Network management method and network managing server

• US 20050198374A1
• Filed: 08/10/2004
• Published: 09/08/2005
• Est. Priority Date: 03/04/2004
• Status: Abandoned Application

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Suzuki, Shinsuke
• Application Number:
  US10/914,195
• Publication Number:
  US 20050198374A1
• Time in Patent Office: Days
• US Class Current: 709/238
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/00 Network arrangements, protocols or services for addressing or naming
• CPC Class Codes: H04L 61/10 of different types
• CPC Class Codes: H04L 61/35 involving non-standard use of addresses for implementing network functionalities, e.g. coding subscription information within the address or functional addressing, i.e. assigning an address to a function
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 63/164 at the network layer

Abstract

Without changing an existing network and terminals, means for preventing improper use of the network is introduced at low costs. An address management server having a topology database of Layer 2 devices (hub, switch, and wireless station in the case of Ethernet) that configure an intranet is used. Within the server, with respect to each Layer 2 device, an address/port number correspondence acquisition means and a packet filtering specification means are stored. The address management server, according to topology information, recursively calls the address/port number correspondence acquisition means of each Layer 2 device from the upstream of the network, thereby obtaining a Layer 2 device accommodating a given Layer 2 address and its port number. By recursively calling the packet filtering specification means from the Layer 2 device in the upstream direction of the network, the Layer 2 device obtained above and its port number are filtered in a Layer device nearest to the terminal.

Claims

1. A method of managing a network comprising plural subnets in each of which a network connecting device is disposed,

wherein a network management server having a database is connected with the network, the database storing IP network addresses of the subnets and information about the network connecting devices configuring the subnets, and the network management server executes the steps of:

when an IP address is given, referring to the database to compare an IP network address of each subnet and the IP address, and requesting a network connecting device located in the uppermost upstream of a subnet in which the IP address is accommodated to search for a physical address corresponding the IP address; and

requesting the network connecting device of the subnet in which the IP address is accommodated to search for a network connecting device that accommodates and is nearest to the physical address.

2. The method of managing a network according to claim 1,

wherein the step of searching for a network connecting device is performed by successively issuing the request to search for a physical address to downstream network connecting devices.

3. The method of managing a network according to claim 1,

wherein the network management server requests the searched network connecting device to filter communications on the physical address.

4. The method of managing a network according to claim 3,

wherein, when the searched network connecting device does not have a filtering means, the network management server searches for a first network connecting device having a filtering means toward the upstream of the searched network connecting device and requests the first network connecting device to filter communications on the physical address.

5. A network management server, comprising:

a database storing IP network addresses of plural subnets configuring a network and information about network connecting devices configuring the subnets;

IP address input means;

communication means for communicating with network connecting devices configuring the subnets; and

a processing part for executing the steps of;

referring to the database to compare an IP network address of each subnet and an IP address given via the IP address input means and requesting a network connecting device located in the uppermost upstream of a subnet in which the IP address is accommodated to search for a physical address corresponding the IP address; and

requesting the network connecting device of the subnet in which the IP address is accommodated to search for a network connecting device that accommodates and is nearest to the physical address.

6. The network management server according to claim 5,

wherein information about the network connecting device includes information about an IP address and physical address/port number acquisition means and information about a packet filtering means.

7. The network management server according to claim 6,

wherein the processing program has a function for executing the step of:

if the searched network connecting device has the filtering means, requesting the searched network connecting device to filter communications on the physical address, and if the searched network connecting device does not have the filtering means, searching for a first network connecting device having the filtering means toward the upstream of the searched network connecting device and requesting the searched network connecting device to filter communications on the physical address.