Configuration commit database approach and session locking approach in a two-stage network device configuration process

• US 20060031427A1
• Filed: 06/10/2004
• Published: 02/09/2006
• Est. Priority Date: 06/10/2004
• Status: Active Grant

• Current Assignee: Charles M. Letchworth, David D. Ward, Kapil Jain, Neal Mcdonnell, Sukumar Puvvala, Yassin Movassaghi
• Original Assignee: Charles M. Letchworth, David D. Ward, Kapil Jain, Neal Mcdonnell, Sukumar Puvvala, Yassin Movassaghi
• Inventors: Ward, David D., Jain, Kapil, Puvvala, Sukumar, Letchworth, Charles M., McDonnell, Neal, Movassaghi, Yassin
• Granted Patent: US 7,640,317 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 41/028 for synchronisation between service call and response
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0879 Manual configuration through operator
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A method and apparatus for modifying the configuration of a network device, such as a router, using a two-stage configuration model is provided. A first request from a user for a change in configuration of a network device is received. Configuration data associated with the first request is stored. A second request to modify the configuration of the network device to reflect the configuration data is received. An exclusive lock on the network device is assigned to the user preventing other users from modifying the configuration of the network device. The current operational state of the network device is modified to reflect the configuration data, which is then stored in a device configuration database. Users can view configuration history data to view prior configurations of the network device. Multiple users may modify the network device without interfering with one another because conflicts are avoided through use of an exclusive lock.

Claims

1. A machine-implemented method, comprising:

in response to receiving a first request to change a configuration of a network device to reflect configuration data, updating configuration history data that describes a plurality of operational states of the network device to reflect the configuration data;

receiving a second request from a client to view a subset of the configuration history data, wherein the request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

2. The method of claim 1, wherein the step of updating the configuration history data comprises

updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

3. The method of claim 1, wherein the network device loads a base configuration when the network device initially starts, and the method further comprises:

updating the base configuration to reflect at least a portion of the configuration history data.

4. The method of claim 1, further comprising:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

5. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

6. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

7. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

8. The method of claim 1, wherein the subset fully describes a particular operational state of the network device.

9. The method of claim 1, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

10. The method of claim 1, further comprising:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

11. A machine-implemented method, comprising:

assigning an exclusive lock to a first user of a plurality of users, wherein the exclusive locks prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the operational state of a network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock; and

in response to receiving, from a second user of the plurality of users, a request to change the operational state of a network device, automatically transmitting a notification to the second user that the request is rejected because another user of the plurality of users is assigned the exclusive lock.

12. The method of claim 11, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to change the operational state of the network device to reflect a set of configuration data.

13. The method of claim 11, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to obtain the exclusive lock.

14. The method of claim 11, further comprising:

in response to receiving a second request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

15. The method of claim 11, further comprising:

in response to receiving, from the second user, a second request to view configuration data associated with the first user, transmitting information that identifies the configuration data to the second user.

16. The method of claim 11, further comprising:

in response to receiving, from the second user, a second request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.

17. A machine-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

in response to receiving a first request to change a configuration of a network device to reflect configuration data, updating configuration history data that describes a plurality of operational states of the network device to reflect the configuration data;

receiving a second request from a client to view a subset of the configuration history data, wherein the request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

18. The machine-readable medium of claim 17, wherein the step of updating the configuration history data comprises:

updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

19. The machine-readable medium of claim 17, wherein the network device loads a base configuration when the network device initially starts, and wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

updating the base configuration to reflect at least a portion of the configuration history data.

20. The machine-readable medium of claim 17, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

21. The machine-readable medium of claim 17, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

22. The machine-readable medium of claim 17, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

23. The machine-readable medium of claim 17, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

24. The machine-readable medium of claim 17, wherein the subset fully describes a particular operational state of the network device.

25. The machine-readable medium of claim 17, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

26. The machine-readable medium of claim 17, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

27. A machine-readable medium carrying one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

assigning an exclusive lock to a first user of a plurality of users, wherein the exclusive locks prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the operational state of a network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock; and

in response to receiving, from a second user of the plurality of users, a request to change the operational state of a network device, automatically transmitting a notification to the second user that the request is rejected because another user of the plurality of users is assigned the exclusive lock.

28. The machine-readable medium of claim 27, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to change the operational state of the network device to reflect a set of configuration data.

29. The machine-readable medium of claim 27, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to obtain the exclusive lock.

