KR20220071052A - Equipment management device and management method for equipment - Google Patents

Abstract

The present invention provides an equipment management device and an operating method of the equipment management device. In operating and managing the equipment for mirroring traffic in a communication network, the equipment management device can provide more efficient and reliable VAS or security services continuously and stably, and can realize the new operating and management technology.

Description

Equipment management device and operation method of the equipment management device {EQUIPMENT MANAGEMENT DEVICE AND MANAGEMENT METHOD FOR EQUIPMENT}

The present invention relates to a technology field for managing network traffic, and more particularly, to an equipment operation/management technology for operating equipment that mirrors network traffic of a management target.

A communication network is a regional office that is built as a single or two or more in each region to provide services to a terminal (customer), a user who uses the service, and a plurality of terminals (customers), and to manage and manage regional offices in each region. It has the structure of a core router that handles traffic forwarding between regional offices.

In a communication network having such a structure, security threats are also increasing in proportion to the environmental change in which the amount of traffic gradually increases from 10G-level traffic to 100G-level traffic.

As a technology to respond to the above-mentioned security threats, direct and indirect value-added services (VAS, Value-Added Services) NW security network to respond to security threats by analyzing network traffic in the network and detecting/responding to security etc are provided.

In addition, in order to provide security technologies (such as a value-added service (VAS) and NW security network) in a communication network, it is necessary to construct equipment that mirrors network traffic of a management target to be used in the value-added service (VAS) and NW security network.

However, as for the current operation/management method of equipment that mirrors network traffic, most of the construction, operation, and management methods such as mirror port connection and configuration information related to equipment connection are manually performed by the operator/manager’s personnel. It's just at an ongoing level.

Due to this, due to the characteristics of the additional service (VAS) and NW security network, if an error in the mirror port connection or configuration information setting occurs in the mirroring device, it is impossible to provide VAS or security service, so the construction/operation/management method The current mirroring equipment operation/management method, which is limited to this manual level, has limitations in stably providing reliable VAS or security services.

After all, in operating/managing equipment that mirrors traffic in a communication network, it is time for a new operation/management technology that can provide a more efficient and reliable VAS or security service continuously/stably.

Accordingly, in the present invention, in operating/managing equipment that mirrors traffic in a communication network, it is possible to continuously/stably provide a more efficient and reliable VAS or security service beyond the existing limitations of the manual method. We would like to propose a new operation/management technology.

The present invention was created in view of the above circumstances, and an object of the present invention is to provide a more efficient and reliable VAS or security service continuously/stable in operating/managing equipment that mirrors traffic in a communication network. It is to provide a device management device that realizes a new operation/management technology that can be provided by

In order to achieve the above object, the device management device according to the first aspect of the present invention provides a specific interworking port to which the traffic mirroring device is connected from traffic mirrored by a traffic mirroring device provided on a data transmission path between a core router and a local office. an interlocking information acquisition unit for obtaining interworking information for ; and a control unit configured to set configuration information including a predefined information field for the traffic mirroring device based on the obtained interworking information.

Specifically, when the traffic mirroring device is connected, it further includes an information registration unit in which basic information including an interworking router and interworking interface for the specific interworking port is registered; The controller, when the obtained interworking information matches the basic information, may use the obtained interworking information as a basis for automatic setting of the configuration information.

Specifically, the interworking information acquisition unit extracts, from the traffic mirrored by the traffic mirroring device, identification information for identifying a transmitting side that has transmitted the traffic, and for all equipment involved in data transmission between the core router and the local office. Interlocking information matching the identification information may be obtained as interworking information for the specific interworking port from interworking information for each device in which interworking information is previously registered.

Specifically, the controller may automatically set information on a section field and a direction field in the configuration information of the traffic mirroring device based on the obtained interworking information.

Specifically, when the interworking router identified in the interworking information is a local office, the control unit sets the direction information from the local office to the core router in the direction field in the configuration information of the traffic mirroring device, and the traffic mirroring device For other interworking ports paired with the specific interworking port connected, direction information from the core router to the local office may be set.

Specifically, when the obtained interworking information does not match the basic information, or when normal interworking information for the specific interworking port is not obtained, the controller may output the information mismatch as a notification.

