WO2010005082A1 - Vlan communication range specifying system, vlan communication range specifying method, computer-readable recording medium on which vlan communication range specifying program has been stored - Google Patents

Abstract

The VLAN communication range on a switch configuration setting can be specified at a high speed. An index creation processing amount calculation means (91) expresses a communication device by a combination of a VLAN-ID and communication device identification information and calculates index creation processing amounts for each communication device in a network to be managed, wherein the index creation processing amounts are used for creating an index that is a table in which a key communication device is made to correspond, as a value, to a communication device with which the key communication device can communicate.  A partial network specifying means (92) specifies each partial network from the network to be managed so that a total of the index creation processing amounts of the communication devices belonging to a partial network is equalized for each partial network.  A plurality of partial index creation means (93) create a partial index that is an index in which each communication device belonging to a partial network is set as a key communication device.

Description

VLAN communication range specifying system, VLAN communication range specifying method, and computer-readable recording medium recording VLAN communication range specifying program

The present invention relates to a VLAN communication range specifying system, a VLAN communication range specifying method, and a computer readable recording medium recording a VLAN communication range specifying program.

With the recent development of information and communication technology, the networks of companies and organizations are becoming increasingly sophisticated. In particular, LAN (Local Area Network) is widely used as a base of a network connecting personal computers and servers.

A switch is a typical network device that constitutes a LAN. A switch is a device that connects networks, and enables communication between terminals in a LAN. Many recent switch products have a VLAN (Virtual Local Network: Virtual LAN) function, and a switch equipped with the VLAN function enables more complicated communication control. The VLAN is also called a virtual LAN. VLAN is a function for grouping terminals connected to a switch.

VLAN can be logically constructed regardless of the physical connection of the LAN. Even terminals connected to the same switch cannot directly communicate with each other belonging to different VLANs. When communicating terminals belonging to different VLANs, routing using an IP address by a switch having a routing function such as a router or an L3 switch is required.

By using VLAN, packets can be transferred only to specific terminals in the same network, and there are advantages such as reduction of unnecessary traffic and security.

VLAN technology greatly increases the degree of freedom and reliability of communication control. On the other hand, it is difficult for a network administrator or designer to quickly confirm whether the configuration setting of each switch on the network is within the intended VLAN communication range.

This is because the VLAN on the network has a logical configuration that does not depend on the physical configuration of the switch, and the network administrator or designer cannot visually check the communication range of the VLAN. The VLAN communication range represents all connection ports through which packets having an arbitrary VLAN-ID can communicate. In particular, since a network owned by a communication carrier, a large ISP (Internet Service Provider), or the like has thousands of switches, it takes a very long time to check the communication range of the VLAN.

Techniques relating to a method for specifying a VLAN communication range in such an environment are described in Patent Document 1, Patent Document 2, and Non-Patent Document 1.

This type of network verification method and apparatus is used for verifying packet transfer availability and network configuration. An example of a network verification method and apparatus is described in Patent Document 1 (FIGS. 1 and 2, paragraphs 0012-0099).

The network verification method and apparatus described in Patent Document 1 check whether a packet can be communicated at a connection port of each switch on a network to be inspected without using the network. The load of the packet communication inspection work is reduced. At this time, the configuration of each switch is collected and a network model for inspection is created. The network model is a table in which the connection port of each switch and the transfer destination of the packet transmitted from the connection port are specified.

パ ケ ッ ト Use this network model and the inspection request from the network administrator or designer to check whether packets can be transferred. The inspection request is a packet communication state desired by the network administrator or designer. For example, “the connection port 1/1 of the switch A and the connection port 1/2 of the switch B are capable of packet communication”. The network model and the inspection request are described using CTL (Computation Tree Logic) which is one of the modal logics. It verifies whether the network model matches the inspection request and outputs the determination result.

The method and program for grasping the network configuration of the virtual LAN in the node network are used for grasping the actual connection state of the virtual LAN in the Ethernet (registered trademark) network. A node here is synonymous with a switch. An example of a method and program for grasping the network configuration of a virtual LAN in a node network is described in Patent Document 2 (FIGS. 1 and 9, paragraphs 0006-0036).

The method and program for grasping the network configuration of a virtual LAN in a node network described in Patent Document 2 sends a test packet to a network to be inspected, the range of the packet and the packet passing through the node By counting the number of times of transmission, even if the configuration node of the virtual LAN is unknown, it is possible to confirm whether or not packets can be communicated between the configuration nodes, the communication range, and the network configuration of the virtual LAN.

At this time, response packets returned from other nodes to the node that sent the inspection packet are collected, and information necessary for grasping the connection state of the virtual LAN is extracted. The information includes the IP address and connection port number of the node that sent the response packet, the number of times the node has passed from the inspection packet, and the like. Using this information, the network configuration of the virtual LAN is output.

In addition, the secure VLAN analysis system based on the table overlay method is used for specifying the connection ports of all switches within the communication range of an arbitrary VLAN at high speed. An example of a secure VLAN analysis system using a table overlay method is described in Non-Patent Document 1.

The secure VLAN analysis system based on the table overlay method described in Non-Patent Document 1 inspects the connection port of each switch on the network that can communicate with an arbitrary VLAN in advance and indexes the result. The index is a table of results of examining communication states between all VLAN-IDs registered in all switches and a table of results of examining VLAN-IDs set in connection ports of all switches. Consists of two tables.

When a network administrator or designer checks the communication range of an arbitrary VLAN, first use the table of the results of checking the communication status between all VLAN-IDs registered in all switches, and use the VLAN and VLAN VLAN-ID of the switch in which a communicable VLAN is set using the table of the result of checking the VLAN-ID set in the connection port of all the switches. The communication range is obtained by inspecting.

JP 2005-218038 A JP 2005-328318 A

In the method described in Patent Document 1, only whether or not communication between any two connection ports (1: 1) can be confirmed by one inspection, and registered in any connection port or switch by one inspection. All the connection ports (1: N) on the network that can communicate with the VLAN are not known, and it is not possible to meet the request of the network manager or designer who wants to know the communication range of the VLAN in the switch configuration settings.

Further, in a large-scale network having thousands of switches, it takes time to check all connection ports (1: N) on a network that can communicate with an arbitrary connection port or a VLAN registered in an arbitrary switch. Therefore, it cannot meet the demands of network managers and designers who want to know the VLAN communication range in the switch configuration settings in a large-scale network at high speed.

The method described in Patent Document 2 can only check whether or not a packet flows on an arbitrary VLAN, and does not know whether or not the switch configuration setting intended by the network administrator or designer is present. Therefore, it cannot meet the demands of network managers and designers who want to know the communication range of the VLAN in the switch configuration settings.

In addition, it is not considered to increase the speed of specifying the VLAN communication range when targeting a large-scale network with thousands of switches, and the VLAN communication range on the switch configuration setting in the large-scale network is increased. It cannot meet the demands of network administrators and designers who want to know.

The method described in Non-Patent Document 1 creates an index for specifying the communication range of a VLAN, but does not consider the type of communication protocol used on the network, and depends on the characteristics of the communication protocol. Depending on the communication control, it may not be possible to correctly check whether communication between VLANs is possible, and the communication range of the VLAN cannot be accurately specified. In addition, network redundancy is not taken into consideration, and when a plurality of communication paths exist due to network redundancy, it is not known which path a given VLAN passes through, and the communication range of the VLAN cannot be accurately specified.

In addition, the scale of the target network is not taken into account, and when the target network is a large network with more than 1,000 switches, it takes time to create an index, and the VLAN communication range that is the original purpose As a result, there is a possibility that it takes a long time to specify, or that the creation of the index cannot be completed and the communication range of the VLAN cannot be specified. Due to such a problem, there is a case where it is not possible to meet a request from a network administrator or a designer who wants to know a VLAN communication range on a switch configuration in a large-scale network at high speed.

Accordingly, the present invention provides a VLAN communication range specifying system, a VLAN communication range specifying method, and a VLAN capable of specifying a VLAN communication range on a switch configuration setting at high speed in managing a VLAN on a large-scale network including a large number of switches. It is an object of the present invention to provide a computer-readable recording medium in which a communication range specifying program is recorded.

The VLAN communication range specifying system of the present invention represents a communication device by a combination of a VLAN-ID and communication device identification information, and associates the communication device that can communicate with the communication device as a key as a value. The index creation processing amount calculation means for calculating the index creation processing amount for creating an index, which is a table, for each communication device in the managed network, and the total of the index creation processing amount of the communication devices belonging to the partial network are individually A plurality of partial network identification means for defining individual partial networks from the managed network and a partial index that is an index having each communication device belonging to the partial network as a key. With partial indexing means .

In the VLAN communication range specifying method of the present invention, the index creation processing amount calculation means represents a communication device by a combination of VLAN-ID and communication device identification information, and the communication device can communicate with a key communication device. An index creation processing amount for creating an index, which is a table in which various communication devices are associated as values, is calculated for each communication device in the managed network, and the partial network specifying unit indexes the communication devices belonging to the partial network. Each partial network is determined from the managed network so that the total amount of creation processing is leveled for each partial network, and a plurality of partial index creation means use each communication device belonging to the partial network as a key. Create a partial index that is an index.

The computer-readable recording medium on which the VLAN communication range specifying program of the present invention is recorded represents a communication device on the computer by a combination of VLAN-ID and communication device identification information. Belongs to a partial network, and an index creation processing amount calculation process for calculating an index creation processing amount for creating an index that is a table in which communication devices capable of communicating with each other as values are created for each communication device in the managed network A partial network specifying process for determining each partial network from the managed network, and each communication device belonging to the partial network as a key so that the total amount of indexing processing of the communication equipment is leveled for each partial network. Partial index When a dex is created, starting from one of the keys of each partial index, using a check rule that determines whether communication is possible from the communication device that is the key in the partial index to the communication device that is the value, A program for executing a VLAN communication range specifying process for specifying a range in which communication can be performed from a communication device is recorded.

According to the present invention, in the management of VLAN on a large-scale network including a large number of switches, the communication range of the VLAN on the switch configuration setting can be specified at high speed. As a result, the network manager or designer can accurately and quickly confirm the VLAN communication range on the switch configuration setting in a large-scale network.

FIG. 1 is a block diagram showing a configuration example of the first embodiment of the present invention. FIG. 2 is an explanatory diagram showing an example of a switch configuration. FIG. 3 is an explanatory diagram showing an example of a switch configuration. FIG. 4 is an explanatory diagram showing an example of switch connection configuration information. FIG. 5 is an explanatory diagram showing an example of a switch information table. FIG. 6 is an explanatory diagram showing an example of the index creation processing amount table. FIG. 7 is a flowchart showing an example of processing for calculating the index creation processing amount of each switch. FIG. 8 is an explanatory diagram showing an example of the operation of the index creation processing amount calculation means. FIG. 9 is a flowchart showing an example of processing for dividing the network by the network dividing means. FIG. 10 is an explanatory diagram showing an example of the progress of processing in which the network dividing means divides the network. FIG. 11 is an explanatory diagram showing an example of a partial network information table. FIG. 12 is an explanatory diagram showing an example of each table created as pre-processing for creating a partial index, and a partial index. FIG. 13 is a flowchart showing a process for creating a routing table. FIG. 14 is a flowchart showing processing for creating a subnet address table. FIG. 15 is a flowchart showing an example of processing for creating a partial index. FIG. 16 is an explanatory diagram showing an example of a subnet address table. FIG. 17 is an explanatory diagram showing an example of a connection switch table. FIG. 18 is an explanatory diagram showing an example of partial networks and partial indexes created for each partial network. FIG. 19 is an explanatory diagram showing an example of an inspection rule set. FIG. 20 is a flowchart showing an example of processing for specifying the communication range of the VLAN. FIG. 21 is an explanatory diagram showing an example of processing in which the VLAN communication range specifying means specifies the VLAN communication range. FIG. 22 is a block diagram showing a configuration example of the second embodiment of the present invention. FIG. 23 is an explanatory diagram showing the flow of processing for creating a partial index again after the configuration is corrected. FIG. 24 is a flowchart showing an example of processing in which the index re-creation determination unit specifies a partial network in which a partial index should be re-created. FIG. 25 is an explanatory diagram showing an example of a partial network information table before and after correction. FIG. 26 is an explanatory diagram showing an outline of the present invention.

Hereinafter, embodiments of the present invention will be described with reference to the drawings.

Embodiment 1. FIG.
FIG. 1 is a block diagram showing a configuration example of the first embodiment of the present invention. As shown in FIG. 1, the VLAN communication range specifying system 100 of the present invention is provided with an input device 230 and an output device 240. The VLAN communication range specifying system 100 includes a management information processing apparatus 110 and a partial index creation information processing apparatus 120.

Hereinafter, the case where the management information processing apparatus 110 and the partial index creation information processing apparatus 120 are PCs (personal computers) will be described as an example. The former is referred to as a management PC, and the latter is referred to as a processing PC. The VLAN communication range specifying system 100 itself may include an input device 230 and an output device 240.

The management PC 110 includes an index creation processing amount calculation unit 130, an index creation processing amount storage device 140, a network dividing unit 150, a partial network information storage device 160, a partial network information transmission unit 170, and a partial index storage device 190. The inspection rule storage device 200, the VLAN communication range specifying means 210, and the failure location specifying means 211 are provided.

The processing PC 120 includes a partial index creation means 180. Here, the number of processing PCs 120 may be one or plural. Each processing PC 120 may be an information processing apparatus including a single CPU (arithmetic apparatus) or may be an information processing apparatus including a plurality of CPUs (arithmetic apparatus).

The network device information set 220 is input to the management PC 110 via the input device 230. The network device information set 220 is an information group in which the configuration of each switch of the network to be inspected and the switch connection configuration information that is information indicating the physical connection configuration of the switch are combined. The configuration is setting information indicating the setting contents of each switch. Here, the switches may include not only switch devices such as L2 switches and L3 switches but also routers having a VLAN function.

