CHECKING AND REPAIRING A NETWORK CONFIGURATION

• US 20080209015A1
• Filed: 05/09/2008
• Published: 08/28/2008
• Est. Priority Date: 02/20/2004
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Verma, Dinesh C., Voruganti, Kaladhar, Shackelford, David Michael, McBride, Gregory Edward, Lee, Kang-Won, Agrawal, Dakshi, Gopisetty, Sandeep, Basham, Robert Beverley, Filali-Adib, Khalid, Le, Cuong Minh, Ratliff, James Mitchell, Yardley, Brent William
• Granted Patent: US 7,788,353 B2
• Time in Patent Office: Days
• US Class Current: 709/220
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 43/50 Testing arrangements
• CPC Class Codes: H04L 67/1097 for distributed storage of data in networks, e.g. transport arrangements for network file system [NFS], storage area networks [SAN] or network attached storage [NAS]

Abstract

A technique for performing configuration checking of a network is provided. A network data store is scanned for at least one transaction. At least one event is generated for the transaction. At least one configuration policy is associated with the event. The configuration policy is compared with configuration data associated with the event. It is determined whether the configuration policy has been violated based on the comparison.

Claims

1. An article of manufacture embodied as one of hardware logic and a computer readable storage medium including program logic for performing configuration checking of a network, wherein the program logic causes operations to be performed, the operations comprising:

scanning a network data store for at least one transaction, wherein said transaction includes one of connecting components in said network, adding components to said network, updating components in said network, and rezoning components in said network;

generating at least one event for said transaction using a mapping of events to transactions;

for said event, obtaining configuration data associated with components in said transaction;

generating at least one trigger for said event, wherein said trigger is associated with at least one configuration policy;

comparing said configuration policy associated with said trigger with said configuration data associated with said event for which said trigger was generated; and

determining whether said configuration policy has been violated based on the comparison.

2. The article of manufacture of claim 1, wherein said configuration policy is retrieved from a local policy data store.

3. The article of manufacture of claim 2, wherein said configuration policy in the local policy data store is automatically updated with a configuration policy in a remote data store.

4. The article of manufacture of claim 1, wherein the operations further comprise:

receiving a hypothetical network scenario, wherein said hypothetical network scenario represents a new network configuration that a system administrator wants to create;

generating at least one transaction based on the hypothetical network scenario;

populating the network data store with configuration data for said transaction; and

after determining whether said configuration policy has been violated based on the comparison, rolling back said transaction.

5. The article of manufacture of claim 1, wherein the operations further comprise:

receiving a request to perform configuration checking on an existing network configuration.

6. The article of manufacture of claim 1, wherein the operations further comprise:

when said configuration policy has been violated, performing an action specified in that configuration policy.

7. The article of manufacture of claim 6, wherein the action is at least one of logging an indication that the configuration policy has been generated, generating at least one policy violation event, sending a notification, and highlighting a network topology viewer that graphically depicts the network.

8. The article of manufacture of claim 1, wherein the operations further comprise:

when said configuration policy has been violated,

accessing a solution in a knowledge data store; and

applying the solution so that said configuration policy is not violated.

9. The article of manufacture of claim 1, wherein the operations further comprise:

when said configuration policy has been violated,

determining that a component in the network is able to provide a solution; and

allowing the component to apply the solution so that said configuration policy is not violated.

10. The article of manufacture of claim 1, wherein the operations for determining whether said configuration policy has been violated further comprise identifying incompatibilities between components in the network, performance issues, and availability, wherein said incompatibilities are conflicts between components in said network, said performance relates to whether a desired performance level is met, and said availability relates to whether there is a single point of failure in said network.

11. An article of manufacture embodied as one of hardware logic and a computer readable storage medium including program logic for performing proactive configuration checking of a network, wherein the program logic causes operations to be performed, the operations comprising:

receiving a hypothetical network scenario, wherein said hypothetical network scenario represents a new network configuration that a system administrator wants to create;

generating at least one transaction based on said hypothetical network scenario, wherein said transaction includes one of connecting components in said hypothetical network scenario, adding components to said hypothetical network scenario, updating components in said hypothetical network scenario, and rezoning components in said hypothetical network scenario;

populating a network data store with configuration data for said transaction, wherein said configuration data includes configuration data for components in said hypothetical network scenario described by said transaction;

generating at least one event for said transaction using a mapping of events to transactions; and

using configuration data associated with said event to determine whether a configuration policy has been violated.

12. The article of manufacture of claim 11, wherein the operations further comprise:

rolling back said transaction by removing the configuration data for said transaction from the network data store.

