A network range adaptive networking method and system

Abstract

The invention discloses a network range adaptive networking method and system, the method comprising: an electronic device connected to a switch constructs three broadcast packets to reach a physical server via the switch; the broadcast packets are monitored on the physical server, the network to which the network card belongs is marked according to the source, and a DHCP discover packet is constructed to request the configuration information of the service network network card, the management network network card and the access network network card respectively; after the electronic device receives the DHCP discover packet, the MAC address and hostname of the network card are parsed, the configuration information of the network card is obtained from the configuration file according to the hostname, and a DHCP offer packet is constructed and sent; after the DHCP offer packet is monitored on the physical server, the IP configuration information in the packet is parsed to configure the corresponding network card. The invention can simplify the operation of the implementation delivery personnel, reduce the probability of configuration errors, and improve the efficiency of project delivery.

Description

Technical Field

[0001] The invention relates to a network range adaptive networking method and system, belonging to the technical field of network security. Background Art

[0002] Since the network range involves many technologies, functions and modules, the overall installation package will be relatively large, and the deployment will be more troublesome, and the requirements for the implementation and delivery personnel are relatively high. In order to simplify the delivery process, the current commonly used delivery solution is to deploy the range platform within the company and then send the server to the customer, or directly send the cloned hard disk to the customer through hard disk copy technology.

[0003] Because the customer's network environment is inconsistent with the company's network environment, the implementation personnel at the customer's site need to log in to the server through a monitor and keyboard to manually modify the server's IP address before it can be used. In general, the personnel who deploy the environment in the company and the personnel who deliver and implement the service on site are not the same person, and because the network range is divided into multiple networks, the server needs to be connected to multiple network ports. It is easy to insert the wrong network cable, resulting in network failure after connection. At this time, it is necessary to use the ethtools -p eth0 command to make the physical network port light flash, so as to determine the correspondence between the network card name and the physical network port, and then adjust the network cable. The operation steps are relatively cumbersome. In addition, due to inconsistent physical hardware configuration, the network card name will change after the cloned hard drive is connected to the customer's server. At this time, even if the network cable is connected correctly, the range platform cannot be accessed. It is necessary to log in to the server through a monitor and keyboard to manually modify the network card configuration file before it can be used. Summary of the invention

[0004] Purpose of the invention: In view of the problems existing in the above-mentioned prior art, the purpose of the present invention is to provide a network target range adaptive networking method and system, which can simplify the operations of delivery personnel, reduce the probability of configuration errors, and improve project delivery efficiency.

[0005] Technical solution: To achieve the above-mentioned invention object, the present invention adopts the following technical solution:

[0006] A network range adaptive networking method comprises the following steps:

[0007] Connect the three network cards on the physical server to the corresponding ports of the access network, management network, and business network on the switch through network cables;

[0008] The electronic device connected to the switch constructs a first broadcast packet, a second broadcast packet, and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the agreed first identifier and the first address; the VLAN identifier and the source MAC address in the second broadcast packet are the identifier assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identifier assigned by the access network and the agreed third address;

[0009] The first broadcast packet, the second broadcast packet and the third broadcast packet are listened to on the physical server, and the network cards receiving the first broadcast packet, the second broadcast packet and the third broadcast packet are marked as the service network network card, the management network network card and the access network network card respectively, and a DHCP discover packet is constructed to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number;

[0010] After receiving the DHCP discover packet, the electronic device connected to the switch parses the MAC address and hostname of the network card, obtains the configuration information of the network card from the configuration file according to the hostname, constructs and sends a DHCP offer packet;

[0011] After the DHCP offer packet is intercepted on the physical server, the IP configuration information in the packet is parsed, and the network card that receives the DHCP offer packet is configured using the IP configuration information.

[0012] Furthermore, after a network card is configured on the physical server, a DHCP request packet is constructed and sent, in which the requested IP is the IP address just configured for the network card, the hostname specified in the option is the host name of the physical server, and if the network card is a service network card, the VLAN identifier in the packet is set to the agreed first identifier; after the electronic device connected to the switch receives the DHCP request packet, it determines whether the network card configuration is successful based on whether the requested IP in the packet is consistent with the configuration in the configuration file.

[0013] Furthermore, in the DHCP offer packet, the VLAN identifier is consistent with the VLAN identifier of the received discover packet, and the corresponding source MAC address is set according to the different VLAN identifiers, the target IP is the IP address obtained from the configuration file, and the target MAC address is the MAC address of the physical server parsed from the discover packet.