The input device 230 inputs the network device information set 220 to the VLAN communication range specifying system 100. In other words, the configuration of each switch in the network and the switch connection configuration information are input to the index creation processing amount calculation means 130.

The index creation processing amount calculation unit 130 uses the network device information set 220 (that is, the configuration of each switch and the switch connection configuration information) input by the input device 230 to check the VLAN communication range in each switch. The amount of processing required to create A specific processing procedure of the index creation processing amount calculation unit 130 will be described later. This index is a hash table in which VLAN-ID (VLAN identification information) registered in the switch is KEY (key), and VLAN-ID of another switch with which the KEY can communicate is VALUE (value). Specifically, it indicates a partial index described later.

The index creation processing amount storage device 140 is a storage device that stores the index creation processing amount of each switch calculated by the index creation processing amount calculation means 130.

The network dividing unit 150 divides the network using the index creation processing amount of each switch stored in the index creation processing amount storage device 140. A specific processing procedure of the network dividing unit 150 will be described later.

The partial network information storage device 160 is a storage device that stores configuration and switch connection configuration information for each partial network divided by the network dividing means 150.

The partial network information transmission unit 170 transmits the configuration for each partial network and the switch connection configuration information stored in the partial network information storage device 160 to each processing PC 120. A specific processing procedure of the partial network information transmitting unit 170 will be described later.

The partial index creating unit 180 uses the configuration for each partial network and the switch connection configuration information transmitted by the partial network information transmitting unit 170 to specify an index (partial index described later) for specifying the VLAN communication range of the partial network. create. A specific processing procedure of the partial index creating unit 180 will be described later.

The partial index storage device 190 is a storage device that stores an index for each partial network created by the partial index creation means 180.

The inspection rule storage device 200 is a storage device that stores an inspection rule for specifying the communication range of the VLAN. Specific contents of the inspection rules stored in the inspection rule storage device 200 will be described later.

The VLAN communication range specifying unit 210 specifies the VLAN communication range by using the index for each partial network stored in the partial index storage device 190 and the inspection rule stored in the inspection rule storage device 200. A specific processing procedure of the VLAN communication range specifying unit 210 will be described later.

The failure location designation unit 211 is an input device that receives information about a switch that is assumed to have a failure from a network administrator or designer, and transmits the switch information to the VLAN communication range identification unit 210. For example, This is realized by an input device such as a keyboard. The VLAN communication range specifying unit 210 receives information of a switch that is assumed to have a failure from the failure location specifying unit 211.

The output device 240 outputs the VLAN communication range specified by the VLAN communication range specifying means 240. The output device 230 is realized by, for example, a display device, but the VLAN communication range may be output in an output mode other than display.

The index creation processing amount calculation unit 130, the network division unit 150, the partial network information transmission unit 170, the partial index creation unit 180, and the VLAN communication range identification unit 210 operate according to a program (VLAN communication range identification program), for example. It is realized by the CPU that performs. The index creation processing amount calculating unit 130, the network dividing unit 150, the partial network information transmitting unit 170, and the VLAN communication range specifying unit 210 may be realized by the same CPU.

The program is stored in, for example, a program storage device (not shown) provided in the management PC 110. The CPU may read the program and operate as the index creation processing amount calculation unit 130, the network division unit 150, the partial network information transmission unit 170, and the VLAN communication range identification unit 210 according to the program.

The partial index creating means 180 is also realized by the CPU of the processing PC 120 that operates according to a program, for example. Further, the partial index creation unit 180 may be included in the management PC 110, and the CPU of the management PC 110 may perform the operation as the partial index creation unit 180 together with the operation as the index creation processing amount calculation unit 130 according to the program.

The index creation processing amount storage device 140, the partial network information storage device 160, the partial index storage device 190, and the inspection rule storage device 200 are realized by a storage device such as a hard disk, for example. The index creation processing amount storage device 140, the partial network information storage device 160, the partial index storage device 190, and the inspection rule storage device 200 may be independent storage devices or may be realized by a single storage device. Good.

For example, the input device 230 extracts a configuration described in a format independent of the switch from a configuration described in a format dependent on the switch of each manufacturer, and switch connection configuration information. This is an interface between the switch connection configuration information extracting device (not shown) for extracting the network communication range and the VLAN communication range specifying system 100.

In this case, the input device 230 is extracted by a configuration (a configuration described in a switch-independent format) extracted by a configuration extraction device (not shown) and a switch connection configuration information extraction device (not shown). The switch connection configuration information may be input to the management PC 110. The input mode of the configuration and switch connection configuration information is not limited to the above example.

Although not shown, the VLAN communication range specifying system 100 includes starting point information input means (not shown) for inputting a switch name and VLAN-ID by a network administrator or designer. When the VLAN-ID and the switch information (switch name, etc.) are input via the origin information input means (not shown), the VLAN communication range specifying means 210 receives the VLAN-ID that has been set. Specify the communication range from the switch.

The above-described configuration extraction device (not shown) and switch connection configuration information extraction device (not shown) are, for example, computers that operate according to a program.

A program for operating the switch connection configuration information extraction device (not shown) may be realized using SNMP (Simple Network Management Protocol) management function and MIB (Management Information Base) information implemented in various network devices. . SNMP is a network management protocol and is one of the technologies for managing information related to the configuration and operation of network devices.

MIB refers to a collection of information related to the configuration and operation of network devices. The VLAN communication range specifying system 100 may perform an operation of extracting the switch connection configuration information by using network management software having a function of collecting the switch connection configuration information by SNMP or MIB. Further, the switch connection configuration information may be manually created and used.

2 and 3 are explanatory diagrams showing examples of switch configurations. FIG. 2 is an example of the configuration of the L2 switch, and FIG. 3 is an example of the configuration of the L3 switch. A configuration extraction device (not shown) collects configurations from each switch and extracts setting information regarding VLAN communication from the configurations. Of the config, the setting information related to the VLAN communication is referred to as VLAN communication information.

The VLAN communication information includes at least information indicating the correspondence between the switch name, VLAN-ID, and connection port. Further, when the switch routing function is enabled, the switch routing function is enabled. When the subnet address is set in the VLAN-ID, information that can specify the subnet address is included.

In addition, the VLAN communication information extracted from the configuration of the L3 switch includes information that can specify other switches having a redundant configuration and information that indicates which one is used preferentially in a switch having a redundant configuration. Since the L2 switch does not have a redundant configuration, information regarding the redundant configuration is not described in the configuration of the L2 switch. The VLAN-ID is an identification number for identifying each VLAN, and may be referred to as a VID. The VLAN communication information may include other information. For example, when a filtering rule corresponding to the connection port exists, information that can specify the filtering rule may be included.

For example, the first line of the configuration shown in FIG. 2 is VLAN communication information indicating that the switch name is “AAAA”. Note that the switch name is also described in the header information described at the top of the config. The switch name described in the header information of the config is not a switch name determined by the network administrator or the designer for convenience, but is a predetermined switch name. From the switch name, the switch type (L2 switch or , L3 switch or router).

Also, the line starting from the character string “set vlan portbase” and the line starting from the character string “set vlan tagbase” shown in FIG. 2 are VLAN communication information that defines the correspondence between the connection port and the VLAN-ID. For example, “set vlan portbase 1/1 10” means “VLAN-ID = 10 is set for connection port 1/1”. Further, “set vlan tagbase 1/8 10, 20” indicates that “VLAN-ID = 10 and 20 are set in connection port 1/8”.

Also, “set vlan portbase 10 vid10” means that “name of“ vid10 ”uniquely defined by the network administrator or designer is set for VLAN-ID = 10”. Note that “port” means a connection port in which only one VLAN-ID is set, and “tag” means a connection port in which a plurality of VLAN-IDs can be set. The same applies to the example shown in FIG.

In addition, the line starting with the character string “set filter profile” shown in FIG. 2 indicates a filtering rule, and the line starting with “set filter in-port” or “set filter out-port” corresponds to the connection port. VLAN communication information indicating a filtering rule.

For example, “set filter in-port 4/1/10 1” shown in FIG. 2 indicates that the filtering rule corresponding to “connection port 4/1 (VLAN-ID = 10) is the first filtering rule (see FIG. 2). In the example shown, “set filter profile 1 block src-ip 10.10.10.1 255.255.255.0”) ”is shown. Note that in all embodiments of the present invention, the VLAN communication information may not include information regarding such filtering rules.

Also, the first line of the configuration shown in FIG. 3 is VLAN communication information indicating that the switch name is “BBBB”. Note that the switch name is also described in the header information described at the top of the config. The switch name described in the header information of the config is not a switch name determined by the network administrator or the designer for convenience, but is a predetermined switch name. From the switch name, the switch type (L2 switch or , L3 switch or router).

Also, the second and third lines shown in FIG. 3 are filtering rules associated with connection ports. Note that in all embodiments of the present invention, the VLAN communication information may not include information regarding such filtering rules.

Also, the combination of the line starting with “interface vlan” and the line starting with “ip address” shown in FIG. 3 is VLAN communication information indicating an address corresponding to the connection port. For example, “interface address lan 10” and “ip address 192.168.10.1/24” in the next line are “VLAN-ID = 10 subnet address is“ 192.168.10.1/24 ”. There is.

“Interface vlan” is a command that designates a VLAN-ID. For example, a command “interface vlan 10” designates “VLAN-ID = 10”. “Ip address” is a subnet address setting command for setting an address (subnet address) to the specified VLAN-ID.

Also, the combination of the line starting with “interface Ethernet” and the line starting with “bridge-group” shown in FIG. 3 is VLAN communication information that defines the correspondence between the connection port and the VLAN-ID. For example, “interface Ethernet 1/1” and “bridge-group 10 port” in the next line mean “VLAN-ID = 10 is set in connection port 1/1”.

Further, “router rip” shown in FIG. 3 is VLAN communication information indicating that the routing function of the switch (“BBBB” in this example) is effective.

Further, the description “gsrp numerical value” shown in FIG. 3 is VLAN communication information for specifying another switch having a redundant configuration. Information of “gsrp numerical value” is described in the configuration of the switch having a redundant configuration using the same numerical value. The redundant switches are two switches that operate when one switch operates normally and the other switch operates when a failure occurs in the switch.

The configuration shown in FIG. 3 includes a description “gsrp 100”, so that it is understood that the configuration is redundant with other switches including the description “gsrp 100” in the configuration. Further, the description “vlan-group group number vlan numerical value” is information for setting a group number for a VLAN of a switch having a redundant configuration. For example, “vlan-group 1 vlan 10” means “set group number“ 1 ”to VLAN-ID“ 10 ””. The “vlan-group group number priority numerical value” is information for determining a switch to be a master machine in a redundant switch.

For each group number, the switch with the larger value after “priority” becomes the master unit. Here, the “master machine” is a device normally used for packet transfer among the two redundant devices. Further, another device (switch) that operates when packet transfer cannot be performed due to a failure of a switch serving as a master device is referred to as a backup device. In addition to the name master / backup, the names master / slave and primary / secondary may be used.

The above information is extracted from the config as VLAN communication information. In the following description, a case where VLAN communication information is extracted as information in the format shown in FIGS. 2 and 3 will be described as an example.

In addition, the description part of the number of connection ports of the switch in the configuration also corresponds to the VLAN communication information, and the VLAN communication information may be included in the network device information set 220.

FIG. 4 is an explanatory diagram showing an example of switch connection configuration information. As shown in FIG. 4, each switch connection configuration information includes a configuration number, a transmission source switch name, a transmission source connection port, a destination switch name, and a destination connection port. The configuration number is a unique value assigned to individual switch connection configuration information. The configuration number may be a unique character string for each switch connection configuration information.

In FIG. 4 and the following description, the source connection port and the destination connection port are represented as “slot number / connection port number”. A slot is a board equipped with a plurality of connection ports. For example, the switch connection configuration information of configuration number 1 shown in FIG. 4 is “a transmission source connection port whose transmission source switch name is A and is represented by 1/1, and whose destination switch name is B and is represented by 1/1. This represents a physical connection configuration between the switches “connected to the destination connection port”.

Next, the operation of the first embodiment will be described. The input device 230 inputs the VLAN communication information set 220 to the index creation processing amount calculation unit 130 of the VLAN communication range specifying system 100. Specifically, the VLAN communication information set 220 is a configuration (VLAN communication information) and switch connection configuration information of each switch.

The index creation processing amount calculation means 130 creates a switch information table using the configuration (VLAN communication information) and switch connection configuration information of the network device information set 220 input from the input device 230, and uses the switch information table. Then, the index creation processing amount of each switch is obtained, and an index creation processing amount table is created. The index creation processing amount calculation unit 130 stores the created index creation processing amount table in the index creation processing amount storage device 140.

FIG. 5 shows an example of the switch information table. The switch information table is a table that represents various types of switch information necessary to calculate the index creation processing amount. Specifically, the switch information table is information in which a switch name, the number of VLANs registered in the switch, the number of LAN cables inserted in the switch, and presence / absence of routing of the switch are associated with each other.

FIG. 6 shows an example of the index creation processing amount table. The index creation processing amount table is a table representing the index creation processing amount of each switch necessary for the network dividing unit 150 to divide the network. Specifically, the index creation processing amount table is information in which switch names are associated with index creation processing amounts.

Hereinafter, the processing procedure of the index creation processing amount calculation means 130 will be described. FIG. 7 is a flowchart illustrating an example of processing in which the index creation processing amount calculation unit 130 calculates the index creation processing amount of each switch. FIG. 8 is an explanatory diagram showing an example of the operation of the index creation processing amount calculation means 130.

First, the index creation processing amount calculation unit 130 uses the VLAN communication information of the VLAN communication information set 220 to identify a switch having a redundant configuration, and regards two redundant switches as one switch (step A1). ). That is, two redundant switches having a redundant configuration are specified, and it is determined that the two switches are handled as one. At this time, the two switches in which the same numerical value is described together with a predetermined character string such as “gsrp” in the configuration may be determined as the switches having a redundant configuration.

