Network configuration verification device and method

Abstract

To easily verify a maintenance period of a connection device connected to an IP network even in a large-scale network.SOLUTION: In a network configuration verification device 10, a control circuit 15 acquires actual configuration information 14B obtained by actually identifying network configuration of a target IP network NW from a network configuration identification device 20, and verifies the arrival of the maintenance timing of the device connected to the IP network NW by acquiring the maintenance timing of the connection device included in device information 14A stored in advance in a storage circuit 14 for each connection device included in the actual configuration information 14B.SELECTED DRAWING: Figure 1

Description

[Technical field]

[0001] The present invention relates to a network configuration verification technique for verifying the connection topology of various connection devices, such as communication control devices and terminal devices, connected to an IP network. [Background technology]

[0002] Conventionally, as a technology for visualizing a network configuration, Patent Document 1 proposes a technology for acquiring MAC address table information from a network device having a MAC address table, such as an L2 switch, using, for example, ARP (Address Resolution Protocol), and identifying the physical connection form of each connected device, i.e., the network configuration, from the acquired MAC address table information. This makes it possible to identify the network configuration remotely from any information processing terminal connected to an IP network, and makes it easy to identify the network configuration even for a large-scale network built in a large building such as a commercial building, office building, hospital, school, or factory. [Prior art documents] [Patent documents]

[0003] [Patent Document 1] JP 2016-032226 A Summary of the Invention [Problem to be solved by the invention]

[0004] Such network configuration identification technology may be used for the maintenance management of connection devices connected to an IP network. Generally, a maintenance period is set for each connection device in order to maintain normal operation. In this case, to identify the connection devices of the IP network, it is sufficient to identify a new network configuration.

[0005] However, to determine which connected devices are out of maintenance period, it is necessary to visually and manually compare the newly identified actual configuration information showing the actual network configuration with the drawings and documents showing the designed network configuration. Therefore, in a large-scale network consisting of many connected devices, there is a problem that an extremely large workload and work costs are incurred.

[0006] The present invention has been made to solve these problems, and aims to provide a network configuration verification technology that can easily verify the maintenance periods of connection devices connected to an IP network, even in a large-scale network. [Means for solving the problem]

[0007] In order to achieve this objective, the network configuration verification device of the present invention comprises a memory circuit that stores device information indicating connected devices connected to a target IP network, and a control circuit that verifies the maintenance time for the connected devices connected to the IP network, and the control circuit is configured to obtain actual configuration information obtained by actually identifying the network configuration of the IP network, and for each connected device included in the actual configuration information, obtain the maintenance time for that connected device from the device information, and verify the arrival of the maintenance time.

[0008] In addition, one configuration example of the network configuration verification device according to the present invention is configured so that the control circuit obtains, for each connected device included in the actual configuration information, from the device information, the maintenance timing of the connected device that matches identification information for identifying the connected device.

[0009] In addition, one configuration example of the network configuration verification device according to the present invention is configured to use a MAC address of the connected device as the identification information.

[0010] In addition, one configuration example of the network configuration verification device according to the present invention is configured so that the control circuit outputs an alert indicating that the maintenance due date for any connected device among the connected devices has passed since the time of verification.

[0011] In addition, one configuration example of the network configuration verification device according to the present invention is configured so that the control circuit displays on a screen an alert urging the performance of maintenance work on any of the connected devices whose maintenance due date falls within a preset reminder period from the time of verification.

[0012] In addition, one configuration example of the network configuration verification device according to the present invention is configured so that the control circuit displays on a screen an alert for any connected device that is not registered in the device information, urging the user to register the connected device in the device information when it is time for maintenance.

[0013] In addition, one configuration example of the network configuration verification device according to the present invention is configured such that, for any of the connected devices that is not registered in the device information, the control circuit registers the maintenance timing of the connected device in the device information.

