WO2016101532A1

WO2016101532A1 - Network operation management method and apparatus

Info

Publication number: WO2016101532A1
Application number: PCT/CN2015/080341
Authority: WO
Inventors: 吴娟; 刘明慧
Original assignee: 中兴通讯股份有限公司
Priority date: 2014-12-22
Filing date: 2015-05-29
Publication date: 2016-06-30
Also published as: CN105790979A

Abstract

A network operation management method and apparatus. The method includes the following steps: obtaining from a Network Management System (NMS) end an operation request, which is based on Simple Network Management Protocol (SNMP), for a managed object in a Management Information Base (MIB); if the operation request execution result, returned from the managed object to the NMS end based on the SNMP, is an error, writing the operation request as a log record in a network operation log.

Description

Network operation management method and device

Technical field

This document relates to the field of communication technologies, and in particular, to a network operation log management method and apparatus.

Background technique

Simple Network Management Protocol (SNMP) is the most widely used network management protocol in TCP/IP networks. You can use the NMS (Network Management System) module to manage and manage SNMP packets by sending and receiving SNMP messages between the management station and the managed network element.

Any managed resource is represented as an object called a managed object. The MIB (Management Information Base) is a collection of managed objects. It defines a set of properties of the managed object: the name of the object, the access rights of the object, and the data type of the object. Each Agent has its own MIB. The MIB can also be regarded as an interface between the NMS and the Agent. Through this interface, the NMS can perform read/write operations on each managed object in the Agent, that is, read/write operations on the MIB, thereby achieving management and Monitor the purpose of the device. The relationship between NMS, Agent and MIB is shown in Figure 1. The NMS sends an operation request to the MIB corresponding to the Agent, and the managed object in the MIB receives the operation request, processes the operation request, and returns a processing result to the operation request to the Agent.

With the application and development of network technologies, the network scale continues to expand. For operators, the number of networks and network devices that need to be managed has increased dramatically, making the SNMP-based MIB library very large. Therefore, in the process of operating the MIB object, due to the high complexity of the number of MIB nodes, the abnormal operation tasks that can be performed are very heavy, resulting in insufficient product in the testing process, which inevitably occurs during the use of the engineering project. Some security failures.

The irregularity and suddenness caused by such faults make it more difficult to locate the cause of the fault. There are problems such as difficulty in troubleshooting the faulty node, difficulty in recurring the faulty operation, and time-consuming troubleshooting, which makes the product very large. Security risks. How to effectively locate such faults quickly and improve the safety of products needs to be solved.

Summary of the invention

This paper provides a network operation log management method and device, which can play an important auxiliary role in fault checking in the network process based on SNMP protocol.

A network operation management method includes:

Obtaining an operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP by the NMS end of the network management;

If the result of executing the operation request returned by the managed object to the NMS end of the NMS based on the Simple Network Management Protocol (SNMP) is an error, the operation request is written as a log record in the network operation log.

Optionally, after obtaining the operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP, the network management NMS side further includes:

Read the switch status of the network operation log;

When the switch state of the network operation log is on, and the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the operation request is used as a log record. , written in the network operation log.

Optionally, after reading the switch status of the network operation log, the method further includes:

When the switch state of the network operation log is off, the operation request is cached;

If the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the cached operation request is released.

Optionally, the method further includes:

Receiving a network operation log operation request sent by the user;

Obtaining the operation authority of the user for the network operation log from the preset authorization template according to the network operation log operation request;

And according to the authority, the network operation log operation function is opened to the user, so that the user can perform the operation defined by the authority on the network operation log.

Optionally, the log record includes an IP address of the network management end, an attribute of the managed object network element, The operation type of the operation request, the request time of the operation request, the management information base MIB identifier OID of the managed object, the management information base MIB node name of the managed object, and the managed object pair operation The result of the request processing.

A network operation management device includes:

The operation request acquisition module is configured to: obtain an operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP by the NMS end of the network management;

The network management log first management module is configured to: if the managed object returns an error to the NMS end of the network management system based on the simple network management protocol, and the result of the operation request is an error, the operation request is used as a log record. Write to the network operation log.

Optionally, the device further includes:

The log switch status reading module is set to: read the switch status of the network operation log;

The second operation module of the network operation log is configured to: when the switch state of the network operation log is on, and the managed object returns to the NMS end of the network management system based on the simple network management protocol SNMP, the result of performing the operation request is When correct, the operation request is written as a log record in the network operation log.

