JP3474077B2 - Network operation management system, management manager, management console, storage medium, and network operation management method - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a method and apparatus for efficiently operating and managing a network system that can have a plurality of types of logical network configurations for a network composed of a plurality of objects.

[0002]

2. Description of the Related Art Conventionally, a router device and a bridge device have been widely used as a method of dividing a network into a plurality of segments and controlling communication traffic for each segment. Also, with the widespread and large scale of corporate networks, many users have come to share limited network resources, and as a relay device to effectively use the bandwidth of the network and reduce unnecessary traffic. , ATM (Asynchronous Transfer Mode) and other switching devices have been developed. The switch device can reduce traffic by relaying a packet from a certain port only to a port designated in advance. In accordance with this principle, by setting the network that relays packets in advance in the switch device,
It is possible to configure a virtual network.

As a method for managing devices on the network, SNMP (Simple Network) defined in RFC1907 and the like is used.
rk Management Protocol) is commonly used,
It is possible to refer to and change the setting status and monitor the operating status for each device.

On the other hand, X.500 is a method for managing information of a computer connected to a network and users who are using the network by using a database.
Is used as an international standard.

[0005]

Further, a plurality of different standards are defined in the virtual network mounting method. For example, for ATM, industry standardization organization A
LAN emulation standardized by TM Forum (hereinafter LAN
E) is implemented. In addition, for Ethernet switch devices, the international standardization organization IEEE is discussing standardization.
In addition to the VLAN method (IEEE802.1q), various vendors have their own implementation methods.

As described above, in a network environment in which a plurality of virtual networks of different mounting methods are used together, there are some problems in system operation management.

The first problem is that when a plurality of virtual network methods are mixed, it is difficult for the system administrator to carry out unified operation management for all virtual networks. For example, when the virtual network settings are changed, many virtual network implementation methods are independent of the upper-layer protocols such as IP, so they can be connected to each other by router devices. This is because the reference and change of the network settings depend on each mounting method, and thus it becomes necessary to perform the setting operation for each virtual network, and it is not possible to handle them uniformly.

FIG. 24 shows a network configuration diagram for explaining the above problems. In FIG. 24,
One ATM switch device 102, two LAN emulation servers (hereinafter LES) 104a and 104b, and a LAN that manages the LES
Emulation configuration server (hereinafter LEC
(S) 101 constitutes emulated LANs (hereinafter referred to as ELAN) 107a and 107b.
LANs 108a and 108b are managed, and a total of four virtual network segments are configured. When it is necessary to change the constituent device of each virtual network segment, it is necessary to individually change the setting for each server that manages each virtual network segment. In this case, the system administrator
Regarding the equipment to be changed, it is necessary to grasp the correspondence relationship between each virtual network segment.

A second problem is that the virtual network segment is configured by logical control so that the physical connection state of the network and the logical network configuration state viewed from the higher level protocol are directly associated with each other. It is not done so that it can be grasped.

FIG. 25 shows the network shown in FIG.
A network configuration diagram when it is considered as a logical network based on the IP protocol is shown. In the configuration diagram shown in FIG. 25, the presence of a control server such as an ATM switch or LES cannot be detected. That is, the management of the ELAN and VLAN configurations must be performed separately from the management of the logical network layer by the IP protocol.

The above-mentioned first and second problems are not limited to the case where there are a plurality of virtual network mounting methods, and there are a plurality of logical types for one network entity composed of a plurality of objects. This is also a problem in the case of a network system that can manage the network.

In order to solve the above two problems, the present invention provides a unified network system capable of managing a plurality of types of logical networks with respect to a single network entity composed of a plurality of objects. It is an object of the present invention to provide a system, an apparatus and a method for operating and managing them.

[0013]

In order to solve the above problems, according to the present invention, a network system capable of managing a plurality of types of logical networks with respect to one network entity composed of a plurality of objects. In the network operation management system according to the first aspect, a display unit that simultaneously displays each of the plurality of types of logical network configurations on a virtual screen and network configuration information from each of the plurality of objects (for example, MIB (Manageme
information (information in an nt Information Base)), and each of the plurality of types of logical network configurations for each object according to the network configuration information collected by the collecting means (for example, an SNMP manager). To create display data for displaying on the display means, and to cause the display means to display each of the plurality of types of logical network configurations according to the display data created by the creation means. And display control means for controlling. For example, when defining a physical network configuration, a virtual network configuration, and a logical network configuration viewed from a higher-level protocol as the multiple types of logical network configurations, the multiple types of logical network configurations are defined. Each is regarded as one network layer, and the configuration information in the network layer is managed for each object. In this case, display data of a physical network configuration, a virtual network configuration, and a logical network configuration viewed from a higher level protocol are created for each object. With this, it is possible to control each of the plurality of types of logical network configurations to be displayed on the display unit, so that it is possible to manage all of the plurality of types of logical network configurations in a unified manner.

Further, it further comprises a receiving means for receiving an instruction to change the plurality of types of logical network configurations,
The creating means changes the display data of each of the plurality of types of logical network configurations for each object in response to the change instruction received by the receiving means, and the display means uses the creating means. Each of the plurality of types of changed logical network configurations may be displayed according to the changed display data.

