Configuration file generating device, configuration file generating method, and program

Abstract

To make easy and efficient system management of a network system consisting of a number of apparatuses.SOLUTION: A setting file generation device comprises: a collection section for collecting from a plurality of network apparatuses configuration definition files in which setting information is recorded; an analysis section which refers to analysis information of the configuration definition files and extracts from the configuration definition files of each network apparatus setting information corresponding to description items of a setting file; a generation section for generating the setting file for each network apparatus by applying the setting information for each description item extracted by the analysis section to a format of the setting file; and a consistency discrimination section by which, regarding an attention item in the description items, consistency between the setting information of the specific network apparatuses is discriminated and in a case where the absence of consistency is discriminated, a user is notified of presence of non-consistency. In the setting file, the setting file is listed correspondingly to predetermined description items.SELECTED DRAWING: Figure 2

Description

[Technical field]

[0001] The present invention relates to a technique for generating configuration files for network devices within a network. [Background technology]

[0002] Network systems use multiple types of network devices, such as firewalls and switching hubs. The user creates a parameter sheet, which lists the settings for each setting item of each network device, as a design document, and sets the settings for each network device based on that. The set settings are recorded and saved inside each network device as a configuration definition file (hereafter referred to as a config file). Each network device reads this config file when it starts up and begins operation.

[0003] In a network system, the device configuration may change, and the settings and configuration files are changed accordingly. Meanwhile, the entire network is managed based on parameter sheets. Therefore, it is important to maintain consistency between the configuration file and the parameter sheets even after the device configuration is changed.

[0004] However, when there are a large number of network devices, it is a heavy burden to understand the current setting state, i.e., the configuration file, of each network device. In view of this, there is a technique for reducing the time it takes for a user to check the current configuration file of a network device (for example, see Patent Document 1).

[0005] There is also a technology that efficiently analyzes configuration files, which have different description methods for each model, and converts them into a general-purpose format that is independent of the model of the network device (see, for example, Patent Document 2).

[0006] Furthermore, in a computer system, there is a technique for automatically generating a parameter sheet from system configuration information including settings of network devices (see, for example, Patent Document 3). [Prior art documents] [Patent documents]

[0007] [Patent Document 1] JP 2021-150429 A [Patent Document 2] JP 2013-214237 A [Patent Document 3] JP 2007-241532 A Summary of the Invention [Problem to be solved by the invention]

[0008] The following analysis is provided by the present invention.

[0009] The techniques of the above cited documents are based on the premise that there are no errors in the settings of the actual device. However, in reality, erroneous settings may occur. If a parameter sheet is created based on a configuration file in which such erroneous settings are recorded and the user is not informed of this, it may actually make system management less efficient.

[0010] The present invention has been made in consideration of the above circumstances, and has an object to facilitate and improve the efficiency of system management of a network system made up of a large number of devices. [Means for solving the problem]

[0011] According to a first aspect of the present invention, a collection unit that collects, from each of a plurality of network devices, a configuration definition file in which setting information of the network device is recorded; an analysis unit that refers to analysis information of the configuration definition file and extracts the setting information corresponding to the items listed in the setting file from the configuration definition file of each of the network devices; a generating unit that generates the configuration file for each of the network devices by applying the configuration information for each of the listed items extracted by the analyzing unit to a format of the configuration file; a consistency determination unit that determines consistency between the setting information of each of the specific network devices for a predetermined caution item among the listed items, and notifies a user of the existence of an inconsistency when it is determined that there is no consistency; The setting file lists the setting information in association with the predetermined listing items, and a setting file generating device is provided.

[0012] According to a second aspect of the present invention, a collection unit that collects, from each of a plurality of network devices, a configuration definition file in which setting information of the network device is recorded; an analysis unit that refers to analysis information of the configuration definition file and extracts the setting information corresponding to the items listed in the setting file from the configuration definition file of each of the network devices; a consistency determination unit that determines consistency between the setting information of each of the specific network devices with respect to a predetermined caution item among the listed items; a generating unit that generates the configuration file for each of the network devices by applying the configuration information for each of the listed items extracted by the analyzing unit to a format of the configuration file when the consistency determining unit determines that there is consistency; the setting file lists the setting information in association with the predetermined listing items, When it is determined that there is no consistency, the consistency determining section notifies a user that there is an inconsistency.

[0013] According to a third aspect of the present invention, there is provided a configuration file generation method for generating a configuration file that lists configuration information of a network device in association with predetermined listing items from a configuration definition file in which the configuration information of the network device is registered, the method comprising the steps of: a collection step of collecting the configuration definition file from each of the plurality of network devices; an analysis step of referring to analysis information of the configuration definition file of the network device and extracting the setting information corresponding to the listing items from the configuration definition file of each of the network devices; a generating step of generating the setting file for each of the network devices by applying the setting information for each of the listed items extracted in the analyzing step to a format of the setting file; a consistency determination step of determining consistency between the setting information of each of the specific network devices with respect to a predetermined attention item among the listed items; The configuration file generating method further comprises a notification step of notifying a user of the existence of an inconsistency when it is determined in the consistency determination step that there is no consistency.

