection with the management target device is successful, the relay router 120 stores in the work area of the RAM 22 that the connection is successful by retransmitting the connection request, and ends the process. If the connection with the management target device is not successful, the fact that the connection was not successful due to retransmission of the connection request is stored in the work area of the RAM 22, and the process proceeds to step S907.

  In step S907, the relay router 120 refers to the connection destination table of FIG. 12, and the other managed device (No. 3 connection location information of the same location as the managed device to be connected currently matches). It is determined whether there is another managed device having a different global IP address. If there is another device to be managed, the process proceeds to step S908. If there is no other device to be managed, the process proceeds to step S911.

  In step S908, the relay router 120 reads out the connection user ID, connection password, and default command of the other managed device at the same location as the managed device from the connection method table, and requests connection to the other managed device. Send. Steps S931 to S932 and Step S909 are the same as Steps S921 to S922 and Step S905, respectively, except that the management target device is changed to another management target device.

  In step S910, if the relay router 120 is successfully connected to another managed device at the same location, the relay router 120 indicates that the connection with the other managed device at the same location is successful and the management number of the other managed device. Is stored in the work area of the RAM 22, and the process proceeds to step S917. If the connection with another managed device at the same location is not successful, the RAM 22 indicates that the connection with the other managed device at the same location is not successful and the management number of the other managed device at the same location. And the process proceeds to step S907.

  In step S911, the relay router 120 reads a connection user ID, a connection password, and a default command for an arbitrary management target device in another location from the connection method table, and issues a connection request to the management target device in the other location. Send. Steps S941 to S942 and S912 only change the management target device to a management target device at another location, and are the same as Steps S921 to S922 and Step S905, respectively, so description thereof will be omitted.

  In step S913, if the relay router 120 is successfully connected to another managed device in another location, the relay router 120 indicates that the connection with the other managed device in another location is successful and the management number of the other managed device. Is stored in the work area of the RAM 22 and the process proceeds to step S917. If the connection with another managed device at another location is not successful, the RAM 22 indicates that the connection with the other managed device at another location has not been successful and the management number of the other managed device at the different location. And the process proceeds to step S914.

  In step S <b> 914, the relay router 120 reads a connection user ID, a connection password, and a default command for logging in to the general router 140 from the connection method table, and transmits a connection request to the general router 140. Steps S951 to S952 and Step S915 are the same as Steps S921 to S922 and Step S905, respectively, except that the managed device is changed to the general router 140, and the description thereof will be omitted.

  In step S916, the relay router 120 refers to the response information of the general router 140 stored in step S915, and if the connection is successful and the general router 140 is normal, stores that fact in the work area of the RAM 22, The process proceeds to step S918. If the connection with the general router 140 has failed or the general router 140 is not normal, the process advances to step S917. In step S917, the determination results stored in the work area of the RAM 22 are read out, sorted by acquisition time, and stored in another area in the work area of the RAM 22. This is the end of the description of FIG.

  Next, the flowchart of FIG. 10 will be described. 10 is a history search process executed by the management apparatus 110 and the relay router 120. Steps S1001 to S1010 are processes executed under the control of the CPU 21 of the management apparatus 110, and steps S1021 to S1029 are steps. This process is executed under the control of the CPU 21 of the relay router 120.

  In step S1001, when the “Search” tab in the screen of FIG. 4 is selected, a search condition designation screen (not shown) is displayed on the display device of the management device 110, and the process proceeds to step S1002.

  In step S1002, the search condition designation screen can designate each item (No. 1 to No. 17) of the history information DB shown in FIG. 14 as a search condition, and a “search” button is displayed. For example, the From-To designation of the acquisition date indicating the acquisition time of the event, the From-To designation of the occurrence date indicating the occurrence time of the event, the event type (0 in the case of connection start / end, error or In the case of a failure, 1) the external connection destination name (name of the external connection destination where the event occurred), the global IP address, etc. can be specified.

  Furthermore, after the search, the hit items are sorted and the sorting method (up to three items can be designated from each item No. 1 to No. 17 in the history information DB, and the descending and ascending order can be designated for each item as the sorting method. Can be specified). When each condition is input on the search condition designation screen of the management apparatus and the “search” button is pressed, the process proceeds to step S1003, and the search condition input in step S1002 and stored in the work area of the RAM 22 is displayed. The search condition information shown is transmitted to the relay router 120.

  In step S1021, the relay router 120 receives the search condition information, stores it in the work area of the RAM 22, and advances the process to step S1022. In step S1022, the relay router 120 searches the history information DB using the search condition information stored in the work area of the RAM 22, stores the hit history information in the work area of the RAM 22, and advances the process to step S1023.

