JPWO2018051508A1 - Network management program, network management method, and network management apparatus - Google Patents

Abstract

The network management apparatus (10) acquires a network setting policy name defined for each interface or virtual local area network of the network device (30) stored in the network device (30), and sets the network setting to the network device (30). 30) The first interface or the first virtual local area network including the character string for the policy defined by the predetermined rule used for registration in the acquired network setting policy name, and the character string for the network setting The second interface or the second virtual local area network that is not included in the policy name is displayed in an identifiable manner.

Description

  The present invention relates to a network management program, a network management method, and a network management apparatus.

  In the initial stage of network construction in a corporate system, for example, experts such as SE (System Engineer) connect to a network device via a protocol such as telnet or ssh, and via CLI (Command Line Interface) or the like. Various network settings are made.

  Thereafter, the operation of the network also changes due to addition of business, change of business, or change of importance of business in the enterprise system. In accordance with this change in operation, for example, registration, deletion, or change of QoS (Quality of Service) settings may be performed.

  Since such a change in operation can occur on a daily basis, the frequency of registration, deletion, and change of QoS settings tends to increase. For example, there are a wide variety of QoS functions, but settings such as CoS (Class of Service) values and bandwidth allocation are easily affected by operational changes.

  For this reason, network administrators are provided with a function that enables settings for network devices included in the corporate system network via GUI (Graphical User Interface) using technologies such as SDN (Software-Defined Networking). Has been.

International Publication No. 2005/034446 JP 2003-163664 A

  However, in the above technique, there is a case where the QoS setting performed via the CLI is overwritten.

  In other words, the QoS setting performed via the CLI is a setting performed by an expert such as SE in the scene of network construction or the like, and some of them are related to network and system design. is there. Therefore, when the QoS setting performed via the GUI is overwritten with the QoS setting performed via the CLI, a problem may occur in the network or the system.

  In one aspect, an object of the present invention is to provide a network management program, a network management method, and a network management apparatus that can suppress overwriting of a QoS setting performed via a CLI.

  In one aspect, the network management program acquires a network setting policy name defined for each interface or virtual local area network of the network device stored in the network device, and registers the network setting in the network device. The first interface or the first virtual local area network that includes the character string for the policy defined by the predetermined rule used in the acquired policy name of the network setting, and the character string as the policy name of the network setting And causing the computer to execute a process of displaying the second interface or the second virtual local area network that is not included in the identifiable manner.

  Overwriting with respect to the QoS setting performed via the CLI can be suppressed.

FIG. 1 is a diagram illustrating a configuration example of a network management system according to the first embodiment. FIG. 2 is a block diagram illustrating a functional configuration of the network management apparatus according to the first embodiment. FIG. 3 is a diagram illustrating an example of QoS information. FIG. 4 is a diagram illustrating an example of determination result information. FIG. 5 is a diagram illustrating an example of a topology map screen. FIG. 6 is a diagram illustrating an example of the CoS setting screen. FIG. 7 is a flowchart illustrating the procedure of the determination process according to the first embodiment. FIG. 8 is a flowchart illustrating the procedure of the display control process according to the first embodiment. FIG. 9 is a diagram illustrating an example of the CoS setting screen. FIG. 10 is a diagram illustrating a hardware configuration example of a computer that executes the network management program according to the first embodiment and the second embodiment.

  Hereinafter, a network management program, a network management method, and a network management apparatus according to the present application will be described with reference to the accompanying drawings. Note that this embodiment does not limit the disclosed technology. Each embodiment can be appropriately combined within a range in which processing contents are not contradictory.

[System configuration]
FIG. 1 is a diagram illustrating a configuration example of a network management system according to the first embodiment. A network management system 1 shown in FIG. 1 provides a network management service for managing network devices 30A to 30C that construct a network NW such as an enterprise system. As part of this network management service, the network management system 1 provides an overwrite suppression service that suppresses overwriting of the QoS settings performed via the GUI over the QoS settings performed via the CLI.

  As shown in FIG. 1, the network management system 1 includes a network management device 10, network devices 30 </ b> A to 30 </ b> C, and a client terminal 50. Hereinafter, the network devices 30A to 30C may be collectively referred to as “network device 30”. 1 illustrates the case where the three network devices 30A to 30C are accommodated in the network management apparatus 10, this is merely an example, and the network management apparatus 10 accommodates an arbitrary number of network devices. Needless to say, you can.

  The network management apparatus 10 is a computer that provides the network management service.

  As one embodiment, the network management apparatus 10 can be implemented as an SDN (Software-Defined Networking) controller by installing package software and online software for realizing the network management service in a desired computer. As an example of the network NW, the network management apparatus 10 can execute management including monitoring, setting, and control of carrier Ethernet such as IP-VPN (Internet Protocol Virtual Private Network) and wide area Ethernet (registered trademark). . As described above, the network NW managed by the network management apparatus 10 is not limited to a physical network, and may be a virtual network virtualized by a technique such as SDN or NFV (Network Function Virtualization).

  The network device 30 is a device that constructs a network NW such as a corporate system. For example, a data transfer device such as a router or a switch, a firewall, a load balancer, or the like can be adopted as the network device 30.

  The client terminal 50 is a computer that receives the network management service. As an example, the client terminal 50 is used by a related person such as a network administrator who manages the network NW.

