JP4412078B2 - Network management device, relay device, network management system, and network management program - Google Patents

Description

  The present invention relates to a network management system related to state management of nodes on a network, and in particular, connects a plurality of networks having different address systems, and an address according to one network system is an address according to another network system. The present invention relates to a network management system that is used in a network environment in which nodes belonging to one network are connected to another network by converting into the network.

In general, a network management system that manages the state of a node existing on a network is known.
Conventional network status management systems for nodes on networks identify nodes based on IP addresses, and determine the status of nodes (operating status / stopped status) based on the presence or absence of responses to requests addressed to IP addresses And a node attribute storage unit that records and manages private address and global address information in association with each node, and an address translation router that performs address translation by NAT (Network Address Translator) (For example, refer to Patent Document 1).
Details of NAT are described in, for example, IETF RFC1631 “The IP Network Address Translator (NAT)”.

A conventional state management system for nodes on a network having such a configuration operates as follows.
First, when a status confirmation request is made to the global address and there is no response, it is determined that the node corresponding to the global address recorded in the node attribute storage unit is in a stopped state.
If there is a response, the private address of the node is confirmed and compared with the information recorded in the node attribute storage unit. If there is no change, it is determined that the node is in an operating state. If there is a change, it is determined that the other node is in an operating state, and the information recorded in the node attribute storage unit is updated.
JP 2001-127770 A (pages 7-9, FIG. 8)

However, in the conventional node management system as described above, the status check of the node on the network is performed for the global address instead of the specific node. Only the state related to the node to which the address is assigned can be managed, and it is difficult to monitor the state of the node with low access frequency to the global address.
In other words, in an environment where the global address assignment changes dynamically, the operation status can be confirmed for the node that is assigned to the global address at the time of status confirmation, but the other nodes are in the stopped state However, it was difficult to confirm the normality of the connection to the network.

  Similarly, if a status check request does not occur while a global address is assigned, the network management unit cannot recognize the node status, so it is particularly important for private networks that have nodes with low access frequency to the global network. However, there is a problem that it takes time until the network management unit recognizes the operation state of all nodes existing on the private network.

  The present invention has been proposed in order to solve the above-described problems of the conventional technology. The network management apparatus refers to predetermined history information acquired from the relay apparatus and The frequency of access to the global network even in an environment where the address assignment changes dynamically by issuing a global address assignment request and converting from one network address system to another network address system. Node can be monitored reliably, and all node states existing on the private network can be recognized at high speed, and the network management device exists on the private network regardless of the frequency of connection to other networks. Ensure connection status of all nodes One and to provide a system which can determine at high speed.

In order to achieve the above object, a network management apparatus according to the present invention is a network management apparatus for managing the operating states of nodes existing on a plurality of networks having different address systems, and relates to each node existing on the network. A storage unit for storing predetermined attribute information, a unit for acquiring predetermined communication history information via the relay device from a relay device for connecting the nodes, and a private address from the acquired communication history information And a node that extracts a node to which a global address is assigned, determines that the node is in a normal state and updates attribute information of the storage unit, and a private address corresponding to each node existing on the network in the relay device a private address corresponding to the node that has not been judged to be normal state of Means for executing the assigned global address and, for a global address allocation is performed by the relay device, it is constituted and means for executing a status confirmation request node.

According to the network management device of the present invention having such a configuration, it becomes possible to request the relay device for connecting each node to assign a global address, and after performing a predetermined process by the relay device, the private device The status of all nodes existing on the network can be checked.
As a result, it is possible to reliably monitor a node having low access to the global network and to recognize the state of the node at high speed.
Further, by referring to the communication history acquired from the relay device, it is possible to confirm the operation state of some nodes without performing a state confirmation request.
Thereby, according to the network management system of this invention, the load to the network at the time of network monitoring can be reduced.

Further, the relay device of the present invention is a relay device for a node belonging to one network to connect to another network in a plurality of networks having different address systems, and communication history information of each connected node is obtained. A storage means for storing; a means for transmitting the communication history information to the network management apparatus in response to a request from the network management apparatus managing each node; and a global existing on the network by a request from the network management apparatus. A global address is assigned to a private address corresponding to each node that has not been assigned an address, and the global address is transmitted to the network management device.