[0014] According to a fourth aspect of the present invention, a computer is provided with: A collection procedure for collecting configuration definition files in which setting information is registered from each of a plurality of network devices; an analysis step of referring to analysis information of the configuration definition file of the network device, and extracting, from the configuration definition file of each of the network devices, the setting information for each of the listed items of a setting file that lists the setting information in correspondence with the listed items; a generating step of generating the setting file for each of the network devices by applying the extracted setting information for each of the listed items to a format of the setting file; a consistency determination step of determining consistency between the setting information of each of the specific network devices with respect to a predetermined attention item among the listed items; If it is determined that there is no consistency, a program is provided for executing a notification procedure for notifying a user of the existence of an inconsistency.

[0015] These programs can be recorded on a computer-readable storage medium. The storage medium can be a non-transient medium such as a semiconductor memory, a hard disk, a magnetic recording medium, an optical recording medium, etc. The present invention can also be embodied as a computer program product. Effect of the Invention

[0016] According to the present invention, system management of a network system made up of a large number of devices can be made easy and efficient. [Brief description of the drawings]

[0017] [Figure 1] 1A to 1C are explanatory diagrams for explaining an outline of a process according to an embodiment of the present invention. [Diagram 2] 1A and 1B are functional block diagrams of a setting file generation device according to one embodiment of the present invention, and FIG. 1C is a hardware configuration diagram of a setting file generation device according to one embodiment of the present invention. [Diagram 3] 1A and 1B are explanatory diagrams each illustrating an example of a configuration file according to one embodiment of the present invention. [Figure 4] FIG. 2 is an explanatory diagram for explaining an example of a configuration file according to an embodiment of the present invention. [Diagram 5] FIG. 1A is an explanatory diagram for explaining an example of a determination information table according to an embodiment of the present invention, and FIG. 1B is an explanatory diagram for explaining an example of an analysis information table according to an embodiment of the present invention. [Figure 6] FIG. 1A is an explanatory diagram for explaining an example of a format database of one embodiment of the present invention, and FIG. 1B and FIG. 1C are explanatory diagrams for explaining examples of generated parameter sheets of one embodiment of the present invention, respectively. [Figure 7]1 is an example of a flowchart of a setting file generation process according to an embodiment of the present invention. [Figure 8] FIG. 13 is an explanatory diagram for explaining an example of a map according to a modified example of the present invention. [Figure 9] 13 is an example of a flowchart of a setting file generation process according to another modified example of the present invention. DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS

[0018] An outline of one embodiment of the present invention (hereinafter, referred to as the present embodiment) will be described below with reference to the drawings. Note that the attached reference numerals for the drawings are attached to each element for convenience as an example to aid in understanding, and are not intended to limit the present invention to the illustrated form. Furthermore, the connection lines between blocks in the drawings and the like referred to in the following description include both bidirectional and unidirectional lines. The unidirectional arrows are intended to show the flow of the main signal (data) and do not exclude bidirectionality.

[0019] The program is executed via a computer device, which includes, for example, a processor, a storage device, an input device, a communication interface, and, if necessary, a display device. The computer device is also configured to be able to communicate with internal or external devices (including computers) via the communication interface, either wired or wirelessly. Although there are ports or interfaces at the connection points for input and output of each block in the figure, they are not shown. In the following description, "A and / or B" is used to mean A or B, or A and B.

[0020] 1(a), 1(b) and 1(c) are schematic diagrams for explaining an overview of this embodiment. As shown in Fig. 1(a) and Fig. 1(b), a setting file generating device 100 of this embodiment generates a parameter sheet (hereinafter also referred to as a setting file) 912, which is a list of setting values ​​of each network device (NW device) 910 constituting a network system 900, from configuration data (hereinafter also referred to as a configuration definition file or a configuration file) 911 of each network device 910.

[0021] During generation, the setting file generation device 100 analyzes the collected (acquired) config file 911 and extracts setting information (setting values) corresponding to the items listed in the parameter sheet 912. Then, the extracted setting information is used to generate the parameter sheet 912. Also, as shown in FIG. 1(c), among the extracted setting information, the device 100 checks the consistency of setting information corresponding to predetermined items (items to be careful of) between predetermined network devices 910. Then, if it is determined that there is an inconsistency, the device 100 notifies the user.

[0022] The setting file generating device 100 of this embodiment that realizes this will be described below. Fig. 2(a) is a functional block diagram of the setting file generating device 100 of this embodiment. As shown in this figure, the setting file generating device 100 of this embodiment includes a collection unit 110, an analysis unit 120, a generation unit 130, and a consistency determination unit 140. In addition, the setting file generating device 100 of this embodiment may further include an analysis database (DB) 161 that stores data used for processing by each of these functions, a consistency determination condition 162, and a format DB 163.

