Filtering within device management protocol queries

• US 10,382,252 B2
• Filed: 06/26/2012
• Issued: 08/13/2019
• Est. Priority Date: 06/26/2012
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Singaraju, Gouri Sankar, Singh, Vivek
• Primary Examiner(s): Bates, Kevin T
• Assistant Examiner(s): Patel, Ronak
• Application Number:
  US13/533,753
• Publication Number:
  US 20130346574A1
• Time in Patent Office: 2,604 Days
• Field of Search: 709223
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0233 Object-oriented techniques, for representation of network management data, e.g. common object request broker architecture [CORBA]
• CPC Class Codes: H04L 41/046 comprising network management agents or mobile agents therefor

Abstract

An example device includes an interface to receive, from a device management system, a request message that conforms to a network management protocol, a control unit that provides an execution environment for a management agent, and a data repository. The request message includes a set of managed object identifiers and a set of filter operator object identifiers. The management agent is operable to generate at least one filter criterion based on the managed object identifiers and the filter operator object identifiers, to retrieve managed object values stored in the data repository based on the managed object identifiers, each corresponding to a respective managed object identifier specified in the request message, to generate and output to the device management system a response based on the managed object identifiers of the request message and the retrieved managed object values that satisfy one or more of the at least one filter criterion.

Claims

1. A method comprising:

receiving, with a management agent executing on a network device and from a device management system, a request message, wherein the request message includes a set of managed object identifiers and a set of filter operator object identifiers, wherein the management agent operates in accordance with a simple network management protocol (SNMP), wherein the request message comprises one of an SNMP GET, GETNEXT, or GETBULK command, and wherein each of the set of filter operator object identifiers specifies one of a mathematical operator, an equality operator, a bitwise operator, and a logical operator;

generating at least one filter criterion based on the set of managed object identifiers and the set of filter operator object identifiers;

retrieving, with the management agent, a set of managed object values stored in a management information base (MIB) of the network device based on the set of managed object identifiers, wherein each managed object value of the set of managed object values corresponds to a respective managed object identifier of the set of managed object identifiers specified in the request message;

generating, with the management agent, a response message based on the set of managed object identifiers specified in the request message and the retrieved set of managed object values, wherein each managed object value included in the response message satisfies the at least one filter criterion; and

sending the response message to the device management system.

2. The method of claim 1, wherein each respective filter operator object identifier of the set of filter operator object identifiers is encoded within a variable binding of the request message as if the respective filter operator object identifier is standard configuration data.

3. The method of claim 1,

wherein each managed object identifier of the set of managed object identifiers and each filter operator object identifier of the set of filter operator object identifiers are included in the request message in an order, and

wherein generating the at least one filter criterion comprises:

identifying, with the management agent, a respective filter operator associated with each filter operator of the set of filter operator identifiers specified in the request message; and

combining the respective filter operators and the managed object identifiers into the at least one filter criterion based on the order.

4. The method of claim 1,

wherein the request message further includes a set of generic value object identifiers,

wherein each managed object identifier of the set of managed object identifiers, each filter operator object identifier of the set of filter operator object identifiers, and each generic value object identifier of the set of generic value object identifiers are included in the request message in an order, and

wherein generating the at least one filter criterion comprises:

identifying, with the management agent, a respective filter value associated with each generic value object identifier of the set of generic value object identifiers specified in the request message;

identifying, with the management agent, a respective filter operator associated with each filter operator of the set of filter operator identifiers specified in the request message; and

combining the respective filter operators, the respective filter values, and the managed object identifiers into the at least one filter criterion based on the order.

5. The method of claim 1, further comprising:

filtering, with the management agent, the set of managed object values retrieved from the MIB by at least applying the at least one filter criterion to each managed object value of the set of managed object values.

6. The method of claim 1, wherein retrieving the set of managed object values comprises retrieving managed object values from the MIB, wherein each of the managed object values satisfy one or more of the at least one filter criterion.

7. The method of claim 1, wherein the request message further includes a set of generic value object identifiers, wherein the each generic value object identifier of the set of generic value object identifiers comprise a value encoded in accordance with basic encoding rules (BER) encoding.

