TWI385968B - Object network management method capable of self-tracing with high efficiency - Google Patents

Description

Object management network management method with high efficiency and self-exploration

The invention relates to a network management method, in particular to a method for network management of objects with high efficiency self-exploration.

Most of the traditional network management methods rely on a huge database to store a large amount of network topology information in order to achieve management effects. However, as network users continue to grow, the query burden of their databases is relatively heavy, and must be constantly Update the topology information to maintain normal operation. In addition, the network users whose network management method is disabled will be notified when they go online, but when the user sends a large number of packets due to poisoning, it redirects. The management method can not only effectively block traffic, but also cause the management system and the switch to be overloaded and crash due to a large number of redirected commands. In addition, an access control list (ACL) technology is used to set the MAC on the switch or router, and compares the MAC address of the user packet. When the MAC address is met, the user is discarded. Packets are used to achieve management effects. However, ACL technology switches or routers must perform a large number of comparisons, which not only affect management efficiency, but also require large databases to store large amounts of comparison data (MAC). In addition, a large number of periodic Maintenance of the database, resulting in increased management costs and management inconvenience.

The main object of the present invention is to provide a high efficiency self-exploration object network management method, which is used for a network management system that uses multiple routers for routing and uses a multilayer switch for exploration, and includes the following steps: (a) The target IP to be explored is input to a network management system; (b) the network management system uses a Simple Network Management Protocol (SNMP) to retrieve one of the router's routing tables (Routing Table); (c) compares the target IP with the Routing the table, and confirm whether the router is the target router to which the target IP belongs. If yes, proceed to step (d). Otherwise, continue to visit the next router and repeat steps (b) through (c); (d) remove the target router. IP-MAC correspondence table (ARP Table), and find the MAC address of the target IP; (e) take out the MAC-PORT Table of the target router, and find the router nickname of the target IP; (f) Calculate all possible switch IPs using the target router IP and subnet masks, and test each of the switches as SNMP switch devices one by one; (g) utilize the MAC corresponding entity nickname table and target of the switch IP MAC address comparison The IP switch belongs to the target switch IP; and (h) takes out the MAC corresponding entity nickname table of the target switch, and finds the switch nickname to which the target IP belongs. The network management method according to the present invention has the following effects: 1. The present invention uses When the system is controlled, the nickname of the user's computer connected to the switch can be directly disabled, effectively preventing improper traffic.

2. The invention only needs to store the target IP, the MAC address of the target IP, the target router IP of the target IP, the target switch IP to which the target IP belongs, and the switch nickname to which the target IP belongs, without storing a large number of topologies. Information, therefore, can reduce the use of the database to reduce management and maintenance costs.

3. The router and the switch of the present invention can be arbitrarily increased or decreased according to requirements or replaced, and the direct exploration mechanism is used, so that it is not necessary to update the data in the database.

4. The present invention adopts the SNMP protocol standard Management Information Base (MIB), and the present invention can be used as long as the device supports the SNMP management protocol, and is not limited to any brand equipment.

5. The invention does not need a fixed database, and the system has a high degree of objectification and freedom, and can even store the system in a flash drive and execute it on any computer.

6. When performing topology tracing according to the present invention, the network connection status can be known at the same time, for example, finding a disconnection node in the topology path.

