Network configuration method, apparatus, device, storage medium, and program product
By introducing a method of isolating the simulation view and the configuration view on network devices for configuration simulation verification, the problem caused by incorrect configuration in network operation and maintenance is solved, and the accuracy and efficiency of configuration are improved without affecting actual business.
Patent Information
- Application Number
- PCT/CN2025/104244
- Authority / Receiving Office
- WO · WO
- Patent Type
- Applications
- Current Assignee / Owner
- Priority Date
- 2024-08-16
- Filing Date
- 2025-06-27
- Publication Date
- 2026-02-19
AI Technical Summary
In network operations and maintenance, incorrect configurations can easily cause network problems, and existing technologies make it difficult to perform configuration simulation verification without affecting actual business operations.
By introducing a simulation view and configuration view isolation on network devices, the target configuration is simulated and verified to ensure that the simulation verification process does not affect actual business operations, and the target configuration is simulated and executed under the simulation view to obtain the verification results.
It enables configuration simulation verification without affecting actual business operations, reducing the occurrence of misconfigurations and improving the accuracy and efficiency of network configuration.
Smart Images

Figure CN2025104244_19022026_PF_FP_ABST
Abstract
Description
Network configuration method, device, apparatus, storage medium and program product
[0001] The present application claims priority to the Chinese patent application No. 202411135664.9, filed on August 16, 2024, and entitled "Network configuration method, device, apparatus, storage medium and program product", the entire content of which is incorporated herein by reference. TECHNICAL FIELD
[0002] The present application relates to the technical field of network operation and maintenance, and in particular to a network configuration method, device, apparatus, storage medium and program product. BACKGROUND
[0003] In the technical field of network operation and maintenance, it is often necessary to configure devices in the network. If the operation is not proper, the wrong configuration is easy to cause network problems. Therefore, how to configure the network has become a problem to be solved. SUMMARY
[0004] The present application provides a network configuration method, device, apparatus, storage medium and program product, which are used to implement device-level configuration simulation verification.
[0005] In a first aspect, a network configuration method is provided, which includes: obtaining a target configuration to be configured on a network device; simulating and verifying the target configuration on the network device based on a simulation view of the network device, to obtain a simulation verification result, the data between the simulation view and a configuration view of the network device being isolated from each other; and executing the target configuration on the network device in a case where the simulation verification result indicates that the target configuration passes the simulation verification.
[0006] In the method, the simulation view based on the network device can simulate and verify the target configuration on the network device, to implement device-level configuration simulation verification, so that the target configuration executed on the network device is verified by simulation, to avoid configuration errors and further avoid network problems caused by the wrong configuration. In addition, since the simulation view and the configuration view are isolated from each other, the simulation verification process does not affect the actual running business of the network device, to ensure that the business in the simulation verification process can run safely.
[0007] In a possible implementation, before the simulation view based on the network device simulates and verifies the target configuration on the network device, it further includes: under the configuration view, entering the simulation view by executing a first command line. The first command line is used to enter the simulation view from the configuration view, so that the operation of entering the simulation view is controllable, to improve the operation flexibility of the simulation verification.
[0008] In a possible implementation, before the simulation view based on the network device simulates and verifies the target configuration, the method further includes: copying at least one of the configuration result or the state associated with the target configuration in the database corresponding to the configuration view into the simulation view. The simulation verification process is made to be homologous to the actual configuration validation process by the copying manner, the accuracy of the simulation verification result is improved, and the copying manner only needs to copy the information related to the target configuration, without copying redundant information, thereby reducing the amount of data stored under the simulation view.
[0009] In a possible implementation, the configurations in the database corresponding to the configuration view are synchronized with the configurations in the database corresponding to the simulation view. The simulation verification process is made to be homologous to the actual configuration validation process by the real-time synchronization manner, the accuracy of the simulation verification result is improved, and the simulation view stores the information related to the target configuration, which can be directly used when the target configuration is simulated and configured, without copying, thereby improving the efficiency of the simulation verification.
[0010] In a possible implementation, after the simulation verification result is obtained, the method further includes: presenting, in the simulation view, whether the target configuration passes the simulation verification. For example, an abnormal alarm is issued when the target configuration does not pass the simulation verification. In this way, the simulation verification result can be quickly viewed, and early warning is achieved, thereby improving the maintenance efficiency.
[0011] In a possible implementation, after the simulation verification result is obtained, the method further includes: presenting, in the simulation view, the change information corresponding to the simulation verification result. In this way, the change information is presented, which is helpful for the analysis and judgment of the operation and maintenance personnel, and improves the accuracy of the simulation verification result.
[0012] In a possible implementation, the target configuration is a routing policy, and the change information includes at least one of a routing quantity change summary, a changed routing detail, and a comparison result of the routing policy filtered routing detailed information. The routing quantity change summary includes at least one of a routing quantity change statistical result, an attribute quantity change statistical result, an added routing quantity statistical result, or a deleted routing quantity statistical result. In this way, the change information under the routing policy is presented in multiple levels.
[0013] In a possible implementation, the target configuration is executed on the network device, including: performing configuration validation on the target configuration on the network device based on the configuration view. In this way, the simulation view can be switched back to the configuration view, and the actual configuration validation is implemented based on the configuration view.
[0014] In a second aspect, a network configuration apparatus is provided for performing the method in the first aspect or any possible implementation manner of the first aspect. Specifically, the network configuration apparatus comprises modules for performing the method in the first aspect or any possible implementation manner of the first aspect.
[0015] In a possible implementation manner, the apparatus comprises: an obtaining module, configured to obtain a target configuration to be configured on a network device; an emulating module, configured to perform simulation verification on the target configuration on the network device based on a simulation view of the network device, to obtain a simulation verification result, wherein data between the simulation view and a configuration view of the network device is isolated from each other; and an executing module, configured to execute the target configuration on the network device in a case where the simulation verification result indicates that the target configuration passes the simulation verification.
[0016] In a possible implementation manner, the executing module is further configured to enter the simulation view by executing a first command line under the configuration view.
[0017] In a possible implementation manner, the apparatus further comprises: a copying module, configured to copy at least one of a configuration result or a state associated with the target configuration in a database corresponding to the configuration view to the simulation view.
[0018] In a possible implementation manner, the database corresponding to the configuration view is synchronized with a database corresponding to the simulation view.
[0019] In a possible implementation manner, the apparatus further comprises: a presenting module, configured to present a result of whether the target configuration passes the simulation verification in the simulation view.
[0020] In a possible implementation manner, the presenting module is further configured to present change information corresponding to the simulation verification result in the simulation view.
[0021] In a possible implementation manner, the target configuration is a routing policy, and the change information comprises at least one of a routing quantity change summary, a changed routing detail, or a comparison result of filtered routing detailed information of the routing policy; and the routing quantity change summary comprises at least one of a routing quantity change statistic result, an attribute quantity change statistic result, an added routing quantity statistic result, or a deleted routing quantity statistic result. In this way, multi-level presentation of change information under the routing policy is implemented.
[0022] In a possible implementation manner, the executing module is configured to perform configuration validation of the target configuration on the network device based on the configuration view.
[0023] In a third aspect, a network device is provided, comprising: a processor coupled with a memory, and at least one program instruction or code stored in the memory is loaded and executed by the processor to enable the network device to implement the network configuration method according to the first aspect or any possible implementation of the first aspect.
[0024] Optionally, the processor is one or more, and the memory is one or more.
[0025] Optionally, the memory can be integrated with the processor, or the memory and the processor are separately arranged.
[0026] In a specific implementation process, the memory can be a non-transitory memory, such as a read only memory (ROM), which can be integrated on the same chip with the processor, or arranged on different chips respectively, and the type of the memory and the arrangement manner of the memory and the processor are not limited in the present application.
[0027] In a fourth aspect, a computer readable storage medium is provided, and at least one instruction is stored in the storage medium, which is loaded and executed by a processor to enable a computer to implement the network configuration method according to the first aspect or any possible implementation of the first aspect.
[0028] In a fifth aspect, a computer program (product) is provided, which comprises computer program code, when the computer program code is run by a computer, so that the computer executes the network configuration method in the above aspects.
[0029] In a sixth aspect, a chip is provided, comprising a processor, for calling and running instructions stored in a memory, so that a communication device installed with the chip executes the network configuration method in the above aspects.
[0030] In a seventh aspect, another chip is provided, comprising: an input interface, an output interface, a processor and a memory, which are connected through an internal connection path, and the processor is used to execute the code in the memory, when the code is executed, the processor is used to execute the network configuration method in the above aspects.
[0031] It should be understood that the beneficial effects achieved by the second aspect to the seventh aspect of the present application and the corresponding possible implementation manners can refer to the technical effects of the first aspect and the corresponding possible implementation manners described above, and will not be described here again. In addition, the network configuration device mentioned in the second aspect above can be the chip mentioned in the sixth aspect or the seventh aspect, or the network configuration device can also be the device mentioned in the third aspect. BRIEF DESCRIPTION OF DRAWINGS
[0032] FIG. 1 is a schematic diagram of an implementation environment of a network configuration method according to an embodiment of the present application;
[0033] FIG. 2 is a flowchart of a network configuration method according to an embodiment of the present application;
[0034] FIG. 3 is a flowchart of a copy process of a routing policy according to an embodiment of the present application;
[0035] FIG. 4 is a schematic diagram of a plane architecture of a device according to an embodiment of the present application;
[0036] FIG. 5 is a schematic diagram of a process of online pre-verification of a simulation plane according to an embodiment of the present application;
[0037] FIG. 6 is a schematic diagram of a structure of a network configuration device according to an embodiment of the present application;
[0038] FIG. 7 is a schematic diagram of a structure of a network device according to an embodiment of the present application;
[0039] FIG. 8 is a schematic diagram of a structure of a network device according to an embodiment of the present application. DETAILED DESCRIPTION
[0040] In order to make the purpose, technical solutions and advantages of the present application more clear, the embodiments of the present application will be further described in detail below with reference to the drawings.
