Graph-Based Policy Representation for Network Device Management
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Complex network device configurations, particularly in data communication networks, are difficult for users to understand due to their complexity and network-wide dependencies, making it challenging to manage and modify policies effectively.
Innovation Solution
A graph-based policy representation system that automatically generates policy graph representations from network device configurations, allowing users to manipulate and modify policies graphically, and updates configurations accordingly, using a label hierarchy and intelligent analysis for conflict resolution and synchronization with network devices.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If network device configurations are presented in command line interface format, then the configurations can be stored and processed, but they become difficult for users to understand and manage
Solution Approach 1:
The patent introduces a graphical user interface as an intermediary layer between the user and the complex command-line configurations. This GUI translates complex configuration data into visual representations with nodes and edges, allowing users to interact with network policies through intuitive graphical elements rather than raw command-line text, thereby resolving the contradiction between maintainability and complexity
Solution Approach 2:
The system creates a visual copy or representation of the actual network device configurations. Instead of requiring users to directly manipulate the original command-line configuration files, the system generates graphical copies that mirror the configuration structure and relationships, making it easier to understand and modify policies without directly handling the complex original data
2Reliability
If policy modifications are made directly in command line configurations, then changes can be applied, but errors and conflicts are difficult to detect and resolve
Solution Approach 1:
The system implements feedback mechanisms that automatically analyze policy modifications before they are applied to network devices. The graphical interface provides real-time feedback about potential conflicts and errors in policy configurations, allowing users to detect and correct issues before they cause problems in the actual network, thereby improving reliability while reducing the difficulty of detecting conflicts
Solution Approach 2:
The system performs preliminary analysis and validation of policy modifications before they are deployed to network devices. By checking for conflicts and errors in advance through the graphical interface, the system prevents problematic configurations from being applied, ensuring more reliable policy changes without requiring users to manually detect conflicts
3Stability of the object's composition
If network-wide policies are managed centrally, then consistency can be maintained, but the system becomes complex and difficult to modify
Solution Approach 1:
The patent segments the complex network-wide policy management system into manageable graphical components. By dividing policies into discrete visual elements with clear relationships represented as nodes and edges, the system maintains centralized consistency while making the overall system easier to understand and modify through its modular graphical structure
Data Source
AI summary
Systems and methods are provided for managing network devices using policy graph representations. In some embodiments, the method includes receiving configurations for a plurality of network devices; extracting one or more policies from the configurations; extracting a label hierarchy from the configurations, the label hierarchy describing an organization of nodes in a network comprising the network devices; generating a connectivity of a network comprising the network devices based on the one or more policies and the label hierarchy; generating a policy graph representation of the connectivity of the network; and displaying the policy graph representation of the connectivity to a user.