JP3678127B2 - Network control apparatus and network control method - Google Patents

Description

[0001]
BACKGROUND OF THE INVENTION
The present invention relates to device control via a computer network, and more particularly to an IP network control apparatus and IP network control method for performing control according to network conditions in an Internet Protocol (IP) network.
[0002]
[Prior art]
In recent years, the Internet infrastructure has become widespread, and data communication costs using the Internet have started to become low, so that many users and various types of traffic tend to be concentrated on the IP network. In the future, voice calls will also be concentrated on IP networks. In this way, when various types of traffic are combined on a single IP network, traffic such as highly bursty FTP (File Transfer Protocol) and HTTP (HyperText Transfer Protocol) is susceptible to delays and fluctuations such as host data and call voice. It will prevent the transfer. Also, the nature of traffic varies from highly confidential traffic to general traffic. This complicates the method of ensuring network security.
[0003]
In an IP network having the above problems, a policy-based network has appeared to realize “traffic control” of each traffic flowing on the network. Policy-based network is a policy-based policy information such as packet transfer priority, bandwidth control, security, etc. for each application and user. All IP network devices in the IP network follow the policy information. This is a mechanism for controlling traffic in the entire IP network. The policy information includes “conditions” for executing policy control (for example, “when call voice traffic flows”, “when high-priority traffic flows”, etc.), packet processing methods (“reserve 64 kbit / s”, “ "Transfer with the highest priority"). As a technique related to network control based on such policy information, for example, there is a technique described in Japanese Patent Laid-Open No. 2000-83048.
[0004]
In the policy-based network, the settings of the IP network devices can be unified, so that the burden on the network administrator can be suppressed while ensuring the QoS (Quality Of Service) and security of the entire network.
[0005]
[Problems to be solved by the invention]
In the above conventional technology, the policy information is formulated and distributed by the network administrator based on experience, or the remote network monitoring (hereinafter referred to as RMON) probe, the management information base (hereinafter referred to as Management Information Base) It was formulated by predicting the usage status of the IP network from traffic information such as the number of packets collected by MIB) and the like and the bandwidth usage rate. (For example, “If the voice traffic of a call flows, it is transferred at 64 kbit / s”, “From 6:00 pm to 11:00 pm, 50% of bandwidth is reserved for traffic addressed to A”) However, it is formulated. In order to formulate a complete policy and control the IP network policy, analyze the traffic in detail, such as for each user, for each application, for each time, for each interface, etc., and to find the optimal policy information according to the usage status of the IP network. It is necessary to distribute at the best opportunity.
[0006]
The present invention has been made in view of the above circumstances, and uses a threshold value arbitrarily determined by a network administrator to determine that “how many Kpbs or more are heavy traffic” or “what percentage or less is insufficient in bandwidth”. It is an object of the present invention to provide a network control apparatus and a network control method capable of performing policy control according to the network usage status.
[0007]
[Means for Solving the Problems]
In order to achieve the above object, the present invention collects information related to traffic in a network from devices connected to the network, and quantifies the collected traffic information, the control contents for controlling the network, and the control contents thereof The network control information storage unit that stores the network control information that defines the execution conditions of the control contents, and the network control information stored in the network control information storage unit based on the quantified results are searched and connected to the network A network control unit distributed to the apparatus is provided.
[0008]
In addition, the traffic management unit extracts evaluation parameters from the collected traffic information, quantifies network usage using membership functions based on the evaluation parameters, and connects to the network based on the quantified values. It is determined whether it is necessary to send the network control information to the device, and if necessary, the network control unit is requested to search and distribute the network control information.
[0009]
Also, the network control method of the present invention collects information on the network usage status from devices connected to the network, and implements the control content for controlling the network based on the collected network usage status and the control content. Control information that defined conditions was selected, and the selected control information was distributed to devices connected to the network for control.
[0010]
DETAILED DESCRIPTION OF THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to the drawings.
FIG. 1 is a diagram showing an example of the configuration of an IP network to which the present invention is applied.
1 includes an IP network control device (100), a plurality of routers (200a to 200c), a bandwidth control device (300), a layer 2 switch (400), a server (500), and a plurality of devices. Personal computers (600a to 600b) and transmission paths (700a to 700i).
[0011]
In the present invention, the IP network control device (100) processes information related to traffic collected from the routers (200a to 200c), the bandwidth control device (300), and the layer 2 switch (400) to obtain optimum policy information. Are distributed to the routers (200a to 200c), the bandwidth control device (300), and the layer 2 switch (400) via the transmission paths (700a to 700i) at the optimum timing. The routers (200a to 200c), the bandwidth control device (300), and the layer 2 switch (400) change QoS and security settings based on the distributed policy information.
