Apparatus and method for redirection of network management messages in a cluster of network devices

• US RE41,750 E1
• Filed: 09/14/2004
• Issued: 09/21/2010
• Est. Priority Date: 02/17/2000
• Status: Expired due to Term

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Christy, James E.
• Primary Examiner(s): Blair; Douglas B
• Application Number:
  US10/942,081
• Time in Patent Office: 2,198 Days
• Field of Search: 709/225, 709/229, 709/223, 709/244, 709/245, 709/246, 709/220, 370/389, 370/392, 370/401, 370/409, 370/338, 370/402, 370/398
• US Class Current: 709/225
• CPC Class Codes: H04L 29/12009 Arrangements for addressing and naming in data networks
• CPC Class Codes: H04L 29/1233 Mapping of addresses of the same type; Address translation
• CPC Class Codes: H04L 41/00 Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
• CPC Class Codes: H04L 41/0213 Standardised network management protocols, e.g. simple network management protocol [SNMP]
• CPC Class Codes: H04L 41/0893 Assignment of logical groups to network elements
• CPC Class Codes: H04L 41/12 Discovery or management of network topologies
• CPC Class Codes: H04L 61/25 of the same type

Abstract

A method manages a cluster of network devices each having an intra-cluster identifier. The method includes (a) selecting a plurality of network devices to form a cluster, (b) selecting a first network device to be a commander network device having a public IP address, each of the remaining network devices being a cluster member network device and having a non-public network address, (c) receiving at the commander network device a network management request message from a management console, the message including a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the message, and an intra-cluster identifier, and (d) forwarding the message to the-cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

Claims

1. A method for managing a cluster of network devices, comprising:

selecting a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

selecting a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

2. The method according to claim 1 wherein said forwarding includes:

changing the source address field of the network management request message to contain the IP address of the commander network device; and

changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

3. The method according to claim 2 wherein said forwarding further includes:

changing the request identification field of the network management request message to contain an intra-cluster request identifier.

4. The method according to claim 3, further comprising:

storing values of the source address field and the request identification field within the commander network device.

5. The method according to claim 3, further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the commander network device, and a response identification field containing the value of the intra-cluster request identifier;

changing the source address field of the response to contain the IP address of the commander network device;

changing the destination address field of the response to contain the IP address of the management console;

changing the response identification field of the response to contain the original request identifier; and

forwarding the response to the management console.

6. The method according to claim 2, further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

forwarding the response to the network management request message to the management console.

7. The method according to claim 6, wherein the network management request message and the response to the network management request message are SNMP messages.

8. The method according to claim 1, wherein the first network device is a LAN switch.

9. The method according to claim 8, wherein the cluster member network device is a LAN switch.

10. The method according to claim 1 wherein said selecting a cluster includes:

defining a cluster identifier for the cluster.

11. The method according to claim 10 wherein the cluster identifier is an SNMP community string, and wherein the intra-cluster identifier includes the SNMP community string and a unique member string.

12. The method according to claim 1, wherein the network management request message is an SNMP message.

13. The method according to claim 1 wherein the non-public network address of the cluster member network device is a non-public IP address.

14. The method according to claim 1 wherein the non-public network address of the cluster member network device is a Media Access Control address.

15. An apparatus for managing a cluster of network devices, comprising:

means for selecting a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

means for selecting a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

means for receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

means for forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic IP address of the cluster member network device.

16. The apparatus according to claim 15 wherein said means for forwarding includes:

means for changing the source address field of the network management request message to contain the IP address of the commander network device; and

means for changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

17. The apparatus according to claim 16 wherein said means for forwarding further includes:

means for changing the request identification field of the network management request message to contain an intra-cluster request identifier.

18. The apparatus according to claim 17, further comprising:

means for storing values of the source address field and the request identification field within the first network device.

19. The apparatus according to claim 17, further comprising:

means for receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the commander network device, and a response identification field containing the value of the intra-cluster request identifier;

means for changing the source address field of the response to contain the IP address of the commander network device;

means for changing the destination address field of the response to contain the IP address of the management console;

means for changing the response identification field of the response to contain the original request identifier; and

means for forwarding the response to the management console.

20. The apparatus according to claim 16, further comprising:

means for receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

means for changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

means for changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

means for forwarding the response to the network management request message to the management console.

21. The apparatus according to claim 20, wherein the network management request message and the response to the network management request message are SNMP messages.

