Network Device Configuration Audit Platform Using Hierarchical Tree Comparison
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Conventional network device configuration auditing techniques are inefficient and ineffective in managing large numbers of variations, failing to account for different permutations and combinations of configurations, and do not provide severity indicators for configuration mismatches, leading to delayed detection of issues that can cause network failures.
Innovation Solution
A system and method that utilize a standardized model to express auditing parameters for all configuration formats, allowing for proactive identification of discrepancies in network device configurations by translating current configurations into a hierarchical tree structure for comparison with a template, and providing reports on failing devices and parameters, enabling proactive maintenance.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If conventional network device configuration auditing techniques are used, then device-specific configuration verification is performed, but the system cannot efficiently manage large numbers of configuration variations and permutations
Solution Approach 1:
The patent creates a universal configuration template that can represent multiple device-specific configurations through parameters and variables. This single template structure serves multiple functions by accommodating different network device types, vendors, and configuration scenarios without requiring separate auditing systems for each variation.
Solution Approach 2:
The system uses configurable parameters within the template to represent different configuration options and variations. By changing parameter values rather than creating separate templates, the system efficiently manages numerous configuration permutations and combinations across different network devices.
2Measurement precision
If device-specific configuration auditing is performed, then individual device configurations are verified, but severity indicators for configuration mismatches are not provided
Solution Approach 1:
The patent assigns different severity levels to different configuration parameters within the template. Critical parameters are marked with higher severity indicators while less important parameters have lower severity markers, allowing the system to precisely detect mismatches and simultaneously prioritize them by importance without requiring separate analysis.
3Adaptability or versatility
If multiple vendor-specific auditing models are maintained, then each vendor's configuration format can be audited, but the system complexity increases and efficiency decreases
Solution Approach 1:
The patent implements a single universal template structure that can audit configurations from multiple vendors and device types. The template uses standardized parameter representations that can map to different vendor-specific configuration formats, eliminating the need for separate auditing models while maintaining broad compatibility and improving auditing efficiency.
4Measurement precision
If comprehensive configuration auditing is performed on all parameters, then all configuration aspects are verified, but critical parameters cannot be differentiated from non-critical ones
Solution Approach 1:
The patent embeds severity indicators directly within the template structure at specific parameter locations. This allows the system to perform comprehensive auditing of all configuration parameters while simultaneously preserving priority information, as each parameter's mismatch can be evaluated both for completeness and for its assigned severity level.
Data Source
AI summary
Aspects of the subject disclosure may include, for example, receiving a request for a configuration audit of a network device, identifying a class of the network device, retrieving a configuration template for the network device, wherein the retrieving is based on the class of the network device, wherein the configuration template is represented as a hierarchical tree structure, retrieving a current configuration of the network device, translating the current configuration of the network device to a tree data structure, comparing the tree data structure with the configuration template represented as a hierarchical tree structure, identifying discrepancies between the tree data structure and the configuration template represented as a hierarchical tree structure, reporting the discrepancies, receiving instructions to resolve the discrepancies, and modifying one of the current configuration for the network device and the configuration template for the network device, wherein the modifying is responsive to the instructions to resolve the discrepancies. Other embodiments are disclosed.