For example, in the network A310 shown in FIG. 8A, it is assumed that the switch A and the switch B, the switch C and the switch D, and the switch E and the switch F have a redundant configuration as a result of referring to the VLAN communication information of each switch. In this case, the index creation processing amount calculation unit 130 regards the switches A and B as one switch as in the network B320 illustrated in FIG.

The switches C and D and the switches E and F are also regarded as one switch. If a network is divided between two switches having a redundant configuration, it becomes impossible to specify a master / backup for each VLAN in creating an index of a partial network. Therefore, by performing the process of step A1, the network is not divided between two redundant switches.

After step A1, the index creation processing amount calculation means 130 uses the VLAN communication information of the VLAN communication information set 220 to extract the switch name of each switch, the number of VLANs, the number of LAN cables, and the presence / absence of routing, A switch information table is created by associating the extracted information for each switch (step A2). As a result, the switch information table illustrated in FIG. 5 is obtained.

For example, in the first line of the switch information table illustrated in FIG. 5, the switch name is “AB”, the number of VLANs is “10”, the number of LAN cables is “10”, and the presence / absence of routing is “present”. It has become. When the index creation processing amount calculation unit 130 regards two redundant switches having a redundant configuration as one switch in step A1, the index creation processing amount calculation unit 130 regards a character string obtained by integrating the names of the two switches as one unit. It may be the switch name of a switch. Alternatively, a unique switch name may be arbitrarily determined.

Further, when the index creation processing amount calculation unit 130 regards two redundant switches having a redundant configuration as one switch in Step A1, the number of VLANs and the number of LAN cables of the switches regarded as one are: Each may be determined as the sum of the two VLANs and the sum of the LAN cables. In addition, the presence or absence of routing of a switch regarded as one unit is set to have routing when one or both of the two switches are routable, and otherwise is set to no routing.

Finally, the index creation processing amount calculation means 130 refers to the switch information table created in the process of A2, and calculates the index creation processing amount for each switch by calculating the index creation processing amount calculation formula. Then, for each switch, an index creation processing amount table is created by associating the switch name with the index creation processing amount (step A3).

When the switch has a routing function, the index creation processing amount calculation unit 130 calculates the index creation processing amount according to the following equation (1).

Index creation processing amount = VLAN number x (VLAN number + LAN cable number) Formula (1)

Further, the index creation processing amount calculation means 130 calculates the index creation processing amount according to the following equation (2) when the switch does not have a routing function.

Index creation processing amount = VLAN number x Number of LAN cables Equation (2)

For example, when calculating the index creation processing amount in the first row of the index creation processing amount table shown in FIG. 6, the switch name is “AB”. The index creation processing amount calculation unit 130 refers to the presence or absence of routing of the switch name “AB” in the switch information table shown in FIG. Then, since “routing is present”, the index creation processing amount calculation unit 130 calculates the index creation processing amount as 10 × (10 + 10) = 200 using Expression (1). The index creation processing amount calculation means 130 calculates the index creation processing amount for other switches using the formula (1) or formula (2), and completes the index creation processing amount table.

FIG. 8B shows a result of obtaining the index creation processing amount obtained in step A3 for each switch. The index creation processing amount calculation unit 130 stores the completed index creation processing amount table in the index creation processing amount storage device 140. At this time, the index creation processing amount calculation unit 130 also stores the configuration and switch connection configuration information in the index creation processing amount storage device 140.

The network dividing unit 150 uses the index creation processing amount table stored in the index creation processing amount storage device 140 to divide the network according to the number of processing PCs 120 and create a partial network information table. The partial network information table is a table representing a connection state between switches and partial networks included in the divided partial networks.

Specifically, the partial network information table is a table in which each switch name included in a divided network (partial network), a processing PC name, and a switch name of another partial network connected to the partial network are associated with each other. is there. The processing PC name is a processing PC name that creates a partial index corresponding to the partial network. The network dividing unit 150 stores the created index creation processing amount table in the partial network information storage device 160. The processing procedure of the network dividing unit 150 will be described below.

FIG. 9 is a flowchart showing an example of processing in which the network dividing unit 150 divides the network. FIG. 10 is an explanatory diagram showing an example of a process in which the network dividing unit 150 divides the network. FIG. 11 is an explanatory diagram showing an example of a partial network information table created by the network dividing unit 150. Here, a case where the number of network divisions is set equal to the number of processing PCs 12 will be described as an example.

Further, a case where there are two processing PCs 120 and the network is divided into two partial networks will be described as an example. However, the number of divisions may be determined by other methods. For example, when the management PC 110 includes a division number input means (not shown) for inputting a network division number from a network administrator or a designer, and divides the network into the division numbers input via the division number input means. It may be determined.

First, the network dividing unit 150 calculates an ideal value of the index creation processing amount in each partial network after the network division (hereinafter simply referred to as an ideal value of the index creation processing amount) (step B1). The ideal index creation processing amount is a value obtained by dividing the total index creation processing amount of all the switches by the number of network divisions, and is an average value of the index creation processing amount.

Therefore, the network dividing unit 150 may calculate the ideal index processing amount by dividing the sum of the index creation processing amounts of all the switches by the number of network divisions. For example, if the index creation processing amount table illustrated in FIG. 6 is stored in the index creation processing amount storage device 140, the network dividing unit 150 calculates (200 + 200 + 375 + 20 + 20 + 10 + 2) / 2≈414, and the index after the network partitioning The creation processing amount ideal value is 414.

Next, the network dividing unit 150 selects the switch with the smallest number of inserted LAN cables and the smallest index creation processing amount from the switches (step B2). For example, in the network D410 shown in FIG. 10, the switches with the smallest number of inserted LAN cables are G, H, I, and J (see FIG. 5), and among them, the switch with the smallest index creation processing amount is , J.

Therefore, in this case, the network dividing means 150 selects J. Here, if there are multiple switches with the minimum number of inserted LAN cables and the least amount of index creation processing, “the switch must have a smaller number of VLANs” or “a switch with a smaller number of config lines” Add a condition such as “is” to uniquely identify a switch that satisfies the condition.

After step B2, the network dividing unit 150 selects the index creation processing amount from the switch connected by the LAN cable to the switch selected in step B2, and selects the index creation processing amount in step B2. This is added to the index creation processing amount of the switch (step B3).

For example, in the network shown in FIG. 10A, the switch connected to the switch J by the LAN cable is EF. Accordingly, the network dividing unit 150 adds 375, which is the index creation processing amount of the switch EF, to the index creation processing amount of the switch J selected in step B2. That is, 2 + 375 = 377 is calculated.

Suppose that the switch selected in step B2 (J in this example) is referred to as a reference switch. Further, steps B3 and B4 may be repeated by a loop process. In this loop processing, when executing step B3 again, the network dividing means 150 adds the index creation processing of the switch newly selected in step B3 to the added value of the index creation processing amount calculated up to the previous step B3. Add the amount.

In addition, when step B3 is executed again in the loop processing of steps B3 and B4, if all the switches directly connected to the reference switch have been selected, the network dividing unit 150 passes the switch selected in step B3 that has already been executed. From the switches indirectly connected to the reference switch, the one with the smallest index creation processing amount may be selected.

Subsequent to step B3, the network dividing unit 150 determines the difference between the index creation processing amount of the reference switch (the switch selected in step B2) and the ideal index creation processing amount, and the index creation processing amount calculated in step B3. The difference between the index creation processing amount and the ideal value is calculated. Then, the absolute value of the difference between the index creation processing amount calculated in step B3 and the ideal index creation processing amount is greater than the absolute value of the difference between the index creation processing amount of the reference switch and the ideal index creation processing amount. It is confirmed whether it is larger (step B4).

However, if the loop processing of steps B3 and B4 has been repeated and step B4 has already been executed, the network dividing means 150 determines the smaller of the absolute values of the two differences obtained in the previous step B4. The absolute value of the difference between the index creation processing amount calculated in step B3 and the index creation processing amount ideal value is compared, and the absolute value of the difference between the index creation processing amount and the index creation processing amount ideal value calculated in step B3 Check if is larger.

When the absolute value of the difference between the index creation processing amount calculated in step B3 and the index creation processing amount ideal value is larger (Yes in step B4), the network dividing unit 150 cancels the immediately preceding step B3, The switches selected up to the previous step B3 are divided into one group (step B5). Canceling the process in the immediately preceding step B3 means removing the switch selected in the immediately preceding step B3 from the selection target.

Therefore, the reference switch selected in step B2 and each switch selected up to the previous step B3 are divided into one group from the original network. In step B5, the network dividing unit 150 creates a partial network information table related to the partial network determined to be divided. Alternatively, in step B5, a group (partial network) of switches to be divided may be defined, and after all the partial networks are defined, a partial network information table relating to each partial network may be created.

If the absolute value of the difference between the index creation processing amount calculated in step B3 and the index creation processing amount ideal value is smaller, the process returns to step B3, and the processing after step B3 is repeated.

For example, FIG. 10B shows an example in which step EF is selected in step B3, and an added value (2 + 375 = 377) of the index creation processing amount is calculated. Then, the difference (absolute value) between the index creation processing amount of the reference switch and the ideal value of the index creation processing amount is calculated to be | 2−414 | = 412. Further, when the difference (absolute value) between the index creation processing amount calculated in Step B3 and the index creation processing amount ideal value is calculated, | 377-414 | = 37 (see FIG. 10B). Then, since the value of the latter difference is smaller (No in Step B4), the process returns to Step B3.

When returning to step B3, since all the switches directly connected to the reference switch J have already been selected, the network dividing means 150 includes the switch AB and the switch AB connected indirectly to the reference switch J via the switch EF selected in step B3. From the switches I, the switch I with the smallest index creation processing amount is selected.

Then, the index creation processing amount (10) of the switch I is added to the addition value (377) of the index creation processing amount calculated so far, and the addition result 387 is obtained. In the subsequent step B4, the network dividing means 150 compares the difference | 387-414 | = 27 between the added value and the ideal index creation processing amount with the smaller value 37 obtained in the previous step B4. (See FIG. 10C). Here, since the former is smaller (No in step B4), the process returns to step B3.

Returning to Step B3, the network dividing unit 150 selects the switch AB, and adds the index creation processing amount (200) of the switch AB to the addition value (387) of the index creation processing amount calculated so far. The addition result 587 is obtained. In the subsequent step B4, the network dividing means 150 compares the difference | 587-414 | = 173 between the added value and the index creation processing amount ideal value with the smaller value 27 obtained in the previous step B4. (Refer to step 10 (d)).

Here, since the former is larger, the process proceeds to step B5. That is, the network dividing unit 150 does not include the switch AB selected in the previous step B3, and divides the reference switch J and the switches EF and I selected up to the previous step B3 as one group from the original network. .

After step B5, the network dividing means 150 confirms whether or not the original network has been divided into the required number of partial networks (step B6). If the necessary number of partial networks have been divided (Yes in step B6), the process is terminated. On the other hand, when the necessary number of partial networks have not been divided (No in step B6), the network dividing means 150 targets the portion of the original network that has not been divided as the partial network, and the steps subsequent to step B2. Repeat the process.

FIG. 10 shows an example in which the number of network divisions is two. Accordingly, by dividing the group of the switches EF, I, and F, two groups can be formed together with the remaining switches AB, CD, G, and H (see FIG. 10E). Do not repeat the loop process.

For example, by defining the partial network as described above, the index creation processing amount for each partial network is leveled.

In addition, when the division | segmentation number of a network is divided more than the number of the process PC120, you may integrate a part of partial network according to the number of the process PC120. At this time, it is preferable to integrate partial networks having a small sum of index creation processing amounts of all the switches in each partial network. Note that the network division processing procedure is not limited to this processing procedure, and any method can be used as long as the total amount of index creation processing of each partial network can be divided as evenly as possible. Good.

As already described, the network dividing unit 150 may create a partial network information table related to the divided partial network in step B5. Alternatively, in step B5, partial networks to be divided may be determined, and after all the partial networks are determined (when it is determined Yes in step B6), a partial network information table regarding each partial network may be created.

The network dividing unit 150 creates a partial network information table by associating the switch name of each switch included in the partial network, the switch name of another partial network connected to the partial network, and the processing PC name. It is preferable to assign a PC name of a processing PC having a higher processing speed to a partial network having a larger sum of index creation processing amounts of all the switches included in the partial network, but the processing PC may be assigned by other methods. In this example, the partial network information table illustrated in FIG. 11 is generated.

The network dividing unit 150 creates the partial network information table and then stores the partial network information table in the partial network information storage device 160. At this time, the configuration and switch connection configuration information is disassembled for each partial network, the switch belonging to the partial network, the configuration of the switch connecting the partial networks, and the switch connection configuration information indicating that the partial networks are connected to each other. In addition, the data is stored in the partial network information storage device 160.

For example, when storing the partial network information table of the partial network including the switches EF, I, and J, the configurations of the switches IF, I, and J, the configurations of the switches AB of other partial networks that connect the partial networks, and AB The switch connection configuration information indicating that EF and AB are connected by a LAN cable is also stored in the partial network information storage device 160 together with the partial network information table.

The partial network information transmission unit 170 stores the configuration of each partial network, the switch connection configuration information, and the partial network information table stored in the partial network information storage device 160 in the partial index creation unit 180 of each processing PC 120. Send. At this time, the partial network information transmitting unit 170 associates the name of the processing PC corresponding to the “other partial network” with the partial index creating unit 180 in association with the switch that is the switch of the other partial network in the partial network information table. Send. The protocol used by the partial network information transmitting unit 170 is not particularly limited.

For example, the partial network information transmission means 170 may transmit a partial network information table or the like using a protocol such as HTTP (HyperText Transfer Protocol) or FTP (File Transfer Protocol), or may be transmitted using another protocol. Also good. The partial network information transmitting unit 170 transmits the partial network information table to the processing PC defined for the partial network in the partial network information table.