22. The apparatus according to claim 15, wherein the first network device is a LAN switch.

23. The apparatus according to claim 22, wherein the cluster member network device is a LAN switch.

24. The apparatus according to claim 15 wherein said means for selecting a cluster includes:

means for defining a cluster identifier for the cluster.

25. The apparatus according to claim 18 wherein the cluster identifier is an SNMP community string, and wherein the intra-cluster identifier includes the SNMP community string and a unique member string.

26. The apparatus according to claim 15, wherein the network management request message is an SNMP message.

27. The apparatus according to claim 15 wherein the non-public network address of the cluster member network device is a non-public IP address.

28. The apparatus according to claim 15 wherein the non-public network address of the cluster member network device is a Media Access Control address.

29. A first network device for redirecting network management messages in a cluster of network devices, the cluster including a plurality of network devices, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier, said first network device comprising:

a public IP address, said first network device being selected from among the plurality of the network devices, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

network management request reception logic adapted to receive a network management request message from a management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the first network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

logic circuitry adapted to forward for the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

30. The first network device in accordance with claim 29 wherein said logic circuitry adapted to forward includes:

logic circuitry adapted to change the source address field of the network management request message to contain the IP address of the first network device; and

logic circuitry adapted to change the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

31. The first network device in accordance with claim 30 wherein said logic circuitry adapted to forward further includes:

logic circuitry adapted to change the request identification field of the network management request message to contain an intra-cluster request identifier.

32. The first network device in accordance with claim 31, further comprising:

a memory for storing values of the source address field and the request identification field within the first network device.

33. The first network device in accordance with claim 31, further comprising:

logic circuitry adapted to receive a response to the network management request message at the first network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the first network device, and a response identification field containing the value of the intra-cluster request identifier;

logic circuitry adapted to change the source address field of the response to contain the IP address of the first network device;

logic circuitry adapted to change the destination address field of the response to contain the IP address of the management console;

logic circuitry adapted to change the response identification field of the response to contain the original request identifier; and

logic circuitry adapted to forward the response to the management console.

34. The first network device in accordance with claim 30, further comprising:

logic circuitry adapted to receive a response to the network management request message from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the first network device;

logic circuitry adapted to change the source address field of the response to the network management request message to contain the IP address of the first network device;

logic circuitry adapted to change the destination address field of the response to the network management request message to contain the IP address of the management console; and

logic circuitry adapted to forward the response to the network management request message to the management console.

35. The first network device in accordance with claim 34, wherein the network management request message and the response to the network management request message are SNMP messages.

36. The first network device in accordance with claim 29, wherein the first network device is a LAN switch.

37. The first network device in accordance with claim 36, wherein the cluster member network device is a LAN switch.

38. The first network device in accordance with claim 29, wherein the network management request message is an SNMP message.

39. The first network device in accordance with claim 29 wherein the intra-cluster identifier includes an SNMP community string defined for the cluster and a member string uniquely identifying the network device within the cluster.

40. The first network device in accordance with claim 29 wherein the non-public network address of the cluster member network device is a non-public IP address.

41. The first network device in accordance with claim 29 wherein the non-public network address of the cluster member network device is a Media Access Control address.

42. A cluster of network devices, comprising:

a cluster management console capable of transmitting a network management request message; and

at least two network devices capable of interfacing at least two computer networks, and capable of receiving and processing the network management request message, each of the network devices being assigned with a unique intra-cluster identifier, said network devices including;

a commander network device having a public IP address and receiving the network management request, the network management request including a source address field containing an IP address of said management console, a destination address field containing the IP address of said commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

at least one cluster member network device, each cluster member network device having a non-public network address, wherein said commander network device forwards the network management request to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

43. The cluster of network devices according to claim 42, wherein said commander network device is a LAN switch.

44. The cluster of network devices according to claim 43, wherein said cluster member network devices are LAN switches.

45. The cluster of network devices according to claim 44, wherein said network devices in the cluster transmit data to other network devices to discover whether additional network devices may be added to the cluster.

46. The cluster of network devices according to claim 42, wherein said commander network device forwards the network management request by replacing the IP address of the commander network device in the destination address field with the non-public network address of the cluster member network device.

47. The cluster of network devices according to claim 46, wherein said, network devices in the cluster transmit data to other network devices to discover whether additional network devices may be added to the cluster.

48. The cluster of network devices according to claim 42, wherein said network devices in the cluster transmit data to other network devices to discover whether additional network devices may be added to the cluster.

52. The cluster of network devices according to claim 42 wherein the non-public network address of the cluster member network device is a non-public IP address.

