Automated bulk configuration of network devices

• US 20060168158A1
• Filed: 12/29/2005
• Published: 07/27/2006
• Est. Priority Date: 12/20/2002
• Status: Active Grant

• Current Assignee: Nokia, Inc. (Nokia Corporation)
• Original Assignee: Nokia, Inc. (Nokia Corporation)
• Inventors: Das, Debashis
• Granted Patent: US 7,421,484 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0889 Techniques to speed-up the configuration process
• CPC Class Codes: H04L 67/303 Terminal profiles
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Multiple devices within a data communication network can be configured according to a single configuration profile. Configuration profile data is stored in a configuration file. Connections are made to individual devices, and the data in the configuration file is transformed into device-specific commands.

Claims

1. A machine-executable method of configuring multiple devices in a data communication network, comprising:

(a) receiving a selection of a group of devices to be configured in accordance with a previously-stored configuration profile, the devices of the group being situated in different locations within the data communications network, the configuration profile having previously-stored configuration data that specifies, as to each device of the group, values for multiple configuration parameters corresponding to desired operation of that device;

(b) automatically opening a network connection with each of the devices of the group;

(c) automatically retrieving identifying data from each of the devices of the group;

(d) automatically mapping, for each device of the group and subsequent to step (a), the retrieved identifying data to a corresponding configuration profile deployment routine set;

(e) automatically generating device-specific commands for each device of the group, wherein the device-specific commands for each device are generated subsequent to performance of step (d) for that device and are generated using the previously-stored configuration data and the configuration profile deployment routine set mapped to the identifying data for that device; and

(f) automatically transmitting the device-specific commands to each device of the group.

2. The machine-executable method of claim 1, wherein step (c) comprises retrieving data regarding software installed on each device of the group, and wherein step (d) comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

3. The machine-executable method of claim 1, wherein step (c) comprises retrieving data regarding a device type of each device of the group, and wherein step (d) comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a device type.

4. The machine-executable method of claim 1, further comprising (g) preparing a script file for each device of the group, each of the script files allowing batch execution of the device-specific commands for the device for which that script file was prepared, and wherein step (f) comprises transmitting the script files to the devices of the group.

5. The machine-executable method of claim 1, wherein step (f) comprises, as to each device of the group:

(f1) transmitting a first command to the device;

(f2) receiving an acknowledgement of successful execution of the first command by the device; and

(f3) transmitting a second command to the device upon receiving the acknowledgement.

6. The machine-executable method of claim 1, wherein:

step (b) further comprises establishing a secure network connection to each device of the group,

the previously-stored configuration profile includes previously-stored configuration data specifying multiple configuration parameters for network security devices,

step (c) comprises retrieving data from each device of the group over the secure network connections, and

step (f) comprises transmitting the device-specific commands over the secure network connections.

7. The machine-executable method of claim 1, wherein:

the previously-stored configuration profile specifies operating system software to be used by each device of the group,

step (e) comprises generating commands to install the specified operating system software on at least one device of the group, and

step (f) comprises installing the specified operating system software on the at least one device.

8. The machine-executable method of claim 1, wherein:

the previously-stored configuration profile specifies application software to be used by each device of the group,

step (e) comprises generating commands to install the specified application software on at least one device of the group, and

step (f) comprises installing the specified application software on the at least one device.

9. The machine-executable method of claim 1, further comprising (g) selecting a previously-stored configuration profile from a plurality of previously-stored configuration profiles.

10. The machine-executable method of claim 1, further comprising:

(g) selecting individual configuration parameters from the previously-stored configuration profile; and

(h) modifying the selected individual configuration parameters.

11. A machine-readable medium having machine-executable instructions for performing steps comprising:

(a) receiving a selection of a group of devices in a data communication network to be configured in accordance with a previously-stored configuration profile, the devices of the group being situated in different locations within the data communications network, the configuration profile having previously-stored configuration data that specifies, as to each device of the group, values for multiple configuration parameters corresponding to desired operation of that device;

(b) automatically opening a network connection with each of the devices of the group;

(c) automatically retrieving identifying data from each of the devices of the group;

(d) automatically mapping, for each device of the group and subsequent to step (a), the retrieved identifying data to a corresponding configuration profile deployment routine set;

(e) automatically generating device-specific commands for each device of the group, wherein the device-specific commands for each device are generated subsequent to performance of step (d) for that device and are generated using the previously-stored configuration data and the configuration profile deployment routine set mapped to the identifying data for that device; and

(f) automatically transmitting the device-specific commands to each device of the group.