As already described, a partial network having a larger sum of index creation processing amounts of all switches included in the partial network is assigned a PC name of a processing PC having a higher processing speed, and a portion related to a partial network having a larger sum of index creation processing amounts. Although it is preferable to transmit the network information table to the processing PC having a high processing speed, the processing PC may be determined by other methods.

In the configuration shown in FIG. 1, each processing PC 120 includes a partial index creating unit 180 and each processing PC 120 creates a partial index. However, the management PC 110 has a multithread function, and the management PC 110 has a part of each partial network. A configuration in which indexes are created in parallel may be used. In this case, the VLAN communication range specifying system does not need to include the partial network information transmitting unit 170 and the processing PC 120. In the following description, a case where the partial network information transmitting unit 170 transmits a partial network information table to each processing PC 120 and each processing PC creates a partial index will be described as an example.

The partial index creation unit 180 specifies the VLAN communication range for each partial network using the partial network configuration, the switch connection configuration information, and the partial network information table received from the partial network information transmission unit 170 of the management PC 110. Create a partial index to The partial index is a hash table in which the VLAN-ID registered in the switch is KEY and the VLAN-ID of another switch with which the KEY can communicate is VALUE.

Specifically, it is a hash table in which a switch is represented by a set of switch identification information (for example, switch name) and VLAN-ID, and a switch that becomes KEY is associated with another switch that can communicate with the switch. The partial index creating unit 180 transmits the created partial index to the management PC 110, and the management PC 110 stores the partial index in the partial index storage unit 190 included in the management PC 110 itself. The protocol used when the partial index creating unit 180 transmits the partial index to the management PC 190 is not particularly limited. For example, the partial index may be transmitted using a protocol such as HTTP or FTP.

FIG. 12 is an explanatory diagram showing an example of each table and partial index created as pre-processing for creating a partial index by the partial index creating means 180. By creating various tables 510 to 560 called these tables, the partial index table 570 can be efficiently created. The partial index creating unit 180 uses the partial network configuration, the switch connection configuration information, and the partial network information table received from the partial network information transmitting unit 170 of the management PC 110, and the routing table 510, the subnet address table 520, and the like. The VLAN-ID table 530, the connection switch table 540, the redundancy table 550, and the connection port table 560 are created.

Furthermore, a partial index 570 is created using the created table. The partial index creation means 180 manages the created routing table 510, subnet address table 520, VLAN-ID table 530, connection switch table 540, redundancy table 550, connection port table 560, and partial index 570. The management PC 110 stores the received table and the like in the partial index storage unit 190 included in the management PC 110 itself.

The table created by the partial index creation device 180 and stored in the partial index storage unit 190 is not limited to each table shown in FIG. 12, and other tables related to VLAN communication may be added. For example, the partial index creation device 180 may create a filtering table (not shown) indicating that the communication state of the connection port is partially controlled by packet filtering or MAC address filtering. Hereinafter, details of the various tables and the partial index 570 will be described.

The routing table 510 is a table indicating whether or not each switch is routable, and the switch name is associated with the routing availability. For example, the first line of the routing table 510 in FIG. 12 indicates that “the switch whose switch name is AB is routable”. Here, since the L2 switch does not have a routing function, when the switch is an L2 switch, the routing availability state is always described as “impossible”. Whether the switch is an L2 switch or not may be determined by referring to the configuration of each switch.

FIG. 13 is a flowchart showing a process for creating the routing table 510. The partial index creation means 180 extracts the switch name from the VLAN communication information (step S1). As illustrated in FIGS. 2 and 3, since the switch name is described together with a predetermined character string, the character string described together with the predetermined character string may be extracted as the switch name. The partial index creation means 180 determines whether information indicating that the routing function is enabled (for example, “router rip” shown in FIG. 3) is described in the VLAN communication information (step S2). .

If information indicating that the routing function is enabled is described, the fact that the switch is routable is described in the routing table 510 in association with the switch name (step S3). On the other hand, if the information indicating that the routing function is enabled is not described, the switch is not routable (the routing function is not enabled or does not have the routing function), It is described in the routing table 510 in association with the switch name (step S4).

The subnet address table 520 is a table indicating a subnet address corresponding to the VLAN-ID, and associates the VLAN-ID with the subnet address set in the VLAN-ID. For example, the first line of the subnet address table 520 illustrated in FIG. 12 indicates that “there is no subnet address corresponding to VLAN-ID = 10”. When there is no subnet address corresponding to the VLAN-ID, a character string indicating that there is no subnet address is described in the subnet address column of the subnet address table 520.

For example, a character string such as “×” is described as the subnet address 420 in FIG. The character string indicating that the subnet address does not exist may be any character string. If a subnet address corresponding to the VLAN-ID exists, describe the subnet address in the subnet address column. For example, a subnet address such as “10.10.10.1/24” is described. As the notation method of the subnet address string, a general notation method representing the subnet mask of the network may be used. For example, a description with a prefix length such as “/ 24” may be used, or a description such as “255.255.255.0” may be used.

FIG. 14 is a flowchart showing processing for creating the subnet address table 520. First, the partial index creating means 180 extracts a command for designating the VLAN-ID of each network from the VLAN communication information (step S11). For example, a command including a predetermined character string “interface vlan” illustrated in FIG. 3 is extracted. Next, the partial index creating means 180 determines whether or not there is a subnet address setting command corresponding to the command (step S12).

If it is determined that there is a subnet address setting command, the partial index creation means 180 associates the VLAN-ID specified by the command specifying the VLAN-ID with the subnet address indicated by the subnet address setting command, and creates a subnet address table. This is described in 520 (step S13). If it is determined that there is no subnet address setting command, the partial index creation means 180, the VLAN-ID specified by the command specifying the VLAN-ID, and a character string (for example, “x” etc.) indicating that the subnet address does not exist. ) Are described in the subnet address table 520 (step S14).

The VLAN-ID table 530 is a table indicating the VLAN-ID registered in each switch, and the switch name of each switch is associated with the VLAN-ID registered in each switch. For example, the first line of the VLAN-ID table 530 illustrated in FIG. 12 indicates that “the switch with the switch name AB has VLAN-ID = 10 registered”. When a plurality of VLAN-IDs are registered in the switch, a plurality of IDs are described in the VLAN-ID column.

The partial index creating means 180 creates the VLAN-ID table 530, for example, as follows using the VLAN communication information of each switch. The partial index creation means 180 extracts the switch name from the VLAN communication information, and further extracts a command for designating the VLAN-ID of each network from the VLAN communication information.

For example, “bridge-group numeric value VLAN-type port” illustrated in FIG. 3 is a command for specifying a VLAN-ID, and a numeric value indicating the VLAN-ID is extracted from the command described in such a predetermined character string. To do. Note that the VLAN-ID may be extracted from another command that can extract the VLAN-ID. The partial index creating means 180 generates a VLAN-ID table by associating the switch name with the VLAN-ID for each switch.

The connection switch table 540 is a table indicating whether or not VLAN communication is possible between switches, and a connection switch name is associated with a VLAN-ID for communication between the switches. For example, the first line of the connection switch table 540 in FIG. 12 indicates that “VLAN-ID = 10 is communicable between the switch whose name is AB and the switch whose name is CD”.

The switch connection configuration information received by the partial index creation unit 180 from the partial network information transmission unit 170 indicates which switch is connected to which switch, and the partial index creation unit 180 is specified by the switch connection configuration information. A set of switches and a VLAN-ID for communication between the switches are specified. The partial index creation means 180 identifies the connection port of the switch using the configuration or the connection port table 560 described later, determines whether or not the VLAN-ID is registered in the connection port, and the VLAN-ID. Is registered in the connection switch table, information indicating that communication with the VLAN-ID is possible between the two switches.

The redundancy table 550 is a table showing master registration information for each of the two switches and the VLAN-ID having a redundant configuration, and serves as a master for each VLAN-ID in the two switches having the redundant configuration and the redundant configuration switch. A switch name is associated. For example, the first row of the redundancy table 550 illustrated in FIG. 12 indicates that “the switch name is A and the switch name is B, a redundant configuration, and the master in VLAN-ID = 10 is the switch A”. Represents.

In the redundancy table 550 illustrated in FIG. 12, only the master switch name is shown, but a backup switch name for each VLAN-ID may be included in the redundancy table. If a plurality of VLAN-IDs are registered in the switch, a plurality of VLAN-ID columns are prepared, and the master and backup are confirmed for each VLAN-ID. Confirmation of master and backup can be easily performed using VLAN communication information.

The partial index creation means 180 may create the redundancy table 550 as shown below, for example, using the VLAN communication information of each switch. The partial index creation means 180 identifies a pair of two switches having a redundant configuration from the VLAN communication information of each switch, and extracts the switch name from the VLAN communication information. For example, it is assumed that the description “gsrp numerical value” using a common numerical value is included in the VLAN communication information of two switches. The partial index creating means 180 searches for such VLAN communication information and extracts the switch name from each VLAN communication information.

Further, the partial index creating means 180 specifies a VLAN-ID group number for each VLAN-ID set in each of the two switches having a redundant configuration. For example, the group number of VLAN-ID “10” is specified as 1 from the description of “vlan-group 1 vlan 10” illustrated in FIG. This specification is performed for each VLAN-ID. Further, in the VLAN communication information of the two switches having a redundant configuration, information indicating the priority of the switch is associated with the group number. For example, the VLAN communication information of two switches having a redundant configuration includes a description such as “vlan-group group number priority number” illustrated in FIG. 3, and a numerical value indicating the priority for each group. Yes. Here, it is assumed that the one with the larger numerical value described after “priority” becomes the master machine.

The partial index creation means 180 compares the numerical value described next to “priority” in the group number specified for each VLAN-ID with the VLAN communication information of the two switches, and sets the switch with the larger value as the master unit. The master machine is described in the redundancy table 550 in association with the VLAN-ID. For example, two switches A and B have a redundant configuration. The VLAN communication information of one switch A is described as “vlan-group 1 priority 120”, and the VLAN communication information of the other switch B is “vlan-group 1”. It is assumed that “priority 80” is described. If the group number of the VLAN-ID “10” is 1, the partial index creating unit 180 determines the switch A as the master machine for the VLAN-ID “10”, and the redundancy table 550 illustrated in FIG. Write like this.

The connection port table 560 is a table indicating the VLAN-ID registered in the connection port of each switch, and the connection port of each switch is associated with the VLAN-ID registered in the switch. For example, the first line of the connection port table 560 in FIG. 12 indicates that “VLAN-ID = 10 is registered in the connection port 1/1 of the switch with the switch name A”. When a plurality of VLAN-IDs are registered in the switch, a plurality of VLAN-ID columns are prepared in the connection port table, and it is confirmed whether or not each VLAN-ID is registered in the connection port. Registration confirmation of the connection port of the VLAN-ID can be easily performed using the VLAN communication information.

For example, the partial index creation unit 180 extracts the switch name from the VLAN communication information, extracts the correspondence between the connection port and the VLAN-ID, and extracts the combination of the switch name, the connection port, and the VLAN-ID. In the connection port table, information indicating that the VLAN-ID is registered for the set of the switch name and the connection port may be described. In the connection port table 560 illustrated in FIG. 12, the VLAN-ID “10” is shown as an example, “◯” indicates that the VLAN-ID is registered, and “×” indicates that the VLAN-ID is not registered. Represents.

The partial index creating means 180 creates a partial index 570 using the routing table 510, the subnet address table 520, the VLAN-ID table 530, and the connection switch table 540. In creating the partial index, the redundant table 550 and the connection port table 560 are not used.

FIG. 15 is a flowchart illustrating an example of processing in which the partial index creating unit 180 creates the partial index 570. In the following description, it is assumed that the process is started from an initial state in which KEY and VALUE of the partial index 570 are not determined.

First, the partial index creating means 180 determines the KEY of the partial index 570 using the VLAN-ID table 530 (step C1). The partial index creation means 180 determines a KEY that represents a combination of a switch name and a VLAN-ID associated with each other in the VLAN-ID table 530. For example, assume that a VLAN-ID table 530 illustrated in FIG. 12 is created. In the VLAN-ID table 530, “AB, CD, G, H” is registered as a switch name, and the VLAN-ID used is “VLAN-ID = 10”.

In this case, the partial index creating means 180 may determine, for example, a character string in which the VLAN name is continued after the switch name as KEY. In the partial index 570 shown in FIG. 12, the character string in which the VLAN name is continued after the switch name is KEY. However, the partial index creating means 180 is a character string that uniquely represents the combination of the switch name and the VLAN-ID. Any character string may be used as the key.

Next, one KEY for which VALUE is not defined is selected from the partial index 570 (step C2). Here, a case where KEY “AB10” of the partial index 570 illustrated in FIG. 12 is selected is taken as an example.

Next, using the connection switch table 540 (see FIG. 12), the partial index creating means 180 uses the connection switch table 540 (see FIG. 12) to obtain information that uniquely represents the switch name and VLAN-ID pair of the switch that can communicate with the KEY selected in Step C2. It is determined as VALUE corresponding to the selected KEY (step C3). That is, information indicating a switch communicable with the switch indicated by the selected KEY and the VLAN-ID in the communication is VALUE. In this example, VALUE is also represented by a character string in which the switch name is followed by VLAN-ID.

For example, the partial index creating unit 180 selects the switch name AB indicated by the key “AB10” selected in step C2 from the connection switch name column of the connection switch table 540 (the left column of the connection switch table 540 illustrated in FIG. 12). Identifies a set of switches that contain In the case of the connection switch table 540 illustrated in FIG. 12, “AB-CD” on the first line and “AB-EF” on the second line are specified.

