JP3533911B2 - Integrated network management system - Google Patents

Description

Detailed Description of the Invention

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to a technique for integrally managing a plurality of local networks that are individually managed by a network management device that uses a common protocol. The present invention relates to an integrated network management system suitable for efficiently performing integrated management of each local network having network management devices having different information holding forms.

[0002]

2. Description of the Related Art A conventional integrated network management system will be described with reference to the drawings. FIG. 8 is a block diagram showing a configuration example of a conventional integrated network management system. Using different types of network management devices A81 and B82 that are individually installed in the local network A83 and the local network B84,
The integrated management device 80 uses a plurality of local networks A8.
3, B84 is integrated and managed.

The network management device A81 manages the local network A83 using a standard protocol. Similarly, the network management device B82 also manages the local network B84 using the same standard protocol. However, the network management apparatus A81 is equipped with a dedicated network management application program A81b, and the management information collected from the local network A83 is accumulated in the database A81c. Further, the network management device B82 is equipped with a dedicated network management application program B82b, and the management information collected from the local network B84 is stored in the database B.
It is stored in 82c.

With such a configuration, in order to perform integrated management of the local networks A83 and B84 in the integrated management device 80, a function of providing the integrated management device 80 with the management information accumulated in the databases A81c and B82c, and network management Programs A81a, B8 having a function of detecting an event detected by the application programs A81b, B82b for notification and notifying the integrated management apparatus 80
2a is installed in each of the network management devices A81 and B82, and the integrated management device 80 executes these adapter programs A via the management device interface section 80b.
The management information or event from 81a, B82a is received and stored in the management information database 80c, and integrated management application 80a uses this accumulated management information or directly uses the notified event for integration. Need to manage.

As described above, in the conventional integrated network management system, the network management device A81 and the network management device B82 hold the management information in their own form. Therefore, adapter programs A81a and B82a that provide information to the integrated management device 80
Must be individually prepared for each type of the network management devices A81 and B82.

Therefore, although the types of management information necessary for network management and the protocols to be transferred on the network are standardized, management information of local networks managed by different types of network management devices A81 and B82 It is difficult to uniformly extract and manage multiple local networks.

Further, network management devices A81, B
If there is a change in the specifications of the operating system 82, the network management application programs A81b, B82b, etc., the management information held by the network management devices A81, B82 is also stored in the adapter programs A81a, B82a that provide management information to the integrated management device 80. In some cases, it is necessary to change specifications such as an access function to access the management information and a function of transferring management information to the integrated management device 80.

[0008]

The problem to be solved by the prior art is that in the prior art, a function for accessing the management information and a function for transferring the management information to the integrated management apparatus are prepared for each different type of network management apparatus. These are the points that must be met, and these access functions and transfer functions must be changed as the specifications of the network management device change. The object of the present invention is to solve these problems of the prior art,
An object of the present invention is to provide an integrated network management system capable of efficiently performing integrated management of a plurality of local networks managed by different types of network management devices.

[0009]

In order to achieve the above object, the integrated network management system of the present invention, as shown in FIG. 1, uses management information collection devices A8 to C10 provided for each local network A2 to C4. , A network management device (S) in each local network A2 to C4
Protocol data unit (PDU: Protocol Data Uni) of the standard protocol used by the NMP management devices A5 to C7)
From t), the management information of the network is extracted, stored, and notified to the integrated management device 11.
1, the management information collecting devices A8 to C10 collect the management information acquired and accumulated at the PDU level, or
Upon receipt of the notification from the management information collecting devices A8 to C10, the plurality of local networks are integratedly managed. At this time, the management information collecting devices A8 to C10 are
The management information is extracted from the PDU according to the management information collection condition and the operation condition designated by the integrated management device 11, and is provided to the integrated management device 11 according to the request from the integrated management device 11. Also, in each local network A2 to C4. The integrated management device 11 is directly notified of an event such as the occurrence of a failure or a change in configuration information. In this way, the integrated management device 11 manages a plurality of local networks A2 to C4 that are individually managed by the network management devices (A5 to C7) that use the standard protocol, according to the type of each network management device (A5 to C7). Integrated management is possible regardless of.