According to the relay apparatus of the present invention having such a configuration, a global address can be assigned to a private address in response to a predetermined request from the network management apparatus.
In addition, since the assigned global address can be notified from the relay device to the network management device, the network management device checks the status of all nodes existing on the private network by checking the status of the global address. It can be carried out.

As a result, it is possible to reliably monitor a node having low access to the global network and to recognize the state of the node at high speed.
In addition, according to the relay device, since the communication history can be transmitted to the network management device, the operation status can be changed without making a status check request for some nodes according to the determination of the network management device thereafter. I can confirm.
Thereby, according to the relay apparatus of this invention, the load to the network at the time of network monitoring can be reduced.

  Furthermore, the relay device according to the present invention, when a global address is already assigned to a private network corresponding to each node existing on the network, according to a request from the network management device. Is configured to include means for transmitting an existing global address to the network management apparatus without assigning a global address.

According to the relay apparatus of the present invention having such a configuration, it is not necessary to newly assign a global address, so that the global address can be used efficiently.
In addition, since a part of the processing in the node state confirmation is omitted, the node state can be recognized at high speed.

Further, the network management system of the present invention includes each node existing on a plurality of networks having different address systems, a relay device for connecting each node, and a network management device for managing the operation state of each node, The network management device includes a storage unit that stores predetermined attribute information about each node existing on the network, and a relay device that connects the nodes, Means for acquiring predetermined communication history information via the relay device, and extracting a node to which a private address and a global address are assigned from the acquired communication history information, determining that the node is in a normal state, and the storage means Each of the nodes existing on the network. A means for executing a global address assignment for a private address corresponding to a node, and a means for executing a node status check request for the assigned global address. Storage means for storing communication history information of a node, a request from a network management apparatus that manages each node, a means for transmitting the communication history information to the network management apparatus, and a request from the network management apparatus. A global address is assigned to a private address corresponding to each node that is not determined to be normal among the nodes existing on the network, and means for transmitting the global address to the network management device is provided. .

According to the network management system of the present invention having such a configuration, since a global address can be forcibly assigned to a private address corresponding to each node, the status of all nodes existing on the private network can be confirmed. It can be carried out.
As a result, it is possible to reliably monitor a node having low access to the global network and to recognize the state of the node at high speed.
In addition, since it is possible to determine the operating state of some nodes by referring to a predetermined communication history, there is no need to make a node status check request, and the load on the network during network monitoring can be reduced. it can.

  Furthermore, in the network management system of the present invention, when the relay device assigns a global address to a private address corresponding to each node existing on the network in response to a request from the network management device, In the case where a global address is assigned, a means for transmitting the already-addressed global address to the network management device without assigning the global address is provided.

According to the network management system of the present invention having such a configuration, it is not necessary to newly assign a global address, so that the global address can be used efficiently.
In addition, since a part of the processing in the node state confirmation is omitted, the node state can be recognized at high speed.

The program of the present invention comprises a relay device for connecting a node belonging to one network to another network in a plurality of networks having different address systems, and a network management device for managing the operating state of each node. A program for causing a computer to function as network management means, the computer constituting the network management device, storage means for storing predetermined attribute information relating to each node existing on the network, and connecting each node Means for acquiring predetermined communication history information via the relay device from the relay device for extracting the node to which the private address and the global address are assigned from the acquired communication history information, and setting the node in a normal state It is determined that Means for updating the information, to the relay device, means for executing assignment of the global address to the private address corresponding to each node is not determined to be normal state among the nodes on the network, the allocation is performed The global address functions as a means for executing a node status confirmation request, and the computer constituting the relay device stores storage history information of each connected node, and manages each node. Means for transmitting the communication history information to the network management apparatus in response to a request from the network management apparatus, and assigning a global address to a private address corresponding to each node existing on the network in response to a request from the network management apparatus; The concerned The global address are configured as a program for unit functions as, to be transmitted to the network management device.

