WO2020228130A1

WO2020228130A1 - Communication method and system for network management server and network element of communication device

Info

Publication number: WO2020228130A1
Application number: PCT/CN2019/096625
Authority: WO
Inventors: 徐振兵; 程小鹏; 张宏
Original assignee: 烽火通信科技股份有限公司
Priority date: 2019-05-10
Filing date: 2019-07-19
Publication date: 2020-11-19
Also published as: CN111917621A; CN111917621B

Abstract

The present invention relates to the technical field of communications, and provides a communication method and system for a network management server and a network element of a communication device. The method comprises the following steps: deploying agent programs on the network management server and each GNE; and establishing a GNE tunnel for the agent programs of the network management server and each GNE, and transmitting and receiving a management packet by means of the GNE tunnel. The present invention can simplify the transmitting and receiving logic of the management packet, thereby reducing the load required by transmitting and receiving the management packet and improving the working efficiency of transmitting and receiving the management packet.

Description

Communication method and system between network management server of communication equipment and network element

Technical field

The present invention relates to the field of communication technology, in particular to a communication method and system between a network management server of a communication device and a network element.

Background technique

In the field of communication technology, network management service programs (network management) are usually used to manage and monitor the network elements in the communication network. When the network management server and network elements cannot be directly connected, it is usually necessary to use DCN (Data Communication Network) ) To provide management information communication functions for network elements, so as to remotely deploy and manage various devices. The network element directly connected to the DCN network is usually called GNE (Gateway Network Element, gateway network element), and the management messages that the network management server interacts with non-GNE are all transferred by the GNE.

The existing method for the network management server to send management messages to the GNE is generally: the network management service program of the network management server (hereinafter referred to as the network management program), after searching for which GNE the management message object (ie, network element) needs to be issued belongs to, The management message adds a layer of related protocol encapsulation (such as UDP protocol encapsulation), and the destination IP of UDP encapsulation is the IP address of GNE; it is also necessary to add an identifier for marking the specific network element to which the message needs to be delivered in the management message information. After receiving the management message, the network management service program of the GNE (hereinafter referred to as the gateway program) performs UDP decapsulation and forwards the message to the corresponding network element according to the network element identification information.

Similarly, when GNE sends non-GNE management messages to the network management server, the gateway program also needs to add UDP encapsulation to the management message; in addition, because the gateway program needs to set the source IP of the management message to the GNE IP, Therefore, the gateway program still needs to add network element identification information to the management message. Subsequently, the network management program also needs to perform UDP decapsulation after receiving the management message, and determine which non-GNE sent the message according to the network element identification information.

It can be seen that whether it is a network management program or a gateway program, it is necessary to add encapsulation, decapsulation, and manage the mapping relationship between GNE and non-GNE (that is, add and identify network element identification information) when sending and receiving management messages. It will cause the logic of sending and receiving management messages of the network management program and the gateway program to be more complicated, which not only increases the load when the program is running, but also reduces the work efficiency when the program is running.

Summary of the invention

In view of the defects in the prior art, the technical problem solved by the present invention is: how to simplify the management message receiving and sending logic, thereby reducing the load required for receiving and sending management messages, and improving the working efficiency of receiving and sending management messages.

In order to achieve the above objectives, the communication method between the network management server of the communication device and the network element provided by the present invention includes the following steps: deploy an agent program on the network management server and each GNE; the network management server and each GNE agent program establishes the GNE Tunnel, and send and receive management messages through the GNE tunnel.

On the basis of the above technical solution, when the network management server sends a management message to the local network element through the GNE, the destination IP of the management message is the IP of the local network element.

On the basis of the above technical solution, before the management message is sent, the agent at the sending end will encapsulate the management message; after the management message is received, the agent at the receiving end will decapsulate the management message; the encapsulation type depends on Protocols supported by the DCN network.

On the basis of the above technical solution, the process of the network management server sending management messages to GNE includes: after the agent receives the management message whose destination IP is set to the IP of the network element to be received, if there is a management message corresponding to the destination IP of the management message In the GNE tunnel, the management message is encrypted according to the encryption algorithm of the GNE tunnel. According to the source IP and destination IP of the GNE tunnel, the encrypted management message header is encapsulated, and then the management message is transmitted through the GNE tunnel.

