Method and device for acquiring access path

Abstract

The invention discloses a method for acquiring an access path. A background service system of the method for acquiring the access path stores different types of equipment information. The method comprises the following steps: when an input service request is detected, acquiring a service request and network topology information, determining the starting point and end point of the access path according to the service request and the network topology information; judging whether next hop equipment exists or not according to the starting point and different types of equipment information; if so,selecting a corresponding routing algorithm according to the information of next hop equipment routing and policy to query the path; performing loop checkup based on the information of next hop equipment routing and policy until the end point of the determined access path is queried to generate an access path which meets the service request; and constructing a network topology corresponding to theaccess path according to the routing and policy information and the equipment information. The invention also discloses a corresponding device to effectively improve the efficiency of enterprise security service management, lower the labor cost and improve the efficiency of network management and maintenance.

Description

technical field [0001] The invention relates to the fields of network communication and network security, in particular to a method and device for obtaining an access path. Background technique [0002] As information security rises to the national strategy, the government, enterprises, and the market pay more and more attention to network security, which makes network deployment more complicated and leads to heavy network operation, maintenance and management. [0003] At present, new business requests are submitted to the operation and maintenance personnel almost every day, and the operation and maintenance personnel will open these business requests on firewalls and other security devices, which has extremely high professional requirements for the operation and maintenance personnel; Frequently modifying the configuration on the device may lead to network security vulnerabilities or configuration redundancy; the existing network device management tools are developed by e...

AI Technical Summary

Problems solved by technology

[0002] As information security rises to the national strategy, the government, enterprises, and the market pay more and more attention to network security, which makes network deployment more complicated and leads to heavy network operation, maintenance and management.

[0003] At present, new business requests are submitted to the operation and maintenance personnel almost every day, and the operation and maintenance personnel will open these business requests on firewalls and other security devices, which has extremely high professional requirements for the operation and maintenance personnel; Frequently modifying the configuration on the device may lead to network security vulnerabilities or configuration redundancy; the existing network device management tools are developed by each device manufacturer, and can only perform simple change management operations on the same type of devices from the manufacturer, and There is no unified change audit management tool across manufacturers. In addition, the existing path finding technology only considers the standard routing process in the path finding process, and does not consider the different characteristics of device routing and forwarding, nor does it take into account the routing and forwarding characteristics of different devices themselves. , resulting in the possibility of forwarding errors in the simulated message service requests on the device, and the inaccurate access path obtained at last, thus losing the basis for application expansion

Images