Automated deployment and management of network devices

• US 7,539,769 B2
• Filed: 04/30/2001
• Issued: 05/26/2009
• Est. Priority Date: 04/30/2001
• Status: Active Grant

• Current Assignee: Valtrus Innovations Limited (f/k/a Dolya Holdco 9 Limited) (Key Patent Innovations Limited)
• Original Assignee: Hewlett-Packard Development Co. (HP Inc.)
• Inventors: McGuire, Jacob
• Primary Examiner(s): Hu; Jinsong
• Application Number:
  US09/843,815
• Publication Number:
  US 20020161863A1
• Time in Patent Office: 2,948 Days
• Field of Search: 709/220, 709/221, 709/222, 709/232, 709/236, 709/237, 713/1, 713/2, 713/100, 707/102
• US Class Current: 709/232
• CPC Class Codes: H04L 41/0806 for initial configuration or provisioning, e.g. plug-and-play
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An automated provisioning and management system for network devices includes a library of commands that are generic to all devices of interest, and device-specific plug-ins for implementing those commands in each of the different devices. A user can select any one of the standard commands and have it applied to a particular device of interest in a manner which is capable of being handled by that device. An interface between the library and a source of configuration information, such as a database, enables the various tasks associated with the provisioning and management of network devices to be automatically carried out on multiple devices, thereby minimizing, or even eliminating, the need to manually configure each such device. Various tools are provided to facilitate the ability of support personnel to identify and monitor functions performed by various devices, as well as detect and correct errors in the operation of those devices.

Claims

1. A system for automatically configuring a plurality of different types of network devices, comprising:

A memory for storing a library and a database;

the library being a library of generic commands that can be applied to said devices and converters for converting each of said generic commands into device-specific commands to be applied to individual network devices;

the database being a database storing configuration parameters for said plurality of network devices; and

a hardware processor configured to provide a configuration interface;

the configuration interface receives said parameters from said database and issues generic commands to said library to cause individual ones of said devices to be configured using said device-specific commands and in accordance with said parameters;

wherein said configuration interface displays identifications of firewall devices associated with a network and conduits within said firewall devices, and permits a user to select at least one of said firewall devices.

2. The system of claim 1 wherein said interface issues commands to said library to obtain configuration information from individual devices, and stores said information in said database.

3. The system of claim 1 wherein said configuration parameters are stored in said database as a model containing a list of values to which each configuration parameter in an individual one of said devices is to be set.

4. The system of claim 3 wherein said model also identifies the specific sequence in which the setting of the parameter values is to take place.

5. The system of claim 3 wherein each parameter setting in said model is used to construct a separate command, and said commands are stored in a queue to be individually retrieved and forwarded to said library by said interface.

6. The system of claim 1 wherein said configuration interface communicates with said database to obtain the identifications of the firewall devices and generates a first display which lists said devices, and further includes means responsive to the selection of one of the devices in said list to generate a second display which lists the conduits, wherein each conduit is identified by means of descriptive names stored in said database for local and external devices and/or networks that are logically connected by the conduit.

7. The system of claim 6, further including means responsive to the selection of one of the devices listed in said first display to generate a third display which lists internal networks owned by an entity associated with the selected device, and means to selectively open and close conduits respectively corresponding to said internal networks.

8. The system of claim 7 wherein said third display further includes means for adding a new conduit to one of the internal networks.

9. The system of claim 1 wherein said hardware processor, providing said configuration interface:

commands a console server to send a message to each console connected to said console server;

analyzes a response to said message provided by each console to determine the type of device which transmitted said response; and

displays a list of device types corresponding to the consoles connected to said console server.

10. The system of claim 1 further including the memory storing a template which contains a sequence of commands for configuring each of a plurality of devices of a given type, wherein each command that refers to a particular device contains a variable as the identification of the device;

and wherein;

said database stores a record which indicates the respective network address of each specific device for which a given device is to be configured, and

said configuration interface is responsive to a command to configure a given device for retrieving said template and the stored record associated with said given device, substituting the network addresses in the retrieved record for the variables in said template and issuing commands to configure the given device in accordance with said retrieved record and said template.

11. The system of claim 10 wherein said network addresses comprise Internet Protocol (IP) addresses.

12. The system of claim 10 wherein a plurality of templates are stored in said memory, each corresponding to a different respective type of device.

13. The system of claim 12 wherein said templates are stored in said database.

14. The system of claim 1 wherein said converters transmit each of said commands in accordance with a transmission protocol specific to the individual devices, respectively.

15. The system of claim 14 wherein one of said transmission protocols comprises Telnet.

16. A method for automatically configuring a plurality of different types of network devices, comprising the following steps:

storing a library of generic commands for configuring said devices;

linking a plurality of converters respectively associated with different ones of said network devices to said library, to convert said generic commands into device-specific commands to be applied to the associated devices;

retrieving a set of parameters from a database that pertains to the configuration of one type of network device;

in response to receipt of said set of parameters, issuing generic commands to said library to cause a device of said one type to be configured in accordance with said parameters; and

displaying a plurality of identifications of firewall devices associated with a network and a conduit for each such firewall device, each firewall device identification being user-selectable.

17. The method of claim 16, wherein said converters comprise respective plug-in modules that are registered with the library to receive generic commands directed to the devices with which they are associated.

18. The method of claim 16, wherein the step of issuing generic commands comprises the steps of:

generating a corresponding generic command for each parameter in the retrieved set of commands;

storing the generated commands in a queue;

presenting a first command in the queue to said library, to be converted and transmitted to the device as a device-specific command; and

in response to a reply to the transmitted command, presenting the next command in the queue to the library.

19. The method of claim 18, wherein the reply to one of the transmitted commands contains information describing the configuration of the device, and further including the step of storing said information in the database.

20. The method of claim 16, wherein said set of parameters defines a model containing values to which configuration parameters of the device are to be set.

21. The method of claim 20, wherein said model identifies a specific sequence in which the setting of the parameter values is to occur.