8. A network device comprising:

an interface to receive, from a device management system, a request message that conforms to a network management protocol, wherein the request includes a set of managed object identifiers and a set of filter operator object identifiers, wherein the request message comprises one of a simple network management protocol (SNMP) GET, GETNEXT, or GETBULK command, and wherein each of the set of filter operator object identifiers specifies one of a mathematical operator, an equality operator, a bitwise operator, and a logical operator;

a control unit that provides an execution environment for a management agent that operates in accordance with SNMP; and

a data repository configured to store information,

wherein, in response to the request, the management agent is operable to generate at least one filter criterion based on the set of managed object identifiers and the set of filter operator object identifiers and to retrieve a set of managed object values stored in the data repository based on the set of managed object identifiers,

wherein each managed object value of the set of managed object values corresponds to a respective managed object identifier of the set of managed object identifiers specified in the request message, and

wherein the management agent is operable to generate and output to the device management system a response message based on the set of managed object identifiers specified in the request message and the retrieved set of managed object values, wherein each managed object value included in the response message satisfies one or more of the at least one filter criterion.

9. The network device of claim 8, wherein each respective filter operator object identifier of the set of filter operator object identifiers is encoded within a variable binding of the request message as if the respective filter operator object identifier is standard configuration data.

10. The network device of claim 8,

wherein each managed object identifier of the set of managed object identifiers and each filter operator object identifier of the set of filter operator object identifiers are included in the request message in an order, and

wherein the management agent is operable to identify a respective filter operator associated with each filter operator of the set of filter operator identifiers specified in the request message, and to combine the respective filter operators and the managed object identifiers into the at least one filter criterion based on the order.

11. The network device of claim 8,

wherein the request message further includes a set of generic value object identifiers,

wherein each managed object identifier of the set of managed object identifiers, each filter operator object identifier of the set of filter operator object identifiers, and each generic value object identifier of the set of generic value object identifiers are included in the request message in an order, and

wherein the management agent is operable to identify a respective filter value associated with each generic value object identifier of the set of generic value object identifiers, to identify a respective filter operator associated with each filter operator of the set of filter operator identifiers specified in the request message, and to combine the respective filter operators, the respective filter values, and the managed object identifiers into the at least one filter criterion based on the order.

12. The network device of claim 8, wherein the management agent is operable to filter the set of managed object values retrieved from the MIB by at least applying the at least one filter criterion to each managed object value of the set of managed object values to exclude managed object values that do not satisfy one or more of the at least one filter criterion.

13. The network device of claim 8, wherein the management agent is operable to retrieve managed object values that satisfy one or more of the at least one filter criterion from the MIB.

14. The network device of claim 8, wherein the request message further includes a set of generic value object identifiers, and wherein each generic value object identifier of the set of generic value object identifiers comprise a value encoded in accordance with basic encoding rules (BER) encoding.

15. A computer-readable storage medium encode with instructions that cause one or more programmable processors of a network device to:

receive, from a device management system, a request message, wherein the request message includes a set of managed object identifiers and a set of filter operator object identifiers, wherein the request message comprises one of a simple network management protocol (SNMP) GET, GETNEXT, or GETBULK command, and wherein each of the set of filter operator object identifiers specifies one of a mathematical operator, an equality operator, a bitwise operator, and a logical operator;

generate at least one filter criterion based on the set of managed object identifiers and the set of filter operator object identifiers;

receive a set of managed object values stored in a management information base (MIB) of the network device based on the set of managed object identifiers, wherein each managed object value of the set of managed object values corresponds to a respective managed object identifier of the set of managed object identifiers specified in the request message;

generate a response message based on the set of managed object identifiers specified in the request message and the retrieved set of managed object values, wherein each managed object value included in the response message satisfies one or more of the at least one filter criterion; and

send the response message to the device management system.

16. A method comprising:

generating, with a device management system, a Simple Network Management Protocol (SNMP) request message, the request message including one or more filter operators and one or more managed object identifiers, wherein the SNMP request message comprises one of an SNMP GET, GETNEXT, or GETBULK command, and wherein each of the set of filter operator object identifiers specifies one of a mathematical operator, an equality operator, a bitwise operator, and a logical operator;

sending, to a managed device, the SNMP request message;

receiving, with the device management system and from the managed device, an SNMP response message, the SNMP response message including values associated with at least one of the one or more operational object identifiers, wherein the values satisfy the one or more filter operators included in the request message; and

storing the received values in a data repository of the device management system.

17. The method of claim 16, wherein generating the SNMP request message comprises:

encoding each of the one or more filter operators within variable bindings of the request message as if the filter operators are standard configuration information variable bindings.

18. The method of claim 16, further comprising:

receiving, with the device management system, information from an operator, the information specifying at least the one or more filter operators and the one or more managed object identifiers,

wherein generating the SNMP request message comprises encoding the one or more filter operators and the one or more managed object identifiers in variable bindings of the request message.