Comparing configuration information for a data forwarding device

• US 7,519,731 B1
• Filed: 12/01/2000
• Issued: 04/14/2009
• Est. Priority Date: 12/01/2000
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Enns, Robert P.
• Primary Examiner(s): Winder; Patrice
• Assistant Examiner(s): Duong; Thomas
• Application Number:
  US09/734,324
• Time in Patent Office: 3,056 Days
• Field of Search: 709/220, 709/221, 709/238, 709/242
• US Class Current: 709/238
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0863 by rolling back to previous configuration versions
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/0894 Policy-based network configuration management

Abstract

Techniques for comparing sets of configuration information for data forwarding devices, such as routers, are disclosed. Scoping may be used to limit comparisons to particular hierarchical levels and/or categories of sets of configuration information. Different users may have different permissions regarding viewing, or editing different parts of configuration information.

Claims

1. A processor-executable method comprising:

a) accepting at least a part of a selected set of configuration information for a data forwarding device;

b) accepting at least a part of a set of candidate configuration information for the data forwarding device; and

c) determining, using at least one processor, differences, if any, between the at least a part of the set of candidate configuration information for the data forwarding device, and

the at least a part of the selected set of configuration information for the data forwarding device,

wherein the set of candidate configuration information for the data forwarding device includes a plurality of statements,

wherein a first statement of the plurality of statements of the set of candidate configuration information for the data forwarding device contains a second statement of the plurality of statements to define at least a part of a hierarchical configuration,

wherein the selected set of configuration information for the data forwarding device includes a plurality of statements,

wherein a first statement of the plurality of statements of the selected set of configuration information for the data forwarding device contains a second statement of the plurality of statements to define at least a part of a hierarchical configuration,

wherein the at least the part of the set of candidate configuration information only includes a defined first statement and any of the plurality of statements that are descendants of the defined first statement in the hierarchical configuration, and

wherein the at least the part of the selected set of configuration information includes a corresponding first statement and any of the plurality of statements that are descendants of the defined first statement in the hierarchical configuration.

2. The processor-executable method of claim 1 wherein the selected set of configuration information for a data forwarding device is a most recently committed set of configuration information for the data forwarding device.

3. The processor-executable method of claim 1 wherein the selected set of configuration information for a data forwarding device is selected by a user.

4. The processor-executable method of claim 1 wherein the defined first statement is defined based on a statement of the hierarchical candidate configuration information on which a user is presently working.

5. The processor-executable method of claim 1 wherein the defined first statement is defined by a user input.

6. The processor-executable method of claim 1 wherein the hierarchical configuration information includes at least two categories at a first hierarchical level, and

wherein the at least two categories are selected from a group of data forwarding device configuration categories consisting of:

A) chassis configuration information;

B) class of service configuration information;

C) firewall configuration information;

D) forwarding options configuration information;

E) groups configuration information;

F) interfaces configuration information;

G) policy options configuration information;

H) protocols configuration information;

I) routing instances configuration information;

J) routing options configuration information;

K) network management protocol configuration information; and

L) system configuration information.

7. The processor-executable method of claim 1 wherein the hierarchical configuration information includes at least two categories at a given hierarchical level, the method further comprising:

d) associating a predetermined permission value with a user that is logged in; and

e) determining, using the at least one processor whether the logged in user is permitted to access one of the at least two categories of configuration information based on the predetermined permission.

8. A method comprising:

a) accepting at least a part of a selected set of configuration information for a data forwarding device;

b) accepting at least a part of a set of candidate configuration information for the data forwarding device; and

c) determining differences, if any, between

the at least a part of the set of candidate configuration information for the data forwarding device, and

the at least a part of the selected set of configuration information for the data forwarding device,

wherein the act of accepting at least a part of a selected set of configuration information for a data forwarding device is performed by accessing a storage device of the data forwarding device,

wherein the act of accepting at least a part of a set of candidate configuration information for the data forwarding device is performed by accessing a storage device of the data forwarding device; and

wherein the act of determining differences, if any, between

the at least the part of the set of candidate configuration information for the data forwarding device, and

the at least the part of the selected set of configuration information for the data forwarding device,

is performed by a component of the data forwarding device.

9. The method of claim 8 wherein the selected set of configuration information for a data forwarding device is a most recently committed set of configuration information for the data forwarding device.

10. The method of claim 8 wherein the selected set of configuration information for a data forwarding device is selected by a user.

11. The method of claim 8 wherein the candidate set of configuration information is an uncommitted candidate configuration, and

wherein the selected set of configuration information is a configuration that has been saved on the data forwarding device as a committed configuration.

12. A processor-executable method comprising:

a) accepting at least a part of a selected set of configuration information for a data forwarding device;

b) accepting at least a part of a set of candidate configuration information for the data forwarding device; and

c) determining, using at least one processor, differences, if any, between

the at least a part of the set of candidate configuration information for the data forwarding device, and

the at least a part of the selected set of configuration information for the data forwarding device,

wherein the set of candidate configuration information for the data forwarding device includes a plurality of statements,

wherein the selected set of configuration information for the data forwarding device includes a plurality of statements, and

wherein the act of determining differences, if any, between

the at least a part of the set of candidate configuration information for the data forwarding device, and

the at least a part of the selected set of configuration information for the data forwarding device,

considers changes to statements without regard to parameter values.

13. The processor-executable method of claim 12 wherein the selected set of configuration information for a data forwarding device is a most recently committed set of configuration information for the data forwarding device.

14. The processor-executable method of claim 12 wherein the selected set of configuration information for a data forwarding device is selected by a user.