Further, setting means for creating the network configuration information of the changed object from the display data changed by the creating means and setting the created network configuration information for the changed object is provided. You can have more.

Further, the display means further includes an acquisition unit for acquiring the directory structure of the network system from a management server of a directory database that holds the directory structure of the network system, and the display unit stores the directory structure acquired by the acquisition unit. Show more.

Further, the display means and the display control means are provided in a management console, and the collection means and the creation means are provided in a management manager so that a network operation management is performed like a client-server system. The system may be configured.

[0018]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described with reference to the drawings.

FIG. 3 is a diagram showing a schematic configuration of the network operation management system in this embodiment. In FIG. 3, the network 30 includes a management console computer.
(Hereinafter referred to as management console) 31 and a computer for management manager
A management server 32, a directory service server computer (hereinafter directory server) 33, and a control target device 34 to be managed are connected. 311, 312, 313
And 314 are program modules that operate on the management console 31, 321 is a device setting information database managed by the management manager 32, 322, 323, 324, and 325 are program modules that operate on the management manager.
Is a directory database, 332 and 333 are server programs operating on a directory server, and 341 and 342 are device control programs operating on controlled devices.

The management console 31 provides a 3D display processing module 312 for realizing a function of displaying a network configuration status to a network administrator, an input control module 311 for realizing a function of inputting an instruction by the network administrator, and a management manager 32. A database access module 313 and a download processing module 314 that provide interface functions are provided.

The 3D display processing module 312 and the database access module 312 operating on the management console 31 are downloaded from the management manager 32 by communication between the download processing module 313 of the management console 31 and the upload processing module 322 of the management manager 32. It At this time, the function of the management console 32 is the standard specification VRML (Virtual Reality Modeling La).
3D display processing module 312 is created so that 3D display is performed using
If the 312 is created by a method such as a plug-in program, H
TML (Hyper Text Markup Language) can be created to operate on a browser, and WWW (World Wide Web)
You can run it on almost any computer that can use. Further, as the communication method of the management console, another published standard such as FTP (File Transfer Protocol) can be used.

The management manager 32 has an upload control module 322 that communicates with the download processing 314 of the management console 31, and a database control module 323 that realizes a database control function that manages information necessary for display on the management console. , A device control procedure creation module 32 that realizes the function of expanding the instructions of the network administrator acquired from the management console 31 into the device management information
4 and S that actually performs control processing for the controlled device 34
It comprises an NMP manager module 325.

The directory server 33 includes a directory database 331, a directory server module 332 that controls the database, and a communication control module 333 that communicates with the management manager 32.

The control target device 34 is assumed to be a general network device, and a setting console control module for performing setting by connecting the setting console device.
341, and an SNMP agent module 342 that manages the device by SNMP, which is a standard network management method. The objects in this embodiment are controlled objects such as physical terminals and devices as one object, and are identified by an object ID. This object is managed for each logical network hierarchy.

Next, the correlation between the program modules operating on each device will be described with reference to FIG.

In FIG. 4, as described above, the download processing module 314 on the management console 31 communicates with the upload control module 322 on the management manager, and the other modules 311 to 313 on the management console are loaded on the management console 31. Transfer and start each module.

The 3D display processing module 312 searches the device setting information database 321 for the device setting information of the devices forming the network for the information necessary for the screen display.
Request the database access processing module 313.
By this request, the database access module 313
Communicates with the database control module 322 and searches the device setting information database 321. If the required information does not exist in the device setting information database, the database control module 323 determines whether the device control procedure creation module 3
Request 24 to obtain necessary data from the controlled device 34. The device control procedure creation module 324 creates a sequence for acquiring necessary device information, and
The device information is acquired from the SNMP agent 342 on the control target device through the MP manager 325, and the acquired device information is stored in the device setting information database 321 through the database control module 322, and at the same time, the device information is acquired in the 3D display processing module 312. Notify to that effect.

Further, the 3D display processing module 312 communicates with the database access processing module 313 to acquire the directory service information, and acquires the directory service information. The information on the directory service acquired at this time is associated with the device setting information acquired from each control device, and the information on the association is stored in the device setting information database 321.

The input control module 311 receives an instruction to change the device setting from the user and transfers the instruction to the device control procedure creation module 324. The device control procedure creation module 324 analyzes the content of the instruction and
Create a sequence to set change information to
The device information is set to each control target device by the SNMP agent 342 on the control target device through the manager 325.

FIG. 5 shows a block diagram of a computer on which the management console 31 operates. In FIG. 5, 51 is a computer main body, 511 is a disk controller, 512 is a main storage device, 51
3 is CPU, 514 is communication I / O interface controller, 51
5 is a keyboard / mouse controller, 55 is a keyboard, 5
16 is a video board controller, 56 is a display device, 52 is a floppy disk device, 53 is a fixed disk device, 531 is a 3D display processing program file, 532 is an input control program file, 533 is a database access processing program file, and 534 is download processing. A program file, 541 is a 3D display processing program module, 542 is an input control program module, 543 is a database access processing program module, 544 is a download processing program module, and 54 is a program load area.

