TWI572180B - The physical location corresponds to the display network terminal equipment management system - Google Patents

Description

Physical location corresponding display network terminal device management system

The present invention relates to a physical location corresponding display network terminal device management system, in particular, the network terminal device to which the management belongs is correspondingly displayed as a physical geographical position; or is presented in a global geographical representation, thereby providing a real control record, which is convenient The archive query updates the maintainer.

With the rapid development of science and technology, the scale of the network has grown and expanded, and it has become an indispensable part of modern life. The construction of IT information systems is becoming more and more complex, and users' requirements for network management and operation are also increasing.

Is the operation of the network safe, stable, and highly efficient directly affecting whether the core business of the enterprise can be smoothly expanded? When the enterprise network has a problem of security or failure, how can the administrator quickly find out the physical location of the relevant network terminal equipment of the above error, and play an important role in the enterprise-level IP management tool.

However, there are related functional familiar products with IP management on the market. For the network location information of the managed network terminal devices, most of the network location information is matched with the network topology shown in Figure 9. In the manner of presentation, there is a lack of connection between devices in the provided list or illustration content, and it is completely impossible to view the location of the computer device entity for reference information by the list or its icon. Trouble shooting is not easy and laborious, which causes difficulties in the management of security and is its main shortcoming.

In view of the above, the main purpose of the present invention is to provide a physical location corresponding display network terminal device management system, which mainly includes: setting an IP management network segment to which a management network terminal device belongs, and actively querying/sniffing through a probe. The network stream data packet is obtained by the switch/router in the form of SNMP, and is selected from the network flow data packet including the switch/router, the interface table, the ARP table and the MAC address table; and the automatic analysis and screening management network The terminal device has relevant network location data; each network terminal device is corresponding to a single network location data; and then integrated with the network distribution environment floor plan information, and the managed network terminal device is correspondingly displayed as a physical geographical location. Or further across regions to present in a global geographic representation (such as Google Map); In order to provide real-time comparison records, it is convenient to file the query update and maintenance; and when an event that violates the security policy occurs, the system will automatically identify the geographical location of the entity where the problematic network terminal device is located by means of an automatic bounce window. It makes it easier to make the security management more direct and complete.

10‧‧‧Network terminal equipment

100‧‧‧ entity location

20‧‧‧ detector

200‧‧‧ entity location

30‧‧‧Network distribution environment plan

300‧‧‧Global Geographical Icon

40‧‧‧Automatic bounce window

90‧‧‧ Large enterprises

900‧‧‧ branches

101, 102, 103, 104, 105, 106, 107, 108‧‧‧ box

1031, 1032, 1033‧‧‧ box

Figure 1 is a schematic diagram of the geographic location of the corresponding display entity of the present invention.

Figure 2 is a schematic view showing the configuration of the detector of the present invention.

Figure 3 is a block diagram of the present invention.

Figure 4-1 is a diagram of the management list of the network segment of the present invention.

Figure 4-2 shows the switch management list of the present invention.

Fig. 5 is a view showing an application example of the automatic bounce window of the present invention.

Figure 6 is a schematic diagram of the integration of information in a global geographical representation of the present invention.

Figure 7 is a block diagram of the present invention for obtaining a single network location data of a network terminal device.

Figure 8 is a diagram showing an application example of the global area illustrated automatic bounce window of the present invention.

Figure 9 is a topographical diagram of a conventional network terminal device.

The embodiments of the present invention are disclosed in detail below by way of specific examples, and those skilled in the art can readily understand the advantages and functions of the present invention from the disclosure herein. Please refer to the figures 1 to 5, wherein the first figure is a schematic diagram of the geographical position of the corresponding display entity of the present invention. Figure 2 is a schematic view showing the configuration of the detector of the present invention. Figure 3 is a block diagram of the present invention. The physical location corresponding to the display network terminal device management system of the present invention mainly includes: a block 101, which sets an IP management network segment to which the management network terminal device 10 belongs (see the same figure 4-1, 4-2); Block 102, actively querying/sniffering the network stream packet Active Query/Sniffer Network Stream Packets through a detector 20, wherein the source data can be obtained by the switch/router in an SNMP manner, and is selected from a network stream including a switch/router. a data packet, an interface table, an ARP table, and a MAC address table; block 103, automatically analyzing and filtering the managed network terminal device 10 for its associated network location data; and block 104, each network terminal device 10 corresponding to a single network Location data; block 105, and then integrated with the network distribution environment plan 30 information; Block 106, corresponding to presenting the physical location 100 of the network terminal device 10, and; block 107, the archive query event is automatically bouncing window 40, as shown in FIG. 5; in implementation, the probe used in the block 102 The device 20 can be a hardware device, and is connected to the general port of the switch/router in a side-by-side manner, and the port is adjusted to the trunk port of the trunk port according to the environment management requirements. Moreover, the frame 106 displays the network terminal device 10 to which the management belongs to the physical location 100 for display. The frame 108 can be further collected into a global area map 300 (eg, Google Map) information integration. 3, 6 shows.