[0041] In the field of communication technology, each device in a communication network operates based on configuration, and if the configuration mutates, it can cause large-area damage to the communication network. Exemplarily, the main reason for the configuration mutation is that the network operation personnel improperly operates the configuration, for example, incorrectly configures a routing policy. In this scenario, since the incorrectly configured routing policy takes effect directly, it cannot be prevented in advance, which leads to routing mutation. In addition, the network problems caused by the routing mutation are difficult to locate and take a long time, which further leads to communication failure and business damage. Therefore, configuration change needs an early prediction mechanism to prevent incorrect configuration from being connected to the network and to help the operation team maintain network business with more confidence and higher quality.
[0042] In an embodiment, before a change operation of implementing adjustment, maintenance, optimization or the like routing strategy on a communication network, sufficient test and verification can be performed in a digital twin network, and the change operation is continuously evaluated, corrected and optimized through feedback generated on the digital twin network, so as to minimize the impact on the real communication network. At the same time, the digital twin network also records the state and behavior of the digital twin of the network in real time, supports the tracing and playback of history, so as to complete the pre-verification without affecting the network operation, and greatly reduce the trial and error cost.
[0043] The digital twin network is a network system that virtually constructs a digital twin of a physical network entity in a digital manner and can interact with the physical network in real time. The digital twin of the network, as a digital mirror of the physical network facility, has almost the same network topology, service and traffic data model as the physical network, and is a fine copy of the full life cycle and multi-dimensional of the real physical network, which can provide a digital verification environment for network operation.
[0044] However, the digital twin network operation is on the controller, and the controller needs to manage network devices, that is, to obtain the configuration file content on the network device, generate mirror paths and routes, etc. Due to the diversification of controllers of different operators, the management capabilities are different. For the dynamic routing learned on the network device, it needs to be manually imported into the digital twin network, which cannot be updated in real time. In addition, the routing strategy and routing system of the network device need to be developed on the controller. Due to the massive combination of routing, unsupported routing strategies will be ignored, resulting in differences between the simulation routing result and the actual routing result. In addition, after simulation verification on the controller, the configuration still needs to be sent to the network device, and errors may occur in the process of sending the configuration from the controller to the network device.
[0045] Embodiments of the present application provide a network configuration method, which can be applied to any scenario requiring configuration changes, for example, device cut-over upgrade scenario. Device cut-over upgrade refers to the process of maintaining, updating or upgrading network devices, which usually involves some configuration changes, such as adding new configurations or modifying original configurations. The network configuration method can be performed by any network device in the communication network that needs to change the configuration, realizing device-level configuration simulation verification, which helps to reduce the error configuration of the operation and maintenance personnel. Embodiments of the present application do not limit the applicable communication network of the method, which can be any network for realizing communication. Exemplarily, FIG. 1 is a schematic diagram of the architecture of a communication network provided by an embodiment of the present application. The communication network can include a plurality of network devices, which are connected to each other, and any two terminal devices realize communication through the communication network.
[0046] Referring to FIG. 2, FIG. 2 is a flowchart of a network configuration method provided in an embodiment of the present application. As shown in FIG. 2, the method includes but is not limited to the following steps 201-203.
[0047] In step 201, a target configuration to be configured on a network device is acquired.
[0048] In the embodiment of the present application, the target configuration can refer to any content capable of being configured on the network device, for example, a routing policy, an access control list (ACL), an internet protocol (IP) address or a subnet mask, a border gateway protocol (BGP), an Interior Gateway Protocol (IGP) such as an intermediate system to intermediate system (IS-IS) and an open shortest path first (OSPF), a multi-protocol label switching (MPLS) protocol, multicast, quality of service (QOS), a virtual private network (VPN), segment routing, and the like.
[0049] Optionally, the manner of acquiring the target configuration is not limited in the embodiment of the present application, and the target configuration can be written into the network device by an operation and maintenance personnel, for example, the target configuration is issued to the network device in a manner of writing a command line; or the network device can receive the target configuration sent by a controller or other devices. The target configuration can be used to add a new configuration on the network device, or can be used to modify an existing configuration on the network device. In the network operation and maintenance process of the cut-over upgrade scenario, the target configuration can be a cut-over script, and the cut-over script is used to simulate the cut-over operation of the operation and maintenance personnel. The direct use of the cut-over script for simulation verification can reduce configuration errors.
[0050] In step 202, the target configuration is simulated and verified on the network device based on a simulation view of the network device, to obtain a simulation verification result. Data between the simulation view and a configuration view of the network device is isolated from each other.
[0051] Since the target configuration is actually configured to the network device after the target configuration is configured to the network device, if the configuration is incorrect, it may cause network paralysis and other problems. Therefore, the embodiment of the present application targets the target configuration to be configured, and performs simulation verification (i.e., pre-verification) on the target configuration under the simulation view of the network device before the configuration of the network device is configured to take effect, so that the configuration can be configured to take effect on the network device when the simulation verification result meets the expectation, thereby reducing the occurrence of incorrect configuration.
[0052] In the embodiment of the present application, the network device includes two views (views), a configuration view and a simulation view. The configuration view is an operation interface originally used by the network device for configuration issuing, for example, the configuration view can be a system view or an interface view, etc. The operation personnel can write command lines in the configuration view, and the configuration issuing can be realized by executing the written command lines. The simulation view is an operation interface used for simulation verification of the target configuration, which is a newly added operation view in the embodiment of the present application. The operation personnel can write command lines in the simulation view, and the configuration simulation can be realized by executing the written command lines.
[0053] Among them, the data between the simulation view and the configuration view is isolated, that is, the database (database, db) corresponding to the simulation view and the database corresponding to the configuration view are two independent databases, and the database is used to store configuration-related configuration operations, configuration results or states, etc. Therefore, the configuration operation and the configuration result under the simulation view do not affect the configuration under the configuration view, that is, the target configuration simulated under the simulation view is not effective under the configuration view, so that the simulation plane under the simulation view and the system running plane under the configuration view are isolated, and the simulation affecting the system running business can be avoided.
[0054] Before the network device simulates and verifies the target configuration based on the simulation view of the network device, the network device needs to enter the simulation view first. Optionally, the ways in which the network device enters the simulation view include but are not limited to the following.
[0055] Method one, the network device runs under the configuration view, and enters the simulation view by executing a first command line under the configuration view. Among them, the first command line is a command line for entering the simulation view. Optionally, the first command line includes a view identifier, and the view identifier indicates the configuration view or the simulation view, that is, entering the simulation view by executing the first command line can include, in the case that the view identifier included in the first command line indicates the simulation view, entering the simulation view. For example, in the case that the target configuration is a route policy, the first command line can be simulate route-policy, and simulate is a view identifier indicating the simulation view.
[0056] In a second mode, the network device directly enters the simulation view automatically after obtaining the target configuration to be configured, or enters the simulation view by default in the case where the target configuration is used to change the configuration. The change of the configuration includes, but is not limited to, adding a new configuration, deleting an original configuration, or modifying the original configuration, and the like.
[0057] In a third mode, the network device includes a field indicating the entry into the simulation view in a command line for writing the target configuration, and enters the simulation view by executing the field indicating the entry into the simulation view.
[0058] Thus, the simulation view can be entered by any one of the above three modes. Optionally, after entering the simulation view, a simulation identification (ID) field can be added to the target configuration. The simulation ID field is used to distinguish whether the target configuration is issued under the simulation view or the configuration view, thereby avoiding the target configuration issued under the simulation view from taking effect in the configuration view.
[0059] In the embodiments of the present application, the simulation verification of the target configuration means that the target configuration is simulated and executed under the simulation view to obtain a simulation verification result. Before the simulation verification of the target configuration based on the simulation view is performed on the network device, relevant data required for simulating and executing the target configuration based on the simulation view is obtained, for example, configuration content associated with the target configuration that has been configured on the network device, which can include at least one of a configuration result or a state. Then, the simulation verification of the target configuration is performed based on at least one of the configuration result or the state associated with the target configuration under the simulation view, so that the configuration simulation can be performed on the basis of the original configuration, and the simulation homology is ensured, that is, the data source used for the simulation verification of the target configuration under the simulation view is the same as the data source used for the configuration taking effect of the target configuration under the configuration view, and the reliability of the simulation verification result is improved.
[0060] In a possible implementation, the process of performing the simulation verification of the target configuration based on at least one of the configuration result or the state associated with the target configuration to obtain the simulation verification result can include updating at least one of the configuration result or the state associated with the target configuration according to the target configuration to obtain at least one of a new configuration result or a new state, and simulating and running at least one of the new configuration result or the new state in a business system of the network device based on the simulation view to obtain the simulation verification result.
[0061] In the embodiments of the present application, the simulation view is based on the simulation running of at least one of the new configuration result or the new state in the business system, which is consistent with the running logic of the actual running of at least one of the new configuration result or the new state in the business system based on the configuration view, except that the business result of the simulation running does not take effect on the actual running business, that is, does not have an impact on the actual running business. Exemplarily, under the simulation view, the updated at least one of the new configuration result or the new state is simulated and run in the business system of the network device through the execution of the running command line, and the business result of the business system after the simulation running is obtained, which is the simulation verification result.
