Method and apparatus for communicating COPS protocol policies to non-COPS-enabled network devices

• US 20050060393A1
• Filed: 10/06/2004
• Published: 03/17/2005
• Est. Priority Date: 01/14/2000
• Status: Active Grant

• Current Assignee: Itzhak Parnafes, Keith Mccloghrie, Shai Mohaban
• Original Assignee: Itzhak Parnafes, Keith Mccloghrie, Shai Mohaban
• Inventors: McCloghrie, Keith, Mohaban, Shai, Parnafes, Itzhak
• Granted Patent: US 7,991,907 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

A method and apparatus for communicating a COPS protocol policy to a non-COPS-enabled network device is provided. A COPS proxy is connected between a policy server and a non-COPS-enabled network device. The policy server is configured to communicate COPS protocol policies to the COPS proxy, which is, in turn, configured to translate the COPS protocol policy into a policy that is in accordance with a policy protocol that the non-COPS-enabled network device can receive and correctly interpret (“non-COPS protocol”). The translation of the policy utilizes a mapping database that delineates predetermined relationships between COPS protocol policies and the non-COPS protocol policies. More specifically, the mapping database can include relationships between COPS protocol policy information base variables, network device roles and characteristics, and non-COPS protocol parameters and associated values. Further, the COPS proxy can be configured to detect and reconcile policy conflicts for one or more network devices.

Claims

1. A method of communicating a policy to a non-COPS enabled network device, comprising:

receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

resolving any conflicts arising from generating the policy using the set of policy data and the set of role data; and

communicating the policy to the non-COPS enabled network device using one of the one or more appropriate protocols.

2. A method as recited in claim 1, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

3. A method as recited in claim 1, wherein the step of generating the policy comprises generating the policy for use with the CLI protocol.

4. A method as recited in claim 1, wherein the step of generating the policy comprises generating the policy for use with the SNMP protocol.

5. A method as recited in claim 1, wherein the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

6. A method as recited in claim 1, wherein the step of receiving the set of policy data comprises receiving data that identifies at least two conflicting COPS policies, and wherein the step of generating the policy comprises the step of resolving the at least two conflicting COPS policies.

7. A computer readable medium containing program instructions for communicating a policy to a non-COPS enabled network device, wherein when the computer readable medium is read by a computer system having a processor and memory, the program instructions are configured to be executed by the processor, the computer readable medium comprising:

program instructions for receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

program instructions for receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

program instructions for generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

resolving any conflicts arising from generating the policy using the set of policy data and the set of role data; and

program instructions for communicating the policy to the non-COPS enabled network device.

8. A computer readable medium as recited in claim 7, wherein the program instructions for the first set of device data comprises data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

9. A computer readable medium as recited in claim 7, wherein the program instructions for generating the policy include program instructions for generating the policy for use with the CLI protocol.

10. A computer readable medium as recited in claim 7, wherein the program instructions for generating the policy include program instructions for generating the policy for use with the SNMP protocol.

11. A computer readable medium as recited in claim 7, wherein the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

12. A computer readable medium as recited in claim 7, wherein the set of policy data comprises data that identifies at least two conflicting COPS policies, and wherein the program instructions for generating the policy comprises program instructions for resolving the at least two conflicting COPS policies.

13. A system for communicating a policy to a non-COPS enabled network device, comprising:

a communication receiver configured to receive a first set of device data about the non-COPS enabled network device from the non-COPS enabled network device and a set of policy data from a policy server, wherein the set of policy data is configured using the COPS protocol, wherein the communication receiver is configured to receive a set of role data that describes one or more roles of the non-COPS enables network device;

a policy translator configured to translate the set of policy data and the set of role data into the policy, and configured to resolve any conflicts arising from generating the policy using the set of policy data and the set of role data, wherein the policy is receivable and correctly interpretable by the non-COPS enabled network device; and

a communication transmitter configured to transmit the policy to the non-COPS enabled network device, wherein the policy is transmitted using one of the one or more appropriate protocols.

14. A system as recited in claim 13, wherein the policy translator comprises a mapping database, wherein the mapping database comprises data that identifies predetermined correlations between the policy, the set of policy data, and the first set of device data.

15. A system as recited in claim 13, wherein the first set of device data comprises data that identifies one or more roles associated with the non-COPS enabled network device.

16. A system as recited in claim 13, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

17. A system as recited in claim 13, wherein the policy is translated by policy translator for use with the CLI protocol.

18. A system as recited in claim 13, wherein the policy is translated by policy translator for use with the SNMP protocol.

19. A system for communicating a policy to a non-COPS enabled network device, comprising:

means for receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

means for receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

means for generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

means for resolving any conflicts arising from generating the policy using the set of policy data and the set of role data; and

means for communicating the policy to the non-COPS enabled network device using one of the one or more appropriate protocols.

20. A system as recited in claim 19, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

21. A system as recited in claim 19, wherein the means for generating the policy comprises means for generating the policy for use with the CLI protocol.

22. A system as recited in claim 19, wherein the means for generating the policy comprises means for generating the policy for use with the SNMP protocol.

23. A system as recited in claim 19, wherein receiving the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

24. A system as recited in claim 19, wherein the means for receiving the set of policy data comprises means for receiving data that identifies at least two conflicting COPS policies, and wherein the means for generating the policy comprises means for resolving the at least two conflicting COPS policies.