Network, server, and storage policy server

• US 7,433,944 B2
• Filed: 12/05/2002
• Issued: 10/07/2008
• Est. Priority Date: 12/07/2001
• Status: Expired due to Fees

• Current Assignee: Hitachi, Ltd.
• Original Assignee: Hitachi, Ltd.
• Inventors: Kanada, Yasusi, Aoki, Atsushi
• Primary Examiner(s): Najjar; Saleh
• Assistant Examiner(s): ISMAIL, SHAWKI SAIF
• Application Number:
  US10/310,019
• Publication Number:
  US 20030115313A1
• Time in Patent Office: 2,133 Days
• Field of Search: 709/220, 709/221, 709/222, 709/223, 709/224, 709/232, 709/217, 709/230
• US Class Current: 709/223
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management
• CPC Class Codes: H04L 41/20 Network management software packages
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]

Abstract

A policy system that can add/delete policies easily to/from devices as needed through existing interfaces and enable policies to be developed quickly on-site and applied to devices provided with new device interfaces and new commands. A policy manager registers each defined policy type in a database after the definition and searches and refers to the defined policy type upon receiving a policy so as to check the validity of the policy. A policy agent registers each defined policy translation rule in a database after the definition. Upon receiving a policy, the policy agent searches and uses the translation rule to translate the policy to a command string.

Claims

1. A policy system for controlling one or more devices connected to a network using a policy comprising:

a policy manager for managing device independent policies;

a policy agent for translating said device independent policies to device dependent policies;

a receiver unit for receiving at least one new translation rule applicable to one of the devices provided with a new device interface requiring a new command, thereby translating a specific type policy to a command string for said device provided with said new device interface; and

a compiler for compiling the at least one new translation rule,

wherein said policy manager, when instructed to distribute a first policy comprising the at least one compiled new translation rule for translating a specific type policy to a command string for said device provided with said new device interface, sends a policy apply request that includes said first policy to said policy agent and said policy agent stores said first policy, and

wherein said policy agent, when receiving a second policy, translates said second policy to a command string using said at least one compiled new translation rule and sends said command string to said device provided with said new device interface,

wherein said new translation rule comprises a command template and a data generating device that provides a variable value in part of said command template,

wherein said new translation rule is described using said command template and said data generating device that generates data in a function call format that specifies first and second integers as arguments, and

wherein said data generating device fills a variable part of said command template with an integer within a range between said first and second integers to generate a command in accordance with said new translation rule and outputs an error message when no integer is found in said range.

2. The policy system of claim 1 wherein said policy manager, when instructed to delete said first policy from said policy agent, sends a policy delete request that includes the name of said first policy to said policy agent and said policy agent deletes said stored first policy in response to said delete request.

3. A policy server for controlling one or more devices connected to a network comprising:

one or more translation rules for translating policies to command strings, the one or more translation rules being received by and stored in said policy server;

a receiver unit for receiving at least one further translation rule, and

a compiler for compiling the at least one further translation rule, wherein said policy server, upon receiving a first policy, uses the at least one further compiled translation rule to translate said first policy to a first command string for a first device,

wherein said further translation rule comprises a command template and a data generating device that provides a variable value in part of said command template,

wherein said further translation rule is described using said command template and said data generating device that generates data in a function call format that specifies first and second integers as arguments, and

wherein said data generating device fills a variable part of said command template with an integer within a range between said first and second integers to generate a command in accordance with said further translation rule and outputs an error message when no integer is found in said range.

4. The policy server of claim 3 wherein said policy server, upon receiving a second policy, uses a second of said translation methods to translate said second policy to a second command string for said first device.

5. The policy server of claim 3 further comprising one or more policy definitions residing in or received by said policy server wherein said policy server, upon receiving any policy not matching one of said policy definitions, outputs an error message.

6. The policy server of claim 3 wherein said first device includes a command-line/interface and said data generating device uses a command character string template located in said command-line/interface as said command template to generate said character string.

7. The policy server of claim 3 wherein said first device includes a management information base set by an SNMP using said command template to produce a set command for said management information base and said data generating device fills an argument of said set command.

8. The policy server of claim 3 wherein said device includes a policy information base set by a COPS-PR protocol using said command template to produce a set command for said policy information base and said data generating device fills an argument of said set command.

9. The policy server of claim 3 wherein data corresponding to said device is written and set in a hardware table, said command template indicates a location and width of said data in said hardware table, and said data generating device generates values to be written for said location and width.

10. The policy server of claim 3 wherein said first policy comprises a name and a definition of a first policy class stored in said policy server;

and wherein said policy server, when instructed by a user interface to distribute said first policy, adds the name of said first policy class to a policy list displayed in said user interface.

11. The policy server of claim 10

wherein said policy server, when instructed by a user interface to delete said first policy, deletes the name of said policy class from said policy class list displayed in said user interface.

12. The policy server of claim 3 wherein said first policy comprises a list of pairs of variables and values stored in said policy server, and a policy definition comprising a list of variable names appearing in said policy, wherein said policy server, upon receipt of a policy having a variable not included on said list of variable names of said policy definition, outputs an error message.

13. The policy server of claim 3 wherein said first policy is described in a list format comprising pairs of variables and values, and data comprising a list of types of values to be substituted for a respective name variable stored in said policy server, wherein upon receipt of a policy of said specific type, outputs an error message when a value type not included on said list of types of values is substituted for said name variable in said policy.

14. The policy server of claim 3 further comprising an interpreter for evaluating an expression, wherein said further translation rule comprises a command template and a data generating device that provides a variable value in part of said command template, and wherein said further translation rule is described with said command template and said data generating device that generates data in an expression format that includes an operator or function call.

15. The policy server of claim 14 wherein said data generating device fills a variable part of said command template to generate a command according to a result of an evaluation by said interpreter.

16. The policy server of claim 3 wherein said policy server uses a second translation method to translate said first policy to a second command string for a second device.