[0010]

BEST MODE FOR CARRYING OUT THE INVENTION Embodiments of the present invention will be described in detail below with reference to the drawings. FIG. 1 is a block diagram showing an embodiment of a configuration according to the present invention of an integrated network management system of the present invention. In this example, each network management device installed in each local network uses SNMP (Simple Network Management Protocol) as a standard protocol.
ocol) is used for management.

In FIG. 1, 1 is an integrated network management system, 2-4 are local networks A-C, 5
7 to 7 are SNMP management devices A to C respectively managing the local networks A2 to C4, and 8 to 10 are management information collecting devices for collecting management information of the local networks A2 to C4 collected by the SNMP management devices A5 to C7. A ~
C and 11 are integrated management devices.

As described above, in this example, the management information collection devices A8 to C10 are provided together with the SNMP management devices A5 to C7 for each of the local networks A2 to C4. The management information collecting devices A8 to C10 are connected to the SNMP management device A in the respective local networks A2 to C4.
The management information of the network is extracted and stored from the protocol data unit (PDU) of the standard protocol used by 5 to C7, and the integrated management device 11 is notified by the interface shown in FIG. Integrated management device 11
Acquires management information from the management information collecting devices A8 to C10 and manages the local networks A2 to C4 in an integrated manner.

FIG. 2 is an explanatory diagram showing an interface example of the integrated network management system in FIG. In this example, the integrated management device 11 and the local network A2,
The relationship between the management information collection device A8 installed in the local network A2 and the SNMP management device A5 that manages the local network A2 is shown. That is, the SNMP management device A5 manages the local network A2 by SNMP, and the management information collection device A8 acquires the management information exchanged between the SNMP management device A5 and the local network A2.

Then, the integrated management device 11 acquires the management information collected by the management information collecting device A8 by exchanging the information transfer request 21 and the information transfer response 22, and
By the collection / operation condition instruction 23 and the collection / operation condition instruction response 24, the condition for the management information collecting device A8 to collect the management information necessary for managing the local network A2, and the accumulation or notification of the collected data. The operating condition is set in the management information collecting device A8. Then, by the information notification 15, the integrated management device 11 accumulates the information notified from the management information collection device A8.

FIG. 3 is a block diagram showing a configuration example of the integrated management device in FIG. 1, and FIG. 4 is a block diagram showing a configuration example of the management information collecting device in FIG. First, in FIG. 3, 11a is an integrated management application that performs integrated management of the plurality of local networks A2 to C4 shown in FIG. 1, 11b is a management information collection condition required by the integrated management application 11a, and management information collection of FIG. A collection / operation condition instructing unit for instructing the devices A8 to C10, a communication interface unit 11c for the management information collecting devices A8 to C10 (indicated as "management information collecting device interface unit" in the figure), and 11d in FIG. The management information collecting devices A8 to C10 of the local networks A2 to C4 are accessed to accumulate the information in the integrated management device 11 or to manage the management information collecting devices A8 to C10.
The information notified from the integrated management application 11a
The management information integration management unit 11e transfers the management information to each of the local networks A2 to C4 acquired by the management information integration management unit 11d.

Next, in FIG. 4, reference numeral 8a denotes a communication P for collecting SNMP PDUs in the local network A2.
DU acquisition unit, 8b is a communication interface unit (indicated as "integrated management device interface unit" in the figure) for communicating with the integrated management device 11, and 8c shows collection conditions instructed by the integrated management device 11 in FIG. A collection / operation condition management unit held in the table, 8d is a PDU analysis unit for processing the SNMP PDU acquired by the communication PDU acquisition unit 8a based on the collection conditions held in the collection / operation condition management unit 8c, and 8e is a PDU Information that matches the collection condition in the analysis result of the analysis unit 8d is displayed in the local network A as shown in the table of FIG.
2 is a management information database for each managed device of the SNMP management device A5, and 8f is a management information database for acquiring the management information of the local network A2 stored in the management information database 8e based on a request from the integrated management device 11. An information search processing unit provided to the integrated management apparatus 11.

