JP2010171884A - Network equipment setting method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To ensure that the network setting of individual network equipment in a practically operated network is remotely made via the practically operated network and support is made quickly such that the network equipment can be employed without the need of transporting setting devices and dispatching personnel to places where the network equipment is established. <P>SOLUTION: Between a configuration management device and a router 1 wherein a network is set and global addresses are set, a network setting is made to a router 2, which is connected to a location beyond the router 1, through a network communication that employs global addresses. Since global addresses are not set yet between the router 1 and router 2 during the network setting, network communication is performed using a link local address. The network setting of the router 2 can be remotely made through the network communication without dispatching a network engineer. <P>COPYRIGHT: (C)2010,JPO&INPIT

Description

  The present invention relates to a network device setting method for setting a network device capable of supporting a protocol stipulated by IPV6 on a network that is actually operated, and in particular, for each network device. Network settings in the network to be operated in practice can be performed from a remote location via the actual operation network, and it is necessary to transport various setting devices to the installation site of the network equipment and to dispatch a network engineer or other personnel. In addition, the present invention relates to a network device setting method capable of promptly responding so that the network device can be used while saving cost and labor.

  Conventionally, the layer 2 network is provided centering on a wide area Ethernet (registered trademark) provided by a communication carrier. Alternatively, the layer 3 network is provided centering on IP-VPN provided by a communication carrier. Normally, in both the layer 2 network and the layer 3 network, users of routers, switches, and other network devices set up these network devices themselves.

  In addition, a router, a switch, a hub, a gateway, and other network devices having a function of connecting two networks are collectively referred to as a router hereinafter. In addition, a network setting for making a network device available on a network that is actually operated is hereinafter referred to as a network setting.

  Here, when accessing the network device from another network device, it is necessary to specify the address of the access destination network device from the access source network device, and IPV4 (Internet Protocol Version 4) or IPV6 (Internet Various IP addresses for this purpose defined in Protocol Version 6) are used. First, the global address is an IP address unique in the world. An IP address unique in a network within a specific range is called a link local address or a unique local address.

  Patent Document 1 discloses a technique for acquiring the IP address of such a neighboring network device. This patent document 1 uses a link multicast address defined in IPV6 to obtain address information of a network device to be acquired from a neighbor cache and create a global address candidate thereof. I try to get a global address.

JP 2008-98760 A

  However, in order to be able to use the network device on the network that is actually operated, it is necessary to individually set the network in advance. Alternatively, it is necessary to go to the site where the installation is to be performed and a network engineer will be required to set up the network. Similarly, when changing the network settings after the operation at the site, it is necessary for the network engineer to go to the site and respond accordingly.

  Note that the above-described Patent Document 1 merely obtains a global address of a network device, and is not for individually setting network devices.

  The present invention has been made to solve the above-mentioned conventional problems, and enables network settings of individual network devices in a network for actual operation to be performed from a remote location via the actual operation network. A network that can be used promptly so that the network equipment can be used without the need for transporting various setting devices to the installation location of the equipment and the dispatch of network engineers, etc. It is an object to provide a device setting method.

  The present invention relates to a network device setting method for setting a network device that can use a network device compatible with a protocol defined by IPV6 on a network that is actually operated, and both a global address and a unique local address are used. An undecided network device is accessed from the configuration management apparatus side via the practical operation network using a link local address defined by IPV6, and includes at least one setting of a global address and a unique local address. After performing the network setting of the network device and performing the network setting of the network device as a router, the network device of another network device connected to the configuration management apparatus via the router is configured. Settings, and accessed using the link local address as appropriate from the configuration management apparatus, by which is adapted to set, it is obtained by solving the above problems.

  In addition, the configuration management device may include an automatic network device setting device that automatically and sequentially performs network settings for each network device connected to the practical operation network according to a predetermined algorithm.

  Further, the configuration management apparatus can be realized by a computer program.

