Selectively updating network devices by a network management application

• US 8,060,592 B1
• Filed: 11/29/2005
• Issued: 11/15/2011
• Est. Priority Date: 11/29/2005
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Tom, Darren, Watsen, Kent A., Jacobsen, Michael S., Jiang, Tong, Huang, Xingang
• Primary Examiner(s): Backer, Firmin
• Assistant Examiner(s): ALGIBHAH, HAMZA N
• Application Number:
  US11/288,412
• Time in Patent Office: 2,177 Days
• Field of Search: 709/223
• US Class Current: 709/223
• CPC Class Codes: H04L 41/082 the condition being updates or upgrades of network functionality
• CPC Class Codes: H04L 41/085 Retrieval of network configuration; Tracking network configuration history

Abstract

A network device management application may manage a number of network devices. When managing the network devices, the management application may receive requests from administrators to modify a configuration of the network devices. In response, the management application may apply the requested modification to a model of the network device and synchronize configuration information of the model of the network device to the configuration information of the real network device using a configuration-based state machine.

Claims

1. A method for administrating network devices comprising:

presenting a management interface through which a plurality of network devices is managed, where each of the network devices is associated with a respective configuration file;

receiving a request to modify the respective configuration file of one of the plurality of network devices;

applying the requested modification to the one of the plurality of network devices; and

using a state machine to monitor a synchronization state of the one of the plurality of network devices, where the state machine determines, based on a value derived from the respective configuration file, that the requested modification, of the one of the plurality of network devices, was implemented while the one of the plurality of network devices was not connected with the management interface.

2. The method of claim 1, where the one of the plurality of network devices includes a firewall or a router.

3. The method of claim 1, where the management interface includes a network management application executing on a client computing device.

14. The method of claim 1, further comprising:

receiving, by the management interface, a second request to modify the configuration of the one of the plurality of network devices;

applying the second requested modification to a model of the one of the plurality of network devices; and

synchronizing the model of the one of the plurality of network devices to the one of the plurality of network devices.

15. The method of claim 14, further comprising:

using the state machine to keep track of a synchronization state of the model of the one of the plurality of network devices and the one of the plurality of network devices.

16. The method of claim 15, where the state machine includes a synchronization pending state that represents a state in which the model, of the one of the plurality of network devices, has a configuration change pending and the one of the plurality of network devices is not connected with the management interface.

17. The method of claim 15, where the state machine includes a state that represents a change in the configuration information of the model, of the one of the plurality of network devices, by an administrator from the management interface.

18. The method of claim 15, where the state machine includes a state that represents a change in the configuration of the model, of the one of the plurality of network devices, by both an administrator from the management interface and from an out-of-band change by the one of the plurality of network devices.

19. The method of claim 15, where the state machine includes a state that represents synchronization in the configuration of the model, of the one of the plurality of network devices, and the one of the plurality of network devices.

4. A management device for managing a network device comprising:

computer-implemented logic to store configuration information about the network device;

computer-implemented logic to store a configuration state of a model of the network device;

computer-implemented logic to maintain a state machine to control the state stored by the logic to store the configuration state; and

computer-implemented logic to synchronize the model, of the network device, and the network device based on the state machine and to synchronize the network device with the management device, where the state machine determines, based on a value derived from the configuration information, that the network device was modified while the network device was not connected with the management device.

5. The device of claim 4, where the state machine includes a state that represents a change in the configuration information of the model, of the network device, by an administrator using the management device.

6. The device of claim 4, where the state machine includes a state that represents a change in the configuration information, of the model of the network device, by both an administrator using the management device and an out-of-band change from the network device.

7. The device of claim 4, where the state machine includes a state that represents synchronization in the configuration information of the model of the network device and the network device.

8. The device of claim 4, where the network device includes a firewall or a router.

9. The device of claim 4, where the state machine includes a synchronization pending state that represents a state in which the model, of the network device, has a pending configuration change and the network device is not connected with the management device.

10. A method for remotely managing a network device comprising:

receiving a request, at a network management application, to modify configuration information of the network device;

receiving an indication that configuration information of the network device has been changed by an entity other than the network management application; and

monitoring, using a configuration-based state machine, a current synchronization state of the network device and the network management application, in response to the received request and the received indication, where the configuration-based state machine determines, based on a value derived from the configuration information, that the requested modification was implemented while the network device was not connected with the network management application.

11. The method of claim 10, further comprising:

synchronizing the network management application and the network device based on a configuration state determined by the configuration-based state machine.

12. The method of claim 10, where the configuration-based state machine includes a synchronization pending state that represents a state in which the request or the indication is pending and the network device is not connected with the network management application.

13. A network management device comprising:

a processor; and

a memory to store instruction that when executed by the processor, cause the processor to;

present a management interface through which a plurality of network devices are managed, where each of the network devices is associated with a respective configuration file;

receive a request to modify the respective configuration file of one of the plurality of network devices;

receive an indication that the respective configuration file of the network device, has been changed by an entity other than the network management device;

apply the requested modification to a model of the one of the plurality of network devices;

synchronize configuration information, of the model of the one of the plurality of network devices, to the respective configuration file of the one of the plurality of network devices, and

monitor via a state machine, a synchronization state of the model, of the one of the plurality of network devices, and the one of the plurality of network devices and the synchronization state of the one of the plurality of network devices and the network management device, where the state machine determines, based on a hash value derived from the respective configuration file, that the requested modification was implemented while the network device was not connected with the management interface.