KR101016444B1 - A network management system using telnet protocol - Google Patents

Abstract

PURPOSE: A network management system using telnet protocol is provided to collect information of managed equipments using a shell module and a telnet protocol. CONSTITUTION: A data processing module(120) collects the information about the managed equipment(300) through the telnet protocol(200). A shell module(130) comprises a telnet command script based on the telnet protocol. A security module(140) ciphers the shell module. If a problem is generated in the managed equipment, a decision module(150) automatically reports the problem occurrence to a administrator. A data management module(160) manages the list of the managed equipments.

Description

A NETWORK MANAGEMENT SYSTEM USING TELNET PROTOCOL}

The present invention relates to a network management system, and more particularly to a network management system using the Telnet protocol.

The system, commonly referred to as network management system or network monitoring system, refers to a system for managing a variety of network equipment that is located in a company or unit workplace, and nationwide.

For several to hundreds of thousands of network devices that provide an important foundation for corporate activities or national activities, uninterrupted performance, addition of new users, deletion of users, and repair and replacement of equipment through immediate identification of failures. This must be done continuously. In today's enterprise environment that relies heavily on IT infrastructure, managing IT infrastructure without interrupting IT services has become an integral part of business continuity. Therefore, the network management system collects data related to the operation status of each device such as fault data, configuration data, and statistical data of the above-described network devices at the request of an administrator, or continuously in real time according to a prescribed management policy. do.

However, the network of an enterprise or an organization is not only composed of various network equipments of various companies for various reasons such as cost reduction, function addition, and discontinuous expansion. Compared with the number of network equipment, the number of actual management personnel is often insufficient.

Thus, standard protocols exist to enable standardized control of multiple network devices. As a representative example, Simple Network Management Protocol (SNMP) may be mentioned. In early TCP / IP network environment, ICMP (Internet Control Message Protocol) was used to check the connection status between devices. ICMP is a network layer protocol among the OSI layers, which makes it possible to obtain simple information such as whether each host connected to a network is operating and checking response time regardless of the operating system (the most representative tool using ICMP is a ping program). .

However, there are a lot of older network devices that do not support the above-mentioned SNMP in the entire network, so that they need to be controlled / inquired / managed through conventional console-based control commands. Even if the device supports SNMP, there is a problem in that the MIB and OID, which are management objects, are identified for each device in order to instruct a control command based on the SNMP protocol, and SNMP programming is required accordingly.

In particular, as mentioned above, there is not enough network management personnel, and various network equipments are newly added or removed from the network, and thus the management program for the equipments is modified and added every time. Work will be repeated. Therefore, not only is the loss of management power, but also a waste of time. In addition, the network management personnel must not only clearly understand the SNMP protocol, but also programming knowledge for program coding is required, and a considerable amount of advanced personnel are required for network management.

The present invention has been proposed to solve the above problems of the conventionally proposed methods, and collects information on managed devices through the telnet protocol using a shell module including a shell module composed of telnet command scripts. It is an object of the present invention to provide a network management system using the telnet protocol, in which an administrator can conveniently collect desired data without knowing the MIB and OID of the managed equipment or performing separate SNMP programming.

In addition, the present invention, by including a security module to enhance the security of the shell module to prevent the third party other than the administrator to access the managed equipment, and further includes a determination module to automatically cause a problem in the managed equipment. Another goal is to provide a network management system using the Telnet protocol, which allows administrators to report problems and to take immediate action to ensure stable network management and reduce management costs.

Network management system using the telnet protocol according to a feature of the present invention for achieving the above object,

A database that stores setting information about managed devices constituting a network and connection relationships between the managed devices;

A data processing module for collecting information on the managed devices through a telnet protocol using the database according to an administrator's command;

A shell module composed of telnet command scripts based on the telnet protocol to process input from the administrator so that the data processing module collects data via the telnet protocol and passes control commands to the managed devices;

A security module for encrypting the shell module to restrict access other than the administrator to the shell module; And

Including the determination module for automatically reporting the fact that the problem occurs to the manager when a problem occurs in the managed equipment is characterized in that the configuration.

Preferably, the managed equipment,

At least one device selected from the group including a hub, a router, a switch, a bridge, a server, and an uninterruptible power supply (USP).

Preferably,

The apparatus may further include a data management module configured to create, manage, and update the list of managed devices, and determine whether the managed device input from the manager is a new device through comparison with the list.