[Configuration of Network Management Device 10]
FIG. 2 is a block diagram illustrating a functional configuration of the network management apparatus 10 according to the first embodiment. As illustrated in FIG. 2, the network management apparatus 10 includes a communication I / F (interface) unit 11, a storage unit 13, and a control unit 15. The network management apparatus 10 may include various functional units included in known computers, for example, functional units such as various input devices and audio output devices, in addition to the functional units illustrated in FIG.

  The communication I / F unit 11 is an interface that performs communication control with other devices such as the network device 30 and the client terminal 50.

  As an embodiment, the communication I / F unit 11 can employ a network interface card such as a LAN card. For example, the communication I / F unit 11 transmits a command related to QoS setting of the network NW to the network device 30, and receives from the network device 30 Config information stored in the network device 30 or a part thereof. In addition, the communication I / F unit 11 receives an editing operation on the setting of the network device 30 from the client terminal 50. In addition, the communication I / F unit 11 transmits to the client terminal 50 a topology map screen in which the connection form of the network NW is modeled and an edit screen for editing various settings for the network device 30 on the topology map screen. To do.

  The storage unit 13 is a storage device that stores data used for various programs such as an OS (Operating System) executed by the control unit 15 and a network management program for realizing the network management service.

  As an embodiment, the storage unit 13 can be implemented as an auxiliary storage device in the network management device 10. For example, the storage unit 13 can employ an HDD (Hard Disk Drive), an optical disk, an SSD (Solid State Drive), or the like. Note that the storage unit 13 does not necessarily have to be mounted as an auxiliary storage device, and can also be mounted as a main storage device in the network management device 10. In this case, various semiconductor memory elements, for example, RAM (Random Access Memory) and flash memory can be employed for the storage unit 13.

  The storage unit 13 stores Config information 13a and determination result information 13b as an example of data used in a program executed by the control unit 15. In this way, in addition to the Config information 13a and the determination result information 13b shown in FIG. 2, other electronic data can be stored together.

  For example, the storage unit 13 stores user authority information in which a network device 30 or a group of network devices 30 that permit a setting operation for each user is specified in order to manage authority of a user such as a network administrator. Can do. In addition, in order to manage the topology of the network NW, the storage unit 13 can also store device information related to the network device 30, link information related to the link formed by the network device 30, and the like.

  Here, the description of the Config information 13a and the determination result information 13b will be described together with the stage where the processing unit on the control unit 15 where the Config information 13a is acquired and the determination result information 13b is registered is described. I decided to.

  The control unit 15 has an internal memory for storing various programs and control data, and executes various processes using these.

  As an embodiment, the control unit 15 is implemented as a central processing unit, a so-called CPU (Central Processing Unit). Note that the control unit 15 is not necessarily implemented as a central processing unit, and may be implemented as an MPU (Micro Processing Unit). The control unit 15 can also be realized by a hard wired logic such as an application specific integrated circuit (ASIC) or a field programmable gate array (FPGA).

  The control unit 15 expands a network management program stored in the storage unit 13 on a work area of a RAM such as a DRAM (Dynamic Random Access Memory) or an SRAM (Static Random Access Memory) mounted as a main storage device (not shown). Thus, the following processing unit is virtually realized. For example, as shown in FIG. 2, the control unit 15 includes an acquisition unit 15a, a determination unit 15b, an input reception unit 15c, a display control unit 15d, and a setting registration unit 15e.

  The acquisition unit 15 a is a processing unit that acquires various types of information from the network device 30.

  As an embodiment, the acquisition unit 15a acquires Config information from the network device 30 on the network NW. For example, when acquiring Config information every time a certain period of time elapses, the acquisition unit 15a acquires Config information from the network device 30 when it reaches a predetermined period, for example, 5 seconds after acquiring Config information last time. It is determined that it is the timing to start the operation of acquiring. In addition, the acquisition unit 15a can also determine the operation start timing on the condition that it is at a predetermined regular time, for example, 6 o'clock, 12 o'clock, or 18 o'clock. When it is determined that the operation start timing is thus obtained, the acquisition unit 15a acquires the Config information stored in the network device 30 from the network device 30 by using a CLI show command or the like. At this time, the acquisition unit 15a can save the Config information in a work area of an internal memory (not shown) and register the QoS information in the storage unit 13 as the Config information 13a. Thereafter, the acquisition unit 15a repeatedly executes the acquisition of the Config information until the Config information is acquired from all the network devices 30.

  Here, the case where the Config information is acquired from the network device 30 has been exemplified, but instead of the Config information, the policy name associated with each interface of the network device 30 and the name of the class defining the policy It is also possible to extract and obtain action names and the like as QoS information.

  The determination unit 15b is a processing unit that determines whether the QoS setting is a setting made via CLI or GUI.

  As one embodiment, the determination unit 15b performs the following process for each Config information acquired by the acquisition unit 15a. That is, the determination unit 15b selects one of the interfaces included in the Config information, for example, a physical port or a VLAN associated with one or more physical ports. Subsequently, the determination unit 15b determines whether the naming related to the QoS setting policy associated with the previously selected interface conforms to a predetermined naming rule.

