Networking construction method and device

Abstract

The invention provides a networking construction method and device which are applied to management equipment, and the management equipment is obtained by electing network equipment which is physically connected in a target network. In the method, a management device sends ip addresses to network devices except the management device, and the ip addresses are used for three-layer interaction between the network devices; obtaining neighbor information reported by network equipment except the management equipment through a link layer discovery protocol; constructing a network topology of the target network according to the reported neighbor information; and first configuration information used for providing corresponding network services is issued to the network devices except the management device. Therefore, automatic construction of networking is realized.

Description

Technical Field

[0001] The present application relates to the field of communication technology, and in particular to a method and device for constructing a network. Background Art

[0002] As an important part of "new infrastructure construction", network security equipment such as firewalls has a high coverage in all walks of life. In the context of accelerated digital transformation, facing the network construction of business chains, small and medium-sized enterprise offices and other scenarios, it is easy to encounter the following problems during network deployment: (1) Small and medium-sized equipment has weak functions and needs to be configured one by one, which makes network deployment inefficient; (2) Small and medium-sized network users are sensitive to costs and often lack professional network management software or management equipment.

[0003] When it comes to network construction in scenarios such as small and medium-sized enterprises, the network configuration can only be performed manually by professional network administrators. This is not only inefficient but also unable to achieve intelligent management of the network. Summary of the invention

[0004] In view of this, the present application provides a method and device for constructing a network to achieve automated construction of the network.

[0005] Specifically, the present application is implemented through the following technical solutions:

[0006] According to a first aspect of the present application, a method for constructing a network is provided, which is applied to a management device, wherein the management device is selected based on a physically connected network device in a target network; the method comprises:

[0007] Sending IP addresses to network devices other than the management device respectively, wherein the IP addresses are used for layer 3 interaction between network devices;

[0008] Acquire neighbor information reported by network devices other than the management device through a link layer discovery protocol;

[0009] Constructing a network topology of the target network according to the reported neighbor information;

[0010] The first configuration information for providing the corresponding network service is respectively issued to the network devices other than the management device.

[0011] According to a second aspect of the present application, a device for constructing a network is provided, which is applied to a management device, wherein the management device is selected based on a physically connected network device in a target network; the device comprises:

[0012] A sending unit, used to send IP addresses to network devices other than the management device respectively, wherein the IP addresses are used for layer 3 interaction between network devices;

[0013] An acquisition unit, configured to acquire neighbor information reported by network devices other than the management device through a link layer discovery protocol;

[0014] A construction unit, configured to construct a network topology of the target network according to the reported neighbor information;

[0015] The sending unit is further used to send first configuration information for providing corresponding network services to network devices other than the management device respectively.

[0016] According to the third aspect of the present application, an electronic device is provided, including a processor and a machine-readable storage medium, the machine-readable storage medium storing a computer program that can be executed by the processor, and the processor is prompted by the computer program to execute the method provided in the first aspect of the embodiment of the present application.

[0017] According to the fourth aspect of the present application, a machine-readable storage medium is provided, which stores a computer program. When called and executed by a processor, the computer program prompts the processor to execute the method provided in the first aspect of the embodiment of the present application.

[0018] Beneficial effects of the embodiments of the present application:

[0019] In the networking construction method and device provided in the embodiment of the present application, the management device in the target networking sends IP addresses to network devices other than the management device respectively, and the IP addresses are used for three-layer interaction between network devices; the neighbor information reported by the network devices other than the management device is obtained through the link layer discovery protocol; the network topology of the target networking is constructed according to the reported neighbor information; and the first configuration information for providing corresponding network services is respectively issued to the network devices other than the management device. In this way, by electing a management device in the target networking, the management device constructs the network, that is, completes the construction of the network topology and the issuance of IP addresses and configuration information, so as to provide a communication link for interaction between network devices. Therefore, not only the automatic construction of the network is realized, but also the user does not need to manually configure the network, saving labor costs. BRIEF DESCRIPTION OF THE DRAWINGS

[0020] Figure 1 It is a flowchart of a method for constructing a network provided in an embodiment of the present application;

[0021] Figure 2a It is a schematic diagram of a networking architecture of a networking provided in an embodiment of the present application;

[0022] Figure 2b It is a schematic diagram of another networking architecture provided in an embodiment of the present application;

[0023] Figure 2c This is a schematic diagram of a network architecture of another network provided in an embodiment of the present application;

[0024] Figure 3 It is a structural diagram of a networking construction device provided in an embodiment of the present application;

[0025] Figure 4 It is a hardware structure diagram of an electronic device for implementing a networking construction method provided in an embodiment of the present application. DETAILED DESCRIPTION

[0026] Here, exemplary embodiments will be described in detail, and examples thereof are shown in the accompanying drawings. When the following description refers to the accompanying drawings, unless otherwise indicated, the same numbers in different drawings represent the same or similar elements. The embodiments described in the following exemplary embodiments do not represent all embodiments consistent with the present application. Instead, they are only examples of devices and methods consistent with some aspects of the present application.