FIG. 6 shows a block diagram of a computer on which the management manager 32 operates. 61 is a computer main body, 611 is a disk controller, 612 is a main storage device, 613 is a CPU, 614 is a communication I / O interface controller, 615 is a keyboard / mouse controller, 65 is a keyboard, 616 is a video board controller, and 66 is a display device. , 62 is a floppy disk device, 63 is a fixed disk device, 631 is an upload control setting file, 632 is a device setting information database, 633 is a device control procedure template file, 634
Is a MIB database file, 641 is an update control server module, 642 is a database control program module, 643 is a device control procedure creation processing program module, 644 is an SNMP manager module, and 64 is a program load area.

FIG. 7 shows a block diagram of a computer on which the directory server 33 operates. 71 is a computer main body, 711 is a disk controller, 712 is a main storage device, 713 is a CPU, 7
14 is a communication I / O interface controller, 715 is a keyboard / mouse controller, 75 is a keyboard, 716 is a video board controller, 76 is a display device, 72 is a floppy disk device, 73 is a fixed disk device, 731 is a directory database, and 741 is a directory. A server module, 742 is a communication control server module, and 74 is a program load area.

Next, the operation of this system will be described with reference to FIGS. 8 and 9.

FIG. 8 shows an operation flow chart from system startup to completion of 3D display. In FIG. 8, when the activation of the network operation management system (step 82) is accepted, the download control module 314 of the management console 31 communicates with the upload control module 322 of the management manager 32, and the other program modules 3
Download 11-313. At this time, an HTTP server can be realized as the upload control module and HTML and a Web browser can be realized as the download processing module (step 831). When the download of the program module is completed, the 3D display data creation processing of the 3D display processing module is started (step 83
2). In the 3D display data creation process 832, device setting information necessary for displaying each network configuration diagram of a physical network, a logical network, and a virtual network, for example, a list of devices to be displayed, device interconnection information, and device type Etc., the device setting information database 632
(Step 842). At this time, the device control procedure creation module 324 on the management manager 32 creates a MIB value acquisition sequence for confirming the presence or absence of a new controlled device (step 843), and according to the sequence,
The SNMP manager issues an SNMP command to search for a new controlled device (step 844). When a new control target device exists, a new object ID is registered in the device setting information database. Also, regarding the existing control target device, if the necessary information is not registered in the device setting information database, the MIB value acquisition sequence for acquiring the necessary setting information from the control target device is set to the device on the management manager 32. Control procedure creation module
324 creates (step 843) and follows the sequence
The MP manager issues an SNMP command or its alternative command to the device to be controlled (step 844). The SNMP agent or its alternative means on the controlled device 34 acquires the MIB value of its own device and notifies the management manager 32 of the acquired MIB value (step 851).
This result is registered in the device setting information database and is notified to the 3D display data creation processing 832.

Next, in order to create the display data of the organizational structure diagram registered in the directory database 331 (step 833), the directory database search process is performed.
(Step 845) is instructed to the management manager 32. This instruction is relayed to the directory server 33, the directory information is accessed (step 861), and the management console is notified of the directory information. Then, the 3D display process completes the 3D display data with the device setting information and the directory information (step 834). At this time, the arrangement of the 3D objects for performing the 3D display is determined by the arrangement rule installed in the 3D display module. Finally, the processing of the management console 31 is completed by 3D displaying the 3D display data completed by the above series of processing.

Next, the processing for changing the equipment will be described with reference to FIG. FIG. 9 shows an operation flow diagram up to the completion of the device change when the user's change instruction is received after the 3D display. In FIG. 9, when the operation instruction of the user is received (step 92), the management console 31 receives the input of the change instruction from the user (step 931) and notifies the setting change information to the management manager 32 (step 9).
32). The management manager 32 that received the notification determines the control target device to which the setting change information should be set, and creates a sequence for changing the setting for each control target device (step 941). The created sequence is passed to the device control procedure creation module 324 to create a MIB value setting sequence for each device (step 942). According to this sequence, the SNMP manager or its alternative means issues an SNMP command or its alternative command to each control target device (step 943) to set an appropriate MIB value for each control target device (step 951). ). The setting result of the MIB value is returned to the management console 31 through the management manager 32.
Is notified to the device setting information database 321 and is registered in the device setting information database 321 (step 946). The management console 31 performs the directory data update processing (step 933) according to the contents of the device setting information, and the database update processing 94 of the database control module on the management manager 32.
The directory service is notified through 4 and the directory data is updated by the directory server (step 961).

Next, a display example of a concrete network configuration and a data structure of a database of device setting information in the present system will be described, and then the above-mentioned respective processes will be described in detail. 10 to 14 show a plurality of types of logical network configurations handled by this system.

10 to 14 show display examples of the network configuration displayed on the virtual screen of the management console 31 in the present embodiment. The virtual screen is on the display
A part of the area can be displayed, and the display area of the virtual screen can be moved by scrolling.