Since the first line “AB-CD” indicates that the packet with VLAN-ID = 10 is communicable between the switch AB and the switch CD, the partial index creating means 180 indicates that the partial index 570 “CD10” is described as the value of KEY “AB10”. Similarly, regarding the second line “AB-EF”, since the packet with VLAN-ID = 10 can be communicated between the switch AB and the switch EF, the partial index creating means 180 uses the key “AB10”. "EF10" is also described as VALUE.

However, referring to the partial network information table (FIG. 11) received from the partial network information transmission unit 170 of the management PC 110, the EF 10 is a switch belonging to a partial network different from the partial network processed by the processing PC1. As described above, the partial index creating unit 180 additionally writes information on the processing PC corresponding to the “other partial network” regarding the switches belonging to the other partial networks. For example, as illustrated in the partial index 570 of FIG. 12, a processing PC name of processing PC2 is added to VALUE “EF10” of KEY “AB10”. However, any information may be added as long as it is information that can identify the processing PC instead of the processing PC name.

In addition, when associating each KEY with VALUE, the partial index creating means 180 calculates a hash value of KEY and associates VALUE with the hash value. The hash function for calculating the hash value is not particularly limited.

Next, the partial index creating means 180 uses the routing table 510 and the subnet address table 520 to determine whether or not the KEY selected in Step C2 is routable and the subnet address is registered (Step C4). ). That is, it is determined whether or not the switch name indicated by the selected key is described as routable in the routing table 510 and the subnet address corresponding to the VLAN-ID indicated by the selected key is registered in the subnet address table 520. .

If the KEY selected in Step C2 is routable and the subnet address is registered (Yes in Step C4), the process proceeds to Step C5. On the other hand, if the KEY selected in Step C2 is not routable or the subnet address is not registered (No in Step C4), the process proceeds to Step C6. For example, in the routing table 510 illustrated in FIG. 12, the switch name “AB” is associated with the information “routable”, but the subnet address for the subnet address table 520 “VLAN-ID = 10” is “not yet”. Since it is “registration”, the process proceeds to step C6.

When the process proceeds to step C5, the switch indicated by the selected KEY can be routed between VLANs. In step C5, the partial index creation means 180 adds a pair of the switch name indicated by the selected KEY and another VLAN-ID registered in the switch and registered with the subnet address as VALUE for the selected KEY. (Step C5). For example, as illustrated in FIG. 16, in the subnet address table, “10” and “20” are described in the VLAN-ID column, and “10.10.10.1/24” and “20.20” are described in the subnet address column. 20.20.1 / 24 "is described.

In addition, as illustrated in FIG. 17, the VLAN-ID “20” is also described as being communicable for each set of switches, and the VLAN-ID “20” is also communicable for the set of switches including AB. Suppose that In this case, the partial index creating means 180 sets “AB20” indicating a pair of the switch name “AB” indicated by the selected KEY and another VLAN-ID “20” different from the KEY as VALUE of the key “AB10”. Describe. After step C5, the process proceeds to step C6.

In step C6, the partial index creating means 180 determines whether or not the description of VALUE for all the KEYs in the partial index 570 has been completed (step C6). If the description of VALUE for all the KEYs is completed, the creation process of the partial index 570 is terminated. On the other hand, if the description of VALUE for all the KEYs is not completed (No in Step C6), the process returns to Step C2, selects one KEY for which VALUE is not defined, and repeats the processes after Step C2. For example, after VALUE of KEY “AB10” is described, the process proceeds to Step C2, KEY “CD10” is selected, and the VALUE is described. Similarly, VALUE of “G10” and “H10” is also described, and the partial index 570 is completed.

FIG. 18 is an explanatory diagram showing an example of partial networks and partial indexes created for each partial network. Assume that the network 330 illustrated in FIG. 18A is divided into a partial network including the switches AB, CD, G, and H and a partial network including the switches EF, I, and J. Further, it is assumed that one processing PC1 creates a partial index of the former partial network and the other processing PC2 creates a partial index of the latter partial network.

FIG. 18B shows a partial index created by the processing PC1, and FIG. 18C shows a partial index created by the processing PC2. In this way, each processing PC creates a partial network partial index corresponding to the processing PC itself. Since the switch “EF” belongs to another partial network different from the switch “AB”, the partial index creating means 180 of the processing PC 1 is associated with the “other partial network” with respect to the value “EF10” of the key “AB10”. Information on the processing PC (processing PC name in the example shown in FIG. 18) is added (see FIG. 18B). Similarly, the partial index creating means 180 of the processing PC 2 adds the processing PC name (processing PC 1) corresponding to the other network to the value “AB10” of the key “EF10”.

The partial index creation means 180 of each processing PC transmits the partial network information table and the created partial index to the management PC 110, and the management PC 110 stores the partial index received from each processing PC in the partial index storage device 190. Let Further, the partial index creating means 180 of each processing PC also transmits the redundant table 550 to the management PC 110, and the management PC 110 also stores the received redundant table 550 in the partial index storage device 190 together with the partial network information table and the partial index. Let

As will be described later, when the management PC 110 uses the connection port table 560, the partial index creation means 180 also transmits the connection port table 560 to the management PC 110, and the management PC 110 also sends the connection port table 560 to the partial index storage device 190. Remember me.

The inspection rule storage device 200 is a storage device that stores in advance inspection rules used by the VLAN communication range specifying unit 210 to specify the communication range of the VLAN.

FIG. 19 is an explanatory diagram showing an example of an inspection rule set for GSRP (Gigabit Switch Redundancy Protocol) stored in the inspection rule storage device 200. The GSRP inspection rule set shown in FIG. 19 includes rules 1 to 5.

Inspection rule 1 is a rule that “when the switch is operating normally, packets flow only to the master switch in the backup switch”. That is, the inspection rule 1 stipulates that “when the switch is operating normally, the backup switch transmits a packet only to the master switch and does not transmit a packet to other switches”. If the redundancy table 550 shown in FIG. 12 is created, the master switch of VLAN-ID “10” in the switch “CD” is C. At this time, the inspection rule 1 indicates that, for example, the switch D in the switch “CD” can only communicate from “D” to “C” as VLAN-ID 10 communication during normal operation.

Inspection rule 2 is a rule that “when the switch is operating normally, packets flow only to the master switch in the redundant path portion”. That is, the inspection rule 2 stipulates that "when a switch transmits a packet to a switch having a redundant configuration, the packet is transmitted only to the master switch among the switches having the redundant configuration". . For example, assume that the redundancy table 550 shown in FIG. 12 has been created. At this time, according to the inspection rule 2, for example, regarding the communication of the VLAN-ID “10” from the switch “G” to “CD”, it is possible to communicate only from “G” to “C” during normal operation. It can be seen that “D” cannot communicate.

Inspection rule 3 is a rule that “a packet does not flow from the master switch to the backup switch during normal operation of the switch”. That is, the inspection rule 3 stipulates that “when the switch is operating normally, the master switch does not flow packets to the backup switch”. For example, assume that the redundancy table 550 shown in FIG. 12 has been created. At this time, the inspection rule 3 indicates that, for example, the switch C in the switch “CD” does not flow a packet to the switch “D” as communication of VLAN-ID 10 during normal operation.

Inspection rule 4 is a rule that “packets having the same VLAN-ID are not retransmitted to the transmission source switch”. Retransmission means sending a received packet back to its source. Therefore, the inspection rule 4 stipulates that “When a switch receives a packet having a certain VLAN-ID, it does not send the packet back to the transmission source switch. Is transmitted to the switch G. At this time, the inspection rule 4 indicates that the switch G does not send back the packet having the VLAN-ID 10 to the switch CD.

Inspection rule 5 is a rule that “a packet does not flow to a switch in which a failure has occurred”. That is, the inspection rule 5 stipulates that “each switch does not flow a packet to a switch in which a failure has occurred”.

Here, five inspection rules are shown, but a configuration in which a network administrator or a designer can freely add, edit, and delete inspection rules may be employed. For example, the management PC 110 newly stores an inspection rule in the inspection rule storage unit 200 or edits or deletes the inspection rule stored in the inspection rule storage unit 200 in accordance with the operation of the network administrator or designer. Or a rule editing means (not shown).

Further, the rule editing means (not shown) is not limited to the GSRP inspection rules, but includes inspection rule sets for various network protocols such as STP (Spanning Tree Protocol) and MST (Multiple Spanning Tree). It may be added, edited, or deleted according to the operation of the administrator or designer.

The VLAN communication range specifying unit 210 specifies a VLAN communication range using a partial index, a partial network information table and the like created by each processing PC 120 and stored in the partial index storage device 190. The VLAN communication range specifying unit 210 outputs the specified VLAN communication range through the output device 240.

FIG. 20 is a flowchart showing an example of processing in which the VLAN communication range specifying unit 210 specifies the VLAN communication range. FIG. 21 is an explanatory diagram illustrating an example of processing in which the VLAN communication range specifying unit 210 specifies the VLAN communication range. The partial indexes shown in FIGS. 21A, 21B, and 21C are the partial indexes illustrated in FIG. 18B, and “(2)” described in VALUE of these partial indexes is the processing PC2. Represents. Similarly, the partial indexes shown in FIGS. 21D and 21E are the partial indexes illustrated in FIG. 18C, and “(1)” described in VALUE of these partial indexes indicates the processing PC1. Represents.

First, the VLAN communication range specifying means 210 selects one KEY that has not been inspected for specifying the VLAN communication range from the partial indexes (step D1). For example, the VLAN communication range specifying unit 210 selects KEY “G10” in the partial index (partial index created in the processing PC 1) shown in FIG. Hereinafter, the case where the partial index KEY “G10” illustrated in FIG. 21A is selected in step D1 will be described as an example.

After step D1, the VLAN communication range specifying unit 210 determines whether there is a VALUE for which communication from the KEY switch is not checked in the KEY of the selected KEY (step D2). ). When there is an unchecked VALUE (Yes in Step D2), the process proceeds to Step D3. On the other hand, when there is no unchecked VALUE (No in Step D2), the process proceeds to Step D8. For example, when the partial index KEY “G10” illustrated in FIG. 21A is selected in Step D1 and the process proceeds to Step D2, the VALUE “CD10” of the KEY “G10” is uninspected. It is determined that there is VALUE, and the process proceeds to step D3.

After step D2, the VLAN communication range specifying means 210 selects one VALUE from which the KEY switch is not inspected from among the KEYs of the selected KEY (step D3). In the case of the above example, “CD10” is selected from VALUE of KEY “G10” illustrated in FIG.

In addition, when selecting the VALUE corresponding to the KEY, the VLAN communication range specifying unit 210 may obtain the hash value of the selected KEY, and select from the VALUE associated with the hash value in the partial index.

Next, the VLAN communication range specifying unit 210 refers to the inspection rule stored in the inspection rule storage device 200 and determines whether or not communication from the selected KEY switch to the VALUE selected in Step D3 is possible ( Step D4). For example, the VLAN communication range specifying unit 210 determines whether or not communication from the selected KEY to VALUE is determined to be communicable or incapable of communication according to the inspection rule, and corresponds to one of the inspection rules. If so, it is determined whether communication is possible according to the inspection rule. If it does not correspond to any inspection rule, for example, it may be determined that communication is possible. However, since the switches having a redundant configuration are handled as one switch, the inspection rules 1 to 3 shown in FIG. 19 may be ignored.

For example, it is assumed that “CD10” is selected as described above in step D3 and it is determined whether or not communication from KEY “G10” to “CD10” is possible. In this case, “G10” is a starting switch, there is no communication path to “G10”, and a packet with VLAN-ID = 10 from the switch G has never been transmitted to the switch G. Therefore, the VLAN communication range specifying unit 210 does not determine that communication from “G10” to “CD10” is impossible by the inspection rule 4.

Also, here, it is assumed that information on a switch that is assumed to have failed has not been input from the network administrator or the like via the failure location specifying means 211. Therefore, the VLAN communication range specifying unit 210 does not determine that communication from “G10” to “CD10” is impossible by the inspection rule 5. Therefore, it is determined that communication from “G10” to “CD10” is possible because the inspection rules 4 and 5 do not prohibit communication.

Note that it has already been determined whether communication is possible when the value selected in step D3 (eg, “CD10”) is KEY, and communication from that value to the currently selected key (eg, “G10”) is possible. Suppose that it is determined. When determining whether or not communication from the currently selected KEY (eg, “G10”) to the currently selected VALUE (eg, “CD10”) is performed in step D4, “CD10” → “G10” → “CD10”, etc. Thus, this corresponds to a situation where a packet with VLAN-ID = 10 is sent back. Therefore, in such a case, it is determined by the inspection rule 4 that communication is impossible.

If the switch indicated by VALUE selected in step D3 is a switch that is assumed to have a failure, the inspection rule 5 determines that communication is not possible.

When the VLAN communication range specifying unit 210 determines that communication from the KEY to the VALUE selected in step D3 is possible as a result of the determination in step D4 (step D5), The process proceeds to step D6. If it is determined that communication is not possible, the process proceeds to step D7. For example, when it is determined that communication is possible for communication from KEY “G10” to VALUE “CD10”, the process proceeds to step D7.

In step D6, the VLAN communication range specifying unit 210 determines that the value selected in step D3 is a value that can be communicated from the currently selected KEY (step D6). In step D6, the VLAN communication range specifying unit 210 determines that the value selected in step D3 is a value that cannot be communicated with the currently selected key (step D7).

After step D6 and after step D7, the process proceeds to step D2. If there is a VALUE that has not been checked for communication availability among the selected KEY VALUEs (Yes in step D2), the processing after step D3 is repeated. If there is no unchecked VALUE (No in step D2), the VLAN communication range specifying unit 210 determines whether there is a VALUE determined to be communicable in step D6 among the VALUEs corresponding to the selected KEY. Is determined (step D8). When it is determined that there is a VALUE that is determined to be communicable in Step D6 (Yes in Step D8), the VLAN communication range specifying unit 210 selects the VALUE as a new KEY (Step D9), and the processing after Step D3 repeat.