12. The machine-readable medium of claim 11, wherein step (c) comprises retrieving data regarding software installed on each device of the group, and wherein step (d) comprises mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

13. The machine-readable medium of claim 11, comprising further machine-executable instructions for performing the step of (g) preparing a script file for each device of the group, each of the script files allowing batch execution of the device-specific commands for the device for which that script file was prepared, and wherein step (f) comprises transmitting the script files to the devices of the group.

14. The machine-readable medium of claim 11, wherein step (f) comprises, as to each device of the group:

(f1) transmitting a first command to the device;

(f2) receiving an acknowledgement of successful execution of the first command by the device; and

(f3) transmitting a second command to the device upon receiving the acknowledgement.

15. The machine-readable medium of claim 11, wherein:

step (b) further comprises establishing a secure network connection to each device of the group,

the previously-stored configuration profile includes previously-stored configuration data specifying multiple configuration parameters for network security devices,

step (c) comprises retrieving data from each device of the group over the secure network connections, and

step (f) comprises transmitting the device-specific commands over the secure network connections.

16. The machine-readable medium of claim 11, wherein:

the previously-stored configuration profile specifies operating system software to be used by each device of the group,

step (e) comprises generating commands to install the specified operating system software on at least one device of the group, and

step (f) comprises installing the specified operating system software on the at least one device.

17. The machine-readable medium of claim 11, wherein:

the previously-stored configuration profile specifies application software to be used by each device of the group,

step (e) comprises generating commands to install the specified application software on at least one device of the group, and

step (f) comprises installing the specified application software on the at least one device.

18. The machine-readable medium of claim 11, comprising further machine-executable instructions for performing the step of (g) receiving a selection of a previously-stored configuration profile from a plurality of previously-stored configuration profiles.

19. The machine-readable medium of claim 11, comprising further machine-executable instructions for performing the steps of:

(g) receiving selections of individual configuration parameters from the previously-stored configuration profile; and

(h) receiving instructions to modify the selected individual configuration parameters.

20. A network management computer, comprising:

at least one network connection permitting communication with multiple network control devices; and

a processor programmed to configure multiple network control devices by

(a) receiving a selection of a group of devices to be configured in accordance with a previously-stored configuration profile, the devices of the group being situated in different locations within the network, the configuration profile having previously-stored configuration data that specifies, as to each device of the group, values for multiple configuration parameters corresponding to desired operation of that device,

(b) automatically opening a network connection with each of the devices of the group,

(c) automatically retrieving identifying data from each of the devices of the group,

(d) automatically mapping, for each device of the group and subsequent to step (a), the retrieved identifying data to a corresponding configuration profile deployment routine set,

(e) automatically generating device-specific commands for each device of the group, wherein the device-specific commands for each device are generated subsequent to performance of step (d) for that device and are generated using the previously-stored configuration data and the configuration profile deployment routine set mapped to the identifying data for that device, and

(f) automatically transmitting the device-specific commands to each device of the group.

21. The network management computer of claim 20, wherein the processor is programmed to:

perform step (c) by retrieving data regarding software installed on each device of the group, and

perform step (d) by mapping to one of multiple configuration deployment routine sets, each of the multiple configuration deployment routine sets being specific to a type of installed software.

22. The network management computer of claim 20 wherein the processor is programmed to (g) prepare a script file for each device of the group, each of the script files allowing batch execution of the device-specific commands for the device for which that script file was prepared, and wherein step (f) comprises transmitting the script files to the devices of the group.

23. The network management computer of claim 20, wherein the processor is programmed to perform step (f), as to each device, by:

(f1) transmitting a first command to the device,

(f2) receiving an acknowledgement of successful execution of the first command by the device, and

(f3) transmitting a second command to the device upon receipt of the acknowledgement.

24. The network management computer of claim 20, wherein:

the processor is programmed to perform step (b) by a establishing secure network connection to each device of the group,

the previously-stored configuration profile includes previously-stored configuration data specifying multiple configuration parameters for network security devices,

the processor is programmed to perform step (c) by retrieving data from each device of the group over the secure network connections, and

the processor is programmed to perform step (f) by transmitting the device-specific commands over the secure network connections.

25. The network management computer of claim 20, wherein:

the previously-stored configuration profile specifies operating system software to be used by each device of the group, and

the processor is programmed to perform step (e) by generating device-specific commands that include commands to install the specified operating system software on at least one device of the group.

26. The network management computer of claim 20, wherein:

the previously-stored configuration profile specifies application software to be used by each device of the group, and

the processor is programmed to perform step (e) by generating device-specific commands that include commands to install the specified application software on at least one device of the group.

27. The network management computer of claim 20, wherein the processor is programmed to receive a selection of previously-stored configuration profiles.

28. The network management computer of claim 20, wherein the processor is further programmed to:

(g) receive selections of individual configuration parameters from the previously-stored configuration profile, and

(h) modify the selected individual configuration parameters.