[0027] The terms used in this application are only for the purpose of describing specific embodiments and are not intended to limit this application. The singular forms of "a", "said" and "the" used in this application are also intended to include plural forms, unless the context clearly indicates other meanings. It should also be understood that the term "and / or" used in this article refers to and includes any or all possible combinations of one or more corresponding listed items.

[0028] It should be understood that although the terms first, second, third, etc. may be used in the present application to describe various information, these information should not be limited to these terms. These terms are only used to distinguish the same type of information from each other. For example, without departing from the scope of the present application, the first information may also be referred to as the second information, and similarly, the second information may also be referred to as the first information. Depending on the context, the word "if" as used herein may be interpreted as "at the time of" or "when" or "in response to determining".

[0029] The following is a detailed description of the networking construction method provided by this application.

[0030] See also Figure 1 , Figure 1 This is a flowchart of a method for constructing a network provided by the present application. The method can be applied to a management device, which is selected based on a physically connected network device in the target network. When the management device implements the method, the following steps may be included:

[0031] Step 101: Send IP addresses to network devices other than the management device respectively, where the IP addresses are used for layer 3 interaction between network devices.

[0032] In this step, after the network devices in the target network are physically connected, the target network is only physically connected at this time, but the network devices cannot communicate with each other. Based on this, this application aims to intelligently realize the communication between network devices to complete the construction of the target network.

[0033] Based on this, in this embodiment, after each network in the target network is powered on safely, a management device is first elected, and the management device has the function of centrally managing and maintaining a large number of dispersed network devices. When electing a management device, the network devices in the target network can detect each other to detect the device information of other devices, and the device information may include the device model and device priority. Then, the management device is determined based on the device priority of each device, for example, the network device with the highest device priority is used as the management device.

[0034] For example, the target network includes four network devices, which are recorded as network devices 1 to 4. The network devices can detect each other. For example, network device 1 sends a detection message to network device 2 to obtain device information 2 of network device 2. At the same time, the device information 1 of network device 1 can be synchronized to network device 2 while sending the detection message. In this way, after receiving the detection message, network device 2 can feedback a response message to network device 1 to carry device information 2 of network device 2. Based on this, network device 1 can extract device information 2 from the response message and extract device priority from device information 2, and then compare the device priority of network device 1 with the device priority of network device 2. If the device priority of network device 1 is higher, it is compared with the device priorities of network device 3 and network device 4 respectively to determine the network device with the highest device priority, and use the network device as the management device.

[0035] After the management device is determined, in order to achieve three-layer intercommunication between network devices, the management device can send IP addresses to other network devices (referred to as member devices) in the target network. Specifically, the management device can allocate and send IP addresses to each member device through the DHCP protocol.

[0036] It should be noted that the above network devices need to be in the factory settings state after startup. If they are not in the factory settings state, the management device can execute a reset restart instruction on the network devices so that each network device can restore the factory settings.

[0037] It should be noted that each network device in the network has the functions of the above-mentioned management device. When the network device is elected as a management device, the management device can enable the network construction process provided by this application. In practical applications, gateway devices, security network devices, routers, etc. in the network can be used as management devices. AP devices have a relatively low device priority and are generally not used as management devices.

[0038] Step 102: Obtain neighbor information reported by network devices other than the management device through a link layer discovery protocol.

[0039] In this step, after the IP address is allocated, in order to facilitate the intelligent configuration and management of other network devices, the management device can discover each other between devices through the Layer 2 protocol. For example, the management device collects the device status of member devices in the target network through the Link Layer Discovery Protocol (LLDP) to build the network topology of the target network. For example, for each network device, the network device can collect the neighbor information of the neighbor devices of the network device through the LLDP message, and then report it to the management device; similarly, the management device can also collect the neighbor information of the management device through the LLDP message. By analogy, the management device can collect the neighbor information of each network device in the target network, and then build the network topology of the target network.