  In step S1023, the relay router 120 refers to the hit history information stored in the work area of the RAM 22, and if there is no hit, the process proceeds to step S1024. If there is a hit, the process proceeds to step S1025. In step S1024, the relay router 120 transmits to the management apparatus 110 an error message indicating that there is no hit. The management apparatus 110 displays an error message indicating that there are no hits, and returns the process to step S1001.

  In step S1025, when the sort order is designated, the relay router 120 sorts the hits by the designated item. In step S1026, the relay router 120 includes the sorted hit list information (consisting of a plurality of detail lines, each detail line including the date of occurrence, the event type, the external connection destination name, and the contents. A check box is displayed at the top so that each detail line can be selected). In step S1005, the management device 110 displays the received list information on the display device. The processing proceeds to step S1006 at a predetermined timing (for example, after 0.1 second). In step S1006, the management apparatus 110 determines whether a specific detail row has been selected. If selected, the process proceeds to step S1008, and if not selected, the process proceeds to step S1007.

  In step S1007, the management apparatus 110 determines whether display of the previous screen is requested. If display of the previous screen is requested, the process returns to step S1001, and processing is performed if display of the previous screen is not requested. It returns to step S1005. In step S <b> 1008, the management apparatus 110 transmits selection information that can specify the selected details to the relay router 120.

  In step S1027, the relay router 120 receives the selection information and stores it in the work area of the RAM 22. In step S1028, the detailed information on the selected item corresponding to the selection information (No. 1 to No. in the history information DB). .17) are read from the history DB and stored in the work area of the RAM 22, and the process proceeds to step S1029. In step S <b> 1029, the relay router 120 transmits detailed information stored in the work area of the RAM 22 to the management apparatus 110.

  In step S1009, the management apparatus 110 receives the detailed information and displays it on the screen one by one, displays the “front” button and the “back” button, and advances the process to step S1010. In step S1010, the management apparatus 110 determines whether the “front” button, the “rear” button, or the “end” button has been pressed. If the “end” button has been pressed, the process ends. If the “front” button or the “rear” button is pressed, the process returns to step S1008. If none of the “front” button, “rear” button, or “end” button is pressed, the process returns to step S1009. This is the end of the description of FIG.

  Next, the flowchart of FIG. 11 will be described. FIG. 11 is a flowchart showing the setting registration process of the connection method table shown in FIGS. 12 and 13, and is a process executed by the management apparatus 110 and the relay router 120. Steps S1101 to S1111 are processes executed under the control of the CPU 21 of the management apparatus 110, and steps S1121 to S1129 are processes executed under the control of the CPU 21 of the relay router 120.

  First, in step S1101, when the management apparatus 110 selects the “edit” tab on the screen of FIG. 4, a connection method registration screen (not shown) is displayed on the display device of the management apparatus 110, and the process proceeds to step S1102. In step S1102, the management apparatus 110 selects each item in the connection method table shown in FIG. (Except for No. 16, No. 20 and No. 21) are displayed, and a “registration” button and an “end” button are also displayed on this registration screen. If the registration button is pressed, the process proceeds to step S1103.

  In step S1103, the management apparatus 110 transmits the registration information of each item input on the registration screen to the relay router 120 together with the user ID of the user using the management apparatus 110 (corresponding to a creator or a changer). In step S1121, the relay router 120 stores the received registration information and user ID in the work area of the RAM 22. In step S1122, the relay router 120 searches the connection method table using the registration information stored in the work area of the RAM 22. In this step, the connection method table is searched for duplicates. The duplication here is when the global IP address of No. 7 for relay router (No. 8 for management device), the connected device name of No. 6, and the MAC address of the adapter have the same value in multiple records. Means. The detailed information of the hit hit by the duplicate search is stored in the work area of the RAM 22, and the process proceeds to step S1123.

  In step S1123, if there is a duplicate search hit, the relay router 120 proceeds to step S1124, and if there is no duplicate search hit, the process proceeds to step S1125. In step S1124, the relay router 120 transmits an error message indicating that there is a duplicate record. In step S1104, the management apparatus 110 displays an error message screen indicating that there are duplicate records. In the error message screen, a delete button for deleting a duplicate record is displayed. When one of the duplicate records is selected and the delete button is pressed, the management apparatus 110 and the relay router 120 are connected to the two connection method tables. Each duplicate record is deleted (not included in this partial flowchart). After deletion, the process returns to step S1101.

