Network device configuration method and apparatus, storage medium, program product

Abstract

The embodiment of the present disclosure discloses a network device configuration method, device, storage medium and program product. The method comprises the following steps: in response to an update request of a device adaptation template, selecting a to-be-synchronized template from a plurality of update versions; sending a registration request; receiving returned registration success information; when the version number of the to-be-synchronized template is not contained in the registration success information, performing synchronization processing on the to-be-synchronized template, realizing the update of a template set; receiving a parameter set and first device information sent by any network device; selecting a target template from a plurality of template sets based on the parameter set and the first device information; constructing a configuration command based on the target template and the parameter set; and sending the configuration command to the network device, realizing the configuration change of the network device. The method can effectively cope with the configuration management requirements of network devices with various types and inconsistent versions, and solve the problem that the synchronization device adaptation template must be upgraded first.

Description

TECHNICAL FIELD

[0001] The present disclosure relates to the technical field of network security management, and particularly relates to a network device configuration method and device, a storage medium and a program product. BACKGROUND

[0002] In a unified management system of SASE (Secure Access Service Edge) and SD-WAN (Software-Defined Wide Area Network), a plurality of types of network devices need to be centrally managed. These network devices not only have various types, but also the same type of devices can have inconsistent versions, which causes the unified management platform to face many difficulties in device adaptation. The adaptation work depends on the interface provided by the product and is subject to the risk of changing configuration command parameters at any time.

[0003] The traditional management method configures a template to be preset to the unified management platform, and the template is updated by releasing the unified management platform or through an upgrade package. This method has a wide range of influence and a complex update process, and it is difficult to cope with the rapidly changing network environment. Moreover, the adaptation of the unified management platform is affected by the matching version interface, and cannot be adapted in advance, which is relatively lagging behind the release of the device version. If the existing network is upgraded to a new device version, the unified management platform must be upgraded, which will affect the normal use of the existing network. Since the device interface and the configuration command parameter can be changed at any time, the traditional method is difficult to cope with these changes, resulting in complex and inefficient adaptation work. SUMMARY

[0004] Therefore, the embodiments of the present disclosure provide a network device configuration method, device, storage medium and program product, which can effectively cope with the configuration management requirements of network devices with various types and inconsistent versions, and solve the problem that the synchronization device adaptation template must be upgraded first.

[0005] In a first aspect, the embodiments of the present disclosure provide a network device configuration method, which adopts the following technical scheme:

[0006] In response to an update request for a device adaptation template, a to-be-synchronized template is selected from a plurality of update versions;

[0007] A registration request is sent;

[0008] Registration success information returned is received;

[0009] When the version number of the to-be-synchronized template is not included in the registration success information, the to-be-synchronized template is subjected to synchronization processing, and the update of the template set is realized;

[0010] The parameter set and the first device information sent by any network device are received.

[0011] selecting a target template from a plurality of template sets based on the parameter set and the first device information;

[0012] constructing a configuration command based on the target template and the parameter set;

[0013] sending the configuration command to the network device to implement configuration change of the network device.

[0014] Optionally, the selecting the to-be-synchronized template from the several update versions in response to the update request of the device adaptation template comprises:

[0015] judging whether there is a synchronization instruction when it is monitored that the current version of the device adaptation template is updated;

[0016] if there is, determining the latest version of the device adaptation template as the to-be-synchronized template;

[0017] if there is not, starting a timer to record a timing time;

[0018] judging whether the timing time is greater than a synchronization trigger time interval;

[0019] if yes, stopping the timing and determining the latest version of the device adaptation template as the to-be-synchronized template;

[0020] if no, judging whether the device adaptation template is updated again;

[0021] if yes, closing the timer and re-judging whether there is a synchronization instruction;

[0022] if no, closing the timer and determining the latest version of the device adaptation template as the to-be-synchronized template.

[0023] Optionally, the network device configuration method further comprises:

[0024] judging whether the device adaptation template is updated for the first time within a preset time range;

[0025] if yes, the synchronization trigger time interval is equal to a preset basic time interval;

[0026] if no, obtaining the synchronization trigger time interval based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, wherein a calculation formula of the synchronization trigger time interval is:

[0027]

[0028] wherein, T sync is the synchronization trigger time interval; T baseThe basic time interval; α Δt is the current adjustment factor; Δt is the average update time interval for the device adaptation template within a preset time range. β is the current weighting factor; i is the sequence number of the device adaptation template update within the preset time range, 1≤i≤I; I is the number of times the device adaptation template is updated within the preset time range; M i S represents the amount of modification made to the i-th update of the device adaptation template within a preset time range; i The tag value for the i-th update of the device adaptation template within a preset time range is given. If, after the i-th update, the updated device adaptation template is marked as pending synchronization, then S... i =1, if no synchronization mark is set, then S i =0.

[0029] Optionally, the formula for calculating the current adjustment factor is:

[0030]

[0031] Where n is the sequence number of the current adjustment operation on the factor within the preset time range; α n This is the adjustment factor after the nth adjustment. ; α n-1 This is the adjustment factor after the (n-1)th adjustment; gamma This is the preset first smoothing factor.

[0032] Optionally, the formula for calculating the current adjustment factor is:

[0033]

[0034] Where n is the sequence number of the current adjustment operation on the factor within the preset time range; α n This is the adjustment factor after the nth adjustment. ; α n-1 This is the adjustment factor after the (n-1)th adjustment; gamma This is the preset first smoothing factor.

