JP2002009847A - Inter-LAN connection service operation cooperation method, apparatus and recording medium - Google Patents

Abstract

(57) [Summary] An object of the present invention is to enable a user of an inter-LAN connection service to change a setting of a network portion of a connection service managed by a communication carrier. A virtual switch or router is defined for each user using resources available to the user, possible settings, and information that can be referred to, and a connection network is defined as the virtual switch or router on the LAN side. Is provided, and when a command is transmitted from the LAN side to an agent that manages the virtual switch or router, the agent performs processing corresponding to the command on a device in the connection network. To do.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

BACKGROUND OF THE INVENTION 1. Field of the Invention The present invention relates to an operation technique in a LAN connection service.

[0002]

2. Description of the Related Art In recent years, a transparent LAN (TLAN) service and a virtual private network (VPN) service for interconnecting a plurality of LANs have been provided and widely used by telecommunications carriers.

The above service is a service for connecting LANs located at geographically distant places as if they are one network, and a part of the network equipment of the connected communication carrier uses the service. It operates as if it is one of the components of the LAN on the user side.

A virtual private network (V
PN) and the like, there is a tendency that the LAN configuration, QoS, and the like are changed relatively frequently. This change may be made by the owner of the LAN itself, or may be made by a company undertaking LAN management. To change the setting, a command is input for each device to set the device, or the setting is performed using a management tool dedicated to the device. In the future, it is expected that a system that can collectively set end-to-end settings for a plurality of devices by using a policy server or the like will become widespread.

[0005] However, only the connection service portion of the telecommunications carrier requires the user to request the telecommunications carrier to make a change. This means that the carrier's equipment is usually the LA of the other user.
Because N is also accommodated, the setting cannot be released in terms of security, privacy and reliability. In some cases, a communication carrier develops a dedicated tool for setting from the user side and provides the tool to the user.

[0006] FIG. 16 shows an example of performing additional setting of a VLAN including a connection service portion of a communication carrier. First, the user performs additional setting of the VLAN on each switch of the LAN1. Next, VLA is added to each switch of LAN2 by the management tool.
Make additional settings for N. Then, a request for changing the setting of the VLAN of the connection service network is made to the communication carrier by telephone or the like. Usually, the changes take place a few days later and the user is notified.

In the above-mentioned conventional technology, it takes time for the communication carrier to change the setting, and it is difficult to cope with the frequent, trial and error setting change on the LAN side. In addition, when a telecommunications carrier develops and provides a dedicated tool for setting on the user side, the development cost becomes expensive, and the user also uses the management tool used on his own LAN. The use of a special tool is required, and the work becomes complicated. Further, a time-consuming operation such as synchronizing the time when the setting change on the communication carrier is made effective and the time when the setting change on the LAN side is made effective is required.

[0007] The present invention has been made in view of the above points, and an object of the present invention is to enable a user of a LAN-to-LAN connection service to change a setting of a network portion of a connection service managed by a communication carrier. is there. In addition, the user can change the setting using a management tool that is normally used, and the communication carrier can limit the setting range and reference information for each user.

[0008]

According to a first aspect of the present invention, there is provided a service for interconnecting a plurality of LANs of a user using a connection network for setting connection networks and collecting information from the LAN side. An inter-LAN connection service operation coordination method, comprising an agent which enables a connection network to be controlled as a virtual switch or router from the LAN side,
When a command is transmitted from the side to an agent that manages the virtual switch or router, the agent performs processing corresponding to the command on devices in the connection network.

According to the present invention, an agent is connected to each LAN.
, The setting tool used by the user on the LAN side can be used to set up the connection network. Also, the agent is LA
N management tools (for example, SNMP and COPS) used by the N management tools can be configured to be processed. Although the configuration of the virtual switch or router differs for each user (for each contract), the agent may be switched for each user and processed, or the agent may be divided for each connection contract.

According to a second aspect of the present invention, in the first aspect, the virtual switch or router uses, for each user, resources available to the user, possible settings, and information that can be referred to. Define.

With this configuration, it is possible to change the configuration of switches and routers that are virtually displayed for each user, and it is possible to eliminate the interaction due to the settings on the user side. Note that it is usually easy to define one switch or router for each connection contract. Also, just by adding a virtual switch or router to the LAN-side network management system as a management target, the LAN-side network management system can change the settings of the connected network, etc., just like the LAN-side switch or router. Becomes

According to a third aspect of the present invention, in the first aspect, when the command is an inquiry about management information of a virtual switch or router, the agent acquires necessary information from a device in a connection network. And returns it to the LAN side.