[Availability of QoS setting by network management device]
Here, the above-mentioned “naming rule” is a naming rule for the network management apparatus applied when the network management apparatus 10 mainly performs QoS setting for the network device 30. In other words, the present invention is not applied when QoS setting is performed on the network device 30 mainly by an external party other than the network management apparatus 10, such as a telnet client. In this way, by limiting the subject to which the “naming rule” is applied to the network management device 10, it is the QoS setting performed by the network management device 10 or the QoS setting performed by the outside other than the network management device 10. Can be determined.

  In the following, as an example, the QoS setting range in which setting registration to the network device 30 by the network management apparatus 10 is permitted, that is, the QoS setting range to which the naming rule is applied, is set as CoS (Class of Service) setting, that is, traffic. Assume that the QoS function for setting the CoS value is set and the traffic for which the CoS setting is made is unconditional. Hereinafter, the range in which the network management apparatus 10 performs QoS setting may be referred to as “network management apparatus setting range”.

  In this way, the setting range of the network management apparatus is set to CoS setting in response to a change in operation of the network NW by setting the CoS value to the traffic of the edge switch among the network devices 30 forming the topology on the network NW. This is because the need to do so is remarkable. In addition, when the setting is performed via the GUI, unlike the case where the setting is performed via the CLI, the CoS setting is not necessarily performed by an expert such as an SE. This is also for suppressing the occurrence of problems due to unnecessary expansion.

  In addition, unconditional traffic for which CoS setting is performed is because the server such as a business system is directly connected to the edge switch, so it is less necessary to classify traffic when setting the CoS value on the edge switch. This is because the definition of the class associated with the policy is simplified to simplify the CoS setting GUI.

[Example of naming convention]
For example, the name of the policy set for each interface of the network device 30 is defined by a fixed character string “SDN_COS” + CoS value “n” as an example. In this “n”, any CoS value of 0 to 7 assigned to the traffic is described. In this policy, one or a plurality of actions are associated with a class that defines an action execution condition. Among these, the class name is defined by a fixed character string “SDN_CLASS_ANY” as an example. Furthermore, the name of the action is defined by a fixed character string “SDN_BEHAVIOR_COS” + CoS value “n”.

[Example of QoS information]
FIG. 3 is a diagram illustrating an example of QoS information. In FIG. 3, among the Config information acquired from the network device 30 that forms the topology on the network NW, the policy name, class name, action name, etc. from the Config information acquired from Switch B-1 are interfaces, ie, physical QoS information extracted by port input and output type is shown.

  For example, in the case of the interface “01”, this means that the CoS value “6” is set for the input traffic, while the CoS value “3” is set for the output traffic. In the interface “01”, a policy name “PLC001”, a class name “CLS001”, and an action name “ACT001” are defined, and a policy name “PLC002”, a class name “CLS002”, and an action name “ACT002” are defined. ing. Here, the policy names “PLC001” and “PLC002” do not include the fixed character string “SDN_COS” corresponding to the naming rule. Accordingly, it is possible to determine that the policy associated with the interface “01” is a QoS setting performed by the outside other than the network management apparatus 10 and a QoS setting performed via the CLI. Hereinafter, the QoS setting performed by an external device other than the network management apparatus 10 may be referred to as “external setting”.

  In the case of the interface “02”, this means that the CoS value “0” is set for the input traffic, while the CoS value “4” is set for the output traffic. In the interface “02”, a policy name “PLC003”, a class name “CLS003”, and an action name “ACT003” are defined, and a policy name “PLC004”, a class name “CLS004”, and an action name “ACT004” are defined. ing. Here, the policy names “PLC003” and “PLC004” do not include the fixed character string “SDN_COS” corresponding to the naming rule. Therefore, it can be determined that the policy associated with the interface “02” is also an external setting.

  In the case of the interface “03”, the CoS value “3” is unconditionally set for input traffic, while the CoS value “0” is unconditionally set for output traffic. means. In the interface “03”, a policy name “SDN_COS3”, a class name “SDN_CLASS_ANY”, and an action name “SDN_BEHAVIOR_COS3” are defined, and a policy name “SDN_COS0”, a class name “SDN_CLASS_ANY”, and an action name “SDN_BEHAVIOR_COS0” are defined. ing. Here, the policy name “SDN_COS3” includes the fixed character string “SDN_COS” corresponding to the naming rule, and subsequently includes any CoS value of 0 to 7. Furthermore, the class name “SDN_CLASS_ANY” matches the fixed character string “SDN_CLASS_ANY” corresponding to the naming rule. Furthermore, the action name “SDN_BEHAVIOR_COS3” also includes a fixed character string “SDN_BEHAVIOR_COS” corresponding to the naming rule, and subsequently includes any CoS value of 0 to 7. The same applies to the policy name “SDN_COS0”, the class name “SDN_CLASS_ANY”, and the action name “SDN_BEHAVIOR_COS0”. As described above, since the policy name, the class name, and the action name comply with the naming rule, it can be determined that the policy associated with the interface “03” is not an external setting.

  Further, in the case of the interface “04”, the CoS value “1” is set for the input traffic, while the CoS value “1” is set for the output traffic. The interface “04” defines a policy name “PLC005”, a class name “CLS005”, and an action name “ACT005”. Here, the policy name “PLC005” does not include the fixed character string “SDN_COS” corresponding to the naming rule. Therefore, it can be determined that the policy associated with the interface “04” is an external setting.