[0035] Optionally, the synchronization process for the template to be synchronized includes:

[0036] Convert the template to be synchronized into UTF-8 encoding and UNIX format;

[0037] The converted template to be synchronized, the second device information of the sending end, and the specified service type are sent to the unified management platform.

[0038] screening an old template from a plurality of template sets in a unified management platform based on the second device information and the specified service type;

[0039] replacing the old template with the converted template to be synchronized and updating a template set index file, the template set index file being a file recording change history and storage path of all templates in each template set.

[0040] Optionally, the selecting a target template from a plurality of template sets based on the parameter set and first device information comprises:

[0041] screening a target template set from the plurality of template sets based on the first device information and the template set index file;

[0042] obtaining a target service type based on the parameter set;

[0043] screening the target template from the target template set based on the target service type and the template set index file.

[0044] In a second aspect, the embodiments of the present disclosure further provide a network device configuration system, which adopts the technical scheme as follows:

[0045] an update response module configured to select a template to be synchronized from a plurality of update versions in response to an update request for a device adaptation template;

[0046] a request sending module configured to send a registration request;

[0047] a first receiving module configured to receive returned registration success information;

[0048] a template synchronization module configured to perform synchronization processing on the template to be synchronized when the registration success information does not contain a version number of the template to be synchronized, so as to realize update of a template set;

[0049] a second receiving module configured to receive a parameter set and first device information sent by any network device;

[0050] a template selection module configured to select a target template from a plurality of template sets based on the parameter set and first device information;

[0051] a command construction module configured to construct a configuration command based on the target template and the parameter set;

[0052] a command sending module configured to send the configuration command to a network device, so as to realize configuration change of the network device.

[0053] In a third aspect, the embodiments of the present disclosure further provide a computer device, which adopts the technical scheme as follows:

[0054] The computer device comprises:

[0055] at least one processor; and

[0056] a memory connected in communication with the at least one processor; wherein

[0057] the memory stores instructions executable by the at least one processor, and the instructions are executed by the at least one processor to enable the at least one processor to perform the network device configuration method of any one of the above.

[0058] In a fourth aspect, the embodiments of the present disclosure further provide a computer readable storage medium storing computer instructions for causing a computer to perform the network device configuration method of any one of the above.

[0059] In a fifth aspect, the embodiments of the present disclosure further provide a computer program product comprising computer programs / instructions, which, when executed by a processor, implement the steps of the method of any one of the above.

[0060] The network device configuration method provided by the embodiments of the present disclosure allows selection of a template to be synchronized from a plurality of update versions, which provides great flexibility and customizability. Whether the final template is determined by one-time modification or by multiple modifications, the template to be synchronized is guaranteed to be the latest one to the greatest extent. By sending a registration request and receiving registration success information, a centralized management mode is realized, which helps to simplify the management process, improve the management efficiency, and ensure that all configuration changes of the network device are audited and controlled. When the registration success information does not contain the version number of the template to be synchronized, the template to be synchronized is automatically updated, ensuring the real-time and accuracy of the template set and preventing configuration errors caused by version mismatch. At the same time, when a configuration command is required for any network device, the most suitable target template can be intelligently selected from a plurality of template sets according to the parameter set and the first device information, and then the configuration command is constructed according to the template and the parameter set. This intelligent configuration method not only improves the configuration efficiency, but also reduces the possibility of human error, improves the convenience and efficiency of management. Compared with the traditional method, the method actively registers the template to be synchronized to the unified management platform by the managed device, automatically updates the template to be synchronized when the device is online, achieves the device adaptation effect without customer awareness, and decouples the device adaptation work from the version release of the unified management platform. The release of the unified management platform is no longer dependent on the progress of the new device adaptation work, that is, it is not constrained by the rhythm of the managed device release.

[0061] The above description is only a summary of the technical solutions of the present disclosure. In order to make the technical means of the present disclosure more clearly understood, the content of the specification can be implemented, and in order to make the above and other purposes, characteristics and advantages of the present disclosure more obvious and easy to understand, the following preferred embodiments are described in detail below, and the accompanying drawings are described as follows. BRIEF DESCRIPTION OF DRAWINGS

[0062] In order to more clearly illustrate the technical solutions of the embodiments of the present disclosure, the following will briefly introduce the drawings needed to be used in the embodiments. Obviously, the drawings in the following description are only some embodiments of the present disclosure, and other drawings can be obtained by those skilled in the art without creative labor on the basis of these drawings.

[0063] Figure 1 The flowchart of the network device configuration method provided by the embodiment of the present disclosure is shown in the figure.

[0064] Figure 2 The flowchart of the method for selecting a template to be synchronized provided by the embodiment of the present disclosure is shown in the figure.

[0065] Figure 3 The flowchart of the method for dynamically setting the synchronization trigger time interval provided by the embodiment of the present disclosure is shown in the figure.

[0066] Figure 4 The flowchart of the template set updating method provided by the embodiment of the present disclosure is shown in the figure.

[0067] Figure 5 The principle block diagram of the network device configuration method provided by the embodiment of the present disclosure is shown in the figure.

[0068] Figure 6 The principle block diagram of the network device configuration system provided by the embodiment of the present disclosure is shown in the figure.

