Methods and apparatus for improving compatibility between network devices

• US 9,148,343 B2
• Filed: 03/27/2012
• Issued: 09/29/2015
• Est. Priority Date: 03/27/2012
• Status: Expired due to Fees

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Shah, Sandip, Singh, Surinder
• Primary Examiner(s): Gillis, Brian J
• Assistant Examiner(s): Keller, Michael A
• Application Number:
  US13/431,128
• Publication Number:
  US 20130262651A1
• Time in Patent Office: 1,281 Days
• Field of Search: 709/224
• US Class Current: 1/1
• CPC Class Codes: G06F 16/5866 using information manually generated, e.g. tags, keywords, comments, manually generated location and time information
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

In some embodiments, an apparatus includes a network device configured to receive an anomaly database of a first image that stores a set of differences between the first image and a base image. The network device is configured to compare the anomaly database of the first image with an anomaly database of a second image storing a set of differences between the second image and the base image to determine if the first and second images include at least one incompatible critical feature or incompatible non-critical feature. The network device is configured to send a signal associated with a first action if the first and second images include the at least one incompatible critical feature. The network device is configured to send a signal associated with a second action different from the first action if the first and second images include the at least one incompatible non-critical feature.

Claims

1. An apparatus, comprising:

a network device configured to be included within a plurality of network devices within a network, the network device configured to receive an anomaly database of a first image to be installed on at least one network device from the plurality of network devices, the anomaly database of the first image storing a set of differences between the first image and a base image,

the network device configured to compare the anomaly database of the first image with an anomaly database of a second image storing a set of differences between the second image and the base image to determine (1) when the first image and the second image include at least one incompatible critical feature, and (2) when the first image and the second image include at least one incompatible non-critical feature, the at least one incompatible non-critical feature being at least one of a power over Ethernet (PoE) standard or a PoE plus standard, used by the first image but not the second image,

the network device configured to send a signal associated with a first action if the first image and the second image include the at least one incompatible critical feature, the network device configured to send a signal associated with a second action different from the first action if the first image and the second image include the at least one incompatible non-critical feature.

2. The apparatus of claim 1, wherein the first action is associated with preventing the first image from being installed on the at least One network device from the plurality of network devices.

3. The apparatus of claim 1, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

4. The apparatus of claim 1, wherein the plurality of network devices includes at least one access switch and at least one aggregation switch.

5. The apparatus of claim 1, wherein the network device is a first network device from the plurality of network devices, the first network device is configured to compare the anomaly database of the first image with the anomaly database of the second image based on the second image being installed on a second network device from the plurality of network devices.

18. The apparatus of claim 1, wherein the at least one incompatible non-critical feature, further includes a firewall filter, or a protocol-independent multicast (PIM) of the first image.

19. The apparatus of claim 1, wherein the at least one incompatible critical feature is a transmission protocol of the first image.

20. The apparatus of claim 1, wherein the first image includes a plurality of network software modules.

6. An apparatus, comprising:

a network device configured to be operable within a network, the network device configured to receive an image and instructions to install the image, the image including an image version identifier,

the network device configured to identify a set of images installed on a set of network devices within the network and having an image version identifier different than the image version identifier of the image, the network device configured to determine (1) when the image and at least one image from the set of images include at least one incompatible critical feature, and (2) when the image and at least one image from the set of images include at least one incompatible non-critical feature, the at least one incompatible non-critical feature being at least one of a power over Ethernet (PoE) standard or a PoE plus standard, used by the first image but not the second image,

the network device configured to send a signal associated with a first action if the image and at least one image from the set of images include the at least one incompatible critical feature, the network device configured to send a signal associated with a second action different from the first action if the image and at least one image from the set of images include the at least one incompatible non-critical feature.

7. The apparatus of claim 6, wherein the first action is associated with preventing the image from being installed on the network device.

8. The apparatus of claim 6, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

9. The apparatus of claim 6, wherein the image includes an anomaly database storing a set of differences between the image and a base image.

10. The apparatus of claim 6, wherein the network device is a first network device and the image is a first image, the first network device includes an image version identifier database storing an image version identifier associated with a second image installed on a second network device, the second network device being from the set of network devices,

the first network device configured to compare the image version identifier of the first image with the image version identifier of the second image;

and

the first network device configured to send a signal associated with the first action in response to a difference between the image version identifier of the first image and the image version identifier of the second image being greater than a difference threshold.

11. The apparatus of claim 6, wherein the network device is an access switch and at least one network device from the set of network devices is an aggregation switch.

12. A non-transitory processor-readable medium storing code representing instructions to be executed by a processor, the code comprising code to cause the processor to:

receive, at a first network device, a first image configured to be installed at the first network device, the first image including a first anomaly database storing a set of differences between the first image and a base image;

access a second anomaly database storing a set of differences between a second image stored on a second network device and the base image;

compare the first anomaly database with the second anomaly database to determine (1) when the first image and the second image include at least one incompatible critical feature, and (2) when the first image and the second image include at least one incompatible non-critical feature, the at least one incompatible non-critical feature being at least one of a power over Ethernet (PoE) standard or a PoE plus standard, used by the first image but not the second image;

send a signal associated with a first action if the first image and the second image include the at least one incompatible critical feature; and

send a signal associated with a second action different from the first action if the first image and the second image include the at least one incompatible non-critical feature.

13. The non-transitory processor-readable medium of claim 12, further comprising code to cause the processor to:

determine, in response to receiving the first image, an image identifier for the second image,

the code to cause the processor to access includes code to cause the processor to access the second anomaly database using the image identifier for the second image.

14. The non-transitory processor-readable medium of claim 12, further comprising code to cause the processor to:

compare an image version identifier of the first image with an image version identifier of the second image; and

send a signal associated with the first action in response to a difference between the image version identifier of the first image and the image version identifier of the second image being greater than a difference threshold.

15. The non-transitory processor-readable medium of claim 12, wherein the first action is associated with preventing the first image from being installed on the first network device.

16. The non-transitory processor-readable medium of claim 12, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

17. The non-transitory processor-readable medium of claim 12, wherein the first network device is an access switch and the second network device is an aggregation switch.