15. In a data forwarding device, a facility for checking at least a part of a set of candidate configuration information, the facility comprising:

a) a storage device for storing at least one set of configuration information for the data forwarding device;

b) an input facility for

i) accepting at least a part of a selected one of the at least one set of configuration information for a data forwarding device accessed from the storage device of the data forwarding device, and

ii) accepting at least a part of a set of candidate configuration information for the data forwarding device accessed from the storage device of the data forwarding device; and

c) a configuration comparison facility for determining differences, if any, between

the at least a part of the set of candidate configuration information for the data forwarding device, and

the at least a part of the selected one of the at least one set of configuration information for the data forwarding device.

16. A method for determining differences in at least a part of sets of configuration information, comprising:

a) accepting at least a part of a first set of configuration information for a data forwarding device, wherein the first set of configuration information has not been saved on the data forwarding device as a committed configuration, and wherein no copied instance of the first set of configuration information has been saved on the data forwarding device as a committed configuration;

b) accepting at least a part of a second set of configuration information for the data forwarding device, wherein the second set of configuration information has been saved on the data forwarding device;

c) determining, using at least one processor, differences, if any, between

the first set of configuration information for a data forwarding device, and

the second set of configuration information for a data forwarding device; and

d) displaying using a display device the determined differences, wherein the determined differences are indicated by at least one of special characters preceding changed lines of configuration information, special symbols preceding changed lines of configuration information, special font characteristics applied to changed versus unchanged lines of the configuration information, and special font characteristics applied to changed versus unchanged sections of the configuration information.

17. The method of claim 16 wherein the first set of configuration information for a data forwarding device includes a plurality of statements,

wherein a first statement of the plurality of statements of the first set of configuration information for a data forwarding device contains a second statement of the plurality of statements to define at least a part of a hierarchical configuration,

wherein the second set of configuration information for a data forwarding device includes a plurality of statements, and

wherein a first statement of the plurality of statements of the second set of configuration information for a data forwarding device contains a second statement of the plurality of statements to define at least a part of a hierarchical configuration.

18. The method of claim 17 wherein the at least the part of the first set of configuration information for a data forwarding device only includes a defined first statement and any of the plurality of statements that are descendants of the defined first statement in the hierarchical configuration, and

wherein the at least the part of the second set of configuration information for a data forwarding device includes a corresponding first statement and any of the plurality of statements that are descendants of the defined first statement in the hierarchical configuration.

19. The method of claim 18 wherein the defined first statement is defined by a user input.

20. The method of claim 17 wherein the hierarchical configuration information includes at least two categories at a first hierarchical level, and

wherein the at least two categories are selected from a group of data forwarding device configuration categories consisting of:

A) chassis configuration information;

B) class of service configuration information;

C) firewall configuration information;

D) forwarding options configuration information;

E) groups configuration information;

F) interfaces configuration information;

G) policy options configuration information;

H) protocols configuration information;

I) routing instances configuration information;

J) routing options configuration information;

K) network management protocol configuration information; and

L) system configuration information.

21. The method of claim 16 wherein the act of accepting at least a part of the first set of configuration information for the data forwarding device is performed by accessing a storage device of the data forwarding device,

wherein the act of accepting at least a part of the second set of configuration information for the data forwarding device is performed by accessing a storage device of the data forwarding device, and

wherein the act of determining differences, if any, between

the first set of configuration information for the data forwarding device, and

the second set of configuration information for the data forwarding device,

is performed by a component of the data forwarding device.

22. The method of claim 16 wherein the first set of configuration information for a data forwarding device includes a plurality of statements, at least some of which define parameter values,

wherein the second set of configuration information for the data forwarding device includes a plurality of statements, at least some of which define parameter values, and

wherein the act of determining differences, if any, between

the first set of configuration information for the data forwarding device, and

the second set of configuration information for the data forwarding device,

considers a selected one of (a) statements only, (b) parameter values only, and (c) statements and parameter values.

23. The method of claim 16 wherein a command to save the first set of configuration information on the data forwarding device as a committed configuration has not occurred.

24. The method of claim 16 wherein the first set of configuration information is from an uncommitted candidate configuration, and

wherein the second set of configuration information is from a configuration that has been saved on the data forwarding device as a committed configuration.

25. In a data forwarding device, a facility for comparing at least a part of sets of configuration information, the facility comprising:

a) a storage device for storing at least two sets of configuration information for the data forwarding device;

b) an input facility for

i) accepting at least a part of a first selected one of the at least two sets of configuration information for the data forwarding device accessed from the storage device of the data forwarding device, and

ii) accepting at least a part of a second selected one of the at least two sets of configuration information for the data forwarding device accessed from the storage device of the data forwarding device; and

c) a configuration comparison facility for determining differences, if any, between

the first selected one of the at least two sets of configuration information for the data forwarding device, and

the second selected one of the at least two sets of configuration information for the data forwarding device.

26. A method comprising:

receiving with a data forwarding device, a first set of configuration information for the data forwarding device, wherein the first set of configuration information has not yet been committed on the data forwarding device, and wherein no copied instance of the first set of configuration information has been saved on the data forwarding device as a committed configuration;

receiving with the data forwarding device, a second set of configuration information for the data forwarding device;

determining with the data forwarding device, differences between the first and second sets of configuration information; and

displaying, using a display device, the determined differences, wherein the determined differences are indicated by at least one of special characters preceding changed lines of configuration information, special symbols preceding changed lines of configuration information, special font characteristics applied to changed versus unchanged lines of the configuration information, and special font characteristics applied to changed versus unchanged sections of the configuration information.

27. The method according to claim 26, wherein the data forwarding device is a router.