CN120200914A - Configuration rollback method, device, network equipment and program product - Google Patents
Configuration rollback method, device, network equipment and program product Download PDFInfo
- Publication number
- CN120200914A CN120200914A CN202510307689.0A CN202510307689A CN120200914A CN 120200914 A CN120200914 A CN 120200914A CN 202510307689 A CN202510307689 A CN 202510307689A CN 120200914 A CN120200914 A CN 120200914A
- Authority
- CN
- China
- Prior art keywords
- configuration
- network device
- target
- rollback
- command
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Pending
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/085—Retrieval of network configuration; Tracking network configuration history
- H04L41/0859—Retrieval of network configuration; Tracking network configuration history by keeping history of different configuration generations or by rolling back to previous configuration versions
- H04L41/0863—Retrieval of network configuration; Tracking network configuration history by keeping history of different configuration generations or by rolling back to previous configuration versions by rolling back to previous configuration versions
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/08—Configuration management of networks or network elements
- H04L41/085—Retrieval of network configuration; Tracking network configuration history
- H04L41/0853—Retrieval of network configuration; Tracking network configuration history by actively collecting configuration information or by backing up configuration information
- H04L41/0856—Retrieval of network configuration; Tracking network configuration history by actively collecting configuration information or by backing up configuration information by backing up or archiving configuration information
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
Abstract
本发明实施例提供了一种配置的回退方法、装置、网络设备及程序产品。该方法包括：显示网络设备的配置管理界面；响应于配置管理界面上对网络设备的选择操作，显示选中的目标网络设备；响应于配置管理界面上对目标网络设备的已归档配置的选择操作，显示选中的目标配置；响应于将目标网络设备的当前配置回退至目标配置的操作，生成并执行回退命令。该方法自动生成并执行回退命令，将目标网络设备的当前配置回退至目标配置，减少了配置比较与回退的过程中仍存在的许多人为干预操作，简化网络设备的配置管理过程，提高配置管理的效率。
The embodiments of the present invention provide a configuration rollback method, apparatus, network device and program product. The method includes: displaying a configuration management interface of a network device; in response to a selection operation of a network device on the configuration management interface, displaying a selected target network device; in response to a selection operation of an archived configuration of a target network device on the configuration management interface, displaying a selected target configuration; in response to an operation of rolling back the current configuration of the target network device to the target configuration, generating and executing a rollback command. The method automatically generates and executes a rollback command, rolling back the current configuration of the target network device to the target configuration, reducing many human intervention operations that still exist in the configuration comparison and rollback process, simplifying the configuration management process of the network device, and improving the efficiency of configuration management.
Description
Technical Field
The present invention relates to the field of computer network technologies, and in particular, to a configuration rollback method, apparatus, network device, and program product.
Background
A switch is a network device used for electrical (optical) signal forwarding. It can provide an unshared electrical signal path for any two network nodes of the access switch. Among them, the configuration of the switch is very important in ensuring the normal operation of the network.
The configuration of the switch is typically set and debugged manually by a network administrator. If the switch is in error configuration, the configuration fails or the configuration produces unexpected results for the network, a network administrator is required to log in the system of the switch, call out the difference between the current configuration and the previously stored configuration, manually compare the difference between the current configuration and the previously stored configuration, and manually modify the configuration according to the difference.
The comparison and rollback of the configurations in the above manner still involves many network administrator intervention operations.
Disclosure of Invention
In view of this, the present invention provides a configuration rollback method, which is used to reduce a number of human intervention operations still existing in the configuration comparison and rollback process of the network device, simplify the configuration management process of the network device, and improve the efficiency of configuration management.
According to a first aspect of an embodiment of the present invention, there is provided a rollback method for a configuration, the method including displaying a configuration management interface of a network device, displaying a selected target network device in response to a selection operation of the network device on the configuration management interface, displaying a selected target configuration in response to a selection operation of an archived configuration of the target network device on the configuration management interface, and generating and executing a rollback command in response to an operation of rollback a current configuration of the target network device to the target configuration.
According to a second aspect of the embodiment of the invention, a configuration rollback device is provided, which comprises a display module, a display module and an execution module, wherein the display module is used for displaying a configuration management interface of network equipment, the display module is used for responding to selection operation of the network equipment on the configuration management interface and displaying selected target network equipment, the display module is used for responding to selection operation of archived configuration of the target network equipment on the configuration management interface and displaying selected target configuration, and the execution module is used for responding to operation of rollback current configuration of the target network equipment to the target configuration and generating and executing a rollback command.
According to a third aspect of an embodiment of the present invention, there is provided a network device, where the network device includes a processor, a memory, a communication interface, and a communication bus, where the processor, the memory, and the communication interface complete communication between each other through the communication bus, and the memory is configured to store at least one executable instruction, where the executable instruction causes the processor to perform an operation corresponding to a method as described in the previous aspect.
According to a fourth aspect of embodiments of the present invention, there is provided a computer program product comprising computer instructions for instructing a computer device to perform the operations corresponding to the method of the first aspect.
According to a fifth aspect of embodiments of the present invention, there is provided a computer readable storage medium having stored thereon a computer program which, when executed by a processor, implements a method as described in the first aspect above.
According to the configuration rollback scheme provided by the invention, the target network equipment is selected on the configuration management interface, one target configuration is selected from the archived configurations, then the rollback operation is triggered, the rollback command is automatically generated and executed, the current configuration of the target network equipment is rolled back to the target configuration, a manager does not need to manually compare the current configuration with the target configuration, the manager does not need to modify the current configuration to rollback to the target configuration, a plurality of manual intervention operations still existing in the configuration comparison and rollback process are reduced, the configuration management process of the network equipment is simplified, and the configuration management efficiency is improved.