  According to the present invention, network configuration can be performed for a target network device by tracing the network from the configuration management device side. In the process of following this network, even if there is a router whose network setting is incomplete or whose IP address is unknown, it can be appropriately set, and an IP address can be acquired and accessed. You can reach the device and configure its network settings. Therefore, when installing and connecting a network device that has not been networked to the site, or when changing the network setting of a network device that is already in operation, the network configuration can be set from a remote configuration management device. There is no need for a network engineer to visit the site and configure the network settings. For this reason, not only can the labor and cost associated with network setting be reduced, but also quick network setting can be performed.

The block diagram which shows typically the structure of the whole network of embodiment with which this invention was applied The block diagram which shows the structure of the hardware used for each apparatus of the said embodiment. A block diagram schematically showing a configuration of the entire network of the embodiment applied in a layer 2 network provided mainly by wide area Ethernet (registered trademark) or the like. The block diagram which shows typically the structure of the whole network of the said embodiment applied in the layer 3 network provided focusing on IP-VPN etc. The block diagram which showed typically the router by which a network setting is sequentially set from the configuration management apparatus of the said embodiment. Data configuration diagram of global address in IPV6 used in the embodiment Data structure diagram of interface ID included in the global address Diagram showing the type of IP address and its configuration in IPV6 used in the embodiment The block diagram which shows the relationship between the configuration management apparatus in the said embodiment, the two routers 1 and 2, and computer equipment. The block diagram which shows an example of the network setting with respect to the router 1 in the said embodiment. The block diagram which shows an example of the network setting with respect to the router 2 in the said embodiment. Diagram showing an example of setting information in the previous embodiment Diagram showing an example of setting information following FIG.

  Hereinafter, embodiments of the present invention will be described in detail with reference to the drawings.

  FIG. 1 is a block diagram schematically showing a configuration of an entire network according to an embodiment to which the present invention is applied.

  As will be described later, this embodiment applies to a layer 2 network provided mainly by wide area Ethernet (registered trademark) (FIG. 3) and a layer 3 network provided mainly by IP-VPN. (FIG. 4) Applicable. In any case, as shown in FIG. 1, the individual networks 1 can be regarded as a hierarchical structure.

  In FIG. 1, a network 1 connects a computer device 5 and a configuration management device 7 to each other by at least IPV 4 or IPV 6 via a router 3 as appropriate. Some of the router 3 and the computer device 5 are compatible with the IPV 6 and are the target of network setting to which the present invention is applied.

  Here, the network setting of the computer device 5A can be performed by network communication by applying the present invention from the configuration management device 7 through the path indicated by the one-dot chain line arrow in the figure. In addition, the network setting of the computer device 5B can be performed by applying the present invention by a route indicated by a two-dot chain line arrow. At this time, at least the router 3, the computer device 5 </ b> A, and the computer device 5 </ b> B on these paths need to support IPV6.

  FIG. 2 is a block diagram showing a configuration of hardware used for each device of the present embodiment.

  FIG. 2 shows a hardware configuration of a certain type of computer device that can be used as each device of the router 3, the computer device 5, and the configuration management device 7. However, each device is not limited to such a device.

  The computer apparatus of FIG. 2 may be a general PC (Personal Computer) apparatus in which Windows (registered trademark) of US Microsoft Corporation is installed as an example of the OS (Operating System), and is not particularly limited. . Alternatively, hardware other than the PC device may be used, and hardware such as a so-called workstation such as EWS (Engineering Work Station) may be used. In this figure, the hardware configuration is partially abstracted for the sake of explanation.

  In this figure, a computer device includes a CPU (Central Processing Unit) 310, a RAM (Random Access Memory) 311, a ROM (Read Only Memory) 312, a LAN-I / F (Inter Face) 313, a MODEM (modulator). -demodulator) 314 and various I / Fs 320 to 322. These are interconnected by a bus 301.

  The LAN-I / F 313 is used for connection to the network 1. When the computer apparatus of this figure is used as a router, the LAN-I / F 313 can be simultaneously connected to at least two different networks 1. The LAN-I / F 313 corresponds to a NIC (FIGS. 10 and 11) described later.

  Further, a screen display device 330 is connected to the bus 301 via the I / F 320. A keyboard 331, a mouse 332, and a printer device 333 that are interconnected by the bus 303 are connected to the bus 301 via the I / F 321.