[0014] In a specific implementation, the electronic device connected to the switch can construct the first broadcast packet, the second broadcast packet and the third broadcast packet at the same time and send them, or construct the first broadcast packet, the second broadcast packet and one of the third broadcast packets in sequence, and wait for the configuration of the network card in one network to be completed before configuring the network card in the next network.

[0015] Preferably, the configuration file stores the configuration information of three network cards on each physical server that is planned in advance, including IP addresses, masks and gateway addresses.

[0016] Preferably, the ports for accessing the network and the management network divided on the switch are access ports, and the ports for the service network are trunk ports; the electronic device is a desktop or laptop computer, connected to the trunk port on the switch.

[0017] Furthermore, after the IP configuration of the three network cards on the physical server is successful, the script is automatically called to modify the corresponding network card names and monitored IP addresses in the business system configuration file.

[0018] A network range adaptive networking system includes a switch and at least one physical server, wherein three network cards on the physical server are respectively connected to ports corresponding to an access network, a management network, and a service network divided on the switch through network cables, and the system also includes a real-installed network adaptive configuration service deployed on an electronic device connected to the switch, and a network configuration proxy service deployed on the physical server;

[0019] The installed network adaptive configuration service is used to construct a first broadcast packet, a second broadcast packet and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the agreed first identifier and the first address; the VLAN identifier and the source MAC address in the second broadcast packet are the identifier assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identifier assigned by the access network and the agreed third address; and, after receiving a DHCP discover packet, parsing the MAC address and hostname of the network card, obtaining the configuration information of the network card from the configuration file according to the hostname, and constructing and sending a DHCP offer packet;

[0020] The network configuration proxy service is used to monitor the first broadcast packet, the second broadcast packet and the third broadcast packet, mark the network cards that receive the first broadcast packet, the second broadcast packet and the third broadcast packet as the service network network card, the management network network card and the access network network card respectively, and construct a DHCP discover packet to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number; and, after monitoring the DHCP offer packet, parse the IP configuration information in the packet, and use the IP configuration information to configure the network card that received the DHCP offer packet.

[0021] Furthermore, the network configuration proxy service is also used to: after completing the configuration of a network card on the physical server, construct and send a DHCP request packet, wherein the requested ip is the IP address of the network card just configured, the hostname specified in the option is the host name of the physical server, and if the network card is a service network card, the vlan identifier in the packet is set to the agreed first identifier;

[0022] The installed network adaptive configuration service is also used to: after receiving a dhcp request packet, determine whether the network card configuration is successful according to whether the requested IP in the packet is consistent with the configuration in the configuration file.

[0023] A computer program product includes a computer program / instruction. When the computer program / instruction is executed by a processor, the operation steps of an electronic device connected to a switch or the operation steps on a physical server in a network range adaptive networking method are implemented.

[0024] Beneficial effects: Compared with the prior art, the present invention has the following advantages: the present invention identifies the network to which the physical server network card belongs by constructing a specific VLAN packet, and issues new server network configuration information by constructing a specific DHCP message, without recording the correspondence between the network card and the network to which it belongs, and the network configuration can be automatically modified after the network cable is inserted. The present invention simplifies the operation of the implementation and delivery personnel, can reduce the probability of configuration errors, and improve the efficiency of project delivery. BRIEF DESCRIPTION OF THE DRAWINGS

[0025] Figure 1 is a flow chart of an embodiment of the present invention.

[0026] Figure 2 Schematic diagram of an embodiment of the present invention. DETAILED DESCRIPTION

[0027] The technical solution of the present invention will be clearly and completely described below in conjunction with the accompanying drawings and specific embodiments.

[0028] like Figure 1 As shown, a network range adaptive networking method disclosed in an embodiment of the present invention mainly includes the following steps:

[0029] Connect the three network cards on the physical server to the corresponding ports of the access network, management network, and business network on the switch through network cables;

[0030] The electronic device connected to the switch constructs a first broadcast packet, a second broadcast packet, and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the agreed first identifier and the first address; the VLAN identifier and the source MAC address in the second broadcast packet are the identifier assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identifier assigned by the access network and the agreed third address;

[0031] The first broadcast packet, the second broadcast packet and the third broadcast packet are listened to on the physical server, and the network cards receiving the first broadcast packet, the second broadcast packet and the third broadcast packet are marked as the service network network card, the management network network card and the access network network card respectively, and a DHCP discover packet is constructed to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number;

[0032] After receiving the DHCP discover packet, the electronic device connected to the switch parses the MAC address and hostname of the network card, obtains the configuration information of the network card from the configuration file according to the hostname, constructs and sends a DHCP offer packet;

[0033] After the DHCP offer packet is intercepted on the physical server, the IP configuration information in the packet is parsed, and the network card that receives the DHCP offer packet is configured using the IP configuration information.

