Automated Intent-Based Network Configuration for Rapid Device Onboarding
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current network deployment methods require extensive configuration and administration by skilled engineers, making it difficult to rapidly innovate and adopt new technologies, especially in integrating diverse devices and ensuring network security across campus networks.
Innovation Solution
The implementation of an intent-based networking system that allows users to describe their objectives in plain language, which are then automatically translated into configuration and policy changes across the network, enabling automated provisioning, security, and optimal performance with minimal administrator intervention.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If manual configuration and administration by skilled network engineers is used to integrate diverse devices and ensure network security, then network security and device integration are achieved, but deployment difficulty and time consumption increase significantly
Solution Approach 1:
The system enables self-service through automated device onboarding where devices automatically discover the network, authenticate themselves, and receive appropriate configuration without manual engineer intervention. The automated enrollment process includes devices independently obtaining certificates, joining security groups, and applying policies based on their identity and purpose.
Solution Approach 2:
The system performs preliminary action by pre-configuring security policies, certificates, and network parameters before devices need to connect. Network administrators can define security groups, authentication methods, and policy templates in advance, which are then automatically applied when devices enroll, eliminating the need for manual configuration during deployment.
2Reliability
If manual configuration methods are used for network deployment, then network security can be maintained, but the ability to rapidly innovate and adopt new technologies is impeded
Solution Approach 1:
The automated system allows rapid onboarding of new devices and technologies by enabling self-service enrollment. Devices automatically authenticate, receive certificates, and integrate into the network security framework without waiting for manual configuration, thus accelerating technology adoption while maintaining security standards.
Solution Approach 2:
The system enables flexible parameter changes by allowing dynamic modification of security policies, device attributes, and network configurations. Administrators can update device roles, security group memberships, and policy parameters without reconfiguring individual devices manually, enabling rapid adaptation to new technologies and requirements.
3Ease of operation
If extensive manual configuration is performed by network engineers, then proper network security and device integration are achieved, but time consumption and deployment difficulty increase
Solution Approach 1:
The system dramatically simplifies device integration by enabling self-service enrollment where devices automatically discover network parameters, authenticate using pre-configured methods, obtain security certificates, and join appropriate security groups without engineer intervention. This reduces integration complexity from manual configuration tasks to automatic enrollment processes.
Solution Approach 2:
The system performs preliminary configuration of authentication methods, security groups, and policy templates before devices need to integrate. When devices enroll, they automatically receive pre-configured security parameters and policies, eliminating the time-consuming manual configuration process while ensuring proper integration.
4Adaptability or versatility
If multiple separate systems are manually configured and stitched together, then network functionality is achieved, but network deployment becomes difficult and time-consuming
Solution Approach 1:
The system merges multiple separate network functions (authentication, authorization, accounting, device enrollment, policy application) into a unified automated framework. Instead of manually configuring and integrating separate AAA servers, certificate authorities, and policy enforcement points, the system coordinates these functions automatically through a single enrollment process that handles all aspects of device integration.
Solution Approach 2:
The system provides universal functionality by creating a multi-functional automated enrollment framework that handles diverse device types, authentication methods, and security requirements through a single unified process. The same enrollment mechanism works for various device categories (endpoints, infrastructure devices, IoT devices) and authentication types (802.1X, MAC authentication, certificate-based) without requiring separate manual configuration procedures.
Data Source
AI summary
The present technology addresses a need to automatically configure a new compute resource to join an existing cluster of computing resources. The present technology provides a mechanism to ensure that the new compute resource is executing the same kernel version which further permits subsequent exchange at least one configuration message informing the new compute resource of necessary configuration parameters and an address to retrieve required software packages.