[0040] Step 103: construct the network topology of the target network according to the reported neighbor information.

[0041] Based on the description of step 102, the management device can collect the neighbor information of each network device in the target network, so that the network topology of the target network can be constructed according to all the collected neighbor information.

[0042] Step 104: Send first configuration information for providing corresponding network services to network devices other than the management device respectively.

[0043] In this step, when the network device obtains the device information of other network devices, the network device can know which network devices are included in the target network, and then obtain the connection relationship between the network devices based on the constructed network topology. Then, the management device can send relevant configurations to the member devices in the target network to facilitate the subsequent provision of data transmission services. The configuration information required by different network devices may be different. Therefore, the management device can send corresponding configuration information to each member device, which is recorded as the first configuration information for the convenience of description. The first configuration information corresponding to different member devices may be different, and the specific needs depend on the actual situation.

[0044] After the first configuration information is issued to each member device, the member device can locally perform corresponding configuration based on the first configuration information to facilitate subsequent business services.

[0045] Optionally, the management device can send configuration information to each network device through the netconnf / telnet protocol. The first configuration information can be, but is not limited to, configuration information for backup, configuration information for software version upgrade, and configuration information for configuring security policies; in addition, the management device also has the functions of downloading configuration files and sending configurations in batches or configuring security policies.

[0046] In the method for constructing the network provided by the present application, the management device in the target network sends IP addresses to network devices other than the management device, and the IP addresses are used for three-layer interaction between network devices; the neighbor information reported by network devices other than the management device is obtained through the link layer discovery protocol; the network topology of the target network is constructed according to the reported neighbor information; and the first configuration information for providing corresponding network services is respectively issued to network devices other than the management device. In this way, by electing a management device in the target network, the management device constructs the network, that is, completes the construction of the network topology and the issuance of IP addresses and configuration information, so as to provide a communication link for interaction between network devices. Therefore, not only the automatic construction of the network is realized, but also the user does not need to manually configure the network, saving labor costs.

[0047] Optionally, based on the above embodiments, the networking construction method provided in this embodiment may also include the following processes: after receiving a configuration instruction triggered by a user using a user device, outputting a configuration page; receiving second configuration information for the target network typed by the user based on the configuration page; and sending the second configuration information to the corresponding network device.

[0048] Specifically, in order to meet the actual needs of the user for the target network, this embodiment proposes that the configuration address of the target network can be informed to the user, and the configuration address points to the management device. When the user needs to configure the network device in the target network, the user can access the above configuration address through the user device to trigger the configuration instruction. Since the configuration address points to the management device, the management device can send a configuration page to the user device after receiving the configuration instruction, so that the user can perform relevant configuration based on the configuration interface. It should be noted that the configuration interface includes the configuration function of each network device. Based on this, the user can type the configuration to be performed based on the configuration interface, and the management device can receive the configuration information typed by the user based on the configuration page, which is recorded as the second configuration information, and then the configuration is issued to the corresponding network device based on the second configuration information. When the second configuration information is about the configuration of the management device, the relevant configuration can be performed based on the second configuration information. As a result, the user can configure each network device in each target network based on the configuration interface, which is not only convenient for the user to configure, but also improves the configuration efficiency.

[0049] In addition, the above configuration interface also includes configuration guidance for each configuration function, so that even if the user does not understand a certain configuration function, the user can perform related configuration based on the configuration guidance for the configuration function. This not only ensures the accuracy of the configuration, but also provides convenience for the user to configure the network.

[0050] Optionally, in a possible embodiment, the configuration indication initiated by the user may be implemented in the following manner: the user equipment accesses the configuration address through a public network to initiate the configuration indication.

[0051] Furthermore, the user may also initiate configuration through the following example: the network devices in the target network include access point AP devices, and the configuration indication is triggered after the user uses the user device to access a wireless signal released by the AP device.

[0052] Specifically, when the network devices in the target network include AP devices, the AP devices can transmit wireless signals to the outside after being powered on. Taking the wireless signal as a WiFi signal as an example, the name of the WiFi signal released by the AP device can be "X-QuickNet". At the same time, the user can learn the name of the WiFi signal based on the instruction manual of the AP device. In this way, the user can connect to the WiFi signal through the user device and then access the above configuration address to achieve access to the management device. The above configuration address can be, but is not limited to: quicknet.x.com, etc. When the user connects to the WiFi signal through the user device, the user can connect to the WiFi signal through a browser or a provided application app.