[0014] In addition, the network configuration verification method of the present invention is a network configuration verification method used in a network configuration verification device that has a memory circuit that stores device information indicating legitimate connected devices connected to a target IP network, and a control circuit that verifies unauthorized devices connected to the IP network, and includes a first step in which the control circuit acquires actual configuration information obtained by actually identifying the network configuration of the IP network, and a second step in which the control circuit acquires, for each connected device included in the actual configuration information, the maintenance date for that connected device from the device information and verifies the arrival of the maintenance date.

[0015] In addition, in one configuration example of the above-mentioned network configuration verification method according to the present invention, the second step includes a third step in which the control circuit obtains, for each connected device included in the actual configuration information, a maintenance timing of the connected device that matches identification information for identifying the connected device from the device information. Effect of the Invention

[0016] According to the present invention, even in a large-scale network made up of a large number of connected devices, the maintenance periods of the connected devices connected to an IP network can be easily verified. [Brief description of the drawings]

[0017] [Figure 1] FIG. 1 is a block diagram showing the configuration of a network configuration verification device. [Diagram 2] FIG. 2 is an explanatory diagram showing device information. [Diagram 3] FIG. 3 is an explanatory diagram showing an example of a network configuration corresponding to the device information of FIG. [Figure 4] FIG. 4 is an explanatory diagram showing actual configuration information. [Diagram 5] FIG. 5 is an explanatory diagram showing an example of a maintenance timing verification result screen (overdue maintenance timing). [Figure 6] FIG. 6 is an explanatory diagram showing an example of a maintenance timing verification result screen (maintenance timing approaching). [Figure 7] FIG. 7 is an explanatory diagram showing an example of a maintenance timing verification result screen (update of maintenance timing). DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] Next, an embodiment of the present invention will be described with reference to the drawings. [Network configuration verification device] First, a network configuration verification device 10 according to the present embodiment will be described with reference to Fig. 1. Fig. 1 is a block diagram showing the configuration of the network configuration verification device. This network configuration verification device 10 is composed of information processing devices such as a PC or a server device as a whole, and is configured to compare connected devices included in the network configuration of an IP network NW such as a LAN identified by the network configuration identification device 20 with device information indicating predetermined legitimate connected devices.

[0019] [Network configuration identification device] The network configuration identification device 20 is generally composed of information processing devices such as a PC or a server device, and is connected to an IP network NW such as a LAN to be identified. The network configuration identification device 20 is configured to identify and visualize a network configuration indicating the connection form related to connected devices such as network devices and terminal devices connected to the IP network NW, based on a publicly known network configuration identification technology such as Patent Document 1, by performing data communication with these connected devices.

[0020] In the following, an example will be described in which the network configuration identifying device 20 is configured as a device separate from the network configuration verification device 10, but the network configuration identifying device 20 may also be implemented as a part of the configuration of the network configuration verification device 10.

[0021] In this embodiment, devices that control packet forwarding, such as L2 (Layer 2) switches, L3 (Layer 3) switches, hubs, routers, and gateways, are called network devices (communication control devices). Among the network devices, devices that have their own IP addresses and can externally obtain MAC address table information used for packet forwarding control, such as L2 (Layer 2) switches and L3 (Layer 3) switches, are called switches SW. Devices that do not have their own IP addresses and cannot externally obtain MAC address table information used for packet forwarding control are called hubs HUB.

[0022] In addition to information processing terminals such as PCs, various devices used in the Internet of Things (IoT), such as sensors, field devices, and controllers, are also referred to as terminal devices.

[0023] [Configuration of network configuration verification device] Next, with reference to FIG. 1, a configuration of the network configuration verification device 10 according to the present embodiment will be described in detail. As shown in FIG. 1, the network configuration verification device 10 includes a communication I / F 11, an operation input circuit 12, a display circuit 13, a memory circuit 14, and a control circuit 15 as main circuit sections.

[0024] [Communication I / F] The communication I / F 11 is connected to the network configuration identification device 20 via a communication line L, and is configured to acquire network configuration information obtained by identifying the network configuration of the IP network NW to be verified by performing data communication with the network configuration identification device 20.