[0023] The collection unit 110 collects the configuration files 911 of the network devices 910. In this embodiment, the collection is performed by receiving the configuration files 911 from all the network devices 910 that make up the network system 900. The collected configuration files 911 are sent to the analysis unit 120.

[0024] In this embodiment, the collection unit 110 also acquires at this time the device ID of each network device 910. The device ID is identification information that is given in advance to each network device 910 in order to uniquely identify it.

[0025] The configuration file 911 is text data indicating various setting information (setting values) set in the network device 910. It can be used as is to configure the network device 910. The setting information includes the operation mode and the like. Also, it may be written in a format that differs depending on the model.

[0026] Here, Figures 3(a) to 4 show examples of the configuration file 911. Figures 3(a) and 3(b) respectively show configuration file examples 911a and 911b when the network device 910 is a switching hub. Also, Figure 4 shows a configuration file example 911c when the network device 910 is a firewall.

[0027] The analysis unit 120 determines, from the configuration file 911, the model of the network device 910 in which the configuration file 911 is recorded, and extracts setting values ​​corresponding to the items listed on the parameter sheet 912. The analysis unit 120 analyzes the text data of the configuration file 911 using data stored in the analysis DB 161, and determines the model and extracts the setting values. The determined model information and the extracted setting values ​​are sent to the generation unit 130 and the consistency determination unit 140 as the analysis results, together with the device ID.

[0028] To achieve this, the analysis unit 120 includes a model determination unit 121 and an extraction unit 122, as shown in FIG.

[0029] The model determination unit 121 analyzes the config file 911 and determines the model of the network device 910 in which the config file 911 is recorded.

[0030] 5A shows an example of a determination information table 210 in which determination information is stored. As shown in this figure, determination information 212 is registered in association with a model code 211.

[0031] The model code 211 is a code that is uniquely assigned to each model. Note that, even if the model is the same, if the manufacturer is different, a different model code 211 may be assigned. A model-specific character string (unique character string) that can identify the model is registered as the determination information 212. In this embodiment, for example, an And condition that combines multiple character strings described in the configuration file is registered as the determination information 212. For example, if the model is a switching hub, character strings related to port settings and VLAN settings, and if the model is a firewall, character strings related to policy settings, are registered as the determination information 212. This is because these character strings have characteristics for each manufacturer and model.

[0032] 5(a), for example, in the case of a switching hub in which "001" is registered as the model code 211, "line 02 sysname + line 04 Bridge-Aggregation" is registered as the judgment information 212. In addition, in the case of a switching hub in which "002" is registered as the model code 211, "line 02 hostname + line 04 Port-channel" is registered as the judgment information 212. In addition, in the case of a firewall in which "101" is registered as the model code 211, "line 02 set hostname + line 04 config firewall policy" is registered as the judgment information 212.

[0033] The model determination unit 121 searches for character strings in the configuration file 911 and determines whether or not there is a character string registered as the determination information 212. If there is a character string that matches any of the determination information 212, it determines that the model is the one specified by the model code 211 associated with the matching determination information 212. Then, the specified model code 211 is sent to the extraction unit 122.

[0034] 5(a), for example, the model determination unit 121 determines that the model of the network device 910 in which the config file 911a is recorded is a model identified by a model code "001." The model of the network device 910 in which the config file 911b is recorded is a model identified by a model code "002." The model of the network device 910 in which the config file 911c is recorded is a model identified by a model code "101."

[0035] If a character string matching the judgment information 212 registered in the judgment information table 210 is not detected, the setting file generation device 100 notifies the user that the model is not one that can be processed (is not a compatible model).

[0036] The extraction unit 122 analyzes the configuration file 911 and extracts setting information (setting values) corresponding to the items listed on the parameter sheet 912. The extraction unit 122 selects analysis information stored in the analysis DB 161 based on the model code 211 sent from the model determination unit 121, and performs analysis using the selected analysis information. The analysis information is data in which the extraction method for each item listed on the parameter sheet 912 for each model is registered as a search condition.

[0037] 5(b) shows an example of the analysis information table 220 in which the analysis information is stored. As shown in this figure, in the analysis information table 220, search conditions 223 for each published item 222 are registered as analysis information for each model code 221. The published items 222 are information that specifies the items to be published in the parameter sheet 912. The search conditions 223 are information that indicates the procedure for searching (extracting) setting information (setting values) corresponding to each published item 222 from the configuration file 911.

[0038] For example, if the network device 910 is a model that corresponds to a switching hub, items such as the device name, interface number, VLAN operation mode, VLAN ID, link aggregation group number, link aggregation operation mode, etc. are registered as the published items 222, as shown in Fig. 5(b). Other items such as the host name, port communication speed, communication mode, etc. may be registered. Also, if the model corresponds to a firewall, items such as the host name, source IP address, destination IP address, source port number, destination port number, and actions such as permission and denial of communication used in policy settings are registered.

