Method and apparatus for communicating cops protocol policies to non-cops-enabled network devices

• US 6,839,766 B1
• Filed: 01/14/2000
• Issued: 01/04/2005
• Est. Priority Date: 01/14/2000
• Status: Expired due to Fees

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: McCloghrie, Keith, Mohaban, Shai, Parnafes, Itzhak
• Primary Examiner(s): Vaughn, Jr., William C.
• Application Number:
  US09/482,326
• Time in Patent Office: 1,817 Days
• Field of Search: 709/228, 709/230, 709/223, 709/224, 709/246, 709/238, 709/232, 707/11, 707/105, 370/466, 370/467
• US Class Current: 709/232
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

A method and apparatus for communicating a COPS protocol policy to a non-COPS-enabled network device (i.e., a device or one or more interfaces included in the device) is provided. A COPS proxy is networked with a policy server and a non-COPS-enabled network device such that the COPS proxy can communicate with the policy server and the non-COPS-enabled network device. The policy server is configured to communicate COPS protocol policies to the COPS proxy, which, in turn, is configured to translate the COPS protocol policy into a policy that is in accordance with a policy protocol that the non-COPS-enabled network device can receive and correctly interpret (a “non-COPS protocol”). The translation of the policy utilizes a mapping database that delineates predetermined relationships between COPS protocol policies and the non-COPS protocol policies. More specifically, the mapping database can include relationships between COPS protocol policy information base variables, network device roles and characteristics, and non-COPS protocol parameters and associated values. Further, the COPS proxy can be configured to detect and reconcile policy conflicts for one or more network devices.

Claims

1. A method of communicating a policy to a non-COPS enabled network device, comprising:

receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

communicating a second set device data to a policy server, wherein the second set of device data is based on the first set of device data;

receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

detecting and resolving any conflicts arising from generating the policy using the set of policy data and the set of role data and further using a role assigned to the non-COPS enabled network device; and

communicating the policy to the non-COPS enabled network device using one of the one or more appropriate protocols.

2. A method as recited in claim 1, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

3. A method as recited in claim 1, wherein the step of generating the policy comprises generating the policy for use with the CLI protocol.

4. A method as recited in claim 1, wherein the step of generating the policy comprises generating the policy for use with the SNMP protocol.

5. A method as recited in claim 1, wherein the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

6. A method as recited in claim 1, wherein the step of receiving the set of policy data comprises receiving data that identifies at least two conflicting COPS policies, and wherein the step of generating the policy comprises the step of resolving the at least two conflicting COPS policies.

7. A computer readable medium containing program instructions for communicating a policy to a non-COPS enabled network device, wherein when the computer readable medium is read by a computer system having a processor and memory, the program instructions are configured to be executed by the processor, the computer readable medium comprising:

program instructions for receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

program instructions for communicating a second set of device data to a policy server, wherein the second set of device data is based on the first set of device data;

program instructions for receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

program instructions for generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

detecting and resolving any conflicts arising from generating the policy using the set of policy data and the set of role data and further using a role assigned to the non-COPS enabled network device; and

program instructions for communicating the policy to the non-COPS enabled network device using one of the one or more appropriate protocols.

8. A computer readable medium as recited in claim 7, wherein the program instructions for the first set of device data comprises data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

9. A computer readable medium as recited in claim 7, wherein the program instructions for generating the policy include program instructions for generating the policy for use with the CLI protocol.

10. A computer readable medium as recited in claim 7, wherein the program instructions for generating the policy include program instructions for generating the policy for use with the SNMP protocol.

11. A computer readable medium as recited in claim 7, wherein the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

12. A computer readable medium as recited in claim 7, wherein the set of policy data comprises data that identifies at least two conflicting COPS policies, and wherein the program instructions for generating the policy comprises program instructions for resolving the at least two conflicting COPS policies.

13. A system for communicating a policy to a non-COPS enabled network device, comprising:

a communication receiver configured to receive a first set of device data about the non-COPS enabled network device from the non-COPS enabled network device and a set of policy data from a policy server, wherein the communication receiver is configured to receive a set of role data that describes one or more roles of the non-COPS enablesd network device;

a policy translator configured to detect and resolve any conflicts arising from generating the policy using the set of policy data and the set of role data and further using a role assigned to the non-COPS enabled network device, wherein the policy is receivable and correctly interpreted by the non-COPS enabled network device; and

a communication transmitter configured to transmit a second set of device data to the policy server and the policy to the non-COPS enabled network device, wherein the policy is transmitted using one of the one or more appropriate protocols.

14. A system as recited in claim 13, wherein the policy translator comprises a mapping database, wherein the mapping database comprises data that identifies predetermined correlations between the policy, the set of policy data, and the first set of device data.

15. A system as recited in claim 13, wherein the first set of device data comprises data that identifies one or more roles associated with the non-COPS enabled network device.

16. A system as recited in claim 13, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

17. A system as recited in claim 13, wherein the policy is translated by policy translator for use with the CLI protocol.

18. A system as recited in claim 13, wherein the policy is translated by policy translator for use with the SNMP protocol.

19. A system for communicating a policy to a non-COPS enabled network device, comprising:

means for receiving a first set of device data about the non-COPS enabled network device, wherein the first set of device data includes data that identifies one or more appropriate protocols supported by the non-COPS enabled network device;

means for communicating a second set of device data to a policy server, wherein the second set of device data is based on the first set of device data;

means for receiving a set of policy data, wherein the set of policy data is configured using the COPS protocol;

means for generating the policy by using the set of policy data and a set of role data, wherein the set of role data describes one or more roles of the non-COPS enabled network device;

means for detecting and resolving any conflicts arising from generating the policy using the et of policy data and the set of role data and further using a role assigned to the non-COPS enabled network device; and

means for communicating the policy to the non-COPS enabled network device using one of the one or more appropriate protocols.

20. A system as recited in claim 19, wherein the first set of device data includes data that identifies the IOS version of the non-COPS enabled network device or interface features of the non-COPS enabled network device.

21. A system as recited in claim 19, wherein the means for generating the policy comprises means for generating the policy for use with the CLI protocol.

22. A system as recited in claim 19, wherein the means for generating the policy comprises means for generating the policy for use with the SNMP protocol.

23. A system as recited in claim 19, wherein receiving the first set of device data comprises data that identifies at least one role to which the non-COPS enabled network device has been assigned.

24. A system as recited in claim 19, wherein the means for receiving the set of policy data comprises means for receiving data that identifies at least two conflicting COPS policies, and wherein the means for generating the policy comprises means for resolving the at least two conflicting COPS policies.