Extensible policy-based network management architecture

• US 6,611,864 B2
• Filed: 09/10/1999
• Issued: 08/26/2003
• Est. Priority Date: 09/10/1999
• Status: Expired due to Fees

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Yavatkar, Rajendra, Putzolu, David M.
• Primary Examiner(s): Sheikh, Ayaz
• Assistant Examiner(s): WON, MICHAEL YOUNG
• Application Number:
  US09/393,138
• Publication Number:
  US 20030018760A1
• Time in Patent Office: 1,446 Days
• Field of Search: 709/101, 709/102, 709/201, 709/203, 709/223, 709/224, 710/5, 710/8-10, 710/15-19, 713/100-201
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

Extending network capabilities for a network with a policy-based network management (PBNM) architecture. The method includes sending a first message from a policy enforcement point (PEP) to a policy decision point (PDP) in response to an external action, and sending a Java object in a second message from the PDP to the PEP in response to receiving the first message. The Java object may be executed on the PEP to implement a policy.

Claims

1. A method of extending network capabilities for a network with a policy-based network management (PBNM) architecture comprising:

sending a first message from a policy enforcement point (PEP) to a policy decision point (PDP) requesting configuration of conditions for a policy used to detect and manipulate distributed network state information;

sending a first Java object in a second message from the PDP to the PEP in response to receiving the first message;

executing the first Java object on the PEP to configure conditions for policy evaluation;

sending a third message from the PEP to the PDP in response to an external event triggering run-time evaluation of policy conditions by the PEP;

sending a second Java object in a fourth message from the PDP to the PEP in response to receiving the third message; and

executing the second Java object on the PEP, wherein the second Java object, when executing, at least one of examines a state of another device in the network as part of evaluating a policy condition and changes the state of another device in the network.

2. The method of claim 1, wherein the PBNM architecture operates according to a Common Open Policy Service (COPS) protocol, the first and third messages comprise request messages, and the second and fourth messages comprise decision messages.

3. The method of claim 1, wherein sending the first message, sending the second message, and executing the first Java object are performed at network initialization time.

4. A policy-based network management (PBNM) system for a network comprising:

at least one policy enforcement point (PEP) to send a first message requesting configuration of conditions for a policy used to detect and manipulate distributed network state information; and

at least one policy decision point (PDP) to send at least first and second Java objects to the at least one PEP in response to receiving the first message,

wherein the at least one PEP executes the first Java object to configure conditions for policy evaluation, and executes the second Java object in response to an event triggering run-time evaluation of policy conditions by the PEP, the second Java object at least one of examining a state of another device in the network as part of evaluating a policy condition and changing the state of another device in the network.

5. The system of claim 4, wherein sending the first message, sending the second message, and executing the first Java object are performed at network initialization time.

6. An article comprising:

a machine readable medium having a plurality of machine readable instructions, wherein when the instructions are executed by at least one processor, the instructions implement a policy-based network management (PBNM) system for a network by

sending a first message from a policy enforcement point (PEP) to a policy decision point (PDP) requesting configuration of conditions for a policy used to detect and manipulate distributed network state information;

sending at least first and second Java objects from the PDP to the PEP in response to receiving the first message;

configuring conditions for policy evaluation; and

in response to an event triggering run-time evaluation of policy conditions by the PEP, at least one of examining a state of another device in the network as part of evaluating a policy condition and changing the state of another PEP in the network.