[0053] On this basis, the management device can output a configuration interface to the user device. Specifically, a "welcome page" can be displayed first, which may include a start button. In this way, the user can click the start button to start the configuration of the target network.

[0054] Optionally, in addition to the configuration of each network device, the second configuration information may also include a login password, Internet access method, WiFi management, etc.

[0055] Specifically, when setting a login password, the login password is an administrator password, and all network devices in the target network can share the same administrator password.

[0056] In addition, the configuration of the above-mentioned Internet access method may include: the configuration of the designated export device, the configuration of the uplink export, and the configuration of the export IP address. Specifically, for different networks, the devices that can be used as export devices in the network may be different; usually, routers, gateway devices, network security devices, etc. can be used as export devices. When specifying an export device, the designated export device is generally the network device to which the network cable is connected. Take the network security device as a firewall device as an example for explanation, refer to Figure 2a to Figure 2c In the three networks shown, Figure 2a In the network 1 shown, the API device or switch is connected to a router, firewall device or gateway device. The device connected by the network cable is a router / firewall device / gateway device. The designated egress device is the router / firewall device / gateway device. Figure 2b In the network 2 shown in the figure, the device connected to the network cable is a firewall device, so the designated egress device is the firewall device; Figure 2c In the network 3 shown, the device connected to the network cable is a gateway device, and the designated egress device is the gateway device.

[0057] It should be noted that when configuring the designated exit device, configuration guidance can be added to this function. For example, when the user selects the designated exit device function, a pop-up window is output, which includes configuration instructions for configuring the designated exit device. The configuration instructions can be that the device connected to the network cable is the designated exit device. This method is only an example and does not constitute a specific limitation on the function guidance method. In actual applications, other function guidance methods can also be used. Therefore, since the user himself knows the device connected to the network cable, the designated exit device can be quickly configured, and the user does not need to have sufficient knowledge reserves of network configuration.

[0058] On this basis, the uplink exit can be configured. That is, after configuring the designated exit device, the interface used when the network cable is connected to the device can be used as the above-mentioned uplink exit, thereby realizing the rapid configuration of the uplink exit.

[0059] Furthermore, the configuration of the IP address of the exit refers to using the public IP address as the IP address of the exit; so that the public IP address is used when accessing the public network. Generally speaking, in order to ensure the security of the intranet (network), the source NAT conversion function will be set on the designated exit device, so that after receiving the service message sent by the network device in the intranet, the designated exit device will perform source NAT conversion on the source IP address in the service message to convert it into the above-mentioned public IP address, and then send the converted service message to the public network, thereby protecting the IP address of the intranet and realizing the security protection of the intranet.

[0060] Furthermore, the user's management of WiFi may include the management of the name and password of the WiFi signal. For example, the management device provides a function of modifying the name and password of the WiFi signal, so that the user can modify the name of the WiFi signal exposed to the outside world and the login password for logging into the WiFi signal.

[0061] Furthermore, the above configuration interface may also include the topological structure of the network, so that the user can also see the topological relationship between the current network devices in the network based on the above configuration interface.

[0062] By executing the above configuration process, users can complete the configuration of administrator password, export device, export IP address, wireless service, etc. in one stop, and all configurations will be sent to the corresponding network devices and enabled. Compared with users logging in to each network device for configuration, the configuration speed is not only fast but also does not require users to have high network technology knowledge.

[0063] Optionally, based on any of the above embodiments, the present embodiment also provides the following process: receiving a management instruction sent by a user using a user device; outputting a management page to the user device according to the management instruction, and the management page is used to manage network devices in the target network; and managing the network devices indicated by the management information typed by the user based on the management page.

[0064] Specifically, in order to facilitate the user's management of devices in the network, this embodiment proposes that the management device also provides a management interface. For example, the management address is sent to the user through the user device. The management device can send the management address when sending the configuration address, or it can send the management address after the user completes the network configuration. This embodiment does not limit this.

[0065] On this basis, when the user needs to manage the network devices in the target network, the management instruction can be triggered through the management address, and the management address points to the management device. Therefore, the management device can receive the management instruction and then output the management interface to the user device; in this way, the user can perform corresponding management based on the management interface. The specific type of management to be performed can be determined according to the actual application scenario, and this embodiment will not be listed here.