Drawings
The above and other features and advantages of the present invention will become more apparent to those of ordinary skill in the art by describing in detail preferred embodiments thereof with reference to the attached drawings in which:
Fig. 1 is a flowchart of a rollback method of a configuration provided by an exemplary embodiment of the present invention.
Fig. 2 is a schematic diagram of a rollback interface of a configuration provided by an exemplary embodiment of the present invention.
Fig. 3 is a flow chart of a comparative method of configuration provided by an exemplary embodiment of the present invention.
Fig. 4 is a comparative interface schematic of a configuration provided by an exemplary embodiment of the present invention.
Fig. 5 is a flow chart of a method of archiving a configuration provided by an exemplary embodiment of the present invention.
Fig. 6 is a schematic illustration of an archiving interface for a configuration provided by an exemplary embodiment of the present invention.
Fig. 7 is a schematic diagram of a management interface of a network device according to an exemplary embodiment of the present invention.
Fig. 8 is a schematic diagram of a configuration management interface provided by an exemplary embodiment of the present invention.
Fig. 9 is a schematic diagram of a configured rollback apparatus provided by an exemplary embodiment of the present invention.
Fig. 10 is a schematic view of a configured rollback apparatus according to another exemplary embodiment of the present invention.
Fig. 11 is a schematic structural diagram of an electronic device according to an exemplary embodiment of the present invention.
List of reference numerals:
100 parts of configured rollback methods, 11 parts of configured rollback methods, 12 parts of configured first selection controls, 12 parts of second selection controls, 13 parts of archived configured selection windows, 14 parts of command generation controls, 15 parts of command execution controls, 16 parts of display areas, 200 parts of configured comparison methods, 201 parts of configured comparison methods, 21 parts of third selection controls, 22 parts of fourth selection controls, 23 parts of comparison controls, 24 parts of configured comparison results, 300 parts of configured archiving methods, 301 parts of configured archiving methods, 31 parts of network equipment selection controls, 32 parts of archiving controls, 33 parts of archived configured display areas, 41 parts of edit areas 41 parts of adding new switches, 42 parts of add-on controls of switches, 43 parts of display areas of existing switches, 44 parts of operation controls of existing switches, 10 parts of rollback configured edit areas, 20 parts of comparison configured edit areas, 30 parts of archive configured areas, 40 parts of management equipment, 50 parts of management equipment, 60 parts of configuration management interfaces, 400 parts of rollback management interfaces, 401 parts of configuration management interfaces, 402 parts of communication modules, 408, 404 parts of communication modules, and communication modules, 404 parts of communication modules, and the like.
Detailed Description
The present invention will be further described in detail with reference to the following examples, in order to make the objects, technical solutions and advantages of the present invention more apparent.
Referring to fig. 1, a rollback method 100 of a configuration provided by an embodiment of the present invention is shown, where the method includes:
step 101, displaying a configuration management interface of the network device.
The network equipment is connected with a display device and an input device, and a configuration management interface of the network equipment is displayed on the display device. The display device and the input device may be connected to a network device in an external form, or the network device may be connected to a computer through a network.
For example, the network device is a switch, the switch is connected with the computer, the display of the computer is used as self display device, the input device (such as keyboard, touch pad or mouse) of the computer is used as self input device, the computer enters the configuration management interface of the switch, and the configuration management interface of the switch is displayed on the display of the computer.
The configuration management interface of the network device is an interface for editing operations related to configuration rollback of the network device.
Step 102, in response to the selection operation of the network device on the configuration management interface, displaying the selected target network device.
And responding to the selection operation of the network equipment on the first selection control, and displaying the selected target network equipment. Illustratively, as shown in FIG. 2, the configuration management interface includes a first selection control 11 of network devices, a selection window of candidate network devices is displayed in response to clicking operation on the first selection control 11, the selection window including device names of one or more network devices, and a device name "aa (192.168.222.68)" of a selected target network device is displayed on the first selection control 11 in response to selecting operation of network devices in the selection window.
If the computer judges that the selectable network device is unique, the network device is automatically selected as the target network device, and the device name of the target network device is automatically displayed on the first selection control, for example, the computer is connected with one network device in an external connection mode.
Step 103, in response to the selection operation of the archived configuration of the target network device on the configuration management interface, displaying the selected target configuration.
And responding to the selection operation of the archived configuration of the target network equipment on the second selection control, and displaying the selected target configuration. Illustratively, as shown in FIG. 2, a second selection control 12 is included on the configuration management interface, in response to a click operation on the second selection control 12, an archived configuration selection window 13 is displayed, the selection window 13 includes one or more archived configuration identification numbers (IDs), and in response to a archived configuration selection operation in the selection window, the identification number "ID:1-2024-08-06 00:35:29" of the selected target configuration is displayed on the second selection control 12.
Step 104, generating and executing a rollback command in response to the operation of rollback the current configuration of the target network device to the target configuration.
And generating and executing a rollback command in response to the rollback operation triggered on the rollback control.
Or generating and displaying a rollback command in response to a command generating operation on the configuration management interface, and executing the rollback command in response to a command executing operation on the configuration management interface. For example, the configuration interface also comprises a command generating control and a command executing control, a backspacing command is generated in response to a generating operation triggered on the command generating control, and the backspacing command is executed in response to an executing operation triggered on the command executing control. As shown in FIG. 2, the configuration management interface also comprises a command generation control 14 and a command execution control 15, wherein the command generation control 14 is used for generating a rollback command in response to clicking operation on the command generation control 14, and the command execution control 15 is used for executing the rollback command in response to clicking operation on the command execution control 15. The configuration management interface further includes a display area 16, and after generating the rollback command, the rollback command is displayed in the display area 16.