  As a result of the determination as described above, the following determination result information 13b is stored in the storage unit 13. FIG. 4 is a diagram illustrating an example of the determination result information 13b. As shown in FIG. 4, while the external setting “present” is stored in association with the interfaces “01”, “02”, and “04” of Switch B-1, the interface “03” of Switch B-1 is stored. ”Is stored in association with the external setting“ none ”.

  In this example, the determination result information 13b is stored in the storage unit 13, but the determination result information 13b is not necessarily stored in the storage unit 13 and is stored in a work area on the internal memory. It doesn't matter. Further, FIG. 3 illustrates the case where a QoS setting policy is set for each interface. However, when the policy is not set, it is not necessary to determine the naming rule, and the external setting “None”. Can be determined.

  The input receiving unit 15 c is a processing unit that receives an input from the client terminal 50.

  As an embodiment, the input receiving unit 15c receives a selection of the network device 30 on a topology map screen in which a connection form of the network NW is modeled. Further, the input receiving unit 15c receives a selection of a menu for the network device 30 that has received a selection on the topology map screen, for example, a CoS setting menu for calling a screen for performing CoS setting. In addition, the input accepting unit 15c accepts an input of a CoS value for each interface on a CoS setting screen called through selection of a CoS setting menu.

  The display control unit 15 d is a processing unit that performs display control on the client terminal 50.

  As an embodiment, the display control unit 15d causes the client terminal 50 to display various screens such as the topology map screen and the CoS setting screen. For example, when the selection of the CoS setting menu is received while the network device 30 is selected on the topology map screen, the display control unit 15d performs the following processing to generate the display data of the CoS setting screen To do. That is, the display control unit 15d sets the external setting to “present” according to the determination result of the network device 30 that has received selection on the topology map screen among the determination results included in the determination result information 13b stored in the storage unit 13. The display form is distinguished between an interface and an interface whose external setting is “none”, and the CoS setting for an interface whose external setting is “none” is enabled and the external setting is “present”. Display data of a CoS setting screen for invalidating the CoS setting for the interface is generated.

  FIG. 5 is a diagram illustrating an example of a topology map screen. As shown in FIG. 5, the topology map screen 200 includes a topology map display area 210 and a menu display area 220. Among these, the topology map display area 210 displays a topology map in which the connection form of the network NW is modeled from the device information related to the network device 30 and the link information related to the link formed by the network device 30. This topology map includes Router-1 and Router-2 located at the boundary with the external network, Switch A-1 to A-4, Switch B-1 to B-4, Server-1 to Server-5. The topology of the network NW including is expressed. The menu display area 220 includes a CoS setting menu button 221 for calling a screen for CoS setting.

  When receiving a selection from the network devices 30 displayed in the topology map display area 210 on the topology map screen 200 shown in FIG. 5, the display control unit 15 d displays each interface included in the network device 30 that has received the selection. Display the connection destination. For example, when Switch B-1 is selected on the topology map screen 200, Switch A-1 is displayed as the connection destination of the physical port “01”, and Switch A-2 is displayed as the connection destination of the physical port “02”. Then, Server-1 is displayed as the connection destination of the physical port “03”, and Server-2 is displayed as the connection destination of the physical port “04”. In this way, by highlighting Switch B-1 that has been selected and displaying the connection destination for each interface, it is clearly indicated that Switch B-1 is in the selected state.

  Thereafter, when the selection of the CoS setting menu is received in a state where Switch B-1 is selected, display data of the CoS setting screen 300 related to Switch B-1 is generated by performing the following processing. That is, the display control unit 15d refers to the determination result of Switch B-1 selected on the topology map screen 200 among the determination results included in the determination result information 13b stored in the storage unit 13. With reference to the determination result, the display control unit 15d associates the presence / absence of the external setting for each interface of Switch B-1, and provides a GUI component for inputting the CoS value to each interface depending on the presence / absence of the external setting of the interface. Display data of the CoS setting screen 300 is generated.

  FIG. 6 is a diagram illustrating an example of the CoS setting screen. FIG. 6 shows a CoS setting screen 300 in which presence / absence of a pull-down menu is set according to the determination result of Switch B-1 shown in FIG. As shown in FIG. 6, in the CoS setting screen 300, the CoS value currently registered as the CoS setting at each interface of the Switch B-1, that is, each interface included in the Config information acquired from the Switch B-1. The CoS values are displayed in association with each other. Further, in the interfaces “01”, “02”, and “04” associated with the external setting “present”, the fact that the external setting is “present” is indicated by a black circle, and the CoS value is selected. There is no pull-down menu. On the other hand, the interface “03” indicates that the external setting is “no” by a black circle not being displayed and, for example, a pull-down menu 300A capable of selecting the value of the CoS value set for the traffic from the choices of 0 to 7. And 300B. Thereafter, when the OK button 310 or the apply button 330 is pressed in a state where any of the CoS values of the pull-down menus 300A and 300B is changed, a registration command for CoS setting is transmitted to the network device 30, When the cancel button 320 is pressed, the display of the client terminal 50 is changed from the CoS setting screen 300 to the topology map screen 200 without registering the CoS setting.

  As described above, by displaying the presence / absence of the external setting in association with each interface of the network device 30, the CoS setting performed via the CLI can be alerted. In addition, since the pull-down menu is not provided for the interfaces “01”, “02”, and “04” whose external setting is “Yes”, an operation for overwriting the CoS setting performed via the CLI is not performed by the GUI. Can be prohibited.