  Further, an HDD (Hard Disc Drive) device 340, a CD (Compact Disc) drive device 341, and an FDD (Floppy (registered trademark) Disc Drive) device 342 are connected to the bus 301 via the I / F 322. Has been. These are interconnected by a bus 302.

  In the hardware configuration as described above, the storage means and storage devices are RAM 311, ROM 312, HDD device 340, CD drive device 341, FDD device 342, and the like. In such storage means and storage devices, various programs executed by the CPU 310, databases and various files and data accessed in the present embodiment are stored, and can be accessed electronically. For example, a program for providing an environment using software resources such as an OS, a database, JAVA (registered trademark), JSP (Java (registered trademark) Server Page), an application program according to the present embodiment, a web The browser program is stored in the HDD device 340 and is read out to the RAM 311 and executed by the CPU 310 at the time of execution. The LAN-I / F 313 is used for connection to the network 1 and the application program executed by the CPU 310 is a JAVA (registered trademark) acquired via the network 1 in a client device or the like. And those provided by the ASP (Active Server Page) function in the electronic document server device 10 are also included.

  Further, when executing an OS, an application program, or the like, an operator performs character input and various operations with the keyboard 331 while referring to information displayed and output on the screen display device 330, and coordinate input and various operations with the mouse 332. Or input. For example, the mouse 332 can be used to select electronic documents to be displayed in a list, to specify a range such as a search in the electronic document being browsed, or to perform various operations by clicking operations or so-called drag and drop operations. Perform operations. Further, necessary information can be printed out from the printer device 333 as appropriate. Needless to say, these outputs and inputs are performed electronically by a program executed by the CPU 310.

  The CD drive device 341 and the FDD device 342 are used for application program installation and other offline information exchange when the present invention is applied.

  Next, FIG. 3 is applied in the layer 2 network 12 provided mainly by the wide area Ethernet (registered trademark), and FIG. 4 is applied in the layer 3 network 14 provided mainly by the IP-VPN. FIG. 2 is a block diagram schematically showing the configuration of the entire network of the present embodiment. FIG. 5 is a block diagram schematically showing the router 3 in which network settings are sequentially set from the configuration management device 7 of the present embodiment.

  First, the router 3 connects a specific network 1 to an upper network 1, and interconnects two such networks 1 as shown in FIGS. Here, the configuration management device 7 of the present invention is connected to the router 3A in FIG. 3 and to the router 3B in FIG. The configuration management device 7 is arranged in a network center where a network engineer who performs network setting stands by.

  Further, the configuration management device 7 performs setting of network settings and acquisition of an IP address so as to ensure access to the closer router 3. Since the router 3 and the network device that are set to the network are accessed using the global address, but the router 3 and the network device beyond this cannot be accessed using the global address, the link local address is set. Configure the network settings according to the access used. For example, in the network configuration of FIG. 5, the present invention is applied in the order of the router 3C, the router 3D, the router 3E, and the router 3F from the side closest to the configuration management device 7 to set the network settings and acquire the IP address. Go.

  Here, FIG. 6 is a data configuration diagram of a global address in IPV6 used in the present embodiment. FIG. 7 is a data configuration diagram of the interface ID included in the global address.

  As shown in this figure, the IP address defined by IPV6 is composed of 128 bits.

  Also, in this figure, when explaining in order from the MSB (Most Significant Bit) side to the LSB (Least Significant Bit) side, a 13-bit TLA (Top-Level Aggregation) ID is allocated to a major ISP that has a track record in sTLA. ID code. A 13-bit sTLA (Sub Top-Level Aggregation) ID is an ID code assigned to a large ISP or the like that satisfies a specific qualification standard.

  An NLA (Next-Level Aggregation) ID of up to 13 bits is an ID code assigned to a general ISP. The maximum 13-bit SLA (Site-Level Aggregation) ID is an ID code assigned to a general end user. When these NLA ID and SLA ID are both provided, the NLA ID is on the MSB side.

  Next, the 16-bit in-site network ID is assigned by the general end user for each network 1 that is installed, for example. The subsequent 64-bit interface ID is assigned by the general end user to each network device connected under the network 1.