That is, among VALUEs corresponding to a certain KEY, by selecting a VALUE that can be communicated as a new KEY, switches that can communicate from the switch that is the starting point are sequentially identified. On the other hand, when it is determined that there is no VALUE determined to be communicable in Step D6 (No in Step D8), the VLAN communication range specifying unit 210 ends the process. That is, there is no VALUE that is communicable from the currently selected KEY, and the communication range specification is terminated with the KEY as the end of the communication range.

In the example shown in FIG. 21, first, “G10” is set to KEY (see FIG. 21A), the VALUE “CD10” is selected, and it is determined that communication from “G10” to “CD10” is possible. (Steps D1 to D6). In step D2, there is no unchecked VALUE, and the process proceeds to step D8. Here, since “CD10” is determined to be communicable, “CD10” is set as a new KEY (see steps D8 and D9, FIG. 21B). When “CD10” is selected as KEY, it is determined that communication is possible for VALUE “AB10” and “H10”.

On the other hand, regarding “G10”, the communication path “G10” → “CD10” is traced, and if “G10” → “CD10” → “G10”, the packet is sent back. “CD10” cannot be communicated (see FIG. 21B).

When there are no unchecked VALUEs for KEY “CD10”, “AB10” and “H10” that are allowed to communicate are set to KEY, “AB10” is set to KEY, and “H10” is set to KEY. The processing after step D3 is performed (see FIG. 21C). When “H10” is set to KEY, communication to VALUE “CD10” is disabled by the inspection rule 4, and there is no VALUE that allows communication, and the process ends (FIG. 21C).

On the other hand, when “AB10” is set to KEY, communication to VALUE “CD10” is disabled by the inspection rule 4, but “EF10 (2)” is determined to be communicable (see FIG. 21C). “EF10” is selected as KEY (see FIG. 21D), and Step D3 and subsequent steps are repeated. At this time, since the partial index for specifying the communication range of VALUE “EF10 (2)” is the partial index created by the processing PC 2, the VLAN communication range specifying unit 210 sets the reference partial index as shown in FIG. ) To the partial index exemplified.

Further, here, communication to VALUE “AB10” is disabled by the inspection rule 4, but “I10” and “J10” are determined to be communicable. Then, for each of the cases where “I10” is KEY and “J10” is KEY, the processing after step D3 is performed (FIG. 21E). In either case, communication of the selected KEY to VALUE is disabled by the inspection rule 4, and the process ends.

FIG. 21 (f) shows a final communication range specifying result when the communication range specifying process is completed. The range in which VLAN-ID = 10 (G10) registered in the switch G can communicate is “G10 → CD10 → H10”, “G10 → CD10 → AB10 → EF10 → I10”, and “G10 → CD10 → AB10 → EF10”. → J10 ”.

In addition, here, the communicable range is determined for each switch. The VLAN communication range specifying means 210 refers to the connection port table 560 (see FIG. 12), specifies connection ports that can communicate with each switch, and information on connection ports of each switch along with each switch serving as a communication path. May be included in the communication range information. For example, the connection port corresponding to the set of the switch name and VLAN-ID indicated by VALUE or KEY of the partial index determined as the communication path is extracted from the connection port table 560 (see FIG. 12) and added to the communication range information. May be.

The VLAN communication range specifying unit 210 outputs the specified VLAN communication range via the output device 240. As an example of the output mode of the communication path of the switch (connection port information may be added), which is the VLAN communication range inspection result, the VLAN communication range specifying unit 210 displays the communication path of the switch on the display device. You may let them. When displaying the communication path, it may be displayed on an inspection result display screen (not shown) mounted on the VLAN communication range specifying system.

Further, as illustrated in FIG. 21 (f), the communication path may be visually displayed using arrows or the like on the network configuration head. By visually displaying, it is possible to present the communication range and communication path in an easy-to-understand manner to the network manager or designer. Further, the VLAN communication range specifying unit 210 may output a communication path that becomes the VLAN communication range as a file.

From this output result, the network manager or designer can grasp from which switch to which switch communication is possible, and can grasp what communication path is followed.

Further, in the above-described embodiment, the case has been described as an example in which the inspection result of the VLAN communication range is obtained in a state where a redundant switch such as “CD10” is handled as one. In this case, since the inspection rules 1 to 3 shown in FIG. 19 are not used in step D4 (see FIG. 20), the inspection rule storage device 200 may not store the inspection rules 1 to 3.

Further, as described above, after specifying the VLAN communication range such as “G10 → CD10 → H10”, “G10 → CD10 → AB10 → EF10 → I10”, “G10 → CD10 → AB10 → EF10 → J10”, the VLAN communication The range specifying unit 210 may specify which switch is used as a route among the redundant switches. For example, if an inspection result “G10 → CD10 → H10” is obtained, it may be further specified whether the communication path is “G10 → C10 → H10” or “G10 → D10 → H10”. Good. In order to perform this specification, the inspection rule storage device 200 stores, for example, the inspection rule 2 described above.

The VLAN communication range specifying unit 210 determines whether the switch name corresponds to one of the redundant switch names described in the redundancy table 550 (see FIG. 12) for each switch on the communication path. . If the switch name (for example, CD in “CD10”) corresponds to one of the redundant switch names described in the redundancy table 550, the switch name (“CD10” or the like) is specified from the communication path. The master in the VLAN-ID may be specified from the redundancy table 550, and it may be determined that the master is a communication path. For example, with respect to “CD10”, the master of VLAN-ID10 is determined to be C (see FIG. 12), so that “G10 → CD10 → H10” passes through the master switch as “G10 → C10 → H10”. Change to

Here, although the case where the inspection rule 2 is used is shown, the inspection rules 1, 3 and the like are stored in the inspection rule storage device 200, and the VLAN communication range may be specified using these inspection rules.

In the above-described embodiment, the case where the VLAN communication range specifying unit 210 selects one KEY that has not been inspected for specifying the VLAN communication range from the partial indexes in step D1 (see FIG. 20) is shown. The network administrator or designer may specify the first KEY. That is, the VLAN communication range specifying means 210 receives a switch name and VLAN-ID from the outside, selects a KEY that matches the switch name and VLAN-ID from the partial index, and performs the processing after step D2. Good.

Here, when the network administrator or designer designates the first KEY, the switch name and VLAN-ID of one of the two switches having a redundant configuration may be designated. For example, one switch name “C” and VLAN-ID = 10 may be designated among the switches C and D having a redundant configuration. In this case, the VLAN communication range specifying means 210 is KEY indicating the switch name (for example, “C”) and the VLAN-ID (for example, 10) in step D1, and is the name of the other switch (for example, the redundant configuration). KEY indicating “D”) (for example, “CD10”) may be selected from the KEYs of the respective partial indexes, and then the processing after step D2 may be performed. As a result, the communication range and communication path of VLAN = 10 when “CD10” is the starting point can be obtained.

When a switch having a redundant configuration, such as “CD10”, is handled as one switch, the switch having the clause configuration may be specified in more detail by the inspection rule 1 or the inspection rule 3. For example, assume that the starting point is “CD10” and a communication range such as “CD10” → “H10” →. Also assume that the switch and VLAN-ID specified by the user are “C” and “10” as described above. When the switch C is a master switch, the VLAN communication range specifying unit 210 determines that communication from C to D is impossible when VLAN-ID = 10 according to the inspection rule 3, and “CD10” → “ The communication range result may be changed so that the communication range “H10” →... Is communicated from the switch itself designated by the administrator or the like to the next switch as “C10” → “H10”. .

If “C” is a backup switch, the VLAN communication range specifying unit 210 determines that communication from the backup switch “C10” to the master switch “D10” is possible when VLAN-ID = 10 according to the inspection rule 1. , “CD10” → “H10” →... Is communicated from the switch designated by the administrator etc. to the master switch as “C10” → “D10” → “H10” →. The communication range specifying result may be changed to indicate that communication is performed to the next switch “H10”.

Next, effects of the first exemplary embodiment of the present invention will be described. According to the first embodiment of the present invention, the VLAN communication range in a large-scale network can be specified accurately and at high speed in management of VLAN settings. In other words, it is possible to determine which switch can communicate from a switch specified by a combination of an arbitrary switch name and VLAN-ID, and what communication path can be used for communication. Can be grasped.

In the present embodiment, the large-scale network is divided into a plurality of partial networks so that the processing amount of the index for specifying the communication range of the VLAN is equalized, and each partial index creating means 180 has a partial index for each partial network. Create Then, the VLAN communication range specifying means 210 uses the partial index of each partial network to store the destination switch VLAN that can communicate with the VLAN of the transmission source switch in various protocols on the network stored in the inspection rule storage device 200. The inspection is performed based on the inspection rule corresponding to. At this time, the network is divided into partial networks, and each partial index creating means 180 creates a partial index. Therefore, the processing can be distributed and the VLAN communication range specifying process can be performed at high speed.

In addition, the VLAN communication range is identified by sequentially repeating the process of identifying other switches that can communicate from the switch (switch that is the packet transfer destination), so up to which switch can the packet be transferred from any switch As well as the path of the switch that forwards the packet. Accordingly, it is possible to easily confirm the correctness of the configuration setting in the VLAN communication through the entire inspection target network. For example, the network administrator or the designer specifies the switch name and the VLAN-ID and outputs the VLAN communication range, thereby obtaining a VLAN communication range inspection result that matches the VLAN communication range that he / she has assumed. It can be easily determined whether or not the configuration setting is correct.

In the above description, the processing PC 120 transmits a partial index or the like to the management PC 110, the management PC 110 stores the partial index or the like in the partial index storage device 190, and the VLAN communication range specifying unit 210 stores the partial index or the like. The case where the communication range is specified with reference has been described. Each processing PC 120 itself may be provided with storage means (not shown) for storing each information used for specifying the VLAN communication range, such as a partial index, and the partial index may be stored in the storage means. In this case, the VLAN communication range specifying unit 210 may specify the communication range with reference to a partial index or the like stored in the storage unit included in the processing PC 120. According to such a configuration, the capacity of the partial index storage device 190 of the management PC 110 can be reduced.

Embodiment 2. FIG.
FIG. 22 is a block diagram illustrating a configuration example of the second exemplary embodiment of the present invention. The same components as those in the first embodiment are denoted by the same reference numerals as those in FIG. The VLAN communication range specifying system 100 of the second embodiment includes a management PC 110 and a processing PC 120.

The management PC 110 includes an index creation processing amount calculation unit 130, an index creation processing amount storage device 140, a network dividing unit 150, a partial network information storage device 160, a partial network information transmission unit 170, and a partial index storage device 190. The inspection rule storage device 200, the VLAN communication range specifying means 210, the failure location specifying means 211, and the index re-creation determining means 710 are provided. The processing PC 120 includes a partial index creation unit 180.

First, when the network device information set 220 is input to the management PC 110 via the input device 230, the management PC 110 and each processing PC 120 operate in the same manner as in the first embodiment, and specify the VLAN communication range. Thereafter, when a part of the configuration included in the network device information set 220 is corrected and the corrected configuration is input to the index creation processing amount calculation means 130 via the input device 230, the index creation processing amount is calculated. The means 130 and the network dividing means 150 perform the same operation as in the first embodiment. As a result, the partial network information storage device 160 is in a state where the partial network information table created by the process after the configuration correction is stored. At this time, the partial index storage device 190 is in a state where a partial network information table created based on the first input configuration or the like is stored.

When the partial network information table is newly stored in the partial network information storage device 160, the index re-creation determination unit 710 includes the new partial network information table and the partial network information table stored in the partial index storage device 190. (Partial network information table created based on the configuration before correction) is compared, and a partial network for which a partial index needs to be created again is specified based on the comparison result. Then, the partial network configuration, the switch connection configuration information, and the partial network information table for which a partial index needs to be created again are passed to the partial network information transmitting unit 170.

The partial network information transmitting unit 170 transmits the configuration, the switch connection configuration information, and the partial network information table to the processing PC 120 corresponding to the partial network for which it is determined that the partial index should be created again. No configuration or the like is transmitted to the PC 120. The processing PC 120 that has received the configuration or the like operates in the same manner as in the first embodiment, creates a partial index or the like, and transmits it to the management PC 110. Therefore, in this embodiment, when the configuration is modified, not all partial indexes are recreated.

The index re-creation determination unit 710 is realized by a CPU that operates according to a program, for example. The index creation processing amount calculation unit 130, the network division unit 150, the partial network information transmission unit 170, the VLAN communication range identification unit 210, and the index re-creation determination unit 710 may be realized by the same CPU. The program is stored in, for example, a program storage device (not shown) included in the VLAN communication range specifying system 100.

The CPU reads the program, and according to the program, the index creation processing amount calculation means 130, the network division means 150, the partial network information transmission means 170, the partial index creation means 180, the VLAN communication range identification means 210, the index recreation determination means It only needs to operate as 710. Further, the partial index creation unit 180 may be included in the management PC 110, and the CPU of the management PC 110 may perform the operation as the partial index creation unit 180 together with the operation as the index creation processing amount calculation unit 130 according to the program.

Next, the operation of the second embodiment will be described. Detailed description of operations similar to those in the first embodiment will be omitted, and the operation of the index re-creation determination unit 710 will be mainly described. FIG. 23 is an explanatory diagram showing a flow of processing in which the VLAN communication range specifying system 100 creates a partial index and then creates the partial index again after the configuration is corrected by the network administrator or the designer. The horizontal axis in FIG. 23 shows the flow of time. At the time shown in FIG. 23 (a), a configuration or the like is first input, and the VLAN communication range specifying system 100 creates a partial index to specify the VLAN communication range. In the partial index 190 storage device 190, A partial network information table is stored.

Suppose that the network administrator or the designer modifies the configuration at the time shown in FIG. This modification may be a modification of only a part of the configuration. Then, when the network listening information set 220 including the modified configuration is input at the time shown in FIG. 23C, the index creation processing amount calculation unit 130 and the network dividing unit 150 are the same as in the first embodiment. As a result, the newly created partial network information table is stored in the partial network information storage means 160.

