Methods and apparatus for improving compatibility between network devices

• US 9,823,916 B2
• Filed: 09/25/2015
• Issued: 11/21/2017
• Est. Priority Date: 03/27/2012
• Status: Active Grant

• Current Assignee: Juniper Networks Incorporated
• Original Assignee: Juniper Networks Incorporated
• Inventors: Shah, Sandip, Singh, Surinder
• Primary Examiner(s): Hussain, Tauqir
• Assistant Examiner(s): Keller, Michael A
• Application Number:
  US14/865,764
• Publication Number:
  US 20160011862A1
• Time in Patent Office: 788 Days
• CPC Class Codes: G06F 16/5866 using information manually generated, e.g. tags, keywords, comments, manually generated location and time information
• CPC Class Codes: G06F 8/63 Image based installation; Cloning; Build to order
• CPC Class Codes: G06F 8/65 Updates security arrangements therefor G06F21/57
• CPC Class Codes: G06F 8/658 Incremental updates; Differential updates
• CPC Class Codes: H04L 41/0853 by actively collecting configuration information or by backing up configuration information
• CPC Class Codes: H04L 41/0866 Checking the configuration
• CPC Class Codes: H04L 41/0873 Checking configuration conflicts between network elements
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity

Abstract

In some embodiments, an apparatus includes a network device configured to receive an anomaly database of a first image that stores a set of differences between the first image and a base image. The network device is configured to compare the anomaly database of the first image with an anomaly database of a second image storing a set of differences between the second image and the base image to determine if the first and second images include at least one incompatible critical feature or incompatible non-critical feature. The network device is configured to send a signal associated with a first action if the first and second images include the at least one incompatible critical feature. The network device is configured to send a signal associated with a second action different from the first action if the first and second images include the at least one incompatible non-critical feature.

Claims

1. An apparatus, comprising:

a network device configured to be included within a plurality of network devices including at least one access switch and at least one aggregation switch and operatively coupled within a network, the network device configured to receive information indicating a set of differences between a first image to be installed on the network device, and a base image,

the network device configured to compare the set of differences between the first image and the base image, to a set of differences between a second image installed on a network device of the plurality of network devices and the base image, to determine (1) when the first image and the second image include at least one incompatible critical feature, the at least one incompatible critical feature including at least one feature associated with enabling communication between the plurality of network devices, and (2) when the first image and the second image include at least one incompatible non-critical feature, the at least one incompatible non-critical feature including a firewall filter included in the first image but not in the second image,

the network device configured to send a signal associated with a first action if the first image and the second image include the at least one incompatible critical feature, the network device configured to send a signal associated with a second action different from the first action if the first image and the second image include the at least one incompatible non-critical feature.

2. The apparatus of claim 1, wherein the first action is associated with preventing the first image from being installed on the at least one network device from the plurality of network devices.

3. The apparatus of claim 1, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

4. The apparatus of claim 1, wherein the set of differences between the first image and the base image is represented by an anomaly database of the first image.

5. The apparatus of claim 1, wherein the at least one incompatible non-critical feature further includes an incompatible power over Ethernet (PoE) standard or a protocol-independent multicast (PIM) of the first image.

6. An apparatus, comprising:

an access switch configured to be operable within a network, the access switch configured to receive (1) an image to be installed on the access switch and (2) an anomaly data structure including a set of differences between the image to be installed on the access switch and a base image,

the access switch configured to identify a set of images installed on a set of network devices within the network, the set of network devices including at least one aggregation switch, each image from the set of images including an anomaly data structure from a plurality of anomaly data structures and including a set of differences between that image, and the base image,

the access switch configured, using the anomaly data structure of the image for the access switch and the anomaly data structure of the at least one image from the set of images, to determine (1) when the image for the access switch and the at least one image from the set of images include at least one incompatible critical feature, and (2) when the image for the access switch and the at least one image from the set of images include at least one incompatible non-critical feature, the at least one incompatible non-critical feature including a firewall filter included in the first image but not in the second image,

the access switch configured to send a signal associated with a first action when the image for the access switch and the at least one image from the set of images include the at least one incompatible critical feature, the access switch configured to send a signal associated with a second action different from the first action when the image for the access switch and the at least one image from the set of images include the at least one incompatible non-critical feature.

7. The apparatus of claim 6, wherein the first action is associated with preventing the image for the access switch from being installed on the access switch.

8. The apparatus of claim 6, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

9. The apparatus of claim 6, wherein:

the image for the access switch is a first image, the access switch includes an image version identifier database storing an image version identifier associated with a second image installed on a network device from the set of network devices,

the access switch configured to compare the image version identifier of the first image with the image version identifier of the second image; and

the access switch configured to send a signal associated with the first action in response to a difference between the image version identifier of the first image and the image version identifier of the second image being greater than a difference threshold.

10. The apparatus of claim 6, wherein the image includes a plurality of network software modules.

11. The apparatus of claim 6, wherein the at least one incompatible non-critical feature further includes an incompatible power over Ethernet (PoE) standard or a protocol-independent multicast (PIM) of the first image.

12. The apparatus of claim 6, wherein the at least one incompatible critical feature is a transmission protocol of the first image.

13. A method, comprising:

receiving, at a first network device from a plurality of network devices (1) in a network and (2) including at least one access switch and at least one aggregation switch, and from a second network device from the plurality of network devices, image information including an anomaly data structure indicating a set of differences between an image installed on the second network device, and a base image;

determining, using an anomaly data structure indicating a set of differences between an image to be installed on the first network device, and the base image, (1) when the image installed on the first network device and the image installed on the second network device include at least one incompatible critical feature, and (2) when the image installed on the first network device and the image installed on the second network device include at least one incompatible non-critical feature, the at least one incompatible non-critical feature including a firewall filter included in the first image but not in the second image; and

sending a signal associated with a first action when there is not at least one incompatible critical feature is not included in the image installed on the first network device and the image installed on the second network device.

14. The method of claim 13, wherein the first action is associated with preventing the image to be installed on the first network device, from being installed on the first network device.

15. The method of claim 13, wherein the second action is associated with providing a warning to a user regarding the at least one incompatible non-critical feature.

16. The method of claim 13, wherein the at least one incompatible non-critical feature further includes an incompatible power over Ethernet (PoE) standard or a protocol-independent multicast (PIM) of the image.

17. The method of claim 13, wherein the at least one incompatible critical feature is a transmission protocol of the image.

18. The method of claim 13, wherein the image to be installed on the first network device includes a plurality of network software modules.