Alternatively, the displayed rollback command may be edited, and after the rollback command is generated and displayed, and before the rollback command is executed, the edited rollback command is displayed in response to an editing operation on the rollback command. For example, the back command displayed in the display area 16 may be edited, the edited back command may be displayed in response to an editing operation for the back command, and the edited back command may be subsequently executed in response to a command execution operation on the configuration management interface.
Optionally, the back-off command includes at least one of:
A parameter modification command, configured to instruct to modify a parameter of a first configuration item in the current configuration to a parameter of a first configuration item in the target configuration, where the first configuration item is a configuration item having a configuration but different configuration parameters from the current configuration and the target configuration;
A configuration adding command, configured to instruct adding a second configuration item in the current configuration, and set a parameter of the second configuration item in the current configuration as a parameter of the second configuration item in the target configuration, where the second configuration item is a configuration item that has no configuration but has a configuration in the current configuration;
and a configuration pruning command, which is used for indicating to delete a third configuration item in the current configuration, wherein the third configuration item is a configuration item with the current configuration but without the target configuration.
The method for generating the rollback command comprises the steps of obtaining and comparing the current configuration of the target network equipment with the selected target configuration to obtain a configuration item with a difference between the current configuration and the selected target configuration, and generating the rollback command according to the configuration item with the difference between the current configuration and the selected target configuration. For example, comparing whether there is a difference between the current configuration of the target network device and the configuration item of the target configuration, determining whether the current configuration lacks a certain configuration item and whether there is a certain configuration item more than the target configuration, determining whether there is a same corresponding parameter of the current configuration and the configuration item of the target configuration, obtaining the difference between the two according to the comparison, and generating at least one of the parameter modification command, the configuration addition command and the configuration deletion command according to the difference. Further, the above-mentioned at least one command is executed, for example, a parameter modification command is executed to modify the parameter of the first configuration item in the current configuration into the parameter of the first configuration item in the target configuration, another command is executed to add a second configuration item in the current configuration and set the parameter of the second configuration item added in the current configuration into the parameter of the second configuration item in the target configuration, and another command is executed to delete the third configuration item in the current configuration directly, for example, a configuration deletion command is executed to return the current configuration to the target configuration.
In summary, in the configuration rollback method provided in this embodiment, the target network device is selected on the configuration management interface, and one target configuration is selected from the archived configurations, then the rollback operation is triggered, the rollback command is automatically generated and executed, the current configuration of the target network device is rolled back to the target configuration, no manager is required to manually compare the current configuration with the target configuration, no manager is required to modify the current configuration to rollback to the target configuration, many human intervention operations still existing in the configuration comparison and rollback process are reduced, errors possibly occurring in the manual rollback process can be reduced to the greatest extent, accuracy of the rollback command is ensured, the specific device and configuration are customized, the configuration management process of the network device is simplified, and the efficiency of configuration management is improved.
Second, the generated back-off commands are editable so that the administrator can audit and manually adjust the automatically generated back-off commands, providing flexibility while maintaining automation.
Before performing configuration rollback for a network device, a configuration manager may need to learn about differences between archived configurations, and the configuration management of the present invention provides an automatic comparison function for the configurations, as shown in fig. 2.
Referring to fig. 3, a comparison method 200 of a configuration provided in an embodiment of the present invention is shown, and the method includes:
step 201, displaying a configuration management interface of a network device.
The network equipment is connected with a display device and an input device, and a configuration management interface of the network equipment is displayed on the display device. The display device and the input device may be connected to a network device in an external form, or the network device may be connected to a computer through a network.
For example, the network device is a switch, the switch is connected with the computer, the display of the computer is used as self display device, the input device (such as keyboard, touch pad or mouse) of the computer is used as self input device, the computer enters the configuration management interface of the switch, and the configuration management interface of the switch is displayed on the display of the computer.
The configuration management interface of the network device is also an interface for editing operations related to configuration comparisons of the network device.
Step 202, in response to a selection operation of the configuration for comparison on the configuration management interface, displaying the selected first configuration and second configuration.
As shown in FIG. 4, the configuration management interface comprises a third selection control 21 and a fourth selection control 22 which are in the archived configuration, the selected first configuration is displayed in response to the selection operation of the first configuration on the third selection control, and the selected second configuration is displayed in response to the selection operation of the second configuration on the third selection control. For example, in response to a click operation on the third selection control 21, a first selection window is displayed, the first selection window including one or more archived configuration identification numbers, in response to a selection operation on the first selection window for the first configuration, a first configuration identification number "configuration ID 1" is displayed, in response to a click operation on the fourth selection control 22, a second selection window is displayed, the second selection window including one or more archived configuration identification numbers, in response to a selection operation on the second selection window for the second configuration, a second configuration identification number "configuration ID 2" is displayed.
The identification numbers of the archived configurations displayed in the first selection window and the second selection window are all the same or partially the same. If the first configuration identification number is partially the same, the first configuration identification number displayed in the first selection window may include the second configuration identification number displayed in the second selection window, and the second configuration identification number displayed in the second selection window does not include the first configuration identification number.
Optionally, the first configuration and the second configuration selected from the archived configurations of the target network device are displayed.
Before configuration comparison, the target network device is selected first, and the selected archived configuration is the archived configuration corresponding to the target network device. Or when the configuration management of one network device is controlled singly, the network device is the target network device, the operation of selecting the target network device is not needed to be executed, and the selected archived configuration is also the archived configuration corresponding to the target network device.
And 203, responding to the comparison operation triggered on the configuration management interface, and displaying the configuration comparison results of the first configuration and the second configuration.
The configuration management interface further includes a comparison control 23, and in response to a comparison operation triggered on the comparison control 23, the first configuration and the second configuration are compared, and configuration comparison results of the first configuration and the second configuration are displayed, as shown in fig. 4, and the configuration comparison results 24 may be displayed below identification numbers of the first configuration and the second configuration. Or configuration contrast results (not shown in fig. 4) may also be displayed through a pop-up window.
