Network equipment information acquisition and IP address automatic segmentation method, system and equipment

Abstract

The invention relates to a network equipment information acquisition and IP address automatic segmentation method, a system and equipment. The method comprises the following steps of acquiring the information of network equipment; extracting the basic information for representing the identity of the network equipment according to the information of the network equipment and the IP address information; associating the basic information of the network equipment with the input information of corresponding network equipment in a basic information base; automatically dividing the IP address information into a private network IP address, a public network IP address and corresponding IP network segments according to the respective characteristic information thereof. Therefore, the basic information for representing the identity of the network equipment and the IP address information are automatically collected. After that, the private network IP address, the public network IP address and corresponding IP network segments are automatically segmented, and invalid IP addresses are separated. The automatic management and maintenance can be achieved, and the data accuracy can be improved to 99.99%. The shared overall time for automatically collecting, analyzing, docking and updating the information, and the maintenance operation time is within two seconds.

Description

technical field [0001] The invention belongs to the technical field of network data, and in particular relates to a method, system and equipment for acquiring network equipment information and automatically dividing IP addresses. Background technique [0002] At present, in medium and large enterprises, the basic information of existing network devices (device host name, manufacturer, device type such as firewall / switch / router, device model, device version, etc.) Enter the basic information database, the question is: [0003] The existing network management products on the market cannot collect basic information of network devices through custom collection commands, nor can they automatically collect, segment and analyze IP address information in device configuration and connect to the basic information database within the enterprise; [0004] The basic information of the network equipment manually entered in the basic information database is inaccurate and updated slowly, ...

AI Technical Summary

Problems solved by technology

[0007] Network management products or other network and security products in the market can collect the interface IP address usage of a single device, but cannot count the usage of the internal network IP address of the entire network, the usage of the public network IP address of the entire network, and cannot be associated with specific branches. or area;

[0008] Due to manual allocation and manual recording and entry into the basic information database, it is often unknown which network segments have been allocated, which IP network segments have been allocated to which areas, how many public network IP network segments there are in the entire network, which public network IP addresses have been allocated, and which The public network IP is not assigned and cannot be accurately located, which causes great problems for actual use, inspection, and system calls. However, the network administrator logs in to the network device one by one or checks the IP addresses allocated on the device one by one through the network management system and Confirmation will be labor-intensive

[0009] At present, the corresponding information of public IP and private IP and the usage information of protocol ports cannot be directly queried in the system (cannot be queried directly through the existing system), and cannot be associated with the corresponding application system and the operation and maintenance personnel of the application system (these information are stored separately In different systems, no association is made), and the corresponding application interface person cannot be found for related security attack events, which is not conducive to the rapid processing of security attack events and application protection

[0010] The above-mentioned problems all need to be solved, and those skilled in the art have been devoting themselves to the research of the above-mentioned problems, but so far there is no technology that can solve all the above-mentioned problems at the same time

Images