Referring to FIGS. 1 and 2, which are a preferred embodiment of the present invention, a method for network management of articles with high efficiency self-exploration is used for routing using multiple routers 10 and using multilayer switch 20 for exploration. The network management system comprises the following steps: First, step (a) inputs the target IP to be explored into the network management system, please refer to FIG. 2 again. In this embodiment, the user is located at [172.10.12.1] The computer locates the target IP [172.10.10.1] computer; then, step (b) the network management system obtains the gateway IP address from the user's computer and manages the communication with a simple network. The Simple Network Management Protocol (SNMP) retrieves a routing table 10a of the router 10. In this embodiment, it first retrieves the routing table 10a of the router 10 of [172.10.12.254]; (c) comparing the target IP with the routing table 10a, and confirming whether the router 10 is the target router to which the target IP belongs, if yes, proceeding to step (d), if otherwise continuing to visit the next router 10 and repeating step (b) to Step (c), in this embodiment, A router under the target IP is visited from the bottom up, and the method of matching the target IP with the routing table 10a is to perform the action of (+) the target IP [172.10.10.1] and [255.255.255.0] first. Generate [172.10.10.0], and then compare [172.10.10.0] one by one in the routing table 10a. If the comparison is not enough, compare [255.255.0.0] or other smaller subnet masks, where The smallest subnet mask is [0.0.0.0], and the largest subnet mask is [255.255.255.255]. Therefore, using the above comparison method, the target IP [172.10.10.1] that you want to query is not in [ 172.10.12.254] in the routing table 10a list, and can find the next router 10 of [0.0.0.0] is [172.10.11.254], so continue to visit [172.10.11.254] router 10 and repeat the steps (b) to step (c), and [172.10.11.25] routing table 10a can find [172.10.10.0] should go to the [172.10.10.254] router, therefore, continue to visit [172.10.10.254] router 10 And repeat steps (b) to (c), and finally the routing table 10a of [172.10.10.254] knows that the target IP is in the [172.10.10.254] router, therefore, confirm [172.10.10.254 This router is the target router to which the target IP belongs. In addition, in this embodiment, a step of storing the IP data of the visited router may be further included to improve the comparison efficiency. Next, in step (d), the IP-MAC correspondence table (ARP Table) 10b of the [172.10.10.254] target router is extracted by SNMP, and the MAC address of the target IP [172.10.10.1] is found in the ARP Table 10b as [ 00:E0:A9:B4:6E:C1]; After that, step (e) takes out the MAC-PORT Table 10c of the [172.10.10.254] target router by SNMP, and by the MAC-PORT In Table 10c, find out that the target nickname of the target IP [172.10.10.1] is the first 埠.

Then, since there is no table of "router nickname corresponding to switch IP", step (f) must be used to calculate all possible switch IPs using the target router's IP [172.10.10.254] and subnet mask, and one by one. Scanning tests whether the switches 20 are SNMP switch devices. In this embodiment, they are tested by using the MAC corresponding entity nickname table command of SNMP, and if the switch 20 does not return data, it indicates that it is not SNMP. The device, on the other hand, is represented as an SNMP device. In this embodiment, the target IP is [172.10.10.1] and the subnet mask is [255.255.255.0], so the IP range has 256 possibilities, one by one. After the scan test, it can be known that the switch 20 has two [172.10.10.101] and [172.10.10.102]. In addition, in this embodiment, a step of storing the tested switch data may be further included to improve the efficiency of the scan test. After that, step (g) compares the target IP with the MAC corresponding table number (MAC-PORT Table) 20a of the switch 20 and the MAC address of the target IP [00: E0: A9: B4: 6E: C1]. The target switch IP, in this embodiment, is taken out separately [17 2.10.10.101] and [172.10.10.102] the MAC-PORT Table 20a of the two switches 20, and the MAC address of the target IP [00: E0: A9: B4: 6E: C1] can be found in each of the The switch 20, and the method of discriminating the target switch IP is to first find the MAC address of the target IP in the MAC address of the [172.10.10.102] MAC-PORT Table 20a, and then look for the other MAC in the same table. The address is also in the first page. If there is, it means that the switch does not exist in the MAC address of the target IP. Therefore, continue to try the next switch [172.10.10.101]. Finally, the target can be compared. The target switch IP of the IP belongs to [172.10.10.101]; finally, step (h) is performed to take out the MAC-PORT Table 20a of the [172.10.10.101] target switch 20 by SNMP, and In the MAC-PORT table 20a, it is found that the switch nickname of the target IP belongs to the first port. In this embodiment, after step (h), a step of closing the switch nickname of the target IP belongs to the control target. IP [172.10.10.1] network usage. In addition, please refer to FIG. 1 again. In this embodiment, after step (h), an output step (i) may be further included. The step (i) is outputting the target router IP of the target IP and the MAC address of the target IP. The address, the router nickname to which the target IP belongs, the destination switch IP to which the destination IP belongs, and the switch nickname to which the destination IP belongs.

The scope of the present invention is defined by the scope of the appended claims, and any changes and modifications made by those skilled in the art without departing from the spirit and scope of the invention are within the scope of the present invention. .

(a). . . Input the target IP you want to explore into a network management system

(b). . . The network management system uses a Simple Network Management Protocol (SNMP) to retrieve one of the router's routing tables (Routing Table).

(c). . . Compare the target IP with the routing table and confirm whether the router is the target router to which the target IP belongs.

(d). . . Take the IP-MAC correspondence table (ARP Table) of the target router and find the MAC address of the target IP.

(e). . . Take out the MAC-PORT Table of the target router and find the router nickname of the target IP.

(f). . . Calculate all possible switch IPs using the target router IP and subnet mask, and test each of the switches as SNMP switch devices one by one

(g). . . Using the MAC corresponding entity nickname table of the switch and the MAC address of the target IP to compare the target switch IP of the target IP

(h). . . Extract the MAC corresponding entity nickname table of the target switch, and find the switch nickname to which the target IP belongs.