Optionally, the device further includes:

An operation request record caching module is configured to: when the switch state of the network operation log is off, buffer the operation request;

The third operation module of the network operation log is configured to: if the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the cached operation request is released.

Optionally, the device further includes:

The log operation request receiving module is configured to: receive a network operation log operation request sent by the user;

The permission reading module is configured to: obtain, according to the network operation log operation request, the operation authority of the user to the network operation log from the preset authorization template;

The log operation authority management module is configured to: open the network operation to the user according to the permission A log operation function is enabled to enable the user to perform an operation defined by the authority on the network operation log.

Optionally, the log record includes a network management end IP address, the managed object network element attribute, an operation type of the operation request, a request time of the operation request, and a management information database MIB identifier of the managed object. The OID, the management information base MIB node name of the managed object, and the processing result of the operation request by the managed object.

A computer readable storage medium storing computer executable instructions for performing the method of any of the above.

As can be seen from the above, the network operation management method and apparatus provided herein can properly record SNMP-based network operations, so that when network communication between the NMS end of the network management system and the managed object in the MIB fails. The ability to have a record to find, to facilitate the inspection of the cause of the failure, helps the network management personnel to solve the network communication failure between the NMS end of the network management and the managed object in the MIB. At the same time, the method and device provided by the method set permissions on the network operation log through the authorization template to ensure the security of the network operation information.

BRIEF abstract

1 is a schematic diagram of a relationship between an NMS, an Agent, and an MIB of the related art;

2 is a schematic diagram of a network operation management method according to an embodiment of the present invention;

FIG. 3 is a schematic structural diagram of a network operation management apparatus according to an embodiment of the present invention.

Embodiments of the invention

Embodiments of the present invention will be described below with reference to the accompanying drawings.

The embodiment of the present invention first provides a network operation management method, including the steps shown in FIG. 2:

Step 201: Acquire an operation request of the managed object in the management information base MIB by the network management NMS end based on the simple network management protocol SNMP;

Step 202: If the managed object returns an error to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of the operation request is an error, then the operation request is taken as Log records are written to the network operation log.

It can be seen from the above that the network operation log management method provided by the embodiment of the present invention can record the error of the operation request processing error of the managed object on the network management end in the log, so as to facilitate subsequent viewing by the network user based on the SNMP protocol. The log obtains the operation request error and the cause of the fault, and solves the problem that the network fault between the NMS end and the MIB object is difficult to locate and difficult to reproduce, which is difficult to find and solve in time.

In the embodiment of the present invention, the user sends an operation request to the managed object in the MIB corresponding to the SNMP agent server (Agent) through the network management NMS, and the information about the current operation is obtained from the operation request message. The information is used to be recorded in the network operation log when the managed object performs a failure or error in the operation request.

The network management method provided by the embodiment of the present invention is recorded on the network management NMS end and the managed object by recording the network operation log on the basis that the current product SNMP agent function, the log management function, and the user management function have been implemented. Errors and failures in the process of network communication do not require new functions to be added to the NMS side or the managed object side of the network management system, and the effect of fault monitoring and recording can be achieved without more complicated operations, which is convenient, feasible, and easy to implement.

In the embodiment of the present invention, after obtaining the operation request of the management object in the management information base MIB based on the simple network management protocol SNMP, the network management NMS side further includes:

Read the switch status of the network operation log;

In all embodiments of the present invention, when an operation request is written as a log record in the network operation log, the operation result of the operation request can be simultaneously recorded regardless of the execution result of the operation request. If all operation requests are written to the network log as log records, the operation requests may also be marked according to the correct or erroneous results of the operation request execution to distinguish the operation requests with correct execution results and incorrect execution results.

In the embodiment of the present invention, the switch state of the network operation log can be set according to the network element status of the managed object in the MIB and the product requirement. And at any Time, you can change the status of the set network operation log switch, change from off state to on state, or change from on state to off state.

In the embodiment of the present invention, after reading the switch state of the network operation log, the method further includes:

In the embodiment of the present invention, if the switch state of the network operation log is off, the operation request sent by the NMS end of the managed object is correct, that is, no error or failure occurs when the operation request of the NMS end of the network management is performed. Then do not record this operation request. In this way, the content of the network operation log can be simplified, and the space occupied by the network operation log is saved.

In an embodiment of the invention, the method further includes:

Receiving a network operation log operation request sent by the user;

In the foregoing embodiment of the present invention, by setting an authorization template indirectly, different permissions of different users to the network operation log are recorded in the authorization template, instead of directly recording operation rights of different users on the network log in the network. In the log, the security of the network operation log file can be further ensured on the basis of setting permissions.

