Network equipment management system and method based on SNMP (Simple Network Management Protocol)

Abstract

The invention discloses a network equipment management system and method based on an SNMP (Simple Network Management Protocol). The network equipment management system comprises a central server, a network channel, a plurality of distributed proxy nodes and a plurality of network equipment, the distributed proxy node is connected with network equipment through an SNMP protocol; and the central server is used for interacting with the distributed agent nodes, realizing front-end and rear-end interaction, performing identity verification, decrypting the equipment encrypted data and displaying the equipment encrypted data. According to the invention, cross-platform access and deployment are realized, complete network management is supported, and all network devices in the system are comprehensively managed; operation is performed through the user interface, the operation mode is simple, the working efficiency of a network administrator is improved, the working quality is ensured, and the management cost is saved; and the security and the reliability of information between the network devices are improved through the encryption algorithm unit.

Description

Technical Field

[0001] The invention belongs to the field of communication technology, and in particular relates to a network equipment management system and method based on SNMP protocol. Background Art

[0002] The most commonly used network management protocol in network devices is SNMP, which stands for Simple Network Management Protocol. SNMP provides a unified and standard network management interface that can easily configure and manage network devices.

[0003] A large number of network devices can be managed through SNMP. For example, MIB Browser is a network device management system that includes definitions of architecture, object types, attributes, and relationships, and can be used and read by the SNMP protocol. It can help users easily find, retrieve, and analyze MIB information. Through MIB Browser, users can browse the MIB database, search and filter information, and analyze and test devices.

[0004] However, the existing network equipment management system MIB Browser has these problems: 1. It does not support a complete network management solution; 2. The operation method is relatively cumbersome; 3. The visualization is relatively low. The operation process of accessing the relevant information of the network device through the OID node number is relatively complicated, and the displayed information is still its original binary information; 4. The security is relatively low. If the network device uses the SNMPv1 and SNMPv2 protocols, you only need to know the IP address of the network device to access and modify the information of the network device; 5. There may be compatibility issues. MIB Browser is not compatible with some devices, and you may encounter some problems during use. Summary of the invention

[0005] In order to solve the above technical problems, the present invention provides a network equipment management system and method based on SNMP protocol.

[0006] The present invention is achieved through the following technical solutions.

[0007] The present invention provides a network equipment management system based on SNMP protocol, comprising: a central server, a network channel, a plurality of distributed agent nodes and a plurality of network equipment;

[0008] The central server is connected to a number of distributed proxy nodes via a network channel;

[0009] One of the distributed proxy nodes is connected to a number of network devices;

[0010] The distributed agent node is connected to the network device via the SNMP protocol;

[0011] The central server is used to interact with the distributed proxy nodes, realize front-end and back-end interaction, perform identity authentication, decrypt device encrypted data, and display device encrypted data;

[0012] The network channel is used to connect the central server and the distributed agent nodes;

[0013] The distributed agent nodes are used for data collection, data processing and data storage.

[0014] Preferably, the distributed proxy node comprises: a data acquisition module, a data processing module and a data storage module;

[0015] The data acquisition module is used to collect and store network device information through the SNMP protocol;

[0016] The data processing module is used to process network device information, obtain device encryption data, and manage the operating status of network devices;

[0017] The data storage module is used to encrypt data through a MySQL database and a dynamically mounted storage device.

[0018] Preferably, the data acquisition module includes: an SNMP protocol unit and a MIB data structure unit;

[0019] The SNMP protocol unit is used to communicate with network devices, collect network device information, and send a Docker minimum system image;

[0020] The MIB data structure unit is used to store network device information.

[0021] Preferably, the data processing module includes an encryption algorithm unit, an authentication unit, an error handling unit, a CMDB unit and a Docker container unit;

[0022] The encryption algorithm unit is used to generate a hash value through a hash function and generate device encryption data according to network device information;

[0023] The authentication unit is used to determine the integrity of the message through the hash value of the message;

[0024] The error handling unit manages the exceptions and error prompts of the network devices in a unified manner through exception mapping;

[0025] The CMDB unit is used to automatically manage and configure the operating status of network devices;

[0026] The Docker container unit is used to package and generate a Docker minimum system image, and control the running status of the network device through the Docker minimum system image.