In summary, the configuration comparison method provided in this embodiment selects two groups of configurations on the network configuration interface, then triggers automatic comparison of the two groups of configurations, and finally displays the configuration comparison result, so that configuration management personnel is not required to manually call out the two groups of configurations, and then manually compare the two groups of configurations, thus obtaining a detailed configuration comparison result, improving the configuration comparison efficiency, intuitively seeing the difference between the two configuration pieces, reducing a plurality of human intervention operations still existing in the configuration comparison process, simplifying the configuration management process of the network device, and improving the configuration management efficiency.
If the configuration of the target network device changes, the current configuration of the target network device and the archived configuration can be obtained and compared, so as to determine whether to archive the current configuration, and the implementation process can be as shown in fig. 5.
Referring to fig. 5, a method 300 for archiving a configuration according to an embodiment of the present invention is shown, where the method includes:
step 301, displaying a configuration management interface of a network device.
The network equipment is connected with a display device and an input device, and a configuration management interface of the network equipment is displayed on the display device. The display device and the input device may be connected to a network device in an external form, or the network device may be connected to a computer through a network.
For example, the network device is a switch, the switch is connected with the computer, the display of the computer is used as self display device, the input device (such as keyboard, touch pad or mouse) of the computer is used as self input device, the computer enters the configuration management interface of the switch, and the configuration management interface of the switch is displayed on the display of the computer.
The configuration management interface of the network device is also an interface for operations related to configuration archiving of the network device.
Step 302, the current configuration of the target network device is obtained and compared with the archived configuration to obtain a comparison result.
And obtaining the current configuration and the archived configuration of the target network equipment, and comparing the current configuration with the archived configuration one by one to obtain a comparison result of the current configuration and each archived configuration. Illustratively, a real-time configuration comparison engine is integrated into the system of the target network device, through which the current configuration is compared with the archived configuration.
Optionally, after the configuration of the target network device is changed, if the selected operation of the target network device on the configuration management interface is received, a comparison result of the archived configuration and the current configuration is displayed, or the archived configuration and the current configuration are periodically obtained and compared to obtain the comparison result.
For example, the configuration manager changes the configuration of the target network device, the configuration management interface includes a network device selection control 31 to be archived, as shown in fig. 6, and in response to a selection operation on the target network device on the network device selection control 31 to be archived, the selected target network device (such as a device name or an identification number) is displayed on the network device selection control 31 to be archived, the current configuration of the target network device is acquired and compared with the archived configuration, and a comparison result of the archived configuration and the current configuration is displayed.
Other configuration change scenarios are also possible, such as other personnel than a configuration manager changing the configuration of the target network device, for which the archive configuration is periodically acquired and compared with the current configuration, resulting in a comparison result.
Optionally, comparing the current configuration of the target network device to the archived configuration includes comparing the current configuration of the target network device to a hash value (i.e., a hash value) of the archived configuration. Each configuration corresponds to a respective unique hash value, which is the same if the two configurations are the same, and which is different if the two configurations are different. Accordingly, the comparison of the archived configuration with the current configuration includes a comparison of the archived configuration with a hash value of the current configuration. For example, some archived configuration may be the same as or different from the hash value of the current configuration.
Alternatively, the hash value may be an MD5 value, and the MD5 value is a cryptographic hash value calculated based on an MD5 Message-Digest Algorithm (MD 5 Message-Digest Algorithm).
And step 303, if the comparison result indicates that the current configuration does not exist in the archived configuration, archiving the current configuration.
If the comparison result indicates that each archived configuration is different from the current configuration, archiving the current configuration, and storing the current configuration into a database for managing the network device. For example, the switch IP, the current configuration, the hash value of the configuration, the modification time of the configuration, the time stamp at the time of archiving are archived into a database for managing network devices.
Optionally, archiving the current configuration if the comparison indicates that the archived configuration differs from the current configuration in hash value. And if the comparison result indicates that each archived configuration is different from the hash value of the current configuration, archiving the current configuration.
Optionally, if the comparison result indicates that the current configuration does not exist in the archived configuration, and an archiving operation triggered on the configuration management interface is received, archiving the current configuration. Illustratively, the comparison results are displayed on a configuration management interface, which also includes an archive control 32, as shown in FIG. 6, for archiving the current configuration in response to an archiving operation on the archive control 32.
The configuration management interface also displays information about the archived configuration, which may include an ID of the archived configuration, a network device IP (e.g., switch IP), a time stamp, etc., and as shown in fig. 6, a plurality of pieces of information about the archived configuration are displayed on the display area 33 of the archived configuration.
After archiving the current configuration, information about the current configuration, including the ID of the current configuration, network device IP, time stamp, etc., may also be displayed on the archived configuration display area 33.
In some embodiments, if the comparison indicates that there is a current configuration in the archived configuration, then no archiving operation is performed.
In other embodiments, if the archived configuration and the current configuration are periodically obtained and compared, and the obtained comparison result is that the current configuration does not exist in the archived configuration, sending a notification mail is automatically triggered, and the notification mail is sent to a configured mailbox, where the content of the notification mail at least includes a device name or ID of the target network device, IP, a prompt message that the configuration is changed, and a change time. The configured mailbox can be a monitoring mailbox used by a configuration manager, and the sending of the notification mail enables the configuration manager to know the configuration change condition of the target network device in time.
In other embodiments, after the target network device is selected, the existing archiving configuration corresponding to the target network device is displayed, for example, after the target network device for rollback, or the target network device for comparison, or the target network device for archiving is selected, the archiving configuration corresponding to the target network device is displayed on the display area 33, as shown in fig. 6.
