Selection and storage of policies in network management

Abstract

User interface and policy loading aspects of a policy-based, outsourced, network management system. In one aspect, a user selects policies using a graphical user interface (GUI) with a two paned window having a tree view of the policies in one pane. In another aspect, the policies are (1) created in the GUI format (e.g., XML), (2) sent over a network (e.g., the internet) to a service center in the same format, and (3) are loaded, manipulated and stored in the same format. In another aspect, the initial loading of the policies is done using a bulk loader in a logic layer. In another aspect, the logic layer also includes a configuration checker which handles changes or additions to policies in a finished network management system. Any aspects of the new or changed policy that are inconsistent with the finished system are parsed and stripped out. In another aspect, where the details of a new policy or change aren't specified, a base configuration creator creates a policy with minimal attributes. In another aspect, the logic layer also contains a device control console, which allows bypassing the policy creating and configuring to allow a user to directly access a device for configuration.

Description

CROSS-REFERENCES TO RELATED APPLICATIONS [0001] This application is related to copending application serial number “Policy Engine For Modular Generation Of Policy For A Flat, Per-Device Database” (Attorney Docket No. 20063P-001310US), Ser. No. ______, “Event Management For A Remote Network Policy Management System” (Attorney Docket No. 20063P-001410US), Ser. No. ______, “Device Plug-In System For Configuring Network Devices Over A Public Network” (Attorney Docket No. 20063P-001510US) and Ser. No. ______, “Modular Remote Network Policy Management System” (Attorney Docket No. 20063P-001610US), all filed even date herewith and assigned to the same assignee, and all incorporated herein by reference.STATEMENT AS TO RIGHTS TO INVENTIONS MADE UNDER FEDERALLY SPONSORED RESEARCH OR DEVELOPMENT [0002] NOT APPLICABLE REFERENCE TO A “SEQUENCE LISTING,” A TABLE, OR A COMPUTER PROGRAM LISTING APPENDIX SUBMITTED ON A COMPACT DISK [0003] NOT APPLICABLE BACKGROUND OF THE INVENTION [0004] The present...

AI Technical Summary

Benefits of technology

"The present invention is about a policy-based, outsourced network management system. It has several technical effects. Firstly, it allows users to select policies through a graphical user interface with a two-paned window, making it easier to navigate through the policies. Secondly, the policies are created in a hierarchical format and stored in a non-device specific format, which is then translated to device-specific format by lower layers of the management system. Thirdly, a base configuration checker validates the configuration data of each managed device to ensure that it does not violate network policies. Fourthly, a device console proxy module allows direct access to network devices, bypassing the layered management system. Fifthly, a bulk loader loads the data into a database using XML format, which eliminates the need for translation. Overall, the invention simplifies network management and improves efficiency."

Problems solved by technology

Communication network systems are becoming ever more complex.

The complexity that arises as a result of increasing the number and the variety of systems, which in the aggregate form a computer network, coupled with the variety of communication protocols that such devices are required to support, increase the knowledge base that is often required to manage such networks.

The problem is further compounded by the increasing complexity of new generation of high performance network devices and their interoperability as well as by the lack of qualified and well-trained network administrators.

A drawback of this method is that each networked device is configured and subsequently verified separately to ensure its conformity with the desired network objectives.

Another drawback of this method is that it requires an extensive knowledge base—of the various network device types—which may become prohibitively large as the number of device types in a network rises.

The method, however, involves human intervention and is thus inefficient and unautomated.

Such policy-based methods, however, are only applicable to a limited number of specific device types.

As stated above, conventional methods of configuring and maintaining a communication network are costly, time-consuming and require expert administrators capable of reliably managing and controlling ever more complex network systems in a timely manner.

Images