[0027] Preferably, the central server comprises: a front-end module and a back-end module;

[0028] The front-end module is used to provide a user interface, interact with the back-end module, initiate a protocol request to the back-end module, obtain device encrypted data, decrypt and display device encrypted data, and send management commands;

[0029] The back-end module is used to communicate with the distributed proxy node through the network channel, receive the protocol request of the front-end module, send the device encrypted data to the front end according to the protocol request, and send the front-end management command to the distributed proxy node.

[0030] Preferably, the front-end module comprises: a user interface unit, a protocol request unit, a decryption unit and a management command unit;

[0031] The user interface unit is used to authenticate the identity of the back-end module through cookies and encryption algorithms, display the decrypted device encryption data, and control the management command unit;

[0032] The protocol request unit is used to initiate an http protocol request to the backend, obtain device encrypted data, and send a management command to the backend module;

[0033] The decryption unit is used to decrypt device encrypted data;

[0034] The management command unit is used to generate a management command.

[0035] Preferably, the backend module comprises: a data transmission unit, an identity authentication unit and a response protocol request unit;

[0036] The data transmission unit is used to realize the communication between the central server and the distributed proxy nodes through the Netty framework;

[0037] The identity verification unit is used to verify identity;

[0038] The response protocol request unit is used to respond to the http protocol request of the front-end module, transmit the device encrypted data to the front end, and send the management command to the distributed proxy node.

[0039] A network device management method based on the SNMP protocol is implemented by the above-mentioned network device management system, comprising the following steps:

[0040] S1, distributed agent nodes collect network device information through data collection modules;

[0041] S2, the distributed proxy node processes the network device information through the data processing module and obtains the device encrypted data;

[0042] S3, the central server and the distributed proxy nodes communicate through the backend module and the network channel, and the distributed proxy nodes transmit the device encrypted data to the central server;

[0043] S4, the front-end module and the back-end module interact to complete identity authentication, the front-end module decrypts and displays the device encrypted data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node;

[0044] S5, the distributed agent node manages and configures the operating status of the network device according to the management command and the CMDB unit;

[0045] S6. Repeat steps S1 to S5 until the network device management system is closed.

[0046] Preferably, the S4, the front-end module and the back-end module interact to complete identity authentication, the front-end module decrypts and displays the encrypted device data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node, including the following steps:

[0047] S41, completing identity authentication through the user interface unit and the identity authentication unit;

[0048] S42, the front-end module generates a management command, and generates an http protocol request according to the management command;

[0049] S43, the front-end module sends the http protocol request to the back-end module;

[0050] S44, the back-end module responds to the http protocol request, sends the device encrypted data to the front-end module, and sends the management command in the http protocol to the distributed proxy node;

[0051] S45, the front-end module decrypts and displays the device encrypted data.

[0052] Preferably, the S5, distributed agent node managing and configuring the network device operation status according to the management command and CMDB unit includes the following steps:

[0053] S51, the CMDB unit generates an automatic command according to the network device information;

[0054] S52, the Docker container unit packages and generates a Docker minimum system image according to the automatic command and management command;

[0055] S53, the distributed proxy node sends the Docker minimum system image to the network device to complete the management and configuration of the network device operation status.

[0056] The beneficial effects of the present invention are:

[0057] 1. The present invention realizes cross-platform access and deployment, supports complete network management, and performs comprehensive management of all network devices in the system;

[0058] 2. The operation is simple through the user interface, which improves the work efficiency of network administrators, ensures work quality and saves management costs;

[0059] 3. The security and reliability of information between network devices are improved through the encryption algorithm unit. BRIEF DESCRIPTION OF THE DRAWINGS

[0060] Figure 1 It is a schematic diagram of the structure of a network device management system provided by an embodiment of the present invention;

[0061] Figure 2 It is a schematic diagram of the Hash function encryption principle provided by an embodiment of the present invention;

[0062] Figure 3 It is a schematic diagram of the SNMP protocol encryption principle provided by an embodiment of the present invention;

[0063] Figure 4 is a schematic diagram of the principle of an error handling unit provided by an embodiment of the present invention;

[0064] Figure 5 It is a flow chart of a network device management method provided by an embodiment of the present invention. DETAILED DESCRIPTION

[0065] The technical solution of the present invention is further described below, but the scope of protection claimed is not limited to the description.

[0066] like Figure 1 As shown, a network device management system based on SNMP protocol includes: a central server, a network channel, a plurality of distributed agent nodes and a plurality of network devices;

[0067] The central server includes: a front-end module and a back-end module;

[0068] In this embodiment, the central server runs the Java SpringBoot Web server.