  Here, normally, the interface ID is automatically generated according to a MAC address (Media Access Control address) as shown in FIG. This MAC address is determined and written for each network device by the time of manufacture and shipment.

  As shown in FIG. 7, in the 48-bit MAC address, the 7th bit from the MSB is inverted, and 16 bits of “FFFE” in hexadecimal are inserted between the 24th and 25th bits. Thus, a 64-bit (= 48 + 16) interface ID is organized.

  Normally, the global address described above is uniquely assigned to the network device in the world, and is set therein as a network setting. However, when the network device is initially installed on the site, there are cases where the network setting is not made including the setting of the global address. In such a case, access from other network devices using the global address is not possible.

  In such a case, in the present embodiment, access is performed using a link local address and a unique local address described below, and the network setting of the corresponding network device is performed.

  FIG. 8 is a diagram showing the types of IP addresses and their configurations in IPV6 used in this embodiment.

  Here, in IPV6, in addition to the global address described above, a link local address and a unique local address are defined as shown in FIG.

  These link local addresses can be obtained relatively easily from other network devices in the physical single network 1, for example, the configuration management device 7 according to the IPV 6 even if the unique local address or the global address is undecided or unknown. And can be accessed using the acquired address. In the present embodiment, the network setting of the network device is performed from the configuration management device 7 by such access using the link local address.

  The link local address is an address used for access in a single link, and any one of “fe80 :: / 10” to “febf :: / 10” is assigned to each network device in the single link. . The unique local address is an address used for access within a single site, and any one of “fc00 :: / 7” is assigned to each network device within the single site.

  Here, in the present embodiment, a network device compatible with IPV6 is given a link local address as a standard, and communication can be performed between adjacent devices using this IP address. Also, in the present invention, by using this link local address to perform device settings, if setting information is registered in the configuration management device arranged in the management center, it is automatically transmitted via the network that is actually operated. You can configure network settings. As a result, if the network designer registers the setting information, the network engineer does not have to perform individual setting work or field work, and only the installation and installation are required on site.

  FIG. 9 is a block diagram showing the relationship between the configuration management device, the two routers 1 and 2, and the computer equipment in this embodiment. 10 and 11 are block diagrams showing examples of network settings for the router 1 or the router 2 in the present embodiment, respectively.

  First, the router 3 is connected to the network 1 by a NIC (Network Interface Card) (corresponding to the LAN-I / F 313 in FIG. 2). In FIG. 9, the NIC is not shown.

  First, in FIG. 9, the configuration management apparatus includes a configuration management system as a core of processing of the two agents 0 and 3 and the configuration management apparatus 7, and a configuration management DB used for the configuration management system. The router 1 includes four agents 0, 1, 4, and 5. The router 2 includes an agent 1.

  In the present embodiment, first, the configuration management system selects the setting information of the corresponding router from the configuration management DB that stores the setting information of the router in advance, and transmits the setting information (setting file) to the corresponding router. . Thereby, the network setting of the router is performed. In addition, the configuration management system uses the configuration management DB to manage devices connected directly and indirectly to the network using the link local address as a key. Further, the setting information of the corresponding router can be selected from the configuration management DB using the link local address as a key.

  Next, the agent 0 searches for the link local address of the adjacent router, and notifies the configuration management system of the detected router. Further, it communicates with the agent 1 of the router 1 using the link local address according to an instruction from the configuration management system.

  The agent 1 receives device setting information from the configuration management system via the agent 0, and instructs the agent 4 to perform setting based on the device setting information. As a result, the configuration management system can communicate with the router 1 using a global address or a unique local address.

  The agent 5 searches for the link local address of the adjacent router 2 using the agent 0 according to an instruction from the configuration management system, and reports the detected result to the configuration management system. Further, the configuration management system transfers the received setting information of the router 2 to the agent 0 and transmits it to the router 2.

  Next, the network setting will be described with reference to FIG. 10 by taking as an example the setting of the global address or unique local address of the NIC 10 and NIC 11 in the router 1.

  First, in the state where the network setting of the router 1 in the figure is not performed and the network setting of the NIC 10 and the NIC 11 is not performed, the configuration management apparatus 7 and the router 1 perform network communication with a link local address. .