[0039] In addition, as search conditions 223, in the configuration file 911, search procedures according to the appearance patterns of the setting values ​​corresponding to the above-mentioned respective published items 222 are registered.

[0040] The extraction unit 122 scans the configuration file 911 according to the search conditions 223 of the analysis information table 220, and extracts setting information (setting values) corresponding to each listed item 222. The extracted setting information (setting values) for each listed item 222 is temporarily stored in the storage device 192 or the like together with the model ID and model code 221. Then, when extraction of the setting information for all network devices 910 is completed, the extraction unit 122 sends the stored information to the generation unit 130 and the consistency determination unit 140 as the analysis result.

[0041] The generating unit 130 generates a parameter sheet 912 for each network device 910 based on the analysis result sent from the analyzing unit 120. In this embodiment, the generating unit 130 obtains the format of the parameter sheet 912 from the format DB 163, and generates the parameter sheet 912 by registering the setting information included in the analysis result in the corresponding portion of the format.

[0042] 6(a), the format of the parameter sheet 912 is registered as a parameter sheet form 262 for each model code 261 in the format DB 163. For example, the layout of each item to be listed on the parameter sheet 912 is registered as the parameter sheet form 262. Furthermore, for items that have initial values ​​among the items to be listed on the parameter sheet form 262, initial values ​​263 may be registered.

[0043] The generating unit 130 sets the analysis results in the listing columns associated with the respective listing items of the parameter sheet form 262, and generates a parameter sheet 912. An example of the generated parameter sheet 912 is shown in Fig. 6(b) and Fig. 6(c).

[0044] Fig. 6(b) is an example 912a of the parameter sheet 912 of the network device 910 whose model ID is q01 and whose model code is 001. Fig. 6(c) is an example 912b of the parameter sheet 912 of the network device 910 whose model ID is q02 and whose model code is 002. As shown in these figures, the model ID, the model code, and the setting information extracted by the extraction unit 122 are arranged in the columns corresponding to the respective listing items. Here, an example is shown in which the network device 910 is a switching hub, but if the network device 910 is a model corresponding to a firewall, for example, columns for listing setting information such as the host name, the source IP address, the destination IP address, the source port number, the destination port number, and actions such as permission and refusal of communication used in policy setting are provided.

[0045] The consistency determination unit 140 determines whether or not there is consistency in the setting information (setting values) of the predetermined published items 222 between the predetermined network devices 910 in the analysis result. If it is determined that there is consistency, it ends the process. On the other hand, if it is determined that there is no consistency, it notifies the user accordingly.

[0046] The consistency determination unit 140 performs the determination in accordance with a predetermined consistency determination condition 162. The consistency determination condition 162 is input, for example, by a user. Here, an example of the consistency determination condition 162 will be described. For example, in a group of network devices 910 connected to the same core device, if the setting values ​​of the connection ports to the core device are not the same, it is determined that there is no consistency.

[0047] For example, when the parameter sheet 912 generated from the analysis result is as shown in Fig. 6(b) and Fig. 6(c), the user inputs a condition (interface connection condition) that the interface number "GigabitEthernet1 / 0 / 48" of switch01 is connected to the interface number "GigabitEthernet1 / 0 / 48" of switch02. Furthermore, the user inputs a VLAN operation mode, a VLAN ID, and a link aggregation operation mode as compatibility determination setting values.

[0048] The consistency determination unit 140 determines whether or not there is consistency based on these consistency determination conditions 162. That is, if the setting values ​​of the VLAN operation mode, VLAN ID, and link aggregation operation mode match between switch01 and switch02, it is determined that there is consistency (there is consistency). Note that although the character string of the setting value of the link aggregation operation mode is different, since it is a setting for dynamic operation, it is determined that the setting value matches. Such determination conditions are registered in advance in the consistency determination conditions 162.

[0049] The consistency check condition 162 may be registered in advance, for example, by checking the consistency of the settings of the VLAN operation mode, VLAN ID, and link aggregation operation mode for the network devices 910 having the same interface number.

[0050] The setting file generation device 100 of this embodiment can be realized by a so-called general-purpose information processing device (computer). An example of the hardware configuration of the setting file generation device 100 is shown in FIG.

[0051] The setting file generating device 100 includes, for example, a CPU (Central Processing Unit) 191, a storage device 192, an input / output interface (I / F) 193, and a communication I / F 194, which are interconnected by an internal bus.

[0052] CPU 191 loads a program stored in a non-volatile area of ​​storage device 192 into a work area and executes the program, thereby realizing the above-mentioned functions and centrally controlling setting file generation device 100. Note that one or more processors such as an MPU (Micro Processing Unit) may be used instead of CPU 191.