[0012]
Next, the IP network control device will be described.
FIG. 2 is a diagram illustrating the configuration of the IP network control device.
In the present embodiment, the IP network control device (100) includes a policy information storage unit (101), a policy control unit (102), a traffic management unit (103), a traffic information analysis mechanism (104), a traffic It comprises an information processing mechanism (105), a traffic information storage mechanism (106), and an external interface (107).
[0013]
The policy information storage unit (101) stores policy information input from the external interface (107), and the policy control unit (102) stores policy information based on the traffic information processed by the traffic management unit (103). The information is retrieved from the policy information storage unit (101) and distributed to the plurality of routers (200a to 200c), the bandwidth control device (300), and the layer 2 switch (400) via the external interface (107). The traffic management unit (103) includes a traffic information analysis mechanism (104), a traffic information processing mechanism (105), and a traffic information storage mechanism (106). The traffic information analysis mechanism (104) analyzes information about traffic received from a plurality of routers (200a to 200c), a bandwidth control device (300), and a layer 2 switch (400), and transmits / receives IP transmitted / received through each interface. It collects information such as the number of packet octets, the bandwidth usage of each interface, the number of IP packets discarded at each interface, etc., and receives a request for collecting information related to IP network traffic from the policy control unit (102). In such a case, a plurality of routers (200a to 200c), a bandwidth control device (300), and a layer 2 switch (400) have a function of transmitting and receiving packets for collecting traffic information.
[0014]
The traffic information storage mechanism (106) analyzes the collected information about traffic in the IP network, and the analysis result shows the daily traffic information indicating the daily traffic characteristics and the hourly traffic information indicating the hourly traffic characteristics. Accumulate as. The traffic analysis mechanism (104) judges the traffic situation in the current network based on the accumulated information on the traffic in the IP network, and predicts the traffic situation in the future network, and the router (200a ~ 200c), the bandwidth control device (300), or the layer 2 switch (400), it is determined whether or not the policy information should be distributed, and if it should be distributed, the policy control unit (102 ) For policy information distribution.
[0015]
When policy summary information input from the network administrator and not defined in detail is received, the policy control unit (102) collects information related to IP network traffic from the traffic management unit (103), and The policy information is retrieved from the policy information storage unit (106), and the retrieved policy information is distributed to the routers (200a to 200c), the bandwidth control device (300), and the layer 2 switch (400).
[0016]
Next, policy information distribution processing according to the present invention will be described with reference to FIGS.
First, a general flow of policy information distribution processing of the present invention will be described.
FIG. 3 is a diagram showing an outline of policy information distribution processing.
The router (200), the bandwidth control device (300), and the layer 2 switch (400) can receive the statistical information of traffic collected by the RMON periodically or when there is a request from the IP network control device (100). Then, information relating to IP network traffic such as MIB information is transmitted to the IP network control device (100) (3e) (3f) (3g).
[0017]
The traffic management unit (103) of the IP network control device (100) receives information related to IP network traffic via the external interface (107) (3d).
[0018]
The traffic information processing mechanism (105) of the traffic management unit (103) analyzes the received traffic information, discards the number of octets of IP packets transmitted and received on each interface, the bandwidth usage rate of each interface, and each interface. Collect information such as the number of IP packets. The traffic information storage mechanism (106) analyzes the information about the traffic collected in this way, and the analysis result shows the daily traffic information indicating the daily traffic characteristics and the hourly traffic information indicating the hourly traffic characteristics. Accumulate as. The traffic information analysis mechanism (104) judges the traffic situation in the current network based on the information related to the traffic, predicts the traffic situation in the future network, and the router (200) and the bandwidth control device ( 300) or whether to distribute policy information to the layer 2 switch (400), and when it is determined that policy information should be distributed, a policy information distribution request is transmitted to the policy control unit (102). (3b).
[0019]
The policy control unit (102) retrieves the policy information from the policy information storage unit (101) based on the usage status of the IP network (3a), and retrieves the retrieved policy information via the external interface (107). It is distributed to the router (200), the bandwidth control device (300), and the layer 2 switch (400) (3c). The router (200), the bandwidth control device (300), and the layer 2 switch (400) change the quality of service (QoS) and security settings based on the distributed policy information (3h) (3i) ( 3j). In this way, policy information according to the usage status of the IP network is distributed to the router (200), the bandwidth control device (300), and the layer 2 switch (400), and QoS (quality of service) and security You can change the settings.
[0020]
Next, the operation of the policy information distribution process will be described using a sequence diagram.