[0069] Figure 7 The structural diagram of a computer device provided by the embodiment of the present disclosure is shown in the figure. DETAILED DESCRIPTION

[0070] The embodiments of the present disclosure will be described in detail below with reference to the drawings.

[0071] It should be apparent that the following describes embodiments of the present disclosure by way of specific examples, and that one of ordinary skill in the art will readily understand from the disclosure herein other advantages and benefits of the present disclosure. Obviously, the described embodiments are only a part of the embodiments of the present disclosure, and are not all the embodiments. The present disclosure can also be implemented or applied by other different specific embodiments, and the details in the specification can be modified or changed based on different views and applications without departing from the spirit of the present disclosure. It should be noted that the following embodiments and features in the embodiments can be combined with each other without conflict. Based on the embodiments in the present disclosure, all other embodiments obtained by one of ordinary skill in the art without creative labor are within the scope of protection of the present disclosure.

[0072] It should be noted that the following describes various aspects of embodiments within the scope of the appended claims. It should be apparent to those of ordinary skill in the art that the aspects described herein can be embodied in a wide variety of forms, and that any specific structure and / or function described herein is merely illustrative. Based on the disclosure herein, one skilled in the art should appreciate that an aspect described herein can be implemented independently of any other aspects, and that two or more of these aspects can be combined in various ways. For example, an apparatus can be implemented or a method can be practiced using any number of the aspects set forth herein. In addition, such an apparatus can be implemented or such a method can be practiced using other structure and / or functionality in addition to or other than one or more of the aspects set forth herein.

[0073] It should also be noted that the drawings provided in the following embodiments are only schematic and are merely intended to provide a basic understanding of the subject matter. In the drawings, only components pertinent to the subject matter are shown for the purpose of clarity and simplicity, and the number, shape and size of the components are not drawn to scale, and the actual shape, number and scale of the components can be arbitrarily changed, and the layout of the components can be more complex.

[0074] In addition, in the following description, specific details are provided to facilitate a thorough understanding of the examples. However, one skilled in the art will understand that the described aspects can be practiced without these specific details.

[0075] Referring to Figure 1 The present disclosure provides a network device configuration method, comprising the following steps:

[0076] S1: in response to an update request for a device adaptation template, selecting a template to be synchronized from a plurality of update versions;

[0077] S2: sending a registration request;

[0078] S3: receiving returned registration success information;

[0079] S4: synchronizing the template to be synchronized when the version number of the template to be synchronized is not contained in the registration success information, to realize the update of the template set;

[0080] S5: receiving the parameter set and the first device information sent by any network device;

[0081] S6: selecting a target template from the plurality of template sets based on the parameter set and the first device information;

[0082] S7: constructing a configuration command based on the target template and the parameter set;

[0083] S8: sending the configuration command to the network device to realize the configuration change of the network device.

[0084] The network device configuration method of the present disclosure allows the selection of the template to be synchronized from several updated versions, which provides great flexibility and customizability. Whether the final template is determined by one-time modification or by multiple modifications, the latest synchronized template can be maximally guaranteed. By sending a registration request and receiving registration success information, a centralized management method is realized, which helps to simplify the management process, improve management efficiency, and ensure that all configuration changes of the network device are audited and controlled. When the version number of the template to be synchronized is not contained in the registration success information, the template to be synchronized is automatically updated, ensuring the real-time and accuracy of the template set and preventing configuration errors caused by version mismatch. At the same time, when any network device needs a configuration command, the most suitable target template can be intelligently selected from the plurality of template sets based on the parameter set and the first device information, and then a configuration command is constructed according to the template and the parameter set. This intelligent configuration method not only improves the configuration efficiency, but also reduces the possibility of human error, improves the convenience and efficiency of management. Compared with the traditional method, the method actively registers the template to be synchronized to the unified management platform by the managed device, realizes the automatic update of the template to be synchronized when the device is online, achieves the device adaptation effect without customer awareness, and decouples the device adaptation work from the version release of the unified management platform. The release of the unified management platform is no longer dependent on the progress of the new device adaptation work, that is, it is not constrained by the rhythm of the managed device release.

[0085] In S1, when an operation and maintenance personnel manually updates a device adaptation template of a managed device, or a version of the managed device itself is upgraded, an update request for the device adaptation template is triggered. The device adaptation template of the managed device only retains the latest version, so it is only necessary to find the change list of the corresponding product adaptation file relative to the previous version in the configuration file save directory of the product to obtain the file list that needs to be synchronized, and the saved updated version of the device adaptation template can be queried from the file list. The managed device (identified by ID-Mgt) is any device in a plurality of network devices, used to carry services on a customer network, including network services or security services, etc., and the devices are configured, monitored and maintained by a unified management platform (identified by ID-Dev).

[0086] The operation and maintenance personnel can make multiple changes to the configuration standard of the managed device in a short period of time. During this period, the operation and maintenance personnel do not want to immediately synchronize each change to the unified management platform in subjective consciousness, but only test and verify the configuration standard locally on the device. However, such continuous multiple modifications can cause the device adaptation template of the managed device to be frequently updated in a short period of time, causing the synchronization of the device adaptation template between the managed device and the unified management platform to be too frequent. Not only is network bandwidth and other resources wasted, but the risk of errors also increases, which can cause configuration errors or data inconsistency problems.