[0053] The storage device 192 is configured with memories such as a ROM (Read Only Memory) and a RAM (Random Access Memory). The storage device 192 stores information such as programs for executing each function and communication parameters for communication. In this embodiment, the analysis DB 161, the consistency determination condition 162, the format DB 163, and the like are constructed in the storage device 192. The storage device 192 is also the storage destination for temporarily storing the results extracted by the extraction unit 122.

[0054] In addition to memories such as ROM and RAM, the storage device 192 may include storage media such as a solid state drive (SSD), a flexible disk, a hard disk, an optical disk, a CD-ROM, a CD-R, a magnetic tape, a non-volatile memory card, a DVD, etc. The storage device 192 may include multiple memories, etc.

[0055] The input / output I / F 193 is a means for interfacing with a display device or an input device (not shown). The display device is, for example, a liquid crystal monitor. The input device is, for example, a device that accepts user operations such as a keyboard or a mouse. In this embodiment, for example, the input of the consistency determination condition 162 is accepted.

[0056] The communication I / F 194 is a wired or wireless communication interface, and realizes communication with the network device 910 that collects the configuration file 911 .

[0057] Note that the hardware configuration of the setting file generation device 100 is not limited to this. The setting file generation device 100 may include hardware not shown. Furthermore, the number of CPUs 191 and the like included in the setting file generation device 100 is not limited.

[0058] [Configuration file generation process flow] Next, the flow of the parameter sheet generation process by the setting file generation device 100 of this embodiment will be described. Fig. 7 is an example of the processing flow of the setting file generation process of this embodiment. This process is started in response to an instruction from the user. Here, an example will be described in which there are N network devices 910 (N is an integer equal to or greater than 2) in the network system 900. The processing order of each network device 910 is predetermined, and the network device 910 to be processed Nth is called the Nth network device (NW device) 910.

[0059] The collection unit 110 initializes a counter n (n=1) (step S1101).

[0060] The collection unit 110 collects the configuration file 911 from the n-th network device 910 (step S1102).

[0061] The model determination unit 121 determines the model of the n-th network device 910 using the above method based on the collected config file 911 of the n-th network device 910 (step S1103).

[0062] Here, it is also determined whether the network device 910 that transmitted the config file 911 is a compatible model of the setting file generation device 100 (step S1104). As described above, if the config file 911 contains a character string that matches the determination information 212, it is determined to be a compatible model, and the model code 211 registered in association with that character string is extracted. On the other hand, if the matching character string is not contained, it is determined to be an uncompatible model.

[0063] If it is determined that the model is compatible (S1104; Yes), the extraction unit 122 extracts setting information for each listed item based on the model code and the analysis information using the above method (step S1105).Then, the extracted setting information and model code are temporarily stored in association with the model ID (step S1106).

[0064] Then, the extraction unit 122 determines whether the extraction process has been completed for all N devices (step S1108). If it is determined that the extraction process has been completed (S1108; Yes), the stored analysis result is sent to the generation unit 130 and the consistency determination unit 140, otherwise (S1108: No), the process proceeds to the process for the next network device 910. Specifically, n is incremented by 1 (step S1109), and the process returns to step S1102.

[0065] If it is not determined to be a compatible model (S1104; No), model determination unit 121 outputs an error message meaning "not a compatible model" (step S1107), and proceeds to step S1108.

[0066] The generating unit 130 generates and outputs the parameter sheet 912 for each network device 910 from the analysis results using the above-mentioned method (step S1110).

[0067] Next, when the consistency determining unit 140 receives the analysis result, it performs a consistency determining process (step S1111). That is, the consistency determining unit 140 determines whether or not there is consistency according to the consistency determining condition 162 by the above-mentioned method.

[0068] If it is determined that there is no consistency (S1112; No), consistency determiner 140 generates and outputs a message indicating that there is a setting error (step S1113), and ends the process.

[0069] On the other hand, if it is determined that there is consistency (S1112; Yes), the consistency determining section 140 ends the process.

[0070] In the flowcharts used in the above description, multiple steps (processes) are described in order, but the order in which each step is performed is not limited to the order described. For example, the order of the steps shown in the drawings can be changed to a degree that does not affect the content, such as performing each process in parallel.

[0071] As described above, when a setting change occurs in a network device 910, the setting file generation device 100 of this embodiment automatically updates the parameter sheet 912 based on the config file 911 of that network device 910 in accordance with a user instruction.

[0072] For example, when additional settings are made to an installed network device 910, even if the settings are made to the network device 910 without updating the parameter sheet 912, which is a design document, the setting file generating device 100 automatically generates the parameter sheet 912 from the config file 911, so that it is possible to prevent omissions in entering or changing setting values ​​in the parameter sheet 912. In other words, since the parameter sheet 912 is automatically updated, no inconsistency occurs between the information in the config file 911 and the parameter sheet 912. Therefore, the following problems caused by differences in the setting values ​​between the two do not occur.

[0073] Problem 1) When a fault occurs in a network and the fault is investigated, the investigation is carried out based on parameter sheet 912, which lists the initial settings, and it is not possible to accurately determine the cause.