[0066] In addition, the user can also send a command line to the management device through the user device to manage instructions in the form of command lines.

[0067] Therefore, by providing the above management method, unified management and maintenance of network devices in the network can be achieved through simple management operations, solving the operation and maintenance problems of small and medium-sized networks.

[0068] Optionally, based on any of the above embodiments, the network devices in the above target networking include network security devices. On this basis, the present embodiment also provides the following process: when the management device is the network security device, the hardware resources of the network security device are detected; according to the hardware resources, the security protection function of the network security device is adjusted.

[0069] Specifically, the current device status will be recorded in the network device in each network. Before the configuration is performed after the factory restoration, the status of the network device is unestablished. After the configuration is completed, the status of the network device becomes established. In actual applications, there are generally devices for security protection in the network, such as network security devices, to protect the security of the network. Based on this, when the network includes a network security device, since the network security device may be a management device, if it is confirmed that the network security device is a management device, the management device can enable the security protection function. However, in actual applications, there may be security protection functions such as intrusion defense, anti-virus, malicious URL defense, IP reputation defense, etc., and each security protection function will occupy more resources to perform the security protection after being enabled. If more security protection functions are enabled, the security protection speed of the network security device may be affected, causing greater processing pressure on the network security device. In view of this, this embodiment proposes to first obtain the hardware resources of the network security device, and then adjust the security protection function according to the hardware resources.

[0070] Optionally, the hardware resource may be, but is not limited to, memory or CPU utilization; when the hardware resource is memory, the total memory or the remaining memory may be detected. When the hardware resource is CPU utilization, the CPU utilization may be detected.

[0071] On this basis, different network security devices may have different corresponding total memories for total memory, so the management device may pre-set the corresponding relationship between total memory and the security protection functions that are allowed to be enabled. Referring to Table 1, it can be known that the higher the total memory, the more security protection functions that are allowed to be enabled. It should be noted that Table 1 is only an example and does not constitute a specific limitation on the above corresponding relationship.

[0072] Table 1

[0073] Total Memory Security features that can be enabled 2G Intrusion prevention function 4G Intrusion prevention function, anti-virus function 8G Intrusion prevention function, anti-virus function, malicious URL defense …… ……

[0074] Based on this, if the total memory of the current network security device is 2G, it means that the total memory is relatively small. If more security protection functions are enabled, it will cause greater processing pressure on the network security device. At this time, you can choose to enable an important security protection function, such as enabling the above-mentioned intrusion protection function as shown in Table 1. If the total memory of the network security device is 8G, it means that the total memory is large, which means that even if more security protection functions are enabled on the network security device, it will not cause greater processing pressure on the network security device. Based on this, you can enable the three security protection functions corresponding to the 8G memory shown in Table 1, namely, intrusion prevention function, antivirus function, malicious URL defense, etc.

[0075] Similarly, if the current detection is the remaining memory, several remaining memory thresholds can be set in the management device, and different security protection functions are enabled under different remaining memory thresholds. For example, referring to Table 2, it can be known that the higher the remaining memory, the more security protection functions are allowed to be enabled. It should be noted that Table 2 is only an example and does not constitute a specific limitation on the above correspondence.

[0076] Table 2

[0077] Remaining memory Security features that can be enabled First remaining memory threshold Intrusion prevention function Second remaining memory threshold Intrusion prevention function, anti-virus function The third remaining memory threshold Intrusion prevention function, anti-virus function, malicious URL protection function …… ……

[0078] In the above Table 2, the first remaining memory threshold is less than the second remaining memory threshold, the second remaining memory threshold is less than the third remaining memory threshold, and so on. On this basis, when the current remaining memory of the network security device is less than or equal to the first remaining memory threshold, it indicates that the current memory resource usage rate of the network security device is relatively high. Based on this, only the intrusion prevention function can be enabled. For example, if the network security device has enabled the intrusion prevention function and the antivirus function, the network security device can turn off the antivirus function and only enable the intrusion prevention function to relieve the memory pressure of the network security device.

[0079] If the current remaining memory of the network security device is greater than the first remaining memory threshold but less than or equal to the second remaining memory threshold, it indicates that the current memory pressure of the network security device is normal. At this time, the intrusion prevention function and the anti-virus function can be enabled as shown in Table 2; in addition, if the security protection functions that have been enabled on the network security device are the three security protection functions corresponding to the third remaining memory threshold, then at this time, it is necessary to turn off the malicious URL defense function and only enable the intrusion prevention function and the anti-virus function.