(i). . . The destination router IP of the destination IP, the MAC address of the target IP, the router nickname to which the target IP belongs, the destination switch IP to which the target IP belongs, and the switch nickname to which the target IP belongs

10. . . router

10a. . . Routing table

10b. . . IP-MAC correspondence table

10c. . . MAC corresponding entity nickname table

20. . . Exchanger

20a. . . MAC corresponding entity nickname table

1 is a flow chart of a method for managing a network of articles with high efficiency and self-exploration according to a preferred embodiment of the present invention.

2 is a block diagram of a network management system using multiple routers for routing and using a multi-layer switch for exploration, in accordance with a preferred embodiment of the present invention.

(a). . . Input the target IP you want to explore into a network management system

(b). . . The network management system retrieves one of the router's routing tables (Routing.Table) using Simple Network Management Protocol (SNMP).

(c). . . Compare the target IP with the routing table and confirm whether the router is the target router to which the target IP belongs.

(d). . . Take the IP-MAC correspondence table (ARP.Table) of the target router and find the MAC address of the target IP.

(e). . . Extract the MAC corresponding entity nickname table (MAC-PORT.Table) of the target router, and find the router nickname of the target IP.

(f). . . Calculate all possible switch IPs using the target router IP and subnet mask, and test each of the switches as SNMP switch devices one by one

(g). . . Using the MAC corresponding entity nickname table of the switch and the MAC address of the target IP to compare the target switch IP of the target IP

(h). . . Extract the MAC corresponding entity nickname table of the target switch, and find the switch nickname to which the target IP belongs.

(i). . . The destination router IP of the destination IP, the MAC address of the target IP, the router nickname to which the target IP belongs, the destination switch IP to which the target IP belongs, and the switch nickname to which the target IP belongs

Claims (9)

An efficient and self-exploring object network management method is used for a network management system that uses multiple routers for routing and using a multi-layer switch for exploration, and includes the following steps: (a) inputting the target IP to be explored to The network management system; (b) the network management system uses a simple network management communication protocol (SNMP) to retrieve one of the router's routing tables (Routing Table); (c) compares the target IP with the routing table, and confirms whether the router is For the target router to which the target IP belongs, if yes, proceed to step (d). Otherwise, continue to visit the next router and repeat steps (b) to (c); (d) retrieve the IP-MAC correspondence table of the target router (ARP Table) ), and find the MAC address of the target IP; (e) take out the MAC-PORT Table of the target router and find the router nickname of the target IP; (f) use the target router IP and The subnet mask calculates all possible switch IPs and tests whether the switches are SNMP switch devices one by one; (g) uses the MAC corresponding entity nickname table of the switch and the MAC address of the target IP to compare Target IP to which the target IP belongs; (h) The MAC entity corresponding to switch port number table, and identify the destination IP port number belongs exchanger; and closing the switch to your destination IP port number. For example, in the method of claim 1, the high-efficiency self-exploring object network management method, wherein step (c) is to browse a router under the target IP from the bottom up. For example, the method for managing the object network with high efficiency and self-exploration as described in claim 1 of the patent scope, wherein the step (c) further comprises the step of storing the IP data of the visited router. For example, the method for managing an object network with high efficiency and self-exploration as described in claim 1 is that the step (d) is to take out an IP-MAC correspondence table (ARP Table) of the target router by using a simple network management communication protocol (SNMP). For example, the method for managing the object network with high efficiency and self-exploration as described in claim 1 is that the step (e) is to take out the MAC corresponding entity nickname table of the target router by using Simple Network Management Protocol (SNMP) (MAC-PORT). Table). For example, the object network management method with high efficiency self-exploration as described in claim 1 of the patent scope, wherein the step (f) is tested by using the MAC corresponding entity nickname table command of the Simple Network Management Protocol (SNMP), and if the exchange is performed, If the device does not return data, it means that it is not an SNMP device. The method of network management for high efficiency self-exploration as described in claim 1 wherein step (f) further comprises the step of storing the data of the tested exchanger. For example, in the method of claim 1, the high-efficiency self-exploration object network management method, wherein the step (h) is to take out the MAC corresponding entity nickname table of the target switch by using a simple network management communication protocol (SNMP). The method for managing an object network with high efficiency and self-exploration as described in claim 1, wherein after step (h), an output step is further included, which is outputting the target router IP of the target IP, the MAC address of the target IP, The router nickname to which the target IP belongs, the destination switch IP to which the destination IP belongs, and the switch nickname to which the destination IP belongs.