Network device configuration using separate logic and version-based configuration files

• US 7,792,930 B1
• Filed: 11/10/2004
• Issued: 09/07/2010
• Est. Priority Date: 11/10/2004
• Status: Expired due to Fees

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Lin, Chi-Chang, Leu, Brian Yean-Shiang, Fehrle, James E., Zhang, David Lei, Huang, Xiangang
• Primary Examiner(s): Phillips; Hassan
• Assistant Examiner(s): Mejia; Anthony
• Application Number:
  US10/985,016
• Time in Patent Office: 2,127 Days
• Field of Search: 709/220, 709/223
• US Class Current: 709/220
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0869 Validating the configuration within one network element

Abstract

A set of network devices having varying device attributes, such as varying attributes due to different operating system versions, different hardware versions, or different hardware platforms, may be efficiently managed. A syntax file may be used to describe constraints relating to attributes of multiple versions of the network devices. At least one device configuration file (DCF) stores version-based differences relating to the different versions of the network devices, the syntax file and at least one the one DCF collectively describe a set of constraints for the attributes of the network devices.

Claims

1. A method comprising:

locating a first file that describes attributes allowed by multiple versions of network devices and constraints associated with each attribute;

locating a second set of files that store version-based differences relating to the attributes allowed by the multiple versions of the network devices, where the second set of files further includes links to fields, in the first file, that correspond to the multiple versions of the network devices;

extracting, using the links included in the second set of files, a set of constraints associated with the attributes of one or more of the network devices from the first file; and

using the set of constraints for the attributes of the one or more of the network devices to validate configuration data for the one or more of the network devices.

2. The method of claim 1, where the second set of files stores the version-based differences as differential change information, between the multiple versions of the network devices, stored in a plurality of files in the second set of files.

3. The method of claim 2, where the second set of files is hierarchically arranged relative to one another.

4. The method of claim 1, where the configuration data of a particular network device is received from the particular network device.

5. The method of claim 1, further comprising:

configuring another network device using the validated configuration data.

6. The method of claim 1, where the multiple versions of the network devices include different hardware versions of the network devices.

7. The method of claim 1, where the multiple versions of the network devices include different operating system versions of the network devices.

8. The method of claim 1, where the multiple versions of the network devices include different versions of firewalls.

9. The method of claim 1, where the first file describes constraints relating to attributes of a particular feature set of the one or more network devices.

29. The method of claim 1, where the constraints include a syntax of the attributes.

30. The method of claim 29, where the syntax includes a type and a format of the attributes.

10. A server comprising:

a processor; and

a computer memory operatively coupled to the processor, the computer memory including;

programming instructions to cause the processor to receive configuration data for a particular network device,

programming instructions to generate constraints relating to attributes of the particular network device based on a syntax file that includes constraints relating to attributes allowed by a plurality of network devices and at least one device capability file that includes version-based differences between different versions of the plurality of network devices, where the constraints are extracted from the syntax file using a link located in the at least one device capability file; and

programming instructions to validate the received configuration data for the particular network device based on the generated constraints relating to the attributes of the particular network device.

11. The server of claim 10, the computer memory further comprising:

programming instructions to use the validated configuration data to configure a plurality of additional network devices.

12. The server of claim 10, where the at least one device capability file stores the version-based differences as differential change information between the multiple versions of the network devices.

13. The server of claim 12, where multiple ones of the device capability files are hierarchically arranged relative to one another.

14. The server of claim 10, where the configuration data of the particular network device is obtained from the particular network device.

15. The server of claim 10, where the different versions of the network devices include different hardware versions of the network devices.

16. The server of claim 10, where the different versions of the network devices include different operating system versions of the network devices.

17. The server of claim 10, where the different versions of the network devices include different versions of firewalls.

18. The server of claim 10, where the plurality of network devices include network devices having different versions, platforms, or operating systems.

19. The server of claim 10, where the syntax file includes constraints relating to attributes of a particular feature set of the plurality of network devices.

31. The server of claim 10, where the syntax file defines a type and a format of the attributes.

20. A system comprising:

a plurality of network devices, each of the network devices being associated with configuration data; and

a management server to receive the configuration data for at least one of the plurality of network devices, obtain a set of constraints, for attributes of the at least one of the plurality of network devices, based on a first file that describes constraints relating to attributes allowed by multiple versions of network devices and based on one or more second files that store version-based differences relating to the different versions of the network devices, where the one or more second files further store links that are used to obtain the set of constraints from the first file, and validate the configuration data for the at least one of the plurality of network devices based on the set of constraints obtained using the stored links.

21. The system of claim 20, where the management server is further to transmit configuration data to additional ones of the plurality of network devices.

22. The system of claim 20, where the plurality of network devices include firewalls.

23. The system of claim 20, where the one or more second files store the version-based differences as differential change information between different ones of the second files.

24. The system of claim 23, where the second set of files is hierarchically arranged relative to one another.

25. A device comprising:

means for locating a first file that describes attributes allowed by multiple versions of network devices and constraints associated with each attribute;

means for locating a second set of files that store version-based differences relating to the attributes allowed by the multiple versions of the network devices, where the second set of files further include links to fields, in the first file, that correspond to the multiple versions of the network devices;

means for extracting, a set of constraints associated with the attributes of one or more of the network devices from the first file, using the links included in the second set of files; and

means for validating configuration data for a particular network device against the set of constraints for the attributes of the particular network device.

26. A memory for storing data for access by an application program being executed on a computing device, the memory comprising:

a first file to describe constraints relating to attributes allowed by multiple versions of network devices; and

at least one second file to store version-based differences relating to the different versions of the network devices, where the at least one second file stores links to fields in the first file that apply to a particular network device, where the links are used to extract the constraints from the first file, and where the first file and the at least one second file collectively describing a set of constraints for the attributes of the network devices.

27. The memory of claim 26, where the at least one second file stores the version-based differences as differential change information between various ones of the second files.

28. The memory of claim 27, where the at least one second file includes a plurality of second files that are hierarchically arranged.