In summary, in the archiving method of the configuration provided in the embodiment, after the configuration of the target network device is changed, the target network device is selected, so that whether the changed configuration already exists in the database can be checked, if the changed configuration does not exist, the archiving operation is executed again, so that repeated archiving operation is avoided, a plurality of human intervention operations existing in the configuration archiving process are reduced, the configuration management process of the network device is simplified, and the configuration management efficiency is improved.
In some embodiments, the searching of the changed configuration (i.e. the current configuration) in the archived configuration is performed based on the hash value of the configuration, so long as the hash value of the archived configuration is searched for whether the changed configuration exists, all configurations do not need to be compared, and the searching efficiency is improved. The real-time configuration comparison engine can be integrated in the system of the network equipment, and the comparison between different configurations can be realized through the real-time configuration comparison engine, so that the difference between the configurations can be highlighted, the configurations are reduced, the time spent for configuration management is obviously reduced, and the complexity of configuration management is reduced.
In some embodiments, if configuration management is performed for the target network device, a management account needs to be logged in on the target network device. In the invention, the management account number can be automatically logged in, for example, after the target network device is selected, login information corresponding to the target network device, such as a number sequence and a password sequence of the login account number, and also such as a user name and a password, is obtained from the security database, and the management account number is automatically logged in on the target network device based on the login information. The method can be used for automatically logging in the background without displaying the login process on the interface, or popping up the login interface after selecting the target network equipment, displaying the acquired login account number and password on the login interface, and automatically closing the popup window after automatically logging in.
For example, if the target network device is selected and the target configuration is performed during the configuration rollback operation, the login information corresponding to the target network device in the Secure database for recording the login information of the network device is automatically called, and the management account is automatically logged in an SSH (Secure Shell) login manner, where SSH is a network protocol for performing Secure communication on an unsafe network. And then 'show run' obtains the current configuration of the target network equipment, the current configuration can be real-time configuration, and then the current configuration is compared with the target configuration to obtain a configuration comparison result, and further a rollback command is generated according to the configuration comparison result.
The method realizes the automatic login of the account in the management process of the network equipment, so that the management personnel can safely and automatically login the management account without manually inputting login information, editing errors easily occurring during manual input are avoided, and the login efficiency of the account on the network equipment is improved.
Network devices may also be managed to enable automatic login of a management account on one or more network devices. The method includes the steps of receiving operation of managing network equipment on a configuration management interface, displaying an interface of the managing network equipment, responding to editing operation of the newly-added network equipment on the interface of the managing network equipment, displaying edited equipment information and login information, responding to adding operation of the newly-added network equipment, displaying the added equipment information of the newly-added network equipment, and storing the equipment information and the login information of the newly-added network equipment into a security database. As shown in fig. 7, taking a network device as an example of a switch, editing operations of adding a new switch may be performed on the interface 40 of the management device, for example, equipment information such as a switch name, an IP address, and login information such as a user name and a password are edited in a control of an editing area 41 of "adding a new switch", after the editing is completed, an adding control 42 of the switch is clicked, the equipment information and the login information of the new switch are correspondingly sent to a security database to be stored, information such as a name, an IP address, a user name, and the like of the new switch is also displayed in a display area 43 of "existing switch", each existing switch corresponds to a respective operation control 44 on the display area 43, the operation control 44 includes an editing control and a deleting control, the editing control may modify the equipment information and the login information of the switch, and the deleting control may directly delete the equipment information and the login information of the existing switch.
The method can manage the login information of the network equipment so as to realize automatic login of the account numbers on one or more network equipment, further enable the account numbers to be automatically logged in the management process of the network equipment, enable the manager not to need to manually input the login information, avoid editing errors which are easy to occur during manual input, and improve the login efficiency of the account numbers on the network equipment.
Illustratively, as shown in fig. 8, the configuration rollback, comparison and archiving editing areas are located in the same configuration management interface 60, which includes the rollback configuration editing area 10, the comparison configuration editing area 20 and the archiving configuration editing area 30, and the configuration management interface 60 further includes a control 50 for managing the network device, and the control 50 is clicked to enter the network device management interface 40, so that operations of adding, editing and deleting the network device can be performed.
In some embodiments, each network device may be managed separately for configuration management of the network device.
Or may be deployed locally, such as by deploying a computer locally to manage one or more network devices, which may integrate a configuration management system into each network device, in which the various methods provided by the above embodiments are performed.
Or a cloud deployment mode can be adopted, for example, the configuration of a plurality of network devices distributed at different places is managed at a cloud server, and the configuration of a large number of network devices can be managed in a centralized mode. For example, the cloud server may periodically poll the network device to obtain its current configuration and compare it to the archived configuration, storing the results in a database. The configuration rollback process is automatic, initiated by the cloud server, communication between the cloud server and the network device is performed, the network device is controlled to execute configuration rollback, for example, a configuration management interface of the network device is displayed on a display device connected with the cloud server, the selected target network device is displayed in response to selection operation of the network device on the configuration management interface, current configuration is obtained from the target network device, archived configuration of the target network device is obtained from a database for configuration management and is displayed, the selected target configuration is displayed in response to selection operation of the archived configuration of the target network device on the configuration management interface, a rollback command is generated in response to operation of rollback the current configuration of the target network device to the target configuration, the rollback command is sent to the target network device, and the rollback command is executed by the target network device. The manner of generating the back-off command may refer to the above embodiments, and will not be described herein. The cloud server further has the functions of comparing configuration, archiving configuration, managing network devices, etc., and the specific implementation manner may refer to the above embodiment and will not be described herein again. The cloud-based configuration management provides greater expandability and reliability, particularly for organizations with widely geographically distributed networks, and reduces the need for local hardware.
Or a lightweight agent can be deployed on the network device, and the functions of comparison configuration, archiving configuration, network device management, rollback configuration and the like as described in the above embodiments are realized through the lightweight agent. This proxy approach may distribute processing load across the devices, reducing the need for a central server, and may also allow finer granularity control over individual devices, performing configuration changes and rollbacks more quickly.