According to the program of the present invention having such a configuration, a global address can be forcibly assigned to a private address corresponding to each node, so that the status of all nodes existing on the private network can be checked. Can do.
As a result, it is possible to reliably monitor a node having low access to the global network and to recognize the state of the node at high speed.
In addition, since it is possible to determine the operating state of some nodes by referring to a predetermined communication history, there is no need to make a node status check request, and the load on the network during network monitoring can be reduced. it can.

  As described above, according to the network management device, relay device, network management system, and program of the present invention, a global address can be forcibly assigned to a private address corresponding to a node existing on the private network. The state of all nodes existing on the private network can be managed reliably and in real time regardless of the frequency of access to the global network.

Hereinafter, a preferred embodiment of the present invention will be described with reference to FIGS.
FIG. 1 is a configuration diagram showing a schematic configuration of a network management system according to an embodiment of the present invention.
As shown in the figure, a network management system according to an embodiment of the present invention is a router serving as a relay device in which nodes A101 and B102 existing on a plurality of networks having different address systems are connected via a LAN 500. 300 is a network management system including 300 and a network management device 400 that manages the operation state of each node.

Here, the network management system according to the present embodiment is realized by processing, means, and functions executed by a computer constituting the network management device 400 and the router 300 serving as a relay device in accordance with a program (software) command.
The program sends a command to each component of the computer, and performs predetermined processing and functions as shown below, for example, acquisition of communication control history and status confirmation by the network management device 400, global address assignment request processing, The router 300 performs global address assignment processing, assigned global address notification processing, and the like. Thus, each process and means in the network management system according to the present invention are realized by specific means in which the program and the computer cooperate.
Note that all or part of the program is provided by, for example, a magnetic disk, optical disk, semiconductor memory, or any other computer-readable recording medium, and the program read from the recording medium is installed in the computer and executed. The The program can also be loaded and executed directly on a computer through a communication line without using a recording medium.

The network management device 400 is a management device that manages the state of a node on the network, and includes a network management unit 401, a node attribute storage unit 402, an address translation device control unit, a relay device communication history identification unit 404, A relay device attribute storage unit 405 is provided, and constitutes a control means for executing a state confirmation process (see FIGS. 4 to 6) for each node described later.
The network management unit 401 has a function of managing a status check schedule and information on each device.
The node attribute storage unit 402 stores the global address currently assigned, the private address of the target node itself, and information on the router that becomes a route when accessing the target node. Specifically, in the node attribute storage unit 402, for example, as shown in FIG. 2, global address information, private address information, and relay device (router) information about each node (nodes A and B) are recorded. Is done.

The address translation device control unit 403 has a function of receiving notification of the assigned global address and notifying the network management unit 401 of the global address.
The relay device communication history identification unit 404 has a function of accessing the network communication control unit 301 of the router 300 and collecting communication history control information recorded in the communication control history storage unit 302.
The relay device attribute storage unit 405 records a global address group that can be assigned to each relay device. Specifically, the relay device attribute storage unit 405 stores
In the present embodiment, information as shown in FIG. 3 is recorded in the relay device attribute storage unit 405, and a global address that can be used for accessing each node in the private network via the router for each router. Is recorded.

The router 300 is a router that performs address conversion for access between two different networks, and includes a network communication control unit 301, an address conversion definition storage unit 303, a communication control history storage unit 302, and address conversion control. An instruction receiving unit 304 is provided, and constitutes a control means for executing a status confirmation process (see FIGS. 4 to 6) for each node, which will be described later, in response to a request from the network management apparatus 400.
The network communication control unit 301 has a function of performing communication processing by performing conversion from a private address to a global address and conversion from a global address to a private address between the private network 100 and the global network 200. .
The communication control history storage unit 302 records the contents of processing performed by the network communication control unit 301 in data transmission / reception including address conversion processing of a private address and a global address.

The address translation definition storage unit 303 stores address list information corresponding to the translation of the private address of the private network 100 and the global address of the global network 200.
The address translation control instruction receiving unit 304 receives a global address / private address assignment execution request requested from the network management device 400, executes the private address / global address assignment through the network communication unit 301, and sends the request to the network management device 400. It has a function of notifying the global address assigned to it.