FIG. 10 shows a configuration diagram of the physical network when the physical connection relationship of the network shown in FIG. 24 is displayed in 3D. In FIG.
The management console 31 displays the ATM on the plane 1010 displayed in 3D.
Switch 1012, router device 1013 connected to the ATM switch 1012, PC1011 running LECS, PC1014a and 1014b running LES, PCPC1 running LEC
A PC 1015f, an Ethernet switch device 1016, and a connection 1019 to another network are arranged as a three-dimensional object icon from 015a. Further, in order to show the mutual connection relation of the devices, a line showing the connection relation is displayed between the respective object icons. In this embodiment, the network showing the physical connection form is also treated as one of the logical network configurations.

FIG. 11 shows a network configuration diagram when the configuration status of the virtual network segment of the network shown in FIG. 24 is displayed in 3D. In FIG. 11, the management console 31 displays the emulated LAN 1027a as a virtual network segment on the plane 1020.
And 1027b and VLANs 1028a and 1028b are shown as closed areas, and the servers and clients that make up each virtual network are shown as three-dimensional object icons.
That is, LECS 1021, LES 1024a and 1024b are shown as LAN emulation servers connected to ATM, and 1025a, 1025b, 1025c and Ethernet switch device 1026 are shown as clients. A line showing the server-client relationship is displayed between each server and client object.

FIG. 12 shows a network configuration diagram in which the configuration status of the IP logical network of the network shown in FIG. 24 is displayed in 3D. In FIG. 12, the management console 31 is a plane 1030.
Above the router device 1012, the logical IP node 1031
A state in which a to 1031f are connected is displayed by a three-dimensional object icon. In this example, only the client device of the virtual network is displayed, but a similar IP logical network configuration diagram can be displayed for the server device.

In FIG. 13, for the network shown in FIG. 24, a configuration example of the directory service and the correspondence relationship between users of the network and departments in the organization are shown in 3D.
The displayed user directory structure diagram is shown. Figure
13 (a) is a tree structure diagram showing an example of directory service data. In FIG. 13 (a), a certain organization 13
04, Department # 1 (1303a) and Department # 2 (1303b)
There are two parts, and 2 under Department # 2 (1303b)
User1 (1305a) to User6 (1305f) belong to an organization in which two sections, Section # 1 (1302a) and Section # 2 (1302b) exist. User1 (1305a) and User1 (1305b) are Department # 1
User3 (1305c) belongs to (1303a) and Department # 1 (1303
a), User4 (1305d) belongs to Section # 1 (1302a), User5 (1305e) and User6 (1305f) belong to Section # 2 (1302).
belong to b).

Further, FIG. 13 (b) shows an example in which the directory data shown in FIG. 13 (a) is displayed in 3D. In FIG. 13A, the management console 31 shows the above-mentioned organization 1304 as a plane 1040, and Department # 1 (1
303a) and Department # 2 (1303b) are closed area 1
Shown as 047a and 1047b, Section # 1 (1302a) and S
The two sections of Section # 2 (1302b) are shown as closed areas 1048a and 1048b. The top-bottom relationship of each area and the affiliation relationship of each user are shown as an inclusion relationship in a closed area. Therefore, each of the users 1045a to 1045f is arranged in the closed area indicating the department to which the user belongs.

It is also possible to dispose the tree structure diagram shown in FIG. 13A on the plane as it is and display each part, section and user as a three-dimensional object icon.

FIG. 14 shows the interrelationship between layers when a plurality of types of logical network block diagrams and directory block diagrams of the network shown in FIG. 24 are hierarchically displayed. By specifying one of the objects, the mutual relationship can be displayed only for the specified object. 14, each plane is the same as each network configuration diagram and directory configuration diagram shown in FIGS. 10 to 13. In FIG. 14, 1401a to 1401c and 1402a to 1402c indicated by arrows
Is for explaining the relationship between the objects indicated by the solid object icons on a plurality of network configuration diagrams. For example, the user 1045a corresponds to the IP node 1035a on the logical network, which is indicated by an arrow 1401a. Also, this IP node 1035a is a LEC that belongs to virtual segment 1027a in the virtual network.
An arrow 1401b indicates that the object is the same entity as the object of the computer 1025a. In addition, LEC Computer 1025
An arrow 1401c indicates that a is the same entity as the computer 1015a in the physical network. Similarly, user 104
5c, the IP node 1035c on the logical network, the computer 1025c of the virtual network, and the computer 1015a of the physical network are indicated by arrows 1402a, 1402b, and 1402c. As shown in FIG. 14, the same object in a plurality of types of logical network configurations can be displayed in association with each other.

FIG. 15 is a diagram showing the correspondence of objects in order to explain the handling of the mutual relation of object data on a plurality of logical network block diagrams handled by this system. Each object in the directory tree structure diagram 1501 showing the organizational structure includes each object in the tree structure diagram 1502 showing the structure of the logical network, each object in the tree structure diagram 1503 showing the structure of the virtual network, and each object of the physical network. Showing 15
04 and 04, respectively. In this example, Depa
rtment # 1 (1303a) and Department # 2 (1303b) have two parts, virtual segment 1 by LAN emulation.
Corresponding to 027a and 1027b, two sections of Section # 1 (1302a) and Section # 2 (1302b) correspond to virtual segments 1028a and 1028b, which can be indicated by the correspondence indicated by these arrows. It is possible. The user's object in the user directory and I
The relationship between the objects of the logical IP nodes 1031a to 1031f of the P logical network and each LEC object of the virtual network is defined. When a user occupies one LEC, the object correspondence relationship is shown as a one-to-one relationship, but when a plurality of users use one LEC, it becomes a many-to-one correspondence relationship. Conversely, when one user uses multiple LECs, it is possible to show one-to-many correspondence. Further, each of the objects 1504 represents the object data of the device displayed on the physical network, and is associated with each object of the virtual network.