[0087] To solve the problem of frequent synchronization of the device adaptation template in a short period of time, with reference to Figure 2 The flowchart of the method for selecting a template to be synchronized is shown. The network device configuration method of the present disclosure further includes the following steps:

[0088] S11: When the current version of the device adaptation template is monitored to be updated, it is determined whether there is a synchronization instruction; if yes, S12 is performed; if no, S13 is performed;

[0089] S12: The latest version of the device adaptation template is determined as a template to be synchronized;

[0090] S13: A timer is started to record the timing time;

[0091] S14: It is determined whether the timing time is greater than the synchronization trigger time interval; if yes, S12 is performed; if no, S15 is performed;

[0092] S15: It is determined whether the device adaptation template is updated again; if yes, S16 is performed; if no, S17 is performed;

[0093] S16: The timer is turned off, and S11 is returned to re-determine whether there is a synchronization instruction;

[0094] S17: The timer is turned off, and S12 is performed.

[0095] In S11, the synchronization instruction is a command manually triggered by a user, which can be triggered through a management interface or an API. The synchronization instruction detection process is automatically triggered whenever it is monitored that the current version of the device adaptation template is updated. When the synchronization instruction is detected, it indicates that the operation and maintenance personnel want to synchronize the updated device adaptation template to the unified management platform immediately. Therefore, in this case, the latest version of the device adaptation template is marked as a synchronization to-be-executed state, becoming a to-be-synchronized template, so as to perform subsequent synchronization operations.

[0096] In S12, since the managed device only stores the latest version of the device adaptation template, this not only simplifies the query process of the to-be-synchronized template and ensures that the to-be-synchronized template is always the latest version, but also helps to reduce the use of memory.

[0097] In S13-S17, when no synchronization instruction is detected, a preset timer is started and the timing time of the timer is recorded. The managed device compares the timing time with the set synchronization trigger time interval in real time. If the timing time exceeds the synchronization trigger time interval, it indicates that the operation and maintenance personnel do not update the device adaptation template again within the synchronization trigger time interval, and directly determines the latest version of the device adaptation template as the to-be-synchronized template. If the operation and maintenance personnel update the device adaptation template again within the synchronization trigger time interval, the synchronization instruction is detected again until the to-be-synchronized template is determined.

[0098] Further, the network device configuration method of the present disclosure further comprises dynamically adjusting the synchronization trigger time interval to optimize resource utilization and operation effect. Specifically, referring to Figure 3 The flowchart of the dynamic setting method of the synchronization trigger time interval is shown. Based on the update operation of the device adaptation template, the method for dynamically setting the synchronization trigger time interval comprises the following steps:

[0099] S141: determining whether the device adaptation template is updated for the first time within a preset time range; if yes, performing S142; if no, performing S143;

[0100] S142: the synchronization trigger time interval is equal to the preset basic time interval;

[0101] S143: based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, the synchronization trigger time interval is obtained.

[0102] According to the experimental results, the operation and maintenance personnel usually update the same device adaptation template twice or even more than twice within 15 minutes, and it takes about 1 hour to completely modify the device adaptation template version that can be synchronized. Therefore, the basic time interval is set to 15 minutes, and the preset time range is 1 hour.

[0103] When the device adaptation template is updated for the first time within the preset time range, it is determined that the synchronization trigger time interval is equal to the preset basic time interval, when the device adaptation template is updated for two or more times within the preset time range, the number of updates of the device adaptation template within the preset time range is obtained, and based on the number of updates and the basic time interval, the synchronization trigger time interval is obtained, wherein the calculation formula of the synchronization trigger time interval is as follows:

[0104]

[0105] Wherein, T sync is the synchronization trigger time interval; T base is the basic time interval; α is the current adjustment factor; Δt is the average update time interval of the device adaptation template within the preset time range; β is the current weight factor; i is an index, which is a positive integer, indicating the serial number of the update of the device adaptation template within the preset time range, 1≤i≤I; I is the number of updates of the device adaptation template within the preset time range; M i is the modification amount of the i-th update of the device adaptation template within the preset time range, which can be the number of modified characters or the number of attribute items, etc.; S i is the marking value of the i-th update of the device adaptation template within the preset time range, if the updated device adaptation template is marked for synchronization after the i-th update, S i =1, if no synchronization marking is performed, S i =0.

[0106] In the above formula, is used to reflect the frequency of the update of the device adaptation template, the higher the frequency, the longer the synchronization trigger time interval. is used to reflect the importance and marking of the update of the device adaptation template, if the update is marked as "to be synchronized", the synchronization trigger time interval will be shortened.

[0107] Wherein, the current adjustment factor is used to control the sensitivity of the synchronization trigger time interval, which is dynamically adjusted according to the importance of the template change and the historical change mode, specifically, the calculation formula of the current adjustment factor is as follows:

[0108]

[0109] In the formula, n is the serial number of the current adjustment operation of the factor within the preset time range; α n is the adjustment factor after the n-th adjustment, . α The initial value is 0.2, that is, when n is equal to 1, α= 0.2, and requires 0.1 α ≤ 0.5 to prevent the calculated synchronization trigger time interval from being outside a reasonable range. α n-1 is the adjustment factor after the n-1th adjustment; gamma is the preset first smoothing factor.