In this state, the index re-creation determination unit 710 compares the partial network information table stored in the partial network information storage device 160 with the partial network information table stored in the partial index storage device 190, and Check the identity of the information described in the partial network information table. As a result of this check, if there is a partial network that needs to be recreated when the configuration is modified, the partial network configuration, switch connection configuration information, and partial network information table are displayed as partial network information. It passes to the transmission means 170. Hereinafter, a processing procedure of the index re-creation determination unit 710 will be described.

FIG. 24 is a flowchart showing an example of processing in which the index re-creation determination unit 710 specifies a partial network in which a partial index should be re-created. FIG. 25 is an explanatory diagram showing an example of a partial network information table. FIG. 25A is an example of a partial network information table stored in the partial index storage device 190 before the configuration is corrected. FIGS. 25B and 25C are examples of partial network information tables after configuration correction, which are stored in the partial network information storage device 160. 25B and 25C are only examples, and in the following description, either one of FIGS. 25B and 25C is stored in the partial network information storage device 160. Will be described.

First, the index re-creation determination unit 710 confirms whether or not the partial network information table is stored in the partial index storage device 190 (step E1). The partial network information table is not stored in the partial index storage device 190. In the case (No in step E1), the index re-creation determination unit 710 ends the process, and the partial network information transmission unit 170 and the like perform the same operations as those in the first embodiment.

On the other hand, when the partial network information table is stored in the partial index storage device 190 (Yes in step E1), the process proceeds to step E2. For example, when the partial network information table illustrated in FIG. 25A is stored in the partial index storage device 190, the process proceeds to step E2.

When the partial network information table is stored in the partial index storage device 190 (Yes in step E1), the index re-creation determination unit 710 includes the contents of the partial network information table stored in the partial index storage device 190 and the partial network. It is confirmed whether or not the contents of the partial network information tables stored in the information storage device 160 are the same (step E2). When the content of the partial network information table stored in the partial index storage device 190 is the same as the content of the partial network information table stored in the partial network information storage device 160 (Yes in step E2), the process proceeds to step E3. On the other hand, when the content of the partial network information table stored in the partial index storage device 190 is different from the content of the partial network information table stored in the partial network information storage device 160 (No in step E2), the process proceeds to step E4. .

For example, it is assumed that the partial network information table illustrated in FIG. 25B is stored in the partial network information storage device 160 as a partial network information table after configuration modification. Here, when the partial network information table (see FIG. 25A) stored in the partial index storage device 190 is compared with the partial network information table shown in FIG. 25B, the switch corresponding to each processing PC name. The name matches the switch name of the other partial network connected to the partial network. Therefore, the index re-creation determination unit 710 determines that the content of the partial network information table stored in the partial index storage device 190 is the same as the content of the partial network information table stored in the partial network information storage device 160. The process proceeds to step E3.

Next, the index re-creation determination unit 710 describes the partial network configuration including the modified configuration input from the input device 230 and the switch connection configuration information in the partial network information table stored in the partial network information storage device 160. Is determined to be transmitted to the processing PC (step E3), and the processing is terminated. That is, the index re-creation determination unit 710 determines to re-create a partial index for a partial network including a switch whose configuration has been corrected. Then, the index re-creation determination unit 710 includes the configuration of each switch belonging to the partial network including the switch whose configuration has been corrected, the configuration of the switch of the other network connected to the partial network, and the switch connection configuration information regarding these switches. And the partial network information table to the partial network transmission means 170.

For example, assume that the configuration of switch G has been modified in this example. Then, the index re-creation determination unit 710 determines to re-create the partial index of the partial network including the switches AB, CD, G, and H, and the partial network information table stored in the partial network information storage device 160 (FIG. 25 ( b)), the configuration of the switches AB, CD, G, H, and EF, the switch connection configuration information about the switches AB, CD, G, H, and EF, and the partial network information table are stored in the partial network transmission unit 170. To pass. The partial network transmission unit 170 transmits the configuration, the switch connection configuration information, and the partial network information table to the processing PC 120 that shares the creation of the partial index determined to be recreated according to the determination of the index recreation determination unit 710. Nothing is transmitted to other processing PCs.

For example, it is assumed that the partial network information table illustrated in FIG. 25C is stored in the partial network information storage device 160 as a partial network information table after configuration modification. Here, when the partial network information table (see FIG. 25A) stored in the partial index storage device 190 is compared with the partial network information table shown in FIG. 25C, the switch corresponding to each processing PC name. The contents of the name and the switch names of other partial networks connected to the partial network do not match. Therefore, the index re-creation determination unit 710 determines that the content of the partial network information table stored in the partial index storage device 190 is different from the content of the partial network information table stored in the partial network information storage device 160. Move to E4.

Next, the index re-creation determination unit 710 stores the partial network configuration and switch connection configuration information of the partial network information storage device 160 different from the partial network stored in the partial network information table of the partial index storage device 190. It decides to transmit to each processing PC described in the partial network information table stored in the device 160 (step E4), and ends the processing.

That is, in the partial network information table stored in the partial index storage device 190 and the partial network information table stored in the partial network information storage device 160, the switch name corresponding to the processing PC name and other parts connected to the partial network It is determined that a partial index of a partial network having a different network switch name is created again. That is, it is determined that the partial index of the partial network that has been changed compared to before the configuration correction is created again.

The index re-creation determination unit 710 includes a configuration of each switch belonging to the partial network, a configuration of a switch of another network connected to the partial network, switch connection configuration information regarding the switches, a partial network information table, Is sent to the partial network transmission means 170.

For example, in this example, when FIG. 25A is compared with FIG. 25C, the partial network corresponding to the processing PC1 and the partial network corresponding to the processing PC2 are changed. Accordingly, the index re-creation determination unit 710 determines to re-create a partial index for each partial network. Then, the index re-creation determination unit 710 determines to transmit the configuration of the switches CD, G, H, and AB and the switch connection configuration information regarding the switches CD, G, H, and AB to the processing PC 1, and sets the information as a part. It passes to the network transmission means 170.

Further, it is determined that the configuration of the switches AB, EF, I, J, and CD and the switch connection configuration information regarding the switches AB, EF, I, J, and CD are transmitted to the processing PC 2, and the information is transmitted to the partial network transmission unit 170. To pass. The partial network information table is also passed to the partial network transmission means 170. The partial network transmission unit 170 transmits a configuration, switch connection configuration information, and a partial network information table to each processing PC.

However, if there are three or more partial networks before and after the configuration modification, there may be a partial network that has not changed from the one before the configuration modification among the partial networks indicated by the partial network information table. In this case, when the process proceeds to step E4, the index re-creation determination unit 710 determines that a partial index is not created again for a partial network that has not changed before and after the configuration modification. It is not sent to the network information transmitting means 170.

Other operations are the same as those in the first embodiment.

It should be noted that a mechanism may be incorporated in which the index re-creation determination unit 710 determines whether or not the partial index can be re-created depending on the amount of configuration modification by the network administrator or the designer. For example, in the network shown in FIG. 21 (f), it is assumed that the network administrator or the designer makes a configuration modification in which a VLAN-ID is newly registered in one connection port of the switch G. In this case, the processing of the index re-creation determination unit 710 for changing the setting of one connection port of the switch G has a large overhead, so the processing of the index re-creation determination unit 710 is not performed and the switch The partial index of the partial network including G may be recreated.

That is, when the configuration correction amount is equal to or smaller than the threshold, the index re-creation determination unit 710 compares the partial networks before and after the correction, and does not perform the process of determining the partial network for re-creating the partial index. May be defined as a partial network for which a partial index is re-created. A similar operation may be performed when the number of switches whose configuration has been corrected is equal to or less than a threshold value. Examples of criteria for determining whether or not to execute the processing of the index re-creation determination unit 710 include the number of switches with configuration correction and the number of rows for configuration correction, but are not limited thereto.

For example, when the user inputs an instruction not to compare the partial networks before and after the modification, the partial network including the partial network whose configuration has been modified is re-created as the partial network as described above. May be defined. Further, the determination reference value may be configured such that a network administrator or a designer can freely set it from a management screen (not shown) on the VLAN communication range specifying system 100 or the like.

Next, effects of the second embodiment of the present invention will be described. According to the second embodiment of the present invention, in management of VLAN settings, it is possible to shorten the work time required for specifying the VLAN communication range in a large-scale network. That is, it is possible to reduce the time required for the index re-creation after the network administrator or the designer corrects the switch configuration on the network.

The reason is that the content of the partial network information table that describes the division information of the partial network before the switch configuration correction and the partial network information table that describes the division information of the partial network after the switch configuration correction are the same. This is because the partial index to be corrected is specified. As a result, it is only necessary to re-create the partial index of the partial network that the network administrator or designer modified as necessary to correct the configuration. The work time required for specifying the VLAN communication range can be shortened.

Next, the outline of the present invention will be described. FIG. 26 is a block diagram showing an outline of the present invention. The VLAN communication range specifying system according to the present invention includes index creation processing amount calculation means 91, partial network identification means 92, and a plurality of partial index creation means 93.

The index creation processing amount calculation unit 91 (for example, the index creation processing amount calculation unit 130) represents a communication device (for example, a switch) by a combination of VLAN-ID and communication device identification information (for example, a switch name), and serves as a key communication. For each communication device in the management target network, an index creation processing amount for creating an index, which is a table in which a communication device that can communicate with the device as a value is associated with the device.

The partial network specifying unit 92 (for example, the network dividing unit 150) is configured so that the total amount of index creation processing of the communication devices belonging to the partial network is leveled for each partial network. Determine.

The plurality of partial index creating means 93 (for example, the partial index creating means 180 of each processing PC 120) creates a partial index that is an index having each communication device belonging to the partial network as a key.

With such a configuration, a partial index is created, so that the communication range and communication path of the VLAN can be specified based on the partial index. Further, the partial network specifying unit 92 can define a partial network, and the plurality of partial index creating units 93 can create partial indexes corresponding to the partial networks, respectively. Therefore, since the partial index creation processing can be distributed to the plurality of partial index creation means 93 and processed, even if there are a large number of communication devices, partial index creation can be performed at high speed. As a result, it is possible to specify the VLAN communication range and communication path at high speed. Further, since the partial network is determined so that the index creation processing amount is leveled for each partial network, it is possible to prevent the processing load of a specific partial index creation unit from increasing.

In the above-described embodiment, an inspection rule storage unit (for example, an inspection rule storage device 200) that stores an inspection rule that determines whether or not communication from a communication device that is a key in the partial index to a communication device that is a value, VLAN communication range specifying means (for example, VLAN communication range specifying means 210) for specifying a range that can be communicated from the communication device that is the starting point using one of the keys of each partial index as a starting point. An arrangement comprising the above is disclosed.

According to such a configuration, since the VLAN communication range specifying means specifies the VLAN communication range, the VLAN communication range specifying result can be obtained at high speed.

In the above-described embodiment, the VLAN communication range specifying unit repeatedly specifies a communication device that cannot be communicated by the inspection rule from the values corresponding to the key, and repeatedly uses the communication device as the next key. Thus, a configuration for specifying the communication range from the starting point is disclosed.

In the above-described embodiment, the VLAN communication range specifying unit selects a key as a starting point, and determines whether or not there is a value that is not checked for communication from the key among the values for the selected key. If there is an uninspected value, select the uninspected value, determine whether communication from the selected key to that value is possible by the inspection rule, and if there is no uninspected value, communicate from the selected key. If there is a value that can be communicated, the value is selected as the next key. If there is no value that can be communicated, the currently selected key is the end of the communication range. The structure determined as follows is disclosed.

Further, the above embodiment discloses a configuration including starting point information input means for inputting information for specifying a starting point key. According to such a configuration, a network administrator or the like can specify a desired communication device as a starting point.

In the above embodiment, the VLAN communication range specifying means refers to the information describing the relationship between the communication device name, the connection port, and the VLAN-ID, and indicates the communication route from the communication device as the starting point. A configuration is disclosed in which information of connection ports of individual communication devices on a communication path is added to the information. According to such a configuration, a network administrator or the like can also check information on connection ports on the communication path.

Also, the above embodiment discloses a configuration including rule editing means for adding, editing, and deleting inspection rules stored in the inspection rule storage means in accordance with user operations. According to such a configuration, the inspection rule can be changed, and convenience is increased.

Further, the above embodiment discloses a configuration in which the index creation processing amount calculation means calculates the index creation processing amount for each communication device using a calculation formula corresponding to the function of the communication device.

Further, in the above embodiment, when the communication device has a routing function, the index creation processing amount calculation unit uses the calculation formula (for example, formula (1)) when the routing function is provided. A configuration is disclosed in which the creation processing amount is calculated, and when the communication function does not have a routing function, the index creation processing amount is calculated using a calculation formula (for example, Formula (2)) in the case of no routing function. ing.

In the above embodiment, when the communication device has a routing function, the index creation processing amount calculation means uses the number of VLANs of the communication device and the number of inserted LAN cables to create a VLAN. If the communication device does not have the routing function, the number of VLANs of the communication device and the number of inserted LAN cables are calculated. Is used to calculate the index creation processing amount by calculating the number of VLANs × the number of LAN cables.

In the above-described embodiment, the partial network specifying unit individually calculates a value obtained by dividing the sum of the index creation processing amounts calculated by the index creation processing amount calculation unit for each communication device in the management target network by the number of partial networks. Each partial network is determined so that the sum of the index creation processing amount calculated for each communication device belonging to the partial network is equalized with reference to the ideal value. A configuration is disclosed.

