Configuration commit database approach and session locking approach in a two-stage network device configuration process

• US 7,640,317 B2
• Filed: 06/10/2004
• Issued: 12/29/2009
• Est. Priority Date: 06/10/2004
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Puvvala, Sukumar, Letchworth, Charles M., Ward, David D., Jain, Kapil, McDonnell, Neal, Movassaghi, Yassin
• Primary Examiner(s): Etienne; Ario
• Assistant Examiner(s): GEORGANDELLIS, ANDREW C
• Application Number:
  US10/866,528
• Publication Number:
  US 20060031427A1
• Time in Patent Office: 2,028 Days
• Field of Search: 709/223, 709/242, 709/213, 709/214, 709/215, 709/216
• US Class Current: 709/213
• CPC Class Codes: H04L 41/0266 using meta-data, objects or commands for formatting management information, e.g. using eXtensible markup language [XML]
• CPC Class Codes: H04L 41/028 for synchronisation between service call and response
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0879 Manual configuration through operator
• CPC Class Codes: H04L 67/125 involving control of end-device applications over a network
• CPC Class Codes: H04L 67/142 Managing session states for stateless protocols; Signalling session states; State transitions; Keeping-state mechanisms
• CPC Class Codes: H04L 67/34 involving the movement of software or configuration parameters network booting or remote initial program loading [RIPL] G06F9/4416

Abstract

A method and apparatus for modifying the configuration of a network device, such as a router, using a two-stage configuration model is provided. A first request from a user for a change in configuration of a network device is received. Configuration data associated with the first request is stored. A second request to modify the configuration of the network device to reflect the configuration data is received. An exclusive lock on the network device is assigned to the user preventing other users from modifying the configuration of the network device. The current operational state of the network device is modified to reflect the configuration data, which is then stored in a device configuration database. Users can view configuration history data to view prior configurations of the network device. Multiple users may modify the network device without interfering with one another because conflicts are avoided through use of an exclusive lock.

Claims

1. A machine-implemented method, comprising:

storing, at a network device, configuration commands of a previous request received from a particular user without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the particular user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the particular user, wherein the exclusive lock prevents any other user who is not assigned the exclusive lock from changing the current operational state of the network device;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device;

updating configuration history that describes a plurality of operational states of the network device to reflect the configuration commands;

receiving a second request from a client to view a subset of the configuration history data, wherein the second request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

2. The method of claim 1, wherein the step of updating the configuration history data comprises:

updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

3. The method of claim 1, wherein the network device loads a base configuration when the network device initially starts, and the method further comprises:

updating the base configuration to reflect at least a portion of the configuration history data.

4. The method of claim 1, further comprising:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

5. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

6. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

7. The method of claim 1, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

8. The method of claim 1, wherein the subset fully describes a particular operational state of the network device.

9. The method of claim 1, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

10. The method of claim 1, further comprising:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

11. A machine-implemented method, comprising:

storing, at a network device, configuration commands of a previous request received from a first user, of a plurality of users, without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the first user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the first user, wherein the exclusive lock prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the current operational state of the network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device; and

in response to receiving, from a second user of the plurality of users, a second request to change the current operational state of the network device, automatically transmitting a notification to the second user that the second request is rejected because another user of the plurality of users is assigned the exclusive lock.

12. The method of claim 11, wherein assigning the exclusive lock to the first user is performed in response to receiving an additional request from the first user to obtain the exclusive lock.

13. The method of claim 11, further comprising:

in response to receiving a third request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

14. The method of claim 11, further comprising:

in response to receiving, from the second user, a third request to view the configuration commands associated with the first user, transmitting information that identifies the configuration commands to the second user.

15. The method of claim 11, further comprising:

in response to receiving, from the second user, a third request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.

16. A machine-readable volatile or non-volatile medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

storing, at a network device, configuration commands of a previous request received from a particular user without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the particular user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the particular user, wherein the exclusive lock prevents any other user who is not assigned the exclusive lock from changing the current operational state of the network device;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device;

updating configuration history that describes a plurality of operational states of the network device to reflect the configuration commands;

receiving a second request from a client to view a subset of the configuration history data, wherein the second request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

17. The machine-readable medium of claim 16, wherein the step of updating the configuration history data comprises:

updating the configuration history data to include that describes a change in the configuration of the network device from a first state to a second state without storing that fully describes the second state.