53. The cluster of network devices according to claim 42 wherein the non-public network address of the cluster member network device is a Media Access Control address.

49. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for managing a cluster of network devices, the method comprising:

selecting a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

selecting a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

50. The program storage device readable by a machine according to claim 49 wherein said forwarding includes:

changing the source address field of the network management request message to contain the IP address of the commander network device; and

changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

51. The program storage device readable by a machine according to claim 50, the method further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the;

response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

forwarding the response to the network management request message to the management console.

54. A method for managing a cluster of network devices, comprising:

identifying a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

identifying a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

55. The method according to claim 54 wherein said forwarding includes:

changing the source address field of the network management request message to contain the IP address of the commander network device; and

changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

56. The method according to claim 55 wherein said forwarding further includes:

changing the request identification field of the network management request message to contain an intra-cluster request identifier.

57. The method according to claim 56, further comprising:

storing values of the source address field and the request identification field within the commander network device.

58. The method according to claim 56, further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the commander network device, and a response identification field containing the value of the intra-cluster request identifier;

changing the source address field of the response to contain the IP address of the commander network device;

changing the destination address field of the response to contain the IP address of the management console;

changing the response identification field of the response to contain the original request identifier; and

forwarding the response to the management console.

59. The method according to claim 55, further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

forwarding the response to the network management request message to the management console.

60. The method according to claim 59, wherein the network management request message and the response to the network management request message are SNMP messages.

61. The method according to claim 54, wherein the first network device is a LAN switch.

62. The method according to claim 61, wherein the cluster member network device is a LAN switch.

63. The method according to claim 54 wherein said identifying a plurality of network devices to form a cluster includes:

defining a cluster identifier for the cluster.

64. The method according to claim 63 wherein the cluster identifier is an SNMP community string, and wherein the intra-cluster identifier includes the SNMP community string and a unique member string.

65. The method according to claim 54, wherein the network management request message is an SNMP message.

66. The method according to claim 54 wherein the non-public network address of the cluster member network device is a non-public IP address.

67. The method according to claim 54 wherein the non-public network address of the cluster member network device is a Media Access Control address.

68. An apparatus for managing a cluster of network devices, comprising:

means for identifying a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

means for identifying a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

means for receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

means for forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic IP address of the cluster member network device.

69. The apparatus according to claim 68 wherein said means for forwarding includes:

means for changing the source address field of the network management request message to contain the IP address of the commander network device; and

means for changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

70. The apparatus according to claim 69 wherein said means for forwarding further includes:

means for changing the request identification field of the network management request message to contain an intra-cluster request identifier.

71. The apparatus according to claim 70, further comprising:

means for storing values of the source address field and the request identification field within the first network device.

72. The apparatus according to claim 70, further comprising:

means for receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the commander network device, and a response identification field containing the value of the intra-cluster request identifier;

means for changing the source address field of the response to contain the IP address of the commander network device;

means for changing the destination address field of the response to contain the IP address of the management console;

means for changing the response identification field of the response to contain the original request identifier; and

means for forwarding the response to the management console.

73. The apparatus according to claim 69, further comprising:

means for receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

means for changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

means for changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

means for forwarding the response to the network management request message to the management console.

74. The apparatus according to claim 73, wherein the network management request message and the response to the network management request message are SNMP messages.

75. The apparatus according to claim 68, wherein the first network device is a LAN switch.

76. The apparatus according to claim 75, wherein the cluster member network device is a LAN switch.

77. The apparatus according to claim 68 wherein said means for identifying a plurality of network devices to form a cluster includes:

means for defining a cluster identifier for the cluster.

78. The apparatus according to claim 77 wherein the cluster identifier is an SNMP community string, and wherein the intra-cluster identifier includes the SNMP community string and a unique member string.

79. The apparatus according to claim 68, wherein the network management request message is an SNMP message.

80. The apparatus according to claim 68 wherein the non-public network address of the cluster member network device is a non-public IP address.

81. The apparatus according to claim 68 wherein the non-public network address of the cluster member network device is a Media Access Control address.