According to a fourth aspect of the present invention, in the first aspect, when the command is a virtual switch or router setting request, the agent sends the virtual switch or router the setting request. The devices in the connection network are set to be equivalent to those set according to the above.

According to the third and fourth aspects of the present invention, the agent can be handled in the same manner as a management agent mounted on a normal network device. According to a fifth aspect of the present invention, in a service for interconnecting a plurality of LANs of a user using a connection network, a LAN-to-LAN connection service operation cooperation that enables setting of a connection network and information collection from the LAN side. Device, defines a connection network as a virtual switch or router using resources available to each user, possible settings, and information that can be referred to, and holds the definition information, Means for controlling a local switch or router from the LAN side, and when receiving a command from the LAN side, the agent performs a process corresponding to the command to a device in the connection network. Having.

According to a sixth aspect of the present invention, in the fifth aspect, the means for performing the processing according to the command is a connection network when the command is an inquiry about management information of a virtual switch or router. Means for acquiring necessary information from the device in the above and returning the information to the LAN side.

According to a seventh aspect of the present invention, in the fifth aspect, when the command is a virtual switch or router setting request, the means for performing a process corresponding to the command is a virtual switch or router setting request. It has means for configuring devices in the connection network as if the switch or router had been configured in accordance with the configuration request.

According to the fifth to seventh aspects of the present invention, the first to fifth aspects are provided.
An apparatus suitable for the inter-LAN connection service operation cooperation method described in Item 4 can be provided, and substantially the same operation and effect can be obtained.

[0018] The invention according to claims 8 to 10 is a recording medium storing a program for performing an inter-LAN connection service operation coordination process, and the inter-LAN connection service operation coordination apparatus is installed by installing the program in a computer. Which has substantially the same operation and effect as the first to fourth aspects of the invention.

[0019]

FIG. 1 shows the configuration of a LAN system according to an embodiment of the present invention. The LAN system shown in FIG. 1 has a configuration in which a user's LAN 1 and LAN 2 are connected to a connection network 3 (hereinafter, referred to as a connection net) of a communication carrier. The LAN 1 has a switch (SW) 4, personal computers (PCs) 5, 6, and a policy server 7, and the LAN 2 has SWs 8, PCs 9, 10. The connection network 3 of the communication carrier has SWs 11 and 12 and an operation cooperation support system 13. The operation cooperation support system 13 has a PC or a workstation (WS) 15 (hereinafter, referred to as WS 15) on which a virtual management agent 16 is mounted, and the virtual management agent 16 enables the operation according to the present invention. Note that a device equipped with the virtual management agent 16 can be referred to as a LAN connection service operation cooperation device. In the example shown in FIG. 1, the WS 15 is connected to the LAN 1 and 2 management VLAN 18 and also connected to the connection net management VLAN 19 via the firewall 14. The operation cooperation support system 13 has a policy server 17.

In the embodiment shown in FIG. 1, a contractor of the LAN connection service (users of LAN1 and LAN2)
The setting of the LAN1 and LAN2 networks can be changed by the policy server 7, which is a management tool on the user side. For that purpose, the above LAN1, LAN
2 The management VLAN 18 is configured, and the IP
An IP address (IP21) is assigned to the address (IP20) and SW8. In the state shown in FIG.
5, PC9, PC6, and PC10 are connected to the same VLAN 22, and perform communication.

The virtual switch set by the virtual management agent 16 is defined as follows.

The three ports (p1, p2, p
3), three ports on the right of SW12 (p1, p2, p
3), it is possible to provide a connection service between these arbitrary ports, and the quality is only the best effort type. Therefore, three virtual switches to the user (p1, p2, p
3) and the three right (p1, p2, p3) ports of SW12. Here, communication between all ports is possible.

The connection network management VLAN 19 is SW1
1. This is a network for a communication carrier to change the setting of SW12. Therefore, an IP address (IP24) is assigned to SW11, and an IP address (I
P25). The settings of SW 11 and SW 12 are changed by the policy server 17. In addition, the firewall 14 controls the LAN 1 and LAN 2 management V
Communication between the LAN 18 and the connection network management VLAN is disabled.