In the embodiment of the present invention, management personnel matching information, such as a user name and a password, may be set in the authorization template, and different network management personnel IDs record different rights in the authorization template, and the network management personnel When the network operation log performs operations such as accessing, writing, and deleting, first obtain the log operation authority record corresponding to the ID recorded in the authorization template by using the matched ID and password, and then open the log recorded in the permission operation record. Operational authority. The network administrator with the corresponding operation authority can perform corresponding operations on the network operation log to prevent the leakage of the network operation content and cause a security risk.

In an embodiment of the present invention, the log record may include a request message of the operation request. And a processed result message of the operation request by the managed object.

In an embodiment of the present invention, the log record includes a network management end IP address, the managed object network element attribute, an operation type of the operation request, a request time of the operation request, and management of the managed object. The information base MIB identifier OID (Object ID), the management information base MIB node name of the managed object, and the processing result of the managed object on the operation request.

In the actual application process, the network management end IP address, the operation request operation type, the operation request request time, the managed object management information base MIB identifier OID, and the managed object management information base MIB node name may be from the network management The NMS obtains the packet of the operation request sent by the managed object. The managed object network element attribute and the processing result of the managed object to the operation request may be obtained from a response message when the managed object answers the operation request. For a network communication failure, the NMS end of the NMS that sends the operation request in the fault operation can be known through the IP address of the network management end in the above log record; the operation type of the operation request can be used to restore the operation request sent in the fault operation; The request time can assist the network administrator to determine the cause of the fault operation. For example, if the time point of the fault operation is the time point of the network congestion, the fault may be related to the network congestion; the management information base MIB identifier of the managed object The management information base MIB node name of the OID and the managed object may be used to find a managed object applied by the fault operation; the processing result of the operation request by the managed object may be used to determine the cause of the fault operation, for example, if the operation If the processing result of the request indicates that the operation request message is ambiguous, the message of the operation request may be damaged or lost during transmission. In summary, the content contained in the log record can provide an effective and powerful clue for the network administrator to perform a fault query.

In an embodiment of the invention, the method comprises the following steps:

The NMS end of the network management system receives an operation request sent by the network user.

The network management NMS sends the operation request in the form of a message to the managed object in the MIB corresponding to the SNMP proxy server. The information carried in the request packet includes: the network management end IP address that sends the operation request, and the operation. The requested operation type, the request time of the operation request, the management information base MIB identifier OID (Object ID) of the managed object, and the management information base MIB node name of the managed object;

Detecting the switch status of the MIB network operation log;

If the switch status is on, the request message of the operation request and the processing result message of the managed object are recorded in the MIB network operation log;

If the switch state is off, the request message of the operation request is cached;

When the processing result of the operation request by the managed object indicates that an error occurs, the request message of the operation request and the processing result message of the managed object are recorded in the MIB network operation log;

When the processing result of the operation request by the managed object is displayed as normal, the request message of the cached operation request is released and discarded, and the operation request is not recorded.

In the embodiment of the present invention, it is possible to determine whether the processing result has an error or a fault by detecting a processing result message of the operation request by the managed object.

In the embodiment of the present invention, when the network operation log switch state is on, only the operation request that the managed object processing result is an error or a fault may be recorded according to a preset principle, so as to save log storage space.

The embodiment of the invention provides a network operation management device, and the structure is as shown in FIG. 3, which includes:

The operation request obtaining module 31 is configured to: obtain an operation request of the managed object in the management information base MIB by the network management NMS end based on the simple network management protocol SNMP;

The network operation log first management module 32 is configured to: if the managed object returns to the NMS end of the network management system based on the simple network management protocol SNMP, and the result of executing the operation request is an error, the operation request is used as a log record. , written to the network operation log.

In some embodiments of the present invention, the apparatus further includes:

The operation request record cache module is set to: when the switch state of the network operation log is off When closed, the operation request is cached;

In some embodiments of the present invention, the apparatus further includes:

The log operation authority management module is configured to: open a network operation log operation function to the user according to the authority, so that the user can perform the operation defined by the authority on the network operation log.

In some embodiments of the present invention, the log record includes a network management end IP address, the managed object network element attribute, an operation type of the operation request, a request time of the operation request, and management of the managed object. The information base MIB identifier OID, the management information base MIB node name of the managed object, and the processing result of the managed object to the operation request.