[0080] Similarly, if the current remaining memory of the network security device is greater than the second remaining memory threshold but less than or equal to the third remaining memory threshold, it indicates that the current memory usage of the network security device is not large. At this time, the intrusion prevention function, anti-virus function and malicious URL defense function can be turned on as shown in Table 2; in addition, if the security protection functions that the network security device has turned on are the two security protection functions corresponding to the second remaining memory threshold, then the malicious URL defense function can be turned on at this time to better perform security protection.

[0081] It should be noted that for how to enable the security protection function corresponding to CPU utilization, please refer to the description of remaining memory, which will not be described in detail here.

[0082] Furthermore, when the above-mentioned management device is not the network security device, the first configuration information sent to the network security device includes a security protection policy, and the security protection policy includes the correspondence between the hardware resources of the network security device and the security protection function. The security protection policy is used to instruct the network security device to detect the hardware resources of the network security device; and adjust the security protection function of the network security device according to the hardware resources.

[0083] Specifically, in actual applications, the management device may not be a network security device. In this case, when the management device sends a configuration to the network security device, the configuration may include a security protection strategy so that the network security device can perform security protection processing based on the security protection strategy. When the above-mentioned hardware resources are memory, the correspondence between the hardware resources and the security protection functions in the above-mentioned security protection strategy can be shown in Tables 1 and 3 above. Of course, the above-mentioned hardware resources can also be CPU utilization. Accordingly, the lower the CPU utilization, the more security protection functions can be enabled. The higher the CPU utilization, the less security protection functions can be enabled in order to avoid the high processing pressure of the network security device.

[0084] Furthermore, the management device can also set the corresponding relationship between the security level and the security protection function, and then send it to the network security device as a security protection policy. Specifically, the higher the security level, the more security protection functions need to be enabled, and vice versa, the lower the security level, the fewer security protection functions can be enabled. In addition, which security protection functions to be enabled at different security levels can be set in advance, and this embodiment does not specifically limit this.

[0085] Based on this, after obtaining the security protection strategy, the network security device can evaluate the security level of the network security device, and then enable the corresponding security protection function according to the security level obtained by the evaluation. It is worth noting that when conducting the security level evaluation, the evaluation can be conducted comprehensively based on the CPU utilization, memory, and networking environment of the network security device, etc., which will not be described in detail here.

[0086] Therefore, by providing the above-mentioned security protection processing method, manual configuration by professional operation and maintenance personnel is not required, thus saving labor costs.

[0087] Furthermore, this embodiment also provides an alarm service. Specifically, when the network security device detects the existence of a security threat based on the security protection function, an alarm log can be generated and sent to the user, for example, via email or SMS. In addition, the alarm log can inform the threat details of the security threat that may exist in the current network.

[0088] By adopting the above-mentioned networking construction method, intelligent networking construction is realized, and the networking construction process is simple and easy to understand. Users do not need to have strong professional knowledge to complete the networking construction. In addition, this application also provides a security protection function to realize the automation of networking and the intelligence of network security protection.

[0089] Based on the same inventive concept, the present application also provides a network construction device corresponding to the above-mentioned network construction method. The implementation of the network construction device can refer to the above-mentioned description of the network construction method, which will not be discussed here one by one.

[0090] See also Figure 3 , Figure 3 A networking construction device provided by an exemplary embodiment of the present application is applied to a management device, wherein the management device is selected based on a physically connected network device in a target network; the device comprises:

[0091] A sending unit 301 is used to send IP addresses to network devices other than the management device respectively, where the IP addresses are used for layer 3 interaction between network devices;

[0092] An acquisition unit 302 is configured to acquire neighbor information reported by network devices other than the management device through a link layer discovery protocol;

[0093] A construction unit 303, configured to construct a network topology of the target network according to the reported neighbor information;

[0094] The sending unit 301 is further configured to send first configuration information for providing corresponding network services to network devices other than the management device.

[0095] In this way, a management device is elected in the target network, and the management device is used to build the network, that is, to complete the construction of the network topology and the distribution of IP addresses and configuration information, so as to provide a communication link for interaction between network devices. In this way, not only the automated construction of the network is realized, but also the user does not need to manually configure the network, saving labor costs.