Thereby, as shown in the first, second, and fifth figures, the present invention can effectively provide the physical location of each network terminal device 10 with a comparison record of the physical location of the network, thereby facilitating the filing of the query update and maintenance; and when a violation of the security policy occurs. In the event of an event, the system immediately identifies the geographic location 100 of the entity in which the problematic network terminal device 10 is located in the manner of an automatic bounce window 40, which makes the security management more convenient and straightforward to improve at a glance.

For a preferred implementation, as shown in the first to third and seventh embodiments, the present invention can effectively obtain a single network location data corresponding to each network terminal device 10, mainly by using: block 1031, for the foregoing block 102. Actively querying/sniffering the network stream data packet through a detector 20, and using the data obtained by the network stream data packet and the ARP table, the "IP" address of the managed network terminal device 10 can be collated and obtained. , "MAC" address, and "Host Name" host name and other information; Box 1032, b. Through the "Interface Table" interface table and the "MAC Address Table" MAC address table data can be collated and obtained the managed network terminal "MAC" address of the device 10, "Switch/Router" switch/router, "Port" interface, etc., and; In block 1033, the foregoing block 103 automatically analyzes and selects the network location information of the managed network terminal device 10, and block 104 causes each network terminal device 10 to correspond to a single network location data; and comprehensively compares the above a, b The source data of the two points, with the "MAC" as the base key value, the system can sort out the IP, MAC, host name, switch/router, and interface data of the managed network terminal device 10, that is, "IP--MAC" --Host Name--Switch/Router--Port" network related location data.

Accordingly, the preferred embodiment of the system of the present invention may further include the following (1) to (9) drawings not shown in the above description and the first to eighth figures.

(1) The system is configured to manage the IP management network segment to which the network terminal device 10 belongs, and the probe 20 "Probe" is required to actively query/sniff the network stream data packet according to the information on the IP management network segment. Obtain the required "IP", "MAC", and "Host Name".

(2) The system obtains the required parameter setting information through SNMP Query (Simple Network Management Protocol Query) according to the switch/router Switch/Router to which the management network terminal device 10 belongs, and obtains the required information through the SNMP Protocol (SNMP protocol). The "Interface Table" interface table and the "MAC Address Table" MAC address table.

(3) The network distribution environment plan 30 to which the management network terminal device 10 belongs, including but not limited to the floor plan, is loaded into the management interface of the system.

(4) The information of the "Switch/Router--Port" switch/router interface that has been included in the management is compared with the network distribution environment plan 30 of the internal (3), which is labeled as the corresponding physical location 100.

(5) The system records the "(x, y) coordinate position corresponding to the internal network distribution environment plan 30 in the database; and then matches the "IP--MAC--Host Name--Swi" obtained above. The tch/Router--Port information, the IP--MAC--Host Name information of the network terminal device 10, enables the network terminal device 10 to provide a query corresponding to the physical location 100.

(6) In the past, the information can be quickly learned through a one-click query. When an event that violates the security policy occurs, the system will immediately identify the problematic network terminal device 10 by means of the automatic bounce window 40. The physical location of the entity is 100 (see Figure 5).

In addition, a preferred embodiment of the integrated geographic location 100 of the system network terminal device 10 of the present invention and the global geographic representation 300 (ex: Google Map) information may further include:

(7). The system uses the detector 20 as a reference, and compares the global geographical map 300, including but not limited to Google Map, and the plurality of detectors 20 that are distributed in different areas but have been managed belong to the network terminal device 10 information. Corresponding to the physical location of the entity 200.

(8). The system records the "(x, y) coordinate position" and "(longitude, latitude) coordinate position corresponding to the global geographic icon 300 in the database; and then obtains each detector 20 under the above-mentioned The IP--MAC--Host Name--Switch/Router--Port information file of the management network terminal device 10 provides an inquiry.

(9). The information can be quickly learned through one-click inquiry. When an event that violates the security policy occurs, the system will immediately identify the problematic network terminal device 10 by means of the automatic bounce window 40. The location of the entity to which the detector 20 belongs is 200 (see Figure 8 for the same reference).