[0034] In some embodiments, the electronic device connected to the switch can simultaneously construct the first broadcast packet, the second broadcast packet and the third broadcast packet and send them, or, sequentially construct the first broadcast packet, the second broadcast packet and one of the third broadcast packets, and wait for the configuration of the network card in one network to be completed before configuring the network card in the next network.

[0035] In order to ensure the successful configuration of the network card, in some embodiments, after the configuration of a network card is completed on the physical server, a DHCP request packet is also constructed and sent, the requested IP is the IP address just configured for the network card, the hostname specified in the option is the host name of the physical server, and if the network card is a business network card, the VLAN identifier in the packet is set to the agreed first identifier; after the electronic device connected to the switch receives the DHCP request packet, it determines whether the network card configuration is successful based on whether the requested IP in the packet is consistent with the configuration in the configuration file.

[0036] The above-mentioned adaptive networking method mainly involves two components, the installed network adaptive configuration service on the electronic device and the network configuration proxy service on the physical server. The installed network adaptive configuration service is used to send network card detection tasks and new IP addresses. The network configuration proxy service receives the request sent by the installed network adaptive configuration service, determines the network to which the network card belongs, and updates the configuration information of the network card.

[0037] Combine the following Figure 2 , a network target range adaptive networking method is exemplified.

[0038] like Figure 2 As shown, the network range is divided into access network, management network and business network, where the access network is used for users to remotely access the range web interface and support logging into virtual machines and containers on the web interface; the management network is used for communication between services within the user range platform, such as ntp time synchronization, virtual machine scheduling and startup, etc.; the business network is used for communication between virtual machines and containers within the topology scenario, and different networks are isolated through VLANs. In this embodiment, the access network VLAN is divided into 101, the management network VLAN is divided into 102, and the business network is connected to the trunk port of the switch.

[0039] The real-time network adaptive configuration service can be deployed on a desktop or laptop. The port connected to the switch is a Trunk port, and traffic from vlan100, vlan101, and vlan102 is allowed to pass. The network configuration proxy service is deployed on all physical servers in advance and is set to start automatically at boot.

[0040] The user plans the VLAN on the switch and the IP address of the physical server in advance and saves them in the configuration file; the configuration file format example is:

[0041] {

[0042] "controller": { # host name

[0043] "manager_net": { # Management network configuration

[0044] "ip": "192.168.1.10", # IP address

[0045] "mask": 24, # mask

[0046] "gateway_ip": "192.168.1.1" # Gateway address

[0047] },

[0048] "service_net": {

[0049] "ip": "",# No need to configure IP address, connect to the trunk port

[0050] "mask": null,

[0051] "gateway_ip": ""

[0052] },

[0053] "access_net": {

[0054] "ip": "172.26.1.10",

[0055] "mask": 24,

[0056] "gateway_ip": "172.26.1.1"

[0057] }

[0058] }

[0059] "compute01": { # Host name

[0060] …

[0061] }

[0062] }

[0063] Based on the above configuration, the main execution steps of a network range adaptive networking method include:

[0064] Step 1: After the network adaptive configuration service is started, Python's Scapy will be used to construct a first broadcast packet, specifying the first broadcast packet VLAN ID as 100 and the source MAC address as a fixed fa:16:3e:00:00:01.

[0065] Step 2: Since the VLAN ID of the first broadcast packet constructed in step 1 is 100, the broadcast packet will reach the physical server via ports 9 and 10 of the switch.

[0066] Step 3: The network configuration proxy service on the physical server will monitor the traffic of all physical network cards on the server.

[0067] Step 4. When the network configuration proxy service monitors traffic with a VLAN identifier of 100 and a MAC address of fa:16:3e:00:00:00, it marks the network card as a business network card and constructs a DHCP address request packet to request the configuration information of the network card from the installed network adaptive configuration service. The VLAN identifier of the DHCP discover packet is 100, the source MAC of the packet is the MAC address of the business network card, and the hostname specified in the option of the packet is the host name of the current host.

[0068] Step 5. After the installed network adaptive configuration service receives the DHCP discover packet with VLAN ID 100, it parses the MAC address and hostname of the network card, and then obtains the configuration information of the pre-configured service network card according to the hostname, and then constructs a DHCP offer packet according to the configuration information. The VLAN ID of the packet is 100, the source MAC is fa:16:3e:00:00:00, the target IP is the IP in the configuration, and the target MAC is the MAC address of the physical machine parsed in the discover packet.