[0069] The front-end module is used to provide a user interface, interact with the back-end module, initiate a protocol request to the back-end module, obtain device encrypted data, decrypt and display device encrypted data, and send management commands;

[0070] The front-end module includes: a user interface unit, a protocol request unit, a decryption unit and a management command unit;

[0071] The user interface unit is used to authenticate the identity of the back-end module through cookies and encryption algorithms, display the decrypted device encryption data, and control the management command unit;

[0072] Among them, the user interface includes a graphical interface and a command line interface, and users can choose according to their needs and habits.

[0073] The protocol request unit is used to initiate an http protocol request to the backend, obtain device encrypted data, and send a management command to the backend module;

[0074] Among them, http protocol requests include GET, POST, and PUT request commands.

[0075] The decryption unit is used to decrypt device encrypted data;

[0076] The management command unit is used to generate a management command.

[0077] The back-end module is used to communicate with the distributed proxy node through the network channel, receive the protocol request of the front-end module, send the device encrypted data to the front end according to the protocol request, and send the front-end management command to the distributed proxy node.

[0078] The back-end module includes: a data transmission unit, an identity authentication unit and a response protocol request unit;

[0079] The data transmission unit is used to realize the communication between the central server and the distributed proxy nodes through the Netty framework;

[0080] The identity verification unit is used to verify identity;

[0081] The response protocol request unit is used to respond to the http protocol request of the front-end module, transmit the device encrypted data to the front end, and send the management command to the distributed proxy node.

[0082] In this embodiment, the entire front-end design is based on the Vue framework ecosystem. The data chart display uses the Baidu open source Echarts framework, the data interaction with the back-end uses the vue-axios framework, the background page is quickly developed using the vue-element-admin framework, and the front-end code is packaged into a static page using webpack and deployed in the web server of the central server.

[0083] The central server is connected to a number of proxy nodes via a network channel;

[0084] One of the distributed proxy nodes is connected to a number of network devices;

[0085] The distributed agent node is connected to the network device via the SNMP protocol;

[0086] The central server is used to interact with the distributed proxy nodes, realize front-end and back-end interaction, perform identity authentication, decrypt device encrypted data, and display device encrypted data;

[0087] The network channel is used to connect the central server and the distributed agent nodes;

[0088] The distributed agent nodes are used for data collection, data processing and data storage.

[0089] The distributed proxy node includes: a data acquisition module, a data processing module and a data storage module;

[0090] The data acquisition module is used to collect and store network device information through the SNMP protocol;

[0091] The data acquisition module includes: an SNMP protocol unit and a MIB data structure unit;

[0092] The SNMP protocol unit is used to communicate with network devices, collect network device information, and send a Docker minimum system image;

[0093] The MIB data structure unit is used to store network device information.

[0094] The data processing module is used to process network device information, obtain device encryption data, and manage the operating status of network devices;

[0095] The data processing module includes an encryption algorithm unit, an authentication unit, an error handling unit, a CMDB unit and a Docker container unit;

[0096] The encryption algorithm unit is used to generate a hash value through a hash function and generate device encryption data according to network device information;

[0097] The encryption algorithm unit ensures the reliability and security of network device information, preventing it from being accidentally or intentionally deleted, modified, forged, disordered, replayed, inserted, etc. during the generation, storage or transmission process.

[0098] The authentication unit is used to determine the integrity of the message through the hash value of the message;

[0099] like Figure 2 , 3As shown, the hash value of the information is generated by the hash function, the hash value of the network device information is used to determine the integrity of the information, the hash value of the device encrypted data is used to generate a digital signature, and the hash value of the password is used to securely store the password; the password list in the authentication unit only stores the hash function value of the password to prevent the password from being stolen, and the hash function value of the input password is compared with it during authentication to ensure the integrity of the network device information.

[0100] The error handling unit manages the exceptions and error prompts of the network devices in a unified manner through exception mapping;

[0101] like Figure 4 As shown in the figure, the error handling unit uses exception mapping to uniformly manage the exceptions and error prompts of the project. For ordinary requests, the exception mapping mechanism will respond with an error page after capturing the exception thrown by the handler method. For the exception thrown by the handler method for processing ajax requests, a json is responded. SpringMVC provides an exception mapping mechanism based on XML and annotations, and through XML view controller <mvc:view-controller>The exceptions of the request mapping can only be obtained through the XML exception mapping mechanism, and through

[0102] The exceptions of request mapping performed by @requestMapping annotation can be obtained through both XML and annotation-based exception mapping mechanisms.