FIG. 4 is a sequence diagram of policy information distribution processing.
The router (200), the bandwidth control device (300), and the layer 2 switch (400) are configured to send information related to IP network traffic, such as traffic statistical information and MIB information, collected periodically by the RMON. It is transmitted to the traffic management unit (103) of the control device (100) (4a).
[0021]
The traffic management unit (103) of the IP network control device (100) analyzes the received information regarding the traffic of the IP network, and in order to ensure communication quality and service quality in the network, the router (200) and bandwidth control It is determined whether it is necessary to distribute policy information for changing the QoS and security settings of the device (300) and the layer 2 switch (400). If it is determined that the policy information needs to be distributed, a policy information distribution request is transmitted to the policy control unit (102) (4b). Upon receiving the policy information distribution request, the policy control unit (102) determines what “condition” and what “processing” the policy information is suitable for the network usage status, and determines the policy A search request is sent to the policy information storage unit (101) for information (4c).
[0022]
The policy information storage unit (101) that has received the policy information search request searches for policy information that meets the request, and replies to the policy control unit (102) (4d). The policy control unit (102) that has received the response of the policy information in response to the request transmits the TCP information to distribute the policy information to the router (200), the bandwidth control device (300), and the layer 2 switch (400). A connection establishment request is transmitted to the router (200), the bandwidth control device (300), and the layer 2 switch (400) (4e).
[0023]
After establishing a TCP connection between the router (200), bandwidth controller (300), layer 2 switch (400), and policy controller (102) (12f), the policy controller (102) 200), the bandwidth control device (300), and the layer 2 switch (400) are requested for the right to change the QoS and security settings of each device (4g). If the router (200), bandwidth control device (300), or layer 2 switch (400) is requested by the policy control unit (102) to change the QoS or security settings of the device, the right Is assigned to the policy control unit (102) (4h).
[0024]
The policy control unit (102), which has been granted the right to change the device QoS and security settings, sends policy information to the router (200), bandwidth control device (300), and layer 2 switch (400). Distribute (4i). The router (200), the bandwidth controller (300), and the layer 2 switch (400) that have received the requested policy information change the QoS and security settings according to the policy information.
[0025]
Thus, the policy information of the router (200), the bandwidth control device (300), and the layer 2 switch (400) is set.
[0026]
Next, an operation when policy summary information not defined in detail is input from the network administrator will be described.
FIG. 5 shows a sequence diagram of an example of a processing operation in which the IP network control device distributes policy information when policy summary information is input from the network administrator.
[0027]
The policy control unit (102) that has received the policy summary information from the network administrator requests the traffic management unit (103) to collect information on traffic in order to know the current network usage status (5b). The traffic management unit (103) requested to collect information related to traffic requests the MIB related to traffic from the router (200), the bandwidth control device (300), and the layer 2 switch (400) (5c). The router (200), the bandwidth control device (300), and the layer 2 switch (400) transmit MIB (management information base) related to traffic information to the traffic management unit (103) of the IP network control device (100). (5d).
[0028]
The traffic management unit (103) of the IP network controller (100) analyzes the received information regarding the traffic of the IP network, and the QoS of the router (200), the bandwidth controller (300), and the layer 2 switch (400). In order to change the security settings, a policy information distribution request is transmitted to the policy control unit (102) (5e). Upon receiving the policy information distribution request, the policy control unit (102) performs what will be described later on what “condition” and what “processing” the policy information is suitable for the network usage status. A determination is made and a request is made to search the determined policy information to the policy information storage unit (101) (5f).
[0029]
The policy information storage unit (101) that has received the policy information search request searches for policy information that meets the request, and replies to the policy control unit (102) (5g). The policy control unit (102) that has received the answer of the optimal policy information in this manner distributes the policy information to the router (200), the bandwidth control device (300), and the layer 2 switch (400). A TCP connection establishment request is transmitted to the router (200), the bandwidth control device (300), and the layer 2 switch (400) (5h).
[0030]
After establishing a TCP connection (5i) between the router (200), the bandwidth controller (300), the layer 2 switch (400), and the policy controller (102), the policy controller (102) 200), the bandwidth control device (300), and the layer 2 switch (400) are requested to change the QoS and security settings of each device (5j). If the router (200), bandwidth control device (300), or layer 2 switch (400) is requested by the policy control unit (102) to change the QoS or security settings of the device, the right Is assigned to the policy control unit (102) (5k).
[0031]
The policy control unit (102), which has been granted the right to change the device QoS and security settings, sends policy information to the router (200), bandwidth control device (300), and layer 2 switch (400). Distribute (5l). The router (200), the bandwidth control device (300), and the layer 2 switch (400) that have received the policy information change QoS and security settings according to the policy information.