  FIG. 6 illustrates the case where the CoS value is not input to the interface for which the QoS setting is performed via the CLI by hiding the pull-down menu of the interface whose external setting is “Yes”. It is also possible to disable the input after displaying a pull-down menu for an interface whose external setting is “present”. FIG. 6 illustrates the case where the CoS value is input from the pull-down menu. However, other GUI components such as a text box and a radio button may be used.

  Returning to the description of FIG. 2, the setting registration unit 15 e is a processing unit that registers the QoS setting.

  As one embodiment, when receiving a registration request for CoS setting for the interface displayed on the CoS setting screen via the input receiving unit 15c, the setting registration unit 15e performs the following process. That is, the setting registration unit 15e generates a CoS setting registration command related to the interface for which the CoS setting registration request has been received in accordance with the CoS value specified on the CoS setting screen, and the selection is received on the topology map screen. Transmit to the network device 30. For example, in the example of the CoS setting screen 300 illustrated in FIG. 6, the OK button 310 or the application is performed in a state where any CoS value of the pull-down menus 300A and 300B displayed in association with the interface “03” is changed. When the button 330 is pressed, a CoS setting definition associated with the interface “03”, that is, a registration command for a policy, a class, and an action is generated. At this time, the setting registration unit 15e defines a policy name, a class name, and an action name according to the fixed character string defined in the above “naming rule” and the CoS value specified in the pull-down menu. After that, the setting registration unit 15e transmits the CoS setting registration command to the switch B-1 that has been selected on the topology map screen, thereby registering the CoS setting in the switch B-1.

[Process flow]
Next, a processing flow of the network management apparatus 10 according to the present embodiment will be described. Here, the processing executed by the network management apparatus 10 will be described in the order of (1) determination processing and (2) display control processing.

(1) Determination Processing FIG. 7 is a flowchart illustrating a determination processing procedure according to the first embodiment. As an example, this process is activated when it is determined that it is time to start an operation of acquiring Config information from the network device 30.

  As illustrated in FIG. 7, the acquisition unit 15 a acquires Config information stored in the network device 30 from the network device 30 by using a CLI show command or the like (step S <b> 101). Then, the acquisition unit 15a stores the Config information in the storage unit 13 or a work area of an internal memory (not shown) (step S102).

  Subsequently, the determination unit 15b selects one interface from the Config information stored in the storage unit 13 or the internal memory in step S102 (step S103). Then, the determination unit 15b determines whether or not the QoS setting policy name associated with the interface selected in Step S103 includes a fixed character string “SDN_COS” of the policy name defined by the naming rule (Step S103). S104).

  As a result, when the fixed character string “SDN_COS” of the policy name defined by the naming rule is included (Yes at Step S104), the determination unit 15b associates with the QoS setting policy associated with the interface selected at Step S103. It is further determined whether or not the assigned class name includes a fixed character string “SDN_CLASS_ANY” of the class name defined by the naming rule (step S105).

  At this time, when the fixed character string “SDN_CLASS_ANY” of the class name defined by the naming rule is included (Yes in step S105), the determination unit 15b associates with the QoS setting policy associated with the interface selected in step S103. It is further determined whether or not the attached action name includes a fixed character string “SDN_BEHAVIOR_COS” of the action name defined by the naming rule (step S106).

  If the action name fixed character string “SDN_BEHAVIOR_COS” defined by the naming rule is included (Yes in step S106), it can be determined that the interface selected in step S103 is not externally set. In this case, the determination unit 15b stores the external setting “none” in association with the interface selected in step S103 (step S107).

  On the other hand, when any of the policy name, class name, or action name fixed character string defined by the naming rule is not included (step S104 No, step S105 No, or step S106 No), the interface selected in step S103 has an external It can be determined that settings have been made. In this case, the determination unit 15b associates the external setting “present” with the interface selected in step S103 and stores it (step S108).

  Thereafter, until all the interfaces are selected from the Config information stored in the storage unit 13 or the internal memory in step S102 (No in step S109), an unselected interface is selected in step S103, and from step S103 to step S108. Repeat the process up to.

  When all the interfaces are selected from the Config information stored in the storage unit 13 or the internal memory in Step S102 (Step S109 Yes), until the Config information is acquired from all the network devices 30 (No in Step S110). In step S101, the Config information is acquired from the network device 30 for which the Config information has not been acquired, and the processing from step S102 to step S109 is repeatedly executed.

  Thereafter, when the Config information is acquired from all the network devices 30 (step S110 Yes), the process is terminated.

  In the above-described step S104, the example in which it is determined whether or not the fixed character string “SDN_COS” of the policy name defined by the naming rule is included is described. It may be further determined whether any numerical value follows. In the above-described step S106, the example in which it is determined whether or not the fixed character string “SDN_BEHAVIOR_COS” of the action name defined by the naming rule is included is described. It may be further determined whether any numerical value follows.

  In the flowchart shown in FIG. 7, the case where it is determined whether or not each fixed character string is included in the policy name, the class name, and the action name is illustrated, but one or two of these three are used. Thus, it can be determined whether or not external setting has been performed. For example, if the policy name conforms to the naming rule, it is determined that the external setting is “none”, and the process proceeds to step S107, while if the policy name does not conform to the naming rule, it is determined that the external setting is “present”. However, it is also possible to proceed to step S108. If the class name conforms to the naming rule, it is determined that the external setting is “none”, and the process proceeds to step S107. On the other hand, if the class name does not conform to the naming rule, it is determined that the external setting is “present”. However, it is also possible to proceed to step S108. In addition, when the action name conforms to the naming rule, the external setting “no” is determined, and the process proceeds to step S107. On the other hand, when the action name does not conform to the naming rule, the external setting “present” is determined. It can also be determined and the process can proceed to step S108.