[0110] The current weight factor is used to balance the influence of frequent small amplitude modification and large range modification, and is dynamically adjusted according to the administrator behavior pattern and historical change data. Specifically, the calculation formula of the current weight factor is as follows:

[0111]

[0112] In the formula, β n is the weight factor after the nth adjustment, . β is initially 0.5, that is, when n is equal to 1, β = 0.5, and requires 0.3 β ≤ 0.7 to prevent the calculated synchronization trigger time interval from being outside a reasonable range. β n-1 is the weight factor after the n-1th adjustment; delta is the preset second smoothing factor.

[0113] Dynamic adjustment of the synchronization trigger time interval can flexibly adjust the synchronization time according to the current state and needs of the system, avoiding resource waste or delay that may be caused by a fixed time interval. Moreover, when the device adaptation template is updated frequently, dynamic adjustment can ensure timely synchronization of the latest state, avoiding delay caused by a fixed time interval. This method can adaptively adjust the synchronization frequency according to historical data and the current running state, ensuring that the synchronization operation is performed at the best time. Moreover, the formula provides flexibility in adjusting the synchronization frequency by introducing the current adjustment factor and the current weight factor, which can dynamically adjust the synchronization trigger time according to the actual situation. The current adjustment factor and the current weight factor can be adjusted according to the system state, so that the synchronization trigger time interval can be adapted to different running environments and workloads. The formula also considers the modification amount and the marker value, which can more accurately calculate the appropriate synchronization trigger time interval.

[0114] In S2-S4, the managed device deployed in the live network normally starts and completes initialization after power-on, and identifies the version number of the selected template to be synchronized locally after selecting the template to be synchronized, and constructs registration information containing its own basic information. Subsequently, based on the registration information, the managed device initiates a registration request to the unified management platform. After receiving the registration request, the unified management platform queries the corresponding template of the managed device in multiple template sets according to the provided basic information, and feeds back registration success information according to the version number of the template.

[0115] The managed device detects whether the version number carried in the returned registration success information is consistent with the version number of the local template to be synchronized. If the two version numbers are the same, it indicates that the template in the managed device and the unified management platform is synchronized, so there is no need to send the template to be synchronized to the unified management platform, and the synchronization to-be-executed state flag of the template is cancelled. If the two version numbers are inconsistent, it means that the template in the managed device and the unified management platform is not synchronized, at which time the managed device as the sending end sends the template to be synchronized to the unified management platform in order to update the corresponding template set.

[0116] The version number mentioned above is for the entire configuration file set. As long as one of the configuration files (referring to the template) is changed, for example, the number of files is increased or decreased, or the content of a certain file is changed, the file version number will be updated. It should be noted that this version number is not a file title, but indicates the overall change of a group of files, that is, the template. Its meaning is consistent with the definition of the version number of the managed data in the configuration management tool.

[0117] Further, in order to protect network security, the unified management platform verifies the legality of the managed device after receiving the registration request, including checking the national secret certificate or international certificate. Only after the verification is passed, the unified management platform sends the registration success message back to the managed device. If the verification fails, an alarm prompt is issued, and the operation and maintenance personnel modify the error according to the alarm prompt and then resend the registration request.

[0118] Referring to Figure 4 The flowchart of the template set updating method is shown. The method for synchronizing the template to be synchronized includes the following steps:

[0119] S41: converting the template to be synchronized into UTF-8 encoding and UNIX format;

[0120] S42: sending the converted template to be synchronized, the second device information of the sending end, and the specified business type to the unified management platform;

[0121] S43: filtering out the old template in the multiple template sets of the unified management platform based on the second device information and the specified business type;

[0122] S44: Replace the old template with the converted template to be synchronized, and update the corresponding template set index file, which is a file recording the change history and path of all templates in each template set.

[0123] In S41, in order to ensure the consistency of data files when synchronized between the managed device and the management platform, the template to be synchronized is converted into a text file in UTF-8 encoding and UNIX format. This step involves using appropriate encoding conversion tools or scripts to read the template to be synchronized and save it in UTF-8 encoding, while ensuring that the line break of the template to be synchronized conforms to the UNIX standard, i.e. only using LF (Line Feed) as the line terminator. This operation can effectively reduce the compatibility problems between the managed device and the unified management platform.

[0124] In S42, after the encoding and format conversion of the template to be synchronized is completed, the managed device (i.e. the sending end) sends the template file converted and the second device information (such as device model, device version, etc.) of the managed device and the business type specified by the operation and maintenance personnel to the unified management platform. This step is implemented through API call or specific data transmission protocol, ensuring that all necessary information can be correctly packaged and transmitted.

[0125] In S43, after receiving the template to be synchronized and the related device information, the unified management platform filters out the appropriate template set according to the second device information provided in the locally stored multiple template sets. Then, according to the specified business type, the old template corresponding to the determined template set is further filtered out. This filtering process can be achieved by consulting the preset template set index file, as the index file records the change history and storage path of all templates in each template set in detail. Therefore, by using the template set index file, the unified management platform can accurately locate and identify the specific old template file.

[0126] In S44, once the old template is successfully identified, the unified management platform will replace the old template with the converted template to be synchronized. After the replacement operation is completed, the unified management platform also needs to update the template set index file, which includes adding the storage path and version information of the new template, and marking the old template as replaced or deleted, to ensure that the template set index file can accurately reflect the current state of the template set. This step is crucial for maintaining version control and history tracking of the template set.