More preferably, the data management module,

It is determined whether the managed device inputted from the manager is a new device, and if it is an existing device, setting information about the existing managed device registered in the database and a connection relationship with another managed device are input as the manager inputs. Can be changed and saved.

More preferably,

In the data management module, if the managed device inputted from the manager is a new device, and if the new device is a new device, setting information about the new managed device and a connection relationship with another managed device are stored in the database. It may further include a registration module.

Preferably,

If the determination module determines that a problem occurs in the managed equipment, the remote control may further include an automatic recovery server that automatically recovers the managed equipment immediately and immediately if it is possible to remotely recover the managed equipment.

According to the network management system using the telnet protocol proposed by the present invention, by collecting information about the managed devices through the telnet protocol using a shell module including a shell module consisting of a telnet command script, You can easily collect the data you need without knowing the management device's MIB and OID or without any additional SNMP programming.

In addition, according to the present invention, by including a security module to enhance the security of the shell module to prevent the third party other than the administrator to access the managed equipment, and further includes a decision module to automatically troubleshoot if the managed equipment occurs This allows the administrator to report the problem to the administrator and take immediate action, enabling stable network management and lower management costs.

1 is a diagram illustrating a configuration of a network management system using a telnet protocol according to an embodiment of the present invention.
2 is a diagram illustrating a process of collecting information of a managed device for managing a network in a network management system using a telnet protocol according to an embodiment of the present invention.
3 is a diagram illustrating an information data file of managed equipment collected for management of a network in a network management system using a telnet protocol according to an embodiment of the present invention.

Hereinafter, exemplary embodiments of the present invention will be described in detail with reference to the accompanying drawings so that those skilled in the art may easily implement the present invention. However, in describing the preferred embodiment of the present invention in detail, if it is determined that the detailed description of the related known function or configuration may unnecessarily obscure the subject matter of the present invention, the detailed description thereof will be omitted. In addition, the same reference numerals are used throughout the drawings for parts having similar functions and functions.

In addition, in the entire specification, when a part is referred to as being 'connected' to another part, it may be referred to as 'indirectly connected' not only with 'directly connected' . In addition, the term 'comprising' of an element means that the element may further include other elements, not to exclude other elements unless specifically stated otherwise.

1 is a diagram illustrating a configuration of a network management system 100 using the telnet protocol 200 according to an embodiment of the present invention. As shown in FIG. 1, the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention includes a database 110, a data processing module 120, a shell module 130, and security. It may be configured to include a module 140, and the determination module 150, and may further include a data management module 160 and registration module 170.

The network managed by the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention is composed of managed devices 300. In this case, the managed device 300 may include a hub 310, a router 320, a switch 330, a bridge 340, a server 350, and an uninterruptible power supply (USP) 360. It may be at least one equipment selected. In addition, the managed equipment 300 has a component such as a port, an LED indicating a state, a fan for heat dissipation, and a component for reading and controlling the state. The number of managed equipment 300 may range from several hundreds to hundreds of thousands, and manageable areas may range from small offices to national scale.

Hereinafter, the components of the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention will be described in detail.

The database 110 may store setting information about the managed devices 300 constituting the network and a connection relationship between the managed devices 300. The term database 110 is used herein to express a function of storing data, and is not limited to the database 110 in a strict sense. In other words, as long as the file base of a simple form performs a function of storing and reading necessary information, the file base may serve as the database 110 of the present invention.

The data processing module 120 may collect information on the managed devices 300 through the telnet protocol 200 using the database 110 according to the command of the manager 10. As shown in FIG. 1, the data processing module 120 collects information about managed devices 300 through the telnet protocol 200, unlike the network management system 100 that uses SNMP. Since there is no need to understand the MIB, OID, etc. of the management equipment 300, and there is no programming involved, the manager 10 can collect the desired data more conveniently, and can manage a large amount of equipment quickly and accurately. have.

The shell module 130 processes the input from the manager 10 so that the data processing module 120 collects data via the telnet protocol 200 and passes control commands to the managed equipment 300. It may consist of a telnet command script based on protocol 200. The shell is a kind of command interpreter. In the present invention, various shells such as Bourne shell, Seashell, Kornshell, etc. may be used. Of course, when configuring the shell module 130, all shell programs or other script language programs can be used. The shell module 130 may include a series of telnet commands used for network management in the form of a script so that the administrator 10 may use it for convenience of the administrator 10, and the script may be at least one. .