In order to achieve the above object, there is provided an operating method of a device management apparatus according to a second aspect of the present invention, from traffic mirrored by a traffic mirroring device provided on a data transmission path between a core router and a local office office, the traffic mirroring device is connected Interworking information acquisition step of acquiring interworking information for a specific interworking port; and a configuration information setting step of setting configuration information including a predefined information field for the traffic mirroring device based on the obtained interworking information.

Specifically, the method further includes an information registration step in which basic information including an interworking router and interworking interface for the specific interworking port is registered when the traffic mirroring device is connected; In the configuration information setting step, when the obtained linkage information matches the basic information, the obtained linkage information may be used as a basis for automatic setting of the configuration information.

Specifically, the interworking information acquisition step extracts, from the traffic mirrored by the traffic mirroring device, identification information that identifies a transmitting party that has transmitted the traffic, and includes all equipment involved in data transmission between the core router and the local office. Interlocking information matching the identification information may be obtained as interworking information for the specific interworking port from interworking information for each device in which interworking information is previously registered.

Specifically, in the configuration information setting step, based on the obtained interworking information, information of a section field and a direction field in the configuration information of the traffic mirroring device may be automatically set.

According to the device management device and the operating method of the device management device of the present invention, in operating/managing equipment that mirrors traffic in a communication network, it is possible to continuously/stably provide a more efficient and reliable VAS or security service. Operation/management skills can be realized.

For this reason, according to the present invention, in response to changes in the environment of a network that serves a large amount of traffic, it can be expected to significantly improve stability and cost efficiency compared to the existing ones.

1 is an exemplary diagram showing a traffic management structure to which a device management apparatus of the present invention can be applied.
2 is a block diagram showing the configuration of a device management apparatus according to an embodiment of the present invention.
3 and 4 are exemplary views of a traffic mirroring device (TAP) related operation/management UI provided by the device management apparatus of the present invention.
5 is an exemplary diagram showing information used when setting configuration information in the device management apparatus of the present invention.
6 is an operation flowchart illustrating a method of operating an apparatus for managing equipment according to an embodiment of the present invention.

Hereinafter, preferred embodiments of the present invention will be described with reference to the accompanying drawings.

The present invention relates to the field of technology for managing network traffic, and more particularly, to equipment operation/management technology for operating equipment (traffic mirroring equipment) that mirrors network traffic of a management target.

A communication network is a regional office that is built as a single or two or more in each region to provide services to a terminal (customer), a user who uses the service, and a plurality of terminals (customers), and to manage and manage regional offices in each region. It has the structure of a core router that handles traffic forwarding between regional offices.

In a communication network having such a structure, security threats are also increasing in proportion to the environmental change in which the amount of traffic gradually increases from 10G-level traffic to 100G-level traffic.

As a technology to respond to the above-mentioned security threats, direct and indirect value-added services (VAS, Value-Added Services) NW security network to respond to security threats by analyzing network traffic in the network and detecting/responding to security etc are provided.

In addition, in order to provide security technologies (additional service (VAS) and NW security network, etc.) in the communication network, equipment (traffic mirroring equipment) that mirrors the network traffic of the management target to be used in the value-added service (VAS) and NW security network is constructed I need this.

However, the current operation/management method of traffic mirroring equipment that mirrors network traffic includes most of the construction, The operation and management method is limited to the level where the operation/manager's manpower is manually performed.

Due to this, due to the characteristics of the VAS and NW security networks, if an error occurs in the mirror port connection or configuration information setting error in the traffic mirroring equipment, it is impossible to provide VAS or security service, so construction/operation/management The current equipment operation/management method, where the method is limited to the manual level, has limitations in stably providing reliable VAS or security service.

After all, in operating/managing traffic mirroring equipment in a communication network, a new operation/management technology that can provide more efficient and reliable VAS or security service continuously/stably is required.

Accordingly, in the present invention, in operating/managing traffic mirroring equipment in a communication network, it is possible to overcome the existing limitations of the manual method and provide a more efficient and reliable VAS or security service continuously/stable. We would like to suggest operation/management technology.

More specifically, the present invention intends to propose a device management device that realizes a new type of traffic mirroring device operation/management technology that can provide a more efficient and reliable VAS or security service continuously/stable.