Here, FIG. 1 shows a state immediately after the global address G is assigned to the node A having the private address L. In order to enter this state, the private address L and the global address G are assigned by the network communication control unit 301 of the router 300, and the corresponding contents are recorded in the communication control history storage unit 302.
In the present embodiment, the router 300 is used as the relay device according to the present invention. However, the relay device is not limited to the router, and any device having an address conversion function such as a switching hub may be used.

Next, processing for performing node state management in the network management system of the present invention configured as described above will be described with reference to FIGS.
FIG. 4 is a flowchart of processing for performing node state management in the network management system according to the present embodiment.
As shown in the figure, first, the relay device communication history identification unit 404 of the network management device 400 accesses the network communication control unit 301 of the router 300, and the communication control history information recorded in the communication control history storage unit 302 is stored. It is collected for a specified period (for example, 10 minutes) (step P1).
Next, a record of the private address corresponding to each node and the global address assigned to the private address is acquired from the communication control history information acquired in step P1 (step P2). In this embodiment, a record in which the private address L and the global address G corresponding to the node A are assigned is acquired (see FIG. 2).

When the global address G is assigned to the private address L, there is a track record of being able to access the global network within a certain period. For example, if the record acquisition period is 10 minutes, there is at least 10 minutes. At that time, it is normally connected and communicating. Therefore, in this case, it is considered that this corresponds to the state recognition capability when the state monitoring interval is 10 minutes, and it is determined that the node A of the private address L is in a normal state (step P3), and as a result. Is recorded in the node attribute storage unit 402 (see FIG. 2).
In step P2, if a global address is not assigned to the private address corresponding to the target node, the state of the node is confirmed by a procedure M (FIG. 5) for executing a state confirmation request described later (step P4). ).

The above processes P1 to P4 are also performed for all nodes belonging to the router. That is, when the processing of P1 to P4 is completed for a certain node, the presence / absence of another node is determined (step P5). If there is another node, the process returns to step P2, and if there is no other node, Proceed to Step P6 (Step P5).
Further, in order to check the status of all nodes belonging to other routers, if there are other routers, proceed to Step P2. If there are no other routers, check the status of all nodes to be monitored. As a result, the same processing is performed for the next router (step P6).

Next, details of processing performed by the network management device 400 and the router 300 in the network management system of the present embodiment will be described with reference to FIGS. 5 and 6.
FIG. 5 is a flowchart of processing performed by the network management apparatus 400 in order to perform node state management in the network management system of the present embodiment. FIG. 6 is a flowchart of processing performed by a node in the network management system of the present embodiment. It is a flowchart of the process performed in the router 300 in order to implement state management.

As shown in FIG. 5, in the network management apparatus 400, when a private address of a node is assigned as information related to a monitoring target node, a procedure M is started, and a global address and router information through which access is made Obtained from the node attribute storage unit 402 (step M1).
In the present embodiment, information as shown in FIG. 2 is stored in the node attribute storage unit 402. Here, the private address M of the node B and the information of the router 300 serving as a path to access the node B are stored. To be acquired.

Next, information on the global address that can be used by the router through which access is made is acquired from the relay device attribute storage unit 405 (step M2).
In the present embodiment, information as shown in FIG. 3 is recorded in the relay device attribute storage unit 405, and a global address is used as a global address that can be used to access a node in the private network 100 via the router 300. G and H are acquired.

Next, when the network management device 400 monitors the state of the node B based on the acquired information, it requests the router 300 to assign a global address to the private address M of the node B. Here, it is assumed that a specific global address is not designated.
First, the address translation device control unit 403 of the network management device 400 transmits a request to the address translation control instruction reception unit 304 of the router 300 to assign a global address to the node B (step M3).
Thereby, the procedure R shown in FIG. 6 is performed in the router 300.

