Automated bulk configuration of network devices

• US 20040123091A1
• Filed: 12/20/2002
• Published: 06/24/2004
• Est. Priority Date: 12/20/2002
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia, Inc. (Nokia Corporation)
• Inventors: Das, Debashis
• Granted Patent: US 7,013,331 B2
• Time in Patent Office: Days
• US Class Current: 713/2
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0889 Techniques to speed-up the configuration process
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Claims

1. A machine-executable method of configuring multiple devices in a data communication network, comprising:

providing a configuration profile having configuration data that specifies multiple configuration parameters applicable to each of the multiple devices;

retrieving identifying data from each of the devices;

mapping, for each device, the retrieved identifying data to a corresponding configuration profile deployment routine set;

generating device-specific commands for each device using the configuration data and the configuration profile deployment routine sets mapped to the identifying data for the devices; and

transmitting the device-specific commands to each device.

2. The machine-executable method of claim 1, wherein retrieving identifying data comprises retrieving data regarding software installed on each device, and wherein mapping the retrieved identifying data comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

3. The machine-executable method of claim 1, wherein retrieving identifying date comprises retrieving data regarding a device type of each device, and wherein mapping the retrieved identifying data comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a device type.

4. The machine-executable method of claim 1, further comprising:

providing a configured device having configuration parameters set in conformity with a desired configuration profile;

extracting configuration data from the configured device; and

storing the extracted configuration data in a configuration file.

5. The machine-executable method of claim 4, wherein storing the extracted configuration data comprises storing the configuration data in Extensible Markup Language (XML) format.

6. The machine-executable method of claim 1, further comprising preparing a script file for each device allowing batch execution of the device-specific commands for the device, and wherein transmitting the device-specific commands comprises transmitting the script files to the devices.

7. The machine-executable method of claim 1, wherein transmitting the device-specific commands to each device comprises:

transmitting a first command to the device;

receiving an acknowledgement of successful execution of the first command by the device; and

transmitting a second command to the device upon receiving the acknowledgement.

8. The machine-executable method of claim 1, further comprising establishing a secure network connection to each device, and wherein

providing a configuration profile comprises providing a profile having configuration data specifying multiple configuration parameters for a network security device,

retrieving identifying data comprises retrieving data from each device over the secure network connection, and

transmitting the device-specific commands comprises transmitting the commands over the secure network connection.

9. The machine-executable method of claim 1, wherein:

providing a configuration profile comprises providing a configuration profile that specifies operating system software to be used by each device,

generating device-specific commands comprises generating commands to install the specified operating system software on at least one device, and

transmitting the device-specific commands comprises installing the specified operating system software on the at least one device.

10. The machine-executable method of claim 1, wherein:

providing a configuration profile comprises providing a configuration profile that specifies application software to be used by each device,

generating device-specific commands comprises generating commands to install the specified application software on at least one device, and

transmitting the device-specific commands comprises installing the specified application software on the at least one device.

11. The machine-executable method of claim 1, wherein providing a configuration profile comprises selecting a configuration profile from a plurality of configuration profiles.

12. The machine-executable method of claim 1, further comprising:

selecting individual configuration parameters from the configuration profile; and

modifying the selected individual configuration parameters prior to generating device-specific commands corresponding to the selected parameters.

13. The machine-executable method of claim 1, wherein the multiple devices are a subset of a larger group of devices, and further comprising the step of identifying the devices in the subset.

14. A machine-readable medium having machine-executable instructions for performing steps comprising:

accessing a configuration profile having configuration data that specifies multiple configuration parameters applicable to multiple devices in a data communication network;

retrieving identifying data from each of the devices;

mapping, for each device, the retrieved identifying data to a corresponding configuration profile deployment routine set;

generating device-specific commands for each device using the configuration data and the configuration profile deployment routine sets mapped to the identifying data for the devices; and

transmitting the device-specific commands to each device.

15. The machine-readable medium of claim 14, wherein retrieving identifying data comprises retrieving data regarding software installed on each device, and wherein mapping the retrieved identifying data comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

16. The machine-readable medium of claim 14, comprising further machine-executable instructions for performing the steps of:

accessing a configured device having configuration parameters set in conformity with a desired configuration profile;

extracting configuration data from the configured device; and

storing the extracted configuration data in a configuration file.

17. The machine-readable medium of claim 16, wherein storing the extracted configuration data comprises storing the configuration data in Extensible Markup Language (XML) format.

18. The machine-readable medium of claim 14, comprising further machine-executable instructions for performing the step of preparing a script file for each device allowing batch execution of the device-specific commands for the device, and wherein transmitting the device-specific commands comprises transmitting the script files to the devices.

19. The machine-readable medium of claim 14, wherein transmitting the device-specific commands to each device comprises:

transmitting a first command to the device;

receiving an acknowledgement of successful execution of the first command by the device; and

transmitting a second command to the device upon receiving the acknowledgement.

