Method and apparatus for generating configuration files using policy descriptions

• US 6,598,057 B1
• Filed: 12/22/1999
• Issued: 07/22/2003
• Est. Priority Date: 12/22/1999
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Littlefield, Joshua B., Woundy, Richard M., Morris, Gregory F., Sudduth, Andrew H., DiBello, Phillip T., Oliver, Kenneth I., Gabrielson, Hugh W., Synnestvedt, Erik J., Coco, Richard A.
• Primary Examiner(s): Rones, Charles
• Application Number:
  US09/470,105
• Time in Patent Office: 1,308 Days
• Field of Search: 707/200, 709/217, 709/220, 370/352, 370/368
• US Class Current: 1/1
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

A method and apparatus for generating configuration files using policy descriptions is provided. The present invention provides a method of generating a binary configuration file by receiving an identification encoded filename, parsing the identification encoded filename to determine identification parameters, matching the identification parameters to a set of configuration policy data to create configuration file parameters, and generating the binary configuration file from the configuration file parameters. The identification encoded filename can be can be run through an authentication check to provide increased security. Once created, the binary configuration file can also be validated, providing increased integrity. In one aspect of the present invention implemented is provided on a TFTP server. In another aspect of the invention an LDAP server is queried for certain configuration policy data, the configuration policy data being optionally cached on the TFTP server. The resulting configuration can be generated according to the DOCSIS configuration file standard, including removing non-version applicable DOCSIS configuration file parameters. The present invention can also be used to generate an annotated configuration file from the configuration file parameters, the annotated configuration file being viewable through a user interface.

Claims

1. A method of providing a configuration file to a configurable network device capable of sending a source identification encoded filename, comprising the steps of:

receiving the source identification encoded filename from the configurable network device;

parsing the source identification encoded filename to determine identification parameters;

matching the identification parameters to a set of configuration policy data to create configuration file parameters;

generating the configuration file from the configuration file parameters; and

sending the configuration file to the configurable network device.

2. The method of claim 1 further comprising the step of:

authenticating the source identification encoded filename.

3. The method of claim 1 further comprising the step of:

validating the configuration file.

4. The method of claim 1 wherein the steps are executed on a TFTP server, the source identification encoded filename is received from a cable modem and the configuration file is sent back to the cable modem.

5. The method of claim 4 wherein matching further comprises:

querying an LDAP server for certain configuration policy data.

6. The method of claim 5 wherein the LDAP configuration parameters are cached on the TFTP server.

7. The method of claim 4 wherein the configuration file is a DOCSIS compliant file.

8. The method of claim 7 wherein non-version applicable DOCSIS configuration file parameters are not included when generating the configuration file.

9. The method of claim 1 further comprising the steps of:

generating an annotated configuration file from the configuration file parameters, the annotated configuration file being viewable through a user interface.

10. The method of claim 1 wherein the configuration file parameters are drawn from a hierarchy of policy elements that correspond to the physical or logical network topology.

13. The apparatus of claim 1 further comprising:

a validator validating the configuration file.

11. A configuration file provider apparatus responsive to a configurable network device capable of sending a source identification encoded filenme, comprising:

a receiver receiving the source identification encoded filename from the configurable network device;

a parser determining identification parameters from the source identification encoded filename received from the configurable network device;

a matcher matching the identification parameters to a set of configuration policy data to create configuration file parameters;

a generator generating the configuration file from the configuration file parameters; and

a sender sending the configuration file to the configurable network device.

12. The apparatus of claim 11 further comprising:

an authenticator authenticating the source identification encoded filename.

14. The apparatus of claim 11 wherein the parser, the matcher, the generator and the transmitter are components of a TFTP server, the source identification encoded filename is received from a cable modem and the configuration file is sent back to the cable modem.

15. The apparatus of claim 14 wherein the matcher further comprises:

a query processor querying an LDAP server for certain configuration policy data.

16. The apparatus of claim 15 wherein the LDAP configuration parameters are cached on the TFTP server.

17. The apparatus of claim 14 wherein the configuration file is a DOCSIS compliant file.

18. The apparatus of claim 17 wherein non-version applicable DOCSIS configuration file parameters are not included when the generator generates the configuration file.

19. The apparatus of claim 11 further comprising:

a reporter generating an annotated configuration file from the configuration file parameters, the annotated configuration file being viewable through a user interface.

20. The apparatus of claim 11 wherein the configuration file parameters are drawn from a hierarchy of policy elements that correspond to the physical or logical network topology.

21. A computer program product comprising:

a computer usable medium for providing a configuration file to a configurable network device capable of sending a source identification encoded filename;

a set of computer program instructions embodied on the computer usable medium, including instructions to;

receive the source identification encoded filename from a the configurable network device;

parse the source identification encoded filename to determine identification parameters;

match the identification parameters to a set of configuration policy data to create configuration file parameters;

generate the configuration file from the configuration file parameters; and

send the configuration file to the configurable network device.

22. A propagated signal carried on an electromagnetic waveform for providing a configuration file to a configurable network device capable of sending a source identification encoded filename, the signal comprising a set of computer program instructions to:

receive the source identification encoded filename from the configurable network device;

parse the source identification encoded filename to determine identification parameters;

match the identification parameters to a set of configuration policy data to create configuration file parameters;

generate the configuration file from the configuration file parameters; and

send the configuration file to the configurable network device.