The virtual management agent 16 connected to the LAN 1 and LAN 2 management VLAN 18 is assigned an IP address (IP 23) for setting a virtual switch. Also, the virtual management agent 16
Has a function to understand and execute SNMP and commands for a virtual switch.
Align to industry standards and specific vendors that are widespread. That is, the virtual management agent behaves as an SNMP virtual management agent for a single virtual switch for the service user. For example, when the virtual management agent 16 receives an inquiry about the input / output traffic volume of a specific port of the virtual switch, the virtual management agent 16 inquires the traffic volume of the port corresponding to the corresponding SW11 and SW12, and returns the obtained value.

FIGS. 2 and 3 show an example of a case where a user changes a setting in the policy server 7. FIG. 2 shows the user L
FIG. 3 is a diagram showing a network as seen from a setting tool (policy server 7) on the AN side. From the user LAN side, the part of the connection network 3 is a virtual switch (31) 1
Looks like they are connected by a table. The virtual switch 31 has an IP address (IP address) for changing the setting.
23) appears to be waving.

FIG. 2 shows a case where a new VLAN for connecting the PC 73 and the PC 74 is added. The user receives the SW 4 and the virtual S via the policy server 7.
An instruction to add a VLAN is sent to each of W31 and SW8. The settings for SW4 and SW8 are the same as those for the normal LAN level setting change regardless of the connection service.

FIG. 3 shows a flow of processing in the connection net 3. As shown in FIG. 3, the VL for the virtual switch
The add AN command is received by the virtual management agent 16.

The virtual management agent 16 sets a VLAN path corresponding to the VLAN to be added to the connection net 3. In this example, one independent VLAN path is created from the middle port on the left side of SW11 to the middle port on the right side of SW12. This is because the virtual management agent 16 issues a command to the policy server 17, and the policy server 17 sends the VLA to SW11 and SW12.
This is realized by changing the setting of N.

FIG. 4 shows another configuration example of the LAN according to the present invention. Users of connection contract 1 are LAN 40 and LAN 41
Are connected by a connection net 44, and the user of the connection contract 2 has a LAN configured by connecting the LAN 42 and the LAN 43 by the connection net 44. FIG. 5 shows a configuration of the virtual switch 50 of the connection contract 1, in which the left port of the SW 45 in FIG. 4 corresponds to the left port of the virtual switch 50, and the right port of the SW 46 in FIG.
Corresponding to the port on the right. FIG. 6 shows the configuration of the virtual switch 51 of the connection contract 2, and the left port of the SW 47 in FIG. 4 corresponds to the left port of the virtual switch 51.
4 corresponds to the port on the right side of the virtual switch 51.

Next, the virtual management agent 16 according to the present invention will be described in detail. The virtual management agent 16 has, for example, the data shown in FIGS. FIG. 7 is a correspondence table of VLAN names by users, VLAN names generated by the system, and VLAN numbers. FIG. 8 is a list of tag numbers to be used. FIG. 9 is a table showing the correspondence between the virtual ports of the virtual switch by the virtual management agent and the real ports of the real switch. FIG. 10 shows VLA by system.
9 is a table showing a correspondence between a name of N and a virtual port list.

FIG. 11 is a diagram showing an example in which the virtual switch 60 is defined by the virtual management agent corresponding to the connection net 3. The virtual port (vp1 or the like) in the virtual switch 60 Real ports (p1, p2, etc.) in the connection net 3 are associated according to the port correspondence table in FIG. At the time of VLAN setting in the configuration shown in FIG. 11, the user sends a command to the virtual switch from the management tool used for his / her own LAN, and the virtual management agent analyzes the setting command,
Command transmission to the switch of the connection net 3 is performed. An example of such a command and processing will be described below.

First, using the flowchart of FIG.
The process of LAN generation will be described. When the virtual switch receives the command “create vlan <userVlanName>” for generating a VLAN, the virtual management agent first generates a unique VLAN name <sysVlanName> (step 1). Next, one unused VLAN number is determined (step 2), and <userVlanName>, <sysVlanName
The correspondence between> and tag numbers is stored (step 3). SW
11 and SW12, execute the create vlan <sysVlanName> command (Step 4), return the and of the command execution results in SW11 and SW12, and update the data in the virtual management agent (Step 5).