[0025] [Operation input circuit] The operation input circuit 12 is made up of operation input devices such as a keyboard, a mouse, and a touch panel, and is configured to detect an operator's operation and output it to the control circuit 15.

[0026] [Display circuit] The display circuit 13 is made up of a screen display device such as an LCD, and is configured to display various types of screen information output from the control circuit 15, such as a menu screen, a setting screen, and a network configuration verification result screen.

[0027] [Memory circuit] The memory circuit 14 is made up of a storage device such as a hard disk or a semiconductor memory, and is configured to store various processing data and programs 14P used in the network configuration verification process in the control circuit 15.

[0028] [program] The program 14P is a program for implementing various processing units used for the network configuration verification process in the control circuit 15 by cooperating with the CPU of the control circuit 15. This program 14P is stored in advance in the storage circuit 14 from an external device or a recording medium (neither of which is shown) connected to the network configuration verification device 10 via the communication line L.

[0029] The main processing data stored in the memory circuit 14 include device information 14A and actual configuration information 14B. [Device information] The device information 14A is data showing each connected device connected to the target IP network NW. Fig. 2 is an explanatory diagram showing the device information. Fig. 3 is an explanatory diagram showing an example of a network configuration corresponding to the device information in Fig. 2.

[0030] The IP address, MAC address, and maintenance time of the connected device are registered as a set in the device information 14A in Fig. 2. The device information 14A may be generated in advance using a PC or the like from design data of the IP network NW managed by drawings and documents, and may be stored in an external device (not shown) connected via a communication line L, for example.

[0031] In the configuration example in Figure 3, the IP network NW includes two switches, SW#0 (IP address "192.168.1.100", MAC address "XX:XX:XX:XX:XX:0A", maintenance period "2021 / 04 / 01") and SW#1 (IP address "192.168.1.101", MAC address "XX:XX:XX:XX:XX:0B", maintenance period "2020 / 04 / 01"), one hub, HUB#X (address information unknown), and PC#1 (IP address "192.168.1.1", MAC address "XX:XX:XX:XX:XX: Four terminal devices are connected: PC#2 (IP address "192.168.1.01", maintenance period "2025 / 04 / 01"), PC#2 (IP address "192.168.1.2", MAC address "XX:XX:XX:XX:XX:02", maintenance period "2025 / 04 / 01"), PC#3 (IP address "192.168.1.3", MAC address "XX:XX:XX:XX:XX:03", maintenance period "2025 / 04 / 01"), and PC#4 (IP address "192.168.1.4", MAC address "XX:XX:XX:XX:XX:04", maintenance period "2025 / 04 / 01").

[0032] [Actual composition information] The actual configuration information 14B is data indicating the actual contents related to the network configuration of the target IP network NW identified by the network configuration identifying device 20. Fig. 4 is an explanatory diagram showing the actual configuration information.

[0033] As shown in FIG. 4, in the actual configuration information 14B, for each port of a network device, the IP address and the MAC address of a connected device connected to the port are registered.

[0034] [Control circuit] The control circuit 15 has a CPU and its peripheral circuits, and is configured to implement a processing section for executing a network configuration verification process by reading out the program 14P from the storage circuit 14 and cooperating with the CPU.

[0035] The main processing units realized by the control circuit 15 include a data acquisition unit 15A, a verification unit 15B, and a verification result generation unit 15C.

[0036] [Data Acquisition Section] The data acquisition unit 15A is configured to acquire device information 14A indicating the network configuration of the IP network NW from an external device (not shown) via the communication I / F 11 and the communication line L, and store the information in the memory circuit 14.

[0037] Moreover, the data acquiring unit 15A is configured to acquire actual configuration information 14B indicating the network configuration of the IP network NW from the network configuration identifying device 20 via the communication I / F 11 and the communication line L, and store the information in the memory circuit 14. Regarding the actual configuration information 14B, a configuration information acquisition request may be notified from the data acquiring unit 15A, so that the network configuration identifying device 20 acquires the latest actual configuration information 14B.