On the other hand, in the case of applying/installing additional service (VAS) and NW security network technology to each regional office's DS according to the current communication network structure, traffic mirroring equipment for traffic mirroring to be used in the value-added service (VAS) and NW security network (TAP) There is a problem of cost increase due to construction and technology installation, and further, considering the change in the network environment at the level of 100G, there are also concerns about physical limitations such as equipment port limitations, and the cost increase due to additional equipment to solve this problem. .

After all, in the communication network, when providing security technologies (VAS and NW security network, etc.) It is time for network traffic management technology that can work.

Accordingly, in the present invention, as shown in FIG. 1, in order to manage network traffic more stably and at low cost in response to changes in the environment of the network, a traffic mirroring device (TAP) is constructed for each regional office (DS). Traffic management that builds/installs traffic mirroring equipment (TAP)/additional service (VAS) and NW security network technology on the core router (CR) side of the backbone network instead of installing additional service (VAS) and NW security network technology The structure (Network Visibility Platform, NVP) is being considered.

Briefly, the traffic management structure (NVP) considered in the present invention can operate by duplicating/duplicating the core router (CR) of the backbone network.

And, in the traffic management structure (NVP), the traffic mirroring equipment (TAP)/additional service (VAS) and NW security network technology are centralized and built/installed in a structure that can guarantee the bidirectionality of traffic on the backbone network side. have a structure

Here, in the TAP shown in FIG. 1, each of a plurality of TAP devices for mirroring traffic between a core router (CR) of a backbone network and a plurality of regional offices (DS,??) is a mirroring port ( It conceptually shows the physical equipment (aka, TAP establishment equipment) connected/established to the mirror port.

As shown in FIG. 1 , in the traffic management structure (NVP) briefly described above, the device management apparatus 100 of the present invention can be applied.

Of course, the equipment management apparatus 100 of the present invention can be applied to a traffic management structure in which a traffic mirroring equipment (TAP) is built for each regional office (by DS) and additional services (VAS) and NW security network technology are installed. will be.

However, hereinafter, for convenience of explanation, as shown in FIG. 1 , a traffic management structure (NVP) considered in the present invention will be assumed.

2 shows the configuration of a device management apparatus according to an embodiment of the present invention.

As shown in FIG. 2 , the device management apparatus 100 of the present invention may include an interworking information acquisition unit 120 and a control unit 130 .

Furthermore, the equipment management apparatus 100 of the present invention may be configured to further include an information registration unit 110 .

Interworking information acquisition unit 120, from traffic mirrored by a traffic mirroring device provided on a data transmission path between the core router (CR) and the regional office (DS), interworking information on a specific interworking port to which the traffic mirroring device is connected is responsible for acquiring

Here, the traffic mirroring device is a device that mirrors data packets of traffic transmitted (transmitted/received) on a transmission path provided therein, and may be, for example, a Tapper (TAP) device.

As mentioned above, in the TAP shown in FIG. 1, each of a plurality of TAP devices for mirroring traffic between a core router (CR) of a backbone network and a plurality of regional offices (DS,??) has a corresponding transmission path It means the TAP establishment equipment connected/established to the mirror port of

Accordingly, the interworking information acquisition unit 120, from the traffic mirrored by the specific TAP device provided on the data transmission path between the core router (CR) and the regional office (DS), that is, the specific TAP device in the TAP building equipment, the corresponding Interworking information on a specific mirror port to which a specific TAP device is connected may be acquired.

Here, the specific TAP element may be a TAP element newly or changed connected to the TAP construction equipment, or a TAP element searched/designated by an operator among TAP elements connected in the TAP construction equipment. Of course, the specific TAP element may be a TAP element in which the state check period set for each TAP element in the TAP construction equipment has arrived.

The control unit 130, on the basis of the interworking information obtained from the interworking information acquisition unit 120, a new or changed connection to the traffic mirroring equipment, that is, the TAP construction equipment, or predefined for a specific TAP element searched/specified by the operator Responsible for setting the configuration information including the specified information field.

Here, the configuration information for the TAP device is the station, station floor, rack No, TAP BOX, SLOT, mirror port, receiving station, VLAN, mirror equipment name, mirror port, interworking router, interworking interface that the TAP device mirrors. , inquiry router, inquiry interface, FDB, CDP (LLDP), link status, light level, traffic, registration date, registrant, description, etc. may include information fields.