On the basis of the above technical solution, the processing flow after GNE receives the management message includes: the agent program decapsulates the management message to obtain the source IP and destination IP of the management message; if there is the source IP and the decapsulated source IP and The GNE tunnel corresponding to the destination IP decrypts the management message according to the decryption algorithm corresponding to the encryption algorithm, and then forwards the management message to the corresponding local network element according to the destination IP of the management message.

The communication system between the network management server of the communication device and the network element in the embodiment of the present invention includes a network management agent module arranged on the network management server and a GNE agent module arranged on each GNE; the network management agent module and each GNE agent module GNE tunnels are established;

The network management agent module is used to: send management messages to the corresponding GNE through the GNE tunnel;

The GNE proxy module is used to send management messages to the network management server through the GNE tunnel.

On the basis of the above technical solution, the network management agent module and the GNE agent module are also used to: before sending the management message, encapsulate the management message; after receiving the management message, decapsulate the management message ; The encapsulation type depends on the protocol supported by the DCN network.

On the basis of the above technical solution, the process of the network management agent module sending management messages to GNE includes: after receiving a management message whose destination IP is set to the IP of the network element to be received, if there is a management message with the destination IP The corresponding GNE tunnel encrypts the management message according to the encryption algorithm of the GNE tunnel. According to the source IP and destination IP of the GNE tunnel, after adding encapsulation to the encrypted management message header, the management message is transmitted through the GNE tunnel .

On the basis of the above technical solution, the GNE proxy module is also used to: decapsulate the management message received by GNE to obtain the source IP and destination IP of the management message; if it exists, it corresponds to the source IP and destination IP obtained from the decapsulation In the GNE tunnel, the management message is decrypted according to the decryption algorithm corresponding to the encryption algorithm, and then the management message is forwarded to the corresponding local network element according to the destination IP of the management message.

Compared with the prior art, the advantages of the present invention are:

The present invention deploys an agent program on the network management server and each GNE, and establishes a GNE tunnel between the agent programs, so as to realize the sending and receiving of management messages without the need of the network management program and the gateway program.

At the same time, the management message can be transmitted through the GNE tunnel, which can directly determine the sending and receiving end of the management message, and then the destination IP can be set to the IP of the network element to be received when the network management server sends the management message, and the management message can be sent in GNE When the source IP is set to the IP of the sending network element. Therefore, the present invention does not need to add additional network element identification information in the prior art to the management message (that is, it does not need to manage the mapping relationship between GNE and non-GNE) to complete the identification of the management message.

In view of this, the present invention can not only send and receive management messages without the need for network management programs and gateway programs, but also can significantly simplify the logic of sending and receiving management messages; whether it is for existing network management programs and gateway programs, or the original In terms of the newly-added agent programs of the invention, all of them reduce the load required for sending and receiving management messages and improve the efficiency of sending and receiving management messages.

Description of the drawings

Figure 1 is a schematic diagram of the logical framework of the GNE proxy service program in an embodiment of the present invention;

Fig. 2 is a schematic diagram of a flow of a network management server sending a management message to a local network element in an embodiment of the present invention.

Detailed ways

The present invention will be further described in detail below in conjunction with the drawings and embodiments.

Referring to FIG. 1, the communication method between the network management server of the communication device and the network element in the embodiment of the present invention includes the following steps:

GNE agent service program (hereinafter referred to as agent program, supporting deployment in Windows and Linux environments), network management server agent program (hereinafter referred to as network management agent program) and GNE agent program (hereinafter referred to as GNE agent program) are deployed on the network management server and each GNE The function of the program) is basically the same, except for the difference between the settings on different carriers. The network management agent program establishes a GNE tunnel with each GNE agent program, and the network management agent program is set with the destination IP of all local network elements associated with each GNE tunnel, so as to realize the penetration of the DCN network.

When the network management server sends a management message to GNE, the network management server sets the destination IP of the management message to the IP of the local network element to be received; the network management agent sends the management message according to the GNE tunnel corresponding to the destination IP of the management message; The destination IP of the management message is set to the IP of the network element to be received, so the subsequent GNE can directly forward the management message according to the destination IP.

When GNE sends a management message to the network management server, GNE sets the source IP of the management message to the IP of the local network element that sends the message; the GNE agent sends the management message through the GNE tunnel.