[0032]
As described above, when policy summary information is input from the network administrator, optimal policy information is set for the router (200), the bandwidth control device (300), and the layer 2 switch (400).
[0033]
Next, processing for determining the necessity of distributing policy information will be described.
[0034]
FIG. 6 is a flowchart of a processing operation in which the traffic management unit (103) of the IP network control device (100) analyzes the traffic information and determines whether or not the policy information needs to be distributed.
[0035]
When the traffic management unit (103) of the IP network control device (100) collects traffic information from the router (200), the bandwidth control device (300), or the layer 2 switch (400) (F601), the traffic information processing The mechanism (105) extracts the evaluation parameters (eg, the number of packets, the number of discarded packets, the number of RMON Trap notifications, etc.) for formulating policy information suitable for the use situation of the IP network from the collected traffic information. (F602), the traffic information analysis mechanism (104) performs fuzzy processing on the evaluation data for formulating the extracted policy information, quantifies the usage status of the IP network (F603), and indicates the usage status of the IP network. From the numerical value, determine whether the current network status is good or not (F604) .If it is good, return to the top of the flow, if not good, the policy control unit ( 102) is requested to distribute policy information (F605).
[0036]
FIG. 7 and FIG. 8 show an example of a procedure in which the traffic management unit (103) of the IP network control device (100) performs fuzzy processing on the extracted evaluation parameters and quantifies the usage status of the IP network.
[0037]
In FIG. 7 and FIG. 8, the example is simplified for easy understanding, and the traffic (703) that enters the router (200) from the interface A (701) and is transmitted from the interface B (702) is changed into a policy. It is assumed that the traffic to be controlled is to determine whether the current network usage status is good.
[0038]
First, information relating to traffic is collected from the router (200) (704), and evaluation parameters for formulating policy information are extracted (705). Here, a fuzzy set indicating that the line state is “good” is M (801), and a membership function indicating that the line state is “good” is μ (χ) (802). (The characteristics of a fuzzy set are defined by a membership function, and the degree in a set of elements is not determined by a binary value of 0 or 1 as in a normal crisp set. From 1.0 to 1.0.) The degree in the fuzzy set M of each element (elements χ1, χ2, χ3, χ4 indicating the number of transmitted / received packets and the number of discarded packets) of the evaluation parameter (705). When calculated from the membership function, it becomes a right-down type membership function (803). The use status of the IP network can be quantified based on the degree of each element of the evaluation parameter thus obtained in the fuzzy set M (804).
[0039]
FIG. 9 shows that the IP network control device (100) distributes the policy information at the optimal timing based on the information about the traffic from the router (200), the bandwidth control device (300), and the layer 2 switch (400). The sequence diagram of an example of processing operation is shown.
[0040]
The router (200), the bandwidth control device (300), and the layer 2 switch (400) are configured to send information related to IP network traffic, such as traffic statistical information and MIB information, collected periodically by the RMON. The data is transmitted to the traffic management unit (103) of the control device (100) (9a).
[0041]
The traffic management unit (103) of the IP network control device (100) analyzes the received information regarding the traffic of the IP network, and in order to ensure communication quality and service quality in the network, the router (200) and bandwidth control It is determined whether it is necessary to distribute policy information for changing QoS and security settings of the device (300) and the layer 2 switch (400). Here, when it is determined that the policy information needs to be distributed after x minutes, foreseeing that the usage status of the IP network is not good, a timer setting for x minutes is performed, and after the timeout, the policy control unit ( A policy information distribution request is transmitted to 102) (9b).
[0042]
Upon receiving the policy information distribution request, the policy control unit (102) determines what “condition” and what “processing” the policy information is suitable for the network usage status, and determines the policy A search request is sent to the policy information storage unit (101) for information (9c). The policy information storage unit (101) that has received the policy information search request searches for the policy information that meets the request, and replies to the policy control unit (102) (9d).
[0043]
The policy control unit (102) that has received the response of the optimal policy information establishes a TCP connection to distribute the policy information to the router (200), the bandwidth control device (300), and the layer 2 switch (400). The request is transmitted to the router (200), the bandwidth control device (300), and the layer 2 switch (400) (9e).
[0044]
After establishing a TCP connection (9f) between the router (200), bandwidth control device (300), layer 2 switch (400) and policy control unit (102), the policy control unit (102) 200), the bandwidth control device (300), and the layer 2 switch (400) are requested to change the QoS and security settings of each device (9g). If the router (200), bandwidth control device (300), or layer 2 switch (400) is requested by the policy control unit (102) to change the QoS or security settings of the device, the right Is assigned to the policy control unit (102) (9h).