That is, the device management apparatus 100 (in particular, the controller 130) of the present invention obtains interworking information on a specific mirror port to which a specific TAP device is connected, from traffic mirrored by the specific TAP device, and based on this It has the feature of automatically setting/configuring the configuration information for the specific TAP device instead of manually.

Hereinafter, a process of acquiring interworking information for a specific interworking port to which a specific TAP device is connected will be described in detail.

Specifically, the interworking information acquisition unit 120 transmits the traffic from the traffic mirrored in the traffic mirroring device, that is, a new or changed connection to the TAP building device, or a specific TAP device searched/designated by the operator. Identification information to identify the side is extracted.

Here, the identification information for identifying the transmission side that has transmitted the traffic means unique information that can identify the transmission side, for example, based on FDB (Filtering Database), CDP (Cisco Discovery Protocol), and LLDP (Link Layer Discovery Protocol). may be identification information of

Accordingly, the interworking information acquisition unit 120 may extract the FDB-based MAC address as identification information for identifying the transmitting side that has transmitted the traffic from the traffic mirrored by a specific TAP device (ie, UP traffic, or RX traffic). , or CDP-based Device ID/Port ID may be extracted as identification information, or LLDP-based System Name/Port ID may be extracted as identification information.

The identification information extracted in this way may be referred to as confirmation information of a specific interworking port (Mirror port) identified at a specific interworking port (Mirror port) to which a specific TAP device is connected.

According to one embodiment, the interworking information acquisition unit 120, from the previously registered interworking information for each device, provides interworking information matching with this identification information (confirmation information of a specific interworking port), this time a specific TAP device It can be obtained as interworking information for a specific interworking port (Mirror port) connected to.

Specifically, the device management apparatus 100 of the present invention directly holds interworking information for each device in which interworking information for all devices involved in data transmission between the core router (CR) and the regional office (DS) is previously registered. Or, by interworking with the previously registered DB of interworking information for each device, check interlocking information that matches this identification information (verification information of a specific mirror port) from interworking information for each device, and check the specific interlocking to which a specific TAP device is connected. It can be obtained as interworking information about the port (Mirror port).

In FIG. 5 , information used when setting configuration information in the equipment management apparatus 100 of the present invention, in particular, user input information (basic information of manual input) to be described later, and identification information (eg, CDP information) used to obtain interworking information , FDB information), and interworking information (BRAIN field) for each previously registered device are shown.

For example, as shown in the upper part of FIG. 5 , the interworking information acquisition unit 120 extracts the CDP-based Device ID/Port ID as identification information (B), the extracted Device ID/Port ID and each device registered in advance. In the BRAIN field (C) of the interworking information, it is possible to obtain interworking information (including SYSNAME/IFNAME) that matches the information in the “SYSNAME” and “IFDESCR” (or “IFNAME”) fields (Device ID+Port ID==SYSNAME) +IFDESCR, or Device ID+Port ID==SYSNAME+IFNAME).

Alternatively, as shown in the lower part of FIG. 5 , when the FDB-based MAC address is extracted as the identification information (B), the interworking information acquisition unit 120 extracts the MAC address from the BRAIN field (C) of the previously registered interworking information for each device. It is possible to obtain interworking information (including SYSNAME/IFNAME) that matches the information in the "IFPHYSADDR" field (MAC address==IFPHYSADDR).

Although not shown in FIG. 5, the interworking information acquisition unit 120 extracts the LLDP-based System Name/Port ID as the identification information (B), the extracted System Name/Port ID and the BRAIN of the previously registered interworking information for each device. In the field (C), it is possible to obtain interworking information (including SYSNAME/IFNAME) that matches the information in the “SYSNAME” and “IFNAME” fields (System Name+Port ID==SYSNAME+IFNAME).

The control unit 130, the interlocking information acquisition unit ( 120), when normal interworking information for a specific interworking port is not obtained, information discrepancy may be output as a notification.