  In step S1125, the relay router 120 determines whether the registration information input this time is unregistered information. The determination as unregistered information is based on the relay router connection method table using the global IP address of relay router No. 7 (No. 8 for management devices), the connected device name of No. 6 and the MAC address of the adapter as keys. It is determined by referring to whether at least one of these has been registered. If it is unregistered information, the process proceeds to step S1128. If it is not unregistered information, the process proceeds to step S1126.

  In step S1126, the relay router 120 transmits the registered information to the management terminal.

  Next, in step S1105, the management device 110 displays the received registered information on the screen of the display device. Registered information can be changed or entered on this screen. The process proceeds to step S1106 at a predetermined timing. In step S1106, the management apparatus 110 determines whether the registration button has been pressed. If the button has been pressed, the process proceeds to step S1108. If not, the process proceeds to step S1107.

  In step S1107, the management apparatus 110 determines whether the previous screen button has been pressed. If the button has been pressed, the process returns to step S1101, and if not, the process returns to step S1105. In step S1108, the management apparatus 110 stores the registration information input in step S1105 in the work area of the RAM 22. In step S1109, the management device 110 transmits the registration information stored in the work area of the RAM 22 to the relay router.

  In step S1127, the relay router 120 stores the received registration information in the work area of the RAM 22, and the process proceeds to step S1128. In step S1128, the relay router 120 updates the connection method table of the relay router 120 with the received registration information, transmits this registration information to the management terminal 110, and updates the connection method table of the management terminal 110. If both updates are completed normally, the process proceeds to step S1129. In step S <b> 1129, the relay router 120 transmits an update result message to the management terminal 110.

  In step S1110, the management apparatus 110 displays an update result message. The process proceeds to step S1111 at a predetermined timing. In step S1111, the management apparatus 110 determines whether the management apparatus 110 has pressed the previous screen button. If the management apparatus 110 has been pressed, the process returns to step S1101, and if not, the process returns to step S1110. This is the end of the description of FIG.

  Each means and each step constituting the embodiment of the present invention described above can be realized by operating a program stored in a RAM, a ROM, or the like of a computer. This program and a computer-readable recording medium recording the program are included in the present invention.

  Further, the present invention can be implemented as, for example, a system, apparatus, method, program, or recording medium, and may be applied to an apparatus composed of a single device.

  The present invention supplies a software program for realizing the functions of the above-described embodiments directly or remotely to a system or apparatus. In addition, this includes a case where the system or the computer of the apparatus is also achieved by reading and executing the supplied program code.

  Accordingly, since the functions of the present invention are implemented by computer, the program code installed in the computer also implements the present invention. In other words, the present invention includes a computer program itself for realizing the functional processing of the present invention. In that case, as long as it has the function of a program, it may be in the form of object code, a program executed by an interpreter, script data supplied to the OS, and the like.

  Further, the functions of the above-described embodiments are realized by the computer executing the read program. Furthermore, based on the instructions of the program, an OS or the like running on the computer performs part or all of the actual processing, and the functions of the above-described embodiments can be realized by the processing.

  As another method, a program read from a recording medium is first written in a memory provided in a function expansion board inserted into the computer or a function expansion unit connected to the computer. Then, based on the instructions of the program, the CPU or the like provided in the function expansion board or function expansion unit performs part or all of the actual processing, and the functions of the above-described embodiments are also realized by the processing.

It is a figure which shows the structure of the management system which concerns on embodiment of this invention. It is a block diagram which shows the hardware constitutions of the management apparatus and relay router which concern on embodiment of this invention. It is a functional block diagram which shows the characterizing part of the function structure of the management apparatus which concerns on embodiment of this invention, and a relay router. It is a figure which shows an example (normal time) of the display screen of the management apparatus which concerns on embodiment of this invention. It is the table | surface which put together the function of each menu button of the display screen of the management apparatus which concerns on embodiment of this invention. It is a whole flowchart which shows operation | movement of the management system which concerns on embodiment of this invention. It is a flowchart which shows the detailed process of the connection request process (step S605) shown in FIG. It is a flowchart which shows the detailed process of the setting information collation process I (step S622) shown in FIG. 7 is a flowchart showing a detailed process of the error handling process (step S631) shown in FIG. It is a flowchart which shows the history search process of history information DB. It is a flowchart which shows the setting registration process of a connection method table. It is a figure which shows the item layout example of the connection method table for the management apparatuses. It is a figure which shows the example item layout of the connection method table for relay routers 120. FIG. It is a figure which shows the example item layout of log | history information DB. It is a figure which shows the example item layout of an error master.