In other embodiments, the login of the management account, and command execution may be implemented through an API (Application Programming Interface ), such as using RESTfulAPI for management tasks to retrieve current configuration, compare configuration, execute rollback commands. API-based management is safer and easier to automate, allowing for better integration of other management and monitoring systems that already use APIs.
In other embodiments, the configuration management may be implemented using templates, such as a predefined configuration setting template, a configuration comparison template, and a configuration rollback command generation template, to implement functions of configuring a device, configuration comparison, and configuration rollback, by ensuring that the device always conforms to a standard template, simplifying configuration management, reducing complexity of managing custom configurations, and minimizing the possibility of errors.
In summary, the embodiment of the invention realizes multiple functions of automatic SSH login, real-time configuration comparison, automatic rollback command generation, editable rollback command and the like, and the automation of login, comparison and rollback processes, remarkably improves the efficiency of network equipment management, reduces the time required by the tasks, reduces the risk of human errors through key steps of automatic configuration comparison, rollback command generation and the like, further ensures more reliable network operation, also allows manual adjustment of automatically generated commands, provides balance between automation and manual control for complex network environment, reduces manual labor and improves configuration management speed to lower operation cost, and is integrated with a database to store login credentials, ensures safe and efficient access management, and reduces management overhead related to manual input credentials.
Fig. 9 is a schematic diagram of a configured rollback apparatus 400 according to an embodiment of the present invention, where the apparatus includes:
a display module 401, configured to display a configuration management interface of a network device;
A device selection module 402, configured to display a selected target network device in response to a selection operation of the network device on the configuration management interface;
A configuration selection module 403, configured to respond to a selection operation on the configuration management interface for the archived configuration of the target network device, and display the selected target configuration;
an execution module 404, configured to generate and execute a rollback command in response to an operation of rollback the current configuration of the target network device to the target configuration.
In some embodiments, the execution module 404 is configured to generate and display a rollback command in response to a command generation operation on the configuration management interface, and execute the rollback command in response to a command execution operation on the configuration management interface.
In some embodiments, the execution module 404 is configured to obtain and compare a current configuration and a target configuration to obtain a configuration item with a difference therebetween, generate a rollback command according to the configuration item with the difference therebetween, where the rollback command includes at least one of a parameter modification command configured to instruct modification of a parameter of a first configuration item in the current configuration to a parameter of the first configuration item in the target configuration, the first configuration item being a configuration item with a configuration different from the current configuration and the target configuration, and a configuration addition command configured to instruct addition of a second configuration item in the current configuration and to set a parameter of the second configuration item in the current configuration to a parameter of the second configuration item in the target configuration, the second configuration item being a configuration item with no configuration but no configuration in the current configuration, and a configuration deletion command configured to instruct deletion of a third configuration item in the current configuration, the third configuration item being a configuration item with a configuration but no configuration in the current configuration.
In some embodiments, the execution module 404 is further configured to display the edited back-off command in response to an edit operation to the back-off command before executing the back-off command in response to a command execution operation on the configuration management interface.
In some embodiments, the configuration selection module 403 is configured to display the selected first configuration and the second configuration in response to a selection operation on the configuration management interface for comparing the configurations, and display a configuration comparison result of the first configuration and the second configuration in response to a comparison operation triggered on the configuration management interface.
In some embodiments, the configuration selection module 403 is configured to display the first configuration and the second configuration selected from the archived configurations, including displaying the first configuration and the second configuration selected from the archived configurations of the target network device.
In some embodiments, as shown in FIG. 10, the apparatus further comprises a comparison module 405 and an archiving module 406;
A comparing module 405, configured to obtain and compare the current configuration of the target network device with the archived configuration to obtain a comparison result;
and an archiving module 406, configured to archive the current configuration if the comparison result indicates that the current configuration does not exist in the archived configuration.
In some embodiments, the archiving module 406 is configured to display a comparison result of the archived configuration and the current configuration if the selected operation on the target network device on the configuration management interface is received after the configuration change of the target network device is completed, or periodically obtain and compare the archived configuration and the current configuration to obtain the comparison result.
In some embodiments, the comparison results include a comparison of the hash value of the archived configuration with the current configuration;
an archiving module 406, configured to archive the current configuration if the comparison result indicates that the archived configuration is different from the hash value of the current configuration.
In some embodiments, the archiving module 406 is configured to archive the current configuration if the comparison result indicates that the current configuration does not exist in the archived configuration, and an archiving operation triggered on the configuration management interface is received.
In some embodiments, as shown in FIG. 10, the apparatus further comprises a login module 407;
the login module 407 is configured to obtain login information corresponding to the target network device from the security database after the target network device is selected, and automatically login the management account on the target network device based on the login information.
In some embodiments, as shown in FIG. 10, the apparatus further comprises a management module 408;
The management module 408 is configured to receive an operation of configuring the management network device on the management interface, display the interface of the management network device, respond to an editing operation of the management network device on the newly added network device, display edited device information and login information, respond to an adding operation of the newly added network device, display the added device information of the newly added network device, and store the device information and login information of the newly added network device in the security database.
Fig. 11 is a schematic block diagram of an electronic device 500 according to an embodiment of the present application, which is not limited to the specific implementation of the electronic device. The electronic device 500 may be, for example, a network device or other computer (e.g., a local or cloud server, etc.). As shown in FIG. 11, the electronic device 500 may include a processor 502, a communication interface (Communications Interface) 504, a memory 506, and a communication bus 508. Wherein:
processor 502, communication interface 504, and memory 506 communicate with each other via communication bus 508.
A communication interface 504 for communicating with other electronic devices or servers.