On the other hand, according to another embodiment, the interworking information acquisition unit 120, this time identification information (confirmation information of a specific interworking port (Mirror port)) as it is as interworking information for a specific interworking port (Mirror port) to use / obtain may be

When interworking information on a specific interworking port (Mirror port) to which a specific TAP device is connected is successfully obtained from the interworking information acquisition unit 120, the control unit 130 automatically obtains configuration information for the specific TAP device based on this. Can be set/configured.

To describe a more specific embodiment, the information registration unit 110, when a new or changed connection to the traffic mirroring device, that is, a TAP construction device, or a specific TAP device searched/specified by an operator, is connected to a specific TAP device. It is responsible for the function of registering basic information including the interworking router and interworking interface for the port (Mirror port).

That is, in the present invention, while connecting the UP / DOWN link of the TAP element to the TAP building equipment (TAP mounting unit) to the interworking port (Mirror port), the basic basic information necessary for automatic setting / configuration of the configuration information for the TAP element It can be entered manually.

The basic information (user input information) of such manual input includes TAP location information (station office, floor, rack, TAP chassis, TAP name), mirror equipment (TAP device) information (equipment name, port), receiving station, interworking router name , an interworking interface name may be included.

The controller 130, as described above, when interworking information on a specific interworking port (Mirror port) to which a specific TAP device is connected is successfully obtained from the interworking information obtaining unit 120, the interworking information obtained this time is displayed on the specific TAP device. When matching with basic information (particularly, interworking router and interworking interface), the obtained interworking information is used to automatically set/configure the configuration information for the specific TAP device.

For example, as shown in FIG. 5 , when interworking information (including SYSNAME/IFNAME) for a specific interworking port (Mirror port) is obtained, the controller 130 sets the acquired interworking information, that is, SYSNAME/IFNAME, to this specific TAP device. Check if it matches with the interworking router/interworking interface of the user input information (A) (interlocking router+interworking Interface==SYSNAME+IFNAME) It can be used to set/configure.

If, the control unit 130, the interworking information obtained this time does not match the basic information (in particular, interworking router and interworking interface) of the specific TAP device this time (interworking Router + Interworking Interface =/= SYSNAME + IFNAME), information mismatch can be output as a notification.

That is, the control unit 130, only when the interworking information obtained this time matches the basic information (in particular, interworking router and interworking interface) of the specific TAP device this time (interworking Router + Interworking Interface == SYSNAME + IFNAME), this time acquired Based on the interworking information, it is possible to automatically set/configure the configuration information for the specific TAP device.

For example, the control unit 130, for information on fields that do not need to be determined among the configuration information for a specific TAP element, basic information of manual input (user input information), this time identification information (specific interworking port (Mirror port) confirmation information) and automatic setting/configuration using at least one of interworking information for a specific interworking port (Mirror port).

Meanwhile, the control unit 130 may automatically set/configure information on fields requiring determination (eg, section field, direction field) among configuration information for a specific TAP element using information according to the determination result after determination. have.

Specifically, the control unit 130, based on the interworking information obtained this time, is newly or changed connected to the traffic mirroring device, that is, the TAP building device, or a section within the configuration information of a specific TAP device that is searched/specified by the operator. Field and direction field information can be set automatically.

For example, the control unit 130 determines whether the interworking router (interworking router) checked in the interworking information obtained this time is a regional office (DS).

If the interworking router (interworking router) checked in the interworking information obtained this time is a regional station (DS), the control unit 130 transmits the traffic (UP traffic, or RX traffic) mirrored by a specific TAP device to the regional station (DS). ) side, it is possible to automatically set the direction information (DS->) from the regional office (DS) to the core router (CR) in the direction field in the configuration information of the traffic mirroring device, that is, a specific TAP device.

Then, the control unit 130, the traffic mirroring device, that is, the direction information (DS< -) can be set.

Furthermore, the control unit 130, based on the name of the interworking router (interlocking router) checked in the interworking information obtained this time and the automatically set directionality information (eg, DS->, or DS<-), the specific TAP device It is also possible to automatically set the section information in the section field in the configuration information.

As described above, in the present invention, in operating/managing a traffic mirroring device, that is, a TAP in a communication network, beyond the existing limitations of manual configuration information setting, the configuration information of the TAP, in particular, additional services (VAS) and NW security It is realizing a new type of traffic mirroring equipment operation/management technology that can automatically and reliably set information on the mirror port connection (direction/section), which can be fatal due to the characteristics of the network.