In the procedure R, as shown in FIG. 6, the address translation control instruction receiving unit 304 of the router 300 receives a request for assigning a global address to the private address M of the node B (step R1).
Here, before performing the assignment of the private address and the global address specified by the assignment request, whether the private address has already been assigned to the global address is determined via the network communication control unit 301 via the address translation definition storage unit 303. Is confirmed with reference to the correspondence list recorded in (Step R2).
If the global address corresponding to the private address is assigned as a result of the confirmation, the assigned global address is notified to the network management apparatus 400 without performing the assignment of the requested private address and the global address. (Step R7). As a result, the procedure returns to the procedure M (FIG. 5) in the network management device 400.

  On the other hand, if the global address corresponding to the private address has not yet been assigned, the network communication control unit 301 is confirmed whether the assignment of the private address and the global address specified in the assignment request can be performed. (Step R3). In the present embodiment, since the global address has not yet been assigned to the private address M of the node B, it is confirmed whether or not the global address designated for assignment can be assigned.

  If the private address and global address specified in step R3 can be assigned, the network communication control unit 301 is instructed to execute the specified assignment (step R4), and the assignment process is completed. By the way, the assigned global address is notified to the network management device 400 (step R7). As a result, the procedure returns to the procedure M (FIG. 5) in the network management device 400.

On the other hand, when the designated private address and global address cannot be assigned in step R3, the network communication control unit 301 is confirmed with the global address that can be assigned (step R5).
The network control unit 301 searches for an assignable address based on the information recorded in the address translation definition storage unit 303. In the present embodiment, as a global address that can be assigned, a global address H exists as shown in FIG. 3, and this global address H is extracted.
Thereby, the network communication control unit 301 assigns the global address H to the private address M of the node B (step R6).
After the assignment process is completed, the address conversion control instruction receiving unit 304 notifies the network management apparatus 400 of the assigned global address (step R7). Thus, the procedure R in the router 300 is completed, and the procedure returns to the procedure M (FIG. 5) in the network management device 400.

In the network management device 400, as shown in FIG. 5, the address translation device control unit 403 included in the network management device 400 receives the global address notified from the router 300 (procedure R) (step M4).
The global address received in step M4 is notified to the network management unit 401, and a status check request for the global address is performed to check the status of the target node (step M5).

When the status confirmation request is executed in step M5, the presence or absence of a response to the status confirmation request is confirmed (step M6).
As a result, when there is a response, it is determined that the target node is in a normal state (step M7), and when there is no response, it is determined that there is no connectivity to the target node (step M8).
The above processing is performed for all the nodes belonging to the router (step P5 in FIG. 4), and when the status confirmation of all the nodes is completed, the same processing is performed for the next router (step P6 in FIG. 4). Thus, the status of all the nodes to be monitored is confirmed.

As described above, the network management system according to the present embodiment can request the router 300 to allocate a global address from the network management apparatus 400, and the router 300 receives the request and assigns a predetermined global address. Can be assigned to any private address.
As a result, it is possible to reliably monitor nodes that are not accessed to the global network and to recognize the state of the nodes belonging to the private network at high speed.
If a global address has already been assigned to the private address corresponding to each node, it is extracted from the node attribute storage unit 402, and normal operation is confirmed for that node.
For this reason, it is not necessary to make a new status check request to the node, and the load on the network during network monitoring can be reduced.

Although the network management system of the present invention has been described above, the network management system according to the present invention is not limited to the above-described embodiment, and various modifications can be made within the scope of the present invention. Needless to say.
For example, the present invention can be implemented without being affected by the form of the network, the number of nodes constituting the network, the number of relay devices, and the like.

It is a schematic block diagram which shows the structure of one Embodiment of the network management system of this invention. It is explanatory drawing which shows the information table currently recorded on the node attribute memory | storage part in one Embodiment of the network management system of this invention. It is explanatory drawing which shows the information table currently recorded on the relay apparatus attribute memory | storage part in one Embodiment of the network management system of this invention. It is a flowchart of the process for implementing state management of a node in one Embodiment of the network management system of this invention. It is a flowchart of the process implemented in a network management apparatus in order to implement the state management of a node in one Embodiment of the network management system of this invention. It is a flowchart of the process implemented in a router in order to implement the state management of a node in one Embodiment of the network management system of this invention.