[0069] Step 6: When the network configuration proxy service monitors the DHCP offer packet with the VLAN ID of 100 and the MAC address of fa:16:3e:00:00:00, it parses the IP configuration information in the packet and then uses the IP configuration information to modify the configuration file of the corresponding service network card.

[0070] Step 7: After the network card configuration is completed, the network configuration proxy service constructs a DHCP request packet, the VLAN identifier is 100, the source MAC of the packet is the MAC address of the business network card, the requested IP is the IP address configured for the business network card, and the hostname specified in the option is the host name of the current host.

[0071] Step 8: After receiving the request packet with VLAN ID 100, the installed network adaptive configuration service compares the request IP in the packet with the configuration of the corresponding hostname service network card in the configuration file to see if they are consistent. If they are consistent, it means that the service network card of the server is configured successfully.

[0072] Step 9, repeat steps 1 to 8 to construct the second broadcast packet and the third broadcast packet to complete the configuration of the network cards corresponding to the management network and the access network. Because the ports of the management network and the access network on the switch are access ports, the packets sent by the network configuration proxy service in steps 4 and 7 do not need to carry VLAN information; when configuring the management network, the VLAN identifier in steps 1 to 8 needs to be modified to 101, and the MAC address needs to be modified to fa:16:3e:00:00:01, and the ports corresponding to the switch in step 2 are ports 1 and 2 corresponding to VLAN101; when configuring the access network, the VLAN identifier in steps 1 to 8 needs to be modified to 102, and the MAC address needs to be modified to fa:16:3e:00:00:02, and the ports corresponding to the switch in step 2 are ports 5 and 6 corresponding to VLAN102.

[0073] After the server IP configuration is successful, since the business system will configure the server's network card name and listening address, you can automatically call the business configuration modification script, or manually modify the corresponding network card name and listening IP address in the configuration file. This completes the automatic deployment of the customer's on-site network environment.

[0074] In the case of hard disk delivery, the network configuration agent service on the server will identify the current network card name, monitor the network card traffic, and then automatically update the network card configuration file according to the issued configuration, thereby achieving successful configuration even if the network card name changes.

[0075] Based on the same inventive concept, an embodiment of the present invention discloses a network range adaptive networking system, including a switch and at least one physical server, wherein three network cards on the physical server are respectively connected to ports corresponding to an access network, a management network, and a service network divided on the switch through network cables, and the system further includes a real-installed network adaptive configuration service deployed on an electronic device connected to the switch, and a network configuration proxy service deployed on the physical server;

[0076] The installed network adaptive configuration service is used to construct a first broadcast packet, a second broadcast packet and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the agreed first identifier and the first address; the VLAN identifier and the source MAC address in the second broadcast packet are the identifier assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identifier assigned by the access network and the agreed third address; and, after receiving a DHCP discover packet, parsing the MAC address and hostname of the network card, obtaining the configuration information of the network card from the configuration file according to the hostname, and constructing and sending a DHCP offer packet;

[0077] The network configuration proxy service is used to monitor the first broadcast packet, the second broadcast packet and the third broadcast packet, mark the network cards that receive the first broadcast packet, the second broadcast packet and the third broadcast packet as the service network network card, the management network network card and the access network network card respectively, and construct a DHCP discover packet to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number; and, after monitoring the DHCP offer packet, parse the IP configuration information in the packet, and use the IP configuration information to configure the network card that received the DHCP offer packet.

[0078] Based on the same inventive concept, a computer program product disclosed in an embodiment of the present invention includes a computer program / instruction, which, when executed by a processor, implements the operating steps of an electronic device connected to a switch, or the operating steps on a physical server, in the network target range adaptive networking method.

Claims

1. A network range adaptive networking method, characterized in that: The steps include: Connect the three network cards on the physical server to the corresponding ports of the access network, management network, and business network on the switch through network cables; The electronic device connected to the switch constructs a first broadcast packet, a second broadcast packet, and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the first identification number and the first address of the agreed service network; the VLAN identifier and the source MAC address in the second broadcast packet are the identification number assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identification number assigned by the access network and the agreed third address; The first broadcast packet, the second broadcast packet and the third broadcast packet are listened to on the physical server, and the network cards receiving the first broadcast packet, the second broadcast packet and the third broadcast packet are marked as the service network network card, the management network network card and the access network network card respectively, and a DHCP discover packet is constructed to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number; After receiving the DHCP discover packet, the electronic device connected to the switch parses the MAC address and hostname of the network card, obtains the configuration information of the network card from the configuration file according to the hostname, constructs and sends a DHCP offer packet; After the DHCP offer packet is intercepted on the physical server, the IP configuration information in the packet is parsed, and the network card that receives the DHCP offer packet is configured using the IP configuration information.