Accordingly, according to the present invention, by dramatically avoiding information errors about the configuration information of the TAP, particularly the mirror port connection (direction/section), which may be fatal due to the characteristics of the value-added service (VAS) and NW security network, it is more Efficient and reliable VAS or security services can be provided continuously/stable, and furthermore, it can be expected to significantly improve stability and cost efficiency compared to the existing ones in response to changes in the network environment that provides large-capacity traffic. have.

3 and 4 are diagrams illustrating an example of a traffic mirroring device (TAP) related operation/management UI provided by the device management apparatus 100 of the present invention.

As can be seen from FIG. 3, in the present invention, due to the automatic setting/configuration of the configuration information of the TAP, the structure in which each TAP element is connected for each office / office layer / rack can be shown in a more intuitive TAP mounting diagram form, Through this, TAP registration and normal status, non-registration status, information inconsistency, and traffic presence can be identifiable.

In addition, in the present invention, when a TAP is selected in the TAP implementation diagram, the usage status such as TAP box and slot status information may be visually expressed.

Meanwhile, as shown in FIG. 4 , in the present invention, the configuration information for each TAP element automatically set/configured as described above can be listed and displayed in the form of a TAP list, and through this, a TAP is selected and the detailed configuration and status are inquired You can also /search/browse.

Hereinafter, with reference to FIG. 6, a method of operating an apparatus for managing equipment according to an embodiment of the present invention will be described.

In the operating method of the operating method of the equipment management apparatus according to the present invention, when installing by connecting the UP / DOWN link of the TAP element to the TAP construction equipment (TAP mounting unit) to the interworking port (Mirror port), the configuration for the TAP element Basic basic information required for automatic information setting/configuration can be manually input (S10).

The basic information (user input information) of such manual input includes TAP location information (station office, floor, rack, TAP chassis, TAP name), mirror equipment (TAP device) information (equipment name, port), receiving station, interworking router name , an interworking interface name may be included.

And, in the operating method of the operating method of the equipment management apparatus according to the present invention, a specific TAP element provided on the data transmission path between the core router (CR) and the regional office (DS), that is, within the TAP building equipment (TAP mounting unit) Interworking information on a specific mirror port to which the specific TAP device is connected can be obtained from the traffic mirrored by the specific TAP device (S20, S30).

Here, the specific TAP element may be a TAP element newly or changed connected to the TAP construction equipment, or a TAP element searched/designated by an operator among TAP elements connected in the TAP construction equipment. Of course, the specific TAP element may be a TAP element in which the state check period set for each TAP element in the TAP construction equipment has arrived.

Specifically, in the operating method of the operating method of the equipment management apparatus according to the present invention, from the traffic mirrored by a specific TAP element (ie, UP traffic, or RX traffic), as identification information for identifying the transmitting side that has transmitted the traffic. The FDB-based MAC address may be extracted, or CDP-based Device ID/Port ID may be extracted as identification information, or LLDP-based System Name/Port ID may be extracted as identification information (S20).

The identification information extracted in this way may be referred to as confirmation information of a specific interworking port (Mirror port) identified at a specific interworking port (Mirror port) to which a specific TAP device is connected.

According to an embodiment, in the operating method of the operating method of the device management apparatus according to the present invention, interworking information that matches this identification information (confirmation information of a specific interworking port (Mirror port)) in the previously registered interworking information for each device , may be obtained as interworking information on a specific mirror port to which a specific TAP device is connected this time (S30).

More specifically, in the operating method of the operating method of the device management apparatus according to the present invention, interworking information for all devices involved in data transmission between the core router (CR) and the regional office (DS) is interlocked for each previously registered device Directly retain the information or link it with the DB of interlocking information for each previously registered device, and check the interlocking information that matches this identification information (verification information of a specific mirror port) from the interlocking information for each device and check the specific TAP device this time It can be obtained as interworking information for a specific interworking port (Mirror port) connected to.

On the other hand, according to another embodiment, in the operating method of the operating method of the equipment management apparatus according to the present invention, this time identification information (confirmation information of a specific interworking port (Mirror port)) is linked to a specific interworking port (Mirror port) as it is It can also be used/obtained as information.