One of ordinary skill in the art will appreciate that all or a portion of the steps of the above-described embodiments can be implemented using a computer program flow, which can be stored in a computer readable storage medium, such as on a corresponding hardware platform (eg, The system, device, device, device, etc. are executed, and when executed, include one or a combination of the steps of the method embodiments.

Alternatively, all or part of the steps of the above embodiments may also be implemented by using an integrated circuit. These steps may be separately fabricated into individual integrated circuit modules, or multiple modules or steps may be fabricated into a single integrated circuit module. achieve.

The devices/function modules/functional units in the above embodiments may be implemented by a general-purpose computing device, which may be centralized on a single computing device or distributed over a network of multiple computing devices.

The device/function module/function unit in the above embodiment is implemented in the form of a software function module and When sold or used as a stand-alone product, it can be stored on a computer readable storage medium. The above mentioned computer readable storage medium may be a read only memory, a magnetic disk or an optical disk or the like.

Industrial applicability

The network operation management method and apparatus provided by the embodiments of the present invention can appropriately record SNMP-based network operations, so that when the network communication between the NMS end of the network management system and the managed object in the MIB fails, records can be found. It is convenient for the operation to check the cause of the failure, which helps the network administrator to solve the network communication failure between the NMS end of the network management and the managed object in the MIB. In the meantime, the method and the device provided by the embodiment of the present invention set the authority on the network operation log through the authorization template to ensure the security of the network operation information.

Claims

A network operation management method includes:

Obtaining an operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP by the NMS end of the network management;

If the result of executing the operation request returned by the managed object to the NMS end of the NMS based on the Simple Network Management Protocol (SNMP) is an error, the operation request is written as a log record in the network operation log.
The method of claim 1, after obtaining the operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP, the network management NMS side further includes:

Read the switch status of the network operation log;

When the switch state of the network operation log is on, and the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the operation request is used as a log record. , written in the network operation log.
The method according to claim 2, after reading the switch state of the network operation log, further comprising:

When the switch state of the network operation log is off, the operation request is cached;

If the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the cached operation request is released.
The method of any of claims 1-3, further comprising:

Receiving a network operation log operation request sent by the user;

Obtaining the operation authority of the user for the network operation log from the preset authorization template according to the network operation log operation request;

And according to the authority, the network operation log operation function is opened to the user, so that the user can perform the operation defined by the authority on the network operation log.
The method according to claim 1, wherein the log record comprises a network management end IP address, the managed object network element attribute, an operation type of the operation request, a request time of the operation request, and the managed Object management information base MIB identifier OID, managed object management The information base MIB node name and the processing result of the operation request by the managed object.
A network operation management device includes:

The operation request acquisition module is configured to: obtain an operation request of the managed object in the management information base MIB based on the simple network management protocol SNMP by the NMS end of the network management;

The network management log first management module is configured to: if the managed object returns an error to the NMS end of the network management system based on the simple network management protocol, and the result of the operation request is an error, the operation request is used as a log record. Write to the network operation log.
The apparatus of claim 6 further comprising:

The log switch status reading module is set to: read the switch status of the network operation log;

The second operation module of the network operation log is configured to: when the switch state of the network operation log is on, and the managed object returns to the NMS end of the network management system based on the simple network management protocol SNMP, the result of performing the operation request is When correct, the operation request is written as a log record in the network operation log.
The apparatus of claim 7 further comprising:

An operation request record caching module is configured to: when the switch state of the network operation log is off, buffer the operation request;

The third operation module of the network operation log is configured to: if the managed object returns to the NMS end of the network management system based on the Simple Network Management Protocol (SNMP), the result of executing the operation request is correct, and the cached operation request is released.
The apparatus of any of claims 6-8, further comprising:

The log operation request receiving module is configured to: receive a network operation log operation request sent by the user;

The permission reading module is configured to: obtain, according to the network operation log operation request, the operation authority of the user to the network operation log from the preset authorization template;

The log operation authority management module is configured to: open a network operation log operation function to the user according to the authority, so that the user can perform the operation defined by the authority on the network operation log.
The apparatus according to claim 6, wherein the log record comprises a network management end IP address, the managed object network element attribute, an operation type of the operation request, a request time of the operation request, and the managed The management information base MIB identifier OID of the object, the management information base MIB node name of the managed object, and the processing result of the operation request by the managed object.
A computer readable storage medium storing computer executable instructions for performing the method of any of claims 1-5.