[0045]
The policy control unit (102) that is granted the right to change the QoS and security settings of the device is the optimal policy for the router (200), bandwidth control device (300), and layer 2 switch (400). Distribute information (9i). The router (200), the bandwidth control device (300), and the layer 2 switch (400) that have received the optimal policy information change the QoS and security settings according to the policy information.
[0046]
Thus, the policy information of the router (200), the bandwidth control device (300), and the layer 2 switch (400) is set.
[0047]
As described above, according to the present invention, when a policy is formulated, a threshold value that allows the network administrator to arbitrarily determine the traffic information such as the number of packets collected by the RMON probe, the MIB, and the bandwidth usage rate. Is used to extract the evaluation parameters from the information about the traffic collected from the IP network device, instead of judging that “how many Kpbs or more are high in traffic” or “what% or less is insufficient in bandwidth”, and from the extracted evaluation parameters By quantifying the usage status of the IP network using a membership function, using fuzzy control to search policy information that is optimal for the usage status of the network from the accumulated policy information and distributing it at the optimal timing In addition, it is possible to implement policy control in accordance with the usage status of the IP network.
[0048]
【The invention's effect】
According to the present invention, it is possible to implement optimal policy control according to the usage status of an IP network.
[Brief description of the drawings]
FIG. 1 is a diagram showing an outline of a configuration of an IP network to which the present invention is applied.
FIG. 2 is a diagram illustrating a configuration of an IP network control device.
FIG. 3 is a diagram showing an outline of policy information distribution processing;
FIG. 4 is a sequence diagram of policy information distribution processing in the IP network control apparatus.
FIG. 5 is a sequence diagram illustrating policy information distribution processing when policy summary information is input from a network administrator;
FIG. 6 is a flowchart illustrating processing for determining whether policy information distribution is necessary or not in a traffic management unit.
FIG. 7 is a diagram illustrating a procedure for quantifying the usage status of an IP network in a traffic management unit.
FIG. 8 is a diagram illustrating a procedure for quantifying the usage status of an IP network in a traffic management unit.
FIG. 9 is a sequence diagram illustrating policy information distribution processing of the IP network control device.
[Explanation of symbols]
100 ... IP network control device, 101 ... Policy information storage 4 ... Traffic information analysis mechanism, 105 ... Traffic information processing mechanism, 106 ... Traffic information storage mechanism, 107 ... External interface, 200a, 200b, 200c ... Router, 300 ... Bandwidth control Equipment: 400 ... Layer 2 switch, 500 ... Server, 600a, 600b ... Client personal computer, 700a-700i ... Runway.

Claims (6)

A network control device for controlling a device connected to a network,
A network information management unit that collects information on a network usage status from a device connected to the network;
A control content for controlling the network and a network control information accumulating unit for accumulating control information defining an execution condition of the control content;
A network control apparatus that controls a network by selecting control information from the control information storage unit based on the collected network usage status and distributing the control information to an apparatus connected to the network. A network control device for controlling a device connected to a network,
A traffic management unit that collects information about traffic in the network from devices connected to the network, and quantifies the collected traffic information;
A network control information storage unit that stores control contents for controlling the network and network control information that defines execution conditions of the control contents;
A network control unit that retrieves network control information stored in the network control information storage unit based on the quantified result, and distributes the network control information to devices connected to the network. . The traffic management unit extracts an evaluation parameter from the collected information on the traffic, quantifies a network usage state using a membership function based on the evaluation parameter, and based on the quantified value, the network 3. The apparatus according to claim 2, wherein it is determined whether or not it is necessary to send network control information to a device connected to the network, and if necessary, the network control unit is requested to search and distribute the network control information. The network control device described.   A network control method for controlling a device connected to a network, for collecting information on a network usage status from the device connected to the network, and for controlling the network based on the collected network usage status A network control method, comprising: selecting control information defining control contents and execution conditions of the control contents, and distributing the selected control information to devices connected to the network to perform control.   A network control method for controlling a device connected to a network, collecting information on traffic in the network from the device connected to the network, quantifying the collected traffic information, and based on the quantified result A network control method, comprising: searching for network control information defining control contents for controlling a network and execution conditions for the control contents, and distributing the network control information to devices connected to the network. An evaluation parameter is extracted from the collected traffic information, and a network usage state is quantified using a membership function based on the evaluation parameter. Based on the quantified value, a device connected to the network is quantified. 6. The network control method according to claim 5, wherein it is determined whether or not network control information needs to be sent, and if necessary, the network control information is searched and distributed.

Images