82. A first network device for redirecting network management messages in a cluster of network devices, the cluster including a plurality of cluster member network devices, each of the cluster member network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the cluster member network devices being assigned with an intra-cluster identifier,

said first network device being one of the plurality of the cluster member network devices, each cluster member network device having a non-public network address, said first network device comprising:

a management interface adapted to receive a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing a public IP address of the first network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding logic circuitry adapted to forward for the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

83. The first network device in accordance with claim 82, further comprising:

learning logic including;

a learning logic component adapted to change the source address field of the network management request message to contain the IP address of the first network device; and

a learning logic component adapted to change the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

84. The first network device in accordance with claim 83, further comprising:

learning logic including;

a learning logic component adapted to change the request identification field of the network management request message to contain an intra-cluster request identifier.

85. The first network device in accordance with claim 84, further comprising:

a memory for storing values of the source address field and the request identification field within the first network device.

86. The first network device in accordance with claim 84,

wherein said management interface is further adapted to receive a response to the network management request message at the first network device from the cluster member network device, wherein the response includes a source address field containing the non-public network address of the cluster member network device, a destination address field containing the IP address of the first network device, and a response identification field containing the value of the intra-cluster request identifier;

wherein said learning logic further comprises;

a learning logic component adapted to change the source address field of the response to contain the IP address of the first network device;

a learning logic component adapted to change the destination address field of the response to contain the IP address of the management console; and

a learning logic component adapted to change the response identification field of the response to contain the original request identifier; and

wherein said forwarding logic circuitry is further adapted to forward the response to the management console.

87. The first network device in accordance with claim 83, wherein said management interface is further

adapted to receive a response to the network management request message from the cluster member network device, wherein the response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the first network device;

wherein said learning logic further comprises;

a learning logic component adapted to change the source address field of the response to the network management request message to contain the IP address of the first network device; and

a learning logic component adapted to change the destination address field of the response to the network management request message to contain the IP address of the management console; and

wherein said forwarding logic circuitry is further adapted to forward the response to the network management request message to the management console.

88. The first network device in accordance with claim 87, wherein the network management request message and the response to the network management request message are SNMP messages.

89. The first network device in accordance with claim 82, wherein the first network device is a LAN switch.

90. The first network device in accordance with claim 89, wherein the cluster member network device is a LAN switch.

91. The first network device in accordance with claim 82, wherein the network management request message is an SNMP message.

92. The first network device in accordance with claim 82 wherein the intra-cluster identifier includes an SNMP community string defined for the cluster and a member string uniquely identifying the network device within the cluster.

93. The first network device in accordance with claim 82 wherein the non-public network address of the cluster member network device is a non-public IP address.

94. The first network device in accordance with claim 82 wherein the non-public network address of the cluster member network device is a Media Access Control address.

95. A program storage device readable by a machine, tangibly embodying a program of instructions executable by the machine to perform a method for managing a cluster of network devices, the method comprising:

identifying a plurality of network devices to form a cluster, each of the network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the network devices being assigned with an intra-cluster identifier;

identifying a first network device from among the plurality of the network devices to be a commander network device, the commander network device having a public IP address, each of the remaining network devices being a cluster member network device, each cluster member network device having a non-public network address;

receiving at the commander network device a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing the IP address of the commander network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.

96. The program storage device readable by a machine according to claim 95 wherein said forwarding includes:

changing the source address field of the network management request message to contain the IP address of the commander network device; and

changing the destination address field of the network management request message to contain the non-public network address of the cluster member network device.

97. The program storage device readable by a machine according to claim 96, the method further comprising:

receiving a response to the network management request message at the commander network device from the cluster member network device, wherein the;

response to the network management request message includes a source address field containing the non-public network address of the cluster member network device, and a destination address field containing the IP address of the commander network device;

changing the source address field of the response to the network management request message to contain the IP address of the commander network device;

changing the destination address field of the response to the network management request message to contain the IP address of the management console; and

forwarding the response to the network management request message to the management console.

98. A first network device for redirecting network management messages in a cluster of network devices, the cluster including a plurality of cluster member network devices, each of the cluster member network devices being capable of interfacing at least two computer networks, and capable of receiving and processing a network management request message from a management console, each of the cluster member network devices being assigned with an intra-cluster identifier, said first network device comprising:

a memory adapted to store a public IP address, said first network device being one of the plurality of the cluster member network devices, each cluster member network device having a non-public network address;

a management interface adapted to receive a network management request message from the management console, wherein the network management request message includes a source address field containing an IP address of the management console, a destination address field containing a public IP address of the first network device, a request identification field containing an original request identifier uniquely identifying the network management request message, and an indication of an intra-cluster identifier; and

forwarding logic circuitry adapted to forward for the network management request message to the cluster member network device identified by the intra-cluster identifier using the non-pubic network address of the cluster member network device.