Automatic configuration of a network device

• US 8,869,236 B1
• Filed: 01/11/2013
• Issued: 10/21/2014
• Est. Priority Date: 01/11/2013
• Status: Active Grant

• Current Assignee: RingCentral Incorporated
• Original Assignee: ShoreTel Incorporated (Mitel Networks Corporation)
• Inventors: Tonogai, Dale, Croke, Darren J.
• Primary Examiner(s): Mehedi, Morshed
• Application Number:
  US13/739,371
• Time in Patent Office: 648 Days
• Field of Search: 726/3, 726/1, 713/153
• US Class Current: 726/1
• CPC Class Codes: H04L 41/0843 based on generic templates
• CPC Class Codes: H04L 41/0856 by backing up or archiving configuration information
• CPC Class Codes: H04L 41/0886 Fully automatic configuration
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

One embodiment includes a non-transitory computer readable medium having instructions executable by a processor to implement a method. The method includes receiving user configuration data for a network device, the configuration system being coupled to a service network. The method also includes storing device configuration data in a configuration database coupled to the service network, the device configuration data being based on the user configuration data and service network data. The method also includes receiving a configuration request at the configuration system from the network device in response to the network device being unconfigured and connected in a user network. The method further includes transmitting the device configuration data from the configuration database to the network device in response to the configuration request.

Claims

1. A non-transitory computer readable medium having instructions executable by a processor to implement a method, the method comprising:

receiving user configuration data for a cloud access router (CAR) at a configuration system that is coupled to a cloud network;

storing device configuration data in a configuration database coupled to the cloud network, the device configuration data being based on the user configuration data and cloud network data;

receiving a configuration request at the configuration system from the CAR, the configuration request being provided by the CAR automatically in response to the CAR being unconfigured for operation in the cloud network and connected in a user network; and

transmitting the device configuration data from the configuration database to the CAR in response to the configuration request, the configuration data programmed to provision the CAR on the cloud network to establish a virtual private network (VPN) connection between the user network and the cloud network for accessing at least one cloud service hosted on the cloud network from the user network via the CAR.

2. The medium of claim 1, wherein receiving the user configuration data comprises receiving the user configuration data that is provided via at least one user via a portal configured to access the configuration database.

3. The medium of claim 2, wherein receiving the user configuration data comprises allowing access to a remote interface associated with the configuration database, the remote interface being hosted on the configuration system to input the user configuration data via the portal.

4. The medium of claim 1, wherein receiving the user configuration data comprises:

receiving fixed user configuration data according to user specifications;

receiving mutable user configuration data that includes parameters for identifying at least one of a resource in the user network and device operation data associated with the CAR; and

storing the fixed user configuration data and the mutable user configuration data on the configuration database.

5. The medium of claim 4, further comprising:

receiving at least one update to the mutable user configuration data in response to a user input;

storing the at least one update on the configuration database;

transmitting an update message to the CAR in response to the at least one update;

receiving the configuration request at the configuration system from the CAR in response to the CAR receiving the update message; and

transmitting the device configuration data, including the at least one update, from the configuration database to the CAR in response to the configuration request for updating the CAR.

6. The medium of claim 1, further comprising:

periodically receiving polling data from the CAR at the configuration system;

transmitting an acknowledgement to the CAR in response to the polling data;

receiving the configuration request from the CAR indicating a failure to receive the acknowledgement by the CAR; and

transmitting the device configuration data from the configuration database to the CAR in response to the configuration request for updating the CAR.

7. The medium of claim 1, further comprising:

periodically receiving polling data from the CAR at the configuration system;

analyzing the polling data to determine if a configuration of the CAR is current;

transmitting an acknowledgement to the CAR in response to a determination that the configuration of the CAR is not current;

receiving the configuration request from the CAR in response to the acknowledgement; and

transmitting the device configuration data from the configuration database to the CAR in response to the configuration request for updating the CAR.

8. The medium of claim 1, wherein receiving the configuration request comprises receiving the configuration request via a secure connection between the configuration system and the CAR in response to the CAR being coupled to the user network, and

wherein transmitting the device configuration data further comprises transmitting the device configuration data from the configuration database to the CAR via the secure connection in response to the configuration request.

9. The medium of claim 8, further comprising:

establishing the secure connection between the CAR and the configuration system;

receiving identifying data from the CAR via the secure connection;

sending an authentication request based on the identifying data for approval by an authorized user input associated with the CAR; and

validating operation of the CAR based on a verifying user input response to the authentication request to enable transmission of the configuration data from the configuration database.

10. A non-transitory computer readable medium having instructions executable by a processor to implement a method for automatically configuring a cloud access router (CAR), the method comprising:

determining at the CAR a need to configure the CAR for operation on a user network absent a user input;

automatically transmitting a configuration request to a configuration system that is coupled to a cloud network in response to the determination of the need to configure the CAR in the cloud network absent the user input; and

receiving device configuration data at the CAR from a configuration database associated with the configuration system in response to the configuration request for configuring the CAR, the device configuration data comprising user configuration data for operating the CAR in the user network and cloud network data for operating the CAR in the cloud network, such that the CAR employs the cloud network data to establish a virtual private network (VPN) connection between the user network and the cloud network to access at least one cloud service hosted on the cloud network from the user network via the CAR.

11. The medium of claim 10, wherein the user configuration data comprises at least one of:

network address data associated with the CAR, network address data associated with at least one additional device on the user network, and parameters associated with a desired operation of the CAR.

