Network Device Configuration Management via Centralized Shared Objects

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network administrators face challenges in managing configuration information for network devices, particularly when updates are made at both the central management system and individual network devices, leading to potential inconsistencies and increased management time.

Innovation Solution

A method where a central management system stores shared configuration objects and allows network devices to update their local configuration databases, with mechanisms for handling requests not originating from the central system by creating new configuration objects and disassociating shared objects, ensuring synchronized configuration information across devices.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Productivity

If configuration information is maintained at both the central management system and individual network devices, then accessibility and problem resolution speed are improved, but configuration inconsistencies and management complexity increase

Engineering Contradiction:
Improveproblem resolution speedVSAvoidmanagement complexity
Core Design Contradiction:
ProductivityVSDevice complexity

Solution Approach 1:

The patent segments configuration management into two distinct types: shared configuration objects (managed centrally) and device-specific configuration objects (managed locally). This segmentation allows network devices to maintain essential configuration information locally for quick problem resolution, while the central management system maintains shared objects to ensure consistency across the network. The segmentation resolves the contradiction by enabling local autonomy for critical operations while preserving central coordination for overall configuration integrity.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The patent introduces configuration objects as intermediaries between the central management system and network devices. These configuration objects serve as a standardized interface that enables consistent configuration management while allowing local caching and offline access. The intermediary mechanism allows the system to maintain configuration information in multiple locations without creating inconsistencies, as all changes are tracked through the configuration object framework.

Inventive Principle:
Principle #24Intermediary (Mediator)

2Stability of the object's composition

If configuration updates are pushed from the central management system to all associated network devices, then configuration consistency is improved, but network bandwidth consumption and update time increase

Engineering Contradiction:
Improveconfiguration consistencyVSAvoidupdate time
Core Design Contradiction:
Stability of the object's compositionVSLoss of time

Solution Approach 1:

The patent implements preliminary action by pre-distributing shared configuration objects to network devices before they are needed. When a configuration object is created or modified at the central management system, it is proactively pushed to all associated network devices in advance. This preliminary distribution ensures that devices have the latest configuration information available locally, reducing update latency when changes are needed and maintaining consistency without requiring real-time synchronization during operations.

Inventive Principle:
Principle #10Preliminary action

3Ease of operation

If network devices can be directly configured by administrators, then operational flexibility is improved, but configuration inconsistencies and security risks increase

Engineering Contradiction:
Improveoperational flexibilityVSAvoidconfiguration consistency
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent applies local quality by allowing network devices to have device-specific configuration objects that can be modified locally for operational flexibility, while shared configuration objects remain under central management for consistency. This differentiated approach enables administrators to make local adjustments when needed (improving operational flexibility) while maintaining central control over core configuration elements (preserving configuration consistency). The local quality principle resolves the contradiction by allowing appropriate levels of autonomy in different configuration contexts.

Inventive Principle:
Principle #3Local quality

Data Source

PatentUS8913523B2Managing network devices
Publication Date: 2014.12.16 PALO ALTO NETWORKS INC
  • US8913523B2 patent drawing
  • US8913523B2 patent drawing
  • US8913523B2 patent drawing

AI summary

Methods, systems, and apparatus, including computer programs encoded on a computer storage medium, for configuring network devices. A central management system stores shared configuration objects in a central configuration database. A network device stores shared configuration objects and device-specific configuration objects in a local configuration database. The local configuration database's shared configuration objects correspond to shared configuration objects in the central configuration database. The central management system determines the network device has received a request to update a shared configuration object, where the request did not originate from the central management system, and updates the central configuration database.