30. The machine-readable medium of claim 27, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving a second request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

31. The machine-readable medium of claim 27, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving, from the second user, a second request to view configuration data associated with the first user, transmitting information that identifies the configuration data to the second user.

32. The machine-readable medium of claim 27, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving, from the second user, a second request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.

33. An apparatus, comprising:

means for updating configuration history data that describes a plurality of operational states of the network device to reflect the configuration data in response to receiving a first request to change a configuration of a network device to reflect configuration data;

means for receiving a second request from a client to view a subset of the configuration history data, wherein the request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

means for transmitting the subset to the client.

34. The apparatus of claim 33, wherein the means for updating the configuration history data comprises:

means for updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

35. The apparatus of claim 33, wherein the network device loads a base configuration when the network device initially starts, and further comprising:

means for updating the base configuration to reflect at least a portion of the configuration history data.

36. The apparatus of claim 33, further comprising:

means for removing a portion of the configuration history data in response to determining that the size of the configuration history data exceeds a configurable threshold.

37. The apparatus of claim 33, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

38. The apparatus of claim 33, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

39. The apparatus of claim 33, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

40. The apparatus of claim 33, wherein the subset fully describes a particular operational state of the network device.

41. The apparatus of claim 33, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

42. The apparatus of claim 33, further comprising:

means for receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

43. An apparatus, comprising:

means for assigning an exclusive lock to a first user of a plurality of users, wherein the exclusive locks prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the operational state of a network device;

means for updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock in response to assigning the exclusive lock to the first user; and

means for automatically transmitting a notification to the second user that the request is rejected because another user of the plurality of users is assigned the exclusive lock in response to receiving, from a second user of the plurality of users, a request to change the operational state of a network device.

44. The apparatus of claim 43, wherein the request is a first request, and wherein the means for assigning the exclusive lock to the first user assigns the exclusive lock to the first user in response to receiving a second request from the first user to change the operational state of the network device to reflect a set of configuration data.

45. The apparatus of claim 43, wherein the request is a first request, and wherein the means for assigning the exclusive lock to the first user assigns the exclusive lock to the first user in response to receiving a second request from the first user to obtain the exclusive lock.

46. The apparatus of claim 43, further comprising:

means for revoking the assignment of the exclusive lock to the first user in response to receiving a second request from the second user to revoke the assignment of the exclusive lock to the first user.

47. The apparatus of claim 43, further comprising:

means for transmitting information that identifies configuration data to the second user in response to receiving, from the second user, a second request to view the configuration data associated with the first user.

48. The apparatus of claim 43, further comprising:

means for transmitting information that identifies the first user in response to receiving, from the second user, a second request to view information that identifies which user of the plurality of users is assigned the exclusive lock.

49. An apparatus comprising a memory storing instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:

in response to receiving a first request to change a configuration of a network device to reflect configuration data, updating configuration history data that describes a plurality of operational states of the network device to reflect the configuration data;

receiving a second request from a client to view a subset of the configuration history data, wherein the request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

50. The apparatus of claim 49, wherein the step of updating the configuration history data comprises:

updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

51. The apparatus of claim 49, wherein the network device loads a base configuration when the network device initially starts, and wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

updating the base configuration to reflect at least a portion of the configuration history data.

52. The apparatus of claim 49, wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

53. The apparatus of claim 49, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

54. The apparatus of claim 49, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

55. The apparatus of claim 49, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

56. The apparatus of claim 49, wherein the subset fully describes a particular operational state of the network device.

57. The apparatus of claim 49, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

58. The apparatus of claim 49, wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

59. An apparatus comprising a memory storing instructions which, when executed by one or more processors, cause the one or more processors to perform the steps of:

assigning an exclusive lock to a first user of a plurality of users, wherein the exclusive locks prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the operational state of a network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock; and

in response to receiving, from a second user of the plurality of users, a request to change the operational state of a network device, automatically transmitting a notification to the second user that the request is rejected because another user of the plurality of users is assigned the exclusive lock.

60. The apparatus of claim 59, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to change the operational state of the network device to reflect a set of configuration data.

61. The apparatus of claim 59, wherein the request is a first request, and wherein the step of assigning the exclusive lock to the first user is performed in response to receiving a second request from the first user to obtain the exclusive lock.

62. The apparatus of claim 59, wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving a second request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

63. The apparatus of claim 59, wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving, from the second user, a second request to view configuration data associated with the first user, transmitting information that identifies the configuration data to the second user.

64. The apparatus of claim 59, wherein the instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving, from the second user, a second request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.