12. The medium of claim 11, further comprising:

establishing a secure connection between the CAR and the configuration database; and

transmitting identifying data to the configuration system via the secure connection;

wherein transmitting the configuration request comprises transmitting the configuration request via the secure connection to the configuration system; and

wherein receiving the device configuration data comprises receiving the device configuration data from the configuration database at the CAR via the secure connection in response to a verifying user input response that is provided via a portal responsive to an authentication request transmitted from the configuration system to the portal based on the identifying data.

13. The medium of claim 10, wherein the user configuration data comprises:

fixed user configuration data according to user specifications for the user network; and

mutable user configuration data associated with at least one of a site in the user network and device operation data associated with the CAR.

14. The medium of claim 13, wherein the mutable user configuration data further comprises at least two of a password to enable operation of the CAR in the user network, network address data for the CAR in the user network, and network address data for locating at least one predetermined service in the user network.

15. The medium of claim 10, further comprising:

receiving an update message at the CAR based on the user configuration data being updated at the configuration database;

transmitting the configuration request to the configuration system from the CAR in response to receiving the update message; and

receiving the cloud network data and updated user configuration data from the configuration database at the CAR.

16. The medium of claim 10, further comprising:

periodically transmitting polling data to the configuration system;

receiving an acknowledgement from the configuration system indicating that a configuration of the CAR is not current;

transmitting the configuration request to the configuration system from the CAR in response to receiving the acknowledgement, the configuration request including a device authentication identifier generated during the configuration of the CAR;

re-transmitting the configuration request without the device authentication identifier in response to being unable to connect with the configuration system; and

receiving the cloud network data and updated user configuration data from the configuration database at the CAR.

18. The medium of claim 10, further comprising:

periodically monitoring network conditions associated with the user network at the CAR;

setting the CAR to an unconfigured state in response to detecting a change in the network conditions associated with the user network;

transmitting the configuration request to the configuration system from the CAR in response to being set to the unconfigured state; and

receiving the device configuration data from the configuration database at the CAR.

19. The medium of claim 10, further comprising:

initiating a dynamic host configuration protocol (DHCP) request in response to activating the CAR on the user network;

accessing, from memory of the CAR, a resource location in the cloud network corresponding to the configuration system; and

establishing a network connection between the configuration system and the CAR based on the resource location.

17. A non-transitory computer readable medium having instructions executable by a processor to implement a method for automatically configuring a network device, the method comprising:

determining at the network device a need to configure the network device for operation on a user network;

transmitting a configuration request to a configuration system that is coupled to a service network in response to determining the need to configure the network device;

receiving device configuration data at the network device from a configuration database associated with the configuration system in response to the configuration request for configuring the network device, the device configuration data comprising user configuration data for operating the network device in the user network and service network data for operating the network device in the service network;

periodically transmitting polling data from the network device to the configuration system;

receiving one of an acknowledgement and a negative response at the network device in response to the polling data;

setting the network device to an unconfigured state in response to receiving one of the negative response and no response after a predetermined amount of time;

transmitting the configuration request to the configuration system from the network device in response to being set to the unconfigured state;

receiving the device configuration data from the configuration database at the network device in response to the configuration request; and

setting the network device to a configured state in response to configuring the network device based on the received device configuration data.

20. A network system comprising:

a headless cloud access router (CAR) that is coupled to a user local area network (LAN); and

a configuration system coupled to a cloud network, the configuration system comprising a configuration database configured to store device configuration data for each of a plurality of network devices including the headless CAR, the device configuration data for the headless CAR including user configuration data for the headless CAR that is provided in response to an authorized user input associated with the user LAN, and cloud network data for operating the headless CAR in the cloud network, the configuration system being further configured to transmit the device configuration data from the configuration database to the headless CAR for configuring the headless CAR automatically in response to a configuration request that is automatically provided from the headless CAR upon the headless CAR being in an unconfigured state while coupled to the user LAN to provision the CAR on the cloud network to establish a virtual private network (VPN) connection between the user network and the cloud network to provide for access of at least one cloud service hosted on the cloud network from the user network via the CAR.

21. The network system of claim 20, wherein the user configuration data comprises fixed user configuration data associated with customer specifications and mutable user configuration data associated with at least one of a site in the user LAN and device operation data associated with the headless CAR, and wherein the configuration system is further configured to transmit an update message to the headless CAR in response to receiving updates to the mutable user configuration data through a website that is accessed via a portal.

22. The network system of claim 21, wherein the portal comprises a user interface configured to access a remote interface for accessing the configuration database that is hosted on the configuration system to input the user configuration data via the portal.

23. The network system of claim 20, wherein the configuration system is further configured to establish a secure connection between the configuration system and the headless CAR, and wherein the headless CAR is configured to transmit identifying data to the configuration system via the secure connection in response to being coupled to the user LAN in the unconfigured state, wherein the configuration system is configured to transmit an authentication request to a user via a portal, and wherein the configuration system is configured to transmit the device configuration data from the configuration database via the secure connection in response to the authorized user input that is provided based on the authentication request.

24. A non-transitory computer readable medium having instructions executable by a processor to implement a method, the method comprising:

receiving user configuration data for a network device at a configuration system;

storing device configuration data in a configuration database coupled to the service network, the device configuration data being based on the user configuration data and service network data;

establishing a secure connection between a network device and a configuration system that is coupled to a service network;

receiving a configuration request at the configuration system from the network device via the secure connection in response to the network device being unconfigured and connected in a user network;

receiving identifying data from the network device via the secure connection;

sending an authentication request based on the identifying data for approval by an authorized user input associated with the network device;

validating operation of the network device based on a verifying user input response to the authentication request; and

transmitting the device configuration data from the configuration database to the network device via the secure connection in response to the configuration request and the verifying user input response.