[0038] [Verification Department] The verification unit 15B is configured to verify the arrival of the maintenance time by obtaining the maintenance time of each actual connected device included in the actual configuration information 14B acquired by the data acquisition unit 15A from the device information 14A and comparing it with the date and time at which the verification was performed.

[0039] Furthermore, the verification unit 15B is configured to acquire, for each actual connected device included in the actual configuration information 14B, the maintenance timing of the connected device that matches the identification information for identifying the connected device from the device information 14A.

[0040] In the following, we will use an example where the MAC address of a connected device is used as the identification information for the connected device, but this is not limited to this, and any information that can identify each connected device may be used as the identification information.

[0041] In addition, the verification unit 15B may execute verification of the arrival of the maintenance time in response to an operator operation indicating the start of verification output from the operation input circuit 12, or may automatically execute verification of the arrival of the maintenance time at a preset interval.

[0042] [Verification result generation part] The verification result generating unit 15C is configured to output a verification result regarding the arrival of the maintenance time based on a comparison result, obtained by the verifying unit 15B, between the maintenance time of the connected device and the date and time of the verification execution time.

[0043] Specifically, when a connected device whose maintenance period has expired is found, the verification result generating unit 15C is configured to display on the display circuit 13 an alert indicating that the maintenance period for the connected device has expired, and further indicating that the device should be replaced or stopped using.

[0044] At this time, for any connected device whose maintenance period falls within a preset reminder period from the time of verification, an alert may be displayed on the screen to remind the user to carry out maintenance work on that connected device.

[0045] If there is no connected device with a matching MAC address in the device information 14A, it may be determined that the connected device has been changed, and an alert may be displayed on the screen to prompt the user to check the connected device. In this case, if the connected device is unauthorized, an alert may be displayed on the screen to prompt the user to perform maintenance work such as disconnecting the device from the IP network NW. For connected devices that have been properly maintained, an input screen may be displayed on the screen to prompt the user to register the date of maintenance.

[0046] [Operation of this embodiment] Next, the operation of the network configuration verification method of the network configuration verification device 10 according to the present embodiment will be described.

[0047] The control circuit 15 starts verifying unauthorized devices included in the target IP network NW in response to the arrival of the verification start timing. At this time, it is assumed that the device information 14A and the actual configuration information 14B are stored in the memory circuit 14 in advance by the data acquisition unit 15A prior to the start of the verification.

[0048] First, the verification unit 15B reads out the device information 14A and the actual configuration information 14B from the memory circuit 14 (first step), and by referring to the actual configuration information 14B, extracts connected device information including the MAC address as identification information for identifying each connected device, obtains the maintenance period of the connected devices that matches the MAC addresses of these connected devices from the device information 14A, and compares it with the date and time when the verification was performed (second and third steps).

[0049] Next, the verification result generation unit 15C generates a maintenance timing verification result (alert) from the comparison result obtained by the verification unit 15B, and displays it on the display circuit 13 or outputs it to an external device (not shown) via the communication I / F 11 and the communication line L.

[0050] At this time, if a connected device whose maintenance period has expired is found, the verification result generating unit 15C generates an alert indicating that the maintenance period has expired for the connected device, and further indicating that the device should be replaced or stopped using.

[0051] Fig. 5 is an explanatory diagram showing an example of a maintenance timing verification result screen (overdue maintenance). Fig. 5 shows the IP address, MAC address, and maintenance timing (length of time since the overdue maintenance) of the equipment whose maintenance timing has passed, and the IP address, MAC address, and port number as connection destination information of the connection terminal.

[0052] At this time, for any connected device whose maintenance due date falls within a preset reminder period from the time of verification, an alert is generated to remind the user to carry out maintenance work on that connected device.

[0053] Fig. 6 is an explanatory diagram showing an example of a maintenance timing verification result screen (maintenance timing approaching). Fig. 6 shows the IP address, MAC address, and maintenance timing (grace period length until the maintenance timing) of the maintenance timing approaching device, and the IP address, MAC address, and port number as the connection destination information of the connection terminal.