The processor 502 is configured to execute the program 510, and may specifically perform the relevant steps in any of the foregoing embodiments.
In particular, program 510 may include program code including computer-operating instructions.
The processor 502 may be a CPU, or an Application-specific integrated Circuit ASIC (Application SPECIFIC INTEGRATED circuits), or one or more integrated circuits configured to implement embodiments of the present application. The one or more processors included in the smart device may be the same type of processor, such as one or more CPUs, or different types of processors, such as one or more CPUs and one or more ASICs.
RISC-V is an open source instruction set architecture based on the principle of Reduced Instruction Set (RISC), which can be applied to various aspects such as single chip microcomputer and FPGA chip, and can be particularly applied to the fields of Internet of things security, industrial control, mobile phones, personal computers and the like, and because the real conditions of small size, rapidness and low power consumption are considered in design, the RISC-V is particularly suitable for modern computing equipment such as warehouse-scale cloud computers, high-end mobile phones, micro embedded systems and the like. With the rise of the artificial intelligence internet of things AIoT, the RISC-V instruction set architecture is also receiving more and more attention and support, and is expected to become a CPU architecture for the next generation and wide application.
The computer operating instructions in embodiments of the present application may be computer operating instructions based on a RISC-V instruction set architecture, and correspondingly, the processor 502 may be RISC-V based instruction set design. Specifically, the chip of the processor in the electronic device provided by the embodiment of the application may be a chip designed by adopting a RISC-V instruction set, and the chip may execute executable codes based on the configured instructions, thereby implementing the rollback method, the comparison method and the archiving method configured in the above embodiment.
A memory 506 for storing a program 510. Memory 506 may comprise high-speed RAM memory or may also include non-volatile memory (non-volatile memory), such as at least one disk memory.
The program 510 is particularly operative to cause the processor 502 to perform the method of any of the previous embodiments.
The specific implementation of each step in the program 510 may refer to the corresponding steps and corresponding descriptions in the units in any method embodiment, which are not described herein. It will be clear to those skilled in the art that, for convenience and brevity of description, specific working procedures of the apparatus and modules described above may refer to corresponding procedure descriptions in the foregoing method embodiments, which are not repeated herein.
Computer storage medium
The present application also provides a computer readable storage medium storing instructions for causing a machine to perform the rollback method, the comparison method, and the archiving method of the configuration described herein. Specifically, a system or apparatus provided with a storage medium on which a software program code realizing the functions of any of the above embodiments is stored, and a computer (or CPU or MPU) of the system or apparatus may be caused to read out and execute the program code stored in the storage medium.
In this case, the program code itself read from the storage medium may realize the functions of any of the above-described embodiments, and thus the program code and the storage medium storing the program code form part of the present application.
Examples of storage media for providing program code include floppy disks, hard disks, magneto-optical disks, optical disks (e.g., CD-ROMs, CD-R, CD-RWs, DVD-ROMs, DVD-RAMs, DVD-RWs, DVD+RWs), magnetic tapes, nonvolatile memory cards, and ROMs. Alternatively, the program code may be downloaded from a server computer by a communication network.
Computer program product
Embodiments of the present application also provide a computer program product comprising computer instructions that instruct a computing device to perform any corresponding operations of the above-described method embodiments.
It should be noted that, according to implementation requirements, each component/step described in the embodiments of the present application may be split into more components/steps, or two or more components/steps or part of operations of the components/steps may be combined into new components/steps, so as to achieve the objects of the embodiments of the present application.
The above-described methods according to embodiments of the present application may be implemented in hardware, firmware, or as software or computer code storable in a recording medium such as a CD ROM, RAM, floppy disk, hard disk, or magneto-optical disk, or as computer code originally stored in a remote recording medium or a non-transitory machine-readable medium and to be stored in a local recording medium downloaded through a network, so that the methods described herein may be stored on such software processes on a recording medium using a general purpose computer, special purpose processor, or programmable or special purpose hardware such as an ASIC or FPGA. It is understood that a computer, processor, microprocessor controller, or programmable hardware includes a storage component (e.g., RAM, ROM, flash memory, etc.) that can store or receive software or computer code that, when accessed and executed by a computer, processor, or hardware, performs the methods described herein. Furthermore, when a general purpose computer accesses code for implementing the methods illustrated herein, execution of the code converts the general purpose computer into a special purpose computer for performing the methods illustrated herein.
Those of ordinary skill in the art will appreciate that the elements and method steps of the examples described in connection with the embodiments disclosed herein can be implemented as electronic hardware, or as a combination of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the solution. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the embodiments of the present application.
Nouns and pronouns for humans in this patent application are not limited to a particular gender.
The foregoing description of the preferred embodiments of the invention is not intended to be limiting, but rather is intended to cover all modifications, equivalents, alternatives, and improvements that fall within the spirit and scope of the invention.
Claims (10)
1. A configured rollback method (100), the method comprising:
displaying a configuration management interface of the network equipment;
responding to the selection operation of the network equipment on the configuration management interface, and displaying the selected target network equipment;
Responding to the selection operation of the archived configuration of the target network equipment on the configuration management interface, and displaying the selected target configuration;
A rollback command is generated and executed in response to an operation to rollback a current configuration of the target network device to the target configuration.
2. The method of claim 1, wherein generating and executing a rollback command in response to the operation to rollback the current configuration of the target network device to the target configuration comprises:
generating and displaying the rollback command in response to a command generating operation on the configuration management interface;
and responding to the command execution operation on the configuration management interface, and executing the rollback command.