[0096] Optionally, the device provided in this embodiment may further include:

[0097] A first receiving unit (not shown in the figure), configured to receive a configuration indication triggered by a user using a user equipment;

[0098] A first output unit (not shown in the figure), configured to output a configuration page after the receiving unit receives the configuration instruction;

[0099] The first receiving unit (not shown in the figure) is further used to receive second configuration information for the target network entered by the user based on the configuration page;

[0100] The sending unit 301 is further configured to send the second configuration information to the corresponding network device.

[0101] Furthermore, in this embodiment, the network devices in the above-mentioned target network include access point AP devices, and the configuration indication is triggered after the user uses the user equipment to access a wireless signal released by the AP device.

[0102] Optionally, the device provided in this embodiment may further include:

[0103] A second receiving unit (not shown in the figure), configured to receive a management instruction sent by a user using a user device;

[0104] A second output unit (not shown in the figure), configured to output a management page to the user equipment according to the management instruction, wherein the management page is used to manage the network devices in the target network;

[0105] A management unit (not shown in the figure) is used to manage the network device indicated by the management information according to the management information entered by the user based on the management page.

[0106] Optionally, in this embodiment, the network device in the target network includes a network security device. On this basis, the apparatus further includes:

[0107] a detection unit (not shown in the figure), configured to detect hardware resources of the network security device when the management device is the network security device;

[0108] An adjustment unit (not shown in the figure) is used to adjust the security protection function of the network security device according to the hardware resources.

[0109] Further, when the management device is not the network security device, the first configuration information sent to the network security device includes a security protection policy, the security protection policy includes the correspondence between the hardware resources of the network security device and the security protection function, and the security protection policy is used to instruct the network security device to detect the hardware resources of the network security device; and adjust the security protection function of the network security device according to the hardware resources.

[0110] Based on the same inventive concept, the embodiment of the present application provides an electronic device, such as Figure 4 As shown, the electronic device includes a processor 401 and a machine-readable storage medium 402, wherein the machine-readable storage medium 402 stores a computer program that can be executed by the processor 401, and the processor 401 is prompted by the computer program to execute the networking construction method provided in any embodiment of the present application. In addition, the electronic device also includes a communication interface 403 and a communication bus 404, wherein the processor 401, the communication interface 403, and the machine-readable storage medium 402 communicate with each other through the communication bus 404.

[0111] The communication bus mentioned in the above electronic device can be a Peripheral Component Interconnect (PCI) bus or an Extended Industry Standard Architecture (EISA) bus, etc. The communication bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one thick line is used in the figure, but it does not mean that there is only one bus or one type of bus.

[0112] The communication interface is used for communication between the above electronic device and other devices.

[0113] The machine-readable storage medium 402 may be a memory, which may include a random access memory (RAM), a DDR SRAM (Double Data Rate Synchronous Dynamic Random Access Memory), or a non-volatile memory (NVM), such as at least one disk memory. Optionally, the memory may also be at least one storage device located away from the processor.

[0114] The above-mentioned processor can be a general-purpose processor, including a central processing unit (CPU), a network processor (NP), etc.; it can also be a digital signal processor (DSP), an application specific integrated circuit (ASIC), a field programmable gate array (FPGA) or other programmable logic devices, discrete gate or transistor logic devices, discrete hardware components.

[0115] In addition, this embodiment also provides a machine-readable storage medium, which stores a computer program. When called and executed by a processor, the computer program prompts the processor to execute the method provided by any embodiment of the present application.

[0116] As for the electronic device and machine-readable storage medium embodiments, since the method contents involved are basically similar to the aforementioned method embodiments, the description is relatively simple, and the relevant parts can be referred to the partial description of the method embodiments.

[0117] It should be noted that, in this article, relational terms such as first and second, etc. are only used to distinguish one entity or operation from another entity or operation, and do not necessarily require or imply any such actual relationship or order between these entities or operations. Moreover, the terms "include", "comprise" or any other variants thereof are intended to cover non-exclusive inclusion, so that a process, method, article or device including a series of elements includes not only those elements, but also other elements not explicitly listed, or also includes elements inherent to such process, method, article or device. In the absence of further restrictions, the elements defined by the sentence "comprise a ..." do not exclude the existence of other identical elements in the process, method, article or device including the elements.