20. The machine-readable medium of claim 14, comprising further machine-executable instructions for performing the step of establishing a secure network connection to each device, and wherein

accessing a configuration profile comprises accessing a profile having configuration data specifying multiple configuration parameters for a network security device,

retrieving identifying data comprises retrieving data from each device over the secure network connection, and

transmitting the device-specific commands comprises transmitting the commands over the secure network connection.

21. The machine-readable medium of claim 14, wherein:

accessing a configuration profile comprises accessing a configuration profile that specifies operating system software to be used by each device,

generating device-specific commands comprises generating commands to install the specified operating system software on at least one device, and

transmitting the device-specific commands comprises installing the specified operating system software on the at least one device.

22. The machine-readable medium of claim 14, wherein:

accessing a configuration profile comprises accessing a configuration profile that specifies application software to be used by each device,

generating device-specific commands comprises generating commands to install the specified application software on at least one device, and

transmitting the device-specific commands comprises installing the specified application software on the at least one device.

23. The machine-readable medium of claim 14, wherein accessing a configuration profile comprises receiving a selection of a configuration profile from a plurality of configuration profiles.

24. The machine-readable medium of claim 14, comprising further machine-executable instructions for performing the steps of:

receiving selections of individual configuration parameters from the configuration profile; and

receiving instructions to modify the selected individual configuration parameters prior to generating device-specific commands corresponding to the selected parameters.

25. The machine-readable medium of claim 14, wherein the multiple devices are a subset of a larger group of devices, and comprising further machine-readable instructions for receiving a designation of the devices in the subset.

26. A network management computer, comprising:

at least one network connection permitting communication with multiple network control devices; and

a processor programmed to configure multiple network control devices by;

accessing a configuration profile having configuration data that specifies multiple configuration parameters applicable to each of the devices;

retrieving identifying data from each of the devices;

mapping, for each device, the retrieved identifying data to a corresponding configuration profile deployment routine set;

generating device-specific commands for each device using the configuration data and the configuration profile deployment routine sets mapped to the identifying data for the devices; and

transmitting the device-specific commands to each device.

27. The network management computer of claim 26, wherein the processor is programmed to:

retrieve identifying data by retrieving data regarding software installed on each device; and

map the retrieved identifying data by mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

28. The network management computer of claim 26, wherein the processor is further programmed to

establish communication with a configured device having configuration parameters set in conformity with a desired configuration profile;

extract configuration data from the configured device; and

store the extracted configuration data in a configuration file.

29. The network management computer of claim 28, wherein the processor is programmed to store the extracted configuration data in Extensible Markup Language (XML) format.

30. The network management computer of claim 26 wherein the processor is programmed to prepare a script file for each device allowing batch execution of the device-specific commands for the device, and to transmit the script files to the devices.

31. The network management computer of claim 26, wherein the processor is programmed to transmit device-specific commands to each device by:

transmitting a first command to the device;

receiving an acknowledgement of successful execution of the first command by the device; and

transmitting a second command to the device upon receipt of the acknowledgement.

32. The network management computer of claim 26, wherein the processor is programmed to establish a secure network connection to each device, and wherein the processor is programmed to:

access a configuration profile by accessing a profile having configuration data specifying multiple configuration parameters for a network security device,

retrieve identifying data by retrieving data from each device over the secure network connection, and

transmit the device-specific commands by transmitting the commands over the secure network connection.

33. The network management computer of claim 26, wherein the processor is programmed to:

access a configuration profile that specifies operating system software to be used by each device, and

generate device-specific commands that include commands to install the specified operating system software on at least one device.

34. The network management computer of claim 26, wherein the processor is programmed to:

access a configuration profile that specifies application software to be used by each device, and

generate device-specific commands that include commands to install the specified application software on at least one device.

35. The network management computer of claim 26, wherein the processor is programmed to provide a selection of possible configuration profiles.

36. The network management computer of claim 26, wherein the processor is further programmed to:

receive selections of individual configuration parameters from the configuration profile; and

modify the selected individual configuration parameters prior to generating device-specific commands corresponding to the selected parameters.

37. The network management computer of claim 26, wherein the multiple devices are a subset of a larger group of devices, and wherein the processor is further programmed to receive a designation of devices in the subset.

38. A machine-executable method of configuring multiple devices in a data communication network, comprising:

providing a configured device having configuration parameters set in conformity with a desired configuration profile;

extracting configuration data from the configured device, the configuration data including data specifying operating system software;

storing the extracted configuration data in a configuration file in Extensible Markup Language (XML) format;

identifying from the multiple devices a group of devices to be configured;

retrieving, for each device in the group, identifying data including data regarding software installed upon the device;

mapping, for each device in the group, the retrieved identifying data to a corresponding configuration profile deployment routine set;

generating device-specific commands for each device in the group using the configuration file and the configuration profile deployment routine sets mapped to the identifying data for the devices in the group, the device-specific commands for at least one device including commands to install the specified operating system software on the at least one device;

transmitting device-specific commands to each device in the group;

receiving acknowledgements of successful execution of the commands from the devices in the group; and

transmitting additional commands to devices in the group upon receipt of the acknowledgements.