Role based configuration and management tool based on SNMP and LDAP

Patent metadata

Field	Value
Publication number	US-10237115-B2
Application number	US-201514937261-A
Country	US
Kind code	B2
Filing date	Nov 10, 2015
Priority date	Nov 10, 2015
Publication date	Mar 19, 2019
Grant date	Mar 19, 2019

Abstract

A method is described for determining automatically, via a network protocol, a system topology of a network system, wherein the network system comprises a plurality of network components, wherein each of the network components support a directory protocol, and wherein the system topology comprises a respective address of each of the plurality of network components. The system topology is mapped via the directory protocol. Finally, a role-based access credential is configured for a user, via the directory protocol, wherein the role-based access credential determines which of the plurality of network components are accessible to the user.

First claim

What is claimed is:

1. A method, comprising:
determining automatically, via a network protocol, a system topology of a network system, wherein the network system comprises a plurality of network components, wherein each of the network components support a directory protocol, wherein the system topology comprises a respective address of each of the plurality of network components;
mapping the system topology via the directory protocol;
configuring a role-based access credential for a user, via the directory protocol, wherein the role-based access credential determines which of the plurality of network components are accessible to the user;
identifying a variation in the respective address of at least one of the plurality of network components; and
in response to identifying the variation:
instructing, via the network protocol, at least one of the plurality of network components to refresh address data on the directory protocol.

2. The method of claim 1 , further comprising:
monitoring, via the network protocol, each of the plurality of network components to identify the variation.

3. The method of claim 2 , wherein instructing, via the network protocol, at least one of the plurality of network components to refresh configuration data further comprises use of an SNMP writable variable.

4. The method of claim 1 , further comprising:
monitoring, via the network protocol, each of the plurality of network components to identify a variation in a respective configuration parameter of at least one of the plurality of network components;
in response to identifying the variation:
instructing, via the network protocol, at least one of the plurality of network components to refresh the respective configuration parameter on the directory protocol.

5. The method of claim 1 , further comprising:
determining the respective addresses of each of the plurality of network components via a subnet mask.

6. The method of claim 1 , wherein the network protocol comprises Simple Network Management Protocol (SNMP).

7. The method of claim 1 , wherein the directory protocol comprises Lightweight Directory Access Protocol (LDAP) and wherein mapping the system topology via the directory protocol comprises:
after determining the system topology, publishing the system topology to an LDAP server;
mapping the system topology via LDAP; and
implementing the role-based access credential using the LDAP server.

8. The method of claim 7 , further comprising:
providing a user interface configured to monitor and manage at least one of the plurality of network components, according to the respective role-based access credential.

9. The method of claim 8 , wherein the user interface accesses the system topology via the LDAP.

10. The method of claim 1 , further comprising:
formatting for display, in accordance with the role-based access credential, a role-based map comprising at least one of the plurality of network components.

11. A system comprising:
a processing system comprising hardware and software and configured to perform processes comprising:
determining automatically, via a network protocol, a system topology of a network system, wherein the network system comprises a plurality of network components, wherein each of the network components support a directory protocol, wherein the system topology comprises a respective address of each of the plurality of network components;
mapping the system topology via the directory protocol;
configuring a role-based access credential for a user, via the directory protocol, wherein the role-based access credential determines which of the plurality of network components are accessible to the user; and
identifying a variation in a respective address of at least one of the plurality of network components; and
in response to identifying the variation:
instructing, via the network protocol, at least one of the plurality of network components to refresh address data on the directory protocol.

12. The system of claim 11 , further comprising:
monitoring, via the network protocol, each of the plurality of network components for a variation in the respective address of at least one of the plurality of network components.

13. The system of claim 11 , further comprising:
identifying a variation in a respective configuration parameter of at least one of the plurality of network components;
in response to identifying the variation in the respective configuration parameter:
instructing, via the network protocol, at least one of the plurality of network components to refresh the respective configuration parameter on the directory protocol.

14. The system of claim 11 , further comprising:
determining the respective addresses of each of the plurality of network components via a subnet mask.

15. The system of claim 11 , wherein the network protocol comprises Simple Network Management Protocol (SNMP).

16. The system of claim 11 , wherein the directory protocol comprises Lightweight Directory Access Protocol (LDAP).

17. The system of claim 16 , further comprising:
providing a user interface configured to monitor and manage at least one of the plurality of network components, according to the respective role-based access credential.

18. The system of claim 17 , wherein the user interface accesses the system topology via the LDAP.

19. The system of claim 11 , further comprising:
formatting for display, in accordance with the role-based access credential, a role-based map comprising at least one of the plurality of network components.

20. A computer program product comprising:
a computer-readable storage medium having computer-readable program code embodied therewith, the computer-readable program code comprising:
computer-readable program code configured to determine automatically, via a network protocol, a system topology of a network system, wherein the network system comprises a plurality of network components, wherein each of the network components support a directory protocol, wherein the system topology comprises a respective address of each of the plurality of network components;
computer-readable program code configured to map the system topology via the directory protocol;
computer-readable program code configured to configure a role-based access credential for a user, via the directory protocol, wherein the role-based access credential determines which of the plurality of network components are accessible to the user;
computer-readable program code configured to monitor, via the network protocol, each of the plurality of network components to identify a variation in the respective address of at least one of the plurality of network components; and
computer-readable program code configured to, in response to identifying the variation, instruct, via the network protocol, at least one of the plurality of network components to refresh address data on the directory protocol.

Assignees

• Yoon Lee Alvin
• Ellington Kenneth
• Lee Lawrence
• Helsley David
• CERRATO Ryan
• RABBANI Faisal
• Townsend Leland
• Mckay Aaron
• Brekeen Jr Walter
• Mathes Ronnie
• Ca Inc

Inventors

• Yoon Lee Alvin
• Ellington Kenneth
• Lee Lawrence
• Helsley David
• CERRATO Ryan
• RABBANI Faisal
• Townsend Leland
• Mckay Aaron
• Brekeen Jr Walter
• Mathes Ronnie

Classifications

• H04L41/12

  Discovery or management of network topologies · CPC title

• H04L61/6068

  Electricity · mapped topic

• H04L63/10

  for controlling access to devices or network resources · CPC title

• H04L61/1523

  Electricity · mapped topic

• H04L41/0213 Primary

  Standardised network management protocols, e.g. simple network management protocol [SNMP] · CPC title