[0103] System crash or data loss is avoided through the error handling unit.

[0104] The CMDB unit is used to automatically manage and configure the operating status of network devices;

[0105] Among them, CMDB is the abbreviation of Configuration Management Database. Through CMDB, the operating status of network devices can be automatically managed and configured according to network device information.

[0106] The Docker container unit is used to package and generate a Docker minimum system image, and control the running status of the network device through the Docker minimum system image.

[0107] Relying on the Docker container unit, Java programs, MySql database engines, and SNMP protocol system dependencies are all packaged in Docker's minimum system image. When the network device needs to update the program or add additional environmental dependencies, directly modify the source system image and then distribute the image. Generally speaking, the system image is less than a hundred megabytes.

[0108] The data storage module is used to encrypt data through a MySQL database and a dynamically mounted storage device.

[0109] In the system, the data transmission process is specifically as follows: the distributed agent node collects data from network devices and obtains network device information; the network device information is processed through the data processing module to obtain device encrypted data; the central server sends a protocol request to the distributed agent node through the network channel, and the distributed agent node responds to the protocol request and sends the device encrypted data to the central server; the central server transmits the device encrypted data from the back end to the front end, decrypts and displays it; at this time, the user of the network device management system can generate management commands through the front end, send the management commands from the front end to the back end, and then send them to the distributed agent node; the distributed agent node packages and generates a Docker minimum system image according to the received management commands, and sends the Docker minimum system image to the network device to manage and configure the operating status of the network device.

[0110] A network device management method based on the SNMP protocol is implemented by the above-mentioned network device management system, comprising the following steps:

[0111] S1, distributed agent nodes collect network device information through data collection modules;

[0112] S2, the distributed proxy node processes the network device information through the data processing module and obtains the device encrypted data;

[0113] S3, the central server and the distributed proxy nodes communicate through the backend module and the network channel, and the distributed proxy nodes transmit the device encrypted data to the central server;

[0114] S4, the front-end module and the back-end module interact to complete identity authentication, the front-end module decrypts and displays the device encrypted data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node;

[0115] The S4, front-end module and back-end module interact to complete identity authentication, the front-end module decrypts and displays the encrypted device data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node, including the following steps:

[0116] S41, completing identity authentication through the user interface unit and the identity authentication unit;

[0117] S42, the front-end module generates a management command, and generates an http protocol request according to the management command;

[0118] S43, the front-end module sends the http protocol request to the back-end module;

[0119] S44, the back-end module responds to the http protocol request, sends the device encrypted data to the front-end module, and sends the management command in the http protocol to the distributed proxy node;

[0120] S45, the front-end module decrypts and displays the device encrypted data.

[0121] S5, the distributed agent node manages and configures the operating status of the network device according to the management command and the CMDB unit;

[0122] The S5, distributed agent node manages and configures the network device operation status according to the management command and the CMDB unit, including the following steps:

[0123] S51, the CMDB unit generates an automatic command according to the network device information;

[0124] S52, the Docker container unit packages and generates a Docker minimum system image according to the automatic command and management command;

[0125] S53, the distributed proxy node sends the Docker minimum system image to the network device to complete the management and configuration of the network device operation status.

[0126] S6. Repeat steps S1 to S5 until the network device management system is closed.

[0127] Until the network device management system is shut down, steps S1 to S5 need to be repeated continuously, so as to achieve real-time monitoring of network devices and continuously update network device information.

[0128] The present invention realizes cross-platform access and deployment, supports complete network management, and performs comprehensive management of all network devices in the system; it is operated through a user interface, the operation method is simple, the work efficiency of network administrators is improved, the work quality is guaranteed, and management costs are saved; the security and reliability of information between network devices are improved through an encryption algorithm unit.

Claims

1. A network device management system based on SNMP protocol, characterized in that: include: Central server, network channel, several distributed proxy nodes and several network devices; The central server is connected to a number of distributed proxy nodes via a network channel; One of the distributed proxy nodes is connected to a number of network devices; The distributed agent node is connected to the network device via the SNMP protocol; The central server is used to interact with the distributed proxy nodes, realize front-end and back-end interaction, perform identity authentication, decrypt device encrypted data, and display device encrypted data; The network channel is used to connect the central server and the distributed agent nodes; The distributed agent nodes are used for data collection, data processing and data storage.

