Topology Aware Smart Merge

• US 20110238805A1
• Filed: 11/04/2010
• Published: 09/29/2011
• Est. Priority Date: 03/26/2010
• Status: Active Grant

• Current Assignee: BladeLogic Incorporated (KKR & Co., Inc.)
• Original Assignee: BladeLogic Incorporated (KKR & Co., Inc.)
• Inventors: Signori, David
• Granted Patent: US 9,491,052 B2
• Time in Patent Office: Days
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0816 the condition being an adaptation, e.g. in response to network events
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 65/403 Arrangements for multi-party communication, e.g. for conferences data switching systems for conference H04L12/18; arrangements for connecting several subscribers to a common circuit, i.e. affording conference facilities H04M3/56; television conferencing systems H04N7/15
• CPC Class Codes: H04N 7/147 Communication arrangements, e.g. identifying the communication as a video-communication, intermediate storage of the signals selecting H04Q

Abstract

Systems, methods, and computer readable media for managing the configuration of topologically related network devices are described. In general, devices that are “topologically related” are devices that are functionally coupled in some way (e.g., network switches sharing a common trunk line or network routers providing common router services in accordance with an established priority scheme). Specifically, techniques are disclosed for verifying or changing the configuration of a first network device based on the configuration of a second, topologically related, network device. Configuration policies (or rules) are described that are used to “bridge” the configuration of one device with that of another device.

Claims

1. A configuration change management method, comprising:

receiving a configuration policy;

identifying a first network device relevant to the configuration policy;

identifying a second network device that is relevant to the configuration policy and topologically related to the first network device;

obtaining configuration data for the second network device, the configuration data representing a configuration of the second network device;

determining if the configuration data complies with the configuration policy; and

generating a command to update the configuration of the second network device to comply with the configuration policy if it is determined that the configuration data does not comply with the configuration policy.

2. The method of claim 1, wherein the act of generating a command to update the configuration of the second network device comprises generating a command script.

3. The method of claim 1, further comprising sending the command to the second network device, the command adapted to cause the second network device to change its configuration to be compliant with the configuration policy.

4. The method of claim 1, wherein the act of receiving a configuration policy comprises receiving a configuration policy that specifies a configuration parameter value for a first network device in terms of a configuration parameter value for a second network device, the second network device being topologically related to the first network device.

5. The method of claim 1, wherein the act of identifying a second network device comprises accessing a topology database.

6. The method of claim 5, wherein the act of accessing a topology database comprises accessing a relational database.

7. The method of claim 1, wherein the act of generating a command comprises:

generating a command script; and

sending the command script to the second network device, the command script adapted to cause the second network device to change its configuration to be compliant with the configuration policy.

8. The method of claim 1, wherein the act of identifying a first network device relevant to the configuration policy comprises using a topology database to identify a network device that matches a first one or more qualifying statements in the configuration policy.

9. The method of claim 8, wherein the act of identifying a second network device that is relevant to the configuration policy and topologically related to the first network device comprises using the topology database to identify a network device that satisfies one or more qualifying statements in the configuration policy.

10. The method of claim 1, wherein the act of obtaining configuration data for the second network device, comprises requesting the configuration data directly from the second network device.

11. The method of claim 1, wherein the act of identifying a first network device relevant to the configuration policy, comprises:

obtaining first configuration data for the first network device, the first configuration data representing a configuration of the first network device;

determining if the first configuration data complies with the configuration policy; and

generating a command to update the configuration of the first network device to comply with the configuration policy if it is determined that the first configuration data does not comply with the configuration policy.

12. A computer network, comprising:

a communication network;

a first network device coupled to the communication network;

a second network device coupled to the communication network;

a network coupled to the first and second network device,

a third network device having a processor;

storage coupled to the third network device; and

a software module stored in the storage, the software module having instructions that, when executed, cause the third network device to perform the method of claim 1.

13. A programmable storage device having programmed instructions stored thereon for causing a programmable control device to perform the method of claim 1.

14. A networked computer system comprising a plurality of computers communicatively coupled, at least one of the plurality of computers programmed to perform at least a portion of the method of claim 1 wherein the entire method of claim 1 is performed collectively by the plurality of computers.

15. A configuration change management method, comprising:

identifying a configuration policy;

identifying a first network device relevant to the configuration policy;

obtaining first configuration data for the first network device, the first configuration data indicating a configuration of the first network device;

evaluating the first configuration data in accordance with the configuration policy;

identifying a second network device relevant to the configuration policy and topologically related to the first network device;

obtaining second configuration data for the second network device, the second configuration data indicating a configuration of the second network device; and

attempting to update the configuration of the second network device in accordance with the configuration policy

16. The method of claim 15, wherein the act of attempting to update the configuration of the second network device in accordance with the configuration policy comprises:

identifying a configuration parameter in the configuration policy;

identifying a first value associated with the configuration parameter from the first configuration data;

identifying a second value associated with the configuration parameter from the second configuration data;

determining that the second value violates the configuration policy; and

updating the configuration parameter from the second configuration data with the first value.

17. The method of claim 16, wherein the act of updating the configuration parameter from the second configuration data with the first value, comprises:

generating a command to update the second configuration; and

sending the command to the second network device.

18. The method of claim 17, wherein the act of generating a command comprises generating a command script.

19. The method of claim 15, wherein the act of identifying a second network device relevant to the configuration policy and topologically related to the first network device comprises using a topology database

20. The method of claim 15, wherein the act of obtaining first configuration data for the first network device, comprises requesting the first configuration data from the first network device.

21. A computer network, comprising:

a communication network;

a first network device coupled to the communication network;

a second network device coupled to the communication network;

a network coupled to the first and second network device,

a third network device having a processor;

storage coupled to the third network device; and

a software module stored in the storage, the software module having instructions that, when executed, cause the third network device to perform the method of claim 15.

22. A programmable storage device having programmed instructions stored thereon for causing a programmable control device to perform the method of claim 15.

23. A configuration audit method, comprising:

identifying a configuration policy;

identifying a plurality of only topologically related network devices relevant to the configuration policy;

evaluating the configuration policy for each of the plurality of topologically related network devices; and

recording a configuration rule violation for each of the plurality of topologically related network devices whose configuration data does not conform to the configuration policy.

24. The method of claim 23, wherein the act of recording a configuration rule violation comprises recording the configuration rule violation in a database.

25. The method of claim 23, wherein the act of recording a configuration rule violation comprises generating a message to a display console, the message providing an indication of the configuration rule violation.

26. A programmable storage device having programmed instructions stored thereon for causing a programmable control device to perform the method of claim 23.