[0054] If a connected device with a matching MAC address does not exist in the device information 14A, it may be determined that the connected device has been changed, and an alert may be generated to prompt confirmation of the connected device. In this case, if the connected device is unauthorized, an alert may be displayed on a screen to prompt maintenance work such as disconnection from the IP network NW. Also, as shown in Fig. 7, the identification information of a newly discovered connected device may be confirmed, the device information 14A may be updated, and a screen may be displayed to prompt registration of the maintenance time of the new connected device. Alternatively, on the assumption that maintenance has been performed appropriately, the maintenance time of the new connected device may be automatically registered, and the device information 14A may be automatically updated, and the update result may be displayed on a screen.

[0055] [Advantages of this embodiment] In this manner, in the network configuration verification device 10 of the present embodiment, the control circuit 15 acquires from the network configuration identification device 20 actual configuration information 14B obtained by actually identifying the network configuration of the target IP network NW, and for each connected device included in the actual configuration information 14B, acquires the maintenance timing of the connected device from the device information 14A, and verifies the arrival of the maintenance timing.

[0056] More specifically, for each connected device included in actual configuration information 14B, the MAC address, which is identification information for identifying the connected device, and the maintenance period of the matching connected device are obtained from the device information.

[0057] This makes it possible to automatically check which connected devices in the IP network NW are due for maintenance or will soon be due for maintenance, making it easy to check the maintenance schedules of connected devices connected to the IP network NW, even in a large-scale network consisting of many connected devices.

[0058] In addition, by automatically determining whether a connected device has been replaced for maintenance based on a MAC address and automatically registering the new connected device and its maintenance time in device information 14A, maintenance personnel are not required to manually update device information 14A when managing maintenance replacement. By automatically registering the maintenance time of a new connected device, the burden of updating and managing the maintenance times of connected devices is reduced, and information about maintenance times can be updated accurately and reliably.

[0059] [Extended embodiment] Although the present invention has been described above with reference to the embodiment, the present invention is not limited to the above embodiment. Various modifications that can be understood by those skilled in the art can be made to the configuration and details of the present invention within the scope of the present invention. [Explanation of symbols]

[0060] 10...network configuration verification device, 11...communication I / F, 12...operation input circuit, 13...display circuit, 14...memory circuit, 14A...equipment information, 14B...actual configuration information, 14P...program, 15...control circuit, 15A...data acquisition unit, 15B...verification unit, 15C...verification result generation unit, 20...network configuration identification device, NW...IP network, L...communication line.

Claims

1. A storage circuit for storing device information indicating a connected device connected to a target IP network; a control circuit for verifying a time for maintenance of a connected device connected to the IP network; The control circuit acquires actual configuration information obtained by actually identifying the network configuration of the IP network, and for each connected device included in the actual configuration information, acquires the maintenance time of the connected device from the device information, and verifies the arrival of the maintenance time. A network configuration verification device comprising:

2. 2. The network configuration verification device according to claim 1, A network configuration verification device characterized in that the control circuit obtains from the device information the maintenance period of a connected device that matches identification information for identifying the connected device, for each connected device included in the actual configuration information.

3. 3. The network configuration verification device according to claim 2, The network configuration verification device according to claim 1, wherein the identification information is a MAC address of the connected device.

4. In the network configuration verification device according to any one of claims 1 to 3, The network configuration verification device is characterized in that the control circuit outputs an alert indicating that the maintenance date for any connected device whose maintenance date has passed since the time of verification was performed.

5. In the network configuration verification device according to any one of claims 1 to 3, The control circuit is configured to display an alert on a screen urging the performance of maintenance work on a connected device for any connected device whose maintenance date falls within a predetermined reminder period from the time of verification.

6. In the network configuration verification device according to any one of claims 1 to 3, The control circuit is configured to display an alert on a screen for any connected device that is not registered in the device information, urging the user to register the connected device in the device information when it is time for maintenance.

7. In the network configuration verification device according to any one of claims 1 to 3, A network configuration verification device characterized in that, for any of the connected devices that is not registered in the device information, the control circuit registers the maintenance timing of that connected device in the device information.

Images