[0127] In S5, the unified management platform receives the parameter set and the first device information from any network device through its network interface, where the network interface is implemented by setting a listening port on the unified management platform, so that the network device can send relevant data through network protocols such as HTTP, HTTPS or TCP / IP.

[0128] In S6, the target template set is filtered out from the multiple template sets by using the first device information and the template set index file. The template set index file records detailed information of each template set, including the device types and versions they support, so the correct template set can be determined by matching the device information. Based on the parameter set, the target service type is obtained, which usually contains information about the nature of the request and the required operation, from which the service type can be extracted, and then the target template is filtered out from the target template set by using the target service type and the template set index file. The template set index file not only records the change history of the template set, but also records the templates corresponding to different service types, so specific templates can be further filtered out by the service type.

[0129] In S7, the unified management platform uses the target template and the parameter set to construct the configuration command. Specifically, the unified management platform parses the target template, replaces the variables in the parameter set with actual values, and generates a complete configuration command. This process can use a template engine or a script language to dynamically generate the configuration command.

[0130] In S8, the unified management platform sends the constructed configuration command back to the requesting network device, and the network device executes these commands to implement the configuration change. The unified management platform can also verify the execution result of the configuration command to ensure that the device configuration has been updated as expected.

[0131] Reference Figure 5 The principle block diagram of the network device configuration method is shown. After determining the template to be synchronized, the managed device obtains feedback information from the unified management platform through a registration process, i.e. registration success information, to learn the version number of the corresponding template stored in the unified management platform. The managed device compares this version number (referred to as V1) with the version number of the local template to be synchronized (referred to as V2) to verify whether the template to be synchronized has been synchronized with the unified management platform. If it is found that V1 and V2 are inconsistent, it means that the latest template to be synchronized is not yet included in the unified management platform, at which time the managed device encapsulates the template to be synchronized, the second device information and the specified service type into a synchronization message and sends it to the unified management platform to update the template. For any network device (including the managed device), they can request the unified management platform by actively sending the parameter set and the first device information, and the unified management platform constructs the configuration command accordingly to complete the configuration change of the network device.

[0132] In summary, the present disclosure provides a more flexible network device configuration method, which transfers the device adaptation work to personnel who better understand device services, and a unified management platform only provides a unified registration mechanism and a configuration template updating mechanism, thereby reducing the problem that the unified management platform must be upgraded due to device adaptation, changing the upgrade of the unified management platform into only updating the configuration template, which can be applied to SASE and SD-WAN controllers and their management systems, realizes unified management of different networking devices, achieves the purpose of rapid online of products and on-site solution of on-site problems, and reduces the work burden of developers and on-site maintenance personnel.

[0133] With reference to Figure 6 The present disclosure provides a network device configuration system, comprising:

[0134] The update response module 101 is configured to select a to-be-synchronized template from a plurality of update versions in response to an update request for the device adaptation template.

[0135] The request sending module 102 is configured to send a registration request.

[0136] The first receiving module 103 is configured to receive returned registration success information.

[0137] The template synchronization module 104 is configured to perform synchronization processing on the to-be-synchronized template when the registration success information does not contain a version number of the to-be-synchronized template, so as to realize updating of the template set.

[0138] The second receiving module 105 is configured to receive a parameter set and first device information sent by any network device.

[0139] The template selection module 106 is configured to select a target template from a plurality of template sets based on the parameter set and the first device information.

[0140] The command construction module 107 is configured to construct a configuration command based on the target template and the parameter set.

[0141] The command sending module 108 is configured to send the configuration command to the network device, so as to realize configuration change of the network device.

[0142] The various variations and specific examples of the network device configuration method provided above are also applicable to the network device configuration system provided by the present disclosure. Through the foregoing detailed description of the network device configuration method, those skilled in the art can clearly understand the implementation method of the network device configuration system. For the sake of brevity of the description, no longer detailed description is given here.

[0143] A computer device according to an embodiment of the present disclosure includes a memory and a processor. The memory is configured to store non-transitory computer readable instructions. Specifically, the memory can include one or more computer program products that can include various forms of computer readable storage media, such as volatile memory and / or non-volatile memory. The volatile memory, for example, can include random access memory (RAM) and / or cache memory, among others. The non-volatile memory, for example, can include read-only memory (ROM), hard disk, flash memory, among others.

[0144] The processor can be a central processing unit (CPU) or other form of processing unit that has data processing and / or instruction execution capabilities, and can control other components in the computer device to perform desired functions. In one embodiment of the present disclosure, the processor is configured to execute the computer readable instructions stored in the memory, so that the computer device performs all or part of the steps of the network device configuration method according to the embodiments of the present disclosure.

[0145] Those skilled in the art will understand that, in order to solve the technical problem of how to obtain a good user experience effect, the present embodiment can also include well-known structures such as a communication bus, an interface, etc., which should also be included in the protection scope of the present disclosure.

[0146] As shown in Figure 7 A structural schematic diagram of a computer device according to an embodiment of the present disclosure is shown. It shows a structural schematic diagram of a computer device suitable for use in implementing the computer device according to an embodiment of the present disclosure. Figure 7 The computer device shown is merely an example and should not impose any limitation on the functions and use range of the embodiments of the present disclosure.

