System and method for hosted network management

• US 8,595,357 B2
• Filed: 02/28/2008
• Issued: 11/26/2013
• Est. Priority Date: 03/01/2007
• Status: Active Grant

• Current Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Original Assignee: Cisco Technology, Inc. (Cisco Systems, Inc.)
• Inventors: Biswas, Sanjit, Bicket, John
• Primary Examiner(s): Blair, April Y
• Application Number:
  US12/039,509
• Publication Number:
  US 20080294759A1
• Time in Patent Office: 2,098 Days
• Field of Search: 709/225, 709/222, 726/4
• US Class Current: 709/225
• CPC Class Codes: H04L 2101/622 Layer-2 addresses, e.g. medium access control [MAC] addresses
• CPC Class Codes: H04L 41/0246 Exchanging or transporting network management information using the Internet; Embedding network management web servers in network elements; Web-services-based protocols
• CPC Class Codes: H04L 41/026 using e-messaging for transporting management information, e.g. email, instant messaging or chat
• CPC Class Codes: H04L 41/04 Network management architectures or arrangements
• CPC Class Codes: H04L 41/0803 Configuration setting
• CPC Class Codes: H04L 41/22 comprising specially adapted graphical user interfaces [GUI]
• CPC Class Codes: H04L 41/34 Signalling channels for network management communication
• CPC Class Codes: H04L 61/5014 using dynamic host configuration protocol [DHCP] or bootstrap protocol [BOOTP]
• CPC Class Codes: H04L 61/5092 by self-assignment, e.g. picking addresses at random and testing if they are already in use
• CPC Class Codes: H04W 48/16 Discovering, processing access restriction or access information
• CPC Class Codes: H04W 8/005 Discovery of network devices, e.g. terminals
• CPC Class Codes: H04W 8/26 Network addressing or numbering for mobility support
• CPC Class Codes: H04W 84/12 WLAN [Wireless Local Area Networks]
• CPC Class Codes: H04W 88/08 Access point devices
• CPC Class Codes: H04W 88/16 Gateway arrangements

Abstract

A hosted network management solution for communications over a computer network supports data communication across a network in accordance with a network message protocol such that communications are established between a network host and a node device. The and the node device performs a self-configuring operation in which the network host identifies a network owner associated with the hosted network, and maintains a persistent network connection path between the network host and the node device for the exchange of network packet messages. The network host retrieves message data from the network packet messages it receives from the node device and performs network management operations to provide a user management interface to the identified network owner. The hosted network management enables more convenient setup and configuration for the network owner and provides more complete and effective network management tools.

Claims

1. A method of network management for communications over a managed network in accordance with a network communication protocol, the method comprising:

establishing communications between a network host and a node device, the node device being one of a plurality of node devices communicatively coupled to the network host, wherein the node device establishes a persistent network connection path to the network host for the communications and performs a self-configuring operation in which the network host provides the node device with data that identifies a network owner associated with the managed network, wherein the network host is a backend server configured to manage the node devices over the Internet, each node device being one of a router, a gateway device, and a wireless access point (AP), wherein different ones of the node devices are part of different ones of local networks that are associated with the network owner, wherein each of the node devices operating as a gateway provides an interface and performs network address translation (NAT) for its local network to the Internet, wherein each of the local networks includes at least one client device that is one of a laptop computer, desktop computer, and a portable computing device;

maintaining the persistent network connection path between the network host and the node device for the exchange of network messages;

wherein the network host

sends a query message to the node device, requesting a query response from the node device,

retrieves message data from the query response it receives from the node device such that the message data includes operational data from the node device, and

performs pull-based network monitoring to the identified network owner in accordance with network management operations to provide a user management interface to the identified network owner based on the retrieved operational data,

wherein each of the node devices maintains a separate persistent network connection with the network host for exchanging respective network messages, and wherein each persistent network connection includes a secure tunnel.

2. The method as defined in claim 1, wherein establishing communications comprises:

receiving a connection message from the node device at the network host wherein the connection message comprises a request from the node device for a network address in the managed network; and

determining if the requesting node device is associated with device registration data in the managed network that identifies the network owner and, if the requesting node device is a registered device, then returning a network address allocation message from the network host to the requesting node device, thereby self-configuring the node device for communications with the network host and establishing a hosted network associated with the identified network owner.

3. The method as defined in claim 1, wherein maintaining a persistent network connection path comprises:

periodically receiving an authentication message from the node device at the network host such that the network host can determine a mapping of the network address to the node device; and

responding to the authentication message with an acknowledgement message that maintains a persistent network connection path from the network host to the node device.

4. The method as defined in claim 1, wherein the network messages comprise encapsulated packet messages, the method further including:

sending and receiving the encapsulated packet messages between the network host and the node device, the encapsulated packet messages comprising packet messages of the message protocol appended with header information of the managed network.

5. A network host device for communications over a managed network in accordance with a network communication protocol, the device comprising:

a network interface for communications using the network communication protocol;

a hardware processor that establishes communications with a node device, the node device being one of a plurality of node devices communicatively coupled to the network host device, wherein the node device performs a self-configuring operation in which the network host device provides the node device with data that identifies a network owner associated with the managed network, such that the node device establishes a persistent network connection path to the network host for the communications and maintains the persistent network connection path between the network host device and the node device for the exchange of network messages, and wherein the network host sends a query message to the node device, requesting a query response from the node device, and retrieves message data from the query response it receives from the node device such that the message data includes operational data from the node device, and performs pull-based network monitoring to the identified network owner in accordance with network management operations to provide a user management interface to the identified network owner based on the retrieved operational data,

wherein the network host device is a backend server configured to manage the node devices over the Internet, each node device being one of a router, a gateway device, and a wireless access point (AP), wherein different ones of the node devices are part of different ones of local networks that are associated with the identified network owner, wherein each of the node devices operating as a gateway provides an interface and performs network address translation (NAT) for its local network to the Internet, wherein each of the local networks includes at least one client device that is one of a laptop computer, desktop computer, and a portable computing device, and

wherein each of the node devices maintains a separate persistent network connection with the network host device for exchanging respective network messages, and wherein each persistent network connection includes a secure tunnel.

6. The network host device as defined in claim 5, wherein the hardware processor receives a connection message from the node device, wherein the connection message comprises a request from the node device for a network address in the managed network, and determines if the requesting node device is associated with device registration data in the managed network that identifies the network owner and, if the requesting node device is a registered device, then returning a network address allocation message to the requesting node device, so that the node device performs self-configuring for communications with the network host device and the network host device establishes an association with the identified network owner.

7. The network device as defined in claim 5, wherein the network host device periodically receives an authentication message from the node device such that the network host device can determine a mapping of the network address to the node device, and responds to the authentication message with an acknowledgement message that maintains a persistent network connection path from the network host device to the node device.

8. The network device as defined in claim 5, wherein the network messages comprise encapsulated packet messages, and the network host device sends and receives the encapsulated packet messages to and from the node device, the encapsulated packet messages comprising packet messages of the message protocol appended with header information of the managed network.