[0062] Optionally, the manner of obtaining the configuration result and the state associated with the target configuration includes but is not limited to the following two means. Means one: after entering the simulation view, the configuration result and the state associated with the target configuration are copied from the database under the configuration view to the simulation view according to the target configuration. Means two: the data in the database under the configuration view is synchronized to the database under the simulation view in real time, so that the configuration result and the state associated with the target configuration can be directly obtained in the database under the simulation view. That is, the database under the configuration view and the database under the simulation view are dynamically synchronized, for example, the simulation plane generation system runs the mirror of the plane, and the container is used to store all the information of the mirror, that is, the database under the simulation view.
[0063] The configuration result and the state associated with the target configuration can include: the original configuration corresponding to the target configuration, which has been issued based on the configuration view, the associated configuration related to the original configuration, the state affected by the original configuration or the associated configuration, and the configuration result such as the name, the identifier, the attribute and the like corresponding to the original configuration or the associated configuration.
[0064] Exemplarily, taking the IP address configuration of the target configuration as the first interface as an example, the configuration result and the state associated with the IP address configuration can include: the IP address of at least one interface that has been configured under the configuration view. The process of the simulation verification of the target configuration based on the simulation view of the network device on the network device can include: copying the IP address of at least one interface that has been configured in the database under the configuration view to the database under the simulation view; under the simulation view, configuring a new IP address for the first interface based on the target configuration, updating the newly configured IP address to the copied IP address of the at least one interface that has been configured, to obtain the updated interface IP address.
[0065] For example, if the IP address of the first interface is not included in the already configured IP addresses, the IP address of the first interface is added to the already configured IP addresses, and the updated interface IP addresses include the newly configured IP address and the already configured IP addresses; or if the IP address of the first interface is included in the already configured IP addresses, the IP address of the first interface in the already configured IP addresses is replaced with the newly configured IP address, and the updated interface IP addresses include the newly configured IP address and the addresses in the already configured IP addresses that are not replaced. Then, the services corresponding to the interfaces are run in the service system according to the updated IP addresses, and the service results of the interfaces of the network device running under the updated IP addresses can be obtained. By comparing the service results running under the updated IP addresses with the service results running under the original IP addresses, the differences between the service results before and after the update of the interface IP addresses can be obtained, and then it can be analyzed whether the simulation verification result meets the expected result configured.
[0066] In another example, taking a target configuration as a routing policy as an example, one routing policy is composed of one or more nodes, each node includes multiple if-match clauses and apply clauses, the if-match clause is used to define the matching condition of the node, and the apply clause is used to define the operation performed for the matched route. The routing policy realizes the filtering of the matching condition through a filter, and the filter can include an address prefix filter, a group attribute filter or an extended group attribute filter, etc. Then, the configuration result and state associated with the target configuration can include the configuration content of the routing policy, which can include all node information associated with the routing policy, and all apply clauses, all if-match clauses and filters associated with all nodes, etc.
[0067] In a possible implementation, the process of simulating and verifying the to-be-configured routing policy on the network device based on the simulation view can include obtaining the configuration content of the to-be-configured routing policy under the simulation view, and simulating and running the configuration content of the to-be-configured routing policy in the service system under the simulation view to obtain a simulation verification result. Optionally, the process of obtaining the configuration content of the to-be-configured routing policy can be that the configuration content of the already configured routing policy under the configuration view is called, and the called configuration content of the already configured routing policy under the configuration view is updated according to the changed configuration content of the to-be-configured routing policy compared with the original routing policy, to obtain the configuration content of the to-be-configured routing policy.
[0068] In the embodiment of the present application, it is assumed that the configuration content of the original route policy configured under the configuration view is shown in Table 1. That is, the name of the original route policy is aa (i.e., route-policy aa), the route policy aa includes node 1, node 2 and node 3. Taking node 1 as an example, permit indicates that the matching mode of node 1 in the route policy aa is to allow, node 1 includes an if-match sub-clause and an apply sub-clause, i.e., if-match prefix pf4 and apply community 1 delete, which represents that if the route prefix matches the address configured in the prefix filter pf4, the operation of deleting the route community attribute 1 is performed. Wherein, the address 1.1.1.1 32 configured in the prefix filter pf4.
[0069] Table 1
[0070] Under the configuration view of the network device, the simulate route-policy command line is executed to enter the simulation view. The simulation view can issue an alarm to prompt the operation and maintenance personnel to continue the simulation when the operation and maintenance personnel confirms to continue. For example, the alarm information is that the route policy in the simulation view does not take effect in the configuration view, the policy configuration in the simulation view occupies the policy specification in the configuration view, whether to continue? (Warning: The policy in the simulation view does not take effect in the system view. The policy configuration in the simulation view occupies the policy specification in the system view. Continue?). The operation and maintenance personnel can execute the yes command to continue the simulation.
[0071] Exemplarily, the changed configuration content of the route policy to be configured under the simulation view compared with the original route policy aa is shown in Table 2. Wherein, the changed operation in the changed configuration content of the original route policy includes adding a new node 4 (i.e., route-policy aa permit node 4) and the matching condition of node 4 (i.e., if-match cost 1), modifying the matching mode of node 1 to deny (i.e., route-policy aa deny node 1), and deleting the original node 2 (i.e., undo route-policy aa permit node 2).
[0072] Table 2
[0073] Based on the configuration content of the original routing policy aa shown in Table 1 and the changed configuration content shown in Table 2, the configuration content of the to-be-configured routing policy aa can be as shown in Table 3.
[0074] Table 3
[0075] Exemplarily, when the to-be-configured routing policy command line is executed under the simulation view, it can be determined that the name of the to-be-configured routing policy is aa. In the simulation verification process, the configuration content of the original routing policy aa configured under the configuration view can be directly called, for example, the configuration content associated with the original routing policy aa configured by the network device is copied to the simulation view by an automatic copying manner, so as to ensure that the to-be-configured routing policy aa under the simulation view is homologous to the original routing policy aa configured under the configuration view. Therefore, the configuration content of the routing policy aa under the simulation view is obtained on the basis of the configuration content of the routing policy aa configured under the configuration view, so as to ensure that the simulation verification result under the simulation view is consistent with the configuration effective result under the configuration view, and improve the accuracy of the simulation verification result.
[0076] In the process of copying the configuration content of the original routing policy aa, a new index ID of the to-be-configured routing policy aa can be generated under the simulation view based on the routing policy name, which is used to distinguish whether it is the simulation view or the configuration view, and is stored in the new routing policy db corresponding to the to-be-configured routing policy aa under the simulation view. The configuration content of the to-be-configured routing policy aa is also stored in the new routing policy db, so that the configuration content of the to-be-configured routing policy aa corresponds to the new index ID. For example, the to-be-configured routing policy aa is stored in the routing policy db under the simulation view, the name of the routing policy aa is aa, which is the same as the name of the policy under the original configuration view, and a new index ID needs to be applied for the index ID of the routing policy aa, and the original index ID in the routing policy db under the configuration view is no longer used. Therefore, the routing policy db under the simulation view and the routing policy db under the configuration view are distinguished by the difference between the original index ID and the new index ID stored in the routing policy db, so as to ensure that the routing policy db under the simulation view is isolated from the routing policy db under the original configuration view.
[0077] That is, in the routing policy db under the configuration view, the original routing policy aa corresponds to the original index ID, and in the routing policy db under the simulation view, the routing policy aa to be configured corresponds to a new index ID, which is different from the original index ID. Optionally, the new index ID can be generated after the copying of the configuration content of the original routing policy aa is completed, or can be generated when the copying of the configuration content of the original routing policy aa is started. The embodiment of the present application does not limit the order of generating the new index ID and copying the configuration content of the original routing policy aa. Regardless of the order, after the copying process of the configuration content of the original routing policy aa is completed, the copied configuration content of the original routing policy aa is stored in the configuration content of the routing policy aa to be configured in the routing policy db under the simulation view, and corresponds to the generated new index ID. In the subsequent copying process, whether the configuration content of the routing policy aa is copied can be determined by determining whether the new index ID of the configuration content of the routing policy aa is included in the routing policy db under the simulation view.
[0078] In the embodiment of the present application, the copying manner of the configuration content of the original routing policy aa includes but is not limited to the following two manners, and different copying manners make the manner of obtaining the configuration content of the routing policy aa to be configured different.
[0079] Manner one: directly copy the configuration content of the original routing policy aa under the configuration view to the simulation view; after the copying is completed, in the simulation view, update the copied configuration content of the original routing policy aa according to the changed configuration content of the routing policy aa to be configured compared with the original routing policy aa, to obtain the configuration content of the routing policy aa to be configured.
[0080] In the second mode, in the process of copying the configuration content of the original routing policy aa under the configuration view, the changed configuration content of the routing policy aa to be configured compared with the original routing policy aa is updated, that is, the copying and updating are performed simultaneously, so that the configuration content of the routing policy aa to be configured can be quickly obtained after the copying is completed. Optionally, for a first node in the nodes of the original routing policy aa which coincides with a node in the changed configuration content, in the process of copying the configuration content of the first node in the original routing policy aa, the configuration content of the copied first node is merged with the configuration content of the first node in the changed configuration content, and the configuration content of the first node after the merging is stored in the routing policy db under the simulation view; for a second node in the nodes of the original routing policy aa which does not coincide with a node in the changed configuration content, the configuration content of the second node in the original routing policy aa is directly copied and stored in the routing policy db under the simulation view. Further, for a third node in the nodes of the changed configuration content which does not coincide with a node in the original routing policy aa, the configuration content of the third node is created and stored in the routing policy db under the simulation view based on the changed configuration content. Therefore, the configuration content of the routing policy aa stored in the routing policy db under the simulation view is the configuration content of the routing policy aa to be configured.
[0081] In summary, after obtaining the configuration content of the routing policy aa to be configured, the configuration content of the routing policy aa to be configured is simulated. Optionally, under the simulation view, all routes included in the network device are simulated and run in the routing system of the network device according to the configuration content of the routing policy aa to be configured by executing a simulation command line, and the routing result of the simulation running is obtained. For example, the configuration content of the routing policy aa to be configured is stored in the routing policy db under the simulation view and corresponds to a new index ID; after the simulation command line for simulating the routing policy aa to be configured is executed, the index ID of the original routing policy aa of the routing system exit already configured on the network device is replaced with the new index ID of the routing policy aa to be configured, the routing result of all routes passing through the routing system is obtained, and then the new index ID of the routing system exit is replaced back to the index ID of the original routing policy aa.
[0082] The routing result of the simulation running does not affect the actual routing result of the network device, that is, the actual routing result of the network device is still the routing result of all routes actually running in the routing system according to the configuration content of the original routing policy aa. By comparing the routing result of the simulation running with the actual routing result of the network device, the difference between the routing results of the routing policy aa before and after the simulation configuration can be obtained, and then whether the simulation verification result meets the expected result of the configuration can be analyzed.
[0083] Next, for the convenience of understanding, taking the above mode two as an example, the copying process of the routing strategy is illustrated in combination with FIG. 3. First, the configuration command line is executed to determine whether the configuration command line indicates entering the configuration view or the simulation view. If it is to enter the configuration view, the configuration process under the original configuration view is performed. If it is to enter the simulation view, it is queried whether the routing strategy under the simulation view has been copied. If the routing strategy has been copied, the following merge copying process is performed. If the routing strategy under the simulation view has not been copied, it is queried whether the routing strategy is included in the configuration view.
[0084] The way of querying whether the routing strategy under the simulation view has been copied can be querying the routing strategy db under the simulation view according to the name of the routing strategy. If the new index ID corresponding to the routing strategy to be configured is included in the routing strategy db under the simulation view, it is determined that the routing strategy has been copied. If the new index ID corresponding to the routing strategy to be configured is not included in the routing strategy db under the simulation view, it is determined that the routing strategy has not been copied. Alternatively, the way of querying whether the routing strategy under the simulation view has been copied can be querying whether the configuration content in the routing strategy db under the configuration view is stored in the routing strategy db under the simulation view. If the configuration content in the routing strategy db under the configuration view is stored in the routing strategy db under the simulation view, it is determined that the routing strategy has been copied. If the configuration content in the routing strategy db under the configuration view is not stored in the routing strategy db under the simulation view, it is determined that the routing strategy has not been copied.
[0085] For the routing strategy under the simulation view which has not been copied, it is necessary to query whether the routing strategy is included in the configuration view. If the routing strategy is not included in the configuration view, the copying process is directly ended, that is, no copying is needed, and the routing strategy to be configured is directly created in the routing strategy db under the simulation view, for example, the name, index ID and configuration content of the routing strategy to be configured are stored. If the routing strategy is included in the configuration view, the total number of nodes after copying the routing strategy is calculated, for example, the total number of nodes is calculated according to the number of nodes which have been configured and the number of nodes to be configured. If the configuration operation of the node to be configured is addition, the total number of nodes is the sum of the number of nodes which have been configured and the number of nodes to be configured. If the configuration operation of the node to be configured is deletion, the total number of nodes is the difference between the number of nodes which have been configured and the number of nodes to be configured. It is determined whether the total number of nodes is over limit, for example, whether it exceeds the node total number limit of the configured routing strategy. If the total number of nodes is over limit, an error is reported and the simulation verification process is directly ended. If the total number of nodes is not over limit, a new index ID is assigned to the routing strategy to be configured in the routing strategy db under the simulation view based on the name of the routing strategy.
[0086] Then, for all nodes under the to-be-configured routing policy, it is judged whether each node under the to-be-configured routing policy exists in the already-configured routing policy under the configuration view. If the nodes under the to-be-configured routing policy include the nodes existing in the already-configured routing policy, a merge copy process is performed. If all the nodes under the to-be-configured routing policy do not exist in the already-configured routing policy, i.e., all the nodes under the to-be-configured routing policy are new nodes, a direct copy process is performed.
[0087] The direct copy process is: copying all apply clauses corresponding to all nodes under the already-configured routing policy under the configuration view to the new routing policy db, copying all filters referenced by the apply clauses in the routing policy, and generating a new index ID based on the filter name of the copied filter; copying all if-match clauses corresponding to the nodes under the routing policy to the new routing policy db, copying all filters referenced by the if-match clauses in the routing policy, and generating a new index ID based on the filter name of the copied filter. Optionally, the copied filter is a filter that supports modification under the simulation view.
[0088] The merge copy process is: analyzing the content of the simulation verification, i.e., the to-be-configured routing policy, finding the configuration content of the already-configured routing policy under the configuration view according to the policy name (for example, aa) of the to-be-configured routing policy, traversing the configuration content of the already-configured routing policy one by one and recording insertion into the new routing policy db, which is equivalent to copying all apply clauses and all if-match clauses under the nodes in the direct copy process. Optionally, when the configuration content of the already-configured routing policy and the configuration content of the to-be-configured routing policy belong to the same node, the configuration content of the routing policy under the configuration view and the configuration content of the to-be-configured routing policy are merged. For example, the configuration content of the routing policy under the configuration view and the configuration content of the to-be-configured routing policy are merged, or the configuration content of the routing policy under the configuration view is replaced by the configuration content of the to-be-configured routing policy.
[0089] In the copy process shown in FIG. 3, the configuration content of the routing policy is copied as a whole based on the routing policy db, that is, the configuration content of all nodes under the routing policy is copied, so that the entire configuration content of the routing policy under the configuration view can be copied through one copy, improving the copy efficiency. Alternatively, the nodes can also be copied one by one to make the copy process clearer and avoid missing nodes. For example, for each node in the original routing policy under the configuration view, it is sequentially determined whether it coincides with the node in the routing policy to be configured. If the node in the original routing policy coincides with the node in the routing policy to be configured, the configuration content of the node in the original routing policy under the configuration view is copied, and the configuration content of the node in the routing policy to be configured is merged, and the merged configuration content of the node is copied to the simulation view. If the node in the original routing policy does not coincide with the node in the routing policy to be configured, the configuration content of the node in the original routing policy under the configuration view is directly copied to the simulation view. After each node copy is completed, it is determined whether the copy of the configuration content of all nodes under the original routing policy is completed. If not, the next node that has not been copied is obtained, and it is determined whether the node coincides, and the corresponding copy process is performed according to whether it coincides, until all nodes of the original routing policy are copied.
[0090] In another example, taking the target configuration as a filter as an example, it is assumed that the configuration content of the original filter already configured under the configuration view is shown in Table 4. Among them, ip-prefix aa indicates that the prefix list with the name aa is used, index 10 indicates the index of the address rule configured in the prefix list, and permit 1.1.1.1 32 indicates that the route with the address 1.1.1.1 / 32 is allowed to pass.
[0091] Table 4
[0092] Under the configuration view of the network device, the simulation view is entered by executing the simulate filter command line. Exemplarily, the changed configuration content of the filter to be configured under the simulation view compared with the original filter is shown in Table 5. Among them, the change operation in the changed configuration content of the filter to be configured compared with the original filter includes adding a new index 20 (i.e., ip ip-prefix aa index 20 permit 2.2.2.2 32), modifying the matching mode of index 30 to deny (i.e., ip ip-prefix aa index 30 deny 3.3.3.3 32), and deleting the original index 40 (i.e., undo ip ip-prefix aa index 40 permit 4.4.4.4 32).
[0093] Table 5
[0094] Similar to the simulation routing strategy, in the process of simulating the filter, when the prefix filter command line is executed under the simulation view, the configuration content of the filter configured under the configuration view can be directly copied to the simulation view by automatic copying. According to the configuration content of the filter configured under the configuration view (for example, the configuration content shown in Table 4) and the changed configuration content of the filter to be configured compared with the original filter (for example, the configuration content shown in Table 5), the configuration content of the filter to be configured is obtained, for example, the configuration content of the filter to be configured can be as shown in Table 6. After obtaining the configuration content of the filter to be configured, the configuration content of the filter to be configured is simulated and run in the business system based on the simulation view to obtain the simulation verification result.
[0095] Table 6
[0096] Step 203, in the case that the simulation verification result indicates that the target configuration passes the simulation verification, the target configuration is executed on the network device.
[0097] After obtaining the simulation verification result, whether the target configuration passes the simulation verification can be determined according to the simulation verification result, and whether the target configuration passes the simulation verification is presented in the simulation view. For example, in the case that the target configuration does not pass the simulation verification, an alarm information or an exception information is issued. Alternatively, the change information corresponding to the simulation verification result, that is, all information changed due to the issuance of the target configuration, can also be presented in the simulation view, and the reason why the target configuration does not pass the simulation verification can be analyzed through the change information.
[0098] In a possible implementation, after obtaining the simulation verification result, the simulation view can automatically present at least one of the result of whether the target configuration passes the simulation verification or the change information corresponding to the simulation verification result; or at least one of the result of whether the target configuration passes the simulation verification or the change information corresponding to the simulation verification result can be presented by executing a second command line, and the second command line is a command line for presenting the simulation result. Exemplarily, in the case that the simulation view is dynamically synchronized with the configuration view, since the database corresponding to the simulation view stores all the mirroring information, the change information can be directly obtained in the database after obtaining the simulation verification result. In the case that the simulation view is not dynamically synchronized with the configuration view, the relevant information can be copied from the database corresponding to the configuration view by executing the second command line, and then the change information is obtained according to the copied relevant information.
[0099] In a case where the target configuration is a routing policy, the change information includes at least one of a routing quantity change summary, changed routing details, and a comparison result of routing details filtered by a routing policy. The routing quantity change summary includes at least one of a routing quantity change statistic, an attribute quantity change statistic, an added routing quantity statistic, or a deleted routing quantity statistic.
[0100] Exemplarily, after obtaining the simulation verification result, the change information can be presented in one key and multiple levels. For a scenario of querying BGP public network support through internet protocol version 4 (IPv4) or internet protocol version 6 (IPv6) neighbor exit policy result statistical information, a command line for presenting the routing quantity change summary in one key can be as shown in Table 7. By executing display bgp routing-table peer{ <peeripv4addr> | <peeripv6addr>}route-policy-simulate <route-policy-name>The export statistics command line presents the result statistics of the route strategy. Optionally, the simulation view issues a warning (Warning: The current CPU usage of 40% is too high and command execution is risky. continue?) before presenting, to prompt the operation and maintenance personnel that the current 40% central processing unit (CPU) usage is too high under the simulation view, and the command execution is risky. Do you continue? Continue by executing the yes command.
[0101] Exemplarily, the presented route quantity change summary includes: the change times of the route after the route strategy is issued, that is, the change times of permit to deny is 10 (i.e. permit to deny: 10), the change times of deny to permit is 15 (i.e. deny to permit: 15), and the change times of attribute is 20 (i.e. attribute changed: 20).
[0102] Table 7
[0103] For the scenario of querying the result brief information of the IPv4 or IPv6 neighbor export strategy supported by the BGP public network, the command line for one-key presentation of the changed route details can be as shown in Table 8. Execute the display bgp routing-table peer{ <peeripv4addr> | <peeripv6addr>}route-policy-simulate <route-policy-name>The export command line presents the changed route details.
[0104] For example, the presented changed route details include: the total number of routes is 1000 (i.e. Total number of routes: 1000), the number of permitted routes in the original routes is 400, the number of denied routes is 600 (i.e. Original routes: permit: 400 deny: 600), the number of permitted routes in the simulated routes is 500, the number of denied routes is 500 (i.e. Simulated routes: permit: 500 deny: 500), the number of changes from permitted to denied in the simulated route changes is 100, the number of changes from denied to permitted in the simulated route changes is 100, and the number of attribute changes is 200.
[0105] Table 8
[0106] For the scenario of directly presenting the comparison result of the route details filtered by the new and old route policies through the prefix for the BGP public network support query, the command line for one-key presentation of the comparison result of the route details filtered by the route policy can be as shown in Table 9. For example, the route details filtered by the route policy can be presented by executing display bgp routing-table peer{ <peeripv4addr> | <peeripv6addr>}route-policy-simulate <route-policy-name>export { <ipv4-address> | <ipv6-address>} <mask-length>The command line presents the route detail information filtered by the route policy and the comparison result.
[0107] Exemplarily, the presented route detail information filtered by the route policy and the comparison result includes: the detailed information of the original route policy (i.e., the content shown under Before), and the detailed information of the to-be-configured route policy (i.e., the content shown under After). Among them, the changed route information is that the multi-exit discriminator (MED) metric value is changed from 0 to 100.
[0108] Table 9
[0109] Irrespective of whether the above information is presented, it can be determined according to the simulation verification result whether the target configuration passes the simulation verification. Optionally, the way of determining whether the target configuration passes the simulation verification according to the simulation verification result can be: obtaining an expected result of the target configuration, if the simulation verification result conforms to the expected result, it is determined that the target configuration passes the simulation verification, and if the simulation verification result does not conform to the expected result, it is determined that the target configuration does not pass the simulation verification. The expected result can be manually input into the network device by the operation and maintenance personnel, or can be inferred according to historical data by the network device. Alternatively, the change information corresponding to the simulation verification result can be presented first, and the operation and maintenance personnel can analyze the change information to manually determine whether the simulation verification result passes the simulation verification.
[0110] Therefore, whether the target configuration passes the simulation verification can be determined through the simulation verification result. In the case that the simulation verification result indicates that the target configuration does not pass the simulation verification, the target configuration is not executed on the network device, that is, the target configuration is not actually issued on the network device; in the case that the simulation verification result indicates that the target configuration passes the simulation verification, the target configuration is executed on the network device, that is, the target configuration is actually issued on the network device, so that the target configuration takes effect.
[0111] The way of executing the target configuration on the network device can include: based on the configuration view, the target configuration is configured to take effect on the network device. That is, it is necessary to switch back to the configuration view from the simulation view, and the way of switching back to the configuration view includes but is not limited to: in the case that the simulation verification result indicates that the target configuration passes the simulation verification, automatically switching back to the configuration view; or, switching back to the configuration view by executing a third command line, the third command line being a command line for entering the configuration view. Optionally, the view identifier indicating the configuration view is included in the third command line. The way of configuring the target configuration to take effect on the network device based on the configuration view can be that the operation and maintenance personnel manually configures based on the configuration view, or the target configuration is directly switched to the configuration view from the simulation view through the command line and copied to the configuration view.
[0112] Thus, by the steps 201-203, device-level configuration simulation verification can be achieved. FIG. 4 is a schematic diagram of a plane architecture of a device according to an embodiment of the present application. As can be seen, in the embodiment of the present application, the device can be divided into a running plane and a simulation plane. The running plane is a plane running under a configuration view, and the simulation plane is a plane running under a simulation view. The running plane is isolated from the simulation plane. Still taking the target configuration as a routing policy as an example, in the case of steady-state running, if a configuration modification is directly performed, that is, without simulation verification by the simulation plane, the configuration takes effect in real time, which leads to real-time change of the routing. If the routing is incorrect, problems can be caused, that is, the traffic is changed from normal to interrupted. After the simulation plane is added, the routing policy is pre-verified by the simulation view, so that the configuration simulation takes effect, and the change of the routing after the simulation takes effect can be viewed in real time. Thus, the change of the routing after the simulation takes effect can be modified in the running plane, so as to avoid incorrect routing. The configuration taking effect in the simulation plane does not affect the service of the running plane.
[0113] Referring to FIG. 5, FIG. 5 is a schematic diagram of a process of online pre-verification of a simulation plane according to an embodiment of the present application. For any network device in networking, first, the network device enters the simulation plane, simulates the original configuration, modifies the simulated original configuration, pre-verifies the modified configuration, and obtains a pre-verification result of the configuration. Thus, by constructing the simulation plane on the network device, the result change caused by the configuration change can be pre-verified. The simulation plane uses the system architecture of the device itself, can be isolated from the plane running the system, avoids affecting the existing service running, and can also realize that the simulation configuration is homologous to the system configuration, improves the accuracy of the simulation result, and ensures that incorrect configurations do not enter the network. Thus, by device-level simulation, online verification of a single device is realized, without the need for tools, networking, and offline import of the routing.
[0114] In summary, the method provided in the embodiments of the present application can pre-verify the target configuration on the network device based on the simulation view of the network device, so that the target configuration executed on the network device is verified by simulation, incorrect configurations are avoided, and network problems caused by incorrect configurations are avoided. The device-level configuration simulation verification does not need to be managed by a device, does not need to manually import dynamic routing, and can avoid errors in the process of the controller issuing configurations to the network device. In addition, because the simulation view is isolated from the configuration view, the simulation verification process does not affect the actual running service of the network device, and the running service in the simulation verification process is safe. The simulation verification process is homologous to the actual configuration taking effect process by copying or synchronizing, which improves the accuracy of the simulation verification result. The changed information corresponding to the simulation verification result is presented in multiple levels, which is helpful for the analysis and judgment of the operation and maintenance personnel, and improves the accuracy of the judgment of the simulation verification result.
[0115] The network configuration method of the embodiment of the present application is introduced above. Corresponding to the above method, the embodiment of the present application further provides a network configuration device. FIG. 6 is a structural schematic diagram of a network configuration device provided by the embodiment of the present application. The device is applied to a network device, which is the network device shown in FIG. 2. Based on a plurality of modules shown in FIG. 6, the network configuration device shown in FIG. 6 can perform all or part of the operations performed by the network device. It should be understood that the device can include more additional modules than the shown modules or omit part of the shown modules, and the embodiment of the present application does not limit this. As shown in FIG. 6, the device includes:
[0116] The obtaining module 601 is configured to obtain a target configuration to be configured on the network device.
[0117] The simulation module 602 is configured to perform simulation verification on the target configuration on the network device based on a simulation view of the network device, to obtain a simulation verification result, and data between the simulation view and the configuration view of the network device is isolated from each other.
[0118] The execution module 603 is configured to execute the target configuration on the network device in a case where the simulation verification result indicates that the target configuration passes the simulation verification.
[0119] In a possible implementation, the execution module 603 is further configured to enter the simulation view by executing a first command line under the configuration view.
[0120] In a possible implementation, the device further includes a copying module configured to copy at least one of a configuration result or a state associated with the target configuration in a database corresponding to the configuration view to the simulation view.
[0121] In a possible implementation, the configuration in the database corresponding to the configuration view is synchronized with the configuration in a database corresponding to the simulation view.
[0122] In a possible implementation, the device further includes a presentation module configured to present, in the simulation view, a result of whether the target configuration passes the simulation verification.
[0123] In a possible implementation, the presentation module is further configured to present, in the simulation view, change information corresponding to the simulation verification result.
[0124] In a possible implementation, the target configuration is a routing policy, and the change information includes at least one of a routing quantity change summary, a changed routing detail, or a comparison result of filtered routing detailed information of the routing policy; and the routing quantity change summary includes at least one of a routing quantity change statistical result, an attribute quantity change statistical result, an added routing quantity statistical result, or a deleted routing quantity statistical result. In this way, multi-level presentation of change information under the routing policy is implemented.
[0125] In a possible implementation, the execution module 603 is configured to perform configuration validation on the target configuration based on the configuration view on the network device.
[0126] It should be understood that the apparatus provided by the above-described Figure 6 is only exemplified by the above-described division of the functional modules when implementing the functions thereof, and in actual application, the above-described functions can be completed by different functional modules according to the needs, that is, the internal structure of the device is divided into different functional modules to complete all or part of the functions described above. In addition, the apparatus and method embodiments provided by the above-described embodiments belong to the same concept, and the specific implementation process and beneficial effects are described in the method embodiments, which will not be described here.
[0127] Referring to Figure 7, Figure 7 shows a structural schematic diagram of a network device 2000 provided by an example embodiment of the present application. The network device 2000 shown in Figure 7 is configured to perform the operations involved in the network configuration method shown in Figure 2 described above. The network device 2000 is, for example, a switch, a router, etc., and the network device 2000 can be implemented by a general bus architecture.
[0128] As shown in Figure 7, the network device 2000 includes at least one processor 2001, a memory 2003, and at least one communication interface 2004.
[0129] The processor 2001 is, for example, a general-purpose central processing unit (CPU), a digital signal processor (DSP), a network processer (NP), a graphics processing unit (GPU), a neural-network processing units (NPU), a data processing unit (DPU), a microprocessor, or one or more integrated circuits used to implement a design described in the present application. For example, the processor 2001 includes an application-specific integrated circuit (ASIC), a programmable logic device (PLD) or other programmable logic device, transistor logic, a hardware component, or any combination thereof. The PLD is, for example, a complex programmable logic device (CPLD), a field-programmable gate array (FPGA), a generic array logic (GAL), or any combination thereof. It can implement or execute various logical blocks, modules, and circuits described in combination with the disclosure of the embodiments of the present application. The processor can also be a combination of computing functions, such as a combination of one or more microprocessors, a combination of a DSP and a microprocessor, and the like.
[0130] Optionally, the network device 2000 also includes a bus. The bus is used to transmit information between the components of the network device 2000. The bus can be a peripheral component interconnect (PCI) bus or an extended industry standard architecture (EISA) bus, etc. The bus can be divided into an address bus, a data bus, a control bus, etc. For ease of representation, only one line is shown in FIG. 7, but it does not mean that there is only one bus or only one type of bus.
[0131] The memory 2003 is, for example, a read-only memory (ROM) or other type of static storage device that can store static information and instructions that are not expected to change, a random access memory (RAM), or other type of dynamic storage device that can store information and instructions that are expected to change, a electrically erasable programmable read-only memory (EEPROM), a compact disc read-only memory (CD-ROM), or other optical disk storage, a magnetic disk storage or other magnetic storage devices, or any other medium capable of storing instructions or data that is accessible to the computer, but is not limited thereto. The memory 2003 may, for example, exist independently of the processor 2001 and be connected to the processor 2001 via a bus. The memory 2003 may, for example, also be integrated with the processor 2001.
[0132] The communication interface 2004 uses any transceiver-like mechanism for communicating with other devices or a communication network, which can be an Ethernet, a radio access network (RAN), a wireless local area networks (WLAN), or the like. The communication interface 2004 can include a wired communication interface and / or a wireless communication interface. Specifically, the communication interface 2004 can be an Ethernet interface, a Fast Ethernet (FE) interface, a Gigabit Ethernet (GE) interface, an Asynchronous Transfer Mode (ATM) interface, a wireless local area networks (WLAN) interface, a cellular network communication interface, or a combination thereof. The Ethernet interface can be an optical interface, an electrical interface, or a combination thereof. In the embodiments of the present application, the communication interface 2004 can be used for the network device 2000 to communicate with other devices.
[0133] In particular implementations, as one example, the processor 2001 can include one or more CPUs, such as CPU0 and CPU1 shown in FIG. 7. Each of these processors can be a single-core CPU or a multi-core CPU. A processor, as used herein, can refer to one or more devices, circuits, and / or processing cores for processing data, such as computer program instructions.
[0134] In particular implementations, as one example, the network device 2000 can include multiple processors, such as the processor 2001 and the processor 2005 shown in FIG. 7. Each of these processors can be a single-core CPU or a multi-core CPU. A processor, as used herein, can refer to one or more devices, circuits, and / or processing cores for processing data, such as computer program instructions.
[0135] In particular implementations, as one example, the network device 2000 can also include an output device and an input device. The output device is in communication with the processor 2001 and can display information in various ways. For example, the output device can be a liquid crystal display (LCD), a light emitting diode (LED) display device, a cathode ray tube (CRT) display device, a projector, or the like. The input device is in communication with the processor 2001 and can receive user input in various ways. For example, the input device can be a mouse, a keyboard, a touch screen device, a sensor device, or the like.
[0136] In some embodiments, the memory 2003 is used to store program code 2010 for implementing the solutions of the present application, and the processor 2001 can execute the program code 2010 stored in the memory 2003. That is, the network device 2000 can implement the network configuration method provided by the method embodiments through the processor 2001 and the program code 2010 in the memory 2003. The program code 2010 can include one or more software modules. Alternatively, the processor 2001 itself can also store program codes or instructions for implementing the solutions of the present application.
[0137] In particular embodiments, the network device 2000 of the embodiments of the present application can correspond to the network device in the above-mentioned various method embodiments, and the processor 2001 in the network device 2000 reads the instructions in the memory 2003, so that the network device 2000 shown in FIG. 7 can perform all or part of the operations performed by the network device.
[0138] Specifically, the processor 2001 is configured to obtain a target configuration to be configured on a network device; perform simulation verification on the target configuration on the network device based on a simulation view of the network device, to obtain a simulation verification result, data between the simulation view and a configuration view of the network device being isolated from each other; and perform the target configuration on the network device in a case where the simulation verification result indicates that the target configuration passes the simulation verification.
[0139] Other optional embodiments will not be described herein for brevity.
[0140] The network device 2000 can also correspond to the network configuration apparatus shown in FIG. 6. Each functional module in the network configuration apparatus is implemented by software of the network device 2000. In other words, the functional modules included in the network configuration apparatus are generated by the processor 2001 of the network device 2000 after reading the program code 2010 stored in the memory 2003.
[0141] The steps of the network configuration method shown in FIG. 2 are completed by the integrated logic circuit of hardware or the instructions in the form of software in the processor of the network device 2000. The steps of the method disclosed in the embodiments of the present application can be directly embodied as being completed by a hardware processor, or completed by a combination of hardware and software modules in the processor. The software module can be located in a storage medium such as random access memory, flash memory, read-only memory, programmable read-only memory, electrically erasable programmable memory, register, or other mature storage media in the field. The storage medium is located in the memory, and the processor reads information in the memory and combines hardware to complete the steps of the above method. To avoid repetition, the details will not be described here.
[0142] Referring to FIG. 8, FIG. 8 shows a structural schematic diagram of a network device 2100 according to another example embodiment of the present application. The network device 2100 shown in FIG. 8 is configured to perform all or part of the operations involved in the network configuration method shown in FIG. 2. The network device 2100 can be a switch, a router, or the like, and can be implemented by a general bus architecture.
[0143] As shown in FIG. 8, the network device 2100 includes a main control board 2110 and an interface board 2130.
[0144] The main control board is also called a main processing unit (MPU) or a route processor card. The main control board 2110 is configured to control and manage various components in the network device 2100, including route calculation, device management, device maintenance, and protocol processing functions. The main control board 2110 includes a central processing unit 2111 and a memory 2112.
[0145] The interface board 2130 is also called a line processing unit (LPU), a line card, or a service board. The interface board 2130 is configured to provide various service interfaces and implement forwarding of data packets. The service interfaces include, but are not limited to, an Ethernet interface, a POS (Packet over SONET / SDH) interface, and the like. The Ethernet interface is, for example, a Flexible Ethernet Client (FlexE Client). The interface board 2130 includes a central processor 2131, a network processor 2132, a forwarding table entry storage 2134, and a physical interface card (PIC) 2133.
[0146] The central processor 2131 on the interface board 2130 is configured to control and manage the interface board 2130 and communicate with the central processor 2111 on the master board 2110.
[0147] The network processor 2132 is configured to implement forwarding processing of a packet. The network processor 2132 can be in the form of a forwarding chip. The forwarding chip can be a network processor (NP). In some embodiments, the forwarding chip can be implemented by an application-specific integrated circuit (ASIC) or a field programmable gate array (FPGA). Specifically, the network processor 2132 is configured to forward a received packet based on a forwarding table stored in the forwarding table entry storage 2134. If a destination address of the packet is an address of the network device 2100, the packet is sent to a CPU (such as the central processor 2131) for processing. If the destination address of the packet is not the address of the network device 2100, the next hop and an out interface corresponding to the destination address are found from the forwarding table based on the destination address, and the packet is forwarded to the out interface corresponding to the destination address. The processing of an uplink packet can include processing of an in interface of the packet and forwarding table lookup. The processing of a downlink packet can include forwarding table lookup, and the like. In some embodiments, the central processor can also perform the function of the forwarding chip, such as implementing software forwarding based on a general-purpose CPU, so that the interface board does not need a forwarding chip.
[0148] The physical interface card 2133 is used to implement the interfacing function of the physical layer, and the original traffic enters the interface board 2130 through the physical interface card 2133, and the processed packet is sent out from the physical interface card 2133. The physical interface card 2133 is also called a daughter card, which can be installed on the interface board 2130 and is responsible for converting the optical and electrical signals into packets and forwarding the packets to the network processor 2132 for processing after the packets are checked for legitimacy. In some embodiments, the central processor 2131 can also perform the functions of the network processor 2132, such as implementing software forwarding based on a general-purpose CPU, so that the network processor 2132 is not needed in the physical interface card 2133.
[0149] Optionally, the network device 2100 includes multiple interface boards, for example, the network device 2100 further includes an interface board 2140, which includes a central processor 2141, a network processor 2142, a forwarding table item storage 2144, and a physical interface card 2143. The functions and implementation manners of the components in the interface board 2140 are the same as or similar to those of the interface board 2130, and are not described here again.
[0150] Optionally, the network device 2100 further includes a switching network board 2120. The switching network board 2120 can also be called a switch fabric unit (SFU). In the case that the network device 2100 has multiple interface boards, the switching network board 2120 is used to complete the data exchange between the interface boards. For example, the interface board 2130 and the interface board 2140 can communicate through the switching network board 2120.
[0151] The main control board 2110 is coupled with the interface boards. For example, the main control board 2110, the interface board 2130, and the interface board 2140, and the switching network board 2120 are connected through a system bus and a system backboard to realize intercommunication. In a possible implementation manner, an inter-process communication (IPC) channel is established between the main control board 2110 and the interface board 2130 and the interface board 2140, and the main control board 2110 and the interface board 2130 and the interface board 2140 communicate through the IPC channel.
[0152] In logic, the network device 2100 includes a control plane and a forwarding plane, the control plane includes the main control board 2110 and the central processor 2111, and the forwarding plane includes various components performing forwarding, such as the forwarding table item memory 2134, the physical interface card 2133, and the network processor 2132. The control plane performs functions such as generating a forwarding table, processing signaling and protocol packets, configuring and maintaining the state of the network device, and the like. The control plane generates a forwarding table and delivers the forwarding table to the forwarding plane. In the forwarding plane, the network processor 2132 performs table lookup and forwarding on the basis of the forwarding table delivered by the control plane. The forwarding table delivered by the control plane can be stored in the forwarding table item memory 2134. In some embodiments, the control plane and the forwarding plane can be completely separated and not on the same network device.
[0153] It is worth noting that the main control board can have one or more, and when there are multiple, it can include a main main control board and a backup main control board. The interface board can have one or more, and the stronger the data processing capability of the network device, the more interface boards are provided. The physical interface card on the interface board can also have one or more. The switching network board can have none or one or more, and when there are multiple, they can jointly implement load sharing and redundancy backup. Under the centralized forwarding architecture, the network device can not need a switching network board, and the interface board assumes the processing function of the entire system of service data. Under the distributed forwarding architecture, the network device can have at least one switching network board, and data exchange between multiple interface boards is implemented through the switching network board to provide large-capacity data exchange and processing capability. Therefore, the data access and processing capability of the network device of the distributed architecture is greater than that of the network device of the centralized architecture. Alternatively, the network device can also have only one board card, i.e., the functions of the interface board and the main control board are integrated on the one board card, at which time the central processor on the interface board and the central processor on the main control board can be combined into one central processor to perform the functions of the two superimposed, and the data exchange and processing capability of such a network device is relatively low (for example, low-end switches or routers and the like). Which architecture to use depends on the specific networking deployment scenario, which is not limited here.
[0154] In specific embodiments, the network device 2100 corresponds to the network configuration apparatus shown in FIG. 6 described above. In some embodiments, the acquisition module 601, the simulation module 602, and the execution module 603 in the network configuration apparatus shown in FIG. 6 correspond to the physical interface card 2133 in the network device 2100.
[0155] It is to be understood that the above-described processor can be a CPU, and can also be other general-purpose processors, digital signal processors (DSP), application specific integrated circuits (ASIC), field-programmable gate arrays (FPGA) or other programmable logic devices, discrete gates or transistor logic components, discrete hardware components, etc. The general-purpose processor can be a microprocessor or any conventional processor, etc. It is to be noted that the processor can be an advanced RISC machines (ARM) architecture processor.
[0156] Further, in an optional embodiment, the above-described memory can include a read-only memory and a random access memory, and provide instructions and data to the processor. The memory can also include a non-volatile random access memory. For example, the memory can also store device type information.
[0157] The memory can be a volatile memory or a non-volatile memory, or can include both volatile and non-volatile memories. Among them, the non-volatile memory can be a read-only memory (ROM), a programmable read-only memory (PROM), an erasable programmable read-only memory (EPROM), an electrically EPROM (EEPROM) or a flash memory. The volatile memory can be a random access memory (RAM) used as an external cache. By way of example but not limitation, many forms of RAM are available. For example, static random access memory (SRAM), dynamic random access memory (DRAM), synchronous DRAM (SDRAM), double data rate SDRAM (DDR SDRAM), enhanced SDRAM (ESDRAM), synchlink DRAM (SLDRAM) and direct rambus RAM (DR RAM).
[0158] The embodiment of the present application further provides a computer readable storage medium, at least one instruction is stored in the storage medium, the instruction is loaded and executed by a processor, so that the computer implements the network configuration method of any one of the above.
[0159] The embodiment of the present application further provides a computer program (product), when the computer program is executed by a computer, can make the processor or the computer execute the corresponding steps and / or processes in the above method embodiment.
[0160] The embodiment of the present application further provides a chip, comprising a processor, for calling and running the instruction stored in the memory, so that the communication device installed with the chip executes the network configuration method of any one of the above.
[0161] The embodiment of the present application further provides another chip, comprising: an input interface, an output interface, a processor and a memory, the input interface, the output interface, the processor and the memory are connected through internal connection paths, the processor is used for executing the code in the memory, when the code is executed, the processor is used for executing the network configuration method of any one of the above.
[0162] In the above embodiment, all or part of it can be realized by software, hardware, firmware or any combination thereof. When using software to realize, it can be realized in the form of computer program product in whole or in part. The computer program product includes one or more computer instructions. When loading and executing the computer program instructions on the computer, the flow or function according to the present application is generated in whole or in part. The computer can be a general-purpose computer, a special-purpose computer, a computer network or other programmable device. The computer instructions can be stored in a computer readable storage medium or transferred from one computer readable storage medium to another computer readable storage medium, for example, the computer instructions can be transmitted from one website site, computer, server or data center to another website site, computer, server or data center through wired (such as coaxial cable, optical fiber, digital subscriber line) or wireless (such as infrared, wireless, microwave, etc.). The computer readable storage medium can be any available medium that can be accessed by a computer or a data storage device such as a server, data center, etc. integrated with one or more available media. The available medium can be magnetic medium (for example, floppy disk, hard disk, magnetic tape), optical medium (for example, DVD) or semiconductor medium (for example, solid state disk) and the like.
[0163] Those skilled in the art can appreciate that, in combination with the method steps and modules described in the embodiments disclosed herein, all or part of the steps can be implemented by software, hardware, firmware or any combination thereof. In order to clearly illustrate the interchangeability of hardware and software, the steps and components of the embodiments have been described in the above description in general terms. Whether the functions are implemented in hardware or software depends on the specific application and design constraints of the technical solution. Those skilled in the art can use different methods to implement the described functions for each specific application, but such implementation should not be considered beyond the scope of the present application.
[0164] Those skilled in the art can understand that all or part of the steps of the above-mentioned embodiments can be completed by hardware, or by programs instructing related hardware, which can be stored in a computer-readable storage medium. The storage medium mentioned above can be a read-only memory, a magnetic disk or an optical disk, etc.
[0165] When implemented using software, it can be implemented in whole or in part in the form of a computer program product. The computer program product includes one or more computer program instructions. As an example, the method of the embodiments of the present application can be described in the context of machine-executable instructions, such as program modules that are executed by devices included in the target real or virtual processor. Generally, program modules include routines, programs, libraries, objects, classes, components, data structures, etc., which perform specific tasks or implement specific abstract data structures. In various embodiments, the functions of the program modules can be combined or divided among the described program modules. Machine-executable instructions for program modules can be executed within a local or distributed device. In a distributed device, program modules can be located in both local and remote storage media.
[0166] The computer program code for implementing the method of the embodiments of the present application can be written in one or more programming languages. These computer program codes can be provided to the processor of a general-purpose computer, a special-purpose computer or other programmable data processing apparatus, so that when the computer program codes are executed by the computer or other programmable data processing apparatus, the functions / operations specified in the flowcharts and / or block diagrams are implemented. The program codes can be executed entirely on the computer, partially on the computer, as a separate software package, partially on the computer and partially on a remote computer, or entirely on a remote computer or server.
[0167] In the context of the embodiments of the present application, computer program codes or related data can be carried by any appropriate carrier to enable the device, apparatus or processor to perform the various processes and operations described above. Examples of the carrier include a signal, a computer readable medium, etc.
[0168] Examples of a signal can include electrical, optical, radio frequency, sound, or other forms of propagated signals, such as carrier waves, infrared signals, etc.
[0169] A machine-readable medium can be any tangible medium that contains or stores the program for use by or in connection with an instruction execution system, apparatus, or device. The machine-readable medium can be a machine-readable signal medium or a machine-readable storage medium. A machine-readable medium can include but not limited to an electronic, magnetic, optical, electromagnetic, infrared, or semiconductor system, apparatus, or device, or any suitable combination of the foregoing. More specific examples of the machine-readable storage medium include an electrical connection having one or more wires, a portable computer diskette, a hard disk, a random access memory (RAM), a read-only memory (ROM), an erasable programmable read-only memory (EPROM or Flash memory), an optical fiber, a portable compact disc read-only memory (CD-ROM), and a digital versatile disc (DVD), or any suitable combination of the foregoing.
[0170] It should be clearly understood that, for the sake of brevity and clarity, detailed working processes of the system, device and module described above can refer to the corresponding processes in the foregoing method embodiments, and will not be repeated here.
[0171] In several embodiments provided in the present application, it should be understood that the disclosed system, device and method can be implemented in other ways. For example, the device embodiments described above are merely illustrative, for example, the division of the module is only a logical function division, and actual implementation can have another division manner, for example, a plurality of modules or components can be combined or integrated into another system, or some features can be ignored or not executed. In addition, the coupling or direct coupling or communication connection between the displayed or discussed each other can be indirect coupling or communication connection through some interfaces, devices or modules, and can also be electrical, mechanical or other form of connection.
[0172] The module described as a separate component can or can not be physically separated, and the component displayed as a module can or can not be a physical module, that is, it can be located in one place, or can be distributed to a plurality of network modules. Part or all of the modules can be selected according to actual needs to achieve the purpose of the embodiments of the present application.
[0173] In addition, each functional module in each embodiment of the present application can be integrated into a processing module, or each module can exist physically, or two or more modules can be integrated into one module. The integrated module can be realized in the form of hardware or in the form of a software functional module.
[0174] The integrated module, if implemented in the form of a software function module and sold or used as an independent product, can be stored in a computer readable storage medium. Based on such understanding, the technical solutions of the present application essentially or the part that contributes to the prior art, or the whole or part of the technical solutions can be embodied in the form of a software product. The computer software product is stored in a storage medium and includes a plurality of instructions for causing a computer device (which can be a personal computer, a server, or a network device, etc.) to execute all or part of the steps of the methods in the various embodiments of the present application. The aforementioned storage medium includes: a U disk, a mobile hard disk, a read-only memory (ROM), a random access memory (RAM), a magnetic disk or an optical disk, and various media that can store program codes.
[0175] The terms "first", "second", and the like in the present application are used to distinguish between items or similar items having substantially the same function and action. It should be understood that there is no logical or chronological dependency between "first", "second", "nth", and that the number and execution order are not limited. It should also be understood that although the following description uses the terms first, second, and the like to describe various elements, these elements should not be limited by the terms. These terms are only used to distinguish one element from another. For example, without departing from the scope of various examples, a first image can be referred to as a second image, and similarly, a second image can be referred to as a first image. The first image and the second image can both be images, and in some cases, can be separate and distinct images.
[0176] It should also be understood that in various embodiments of the present application, the size of the serial number of each process does not mean the order of execution, and the execution order of each process should be determined by its function and inherent logic, and should not constitute any limitation on the implementation process of the embodiments of the present application.
[0177] The term "at least one" in the present application means one or more, and the term "a plurality of" in the present application means two or more, for example, a plurality of second messages means two or more second messages. The terms "system" and "network" are often used interchangeably in this document.
[0178] It should be understood that the terms used in the description of various described examples herein are only for the purpose of describing specific examples and are not intended to be limiting. As used in the description of various described examples and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise.
[0179] It should also be understood that, as used in the specification, the term "and / or" includes any and all combinations of one or more of the associated listed items. The term "and / or" is a descriptive term of association relating to associated objects, which means that there can be three relationships, for example, A and / or B, which can mean that A exists alone, A and B exist together, and B exists alone. In addition, the character " / " in the present application generally represents an "or" relationship between the associated objects before and after it.
[0180] It should also be understood that the terms "comprises", "comprising", "includes", "including", "comprise", and / or "comprising", when used in this specification, specify the presence of stated features, integers, steps, operations, elements, and / or components, but do not preclude the presence or addition of one or more other features, integers, steps, operations, elements, components, and / or groups thereof.
[0181] It should also be understood that the terms "if" and "when" can be interpreted to mean "upon" or "in response to a determination" or "in response to detecting". Similarly, the phrase "if determined" or "if detecting [a stated condition or event]" can be interpreted to mean "upon determining" or "in response to determining" or "upon detecting [a stated condition or event]" or "in response to detecting [a stated condition or event]", depending on the context.
[0182] It should be understood that a determination of B according to A does not mean that B is determined only according to A, but B can also be determined according to A and / or other information.
[0183] It should also be understood that the "one embodiment", "an embodiment", "one possible implementation", mentioned throughout the specification, means that the specific feature, structure, or characteristic related to the embodiment or implementation is included in at least one embodiment of the present application. Therefore, "in one embodiment" or "in an embodiment", "one possible implementation" appearing throughout the specification does not necessarily refer to the same embodiment. In addition, these specific features, structures, or characteristics can be combined in any suitable manner in one or more embodiments.
[0184] The above description is only an optional embodiment of the present application and is not intended to limit the present application. Any modification, equivalent replacement, improvement, etc. made within the principles of the present application shall be included in the protection scope of the present application. < / ipv6-address> < / ipv4-address> < / peeripv4addr> < / peeripv4addr> < / peeripv4addr>
Claims
1. A network configuration method characterized by, The method comprises: obtaining a target configuration to be configured on a network device; based on a simulation view of the network device, simulating and verifying the target configuration on the network device to obtain a simulation verification result, data between the simulation view and a configuration view of the network device being isolated from each other; in a case where the simulation verification result indicates that the target configuration passes the simulation verification, executing the target configuration on the network device.
2. The method of claim 1, wherein, Before the simulation verification of the target configuration on the network device based on the simulation view of the network device, the method further comprises: under the configuration view, entering the simulation view by executing a first command line.
3. The method according to claim 1 or 2, characterized in that, Before the simulation verification of the target configuration on the network device based on the simulation view of the network device, the method further comprises: copying at least one of a configuration result or a state associated with the target configuration in a database corresponding to the configuration view into the simulation view.
4. The method of claim 1, wherein, The database corresponding to the configuration view is synchronized with a database corresponding to the simulation view.
5. The method according to any of claims 1 to 4, characterized in that, After the simulation verification result is obtained, the method further comprises: presenting, in the simulation view, a result of whether the target configuration passes the simulation verification.
6. The method according to any one of claims 1 to 5, characterized in that, After the simulation verification result is obtained, the method further comprises: presenting, in the simulation view, change information corresponding to the simulation verification result.
7. The method of claim 6, wherein, The target configuration is a routing policy, and the change information comprises at least one of a routing quantity change summary, a changed routing detail, or a comparison result of filtered routing detailed information of the routing policy. The routing quantity change summary comprises at least one of a routing quantity change statistic result, an attribute quantity change statistic result, an added routing quantity statistic result, or a deleted routing quantity statistic result.
8. The method according to any one of claims 1 to 7, characterized in that, The execution of the target configuration on the network device comprises: based on the configuration view, performing configuration validation of the target configuration on the network device.
9. A network configuration apparatus characterized by comprising: The apparatus comprises: an obtaining module configured to obtain a target configuration to be configured on a network device; a simulation module configured to simulate and verify the target configuration on the network device based on a simulation view of the network device to obtain a simulation verification result, data between the simulation view and a configuration view of the network device being isolated from each other; an execution module configured to, in a case where the simulation verification result indicates that the target configuration passes the simulation verification, execute the target configuration on the network device.
10. The apparatus of claim 9, wherein, The execution module is further configured to, under the configuration view, enter the simulation view by executing a first command line.
11. The apparatus of claim 9 or 10, wherein, The apparatus further comprises a copying module configured to copy at least one of a configuration result or a state associated with the target configuration in a database corresponding to the configuration view into the simulation view.
12. The apparatus of claim 9, wherein, The database corresponding to the configuration view is synchronized with a database corresponding to the simulation view.
13. The apparatus of any of claims 9-12, wherein, The apparatus further comprises a first presentation module configured to present, in the simulation view, a result of whether the target configuration passes the simulation verification.
14. The apparatus of any of claims 9-13, wherein, The apparatus further comprises a second presentation module configured to present, in the simulation view, change information corresponding to the simulation verification result.
15. The apparatus of claim 14, wherein, The target configuration is a routing policy, and the change information includes at least one of a routing quantity change summary, a changed routing detail, and a comparison result of routing detailed information filtered by a routing policy. The routing quantity change summary includes at least one of a routing quantity change statistic result, an attribute quantity change statistic result, an added routing quantity statistic result, or a deleted routing quantity statistic result.
16. The apparatus of any of claims 9-15, wherein, The execution module is configured to perform configuration validation on the target configuration on the network device based on the configuration view.
17. A network device, comprising: The network device includes a processor coupled with a memory, and the memory stores at least one program instruction or code, which is loaded and executed by the processor to enable the network device to implement the network configuration method of any one of claims 1-8.
18. A computer-readable storage medium, characterized in that, The computer storage medium stores at least one instruction, which is loaded and executed by the processor to enable the computer to implement the network configuration method of any one of claims 1-8.
19. A computer program product, characterised in that, The computer program product includes computer program code, which is loaded and executed by the computer to enable the computer to implement the network configuration method of any one of claims 1-8.
Citation Information
Patent Citations
Systems and methods for live, on-device configuration validation
CN111258880A
Network simulation method, device and equipment and computer readable storage medium
CN114285757A
Pre-validation of network configuration
US20210226848A1