Next, the port addition processing will be described with reference to the flowchart of FIG. Add port command `` config vlan <userVlanName> add port <vPort> unta
gged ”received by the virtual switch, the real switch rSW and the real port rPort corresponding to the vPort are checked from the port correspondence table as shown in FIG. 9 (step 11), and the real switch
config vlan <sysVlanName> add rPort unt for rSW
agged is set (step 12). Then, <userVlan
The vlan number of the Name> is checked from the correspondence table as shown in FIG. 7 (step 13).
Perform lan <sysVlanName> add p5 tagged (Step 1
4) Update the data in the agent and return the execution result (step 15).

Next, the port deletion processing will be described with reference to the flowchart of FIG. Delete port command `` config vlan <name> delete port <vPort> (tagged | u
ntagged} is received by the virtual switch, the real switch rSW and the real port rPort corresponding to the vPort are checked in the port correspondence table (step 21), and the configvl
An <sysVlanName> delete rPort Untagged setting is performed (step 22). Virtual SW v as shown in FIG.
Judging from the lan status table etc., VLAN: <sysVlanName> is S
If it does not exist across W11 and SW12, config
vlan <sysVlanName> delete p5 Untagged is performed (step 23), the data in the agent is updated, and the execution result is returned (step 24).

When traffic information is acquired by the SNMP protocol, ifInOctets or ifOutOctets
Is received, the value of ifInOctets or ifOutOctets of the real port of the real switch checked from the port correspondence table is subjected to SNMP GET processing and returned.

The processing in the WS 15 of the operation cooperation support system 13 can be realized as a program, and the program can be executed on a computer such as a personal computer or a workstation. In addition, the program can be stored in a recording medium such as a CD-ROM and distributed, or can be distributed via a network.

Although the expressions of commands and the like in this embodiment are examples of a certain switch, the present invention is not limited to this, and the present invention can be applied to any switch that can constitute a VLAN. It is. Further, the present invention is applicable to a router as well as a switch.

The present invention is not limited to the above embodiments, but can be variously modified and applied within the scope of the claims.

[0039]

According to the present invention, the user of the LAN-to-LAN connection service can immediately change the setting of the network portion of the connection service managed by the communication carrier. Further, the user can change the setting of the part of the communication carrier using a management tool which is usually used. That is, as shown in FIG. 15, the user can perform additional setting of the VLAN for the entire LAN using the management tool on the user side, and can immediately confirm the operation. Therefore, it is not necessary to use a complicated procedure in the prior art as described with reference to FIG.

Also, by limiting the setting range and reference information for each user, the telecommunications carrier can protect security and privacy even though the setting is open to users.

Further, an operator who is required to change the setting of the communication carrier becomes unnecessary, and the operation cost can be reduced.

[Brief description of the drawings]

FIG. 1 is a diagram showing a configuration of a LAN system according to an embodiment of the present invention.

FIG. 2 is a diagram illustrating an example of a case where the setting of a connection net is changed from a user side, and is a diagram illustrating a network viewed from a user side setting tool.

FIG. 3 is a diagram illustrating an example of a case where a user changes the setting of a connection network from the user side, and illustrates a flow of processing in the connection network.

FIG. 4 is a diagram showing a configuration example when a plurality of users use the LAN system according to the present invention.

FIG. 5 is a diagram illustrating a virtual switch of a connection contract 1;

FIG. 6 is a diagram illustrating a virtual switch of a connection contract 2;

FIG. 7 is a correspondence table of VLAN names by users, VLAN names generated by the system, and VLAN numbers.

FIG. 8 is a list of tag numbers to be used.

FIG. 9 is a table showing correspondence between virtual ports of a virtual switch by a virtual management agent and real ports of a real switch.

FIG. 10 is a table showing the correspondence between VLAN names and virtual port lists by the system.

FIG. 11 is a diagram illustrating an example in which a virtual switch 60 is defined by a virtual management agent corresponding to a connection net 3;

FIG. 12 is a flowchart illustrating a VLAN generation process.

FIG. 13 is a flowchart illustrating a port addition process.

FIG. 14 is a flowchart illustrating a port deletion process.

FIG. 15 is a diagram for explaining the effect of the present invention.

FIG. 16 is a diagram for explaining a case in which an additional setting of a VLAN including a connection service part of a communication carrier is performed in the related art.