(2) Display Control Processing FIG. 8 is a flowchart illustrating the procedure of display control processing according to the first embodiment. As an example, this process is repeatedly executed until the client terminal 50 is logged out after successful login authentication to the network management apparatus 10.

  As illustrated in FIG. 8, the display control unit 15 d causes the client terminal 50 to display a topology map screen in which the connection form of the network NW is modeled (Step S <b> 301). Thereafter, when selection of a CoS setting menu for calling a screen for performing CoS setting on the topology map screen displayed in step S301 is accepted (Yes in step S302), the network device 30 has been selected on the topology map screen. (Step S303 Yes), the following processing is executed.

  That is, the display control unit 15d reads out the determination result of the network device 30 that has received selection on the topology map screen among the determination results included in the determination result information 13b stored in the storage unit 13 (step S304). Subsequently, the display control unit 15d refers to the determination result of the network device 30 read in step S304, associates the determination result of the external setting “none” or “present” for each interface, and further sets the external setting. The CoS setting for the interface having “No” is validated, and the display data of the CoS setting screen for invalidating the CoS setting for the interface whose external setting is “Yes” is generated (step S305).

  Then, the display control unit 15d displays a CoS setting screen on the client terminal 50 in accordance with the display data generated in step S305 (step S306). When there is an interface whose CoS value has been changed on the CoS setting screen displayed in step S306 (Yes in step S307), the setting registration unit 15e includes the fixed character string defined in the “naming rule”, Policy names, class names, and action names are defined according to the CoS values changed in step 307 (step S308). Then, the setting registration unit 15e generates a CoS setting registration command related to the interface whose CoS value has been changed on the CoS setting screen according to the CoS value specified on the CoS setting screen (step S309). A setting registration command is transmitted to the network device 30 whose selection is accepted on the topology map screen.

  Thereafter, the processing from step S306 to step S309 is repeatedly executed until an operation for ending the display of the CoS setting screen, for example, a pressing operation of the cancel button 320 on the CoS setting screen 300 is received (No in step S310). Then, when an operation for ending the display of the CoS setting screen is received (step S310 Yes), the process returns to step S301.

[One aspect of effect]
As described above, the network management apparatus 10 according to the present embodiment acquires the QoS setting for each interface of the network device 30, and names the policy to be applied when the SND controller performs the QoS setting as the QoS setting policy name. The display form of the interface is distinguished and displayed depending on whether or not the character string specified by the rule is included. Therefore, according to the network management apparatus 10 according to the present embodiment, it is possible to suppress overwriting of the QoS setting performed via the CLI.

  Although the embodiments related to the disclosed apparatus have been described above, the present invention may be implemented in various different forms other than the above-described embodiments. Therefore, another embodiment included in the present invention will be described below.

[interface]
In the first embodiment, as an example of the interface of the network device 30, the case where the QoS setting is managed in units of physical ports is illustrated. However, the VLAN set in one or a plurality of physical ports, that is, a virtual local area network The processing shown in FIG. 7 and FIG. 8 can be similarly applied when the QoS setting is managed in units. In the first embodiment, the QoS setting is illustrated as an example of the network setting. However, this is only an example, and the processing illustrated in FIGS. 7 and 8 can be similarly applied to other network settings.

[Judgment timing]
In the first embodiment, the case where the determination process is executed at the timing when the Config information is acquired from the network device 30 is illustrated. However, when the CoS setting menu is selected, the determination process is stored in the storage unit 13 or the internal memory. It is also possible to execute determination processing using the Config information, and to generate display data of the CoS setting screen according to the determination result.

[Setting range of network management device]
For example, the network management device 10 can further determine whether the QoS setting is within the setting range of the network management device. Hereinafter, the network device 30 that supports MQC may be referred to as “MQC support device”.

  For example, when the network device 30 is an MQC support device, the Config information 13a acquired from the network device 30 includes an interface definition that associates an interface with a policy. By referring to this interface definition, the determination unit 15b can identify the number of policies associated with the interface. Further, the Config information 13a includes a policy definition that links a policy with a class that defines an execution condition and an action that defines an operation when the execution condition is satisfied. By referring to this policy definition, the determination unit 15b can identify the number of classes associated with the policy and the number of actions associated with the class. Further, the Config information 13a includes a class definition that links the contents of the execution condition to the class. By referring to this class definition, the determination unit 15b can identify the contents of the execution condition associated with the class. Further, the Config information 13a includes an action definition that links the action content to the action. By referring to this action definition, the determination unit 15b can identify the content of the operation associated with the action.

  Referring to the interface definition, policy definition, class definition, and action definition included in the Config information 13a in this order, the determination unit 15b performs the QoS setting associated with the interface of the MQC support device according to the procedure described below. It is determined whether it is within the setting range of the network management device.