18. The machine-readable medium of claim 16, wherein the network device loads a base configuration when the network device initially starts, and wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

updating the base configuration to reflect at least a portion of the configuration history data.

19. The machine-readable medium of claim 16, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

20. The machine-readable medium of claim 16, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

21. The machine-readable medium of claim 16, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

22. The machine-readable medium of claim 16, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

23. The machine-readable medium of claim 16, wherein the subset fully describes a particular operational state of the network device.

24. The machine-readable medium of claim 16, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

25. The machine-readable medium of claim 16, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

26. A machine-readable volatile or non-volatile medium storing one or more sequences of instructions, wherein execution of the one or more sequences of instructions by one or more processors causes the one or more processors to perform the steps of:

storing, at a network device, configuration commands of a previous request received from a first user, of a plurality of users, without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the first user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the first user, wherein the exclusive lock prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the current operational state of the network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device; and

in response to receiving, from a second user of the plurality of users, a second request to change the current operational state of the network device, automatically transmitting a notification to the second user that the second request is rejected because another user of the plurality of users is assigned the exclusive lock.

27. The machine-readable medium of claim 26, wherein the step of assigning the exclusive lock to the first user is performed in response to receiving an additional request from the first user to obtain the exclusive lock.

28. The machine-readable medium of claim 26, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving a third request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

29. The machine-readable medium of claim 26, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving, from the second user, a third request to view the configuration commands associated with the first user, transmitting information that identifies the configuration commands to the second user.

30. The machine-readable medium of claim 26, wherein execution of the one or more sequences of instructions by the one or more processors causes the one or more processors to further perform the step of:

in response to receiving, from the second user, a third request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.

31. An apparatus operable as a network device, comprising:

means for storing configuration commands of a previous request received from a particular user without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the particular user;

means for assigning, in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, an exclusive lock to the particular user, wherein the exclusive lock prevents any other user who is not assigned the exclusive lock from changing the current operational state of the network device;

means for changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein the means for changing the current operational state include means for applying the stored configuration commands to the current operational configuration of the network device;

means for updating configuration history that describes a plurality of operational states of the network device to reflect the configuration commands;

means for receiving a second request from a client to view a subset of the configuration history data, wherein the second request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

means for transmitting the subset to the client.

32. The apparatus of claim 31, wherein the means for updating the configuration history data comprises:

means for updating the configuration history to include that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

33. The apparatus of claim 31, wherein the network device loads a base configuration when the network device initially starts, and further comprising:

means for updating the base configuration to reflect at least a portion of the configuration history data.

34. The apparatus of claim 31, further comprising:

means for removing a portion of the configuration history data in response to determining that the size of the configuration history data exceeds a configurable threshold.

35. The apparatus of claim 31, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

36. The apparatus of claim 31, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

37. The apparatus of claim 31, wherein the means for transmitting the subset to the client further comprises:

means for transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

38. The apparatus of claim 31, wherein the subset fully describes a particular operational state of the network device.

39. The apparatus of claim 31, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

40. The apparatus of claim 31, further comprising:

means for receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

41. An apparatus operable as a network device, comprising:

means for storing configuration commands of a previous request received from a first user, of a plurality of users, without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the first user;

means for assigning, in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, an exclusive lock to the first user, wherein the exclusive lock prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the current operational state of the network device;

means for updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock in response to assigning the exclusive lock to the first user;

means for changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein the means for changing the current operational state include means for applying the stored configuration commands to the current operational configuration of the network device; and

means for automatically transmitting a notification to a second user, of the plurality of users, that a second request to change the current operational state of the network device is rejected because another user of the plurality of users is assigned the exclusive lock in response to receiving the second request from the second user.

42. The apparatus of claim 41, wherein the means for assigning the exclusive lock to the first user assigns the exclusive lock to the first user in response to receiving an additional request from the first user to obtain the exclusive lock.

43. The apparatus of claim 41, further comprising:

means for revoking the assignment of the exclusive lock to the first user in response to receiving a third request from the second user to revoke the assignment of the exclusive lock to the first user.