[Explanation of symbols]

 1, 2, 40 to 43 LAN 3, 44 Connection network 4, 8, 11, 12, 45 to 48 Switch (SW) 5, 6, 9, 10, 71 to 74 PC 7, 17 Policy server 13 Operation cooperation support system 14 Firewall 15 PC / WS 16 Virtual Management Agent 18 LAN1, 2 Management VLAN 19 Connection Network Management VLAN 20, 21, 23, 24, 25 IP Address 22 VLAN 31, 50, 51, 60 Virtual Switch

──────────────────────────────────────────────────の Continued on the front page (51) Int.Cl. ⁷ Identification symbol FI Theme coat ゛ (Reference) H04L 12/26 (72) Inventor Takashi Ezu 1-6-6 Uchisaiwaicho, Chiyoda-ku, Tokyo (72) Inventor Yoshihiro Wakasugi 1-6-1 Uchisaiwai-cho, Chiyoda-ku, Tokyo F-term (reference) 5N089 GA04 GA31 GB01 HA06 JB10 KA13 KB03 KG04 5K030 GA16 HB14 HC01 HD03 HD07 JL07 JT06 KA01 KA05 LB05 MD04 5K033 AA09 CB01 CB08 DA01 DA05 DB12 DB14 DB19 EC01 EC02

Claims (10)

[Claims] In a service for interconnecting a plurality of LANs of a user using a connection network, an LA for setting the connection network and collecting information from the LAN side.
An inter-N connection service operation coordination method, comprising the steps of: providing an agent capable of controlling a connection network from a LAN side as a virtual switch or router; and providing an agent to manage the virtual switch or router from the LAN side. An inter-LAN connection service operation coordination method, characterized in that, when a command is transmitted, the agent performs a process according to the command on a device in the connection network. 2. The LAN according to claim 1, wherein the virtual switch or router is defined for each user using resources available to the user, possible settings, and information that can be referred to.
Connection service operation linkage method. 3. The LAN according to claim 1, wherein when the command is an inquiry about management information of a virtual switch or router, the agent acquires necessary information from a device in a connection network and returns the information to the LAN side. Connection service operation linkage method. 4. When the command is a request for setting a virtual switch or router, the agent determines whether the virtual switch or router is set in accordance with the setting request in the connection network. The method according to claim 1, wherein the device is set. 5. An inter-LAN connection service operation coordination apparatus which enables setting of a connection network and information collection from a LAN side in a service for interconnecting a plurality of LANs of a user using the connection network. A connection network is defined as a virtual switch or router using the resources available to the user, possible settings, and information that can be referred to for each user, and the definition information is retained, and the virtual switch or router is held. And an agent for controlling the LAN from the LAN side, the agent having means for receiving a command from the LAN side and performing a process according to the command on a device in the connection network. L
An AN connection service operation coordination device. 6. A means for performing a process according to the command, when the command is an inquiry about management information of a virtual switch or a router, obtains necessary information from a device in a connection network and returns the information to a LAN side. 6. The inter-LAN connection service operation coordination apparatus according to claim 5, further comprising means for performing the operation. 7. The means for performing a process according to the command, when the command is a setting request for a virtual switch or router, is equivalent to setting the virtual switch or router according to the setting request. 6. The inter-LAN connection service operation coordination apparatus according to claim 5, further comprising means for setting a device in the connection network. 8. In a service for interconnecting a plurality of LANs of a user using a connection network, an inter-LAN connection service operation coordination process that enables setting of a connection network and information collection from the LAN side is performed on a computer. A storage medium on which a program to be executed is recorded, wherein a connection network is defined as a virtual switch or router using resources available for each user, possible settings, and information that can be referred to, and the definition thereof. And a procedure for configuring an agent that enables the virtual switch or router to be controlled from the LAN side. When the agent receives a command from the LAN side, the agent To perform the processing corresponding to the command to the device in the computer Recording medium on which a program to be executed is recorded. 9. The procedure for performing a process according to the command is that, when the command is an inquiry about management information of a virtual switch or a router, necessary information is acquired from a device in a connection network and returned to the LAN side. A recording medium on which the program according to claim 8 is recorded. 10. A procedure for performing a process according to the command, when the command is a setting request of a virtual switch or router, is equivalent to the setting of the virtual switch or router according to the setting request. 9. A recording medium on which the program according to claim 8 has a procedure for setting a device in a connection network.