[0074] Problem 2) When a network device 910 becomes obsolete, it is replaced with a new network device 910 that has erroneous settings based on an unupdated parameter sheet 912, causing a communication failure.

[0075] In other words, if the setting values ​​written on the parameter sheet 912 are not up to date, not only will it require extra man-hours to investigate and respond to a failure when it occurs, but it may also be the cause of a failure when replacing the network device 910. However, according to this embodiment, these problems can be avoided, and it is possible to suppress the waste of time spent investigating the cause of a failure when it occurs, and the occurrence of communication failures due to setting errors.

[0076] Furthermore, since the parameter sheet 912 is automatically updated, the information in the parameter sheet 912 is reliable. For example, when investigating a network failure as described above or when updating to a new network device 910, the correct setting values ​​can be ascertained by checking the parameter sheet 912. Therefore, according to this embodiment, network management becomes easier and more efficient.

[0077] Furthermore, in this embodiment, the analysis DB 161 uses information registered for each model as the determination information table 210 and the analysis information table 220 to perform model determination and extract listed items. Therefore, even if a new model of network device 910 from a new manufacturer is added to the network, it can be handled simply by updating these tables. Therefore, according to this embodiment, the number of target devices can be easily increased, and scalability is high.

[0078] Furthermore, there are cases where values ​​are set in the network device 910 in the initial state. These are called initial values, but the initial values ​​are often not described in the configuration file 911. In this embodiment, the initial values ​​263 may be registered in advance as the format DB 163. As a result, according to this embodiment, the initial values ​​and setting values ​​required for the operation of the network device 910 are written without omission into the output parameter sheet 912.

[0079] Furthermore, in this embodiment, the consistency of the settings between the network devices 910 is determined based on the analysis result of the configuration file 911. Therefore, even if an incorrect setting is made, the user can immediately understand the situation and can reset the setting.

[0080] <Variation 1> In the above embodiment, the setting file generating device 100 is described as collecting the config file 911 in response to a user instruction. However, this is not limited to this. For example, the configuration may be configured such that the config file 911 is sent to the setting file generating device 100 in response to a change in the configuration of the network device 910 that constitutes the network.

[0081] In this case, when a change in configuration occurs in the network device 910, the parameter sheet 912 in the network is automatically updated. Therefore, it is possible to further reduce the time until the parameter sheet 912 is consistent with the configuration file 911. For example, as described above, when an incorrect setting in the network device 910 is discovered, according to this modification, when the setting of the network device 910 is corrected, the configuration file is updated and this is immediately reflected in the parameter sheet 912.

[0082] <Variation 2> Furthermore, if there is an inconsistency in the configuration file 911, the consistency determining section 140 may identify the network device 910 having the inconsistency as an inconsistent device, and present the device ID of the device to the user.

[0083] At this time, the compatibility determining section 140 may generate a map 400 indicating the connection state of the network devices 910, and indicate the incompatible devices on the map 400. An example of the map 400 is shown in FIG.

[0084] In the figure, the device IDs of the network devices 910 are represented as NW01, NW02, NW03, and NW04. In the example of the figure, the consistency determining unit 140 determines the consistency of predetermined setting values ​​of each network device 910 connected to the network device 910 (whose device ID is NW01) that is a core device among three network devices 910 with device IDs NW02, NW03, and NW04. As a result, the setting values ​​of the network device 910 with device IDs NW02 and NW03 are the same, and only the network device 910 with device ID NW04 has a different setting value. In this case, the consistency determining unit 140 determines that there is an error in the setting value of the network device 910 with device ID NW04, and displays a message to that effect.

[0085] <Variation 3> In the above embodiment, the format of the parameter sheet 912 is provided for each model. However, the present invention is not limited to this. For example, the format of the parameter sheet 912 may be common to all the network devices 910. In this case, the format is provided with columns for listing items of all the network devices 910. Then, only items for which setting information can be extracted are set for each model.

[0086] <Modification 4> In the above embodiment, the model is determined by extracting a predetermined character string from the configuration file 911, but the method of determining the model is not limited to this. A table that associates model IDs with models may be provided in advance, and the model determination unit 121 may make the determination by referring to this table.

[0087] <Variation 5> In the above embodiment, the databases, data, and the like used in the processing are provided in the setting file generation device 100, but the present invention is not limited to this. At least one of these may be stored in one or more external devices capable of transmitting and receiving data to and from the setting file generation device 100. In this case, each unit of the setting file generation device 100 obtains information required to execute the processing from the external device via the communication I / F 194.

[0088] <Variation 6> In the above embodiment, first, the parameter sheet 912 is created, and then the consistency is judged and the judgment result is output, but this is not limited to the above. For example, the parameter sheet 912 may be configured to judge the consistency before the creation of the parameter sheet 912, and to create the parameter sheet 912 only if it is judged that there is consistency. This makes it possible to prevent the parameter sheet 912 from being updated when there is an inconsistency in the settings of the network device 910.