It can be seen from this that the present invention implements the sending and receiving of management messages without the need of the network management program and the gateway program by deploying an agent program on the network management server and each GNE, and establishing a GNE tunnel between the agents. At the same time, the management message can be transmitted through the GNE tunnel, which can directly determine the sending and receiving end of the management message, and then the destination IP can be set to the IP of the network element to be received when the network management server sends the management message, and the management message can be sent in GNE When the source IP is set to the IP of the sending network element. Therefore, the present invention does not need to additionally add the network element identification information in the prior art to the management message to complete the identification of the management message.

Preferably, before the management message is sent, the agent program at the sending end will encrypt the management message; after the management message is received, the agent program at the receiving end will decrypt the management message corresponding to the encryption. Such a design can make the management message in an encrypted state during the transmission of the DCN network, thereby significantly improving the transmission security of the management message.

Preferably, before the management message is sent, the agent at the sending end will encapsulate the management message; after the management message is received, the agent at the receiving end will decapsulate the management message; the encapsulation type depends on the DCN network support Protocol (such as IP protocol, UDP protocol, TCP protocol, etc.).

It can be seen that, compared with the UDP protocol encapsulation performed by the network management program and the gateway program in the prior art, the agent program completes the encapsulation in the present invention, which not only reduces the load of the network management program and the gateway program, but also improves the work efficiency of the network management program and the gateway program; Moreover, the forwarding efficiency of the encapsulation based on the IP layer protocol is higher, which further improves the efficiency of receiving and sending management messages.

Preferably, referring to Figure 2, the process of the network management server sending the management message to the GNE includes:

S101: After the network management agent receives the management message whose destination IP is set to the IP of the network element to be received, it judges whether there is a GNE tunnel corresponding to the destination IP of the management message; if so, go to S102, otherwise it means there is an error, go to Go to S106.

S102: The network management agent program encrypts the management message according to the encryption algorithm of the GNE tunnel. According to the source IP and destination IP of the GNE tunnel, after adding IP protocol encapsulation to the header of the encrypted management message, access the DCN The network port is sent to the DCN network (that is, the management message is transmitted through the GNE tunnel), and then go to S103.

S103: After the GNE receives the management message from the network port connected to the DCN, the GNE agent program decapsulates the management message to obtain the source IP and destination IP of the management message, and then transfers to S104.

S104: The GNE agent program judges whether there is a GNE tunnel corresponding to the source IP and the destination IP obtained by decapsulation, if yes, go to S105, otherwise, it indicates that there is an error, and go to S106.

S105: After decrypting the management message according to the decryption algorithm and secret key information corresponding to the encryption algorithm in S102, the decrypted management message is sent to the management plane for processing (for example, forwarding according to the destination IP of the management message Manage messages to the corresponding local network element, etc.).

S106: Acquire key information (such as source IP, destination IP, or MAC address, etc.) of the management message, so as to troubleshoot problems, and discard the management message to avoid unnecessary resource occupation.

The process of GNE forwarding the management messages sent by local network elements to the network management server is basically the same as the above S101~S106. The difference lies in the exchange of the main body (network management server and GNE, network management agent and GNE agent), and the management report in S101. The destination IP of the message is the IP of the network management server, and the source IP is the IP of the local network element that sends the message.

The communication system between the network management server of the communication device and the network element in the embodiment of the present invention includes a network management agent module arranged on the network management server and a GNE agent module arranged on each GNE; the network management agent module and each GNE agent module GNE tunnels are established. The functions of the network management agent module and the GNE agent module are basically the same, except that they are set on different carriers.

The network management agent module is used to send a management message whose destination IP is the IP of the local network element to be received to the corresponding GNE through the GNE tunnel. The specific process includes:

The process for the network management agent module to send management messages to GNE includes: after receiving a management message whose destination IP is set to the IP of the network element to be received, if there is a GNE tunnel corresponding to the destination IP of the management message, then according to the GNE tunnel The encryption algorithm encrypts the management message. According to the source IP and destination IP of the GNE tunnel, after adding encapsulation to the encrypted management message header, the management message is transmitted through the GNE tunnel.

The GNE proxy module is used to:

(1) Send management messages whose source IP is the IP of the local network element to the network management server through the GNE tunnel;

(2) Decapsulate the management message received by GNE to obtain the source IP and destination IP of the management message; if there is a GNE tunnel corresponding to the source IP and destination IP obtained by decapsulation, it will be based on the corresponding encryption algorithm After decrypting the management message, it forwards the management message to the corresponding local network element according to the destination IP of the management message.