  More specifically, the determination unit 15b selects one interface included in the Config information 13a stored in the storage unit 13. Subsequently, the determination unit 15b determines the number of policies associated with the previously selected interface among the interface definitions included in the Config information 13a. At this time, when the number of policies is “2” or more, it is found that the QoS setting associated with the interface is outside the setting range of the network management apparatus. In this case, the determination unit 15b saves the interface in association with overwriting “impossible” as the overwriting possibility. On the other hand, when the number of policies is “0”, it is understood that there is no QoS setting to be overwritten on the interface. In this case, the determination unit 15b saves the interface by overwriting “possible” as the possibility of overwriting.

  If the number of policies is “1”, it cannot be determined at this stage whether the QoS setting associated with the interface is inside or outside the setting range of the network management apparatus. In this case, the determination unit 15b refers to the policy definition associated with the policy identified as one by referring to the above interface definition among the policy definitions included in the Config information 13a. Then, the determination unit 15b determines the number of classes associated with the policy identified as one. At this time, if the number of classes is not “1”, it is found that the QoS setting associated with the interface is outside the setting range of the network management apparatus. In this case, the determination unit 15b saves the interface in association with overwriting “impossible” as the overwriting possibility. On the other hand, when the number of classes is “1”, it cannot be determined at this stage whether the QoS setting associated with the interface is inside or outside the setting range of the network management apparatus. In this case, the determination unit 15b further determines the number of actions associated with the class identified as one by referring to the policy definition.

  At this time, if the number of actions is not “1”, it is found that the QoS setting associated with the interface is outside the setting range of the network management device. In this case, the determination unit 15b saves the interface in association with overwriting “impossible” as the overwriting possibility. On the other hand, when the number of actions is “1”, at this stage, it cannot be determined whether the QoS setting associated with the interface is within or outside the setting range of the network management apparatus. In this case, the determination unit 15b refers to the class definition associated with the class identified as one by referring to the policy definition among the class definitions included in the Config information 13a. Then, the determination unit 15b determines whether or not the execution condition associated with the class is “unconditional”.

  If the execution condition associated with the class is not “unconditional”, it is found that the QoS setting associated with the interface is outside the setting range of the network management apparatus. In this case, the determination unit 15b saves the interface in association with overwriting “impossible” as the overwriting possibility. On the other hand, if the execution condition associated with the class is “unconditional”, it cannot be determined at this stage whether the QoS setting associated with the interface is inside or outside the setting range of the network management apparatus. In this case, the determination unit 15b refers to the action definition associated with the action identified as one of the action definitions included in the Config information 13a with reference to the above policy definition. Then, the determination unit 15b determines whether the operation associated with the action is a QoS function setting for setting a CoS value for traffic, that is, “CoS setting”.

  If the action associated with the action is not “CoS setting”, it is found that the QoS setting associated with the interface is outside the setting range of the network management apparatus at this stage. In this case, the determination unit 15b saves the interface in association with overwriting “impossible” as the overwriting possibility. On the other hand, when the operation associated with the action is “CoS setting”, it is found that the QoS setting associated with the interface is within the setting range of the network management apparatus. In this case, the determination unit 15b saves the interface by overwriting “possible” as the possibility of overwriting.

  As a result of the determination as described above, the storage unit 13 further stores whether or not overwriting is possible in association with the presence / absence of the external setting described in the first embodiment. Further using this overwriting permission / inhibition, even if the interface is associated with the external setting “present”, but overwriting “possible” is associated, the network management apparatus 10 alone sets the QoS setting to the state before overwriting. Since restoration is possible, display of a pull-down menu for selecting a CoS value is allowed.

  FIG. 9 is a diagram illustrating an example of the CoS setting screen. FIG. 9 shows a CoS setting screen 400 in which the presence / absence of a pull-down menu is set according to the determination result of whether or not the switch B-1 can be overwritten together with the determination result of the switch B-1 external setting. It is shown. Note that in the determination result of whether or not the switch B-1 can be overwritten, the interface “01” and “02” are associated with the overwriting “impossible”, and the interfaces “03” and “04” are overwritten “possible”. Assume that they are associated.

  In this case, since the interface “01” and “02” are associated with the “impossible” overwrite, the pull-down menu display is not allowed as in the case of the CoS setting screen 300 shown in FIG. The display of the CoS setting screen 400 shown in FIG. 6 is the same as that of the CoS setting screen 300 shown in FIG. However, the interface “04” is associated with “overwrite” possible. For this reason, the interface “04” is associated with the external setting “present”, but the pull-down menus 400A to 400B that allow selection of the value of the CoS value to be set for traffic from the options 0 to 7 are permitted. It is done. Therefore, in the CoS setting screen 400, the CoS setting can also be performed for the interface “04” for which the CoS setting could not be performed in the CoS setting screen 300 illustrated in FIG.

  Here, an example is shown in which a pull-down menu for selecting a CoS value is allowed to be displayed when overwriting “permitted” is associated even with an interface associated with the external setting “none”. However, it is possible to allow the pull-down menu for selecting the CoS value to be displayed only when the external setting is “None” and the overwrite is “Permitted”.

[Distribution and integration]
In addition, each component of each illustrated apparatus does not necessarily need to be physically configured as illustrated. In other words, the specific form of distribution / integration of each device is not limited to that shown in the figure, and all or a part thereof may be functionally or physically distributed or arbitrarily distributed in arbitrary units according to various loads or usage conditions. Can be integrated and configured. For example, the acquisition unit 15a, the determination unit 15b, the input reception unit 15c, the display control unit 15d, or the setting registration unit 15e may be connected as an external device of the network management device 10 via the network NW. In addition, the network management device 10 described above can be obtained by having the acquisition unit 15a, the determination unit 15b, the input reception unit 15c, the display control unit 15d, or the setting registration unit 15e each having a network connection and cooperation. You may make it implement | achieve a function.