For example, when the administrator 10 wants to read the version of the managed device 300, the shell module 130 may be configured to include an ID input, a password input, and a system version read command for the Telnet login process. When the manager 10 wants to read the device information of the managed device 300, the shell module 130 may be configured to include an ID input, a password input, and a device information read command for a telnet login process.

In the above, the commands included in the shell module 130 when performing a simple command are illustrated, but the shell module 130 is included by including a plurality of telnet commands in the form of a script to perform more complicated commands or operations. Can be configured. Instead of inputting each of the complex and various telnet commands, the manager 10 can automatically execute a specific command at a time by using the shell module 130 which is composed of a series of telnet commands for executing a specific command as a script. have. Thus, by using the shell module 130 having a name that can be intuitively recognized even if the administrator 10 does not know each telnet command, the network management system using the telnet protocol 200 according to an embodiment of the present invention. 100 is easily accessible.

In addition, when a shell module 130 wants to store the data collected by executing a telnet command in the database 110 in the form of a file, a password may be set or encrypted so that the data file cannot be viewed by a third party. The telnet command may be further included in the shell module 130.

The security module 140 may encrypt the shell module 130 to restrict access to the shell module 130 other than the administrator 10. The security module 140 encrypts the shell module 130 itself or encrypts the data file generated as a result of the execution of the shell module 130 and stored in the database 110. It serves to strengthen the security of the network management system 100 using the 200. The script of the shell module 130 may be artificially and maliciously changed by external intrusion, etc., and there is always a risk that the shell module 130 may not play a normal role due to such a change. Therefore, by encrypting the shell module 130 or the scripts constituting the shell module 130 by the security module 140, security of the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention Can strengthen.

As described in the shell module 130, in order to execute each telnet command script, the ID and password input process may be performed for each telnet login process. However, when the administrator 10 wants to perform various tasks, if the Telnet login process is performed for each execution command, the security may be enhanced, but the work efficiency is reduced.

Accordingly, it is preferable to include a security module 140 that can encrypt the shell module 130 to restrict access other than the administrator 10 to the shell module 130. The security module 140 may encrypt the shell module 130 itself so that it is impossible for a third party to execute the shell module 130 or check what specific telnet commands therein are. In addition, when the ID and password are incorrectly input or the password of the shell module 130 is incorrectly input for a predetermined number of times, an access attempt using the wrong ID or password may be notified by an e-mail of the predetermined administrator 10 or the like. have. Alternatively, a control signal may be transmitted to the terminal of the manager 10 to sound an alarm. Through such measures, it is possible to prevent an accident in which a third party other than the administrator 10 enters the network and views the information of the managed devices 300.

The determination module 150 may automatically report a problem occurrence to the manager 10 when a problem occurs in the managed device 300. The determination module 150 determines whether a problem occurs based on the information about the managed devices 300 stored in the database 110 and a connection relationship between the managed devices 300, and when it is determined that the problem occurs, the problem is determined. The occurrence of the problem, including the occurrence equipment, the determination contents and the determination process, etc. may be transmitted to the terminal of the administrator 10 or the administrator 10 may be notified by an e-mail of the predetermined administrator 10. Alternatively, a control signal may be transmitted to the terminal of the manager 10 to sound an alarm.

Meanwhile, the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention further includes an automatic recovery server, whereby the determination module 150 determines that a problem occurs in the managed device 300. In this case, if the problem is remotely recoverable, the managed equipment 300 may be automatically and immediately recovered. By using the automatic recovery server, because the manager 10 does not need to check and recover manually, labor costs can be reduced and immediate actions can be taken to minimize the damage caused by problems in the managed equipment 300. have. If the problem is impossible to remotely recover by the automatic recovery server, it may be recovered by the manager 10 that has received the problem report of the determination module 150.

The data management module 160 creates, manages, and updates a list of managed devices 300, and whether the managed device 300 input from the manager 10 through the comparison with the list is a new device. Can be determined. Since the data management module 160 manages a list of information on the managed devices 300 stored in the database 110 and a connection relation between the managed devices 300, the manager 10 may select a specific device. When the request for setting is compared with the list of the managed devices 300, it may be determined whether the managed device 300 which is requested for setting is a new device or an existing device.