Such correspondence may be held in the device information setting database and may be displayed on the display screen. When changing the setting of each object on the network, the system administrator can know which device should be operated by referring to this correspondence. Alternatively, when the affiliation of each user is changed, it is possible to know how to change the configuration of the virtual network and to which device the change in the configuration should be set.

FIG. 16 shows device setting information (object data) on a plurality of network configuration diagrams in this system.
Shows the data structure for handling. In FIG.
1601a and 1601b are a part of the storage area of the device setting information database 632 of the management manager.
Data of object information or link information for each object displayed in all network layers is shown. In the present embodiment, the device setting information database 632 stores object information and link information of all network layers for each object.

In the area 1601a, the object ID is
It is composed of the ID of the hierarchy of the network to which the object belongs and the identifier of the object on that hierarchy, and for example, a serial number is added. The object information 1602b to 1602j is a pointer for pointing each area of the area 1601b that stores the coordinate position of the object of each network hierarchy in the network for displaying the network configuration diagram on the display and the display icon as the object attribute. Information is stored. The object attributes a to e store information for displaying an object in the network configuration diagram such as a coordinate position for displaying the network configuration diagram on the display and a display icon. For example, in order to detect what kind of object an object is displayed at and where in the physical network layer, the object information 1602b of the physical network layer is referred to, and the object attribute in which the attribute information of the object is stored. By accessing the area a, the attribute information of the target object can be obtained. In addition, the link information 1602c to 1602k stores other object IDs and connection line types of objects connected to each network hierarchy in the network when the network configuration diagram is displayed on the display. region
The pointer information for pointing each area of 1601b is stored. The object attributes n to r store information such as other object IDs to be connected and types of connecting lines for indicating the connection relationship when the network configuration diagram is displayed. For example, in order to detect how the above-mentioned object has a connection relationship with other objects in the physical network layer, the link information 1602c in the physical network layer is referred to, and the object in which the object attribute information is stored. By accessing the area of the attribute n, the target object attribute information can be obtained. Similarly, virtual network layer object information 1
Object attributes are stored in 602d and link information 1602e, object attributes are stored in logical network layer object information 1602f and link information 1602g, and directory layer object information 1602h and link information 1602 are stored.
Object attributes are stored for i. Furthermore, when a network layer is added, the object attributes are stored in association with the object information and the link information in the added layer,
New layers can be added. By adding a new layer, it becomes possible to easily add information on services and the like on other network layers.

Next, each processing in this embodiment will be described in detail.

In the operation flow shown in FIG. 8 described above,
The process of (step 843) after the 3D display data creation process of the 3D display processing module is started in step 832 will be described with reference to FIG. Object information for each logical network layer is set as the MIB value. Therefore, in FIG. 17, a new object ID is assigned to a new control target device, and MIB values for all information are acquired. Also, FIG.
As shown in FIG. 7, when information on an object in a part of the network layer is acquired, the object I
By specifying D and the identification information of the network layer, the MIB value of the specified network layer can be acquired from the control target device.

The MIB value thus obtained is stored in the area of the corresponding object in the device setting information database.
It is stored as an object attribute of object information and link information.

When the MIB value is changed by changing the setting as shown in FIG. 9, the MIB value is set in the sequence as shown in FIG. When setting the MIB value, rewriting is performed after saving the rewriting pre-field information in consideration of the error occurrence during the setting. Figure 1
When the setting change request is received in 8, the object ID of the corresponding device is calculated, the MIB value read request is issued to the SNMP agent, and the response information is stored in the buffer. After saving all information, M
Rewrite the IB. After the setting process is completed for all the specified devices,
Make a restart request. After the device is up,
The rewritten MIB value becomes valid. If an error occurs during the setting process, the recovery process is performed based on the information stored in the buffer.

Next, 3 executed by the management console 31
The D display data creation process will be described with reference to FIGS. The 3D display data creation process is performed for each network layer. The display data creation process of the physical network layer is shown in FIG. 19, the display data creation process of the logical network layer is shown in FIG. 20, the display data creation process of the virtual network layer is shown in FIG. 21, and the display data creation process of the directory layer is shown. It shows in FIG. In this embodiment, it is assumed that serial numbers of 1 or more are sequentially assigned to the object ID.