FIG. 5 is an explanatory diagram showing a specific example of the collection / operation condition management table held by the collection / operation condition management unit of the management information collection device in FIG. The collection / operation condition management table 50 is a collection information 50d to 50i for extracting management information from an SNMP PDU, and a management information collection device when management information matching this collection condition 50d to 50i is acquired. It has entries 50a to 50c holding the operating condition 50j.

The collection conditions 50d to 50i are the destination S
IP address of NMP management apparatus A5 (described as "destination address" in the figure), PDU type ("PDUDUType" in the figure)
e)), and the contents of each field of the header that constitutes the PDU of SNMP (in the figure, "version", "co"
"Munity"), and a management object (Management Information Base: MI) stored in a management information variable part (Variable Binding List: VBL) in the PDU.
B) Object Identifier (OI)
D) and the value of this object identifier (OID). Part or all of these collection conditions 50d to 50i can be designated, and omitted conditions are ignored when extracting management information.

FIG. 6 is an explanatory diagram showing a specific example of the management information table of the local network stored in the management information database of the management information collecting device in FIG. The management information tables 60 to 62 are SNs in FIG.
It is created for each managed device of the MP management device A5. Reference numerals 60a to 60c in the drawing are entries that hold a set of index and value of the management information in units of OID (object identifier) of MIB of SNMP. OID
The (object identifier) is set in the collection / operation condition management table 50 of FIG.

Next, the operation of the integrated network management system 1 of FIG. 1 which comprises the management information collecting devices A8 to C10 and the integrated management device 11 having such a configuration will be described. Note that the relationship between the integrated management device 11 and the local networks A2 to C4, and the SNMP management devices A5 to C7 and the management information collection devices A8 to C10 installed therein is the same in all parts, so in the following, Only the SNMP management device A5 and the management information collection device A8 installed in the local network A2 shown in FIG. 2 will be described as an example.

The integrated management device 11 having the configuration shown in FIG. 3 is a condition for the management information collection device A8 to collect the management information required by the integrated management application 11a for managing a plurality of local networks as a MIB value ( Figure 5
Collecting conditions 50d to 50i) and operating conditions 50j for accumulating or notifying the collected data are set in the management information collecting device A8 from the collecting / operating condition instructing unit 11b through the communication interface unit 11c.

This operation is based on the collection / operation condition instruction 2 of FIG.
3 and collection / operating condition instruction response 24,
The management information integrated management unit 11d is also notified of the instructed collection condition and operation condition. Then, the management information integrated management unit 11d manages the types of management information collected and accumulated by the management information collection device A8 based on the collection condition and the operation condition, and manages the management information via the communication interface unit 11c. The management information of the local network A2 collected by the collection device A8 is periodically collected and accumulated in the management information integrated database 11e.

Further, the management information integrated management unit 11d is shown in FIG.
Based on the information transfer request 21 and the information transfer response 22 of
At the request of the integrated management application 11a, the management information collected by the management information collecting device A8 can be acquired. Further, the management information integrated management unit 11d uses the information (information notification 2 in FIG. 2) notified from the management information collection device A8.
5) is notified to the integrated management application 11a and stored in the management information integrated database 11e. The integrated management application 11a is a management information integrated management unit 1
A plurality of local networks are integrated and managed by using the management information collected or notified by the management information collecting device A8 by 1d.

In the management information collecting apparatus A8 having the configuration shown in FIG. 4, the integrated management apparatus 1 is provided through the communication interface section 8b.
The collection / operation condition management unit 8c manages the collection condition and the operation condition instructed from 1. In the PDU analysis unit 8d, the communication PDU acquired by the communication PDU acquisition unit 8a
From the above, only the SNMP PDU is extracted, and the management information is extracted and the extracted management information is processed based on the collection condition and the operation condition set in the collection / operation condition management table 50 of FIG.

Further, the destination information of the IP header of the obtained PDU is compared with the IP address 50d of the SNMP management device A5 set in the collection / operation condition management table 50, and only the PDU directed to the SNMP management device A5 is compared. Extract. Next, the collection conditions 50d to 50i set in the collection / operation condition management table 50 are compared with the constituent elements in the SNMP PDU. For those including a plurality of VBLs in the PDU, the OID and the value are compared with each other. As a result, the collection conditions 50d to 50 of the entries 50a to 50c set in the collection / operation condition management table 50.
leaving only the PDU containing the management information that exactly matches i,
Other PDUs are discarded.