[0089] The flow of processing in this case is shown in Fig. 9. The process up to the analysis of the config files 911 of all the network devices 910 (S1109) is the same as in the above embodiment. After that, the analysis result is passed to the consistency determining unit 140.

[0090] When the consistency determining unit 140 receives the analysis result, the consistency determining unit 140 performs a consistency determining process (step S1201). That is, the consistency determining unit 140 determines the consistency according to the consistency determining condition 162 by the above-mentioned method.

[0091] If it is determined that there is consistency (S1202; Yes), the consistency determination unit 140 outputs the analysis result to the generation unit 130. The generation unit 130 generates and outputs the parameter sheet 912 for each network device 910 from the analysis result using the above-mentioned method (step S1203), and ends the process.

[0092] On the other hand, if it is determined in step S1202 that there is no consistency, consistency determining unit 140 does not send the analysis result to generation unit 130, but generates and outputs a message indicating that there is a setting error (step S1204), and ends the process.

[0093] <Other Modifications> Furthermore, in the above embodiment, all or part of the functions of the setting file generating device 100 may be realized (implemented in hardware) by hardware such as a field programmable gate array (FPGA) or an application specific integrated circuit (ASIC).

[0094] Furthermore, the program that realizes setting file generation device 100 can be downloaded via a network, or updated using a storage medium that stores the program. Furthermore, each function of setting file generation device 100 may be realized by a semiconductor chip. That is, each function may be realized by executing software on some kind of hardware.

[0095] Furthermore, by installing the above program in storage device 192 of a computer, the computer can function as setting file generation device 100. Furthermore, by causing a computer to execute the above program, the setting file generation method can be executed by the computer.

[0096] Although each embodiment of the present invention has been described above, the present invention is not limited to the above-mentioned embodiments, and further modifications, substitutions, and adjustments can be made without departing from the basic technical idea of ​​the present invention. For example, the network configurations and configurations of each element shown in each drawing are examples to help understand the present invention, and the present invention is not limited to the configurations shown in these drawings.

[0097] Finally, preferred embodiments of the present invention will be summarized. [First form] (See the configuration file generator from the first viewpoint above.) [Second Form] In the setting file generation device, The analysis information includes determination information for determining a model of the network device and a search condition for the listed items for each model, The analysis unit is a model determination unit that refers to the determination information, analyzes the configuration definition file of each network device collected by the collection unit, and determines the model of the network device; It is preferable that the system further comprises an extraction unit that extracts the setting information for each of the listed items from the configuration definition file in accordance with the search conditions for the listed items of the determined model. [Third Form] In the setting file generation device, In the determination information, a unique character string that is a character string unique to the model is registered for each model, It is preferable that the model determination unit determines the model by searching for the unique character string in the configuration definition file. [Fourth Form] In the setting file generation device, It is preferable that the computer system further comprises at least one of an analysis information database for storing the analysis information and a format database for storing the format of the setting file. [Fifth Form] In the setting file generation device, It is preferable that the attention items are set by the user. [Sixth Form] In the setting file generation device, It is preferable that, when it is determined that there is no consistency, the consistency determination unit generates a map showing a connection state of the network devices, identifies the inconsistent devices on the map, and notifies the user of the inconsistency. [Seventh Form] (See the second aspect of the configuration file generator above.) [Eighth Form] (See above for how to generate a configuration file from the third perspective) [Ninth Form] (See the fourth perspective program above) The seventh, eighth and ninth forms can be expanded to the second to sixth forms in the same manner as the first form.

[0098] The disclosures of the above patent documents and the like are incorporated herein by reference. Within the framework of the entire disclosure of the present invention (including the scope of claims), modifications and adjustments of the embodiments and examples are possible based on the basic technical ideas. Furthermore, within the framework of the disclosure of the present invention, various combinations and selections of the various disclosed elements (including each element of each claim, each element of each embodiment or example, each element of each drawing, etc.) are possible. In other words, the present invention naturally includes various modifications and corrections that a person skilled in the art would be able to make based on the entire disclosure including the scope of claims and the technical ideas. In particular, with regard to the numerical ranges described in this specification, any numerical value or subrange included in the range should be interpreted as being specifically described even if not otherwise specified. [Explanation of symbols]

[0099] 100: configuration file generating device, 110: collection unit, 120: analysis unit, 121: model determination unit, 122: extraction unit, 130: generation unit, 140: consistency determination unit, 161: analysis DB, 162: consistency determination condition, 163: format DB, 191: CPU, 192: storage device, 193: input / output I / F, 194: communication I / F, 210: Judgment information table, 211: Model code, 212: Judgment information, 220: Analysis information table, 221: Model code, 222: Listing items, 223: Search conditions, 261: Model code, 262: Parameter sheet form, 263: Initial value, 400: Map, 900: network system, 910: network device, 911: configuration file, 911a, 911b, 911c: configuration file examples, 912: parameter sheet, 912a, 912b: parameter sheet examples