In FIG. 19, the management console 31 is
In order to create the display data of the physical network layer as shown in FIG. 10, the display position (coordinates) on the display screen is determined according to the object attribute of the object information for each object stored in the device setting information database. After arranging all objects, connect each object according to the link information. In FIG. 19, the management console 31 substitutes 0 for the object ID (step 2011) and adds 1 for the initialization of the object ID (step 2012). Next, the display icons of the object attributes corresponding to the object IDs are used to arrange the objects at predetermined positions on the display screen (step 2013). The coordinates on the arranged display screen are output as object attributes (step 2014) and stored in the corresponding area of the device setting information database. Next, it is determined whether or not the object ID is the last (step 2015), and if it is not the last, the process returns to step 2012. If the object ID is the last, each object on the display screen is connected by a line according to the link information (step 2016). The coordinates of the connected lines are output as object attributes (step 2017) and stored in the corresponding area of the device setting information database. The lines corresponding to all the link information are arranged, the object attributes are output, and the process ends. By processing in this way, a configuration diagram of the physical network layer as shown in FIG. 10 is created.

Next, referring to FIG. 20, the management console 3
In the case where each object stored in the device setting information database is a concentrator in order to create the display data of the logical network layer as shown in FIG. 12, according to the object attribute of the object information of the concentrator, After determining the display position (coordinates) on the display screen and arranging all the concentrators, the subordinate objects are connected according to the link information. In FIG. 20, the management console 31 searches for a concentrator from the object attributes of the object information of the logical network layer (step 2110), and determines the retrieved concentrator between objects in advance by the display icon of the corresponding object attribute. They are arranged at different intervals on the display screen (step 2111). The coordinates on the arranged display screen are output as object attributes (step 2112) and stored in the corresponding area of the device setting information database. Next, after arranging all the line concentrators, each object on the display screen is connected by a line according to the link information (step 2113). The coordinates of the connected lines are output as object attributes (step 2114) and stored in the corresponding area of the device setting information database. Place lines corresponding to all link information, output object attributes,
The process ends. By processing in this way, FIG.
A configuration diagram of the logical network layer as shown in 2 is created.

Next, referring to FIG. 21, the management console 3
In order to create the display data of the virtual network layer as shown in FIG. 11, when each object stored in the device setting information database is a higher-level ELAN or VLAN, the object 1 In order to display the inside of the circular shape as shown in (1), an open flag indicating that it is under control is set and the circular display is performed. In addition, for the lower level objects under it, expand the displayed circle and inside the circle,
After arranging the display icon according to the object attribute of the object information, the subordinate objects are connected according to the link information. In FIG. 21, the management console 31 initializes the object ID by
Substitute 0 for the object ID (step 2210),
1 is added (step 2211). Next, for the corresponding object ID, the object attribute of the object information of the virtual network layer is acquired (step 2212). If the level of the acquired object attribute is higher than the level of the previously acquired object attribute (step 2213). ), The open flags of those level differences are turned off (step 2214). If the object is a higher level ELAN or VLAN (step 2215), the objects under it are shown in FIG.
In order to display the inside of the circle as shown in 1, the open flag indicating that it is subordinate is set and the circle is displayed (step 2216). Further, for the lower-level objects under it, the displayed circle is enlarged, and the display icon is arranged inside the circle according to the object attribute of the object information (step 22).
17). The coordinates on the arranged display screen are output as object attributes (steps 2218 and 2219) and stored in the corresponding areas of the device setting information database.
Next, after placing all the object IDs, turn off the open flag, and according to the link information,
Connect each object on the display screen with a line (Step 2
222). The coordinates of the connected lines are output as object attributes (step 2223) and stored in the corresponding area of the device setting information database. The lines corresponding to all the link information are arranged, the object attributes are output, and the process ends. By processing in this way, a configuration diagram of the virtual network layer as shown in FIG. 11 is created.

Next, referring to FIG. 22, the management console 3
In order to create the display data of the directory layer as shown in FIG. 13B, each object stored in the device setting information database has a higher level Department or Se in the same manner as the processing as shown in FIG.
In the case of the action, in order to display the object under the control inside the circle as shown in FIG. 13B, the open flag indicating the control is set and the circle is displayed. In addition, for the lower level objects under it, expand the displayed circle, place the display icon inside the circle according to the object attribute of the object information, and then connect the subordinate objects according to the link information. Let

The display as shown in FIG. 1 or 2 can be performed by creating the display data of the configuration diagram of each network hierarchy by the 3D display data creating process as described above.

1 and 2 show display examples of the screen of the management console of this system.

FIG. 1 shows an example in which a user directory configuration diagram and a virtual network configuration diagram are selected from a plurality of network layers and displayed in 3D on the management console. In FIG. 1, an application area 1701 includes an area 1702 for displaying operation buttons for dynamically changing the viewpoint of 3D display, an area 1703 for 3D display, and
There is an area 1704 for reporting application activity.
A menu 1705 for instructing an operation on an object in the display area can instruct not only changing the viewpoint and display method but also setting operation such as changing the attribute of the object. The relationship between the objects on each network layer displayed in the 3D display area 1703 and other objects is shown by solid lines in FIG. From this solid line, for example, it becomes possible to visually know which object on the virtual network configuration diagram the change in the attribute of the user object on the directory layer is reflected.