The data management module 160 determines whether the managed device 300 is a new device, and if it is an existing device, setting information about the existing managed device 300 registered in the database 110 and other managed devices ( The connection relationship with 300 may be changed and stored as input by the manager 10. At this time, by including a step of asking the administrator 10 whether the user wants to change and a step of asking a password, the setting information of the managed equipment 300 can be freely changed by the third party.

The registration module 170 determines whether the managed device 300 input from the manager 10 in the data management module 160 is a new device. The configuration information about 300 and a connection relationship with other managed equipment 300 may be stored.

The network management system 100 using the telnet protocol 200 is characterized in that it operates only in a specific device, the manager 10 using the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention. ) May be set in the network management system 100 by obtaining a data value desired by a specific device or the manager 10. Unlike the network management system 100 by SNMP, the manager 10 does not need to identify the MIB or OID for each managed device 300 and add SNMP programming accordingly, so that the new managed device 300 If the setting is changed or added, there is an advantage that does not need to repeat the operation, such as modifying and adding the management program for the managed equipment (300).

2 is a diagram illustrating a process of collecting information of a managed device 300 for managing a network in a network management system 100 using the telnet protocol 200 according to an embodiment of the present invention. As shown in FIG. 2, in the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention, an executable file may be executed for network management. In FIG. 2, information is collected from a device called “wcmts”.

3 is a diagram illustrating the information data file of the managed equipment 300 collected for the management of the network in the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention. As shown in FIG. 2, when the execution file is executed for network management in the network management system 100 using the telnet protocol 200 according to an embodiment of the present invention, a data file as shown in FIG. Can be produced. As shown in FIG. 3, the collected data file may include a location, a name, an operating state, a speed, and the like of the managed device 300.

The present invention described above may be variously modified or applied by those skilled in the art, and the scope of the technical idea according to the present invention should be defined by the following claims.

10: administrator 100: network management system
110: database 120: data processing module
130: shell module 140: security module
150: determination module 160: data management module
170: registration module 200: Telnet protocol
300: blood management equipment 310: hub
320: router 330: switch
340: bridge 350: server
360: USP

Claims (6)

A network management system for managing managed equipment over a network,
A database that stores setting information about managed devices constituting a network and connection relationships between the managed devices;
A data processing module for collecting information on the managed devices through a telnet protocol using the database according to an administrator's command;
A shell module composed of telnet command scripts based on the telnet protocol to process input from the administrator so that the data processing module collects data via the telnet protocol and passes control commands to the managed devices;
A security module for encrypting the shell module to restrict access other than the administrator to the shell module; And
Including a determination module for automatically reporting a problem occurrence to the manager when a problem occurs in the managed equipment,
And a data management module for creating, managing, and updating the list of managed devices, and determining whether the managed device input from the manager is a new device by comparing with the list.
The data management module,
It is determined whether the managed device inputted from the manager is a new device, and if it is an existing device, setting information about the existing managed device registered in the database and a connection relationship with another managed device are input as the manager inputs. A network management system using the telnet protocol, characterized in that for changing and storing.
According to claim 1, The managed equipment,
At least one device selected from the group consisting of a hub, a router, a switch, a bridge, a server, and an uninterruptible power supply (USP).
delete delete A network management system for managing managed equipment over a network,
A database that stores setting information about managed devices constituting a network and connection relationships between the managed devices;
A data processing module for collecting information on the managed devices through a telnet protocol using the database according to an administrator's command;
A shell module composed of telnet command scripts based on the telnet protocol to process input from the administrator so that the data processing module collects data via the telnet protocol and passes control commands to the managed devices;
A security module for encrypting the shell module to restrict access other than the administrator to the shell module; And
Including a determination module for automatically reporting a problem occurrence to the manager when a problem occurs in the managed equipment,
And a data management module for creating, managing, and updating the list of managed devices, and determining whether the managed device input from the manager is a new device by comparing with the list.
In the data management module, if the managed device inputted from the manager is a new device, and if the new device is a new device, setting information about the new managed device and a connection relationship with another managed device are stored in the database. The network management system using a telnet protocol, characterized in that it further comprises a registration module.
The method of claim 1,
When the determination module determines that a problem occurs in the managed device, the remote management may further include an automatic recovery server for automatically and immediately recovering the managed device if it is possible to remotely recover the network. system.

Images