Both the network management agent module and the GNE agent module are also used to encrypt and encapsulate the management message before sending the management message (the encapsulation type depends on the protocol supported by the DCN network); after the management message is received, the management message is The text undergoes decryption processing and decapsulation corresponding to encryption.

It should be noted that when the system provided by the embodiment of the present invention performs inter-module communication, only the division of the above-mentioned functional modules is used as an example for illustration. In actual applications, the above-mentioned functions can be allocated by different functional modules as required. That is, the internal structure of the system is divided into different functional modules to complete all or part of the functions described above.

Further, the present invention is not limited to the above-mentioned embodiments. For those of ordinary skill in the art, without departing from the principle of the present invention, several improvements and modifications can be made, and these improvements and modifications are also regarded as the present invention. Within the scope of protection. The content not described in detail in this specification belongs to the prior art known to those skilled in the art.

Claims

A communication method between a network management server of a communication device and a network element, which is characterized in that the method includes the following steps: deploy an agent program on the network management server and each GNE; the network management server and each GNE agent establish a GNE tunnel , And send and receive management messages through the GNE tunnel.
The communication method between a network management server of a communication device and a network element according to claim 1, wherein when the network management server sends a management message to the local network element through the GNE, the destination IP of the management message is the IP of the local network element.
The method for communicating between a network management server of a communication device and a network element according to claim 1, characterized in that: before the management message is sent, the agent program of the sending end encapsulates the management message; after the management message is received, it is received The agent program at the end will decapsulate the management message; the type of encapsulation depends on the protocol supported by the DCN network.
The communication method between the network management server of the communication device and the network element according to any one of claims 1 to 3, wherein the process of the network management server sending management messages to the GNE includes: the agent program receives the destination IP and sets it to be received After the management message of the IP of the network element, if there is a GNE tunnel corresponding to the destination IP of the management message, the management message will be encrypted according to the encryption algorithm of the GNE tunnel. According to the source IP and destination IP of the GNE tunnel, After the header of the encrypted management message is encapsulated, the management message is transmitted through the GNE tunnel.
The communication method between the network management server of the communication device and the network element according to claim 4, wherein the processing flow after the GNE receives the management message includes: the agent program decapsulates the management message to obtain the source of the management message IP and destination IP; if there is a GNE tunnel corresponding to the source IP and destination IP obtained by decapsulation, the management message is decrypted according to the decryption algorithm corresponding to the encryption algorithm, and then the management message is decrypted according to the destination IP of the management message Forward the management message to the corresponding local network element.
A communication system between a network management server of a communication device and a network element, characterized in that the system includes a network management agent module set on the network management server, and a GNE proxy module set on each GNE; the network management agent module and each GNE The agent modules have established GNE tunnels;

The network management agent module is used to: send management messages to the corresponding GNE through the GNE tunnel;

The GNE proxy module is used to send management messages to the network management server through the GNE tunnel.
The communication system between the network management server of the communication device and the network element according to claim 6, wherein when the network management server sends a management message to the local network element through the GNE, the destination IP of the management message is the IP of the local network element.
The communication system between the network management server of the communication device and the network element according to claim 6, wherein the network management agent module and the GNE agent module are both further used to: encapsulate the management message before sending the management message ; After the management message is received, the management message is decapsulated; the encapsulation type depends on the protocol supported by the DCN network.
The communication system between the network management server of the communication device and the network element according to any one of claims 6 to 8, wherein the process of the network management agent module sending a management message to the GNE includes: receiving the destination IP and setting it as waiting After receiving the management message of the IP of the network element, if there is a GNE tunnel corresponding to the destination IP of the management message, the management message is encrypted according to the encryption algorithm of the GNE tunnel. According to the source IP and destination IP of the GNE tunnel, After adding encapsulation to the encrypted management message header, the management message is transmitted through the GNE tunnel.
The communication system between the network management server of the communication device and the network element according to claim 9, wherein the GNE proxy module is further used to: decapsulate the management message received by the GNE to obtain the source IP and destination of the management message IP; if there is a GNE tunnel corresponding to the source IP and destination IP obtained by decapsulation, the management message is decrypted according to the decryption algorithm corresponding to the encryption algorithm, and then the management message is forwarded according to the destination IP of the management message Text to the corresponding local network element.