44. The apparatus of claim 41, further comprising:

means for transmitting information that identifies the configuration commands to the second user in response to receiving, from the second user, a third request to view the configuration commands associated with the first user.

45. The apparatus of claim 41, further comprising:

means for transmitting information that identifies the first user in response to receiving, from the second user, a third request to view information that identifies which user of the plurality of users is assigned the exclusive lock.

46. An apparatus operable as a network device, the apparatus comprising one or more processors and a non-volatile medium storing instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of:

storing, at the network device, configuration commands of a previous request received from a particular user without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the particular user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the particular user, wherein the exclusive lock prevents any other user who is not assigned the exclusive lock from changing the current operational state of the network device;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device;

updating configuration history that describes a plurality of operational states of the network device to reflect the configuration commands;

receiving a second request from a client to view a subset of the configuration history data, wherein the second request identifies the subset by an association with a particular period of time or a particular operational state of the network device; and

transmitting the subset to the client.

47. The apparatus of claim 46, wherein the step of updating the configuration history comprises:

updating the configuration history data to include data that describes a change in the configuration of the network device from a first state to a second state without storing data that fully describes the second state.

48. The apparatus of claim 46, wherein the network device loads a base configuration when the network device initially starts, and wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

updating the base configuration to reflect at least a portion of the configuration history data.

49. The apparatus of claim 46, wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to determining that the size of the configuration history data exceeds a configurable threshold, removing a portion of the configuration history data.

50. The apparatus of claim 46, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a username to the client, wherein the username is associated with a user that initiated a change in the configuration of the network device associated with the subset.

51. The apparatus of claim 46, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a location identifier to the client, wherein the location identifier identifies a location that is associated with a change in the configuration of the network device associated with the subset.

52. The apparatus of claim 46, wherein the step of transmitting the subset to the client further comprises:

transmitting information that identifies a timestamp to the client, wherein the timestamp identifies a time associated with the change in the configuration of the network device associated with the subset.

53. The apparatus of claim 46, wherein the subset fully describes a particular operational state of the network device.

54. The apparatus of claim 46, wherein the subset identifies a change in the operational state of the network device from a first state to a second state.

55. The apparatus of claim 46, wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

receiving a third request to change the current operational state of the network device to reflect the subset of the configuration history data.

56. An apparatus operable as a network device, the apparatus comprising one or more processors and a non-volatile medium storing instructions which, when executed by the one or more processors, cause the one or more processors to perform the steps of:

storing, at the network device, configuration commands of a previous request received from a first user, of a plurality of users, without applying the configuration commands on the network device until a first request to change a current operational state of the network device to reflect the configuration commands is received from the first user;

in response to receiving the first request to change the current operational state of the network device to reflect the configuration commands, assigning an exclusive lock to the first user, wherein the exclusive lock prevents any other user of the plurality of users who is not assigned the exclusive lock from changing the current operational state of the network device;

in response to assigning the exclusive lock to the first user, updating a set of data that describes which user of the plurality of users is currently assigned the exclusive lock;

changing, under the exclusive lock, the current operational state of the network device to reflect the configuration commands, wherein changing the current operational state includes applying the stored configuration commands to the current operational configuration of the network device; and

in response to receiving, from a second user of the plurality of users, a second request to change the current operational state of the network device, automatically transmitting a notification to the second user that the second request is rejected because another user of the plurality of users is assigned the exclusive lock.

57. The apparatus of claim 56, wherein the instructions that cause the one or more processors to perform the step of assigning the exclusive lock to the first user are performed in response to receiving an additional request from the first user to obtain the exclusive lock.

58. The apparatus of claim 56, wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving a third request from the second user to revoke the assignment of the exclusive lock to the first user, revoking the assignment of the exclusive lock to the first user.

59. The apparatus of claim 56, wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving, from the second user, a third request to view the configuration commands associated with the first user, transmitting information that identifies the configuration commands to the second user.

60. The apparatus of claim 56, wherein the instructions further comprise instructions which, when executed by the one or more processors, cause the one or more processors to perform the further step of:

in response to receiving, from the second user, a third request to view information that identifies which user of the plurality of users is assigned the exclusive lock, transmitting information that identifies the first user.