[0147] As shown in Figure 7 As shown, the computer device can include a processor (such as a central processing unit, a graphics processing unit, etc.) that can perform various appropriate actions and processes according to programs stored in a read-only memory (ROM) or loaded from a storage device into a random access memory (RAM). In the RAM, various programs and data required for the operation of the computer device are also stored. The processor, the ROM, and the RAM are connected to each other through a bus. An input / output (I / O) interface is also connected to the bus.

[0148] Generally, the following devices can be connected to the I / O interface: input devices including, for example, sensors or visual information acquisition devices, etc.; output devices including, for example, display screens, etc.; storage devices including, for example, magnetic tapes, hard disks, etc.; and communication devices. The communication devices can allow the computer device to communicate with other devices (such as edge computing devices) wirelessly or by wire to exchange data. Although Figure 7The computer device is shown with various devices, but it is understood that not all of the shown devices are required to be implemented or present. More or fewer devices can alternatively be implemented or present.

[0149] In particular, according to embodiments of the present disclosure, the processes described above with reference to the flowcharts can be implemented as a computer software program. For example, embodiments of the present disclosure include a computer program product comprising a computer program carried on a non-transitory computer-readable medium, the computer program containing program code for performing the methods shown in the flowcharts. In such embodiments, the computer program can be downloaded and installed from a network through a communication device, or installed from a storage device, or installed from a ROM. When the computer program is executed by a processor, all or part of the steps of the network device configuration method of the embodiments of the present disclosure are performed.

[0150] Detailed descriptions of the embodiments can refer to the corresponding descriptions of the previous embodiments, which will not be repeated here.

[0151] The computer-readable storage medium according to the embodiments of the present disclosure has non-transitory computer-readable instructions stored thereon. When the non-transitory computer-readable instructions are run by a processor, all or part of the steps of the network device configuration method of the embodiments of the present disclosure described above are performed.

[0152] The computer-readable storage medium described above includes, but is not limited to, optical storage media (e.g., CD-ROM and DVD), magneto-optical storage media (e.g., MO), magnetic storage media (e.g., magnetic tape or mobile hard disk), media with built-in rewritable non-volatile memory (e.g., memory card), and media with built-in ROM (e.g., ROM cartridge).

[0153] Detailed descriptions of the embodiments can refer to the corresponding descriptions of the previous embodiments, which will not be repeated here.

[0154] The basic principles of the present disclosure are described above in conjunction with specific embodiments, but it should be noted that the advantages, advantages, effects, etc. mentioned in the present disclosure are only examples and are not limiting, and these advantages, advantages, effects, etc. cannot be considered as the must-have of each embodiment of the present disclosure. In addition, the above disclosure is only for the purpose of example and for the purpose of understanding, and is not limited to the above specific details, and the above details do not limit the present disclosure to the above specific details.

[0155] In this disclosure, relational terms such as first and second and the like can be used solely to distinguish one entity or action from another entity or action without necessarily requiring or implying any actual such relationship or order between such entities or actions. The block diagram of the devices, apparatus, equipment, systems referred to in this disclosure is merely illustrative and not intended to imply the necessity or arrangement of the connections, arrangement, configuration as shown in the block diagram. As will be appreciated by those skilled in the art, the devices, apparatus, equipment, systems can be connected, arranged, configured in any manner. The words comprising, including, having and the like are to be open ended. As used in this document, the conjunction "or" is to be interpreted in the inclusive sense, i.e. as meaning "and / or," and the like. As used in this document, the conjunction "and" is to be interpreted in the inclusive sense, i.e. as meaning "and / or," and the like, unless the context clearly indicates otherwise. As used in this document, the phrase "such as" is to be interpreted in the inclusive sense, i.e. as meaning "such as but not limited to," and the like.

[0156] Also, as used in this document, the word "or" in the cases used to introduce an enumeration of several items, for example, a list of items joined by "or", such as "at least one of A, B or C" is to be construed in the inclusive sense, i.e. as meaning A or B or C, or any combination thereof, i.e. A and B or A and C, or B and C, or A and B and C. In addition, the word "example" is used herein to mean "serving as an example, instance, or illustration," and not to imply or warrant that it is necessarily or exclusively related to a preferred or better example.

[0157] It is also important to note that the systems and methods of the present disclosure can be embodied in a variety of forms without departing from the teachings of the present disclosure. Such forms include being implemented as a software routine running on a computer system, for example, or being implemented as a hardware logic circuit, such as a dedicated logic circuit or a logic circuit used in a programmable logic array. In other words, the systems and methods of the present disclosure can be embodied as a combination of hardware and software. Also, the systems and methods of the present disclosure can be embodied as computer readable storage media storing computer executable instructions which, when loaded into a computer system, cause the computer system to perform the methods of the present disclosure. Therefore, the present disclosure includes a computer program product which can be a computer- readable storage medium having stored thereon the computer executable instructions which, when loaded into a computer system, cause the computer system to perform the methods of the present disclosure.

[0158] Various changes, modifications and alterations in the teachings and techniques described herein can be made without departing from the teachings of the present disclosure as defined in the appended claims. Furthermore, the scope of the claims of the present disclosure is not intended to be limited to the specific aspects described herein. The presently existing or later developed processes, machines, manufactures, compositions of matter, means, methods, or steps that perform substantially the same function or achieve substantially the same result as the corresponding aspects described herein are intended to be within the scope of the present disclosure. Accordingly, the appended claims include within their scope such processes, machines, manufactures, compositions of matter, means, methods, or steps.

[0159] The above description of the disclosed aspects is intended to be illustrative and not restrictive. Many modifications, changes and alterations to the described embodiments will become apparent to those skilled in the art, and it will be understood that the general principles of the disclosure can be applied to other aspects as well, all without departing from the scope of the present disclosure. The scope of the disclosure is indicated by the appended claims, and all changes that come within the meaning and range of equivalents are intended to be embraced therein. Accordingly, the disclosure is not intended to be limited to the aspects described herein, but is to be accorded the full scope consistent with the claims, wherein reference to an alternative set of one or more elements of a claim, for example, is a determination of a scope that is allowable under 35 U.S.C. 112(f) and 35 U.S.C. 121.

[0160] The foregoing description has been presented for the purposes of illustration and description. Furthermore, the description is not intended to limit the embodiments of the disclosure to the forms disclosed herein. Although the various example aspects and embodiments have been described herein with regard to particular aspects and embodiments, those skilled in the art will recognize that certain modifications, changes, substitutions, additions and sub-combinations can be made without departing from the spirit of the disclosure.

Claims

1. A network device configuration method, characterized by, The method comprises: The managed device selects a template to be synchronized from a plurality of updated versions in response to an update request for a device adaptation template; sending a registration request; receiving returned registration success information; when the version number of the template to be synchronized is not contained in the registration success information, performing synchronization processing on the template to be synchronized to realize update of a template set; wherein the synchronization processing on the template to be synchronized comprises: converting the template to be synchronized into UTF-8 encoding and UNIX format; sending the converted template to be synchronized, second device information of a sending end and a specified service type to a unified management platform; filtering out an old template from a plurality of template sets in the unified management platform based on the second device information and the specified service type; replacing the old template with the converted template to be synchronized and updating a corresponding template set index file, the template set index file being a file recording change history and storage path of all templates in each template set; the unified management platform receives a parameter set and first device information sent by an arbitrary network device; selecting a target template from a plurality of template sets based on the parameter set and the first device information; constructing a configuration command based on the target template and the parameter set; sending the configuration command to the network device to realize configuration change of the network device.

2. The network device configuration method of claim 1, wherein, The method further comprises: judging whether the device adaptation template is updated for the first time within a preset time range; if yes, the synchronization trigger time interval is equal to a preset basic time interval; if no, the synchronization trigger time interval is obtained based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, wherein the calculation formula of the synchronization trigger time interval is: The calculation formula of the current adjustment factor is: The calculation formula of the current weight factor is: The method further comprises: judging whether the device adaptation template is updated for the first time within a preset time range; if yes, the synchronization trigger time interval is equal to a preset basic time interval; 3. The network device configuration method of claim 2, wherein, if no, the synchronization trigger time interval is obtained based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, wherein the calculation formula of the synchronization trigger time interval is: The calculation formula of the current adjustment factor is: The calculation formula of the current weight factor is: The method further comprises: wherein T sync is the synchronization trigger time interval; T base is the base time interval; α is the current adjustment factor; Δt is the average update time interval of the device adaptation template within a preset time range; β is the current weight factor; i is the serial number of the update of the device adaptation template within the preset time range, 1≤i≤I; I is the number of updates of the device adaptation template within the preset time range; M i is the modification amount of the i-th update of the device adaptation template within the preset time range; S i is the flag value of the i-th update of the device adaptation template within the preset time range, if the updated device adaptation template is marked for synchronization after the i-th update, then S i =1, and if no synchronization marking is performed, then S i =0.

4. The network device configuration method of claim 3, wherein, judging whether the device adaptation template is updated for the first time within a preset time range; Wherein, n is the order number of the current adjustment operation of the factor within the preset time range; α n is the adjustment factor after the nth adjustment, ; α n-1 is the adjustment factor after the n-1th adjustment; if yes, the synchronization trigger time interval is equal to a preset basic time interval; is the preset first smoothing factor.

5. The network device configuration method of claim 3, wherein, if no, the synchronization trigger time interval is obtained based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, wherein the calculation formula of the synchronization trigger time interval is: wherein n is the order number of the current adjustment operation on the factor within a preset time range; β n is the weight factor after the n th adjustment, ; β n-1 is the weight factor after the n-1 th adjustment; The calculation formula of the current adjustment factor is: is a preset second smoothing factor.

6. The network device configuration method of claim 1, wherein, The calculation formula of the current weight factor is: The method further comprises: judging whether the device adaptation template is updated for the first time within a preset time range; if yes, the synchronization trigger time interval is equal to a preset basic time interval; 7. A computer apparatus, comprising: if no, the synchronization trigger time interval is obtained based on the number of times of updating the device adaptation template within the preset time range and the basic time interval, wherein the calculation formula of the synchronization trigger time interval is: The calculation formula of the current adjustment factor is: The calculation formula of the current weight factor is: The computer device comprises: at least one processor; and a memory connected in communication with the at least one processor; wherein The memory stores instructions executable by the at least one processor, the instructions being executed by the at least one processor to enable the at least one processor to perform the network device configuration method of any one of claims 1-6.

8. A computer-readable storage medium, characterized in that, The computer readable storage medium stores computer instructions for causing a computer to perform the network device configuration method of any one of claims 1-6.

9. A computer program product comprising computer instructions, characterized in that, The computer instructions, when executed by a processor, implement the steps of the method of any one of claims 1-6.

Images