13. An article of manufacture embodied as one of hardware logic and a computer readable storage medium including program logic for performing reactive configuration checking of a network, wherein the program logic causes operations to be performed, the operations comprising:

receiving a request to perform configuration checking on an existing network configuration;

scanning a network data store for at least one transaction, wherein said transaction includes one of connecting components in said network, adding components to said network, updating components in said network, and rezoning components in said network;

generating at least one event for said transaction using a mapping of events to transactions; and

using configuration data associated with said event to determine whether a configuration policy has been violated by determining whether the at least one transaction results in incompatibilities, performance issues, and availability issues, wherein said incompatibilities are conflicts between components in the network, said performance issues relate to whether a desired performance level is met, and said availability issues relate to whether there is a single point of failure in the network.

14. The article of manufacture of claim 13, wherein the operations further comprise:

when said configuration policy has been violated, automatically correcting the violation.

15. A system for performing configuration checking of a network, comprising:

a processor;

a computer readable storage medium accessible to the processor; and

program logic including code that causes the processor to perform;

scanning a network data store for at least one transaction, wherein said transaction includes one of connecting components in said network, adding components to said network, updating components in said network, and rezoning components in said network;

generating at least one event for said transaction using a mapping of events to transactions;

for said event, obtaining configuration data associated with components in said transaction;

generating at least one trigger for said event, wherein said trigger is associated with at least one configuration policy;

comparing the said configuration policy associated with said trigger with said configuration data associated with said event for which said trigger was generated; and

determining whether said configuration policy has been violated based on the comparison.

16. The system of claim 15, wherein said configuration policy is retrieved from a local policy data store.

17. The system of claim 16, wherein said configuration policy in the local policy data store is automatically updated with a configuration policy in a remote data store.

18. The system of claim 15, wherein the code causes the processor to further perform:

receiving a hypothetical network scenario, wherein said hypothetical network scenario represents a new network configuration that a system administrator wants to create;

generating at least one transaction based on the hypothetical network scenario;

populating the network data store with configuration data for said transaction; and

after determining whether said configuration policy has been violated based on the comparison, rolling back said transaction.

19. The system of claim 15, wherein the code causes the processor to further perform:

receiving a request to perform configuration checking on an existing network configuration.

20. The system of claim 15, wherein the code causes the processor to further perform:

when said configuration policy has been violated, performing an action specified in that configuration policy.

21. The system of claim 20, wherein the action is at least one of logging an indication that the configuration policy has been generated, generating at least one policy violation event, sending a notification, and highlighting a network topology viewer that graphically depicts the network.

22. The system of claim 15, wherein the code causes the processor to further perform:

when said configuration policy has been violated,

accessing a solution in a knowledge data store; and

applying the solution so that said configuration policy is not violated.

23. The system of claim 15, wherein the code causes the processor to further perform:

when said configuration policy has been violated,

determining that a component in the network is able to provide a solution; and

allowing the component to apply the solution so that said configuration policy is not violated.

24. The system of claim 15, wherein the code for determining whether said configuration policy has been violated causes the processor to further perform identifying incompatibilities between components in the network, performance issues, and availability issues, wherein said incompatibilities are conflicts between components in said network, said performance relates to whether a desired performance level is met, and said availability relates to whether there is a single point of failure in said network.

25. A system for performing proactive configuration checking of a network, comprising:

a processor;

a computer readable storage medium accessible to the processor; and

program logic including code that causes the processor to perform;

receiving a hypothetical network scenario, wherein said hypothetical network scenario represents a new network configuration that a system administrator wants to create;

generating at least one transaction based on said hypothetical network scenario, wherein said transaction includes one of connecting components in said hypothetical network scenario, adding components to said hypothetical network scenario, updating components in said hypothetical network scenario, and rezoning components in said hypothetical network scenario;

populating a network data store with configuration data for said transaction, wherein said configuration data includes configuration data for components in said hypothetical network scenario described by said transaction;

generating at least one event for said transaction using a mapping of events to transactions; and

using configuration data associated with said event to determine whether a configuration policy has been violated.

26. The system of claim 25, wherein the code causes the processor to further perform:

rolling back said transaction by removing the configuration data for said transaction from the network data store.

27. A system for performing reactive configuration checking of a network, comprising:

a processor;

a computer readable storage medium accessible to the processor; and

program logic including code that causes the processor to perform;

receiving a request to perform configuration checking on an existing network configuration;

scanning a network data store for at least one transaction, wherein said transaction includes one of connecting components in said network, adding components to said network, updating components in said network, and rezoning components in said network;

generating at least one event for said transaction using a mapping of events to transactions; and

using configuration data associated with said event to determine whether a configuration policy has been violated by determining whether the at least one transaction results in incompatibilities, performance issues, and availability issues, wherein said incompatibilities are conflicts between components in the network, said performance issues relate to whether a desired performance level is met, and said availability issues relate to whether there is a single point of failure in the network.

28. The system of claim 27, wherein the code causes the processor to further perform:

when said configuration policy has been violated, automatically correcting the violation.