Explanation of symbols

20 System bus 21 CPU
22 RAM
23 ROM
24 Communication Adapter 25 Display Adapter 26 Keyboard 27 Mouse 28 HDD
29 DVD-ROM
100 Communication Line 110 Management Device 120 Relay Router 130 FireWall
140 General router 150 External router A
155 External router B
160 Managed device C
170 Managed device A
180 Managed Device B
190 Telephone switch 200 Managed equipment D

Claims (10)

A management device that performs line connection with a plurality of managed devices using a predetermined setting value,
Storage means for storing the setting value for each managed device;
Display means for selectively displaying a connection method with the line and the management target device;
Detecting means for detecting a connection state between the management device and the line;
According to the connection method selected on the screen display, the management target device, and the connection state detected by the detection unit, the setting value is read, and the selected management target device and the management device are And a connection request means for requesting the selected management target device to connect. A management system in which a plurality of devices to be managed and a management device are connected via a relay device,
The management device includes a storage unit that stores the setting value for each managed device;
Display means for selectively displaying a connection method with the line and the management target device;
Detecting means for detecting a connection state between the management device and the line;
According to the connection method selected on the screen display, the management target device, and the connection state detected by the detection unit, the setting value is read, and the selected management target device and the management device are Connection request means for requesting the selected managed device to connect,
The relay device is
Setting storage means for storing the setting value for each managed device;
A first collation unit that collates a match / mismatch between the set value of the management target device included in the connection request received from the management device and the set value stored in the storage unit;
First transfer means for transferring the connection request to the managed device when the matching of the first matching means is matched;
A second collation unit that collates a match / mismatch between the set value of the management target device included in the connection request received from the management target device and the set value stored in the storage unit;
Second transfer means for transferring the connection request to the management device when the verification of the second verification means matches;
A management system comprising: The first transfer means of the relay device is
When the connection between the management target device and the relay device fails as a result of the connection request to the management target device by the connection request transferred by the first transfer unit, other management of the same location as the management target device The management system according to claim 2, further transmitting a connection request to the target device. The first transfer means of the relay device is
When the connection between the management target device and the relay device fails as a result of the connection request to the management target device by the connection request transferred by the first transfer unit, other management of a location different from the management target device 4. The management system according to claim 2, wherein a connection request to the target device is further transmitted. Another relay device is further connected between the relay device and the managed device or the other managed device,
The connection request is transferred via the other relay device,
The relay device is
As a result of a connection request to the managed device by the connection request transferred by the first transfer means, the connection between the relay device and another managed device in the same location or another managed device in the different location fails In this case, the information processing apparatus further comprises status requesting means for logging in to another relay apparatus located between the managed device and the relay apparatus in an administrator mode and requesting status information of the other relay apparatus. The management system according to claim 3 or claim 4.   The management system according to claim 2, wherein the setting value includes any one of a MAC address or a user ID and a password of the management target device. A control program for a management system in which a plurality of managed devices and a management device are connected via a relay device,
Storage means for storing the set value for each of the managed devices;
Display means for selectively displaying a connection method with the line and the management target device;
Detecting means for detecting a connection state between the management device and the line;
According to the connection method selected on the screen display, the management target device, and the connection state detected by the detection unit, the setting value is read, and the selected management target device and the management device are Function as a connection request means for requesting the selected managed device to connect,
The relay device;
Setting storage means for storing the setting value for each managed device;
A first collation unit that collates a match / mismatch between the set value of the management target device included in the connection request received from the management device and the set value stored in the storage unit;
First transfer means for transferring the connection request to the managed device when the matching of the first matching means is matched;
A second collation unit for collating a match / mismatch between the set value of the management target device included in the connection request received from the management target device and the set value stored in the storage unit;
A control program for functioning as second transfer means for transferring the connection request to the management device when the verification of the second verification means matches. The first transfer means of the relay device;
When the connection between the management target device and the relay device fails as a result of the connection request to the management target device by the connection request transferred by the first transfer unit, other management of the same location as the management target device 8. The control program according to claim 7, further comprising a function of further transmitting a connection request to the target device. The first transfer means of the relay device;
When the connection between the management target device and the relay device fails as a result of the connection request to the management target device by the connection request transferred by the first transfer unit, other management of a location different from the management target device 8. The control program according to claim 7, further comprising a function of further transmitting a connection request to the target device. Another relay device is further connected between the relay device and the managed device or the other managed device,
The connection request is transferred via the other relay device,
The relay device;
As a result of a connection request to the managed device by the connection request transferred by the first transfer means, the connection between the relay device and another managed device in the same location or another managed device in the different location fails In such a case, it is possible to log in to another relay device located between the managed device and the relay device in an administrator mode and further function as status request means for requesting status information of the other relay device. The control program according to claim 8 or 9, characterized in that