In the above embodiment, the partial network specifying unit selects, as the reference device, the communication device having the smallest number of LAN cables inserted and the smallest index creation processing amount from among the communication devices. At the same time, select the communication device with the smallest index creation processing amount from the communication devices connected to the reference device, and select the difference between the reference device index creation processing amount and the ideal value and the reference device index creation processing amount. The difference between the addition result obtained by adding the index creation processing amount of the device and the ideal value is compared. If the difference between the addition result and the ideal value is smaller, the index creation processing amount of the communication device connected to the reference device is further reduced. Select the smallest communication device, add the communication device index creation processing amount to the addition result, calculate the difference between the addition result and the ideal value, When the difference between the difference and the smaller difference at the previous comparison is smaller and the difference between the addition result and the ideal value is smaller, the index creation processing amount is the smallest among the communication devices connected to the reference device. A configuration is disclosed in which selection of a certain communication device is repeated, and when the difference between the addition result and the ideal value becomes larger, the communication device selected from the reference device to the communication device selected one time before is defined as one partial network. .

Further, the above embodiment discloses a configuration including a division number input means for inputting a network division number, and the partial network specifying means determines a partial network when the managed network is divided into the network division numbers. Yes.

In the above embodiment, a configuration is disclosed in which the partial network specifying unit determines the partial network when the managed network is divided into the number of partial index generating units.

Further, in the above embodiment, the partial index creating means determines each key in the partial index with reference to the VLAN-ID table indicating the VLAN-ID registered in each communication device, and the communication device connected A connection table that defines a relationship between a pair and a VLAN-ID that communicates between the communication devices, a value that represents a switch that can be communicated from a key, and a routing table that indicates whether or not routing is possible for each communication device; Referring to the subnet address table indicating the subnet address corresponding to the VLAN-ID, the key communication device is routable and is the VLAN-ID registered in the communication device indicated by the key. A subnet address table is defined for a VLAN-ID different from the VLAN-ID indicated by A configuration in which a partial index is created by determining a pair of communication device identification information of a communication device indicated by a key and another VLAN-ID as a value representing a switch that can communicate from the key. It is disclosed.

In the above-described embodiment, when the setting information of the communication device is corrected, the index creation processing amount calculation unit recalculates the index creation processing amount, and the partial network identification unit redefines the partial network. By comparing the newly re-determined partial network with the partial network determined before the setting information is corrected, the partial index re-creation target judging means (index re-creation target) for judging the partial network for which the partial index is to be re-created. A configuration comprising a creation determination means 710) is disclosed. According to such a configuration, since only the partial index to be recreated can be created again, the work time required for specifying the VLAN communication range can be shortened.

Further, in the above embodiment, the setting information is changed when the partial index re-creation target determining unit is equal to each re-determined partial network and each partial network determined before the setting information is corrected. The partial network including the communication device is determined to be a partial network for which a partial index is created again, and each partial network that has been re-determined and each partial network that was determined before the setting information was corrected belong to the partial network A configuration is disclosed in which when there is a partial network whose communication device is changing, the partial network is determined as a partial network for which a partial index is created again.

Further, in the above embodiment, the partial network before and after correction of the setting information is performed when the partial index re-creation target determination unit satisfies a predetermined condition (for example, a condition that the correction amount of the setting information is equal to or less than a threshold). A configuration is disclosed in which a partial network including a communication device whose setting information has been changed is defined as a partial network in which a partial index is created again without comparing the above.

In the above embodiment, a configuration is disclosed in which the partial index creating means is an information processing device including a single arithmetic device or an information processing device including a plurality of arithmetic devices.

In the above embodiment, a configuration is disclosed in which the information processing apparatus, which is a partial index creating unit, includes a partial index storage unit that stores a partial index. According to such a configuration, the storage capacity used on the VLAN communication range specifying means side can be reduced.

The present invention has been described above with reference to the embodiments, but the present invention is not limited to the above embodiments. Various changes that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention.

This application claims priority based on Japanese Patent Application No. 2008-181481 filed on July 11, 2008, the entire disclosure of which is incorporated herein.

The present invention can be suitably applied to, for example, a VLAN communication range specifying system used for VLAN setting management, VLAN communication simulation, and the like.

100 VLAN communication range identification system 110 Management PC (information processing device for management)
120 processing PC (information processing apparatus for creating a partial index)
130 Index creation processing amount calculation means 140 Index creation processing amount storage device 150 Network division means 160 Partial network information storage device 170 Partial network information transmission means 180 Partial index creation means 190 Partial index storage device 200 Inspection rule storage device 210 VLAN communication range specification Means 211 Failure location designation means 710 Index re-creation determination means

Claims (23)

1. A communication device is represented by a combination of VLAN-ID and communication device identification information, and an index that is a table in which a communication device that can communicate with the communication device as a key is associated as a value is created. Index creation processing amount calculation means for calculating the index creation processing amount for each communication device in the managed network;
   Partial network specifying means for defining individual partial networks from the managed network, so that the total amount of index creation processing of communication devices belonging to the partial network is leveled for each partial network;
   A VLAN communication range specifying system, comprising: a plurality of partial index creating means for creating a partial index that is an index with each communication device belonging to a partial network as a key.
2. The VLAN communication range specifying system according to claim 1,
   An inspection rule storage means for storing an inspection rule for determining whether or not communication from a communication device that is a key in the partial index to a communication device that is a value;
   A VLAN communication range specifying system comprising: a VLAN communication range specifying means for specifying, using an inspection rule, a range that can be communicated from a communication device as a starting point, starting from one of the keys of each partial index.
3. The VLAN communication range specifying system according to claim 2,
   The VLAN communication range identification means identifies a communication device that is not allowed to be communicated by the inspection rule from the values corresponding to the key, and repeats the communication device as the next key to identify the communication range from the starting point. A VLAN communication range specifying system.
4. The VLAN communication range specifying system according to claim 2 or 3, wherein
   The VLAN communication range specifying means selects a key as a starting point, determines whether there is a value that is not checked for communication availability from the key, and if there is an unchecked value, Select the uninspected value, determine whether or not communication from the selected key to the value is possible according to the inspection rule, and if there is no uninspected value, determine whether or not there is a value determined to be communicable from the selected key If there is a value for which communication is possible, the VLAN is selected as the next key, and if there is no value for communication, the currently selected key is defined as the end of the communication range.
5. The VLAN communication range specifying system according to any one of claims 2 to 4, wherein:
   A VLAN communication range specifying system comprising starting point information input means for inputting information for specifying a key as a starting point.
6. The VLAN communication range specifying system according to any one of claims 2 to 5,
   The VLAN communication range specifying means refers to the information describing the relationship between the communication device name, the connection port, and the VLAN-ID, and adds the connection route information indicating the communication route from the communication device as the starting point to each individual communication route on the communication route. A VLAN communication range specifying system that adds information on connection ports of communication devices.
7. The VLAN communication range specifying system according to any one of claims 2 to 6,
   A VLAN communication range specifying system comprising rule editing means for adding, editing, and deleting inspection rules stored in an inspection rule storage means in response to a user operation.
8. The VLAN communication range specifying system according to any one of claims 2 to 7,
   An index creation processing amount calculation unit is a VLAN communication range specifying system that calculates an index creation processing amount for each communication device using a calculation formula corresponding to a function of the communication device.
9. The VLAN communication range specifying system according to any one of claims 2 to 8,
   When the communication device has a routing function, the index creation processing amount calculation means calculates the index creation processing amount using a calculation formula when the communication function is provided, and the communication function has a routing function. If not, a VLAN communication range specifying system that calculates an index creation processing amount using a calculation formula in the case of no routing function.
10. The VLAN communication range specifying system according to any one of claims 2 to 9,
    Index creation processing amount calculation means
    When a communication device has a routing function, index creation processing is performed by calculating the number of VLANs × (the number of VLANs + the number of LAN cables) using the number of VLANs of the communication device and the number of inserted LAN cables. Calculate the quantity,
    If the communication device does not have a routing function, the index creation processing amount is calculated by calculating the number of VLANs × the number of LAN cables using the number of VLANs of the communication device and the number of inserted LAN cables. VLAN communication range identification system.
11. The VLAN communication range specifying system according to any one of claims 2 to 10,
    The partial network specifying means calculates the value of the index creation processing amount in each partial network by dividing the sum of the index creation processing amounts calculated by the index creation processing amount calculation means for each communication device in the managed network by the number of partial networks. A VLAN communication range specifying system that determines individual partial networks so that the sum of index creation processing amounts calculated for each communication device belonging to the partial network is leveled with the ideal value as an ideal value.
12. The VLAN communication range specifying system according to claim 11,
    The partial network identification means is
    From among the communication devices, the communication device having the smallest number of inserted LAN cables and the smallest index creation processing amount is selected as the reference device, and the index creation processing amount of the communication devices connected to the reference device is Select the smallest communication device, add the difference between the index creation processing amount of the reference device and the ideal value, add the index creation processing amount of the selected communication device to the index creation processing amount of the reference device, and the ideal value If the difference between the addition result and the ideal value is smaller, the communication device with the smallest index creation processing amount is selected from the communication devices connected to the reference device, and the index of the communication device is selected. Add the creation processing amount to the addition result to calculate the difference between the addition result and the ideal value, and compare the difference with the smaller difference in the previous comparison, If the difference between the addition result and the ideal value is smaller, it further repeats selecting the communication device with the smallest index creation processing amount from the communication devices connected to the reference device, and the addition result and the ideal value A VLAN communication range specifying system that determines from a reference device to a communication device selected one time before as a partial network when the difference between the two becomes larger.
13. The VLAN communication range specifying system according to any one of claims 1 to 12,
    A division number input means for inputting the network division number;
    The partial network specifying unit is a VLAN communication range specifying system that determines a partial network when the managed network is divided into the number of network divisions.
14. The VLAN communication range specifying system according to any one of claims 1 to 12,
    The partial network specifying unit is a VLAN communication range specifying system that defines a partial network when the management target network is divided into the number of partial index generating units.
15. The VLAN communication range specifying system according to any one of claims 1 to 14, wherein
    The partial index creating means determines each key in the partial index with reference to the VLAN-ID table indicating the VLAN-ID registered in each communication device,
    With reference to a connection switch table that defines a relationship between a set of connected communication devices and a VLAN-ID that communicates between the communication devices, a value that represents a switch that can be communicated is determined from a key.
    With reference to the routing table indicating whether or not each communication device can be routed and the subnet address table indicating the subnet address corresponding to the VLAN-ID, the communication device that is the key is routable and the communication device indicated by the key When it is determined that the subnet address table is defined in a VLAN-ID that is a registered VLAN-ID and is different from the VLAN-ID indicated by the key, the communication device identification information of the communication device indicated by the key and the above-mentioned A VLAN communication range specifying system that creates a partial index by defining another VLAN-ID pair as a value representing a switch that can communicate from the key.
16. The VLAN communication range specifying system according to any one of claims 1 to 15,
    When the setting information of the communication device is corrected, the index creation processing amount calculation unit recalculates the index creation processing amount, and the partial network specifying unit redefines the partial network. A VLAN communication range specifying system comprising: a partial index re-creation target determining unit that determines a partial network for re-creating a partial index by comparing with a partial network determined before the setting information is corrected.
17. The VLAN communication range specifying system according to claim 16,
    The partial index re-creation target judging means is:
    If each partial network that has been redefined is equal to each partial network that was determined before the setting information was modified, a partial network that includes a communication device whose setting information has been changed is a partial network that creates a partial index again. Judgment,
    If there is a partial network in which the communication devices belonging to the partial network have changed between each reconfigured partial network and each partial network that was defined before the setting information was corrected, the partial network is assigned a partial index. A VLAN communication range specifying system that determines a partial network to be created again.
18. The VLAN communication range specifying system according to claim 16 or 17,
    The partial index re-creation target judging means is:
    When a predetermined condition is satisfied, the partial network including the communication device in which the setting information is changed without performing comparison of the partial networks before and after the setting information is corrected is determined as a partial network in which the partial index is created again. VLAN communication range identification system.
19. The VLAN communication range specifying system according to any one of claims 1 to 18, comprising:
    The partial index creation means is a VLAN communication range specifying system, which is an information processing device including a single arithmetic device or an information processing device including a plurality of arithmetic devices.
20. A VLAN communication range specifying system according to claim 19,
    The VLAN communication range specifying system, wherein the information processing apparatus as the partial index creating means includes partial index storage means for storing the partial index.
21. A table in which the index creation processing amount calculation means represents a communication device by a combination of VLAN-ID and communication device identification information, and a communication device that can communicate with the communication device as a value is associated with a key communication device as a value The index creation processing amount for creating an index is calculated for each communication device in the managed network,
    The partial network specifying means defines each partial network from the managed network so that the total amount of indexing processing of communication devices belonging to the partial network is leveled for each partial network,
    A VLAN communication range specifying method in which a plurality of partial index creating means creates a partial index that is an index having each communication device belonging to a partial network as a key.
22. The VLAN communication range specifying method according to claim 21,
    The inspection rule storage means stores an inspection rule that determines whether or not communication from a communication device that is a key in the partial index to a communication device that is a value,
    A VLAN communication range specifying method in which a VLAN communication range specifying means specifies, using an inspection rule, a range that can be communicated from a communication device that is a starting point, starting from one of the keys of each partial index.
23. On the computer,
    A communication device is represented by a combination of VLAN-ID and communication device identification information, and an index that is a table in which a communication device that can communicate with the communication device as a key is associated as a value is created. Index creation processing amount calculation processing for calculating the index creation processing amount for each communication device in the managed network;
    A partial network specifying process for defining individual partial networks from the managed network, so that the total amount of index creation processing of communication devices belonging to the partial networks is leveled for each partial network;
    When a partial index, which is an index using each communication device belonging to the partial network as a key, is created, the value from the communication device that is the key in the partial index is set as a starting point from one of the keys of each partial index. A computer-readable recording of a VLAN communication range specifying program for executing a VLAN communication range specifying process for specifying a range in which communication is possible from a communication device as a starting point, using an inspection rule that determines whether or not communication to the communication device can be performed Possible recording media.

Images