2. A network range adaptive networking method according to claim 1, characterized in that: After configuring a network card on the physical server, a DHCP request packet is constructed and sent. The requested IP is the IP address of the network card just configured. The hostname specified in the option is the host name of the physical server. If the network card is a business network card, the VLAN identifier in the packet is set to the agreed first identifier. After receiving the DHCP request packet, the electronic device connected to the switch determines whether the network card configuration is successful based on whether the requested IP in the packet is consistent with the configuration in the configuration file.

3. The method for adaptive networking of a network range according to claim 1, characterized in that: In the DHCP offer packet, the VLAN identifier is consistent with the VLAN identifier of the received discover packet, and the corresponding source MAC address is set according to the different VLAN identifiers. The target IP is the IP address obtained from the configuration file, and the target MAC address is the MAC address of the physical server parsed from the discover packet.

4. The method for adaptive networking of a network range according to claim 1, characterized in that: The electronic device connected to the switch constructs the first broadcast packet, the second broadcast packet and the third broadcast packet at the same time and sends them, or constructs the first broadcast packet, the second broadcast packet and one of the third broadcast packets in sequence, and waits for the configuration of the network card in one network to be completed before configuring the network card in the next network.

5. The method for adaptive networking of a network range according to claim 1, characterized in that: The configuration file stores the pre-planned configuration information of the three network cards on each physical server, including the IP address, mask and gateway address.

6. A network range adaptive networking method according to claim 1, characterized in that: The ports for accessing the network and the management network divided on the switch are access ports, and the ports for the service network are trunk ports; the electronic device is a desktop or a laptop computer, which is connected to the trunk port on the switch.

7. The method for adaptively networking a network range according to claim 1, characterized in that: After the IP configuration of the three network cards on the physical server is successful, the script is automatically called to modify the corresponding network card names and monitored IP addresses in the business system configuration file.

8. A network range adaptive networking system, comprising a switch and at least one physical server, wherein three network cards on the physical server are respectively connected to ports corresponding to access networks, management networks and service networks divided on the switch through network cables, characterized in that: Also included are real-world network adaptive configuration services deployed on electronic devices connected to switches, and network configuration proxy services deployed on physical servers; The installed network adaptive configuration service is used to construct a first broadcast packet, a second broadcast packet and a third broadcast packet to reach the physical server via the switch, wherein the VLAN identifier and the source MAC address in the first broadcast packet are the first identification number and the first address of the agreed service network; the VLAN identifier and the source MAC address in the second broadcast packet are the identification number assigned by the management network and the agreed second address; the VLAN identifier and the source MAC address in the third broadcast packet are the identification number assigned by the access network and the agreed third address; And, after receiving the DHCP discover packet, parse the MAC address and hostname of the network card, obtain the configuration information of the network card from the configuration file according to the hostname, construct and send a DHCP offer packet; The network configuration proxy service is used to monitor the first broadcast packet, the second broadcast packet and the third broadcast packet, mark the network cards that receive the first broadcast packet, the second broadcast packet and the third broadcast packet as the service network network card, the management network network card and the access network network card respectively, and construct a DHCP discover packet to request the configuration information of the service network network card, the management network network card and the access network network card respectively, the source MAC address of the DHCP discover packet is the MAC address of the network card requested to be configured, and the hostname specified in the option of the packet is the host name of the physical server; for the DHCP discover packet requesting the configuration of the service network network card, the VLAN identifier is the agreed first identification number; and, after monitoring the DHCP offer packet, parse the IP configuration information in the packet, and use the IP configuration information to configure the network card that received the DHCP offer packet.

9. The network range adaptive networking system according to claim 8, characterized in that: The network configuration proxy service is further used to: after a network card is configured on a physical server, construct and send a DHCP request packet, wherein the requested IP is the IP address of the network card just configured, the hostname specified in the option is the host name of the physical server, and if the network card is a service network card, the vlan identifier in the packet is set to the agreed first identifier; The installed network adaptive configuration service is also used to: after receiving a dhcp request packet, determine whether the network card configuration is successful according to whether the requested IP in the packet is consistent with the configuration in the configuration file.

10. A computer program product comprising a computer program / instructions, characterized in that When the computer program / instructions are executed by the processor, the operating steps of the electronic device connected to the switch or the operating steps on the physical server in the network range adaptive networking method according to any one of claims 1 to 7 are implemented.

Images