Then, the collection / operation condition management table 50
Of the entries 50a to 50c, the PDU including the management information that matches the collection conditions 50d to 50i is the entry 50a.
Processing for the management information is performed based on the operating condition 50j designated by 50c. As described above, among the PDUs left in the management information collection device A8 in conformity with the collection condition, the PDU requiring the notification process is the sender of the PDU, that is, the SNMP management device, from the IP header part of the PDU. The IP address of the managed device of A5 is extracted.

The PDU type from the device to be managed in the local network A2 is, for example, "GetResponse".
If it is “se”, the source IP address and the contents of the VBL extracted above are notified to the integrated management device 11 side, and if it is “TRAP”, the source IP address and the contents of the VBL are notified. Others, "enterprise", "agent-add
r ”,“ generic-trap ”,“ specific-trap ”,“ time-s ”
The information of each field of the "TRAP PDU" of "tamp" is notified to the integrated management device 11 of FIG.

The integrated management device 11 receives the S
It monitors the local network A2 managed by the NMP management device A5 for events and changes in management information. PDUs that do not require notification processing are discarded. Among the PDUs that have been left in the management information collection device A8 in conformity with the collection conditions and have completed the processing related to the notification, from the PDU including the management information that requires storage processing, from the IP header part of the PDU,
The transmission source of this PDU, that is, the IP address of the managed device of the SNMP management device A5 is extracted.

In the management information database 8e, the management information tables 60 to 6 of FIG. 6 are provided for each extracted source IP, that is, for each managed device of the SNMP management device A5.
Hold 2 When the management information tables 60 to 62 related to the managed device corresponding to the extracted IP address already exist, the respective entries 60a to 60a
OID held in 60c and V in SNMP PDU
The OID of the BL is compared, and the index-value pair is stored in the matching entry.

At this time, if the index-value combination already exists in this entry, this index-value combination is overwritten, and if it does not exist, this index-value combination is newly created in this entry. To add. Also,
The combinations of indexes and values stored in the management information tables 60 to 62 and the management information tables 60 to 62 related to the managed devices are automatically deleted when they are not updated for a certain period of time.

By the management information storage processing as described above, the management information database 8e of the management information collecting apparatus A8 is updated to S
The latest management information of the managed device of the NMP management device A5 can be held. On the other hand, when the management information table regarding the managed device corresponding to the extracted IP address does not exist in the management information tables 60 to 62, a new management information table regarding this managed device is generated, The management information in the PDU is stored in the entry having the same OID in the generated table. By this management information table generation processing, the management information collection device A8
Can automatically discover all managed devices managed by the SNMP management device A5.

Information retrieval processing section 8 of management information collecting apparatus A8
In response to a request from the integrated management device 11 in FIG. 2, f retrieves the management information of the SNMP management device A5 accumulated by the above operation, and retrieves the management information collected in the integrated management device 11 via the communication interface unit 8b. provide. The search key is a device to be managed, an OID, an OID and an index, and a combination thereof, and the management information is
The MIB OID, index, and value are provided to the integrated management apparatus 11. In addition, the management information database 8e
It is also possible to acquire the management information of all managed devices held by the.

In the integrated management device 11 of FIG. 3, the management information integrated management unit 11d manages the information accumulated in the SNMP management devices A5 to C7 installed in the local networks A2 to C4 by the above management information acquisition. The integrated management is performed by periodically collecting the information in the information integrated database 11e. The collection / operation condition management table 5 of FIG.
Operating condition 50j described in entries 50a to 50c of 0
If both notification and storage are specified for the processing of, both of the processing are performed.

The operation of the management information collecting device 8 in the above processing will be described with reference to FIG. FIG. 7 is a flow chart showing an example of the operation of the management information collecting device in FIG. 1 according to the present invention. This example shows the operation of the management information collection device A8 having the configuration shown in FIG.
Processing for extracting management information from the communication PDU acquired from the local network A2 based on the contents of the collection condition and the operation condition held by the collection / operation condition management unit 8c, and processing such as storage and notification It is a flow.

That is, the management information collecting device A8 of FIG.
First, the communication PDU acquisition unit 8a acquires a communication PDU (step 701). Then, the PDU analysis unit 8d
Thus, only the SNMP PDU is extracted from the communication PDU acquired by the communication PDU acquisition unit 8a (step 70).
2). PDUs other than SNMP are discarded (step 707). Regarding the SNMP PDU,
Based on the collection condition and the operation condition set in the operation condition management table 50 (step 703), the management information is extracted and the extracted management information is processed as follows. .

First, the destination information of the IP header part of the obtained PDU is compared with the IP address 50d of the SNMP management device A5 set in the collection / operation condition management table 50, and only the PDU directed to the SNMP management device A5 is compared. To extract. Next, the collection conditions 50d to 50i set in the collection / operation condition management table 50 are compared with the constituent elements in the SNMP PDU.

For a plurality of VBLs included in a PDU, the OID and the value are compared for each. As a result, 5 set in the collection / operation condition management table 50
Only PDUs that include management information that completely matches the collection conditions 50d to 50i of 0a to 50c are left, and other PDUs are left.
Are discarded (step 707).

As a result of comparison and determination with the collection condition in step 703, the collection / operation condition management table 5
0 entry 50a-50c collection conditions 50d-50i
The PDU including the management information that matches with is processed for the management information based on the operation condition 50j specified in this entry. That is, it is determined whether the notification processing of each PDU that remains in the management information collection device A8 in accordance with the collection condition is necessary (step 704).

If notification processing is required, the IP address of the sender of the PDU (managed device of the SNMP management device A5) is extracted from the IP header part of the PDU, and the sender IP address and the contents of VBL are extracted. , TRAP PDU
The integrated management device 11 is notified of the information in each of the fields (step 705). Based on this notification, the integrated management device 11 monitors the local network A2 managed by the SNMP management device A5 for events and changes in management information.

Next, the data is left in the management information collecting device A8 in conformity with the above-mentioned collecting condition of step 703, and then step 7
It is determined whether or not the accumulation processing of each PDU that has completed the processing related to the notification of 04 is necessary (step 706). PDUs that do not require storage processing are discarded (step 707).
For a PDU containing management information that requires storage processing, see P
From the IP header of the DU, the sender (SNM
The managed device of the P management device A5) is extracted and the management information database 60 holds the management information tables 60 to 62 for each extracted source IP.
At this time, it is determined whether or not the management information tables 60 to 62 related to the managed device corresponding to the extracted IP address already exist (step 708).

If present, the OID held in each entry 60a-60c in the table and the PD of the SNMP
The OID of the VBL in U is compared, and the index-value pair is stored in the matching entry (step 71).
0). At this time, if the combination of index and value already exists in this entry, this index and value are overwritten, and if it does not exist, this combination of index and value is newly created in this entry. to add.

If the management information table for the managed device does not exist, a new management information table for this managed device is created (step 709).
The management information in the PDU is stored in the entry having the same OID in the generated table (step 710). By generating the management information table in this way, the management information collection device A8 can automatically discover all managed devices managed by the SNMP management device A5.

As described above with reference to FIGS. 1 to 7, in the integrated network management system of this embodiment, the network management device (SNMP) using the standard protocol is used.
The management information collecting devices A8 to C10 installed in the plurality of local networks A2 to C4 managed by the management devices A5 to C7 are network management devices (A5 to C4).
The management information necessary for managing the network is extracted / stored / notified from the PDU of the management communication for 7), and the integrated management device 11 uses the information.

As a result, for each different type of network management device (A5 to C7) installed in each local network A2 to C4, the management information stored in the network management device (A5 to C7) is changed. It is possible to perform integrated management of a plurality of local networks A2 to C4 that have already been managed by the network management devices (A5 to C7) without separately preparing an access function of the above and a function of transferring management information to the integrated management device 11. It will be possible. The present invention is not limited to the embodiments described with reference to FIGS. 1 to 7, and various modifications can be made without departing from the scope of the invention.

[0045]

According to the present invention, a function of accessing the management information held inside the network management device and a function of transferring the management information to the integrated management device are prepared for each different type of network management device. Eliminates the need to be affected by changes in the specifications of network management devices that are already installed in the local network, and enables efficient unified management by the integrated management device of multiple local networks that already have network management devices. Is possible.

[Brief description of drawings]

FIG. 1 is a block diagram showing an embodiment of a configuration according to the present invention of an integrated network management system of the present invention.

FIG. 2 is an explanatory diagram showing an example of an interface of the integrated network management system in FIG.

FIG. 3 is a block diagram showing a configuration example of an integrated management device in FIG.

FIG. 4 is a block diagram showing a configuration example of a management information collection device in FIG.

5 is an explanatory diagram showing a specific example of a collection / operation condition management table held by a collection / operation condition management unit of the management information collection device in FIG.

6 is an explanatory diagram showing a specific example of a management information table of a local network stored in a management information database of the management information collecting device in FIG.

7 is a flowchart showing an operation example of the management information collecting apparatus in FIG. 1 according to the present invention.

FIG. 8 is a block diagram showing a configuration example of a conventional integrated network management system.

[Explanation of symbols]

1: integrated network management system, 2-4: local networks A-C, 5-7: SNMP management device A-
C, 8 to 10: management information collecting devices A to C, 8a: communication P
DU acquisition unit, 8b: communication interface unit, 8c: collection / operation condition management unit, 8d: PDU analysis unit, 8e: management information database, 8f: information search processing unit, 11: integrated management device, 11a: integrated management application, 11b:
Collection / operation condition instruction unit, 11c: communication interface unit, 11d: management information integrated management unit, 11e: management information integrated database, 21: upper stain-free pruritus, 22: non-transfer response, 23: collection / operation condition instruction , 24: collection / operation condition instruction response, 25: information notification, 50: collection / operation condition management table, 50a to 50c: entry, 50d to
50i: collection condition, 50j: operating condition, 60 to 62: management information table, 60a to 60c: entry, 80: integrated management device, 80a: integrated management application, 80
b: management device interface section, 80c: management information database, 81, 82: network management devices A and B,
81a, 82a: Adapter programs A, B, 81b,
82b: Network management application programs A, B, 8
1c and 82c: databases A and B, 83 and 84: local networks A and B.

─────────────────────────────────────────────────── ─── Continuation of the front page (58) Fields surveyed (Int.Cl. ⁷ , DB name) H04L 12/24 H04L 12/28

Claims (3)

(57) [Claims] 1. Collecting using the same standard protocol
The management information in an integrated network management system for integrally managing a plurality of local networks with each network management device to manage held in the form of each it separately, individually to each of said plurality of local networks Installed on the network to collect data on the network.
By obtaining and analyzing it , the above standard protocol is addressed to the network management device in the same local network.
By communication with each of the plurality of management information collecting devices that extract and collect the management information transferred by
An integrated network management system comprising: an integrated management device that acquires the management information collected by each of the plurality of management information collection devices and integrally manages the plurality of local networks. 2. The integrated network management system according to claim 1, wherein the management information collection device has a communication means for communicating with the integrated management device, and the integrated management device is instructed via the communication means. Condition receiving means for receiving management information collection conditions and operation conditions for collecting the management information that matches the collection conditions, data acquisition means for acquiring data addressed to the network management device, and the data acquisition means The data (management information) corresponding to the collection condition is discriminated from the data acquired in (1) and the device (managed device) of the transmission source of the data, and the management information for each managed device is set as the operating condition. An integrated network management system comprising: a data providing unit that provides the integrated management apparatus based on the communication unit. 3. The integrated network management system according to claim 1 or 2, wherein the integrated management device communicates with the management information collecting device, and via the communication means. Instructing means for instructing the management information collecting device about a collection condition of the management information and an operation condition when the management information matching the collection condition is extracted; The management information collecting device includes storage means for acquiring and storing the management information via the communication means, and management means for integrally managing the plurality of local networks based on the management information stored in the storage means. An integrated network management system characterized by: