Reinsurance service configuration protection method and device and readable storage medium

Abstract

The invention provides a reinsurance service configuration protection method and device and a readable storage medium, and the method comprises the steps: checking the actual configuration information of a reinsurance service through a service ledger before reinsurance, and determining that the reinsurance service can be reserved if the actual configuration information of the reinsurance service is consistent; during the reinsurance period, if the newly-added service configuration needs to be issued to the equipment with the reinsurance service, judging whether the newly-added service configuration conflicts with the actual configuration information of the reinsurance service; and if the newly-added service configuration conflicts with the actual configuration information of the reinsurance service, prohibiting issuing the newly-added service configuration. According to the reinsurance service configuration protection method provided by the invention, service configuration pre-auditing monitoring is carried out, the configuration change of the network equipment is audited in advance, and once the protected configuration change or abnormal behavior is detected, the alarm is immediately triggered and the issuing is forbidden, so that the reinsurance service can be effectively ensured.

Claims

1. A method for protecting the configuration of a heavy-duty service, characterized in that: The method comprises: S1. Before re-insurance, the actual configuration information of the re-insurance business is checked through the business ledger. If the information is consistent, the re-insurance business can be scheduled; S2. During the re-security period, if it is necessary to issue a new service configuration to the device with the re-security service, determine whether the new service configuration conflicts with the actual configuration information of the re-security service; S3. If there is a conflict between the newly added service configuration and the actual configuration information of the re-secured service, it is prohibited to issue the newly added service configuration.

2. The protection method for re-protecting service configuration according to claim 1, characterized in that: In S1, the actual configuration information of the re-secured service includes at least one of the access device, access port, access virtual local area network VLAN, user Internet Protocol IP address, and circuit number of the service.

3. The protection method for re-protecting service configuration according to claim 1, characterized in that: In S1, the actual configuration information of the important security business is checked through the business ledger, including: Log in to the device corresponding to the critical security service to obtain the actual configuration information of the critical security service; If the actual configuration information of the re-security service can be queried in the business ledger based on the key attributes, and the circuit number consistent with the re-security service can be found in the queried port description, it is confirmed that the business ledger is consistent with the actual configuration information of the re-security service.

4. The protection method for re-protecting service configuration according to claim 1, characterized in that: The reservation content of the re-insurance service includes key attributes of the service configuration.

5. The protection method for re-protecting service configuration according to claim 4, characterized in that: If the important service is a government and enterprise dedicated line service, the key attributes of the service configuration include the access port, access VLAN, user IP address and circuit number associated with the two gateway devices that are active and standby for each other; If the re-secured service is a public dial-up service, the key attributes of the service configuration include the access port and access VLAN associated with the access switch, and the VLAN attributes corresponding to the port of the access switch associated with the bras device connected to the access switch; If the important service is an Internet data center IDC service, the key attributes of the service configuration include the access port and access VLAN associated with the access switch, the VLAN attributes of the access switch port associated with the core router, the user IP address, and the virtual interface.

6. The protection method for re-protecting service configuration according to claim 1, characterized in that: In S2, determining whether the newly added service configuration conflicts with actual configuration information of the re-protected service includes: The configuration of the newly added service and the actual configuration information of the re-secured service are checked and filtered by using a configuration script generated according to a template or a configuration script manually formulated, and whether there is a conflict is determined.

7. The protection method for re-protecting service configuration according to any one of claims 1 to 6, characterized in that: Also includes: After re-securing, the re-securing resources are released.

8. A protection device for re-protecting service configuration, characterized in that: The device comprises: The configuration verification module is set to verify the actual configuration information of the reinsurance business through the business ledger before reinsurance. If the verification is consistent, it is determined that the reinsurance business can be scheduled; A conflict judgment module is configured to judge whether the new service configuration conflicts with the actual configuration information of the re-protected service if it is necessary to issue a new service configuration to the device with the re-protected service during the re-protected period; The processing module is configured to prohibit the issuance of the new service configuration if there is a conflict between the new service configuration and the actual configuration information of the re-secured service.

9. A protection device for re-protecting service configuration, characterized in that: The method comprises a memory and a processor, wherein the memory stores a computer program, and the processor is configured to run the computer program to implement the re-protection service configuration protection method according to any one of claims 1 to 7.

10. A computer-readable storage medium, characterized in that: The computer-readable storage medium stores a computer program, and when the computer program is executed by a processor, the re-protection service configuration protection method according to any one of claims 1 to 7 is implemented.

Images