3. The method of claim 2, wherein the generating the rollback command comprises:
Acquiring and comparing the current configuration and the target configuration to obtain a configuration item with distinction between the current configuration and the target configuration;
Generating the rollback command according to a configuration item with distinction between the two, wherein the rollback command comprises at least one of the following:
A parameter modification command, configured to instruct to modify a parameter of a first configuration item in the current configuration to a parameter of the first configuration item in the target configuration, where the first configuration item is a configuration item having a configuration but different configuration parameters in both the current configuration and the target configuration;
A configuration adding command, configured to instruct adding a second configuration item in the current configuration, and set a parameter of the second configuration item in the current configuration as a parameter of the second configuration item in the target configuration, where the second configuration item is a configuration item that is not configured in the current configuration but is configured in the target configuration;
and a configuration pruning command, configured to instruct deletion of a third configuration item in the current configuration, where the third configuration item is a configuration item that is configured by the current configuration but is not configured by the target configuration.
4. The method of claim 2, wherein the performing an operation in response to a command on the configuration management interface, prior to performing the rollback command, further comprises:
And responding to the editing operation of the back command, and displaying the edited back command.
5. The method according to claim 1, wherein the method further comprises:
Responding to the selection operation of the configuration for comparison on the configuration management interface, and displaying the selected first configuration and second configuration;
And responding to the comparison operation triggered on the configuration management interface, and displaying configuration comparison results of the first configuration and the second configuration.
6. The method according to claim 1, wherein the method further comprises:
Acquiring and comparing the current configuration and the archived configuration of the target network equipment to obtain a comparison result;
and if the comparison result indicates that the current configuration does not exist in the archived configuration, archiving the current configuration.
7. The method of claim 6, wherein the obtaining and comparing the current configuration of the target network device with the archived configuration results in a comparison result comprises:
After the configuration change of the target network device is completed, if the selected operation of the target network device on the configuration management interface is received, displaying the comparison result of the archived configuration and the current configuration, or
And periodically acquiring and comparing the archived configuration with the current configuration to obtain the comparison result.
8. The method of claim 6, wherein the comparison comprises a comparison of hash values of the archived configuration and the current configuration;
And if the comparison result indicates that the current configuration does not exist in the archived configuration, archiving the current configuration, including:
and archiving the current configuration if the comparison result indicates that the archived configuration is different from the hash value of the current configuration.
9. A configured rollback apparatus (400), the apparatus comprising:
a display module (401) for displaying a configuration management interface of the network device;
a device selection module (402) for displaying a selected target network device in response to a selection operation of a network device on the configuration management interface;
a configuration selection module (403) for displaying a selected target configuration in response to a selection operation of an archived configuration of the target network device on the configuration management interface;
An execution module (404) for generating and executing a rollback command in response to an operation to rollback a current configuration of the target network device to the target configuration.
10. A computer program product, characterized in that it comprises computer instructions that instruct a computer device to perform operations corresponding to the method according to any one of claims 1-8.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202510307689.0A CN120200914A (en) | 2025-03-14 | 2025-03-14 | Configuration rollback method, device, network equipment and program product |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202510307689.0A CN120200914A (en) | 2025-03-14 | 2025-03-14 | Configuration rollback method, device, network equipment and program product |
Publications (1)
| Publication Number | Publication Date |
|---|---|
| CN120200914A true CN120200914A (en) | 2025-06-24 |
Family
ID=96062077
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202510307689.0A Pending CN120200914A (en) | 2025-03-14 | 2025-03-14 | Configuration rollback method, device, network equipment and program product |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN120200914A (en) |
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN121037218A (en) * | 2025-10-30 | 2025-11-28 | 武汉吧哒科技股份有限公司 | Network device configuration management methods, devices, electronic equipment and storage media |
-
2025
- 2025-03-14 CN CN202510307689.0A patent/CN120200914A/en active Pending
Cited By (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN121037218A (en) * | 2025-10-30 | 2025-11-28 | 武汉吧哒科技股份有限公司 | Network device configuration management methods, devices, electronic equipment and storage media |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| US11082293B2 (en) | System and method for validating correctness of changes to network device configurations | |
| CN111045901B (en) | Container monitoring method and device, storage medium and electronic equipment | |
| US20180131574A1 (en) | Remote server monitoring and patching system | |
| US20180131579A1 (en) | Systems and interface for remotely managing server operations | |
| CN110737891B (en) | Host intrusion detection method and device | |
| US12153500B2 (en) | Configuration rollback based on the failure to satisfy predefined conditions | |
| US9223592B2 (en) | Configuring a system with various system components utilizing a configuration profile | |
| CN103490941A (en) | Real-time monitoring on-line configuration method in cloud computing environment | |
| CN109598427B (en) | Robot management method and device and electronic equipment | |
| US11005719B2 (en) | Internet of Things system topology generation | |
| US20220222266A1 (en) | Monitoring and alerting platform for extract, transform, and load jobs | |
| US20200213262A1 (en) | System and method for automating actions in distributed computing | |
| CN111225064A (en) | Ceph cluster deployment method, system, device and computer-readable storage medium | |
| CN111026572A (en) | Fault processing method and device of distributed system and electronic equipment | |
| CN120200914A (en) | Configuration rollback method, device, network equipment and program product | |
| CN113886198A (en) | An alarm method, system, device and medium | |
| CN112463616B (en) | A chaos testing method and device for Kubernetes container platform | |
| CN110049004B (en) | Method for generating white list baseline of industrial control environment traffic | |
| JP5915735B2 (en) | Operation process creation program, operation process creation method, and information processing apparatus | |
| CN112579247A (en) | Method and device for determining task state | |
| US9424552B2 (en) | Managing website registrations | |
| CN111176982A (en) | Test interface generation method and device | |
| US11757976B2 (en) | Unified application management for heterogeneous application delivery | |
| CN111866137B (en) | Data acquisition dynamic control method and device, electronic equipment and medium | |
| US11392549B2 (en) | Information processing apparatus, control method therefor, storage medium, and information processing system |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination |