Management Controller Dynamic IP Assignment via LLDP

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Conventional network address assignment methods in computer networks are vulnerable to security threats from rogue DHCP servers and are tedious for administrators, requiring extensive knowledge of network topology for static IP address provisioning.

Innovation Solution

Implementing a management controller with a baseboard management controller (BMC) and network switches to use Link Layer Discovery Protocol (LLDP) packets for secure and dynamic IP address assignment, which is automated and responsive to network changes, eliminating the need for manual provisioning of static IP addresses.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Extent of automation

If conventional DHCP servers are used for IP address assignment, then dynamic address allocation is achieved, but network security is compromised due to rogue DHCP server attacks

Engineering Contradiction:
Improvedynamic address allocationVSAvoidnetwork security
Core Design Contradiction:
Extent of automationVSReliability

Solution Approach 1:

The patent introduces a management controller as an intermediary component between the network device and traditional DHCP servers. This management controller validates DHCP server authenticity and mediates the IP address assignment process, preventing rogue DHCP servers from compromising network security while maintaining automated address allocation.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Reliability

If static IP addresses are provisioned manually by network administrators, then network security is improved through controlled address assignment, but operational complexity and time consumption increase significantly

Engineering Contradiction:
Improvenetwork securityVSAvoidaddress provisioning time
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The patent enables network devices to automatically obtain and manage IP addresses through the management controller without requiring manual administrator intervention. The system performs self-service address provisioning by automatically validating DHCP servers and assigning addresses based on network policies, eliminating time-consuming manual configuration while maintaining security controls.

Inventive Principle:
Principle #25Self-service

3Reliability

If static IP addresses are manually configured, then address assignment control is improved, but ease of operation deteriorates due to extensive network topology knowledge required

Engineering Contradiction:
Improveaddress assignment controlVSAvoidadministrative simplicity
Core Design Contradiction:
ReliabilityVSEase of operation

Solution Approach 1:

The patent extracts the complex network topology management and address assignment control logic from manual administrator tasks and consolidates it into the management controller. This allows network administrators to operate without deep network topology knowledge, as the management controller automatically handles address assignment control based on pre-configured policies.

Inventive Principle:
Principle #2Taking out (Extraction)

4Adaptability or versatility

If traditional DHCP servers are deployed externally, then address management flexibility is achieved, but device complexity increases due to additional external components

Engineering Contradiction:
Improveaddress management flexibilityVSAvoidsystem architecture complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent merges the DHCP server functionality with the management controller that is already integrated into the network device. This consolidation eliminates the need for separate external DHCP servers while maintaining address management flexibility, thereby reducing system architecture complexity and the number of external components required.

Inventive Principle:
Principle #5Merging (Combining)

Data Source

PatentUS12074844B2Secure and dynamic assignment of network addresses to network devices in an information processing system
Publication Date: 2024.08.27 DELL PROD LP
  • US12074844B2 patent drawing
  • US12074844B2 patent drawing
  • US12074844B2 patent drawing

AI summary

An apparatus in an illustrative embodiment comprises at least one processing device including a processor and a memory. The at least one processing device is configured to implement a management controller for a network device, the management controller being configured to communicate with at least one management server external to the network device. The at least one processing device is further configured to obtain network configuration information for one or more network interfaces of the network device, to deploy a network address server at least in part on the management controller, and to utilize the network address server deployed at least in part on the management controller to assign at least one network address to each of one or more of the network interfaces of the network device.