[0118] The implementation process of the functions and effects of each unit / module in the above-mentioned device is specifically described in the implementation process of the corresponding steps in the above-mentioned method, and will not be repeated here.

[0119] For the device embodiments, since they basically correspond to the method embodiments, the relevant parts can refer to the partial description of the method embodiments. The device embodiments described above are merely schematic, wherein the units / modules described as separate components may or may not be physically separated, and the components displayed as units / modules may or may not be physical units / modules, that is, they may be located in one place, or they may be distributed on multiple network units / modules. Some or all of the units / modules may be selected according to actual needs to achieve the purpose of the present application. A person of ordinary skill in the art can understand and implement it without creative work.

[0120] The above description is only a preferred embodiment of the present application and is not intended to limit the present application. Any modifications, equivalent substitutions, improvements, etc. made within the spirit and principles of the present application shall be included in the scope of protection of the present application.

Claims

1. A method for constructing a network, characterized in that: Applied to a management device, the management device is selected based on a physically connected network device in a target network; the method comprises: Sending IP addresses to network devices other than the management device respectively, wherein the IP addresses are used for layer 3 interaction between network devices; Acquire neighbor information reported by network devices other than the management device through a link layer discovery protocol; Constructing a network topology of the target network according to the reported neighbor information; The first configuration information for providing the corresponding network service is respectively issued to the network devices other than the management device.

2. The method according to claim 1, characterized in that Also includes: After receiving a configuration instruction triggered by a user using a user device, outputting a configuration page; receiving second configuration information for the target network entered by the user based on the configuration page; Send the second configuration information to the corresponding network device.

3. The method according to claim 2, characterized in that The network devices in the target network include access point AP devices, and the configuration indication is triggered after the user uses the user equipment to access a wireless signal released by the AP device.

4. The method according to claim 1, characterized in that Also includes: Receiving a management instruction sent by a user using a user device; Outputting a management page to the user equipment according to the management instruction, wherein the management page is used to manage network devices in the target network; According to the management information entered by the user based on the management page, the network device indicated by the management information is managed.

5. The method according to claim 1, characterized in that The network device in the target network includes a network security device, and the method further includes: When the management device is the network security device, the hardware resources of the network security device are detected; and the security protection function of the network security device is adjusted according to the hardware resources.

6. The method according to claim 5, characterized in that When the management device is not the network security device, the first configuration information sent to the network security device includes a security protection policy, and the security protection policy includes the correspondence between the hardware resources of the network security device and the security protection function. The security protection policy is used to instruct the network security device to detect the hardware resources of the network security device; and adjust the security protection function of the network security device according to the hardware resources.

7. A network construction device, characterized in that: Applied to a management device, the management device is selected based on a physically connected network device in a target network; the device comprises: A sending unit, used to send IP addresses to network devices other than the management device respectively, wherein the IP addresses are used for layer 3 interaction between network devices; An acquisition unit, configured to acquire neighbor information reported by network devices other than the management device through a link layer discovery protocol; A construction unit, configured to construct a network topology of the target network according to the reported neighbor information; The sending unit is further used to send first configuration information for providing corresponding network services to network devices other than the management device respectively.

8. The device according to claim 7, characterized in that Also includes: A first receiving unit, configured to receive a configuration indication triggered by a user using a user equipment; A first output unit, configured to output a configuration page after the receiving unit receives the configuration instruction; The first receiving unit is further configured to receive second configuration information for the target network entered by the user based on the configuration page; The sending unit is further used to send the second configuration information to the corresponding network device.

9. The device according to claim 7, characterized in that Also includes: A second receiving unit, configured to receive a management instruction sent by a user using a user device; A second output unit, configured to output a management page to the user equipment according to the management instruction, wherein the management page is used to manage the network equipment in the target network; A management unit is used to manage the network device indicated by the management information according to the management information entered by the user based on the management page.

10. The device according to claim 7, characterized in that The network equipment in the target network includes a network security device, and the apparatus further includes: a detection unit, configured to detect hardware resources of the network security device when the management device is the network security device; An adjustment unit is used to adjust the security protection function of the network security device according to the hardware resources.

11. The device according to claim 10, characterized in that When the management device is not the network security device, the first configuration information sent to the network security device includes a security protection policy, and the security protection policy includes the correspondence between the hardware resources of the network security device and the security protection function. The security protection policy is used to instruct the network security device to detect the hardware resources of the network security device; and adjust the security protection function of the network security device according to the hardware resources.

Images