  The agent 0 communicates with the adjacent router 1 connected by the link local address, and acquires its interface ID. Also, the adjacent router checks with the link local interface ID registered in advance and confirms with the router 1. Further, the configuration management system acquires the corresponding setting information from the configuration management DB using the link local interface ID as a key, and passes it to the agent 0 and the agent 1. These agents 0 and 1 instruct the router 1 via the network according to the acquired setting information. The setting instruction is based on network communication using a link local address.

  Upon receiving the setting instruction, the agent 1 hands over the setting information of the router 1 received from the configuration management system to the agent 4. Then, the agent 4 performs network settings for the NIC 10 and the NIC 11 based on the received setting information structure. As an example, in the present embodiment, global addresses or unique local addresses of the NIC 10 and the NIC 11 are set.

  Next, based on FIG. 11, the network setting will be described by taking as an example the setting of the global address or unique local address of the NIC 10 and NIC 11 in the router 1.

  First, it is assumed that the network setting of the router 1 in the drawing is performed, and the network communication by the global address is possible between the router 1 and the configuration management device. Further, it is assumed that the network communication of the router 2 and the router 1 in the figure is not performed and the network communication between the router 2 and the router 1 is not possible with the global address, but the network communication with the link local address is possible.

  Under such conditions, the agent 3 performs network communication with the agent 5 of the router 1 using the global address address, and instructs the detection of the adjacent router 2. The agent 5 then instructs the agent 0 to detect the adjacent router 2 in accordance with the detection instruction from the configuration management device.

  The agent 0 notifies the configuration management apparatus of the interface ID of the detected link local address of the router 2 via the agent 5. The agent 3 that has received the notification checks the link local interface face ID registered in the configuration management DB in advance, confirms that the ID is that of the router 2, and obtains the corresponding setting information from the configuration management DB. . Subsequently, the agent 3 transmits the setting information to the agent 5 of the router 1.

  The agent 5 of the router 1 passes the setting information received from the configuration management device to the agent 0 and instructs transmission. Then, the agent 0 transmits the setting information to the agent 1 of the router 2 by network communication using the link local address.

  The agent 1 of the router 2 delivers the setting information of the router 2 received from the configuration management system via the router 1 to the agent 4. The agent 4 sets the NIC of the router 2 according to the received setting information structure. As an example, in this embodiment, a NIC global address or a unique local address of the router 2 is set.

  Next, FIG.12 and FIG.13 is a diagram which shows the example of the setting information in this embodiment.

  In these figures, FIG. 13 is a continuation of FIG. In the present embodiment, the configuration management device 7 performs network settings on the router side while transmitting instructions such as those shown in these figures to the router side by network communication according to IPV6. The contents to be transmitted may be automatically performed by using information stored in the configuration management DB.

DESCRIPTION OF SYMBOLS 1 ... Network 3 ... Router 5 ... Computer equipment 7 ... Configuration management apparatus 12 ... Layer 2 network 14 ... Layer 3 network 301-303 ... Bus 310 ... CPU
311 ... RAM
312 ... ROM
313 ... LAN-I / F
314 ... MODEM
320 to 322 ... I / F
330 ... Screen display device 331 ... Keyboard 332 ... Mouse 333 ... Printer device 340 ... HDD device 341 ... CD drive device 342 ... FDD device

Claims (3)

In a network device setting method for setting a network device so that a network device compatible with a protocol defined by IPV6 can be used on a network that is actually operated,
A network device whose global address and unique local address are undecided is accessed from the configuration management apparatus side via the practical operation network using a link local address defined by IPV6. Including the setting of at least one of the addresses, the network setting of the network device,
After performing the network setting of the network device as a router, the network setting of another network device connected to the configuration management device via the router is set to the link local address from the configuration management device side. A network device setting method, characterized in that it is accessed and set appropriately. The network device setting method according to claim 1,
The configuration management device includes an automatic network device setting device that automatically and sequentially performs network settings for each network device connected to the practical operation network according to a predetermined algorithm. Method.   A computer program for implementing any one of the configuration management devices according to claim 1.

Images