Access control method and device based on user and YANG model grouping and medium

Abstract

The invention provides an access control method and device based on user and YANG model grouping and a medium, and the method comprises the steps: obtaining an access request of a user, the access request being used for requesting to access a target YANG model; judging whether the user has a user group to which the user belongs or not; if the user has the user group to which the user belongs, determining a group access rule based on the user group, wherein the group access rule is associated with a user group and a YANG model group; and determining whether the access request is allowed based on the YANG model group in the packet access rule and the target YANG model. According to the method and the device, the users and the YANG models are grouped, so that the linear relation between the number of the rules and the number of the YANG models is broken, and the number of the rules is reduced. Therefore, the corresponding configuration number is reduced, the operation complexity of the system is reduced, the operation efficiency of the system is improved, the client configuration efficiency is improved, and the possibility of configuration errors is reduced.

Description

technical field [0001] The present disclosure relates to the field of network technology, and in particular to an access control method, device and medium based on user and YANG model grouping. Background technique [0002] YANG is a data modeling language originally designed to model configuration and state data manipulated by the Network Configuration Protocol (NETCONF), NETCONF Remote Procedure Calls, and NETCONF Notifications RFC6241. Since the release of YANG version RFC6020, YANG has been used or proposed for use in other protocols, for example, RESTCONF and Constrained Application Protocol (CoAP) Management Interface CoMI. The YANG version RFC8341 defines the specific specifications based on the YANG Model, including the specific process of NACM (Netconf Access Control Management), the mapping relationship between the specific operations of Netconf / Restconf and the actions in NACM, etc. However, RFC8341 does not define groups for YANG models (YANG Model), which will ...

AI Technical Summary

Problems solved by technology

However, RFC8341 does not define groups for YANG models (YANG Model), which will cause users to define separate rules for each YANG Model when defining RBAC rules. If there are too many YANG models, customers will need to Define a large number of rules, which can burden the system and network

Images