In the operating method of the operating method of the equipment management apparatus according to the present invention, as described above, when interworking information for a specific mirror port to which a specific TAP device is connected is successfully obtained, the acquired interworking information is this time specific TAP device. It is determined whether or not it matches the basic information (in particular, the interworking router and interworking interface) (S40).

In the operation method of the operating method of the equipment management apparatus according to the present invention, when the interworking information obtained this time does not match the basic information (especially, interworking router and interworking interface) of this specific TAP element (eg, interworking Router + interworking Interface = /=SYSNAME+IFNAME) (S40 No), information mismatch can be output as a notification (S60).

That is, in the operating method of the operating method of the equipment management apparatus according to the present invention, the interworking information obtained this time matches only the basic information (in particular, interworking router and interworking interface) of the specific TAP element this time (interworking Router + Interworking Interface = =SYSNAME+IFNAME) (S40 Yes), it is possible to automatically set/configure the configuration information for the specific TAP device based on the obtained interworking information (S50).

For example, in the operation method of the operation method of the equipment management apparatus according to the present invention, for information on fields that do not need to be determined among configuration information for a specific TAP element, basic information (user input information), this identification information (Confirmation information of a specific interworking port (Mirror port)) and interworking information for a specific interworking port (Mirror port) can be automatically set/configured using at least one of.

On the other hand, in the operating method of the operating method of the equipment management apparatus according to the present invention, information on fields requiring determination (eg, section field, direction field) among configuration information for a specific TAP element is information according to the determination result after determination. can be automatically set/configured using .

Specifically, in the operating method of the operating method of the equipment management apparatus according to the present invention, information of the section field and the direction field in the configuration information of a specific TAP element can be automatically set based on the obtained interworking information.

For example, in the operating method of the operating method of the equipment management apparatus according to the present invention, it is determined whether the interworking router (interworking router) identified in the interworking information obtained this time is a regional office (DS).

In the operation method of the operation method of the device management apparatus according to the present invention, if the interworking router (interlocking router) checked in the interworking information obtained this time is a regional office (DS), traffic mirrored by a specific TAP element (UP traffic, Or RX traffic) is transmitted from the regional office (DS) side, so the direction information (DS->) from the regional office (DS) to the core router (CR) can be automatically set in the direction field in the configuration information of a specific TAP device. .

And, in the operating method of the operating method of the equipment management apparatus according to the present invention, the direction from the core router (CR) to the regional office (DS) for another interworking port paired with a specific interworking port (Mirror port) to which a specific TAP element is connected Information (DS<-) can be set.

Furthermore, in the operating method of the operating method of the equipment management apparatus according to the present invention, the name of the interworking router (interlocking router) checked in the interworking information obtained this time and the automatically set direction information (eg, DS->, or DS<-) ), it is also possible to automatically set the section information in the section field in the configuration information of a specific TAP device.

As described above, in the present invention, in operating/managing a traffic mirroring device, that is, a TAP in a communication network, beyond the existing limitations of manual configuration information setting, the configuration information of the TAP, in particular, additional services (VAS) and NW security It is realizing a new type of traffic mirroring equipment operation/management technology that can automatically and reliably set information on the mirror port connection (direction/section), which can be fatal due to the characteristics of the network.

Accordingly, according to the present invention, by dramatically avoiding information errors about the configuration information of the TAP, particularly the mirror port connection (direction/section), which may be fatal due to the characteristics of the value-added service (VAS) and NW security network, it is more Efficient and reliable VAS or security services can be provided continuously/stable, and furthermore, it can be expected to significantly improve stability and cost efficiency compared to the existing ones in response to changes in the network environment that provides large-capacity traffic. have.

The operating method of the operating method of the equipment management apparatus according to an embodiment of the present invention may be implemented in the form of a program command that can be executed through various computer means and recorded in a computer readable medium. The computer-readable medium may include program instructions, data files, data structures, etc. alone or in combination. The program instructions recorded on the medium may be specially designed and configured for the present invention, or may be known and available to those skilled in the art of computer software. Examples of the computer-readable recording medium include magnetic media such as hard disks, floppy disks and magnetic tapes, optical media such as CD-ROMs and DVDs, and magnetic such as floppy disks. - includes magneto-optical media, and hardware devices specially configured to store and execute program instructions, such as ROM, RAM, flash memory, and the like. Examples of program instructions include not only machine language codes such as those generated by a compiler, but also high-level language codes that can be executed by a computer using an interpreter or the like. The hardware devices described above may be configured to operate as one or more software modules to perform the operations of the present invention, and vice versa.