2. The network device management system according to claim 1, characterized in that: The distributed proxy node includes: a data acquisition module, a data processing module and a data storage module; The data acquisition module is used to collect and store network device information through the SNMP protocol; The data processing module is used to process network device information, obtain device encryption data, and manage the operating status of network devices; The data storage module is used to encrypt data through a MySQL database and a dynamically mounted storage device.

3. The network device management system according to claim 2, characterized in that: The data acquisition module includes: an SNMP protocol unit and a MIB data structure unit; The SNMP protocol unit is used to communicate with network devices, collect network device information, and send a Docker minimum system image; The MIB data structure unit is used to store network device information.

4. The network device management system according to claim 2, characterized in that: The data processing module includes an encryption algorithm unit, an authentication unit, an error handling unit, a CMDB unit and a Docker container unit; The encryption algorithm unit is used to generate a hash value through a hash function and generate device encryption data according to network device information; The authentication unit is used to determine the integrity of the message through the hash value of the message; The error handling unit manages the exceptions and error prompts of the network devices in a unified manner through exception mapping; The CMDB unit is used to automatically manage and configure the operating status of network devices; The Docker container unit is used to package and generate a Docker minimum system image, and control the running status of the network device through the Docker minimum system image.

5. The network device management system according to claim 1, characterized in that: The central server includes: a front-end module and a back-end module; The front-end module is used to provide a user interface, interact with the back-end module, initiate a protocol request to the back-end module, obtain device encrypted data, decrypt and display device encrypted data, and send management commands; The back-end module is used to communicate with the distributed proxy node through the network channel, receive the protocol request of the front-end module, send the device encrypted data to the front end according to the protocol request, and send the front-end management command to the distributed proxy node.

6. The network device management system according to claim 5, characterized in that: The front-end module includes: a user interface unit, a protocol request unit, a decryption unit and a management command unit; The user interface unit is used to authenticate the identity of the back-end module through cookies and encryption algorithms, display the decrypted device encryption data, and control the management command unit; The protocol request unit is used to initiate an http protocol request to the backend, obtain device encrypted data, and send a management command to the backend module; The decryption unit is used to decrypt device encrypted data; The management command unit is used to generate a management command.

7. The network device management system according to claim 5, characterized in that: The back-end module includes: a data transmission unit, an identity authentication unit and a response protocol request unit; The data transmission unit is used to realize the communication between the central server and the distributed proxy nodes through the Netty framework; The identity verification unit is used to verify identity; The response protocol request unit is used to respond to the http protocol request of the front-end module, transmit the device encrypted data to the front end, and send the management command to the distributed proxy node.

8. A network device management method based on SNMP protocol, characterized in that: The method is implemented by the network device management system according to any one of claims 1 to 7, comprising the following steps: S1, distributed agent nodes collect network device information through data collection modules; S2, the distributed proxy node processes the network device information through the data processing module and obtains the device encrypted data; S3, the central server and the distributed proxy nodes communicate through the backend module and the network channel, and the distributed proxy nodes transmit the device encrypted data to the central server; S4, the front-end module and the back-end module interact to complete identity authentication, the front-end module decrypts and displays the device encrypted data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node; S5, the distributed agent node manages and configures the operating status of the network device according to the management command and the CMDB unit; S6. Repeat steps S1 to S5 until the network device management system is closed.

9. The network device management method according to claim 8, characterized in that: The S4, front-end module and back-end module interact to complete identity authentication, the front-end module decrypts and displays the encrypted device data, and the back-end module sends the management command generated by the front-end module to the distributed proxy node, including the following steps: S41, completing identity authentication through the user interface unit and the identity authentication unit; S42, the front-end module generates a management command, and generates an http protocol request according to the management command; S43, the front-end module sends the http protocol request to the back-end module; S44, the back-end module responds to the http protocol request, sends the device encrypted data to the front-end module, and sends the management command in the http protocol to the distributed proxy node; S45, the front-end module decrypts and displays the device encrypted data.

10. The network device management method according to claim 8, characterized in that: The S5, distributed agent node manages and configures the network device operation status according to the management command and the CMDB unit, including the following steps: S51, the CMDB unit generates an automatic command according to the network device information; S52, the Docker container unit packages and generates a Docker minimum system image according to the automatic command and management command; S53, the distributed proxy node sends the Docker minimum system image to the network device to complete the management and configuration of the network device operation status.

Images