Explanation of symbols

100 Private network 101 Node A in the private network
102 Node B in the private network
200 Global Network 300 Router 301 Network Communication Control Unit 302 Communication Control History Storage Unit 303 Address Translation Definition Storage Unit 304 Address Translation Control Instruction Receiving Unit 400 Network Management Device 401 Network Management Unit 402 Node Attribute Storage Unit 403 Address Translation Device Control Unit 404 Relay Device communication history identification unit 405 Relay device attribute storage unit 450 Node attribute information 460 Relay device attribute information 500 Network such as LAN

Claims (6)

A network management device for managing the operating state of each node existing on a plurality of networks having different address systems,
Storage means for storing predetermined attribute information relating to each node existing on the network;
Means for acquiring predetermined communication history information via the relay device from the relay device for connecting the nodes;
Means for extracting a node to which a private address and a global address are assigned from the acquired communication history information, determining that the node is in a normal state, and updating the attribute information of the storage means;
Means for causing the relay device to perform global address allocation for private addresses corresponding to nodes that are not determined to be normal among private addresses corresponding to each node existing on the network;
Means for executing a node status check request for a global address assigned by the relay device;
A network management apparatus comprising: A relay device for connecting a node belonging to one network to another network on a plurality of networks having different address systems,
Storage means for storing communication history information of each connected node;
Means for transmitting the communication history information to the network management device in response to a request from the network management device managing each node;
In response to a request from the network management apparatus, a global address is assigned to a private address corresponding to each node that has not been assigned a global address on the network, and the global address is transmitted to the network management apparatus. Means,
A relay device comprising:   In response to a request from the network management device, when a global address is assigned to a private address corresponding to each node existing on the network, if a global address is already assigned, the global address is assigned. 3. The relay apparatus according to claim 2, wherein the global address is transmitted to the network management apparatus without transmitting. A network management system comprising: a relay device for connecting a node belonging to one network to another network in a plurality of networks having different address systems; and a network management device for managing the operation state of each node. There,
The network management device is
From storage means for storing predetermined attribute information regarding each node existing on the network, means for acquiring predetermined communication history information via the relay apparatus from the relay apparatus, and acquired communication history information, A node to which a private address and a global address are assigned is extracted, the node is determined to be in a normal state, and the attribute information of the storage unit is updated. The relay device corresponds to each node existing on the network. Means for assigning a global address to a private address corresponding to each node of the private address that has not been determined to be in a normal state; means for executing a node state confirmation request for the assigned global address; With
The relay device is
Storage means for storing communication history information of each node, means for transmitting the communication history information to the network management apparatus by a request from the network management apparatus managing each node, and a request from the network management apparatus And a means for assigning a global address to a private network corresponding to each node existing on the network and transmitting the global address to the network management device. The relay device is
When a global address is already assigned to a private address corresponding to each node existing on the network in response to a request from the network management apparatus, the global address is not assigned. The network management system according to claim 4, wherein the global address is transmitted to the network management device. Functions as a network management means of a computer that constitutes a relay device for connecting a node belonging to one network to another network in a plurality of networks having different address systems and a network management device for managing the operating state of each node A program for
A computer constituting the network management device;
Storage means for storing predetermined attribute information relating to each node existing on the network, means for acquiring predetermined communication history information via the relay device from the relay device, private address from the acquired communication history information A node to which a global address is assigned, a means for determining that the node is in a normal state and updating the attribute information of the storage means, and a relay address of a private address corresponding to each node existing on the network . Among them, it functions as a means for executing a global address assignment to a private address corresponding to each node that has not been determined to be in a normal state, and as a means for executing a node state confirmation request for the assigned global address. ,
A computer constituting the relay device;
Storage means for storing communication history information of each node, means for transmitting the communication history information to the network management apparatus in response to a request from the network management apparatus managing each node, and network requesting from the network management apparatus A program for allocating a global address to a private address corresponding to each node existing above and causing the global address to be transmitted to the network management device.

Images