Claims

1. a collection unit that collects, from each of a plurality of network devices, a configuration definition file in which setting information of the network device is recorded; an analysis unit that refers to analysis information of the configuration definition file and extracts the setting information corresponding to the items listed in the setting file from the configuration definition file of each of the network devices; a generating unit that generates the configuration file for each of the network devices by applying the configuration information for each of the listed items extracted by the analyzing unit to a format of the configuration file; a consistency determination unit that determines consistency between the setting information of each of the specific network devices for a predetermined caution item among the listed items, and notifies a user of the existence of an inconsistency when it is determined that there is no consistency; the setting file lists the setting information in association with the predetermined listing items, The analysis information includes determination information for determining a model of the network device and a search condition for the listed items for each model, The analysis unit is a model determination unit that refers to the determination information, analyzes the configuration definition file of each network device collected by the collection unit, and determines the model of the network device; an extraction unit that extracts the setting information for each of the listed items from the configuration definition file in accordance with the search conditions for the listed items of the determined model.

2. 2. The setting file generating device according to claim 1, In the determination information, a unique character string that is a character string unique to the model is registered for each model, The configuration file generating device, wherein the model determination unit determines the model by searching for the unique string in the configuration definition file.

3. 3. The setting file generating device according to claim 1, A configuration file generating device comprising at least one of an analysis information database that stores the analysis information and a format database that stores a format of the configuration file.

4. 3. The setting file generating device according to claim 1, The attention items are set by the user.

5. 3. The setting file generating device according to claim 1, When the consistency determination unit determines that there is no consistency, the consistency determination unit generates a map showing a connection state of the network devices, and identifies inconsistent devices on the map, thereby notifying the user.

6. a collection unit that collects, from each of a plurality of network devices, a configuration definition file in which setting information of the network device is recorded; an analysis unit that refers to analysis information of the configuration definition file and extracts the setting information corresponding to the items listed in the setting file from the configuration definition file of each of the network devices; a consistency determination unit that determines consistency between the setting information of each of the specific network devices with respect to a predetermined caution item among the listed items; a generating unit that generates the configuration file for each of the network devices by applying the configuration information for each of the listed items extracted by the analyzing unit to a format of the configuration file when the consistency determining unit determines that there is consistency; the setting file lists the setting information in association with the predetermined listing items, When the consistency determination unit determines that there is no consistency, the consistency determination unit notifies a user that there is an inconsistency; The analysis information includes determination information for determining a model of the network device and a search condition for the listed items for each model, The analysis unit is a model determination unit that refers to the determination information, analyzes the configuration definition file of each network device collected by the collection unit, and determines the model of the network device; an extraction unit that extracts the setting information for each of the listed items from the configuration definition file in accordance with the search conditions for the listed items of the determined model.

7. A configuration file generating method for generating a configuration file that lists configuration information of a network device in association with predetermined listing items from a configuration definition file in which the configuration information of the network device is registered, the method comprising the steps of: a collection step of collecting the configuration definition file from each of the plurality of network devices; an analysis step of referring to analysis information of the configuration definition file of the network device and extracting the setting information corresponding to the listing items from the configuration definition file of each of the network devices; a generating step of applying the setting information for each of the listed items extracted in the analyzing step to a format of the setting file to generate the setting file for each of the network devices; a consistency determination step of determining consistency between the setting information of each of the specific network devices with respect to a predetermined attention item among the listed items; a notification step of notifying a user that there is an inconsistency when it is determined that there is no consistency in the consistency determination step, The analysis information includes determination information for determining a model of the network device and a search condition for the listed items for each model, The analyzing step includes: a model determination step of analyzing the collected configuration definition file of each network device by referring to the determination information, and determining the model of the network device; An extraction step of extracting the setting information for each of the listed items from the configuration definition file in accordance with the search conditions for the listed items of the determined model.

8. On the computer, A collection procedure for collecting configuration definition files in which setting information is registered from each of a plurality of network devices; an analysis step of referring to analysis information of the configuration definition file of the network device, and extracting, from the configuration definition file of each of the network devices, the setting information for each of the listed items of a setting file that lists the setting information in correspondence with the listed items; a generating step of generating the setting file for each of the network devices by applying the extracted setting information for each of the listed items to a format of the setting file; a consistency determination step of determining consistency between the setting information of each of the specific network devices with respect to a predetermined attention item among the listed items; a notification procedure for notifying a user of the existence of an inconsistency when it is determined that there is no consistency, The analysis information includes determination information for determining a model of the network device and a search condition for the listed items for each model, The program includes: a model determination step of analyzing the collected configuration definition file of each network device by referring to the determination information, and determining the model of the network device; and an extraction procedure for extracting the setting information for each of the listed items from the configuration definition file in accordance with the search conditions for the listed items of the determined model.

Images