FIG. 2 is a display example similar to FIG. 1, but shows the relationship between the network configuration diagram and the physical network configuration diagram. With such a display, for example, when a failure of the virtual network occurs, it becomes easy to infer which part of the actual device has the failure. Alternatively, when changing the setting of the virtual network, it becomes possible to know which device the server installed in should perform the setting change operation. As described above, the actual setting change work is performed from the management manager through the SNMP manager or its alternative means. However, it is very important for network operation management to understand which device settings are affected by this setting change operation. Will be an important factor.

Further, as shown in FIG. 23, one console 320 may be provided with the functions of both the management console and the management manager in the above-described embodiment.

According to the present embodiment, in a network in which a plurality of types of logical networks coexist, the physical network connection status, virtual network configuration status, user information using the device, and It is possible to provide a management console that collectively manages the configuration status on other network layers. Furthermore, it becomes possible to visually grasp the configuration information of these plural kinds of logical networks, and it becomes possible to realize network operation management very easily.

[0065]

As described above, according to the present invention,
It is possible to realize a system, an apparatus, and a method for uniformly operating and managing a network system capable of managing a plurality of types of logical networks for a single network entity composed of a plurality of objects.

[Brief description of drawings]

FIG. 1 is an explanatory diagram showing a screen display example of a management console according to an embodiment of the present invention.

FIG. 2 is an explanatory diagram showing a screen display example of a management console according to the embodiment of the present invention.

FIG. 3 is an explanatory diagram showing an overview of the entire system according to the embodiment of the present invention.

FIG. 4 is an explanatory diagram showing a relationship between program modules according to the embodiment of the present invention.

FIG. 5 is a configuration diagram of a management console computer according to the embodiment of the present invention.

FIG. 6 is a configuration diagram of a management manager computer according to the embodiment of the present invention.

FIG. 7 is a configuration diagram of a directory server computer according to the embodiment of the present invention.

FIG. 8 is an operation flow diagram illustrating an operation of the system according to the exemplary embodiment of the present invention.

FIG. 9 is an operation flow diagram illustrating an operation of the system according to the exemplary embodiment of the present invention.

FIG. 10 is an explanatory diagram showing a physical network configuration example according to the embodiment of the present invention.

FIG. 11 is an explanatory diagram showing a virtual network configuration example according to the embodiment of the present invention.

FIG. 12 is an explanatory diagram showing a logical network configuration example according to the embodiment of the present invention.

FIG. 13 (a) is an explanatory diagram showing an example of directory data related to the organization chart according to the embodiment of the present invention. (B) It is explanatory drawing which shows the structure of the directory relevant to the organization chart concerning embodiment of this invention.

FIG. 14 is an explanatory diagram showing an example of a mutual relationship between layers when a plurality of network configurations according to the embodiment of the present invention are hierarchically displayed.

FIG. 15 is an explanatory diagram showing an example of mutual relation of object data displayed on a plurality of network configurations according to the embodiment of the present invention.

FIG. 16 is an explanatory diagram showing an example of a data structure of mutual relation of object data displayed on a plurality of network configurations according to the embodiment of the present invention.

FIG. 17 is an explanatory diagram of a MIB value acquisition sequence according to the embodiment of the present invention.

FIG. 18 is an explanatory diagram of a MIB value acquisition sequence according to the embodiment of the present invention.

FIG. 19 is an operational flowchart illustrating a display data creation process according to the embodiment of the present invention.

FIG. 20 is an operation flow diagram illustrating a display data creation process according to the embodiment of the present invention.

FIG. 21 is an operation flow diagram illustrating a display data creation process according to the embodiment of the present invention.

FIG. 22 is an operation flow diagram illustrating a display data creation process according to the embodiment of the present invention.

FIG. 23 is an explanatory diagram showing an overview of the entire system according to the embodiment of the present invention.

FIG. 24 is an explanatory diagram showing an example of a problem to be solved by the present invention.

FIG. 25 is an explanatory diagram showing another example of the problem to be solved by the present invention.

[Explanation of symbols]

101 ... LAN emulation configuration server
(LECS), 102 ... ATM switch device, 103 ... Router device, 104
a ... LAN emulation server (LES), 104b ... LAN emulation server (LES), 105a to 105c ... LAN emulation client (LEC), 105d to 105f ... Client P
C, 106 ... Ethernet switch, 107a, 107b ... Emulated LAN, 108a, 108b ... VLAN, 109 ... Other network such as Internet, 211a to 211f ... IP logical node, 213 ... IP router, 219 ... Other IP network such as Internet , 31 ... Management console, 32 ... Management manager, 33 ... Directory server, 34 ... Control target device, 311 to 314 Management console program module, 321 ... Device setting information database, 322 to 325 ... Management manager program module, 331 ... Directory database, 332 to 333 ... Program module for directory server, 341 to 342 ... Program module installed in controlled device, 1010 ...
Physical network configuration diagram, 1020 ... Virtual network configuration diagram, 1030 ... Logical network configuration diagram, 1040 ... Directory structure diagram, 1701 ... Management console application, 1801 ... Management console application.