[Network management program]
The various processes described in the above embodiments can be realized by executing a prepared program on a computer such as a personal computer or a workstation. In the following, an example of a computer that executes a network management program having the same function as that of the above embodiment will be described with reference to FIG.

  FIG. 10 is a diagram illustrating a hardware configuration example of a computer that executes the network management program according to the first embodiment and the second embodiment. As illustrated in FIG. 10, the computer 100 includes an operation unit 110a, a speaker 110b, a camera 110c, a display 120, and a communication unit 130. Further, the computer 100 includes a CPU 150, a ROM 160, an HDD 170, and a RAM 180. These units 110 to 180 are connected via a bus 140.

  As shown in FIG. 10, the HDD 170 has a network management that exhibits the same functions as the acquisition unit 15a, the determination unit 15b, the input reception unit 15c, the display control unit 15d, and the setting registration unit 15e described in the first embodiment. A program 170a is stored. The network management program 170a may be integrated or separated as in the constituent elements of the acquisition unit 15a, the determination unit 15b, the input reception unit 15c, the display control unit 15d, and the setting registration unit 15e illustrated in FIG. That is, the HDD 170 does not necessarily have to store all the data shown in the first embodiment, and data used for processing may be stored in the HDD 170. For example, the HDD 170 may store information stored in the storage unit 13 described in the first embodiment, for example, the Config information 13a and the determination result information 13b.

  Under such an environment, the CPU 150 reads the network management program 170 a from the HDD 170 and expands it in the RAM 180. As a result, the network management program 170a functions as a network management process 180a as shown in FIG. The network management process 180a expands various data read from the HDD 170, for example, the Config information 13a and the determination result information 13b, in an area allocated to the network management process 180a in the storage area of the RAM 180, and the expanded various data Various processes are executed using. For example, as an example of processing executed by the network management process 180a, the processing shown in FIGS. 7 and 8 and the like are included. Note that the CPU 150 does not necessarily operate all the processing units described in the first embodiment, and the processing unit corresponding to the process to be executed may be virtually realized.

  Note that the network management program 170a is not necessarily stored in the HDD 170 or the ROM 160 from the beginning. For example, each program is stored in a “portable physical medium” such as a flexible disk inserted into the computer 100, so-called FD, CD-ROM, DVD disk, magneto-optical disk, or IC card. Then, the computer 100 may acquire and execute each program from these portable physical media. In addition, each program is stored in another computer or server device connected to the computer 100 via a public line, the Internet, a LAN, a WAN, etc., and the computer 100 acquires and executes each program from these. It may be.

DESCRIPTION OF SYMBOLS 1 Network management system 10 Network management apparatus 11 Communication I / F part 13 Memory | storage part 13a Config information 13b Determination result information 15 Control part 15a Acquisition part 15b Determination part 15c Input reception part 15d Display control part 15e Setting registration part 30A, 30B, 30C Network device 50 Client terminal

Claims (9)

Obtain a network configuration policy name defined for each interface or virtual local area network of the network device stored by the network device,
A first interface or a first virtual local area network that includes a character string for a policy defined by a predetermined rule used when registering a network setting in the network device in a policy name of the acquired network setting; A second interface that does not include the character string in the policy name of the network setting or a second virtual local area network is displayed in an identifiable manner.
A network management program that causes a computer to execute processing.   2. The network management program according to claim 1, further causing the computer to execute a process of prohibiting a setting change with respect to a network setting set in the second interface or the second virtual local area network.   The network management program according to claim 1, wherein the network setting registered in the network device is a setting of a CoS value indicating a priority of communication using an interface and a virtual local area network in the network device. Obtain a network configuration policy name defined for each interface or virtual local area network of the network device stored by the network device,
A first interface or a first virtual local area network that includes a character string for a policy defined by a predetermined rule used when registering a network setting in the network device in a policy name of the acquired network setting; A second interface that does not include the character string in the policy name of the network setting or a second virtual local area network is displayed in an identifiable manner.
A network management method in which processing is executed by a computer.   5. The network management method according to claim 4, wherein the computer further executes a process of prohibiting a setting change for the network setting set in the second interface or the second virtual local area network.   The network management method according to claim 4, wherein the network setting registered in the network device is a setting of a CoS value indicating a priority of communication using an interface and a virtual local area network in the network device. An acquisition unit for acquiring a policy name of a network setting defined for each interface of the network device stored in the network device or for each virtual local area network;
A first interface or a first virtual local area network that includes a character string for a policy defined by a predetermined rule used when registering a network setting in the network device in a policy name of the acquired network setting; A display control unit that displays a second interface that does not include the character string in the policy name of the network setting or a second virtual local area network in an identifiable manner;
A network management device.   The network management device according to claim 7, further comprising a prohibition unit that prohibits a setting change for a network setting set in the second interface or the second virtual local area network.   8. The network management apparatus according to claim 7, wherein the network setting registered in the network device is a setting of a CoS value indicating a priority of communication using an interface and a virtual local area network in the network device.

Images