Selection and storage of policies in network management

Abstract

User interface and policy loading aspects of a policy-based, outsourced, network management system. In one aspect, a user selects policies using a graphical user interface (GUI) with a two paned window having a tree view of the policies in one pane. In another aspect, the policies are (1) created in the GUI format (e.g., XML), (2) sent over a network (e.g., the internet) to a service center in the same format, and (3) are loaded, manipulated and stored in the same format. In another aspect, the initial loading of the policies is done using a bulk loader in a logic layer. In another aspect, the logic layer also includes a configuration checker which handles changes or additions to policies in a finished network management system. Any aspects of the new or changed policy that are inconsistent with the finished system are parsed and stripped out. In another aspect, where the details of a new policy or change aren't specified, a base configuration creator creates a policy with minimal attributes. In another aspect, the logic layer also contains a device control console, which allows bypassing the policy creating and configuring to allow a user to directly access a device for configuration.

Description

CROSS-REFERENCES TO RELATED APPLICATIONS [0001] This application is related to copending application serial number “Policy Engine For Modular Generation Of Policy For A Flat, Per-Device Database” (Attorney Docket No. 20063P-001310US), Ser. No. ______, “Event Management For A Remote Network Policy Management System” (Attorney Docket No. 20063P-001410US), Ser. No. ______, “Device Plug-In System For Configuring Network Devices Over A Public Network” (Attorney Docket No. 20063P-001510US) and Ser. No. ______, “Modular Remote Network Policy Management System” (Attorney Docket No. 20063P-001610US), all filed even date herewith and assigned to the same assignee, and all incorporated herein by reference.STATEMENT AS TO RIGHTS TO INVENTIONS MADE UNDER FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT [0002] NOT APPLICABLE REFERENCE TO A “SEQUENCE LISTING,” A TABLE, OR A COMPUTER PROGRAM LISTING APPENDIX SUBMITTED ON A COMPACT DISK [0003] NOT APPLICABLE BACKGROUND OF THE INVENTION [0004] The present...

AI Technical Summary

Benefits of technology

[0021] In one embodiment, the management system includes an interface which enables a user to navigate through policies using a two-paned window. On the left window of the interface, a hierarchical array of nested folders—each of which contains a network policy—are displayed for viewing and selection by the user (similar to the nested trees in Windows for file folders). The contents of a selected folder are displayed on the right window of the interface. This simplifies navigation, viewing and selection of the policies. This eliminates many of the inefficiencies of the prior art policy-based systems in which polices were defined in a file using a descriptive programming language (which do not provide for viewing of the policy hierarchy while viewing the policy objects).

[0022] In one embodiment, the bulk loader, after receiving the XML files identifying the user's selected policies and network devices (this file includes such information as the devices' types, manufacturers, model numbers, initial configuration information, IP addresses, etc.), loads the data into the database. Using the XML format eliminates the need to translate such files to LDAP, as is commonly done in the prior art policy management systems. The bulk loader includes a service for maintaining a thread pool, and implements COM components.

[0024] In one embodiment, a base configuration creator handles network devices that has not been previously configured or initialized. It eliminates the need to configure a previously unconfigured network device with base configuration data supplied by the device's manufacturer, as is commonly done in the prior art.

Problems solved by technology

Communication network systems are becoming ever more complex.

The complexity that arises as a result of increasing the number and the variety of systems, which in the aggregate form a computer network, coupled with the variety of communication protocols that such devices are required to support, increase the knowledge base that is often required to manage such networks.

The problem is further compounded by the increasing complexity of new generation of high performance network devices and their interoperability as well as by the lack of qualified and well-trained network administrators.

A drawback of this method is that each networked device is configured and subsequently verified separately to ensure its conformity with the desired network objectives.

Another drawback of this method is that it requires an extensive knowledge base—of the various network device types—which may become prohibitively large as the number of device types in a network rises.

The method, however, involves human intervention and is thus inefficient and unautomated.

Such policy-based methods, however, are only applicable to a limited number of specific device types.

As stated above, conventional methods of configuring and maintaining a communication network are costly, time-consuming and require expert administrators capable of reliably managing and controlling ever more complex network systems in a timely manner.

Images