Referring to Figures 1 and 2, the effective design of the system of the present invention can indeed help the administrator to face the severe challenge of a large amount of network security information, because each network terminal device 10 in the system is in a physical geographical location. 100 is directly presented, so the network management troubleshooting is eliminated. It is often easy to achieve. For example, a large enterprise 90 usually has a plurality of branches 900 distributed throughout the country, and each branch office 900 uses the physical location corresponding to the display network terminal device management system of the present invention to record records, and usually not only each branch office 900 can be easily updated for the internal network terminal device 10 changes and related security management and maintenance. Once a branch office 900 has a security problem, the physical location 200 of the physical location of the branch 900 can be found directly through the global window icon 300 (see Figure 8). The network location plan 30 can be layer by layer according to the displayed physical location 100 of the entity, and the network terminal device 10 of the problem can be easily found to be directly positioned correspondingly for effective troubleshooting. Keep your network back to normal quickly.

In summary, the novel system of the present invention has significant progress compared with the conventional ones, and also has industrial availability, fully conforms to the patent requirements, and proposes an invention patent application. The above is only the preferred embodiment of the present invention, and the scope of the present invention is not limited thereto; therefore, the simple equivalent changes and modifications made by the scope of the patent application and the content of the invention are All should remain within the scope of the invention patent.

10‧‧‧Network terminal equipment

100‧‧‧ entity location

30‧‧‧Network distribution environment plan

Claims (5)

An entity geographical location correspondingly displays a network terminal device management system, which mainly comprises: setting an IP management network segment to which the management network terminal device belongs; actively querying/sniffering the network flow data packet through a probe, and adopting an SNMP manner by the switch The router obtains the source data, which is selected from the network flow data packet including the switch/router, the interface table, the ARP table, and the MAC address table; automatically analyzes and filters the network terminal equipment of the managed network terminal device; The network terminal device corresponds to a single network location data, and is characterized in that: the probe actively queries/snoops the network stream data packet, and uses a data obtained by the network stream data packet and the ARP table, and Obtain the IP address, MAC address, and host name data of the managed network terminal device; b. Obtain data through the interface table and the MAC address table, and sort and obtain the MAC address, switch/router, and interface data of the managed network terminal device. And c. comprehensively compare the source data of the above two points a and b, and use the MAC as the base key to sort out the IP, MAC, and master of the managed network terminal equipment. Name, switch/router, and interface data, so that each network terminal device corresponds to a single network location data; and then integrates with the network distribution environment floor plan information; and the managed network terminal device corresponds to the physical location Display presentation; thereby, the security management is more directly improved, and it is convenient to file the query update maintenance. For example, the physical location of the entity described in claim 1 corresponds to the display network terminal device management system, wherein the detector can be a hardware device, and is connected to the general port or trunk of the switch/router in a side-by-side manner. mouth. The physical location corresponding to the physical network terminal device management system as described in claim 1 or 2, further comprising: (1) setting an IP management network segment to which the network terminal device belongs, requiring the detector to be based on This information is obtained on the IP management network segment by actively querying/sniffering the network flow data packet to obtain the required IP, MAC, and host name; (2) the system according to the configured management network terminal device belongs to the switch/ The router queries the required parameter setting information through the SNMP simple network management protocol, obtains the required interface table and MAC address table through the SNMP protocol, and (3) manages the network distribution environment plan to which the network terminal device belongs, including It is not limited to the floor plan, and is loaded into the management interface of the system; (4) the information of the switch/router interface that has been included in the management is compared with the plan of the network distribution environment to which it belongs, and is marked as the corresponding physical location; (5) The system records the (x,y) coordinate position corresponding to the internal network distribution environment plan in the database; and then matches the IP, MAC, host name, switch/router, and interface data obtained by the network terminal device. IP, MAC, and host name information are filed, so that the network terminal device provides a query corresponding to the physical location, and (6) quickly learns the phase through a one-click query. Information, when the information security policy violations occur, the system will automatically pop-up window of the way, immediately identify the geographical entity network terminal device where the problem occurred. The physical location of the entity as described in claim 3 is corresponding to the display network terminal device management system, wherein the network terminal device corresponds to a physical geographic location, and is further integrated with the global geographic graphic information. The physical location of the physical location corresponding to the network terminal device management system as described in claim 4, wherein the physical location of the network terminal device is integrated with the global geographic graphic information, and further includes: (7) The system uses the detector as a reference, and the global geographical map, including but not limited to Google Map, will be distributed in different areas but has been included in the management of the complex detectors belonging to the network terminal equipment information, corresponding to the entity Geographical location; (8) The system records the (x, y) coordinate position and the (longitude, latitude) coordinate position corresponding to the global geographical map in the database; and then obtains the management network terminal under each detector with the foregoing The device's IP, MAC, host name, switch/router, and interface data files provide query, and (9) quick access to relevant information through a one-click query. When an event that violates the security policy occurs, the system will In the form of an automatic bounce window, the geographic location of the entity to which the detector of the network terminal device in question is located is immediately identified.