Although the present invention has been described in detail with reference to preferred embodiments so far, the present invention is not limited to the above-described embodiments, and without departing from the gist of the present invention as claimed in the following claims, the technical field to which the present invention pertains It will be said that the technical idea of the present invention extends to a range where various modifications or corrections are possible by anyone having ordinary knowledge in the present invention.

According to the device management device and the operating method of the device management device according to the present invention, in operating/managing equipment that mirrors traffic in a communication network, it is possible to continuously/stably provide a more efficient and reliable VAS or security service. In terms of realizing new operation/management technology, as it goes beyond the limits of existing technology, the possibility of marketing or sales of the applied device, not just the use of the related technology, is sufficient, as well as the degree to which it can be clearly implemented realistically. It is an invention with potential application.

100: equipment management device
110: information registration unit 120: linked information acquisition unit
130: control unit

Claims (10)

an interworking information acquisition unit configured to obtain interworking information on a specific interworking port to which the traffic mirroring device is connected, from traffic mirrored by a traffic mirroring device provided on a data transmission path between the core router and the local office; and
and a control unit configured to set configuration information including a predefined information field for the traffic mirroring device based on the obtained interworking information. The method of claim 1,
When the traffic mirroring device is connected, it further includes an information registration unit in which basic information including an interworking router and interworking interface for the specific interworking port is registered;
The control unit is
When the acquired linkage information matches the basic information, the equipment management apparatus characterized in that the obtained linkage information is used as a basis for automatic setting of the configuration information. The method of claim 1,
The linkage information acquisition unit,
Extracting identification information for identifying a transmission side that has transmitted the traffic from the traffic mirrored by the traffic mirroring device,
It is characterized in that interworking information matching the identification information is obtained as interworking information for the specific interworking port from interworking information for each device in which interworking information for all devices involved in data transmission between the core router and the local office is previously registered. equipment management device. The method of claim 1,
The control unit is
Device management apparatus, characterized in that based on the obtained interworking information, automatically setting the information of the section field and the direction field in the configuration information of the traffic mirroring device. 5. The method of claim 4,
The control unit is
If the interworking router identified in the interworking information is a local office, set directionality information from the local office to the core router in the direction field in the configuration information of the traffic mirroring device,
Device management device, characterized in that for the other interworking port paired with the specific interworking port to which the traffic mirroring device is connected, direction information from the core router to the local office is set. 3. The method of claim 2,
The control unit is
When the acquired interworking information does not match with the basic information, or when normal interworking information for the specific interworking port is not obtained, the equipment management apparatus, characterized in that the information mismatch is output as a notification. an interworking information acquisition step of acquiring interworking information on a specific interworking port to which the traffic mirroring device is connected, from traffic mirrored by a traffic mirroring device provided on a data transmission path between the core router and the local office; and
and a configuration information setting step of setting configuration information including a predefined information field for the traffic mirroring device based on the obtained interworking information. 8. The method of claim 7,
an information registration step in which basic information including an interworking router and interworking interface for the specific interworking port is registered when the traffic mirroring device is connected;
The configuration information setting step is,
When the obtained interworking information matches the basic information, the obtained interworking information is used as a basis for automatic setting of the configuration information. 8. The method of claim 7,
The interlocking information acquisition step is,
Extracting identification information for identifying a transmission side that has transmitted the traffic from the traffic mirrored by the traffic mirroring device,
It is characterized in that interworking information matching the identification information is obtained as interworking information for the specific interworking port from interworking information for each device in which interworking information for all devices involved in data transmission between the core router and the local office is previously registered. How the device management device works. 8. The method of claim 7,
The configuration information setting step is,
Based on the obtained interworking information, the operation method of the equipment management apparatus, characterized in that the information of the section field and the direction field in the configuration information of the traffic mirroring equipment is automatically set.

Images