─────────────────────────────────────────────────── ─── Continuation of the front page (72) Inventor Satoshi Miyazaki 1099 Ozenji, Aso-ku, Kawasaki-shi, Kanagawa Hitachi, Ltd. System Development Laboratory (72) Inventor Keizo Mizuguchi 5030 Totsuka-cho, Totsuka-ku, Yokohama-shi, Kanagawa (56) Reference JP-A-8-44646 (JP, A) JP-A-2-100430 (JP, A) JP-A-6-216936 (JP, A) JP-A-6-205007 (JP, A) JP-A-8-251163 (JP, A) JP-A-10-145364 (JP, A) Technical Report of IEICE TM98-18 (58) Fields investigated (Int. Cl. ⁷ , DB name) H04L 12/24-12/26 G06F 13/00

Claims (19)

(57) [Claims] Respect 1. A single network entity composed of a plurality of objects, a more logical network network management system in a network system that enables management of the logical of the plurality of types The network is a physical network
Network, virtual network, and logical network.
See, at the same time each logical network configuration of the plurality of types, are collected and display means for displaying a virtual screen, and collecting means for collecting the configuration information of the network from each of the plurality of objects, the said collecting means Creating means for creating display data for displaying on the display means each of the plurality of kinds of logical network configurations for each object according to the network configuration information. And a display control unit that controls the display unit to display each of the plurality of types of logical network configurations according to the display data. 2. The network operation management system according to claim 1, further comprising acceptance means for accepting instructions for changing the plurality of types of logical network configurations, and the creation means accepted by the acceptance means. In response to the change instruction, the display data of each of the plurality of types of logical network configurations is changed for each object, and the display means changes the display data according to the display data after the change by the creating means. A network operation management system characterized by displaying each of a plurality of types of logical network configurations. 3. The network operation management system according to claim 2, wherein the network configuration information of the changed object is created from the display data after the change by the creating means, and the changed object is concerned. A network operation management system further comprising setting means for setting configuration information of the created network. 4. The network operation management system according to claim 1, further comprising: an acquisition unit that acquires a directory structure of the network system from a management server of a directory database that holds the directory structure of the network system. The means further displays the directory structure acquired by the acquisition means, and the network operation management system. 5. The network operation management system according to claim 2, wherein the accepting unit accepts a change in the network configuration on the network configuration of the display screen of the display unit. system. 6. The network operation management system according to claim 1, wherein the display means displays the same object in the plurality of types of logical network configurations in association with each other. . 7. The network operation management system according to claim 1, wherein the display means displays each of the plurality of types of logical network configurations in a three-dimensional manner. 8. The network operation management system according to claim 1, further comprising a management console, wherein the display means and the display control means are provided in the management console. 9. The network operation management system according to claim 1, further comprising a management manager, wherein the collecting means and the creating means are provided in the management manager. 10. A storage medium storing a program for realizing display control in the display control means of the network operation management system according to claim 1 by a computer. 11. A storage medium for storing a program for causing a computer to realize the function of the collecting means and / or the creating means of the network operation management system according to claim 1. Against 12. One network entity composed of a plurality of objects, a more logical network network management system in a network system that enables management of the logical of the plurality of types The network is a physical network
Network, virtual network, and logical network.
A management console and a management manager, the management manager collecting means for collecting network configuration information from each of the plurality of objects, and according to the network configuration information collected by the collecting means, According to the display data created by the creating means for creating display data for displaying each of the plurality of types of logical network configurations for each object on a virtual screen, The management console includes a storage unit that stores a program for controlling each of a plurality of types of logical network configurations to be displayed on the virtual screen. The management console stores the display unit and the management manager. A network operation management system comprising means for downloading the program System. 13. The network operation management system according to claim 12, wherein the management console further includes a receiving unit that receives an instruction to change the plurality of types of logical network configurations, and the creating unit includes the receiving unit. corresponding to the instruction of change received by the receiving means, wherein for each Obuji E click DOO, changes the display data of each logical network configuration of the plurality of types, the display means, after changing by said creating means A network operation management system characterized by displaying each of a plurality of types of logical network configurations after the change according to the display data of. 14. The network operation management system according to claim 13, wherein the management manager creates network configuration information of the changed object from the display data after the change by the creating means, and changes the network configuration information. A network operation management system further comprising setting means for setting the configuration information of the created network for an object. 15. A management manager in the network operation management system according to claim 12, 13 or 14. 16. A management console in the network operation management system according to claim 13. Against 17. One of the network entity composed of a plurality of objects, a network management method in a network system that enables the management of a plurality of types of logical network, logical of the plurality of types The network is a physical network
Network, virtual network, and logical network.
Only, collecting network configuration information from each of the plurality of objects, and according to the collected network configuration information,
Display data of each of the plurality of types of logical network configurations is created for each object, and each of the plurality of types of logical network configurations is displayed on a virtual screen according to the created display data. A network operation management method characterized by controlling to be displayed on the screen. 18. The network operation management according to claim 1.
In the system, the display control means displays a symbol for indicating the object, connects the symbol to display a physical connection relationship of the network, and displays the object. A second display showing the logical connection of the network by connecting the symbols, and a third display showing the symbol for showing the user who uses the object. A network operation management system characterized by performing control on the screen. 19. The network operation management system according to claim 18, wherein the display control means displays the objects of the same entity in each of the first, second and third displays in association with each other. Characteristic network operation management system.