JP2002368743A - Network design support system - Google Patents

Abstract

PROBLEM TO BE SOLVED: To provide a network design support system that can generate set information of a network device to automatically realize a network equal to a network diagram interactively drawn from the network diagram independently of various devices easily without causing setting errors or contradictions in the case of generating a configuration file of the network device. SOLUTION: The network design support system provided with a display means to display a drawn diagram or designing a network diagram where logical or physical configuration elements of a network are drawn by abstract graphics, includes a storage means that stores an object model preliminarily defining relations of components of the network and a set information generating means that generates setting information corresponding to kinds of the network devices being components of the network diagram on the basis of the model information corresponding to the components of the network and the set information of the network devices corresponding to the model information defined in advance.

Description

DETAILED DESCRIPTION OF THE INVENTION

[0001]

[0001] 1. Field of the Invention [0002] The present invention relates to a network device setting support system.

[0002]

2. Description of the Related Art In recent years, the environment surrounding networks has been
It has become significantly more complex, for example, the size of the network has become very large. Under these circumstances, technologies surrounding the network, such as the appearance of many protocols and network devices having various functions, have been remarkably developed. In order to design a large-scale network, a skilled network engineer familiar with network technology is required.

[0003] Usually, when designing a network,
First, by looking at the specifications of the application or the protocol, what kind of behavior the application or the protocol wants to take is determined abstractly irrespective of the actual device by using a network design tool, and the behavior is given to the device. In many cases, the command or parameter should be given in order to perform the command.

[0004] For example, when constructing a network in consideration of connection to the Internet, a network engineer first sets a security policy (allowing use) to determine the address range used in the organization. How to choose a protocol, how much service to provide to internal and external customers, and how much certainty to provide)
Think about how to decide.

[0005] Next, in actual application, a procedure is required to consider a method of making a router or a server recognize the address range.

[0006]

By the way, the conventional network design tool is difficult for beginners or even professionals to use. The biggest problem with these tools is that they focus on equipment such as routers and servers. Recently, every device has become multifunctional, and therefore, it is necessary to select an enormous number of setting items from an enormous number of options. As a result, only a person who fully understands the device can give an appropriate choice for an appropriate setting item, and as a result, cannot be used by a beginner.

Further, it is surprisingly difficult to replace a failed device with a hand-held device when a network device fails. This is because the work of accurately grasping the setting contents of the previous device and converting it to the setting contents of another device is added. Different models of the same vendor can cope with a certain degree of knowledge, but the task of becoming a plurality of different vendors involves a high degree of difficulty.

Further, in the conventional setting support tool,
It has an internal data structure that depends on a specific vendor or specific device. For this reason, the setting information of the assumed device can be automatically generated, but the configuration information of another vendor or another device of the same vendor cannot be output.

[0009] Also, the generation of the configuration of the network equipment which is an important part of the network design is as follows.
There are many issues to consider, complex, and it is difficult to automate with the know-how. Conventionally, there is no tool to support this work. In the current situation, the solution was either personalized work by a small number of technicians with the know-how, or endurance in a wasteful vendor's set-up environment.

[0010] In particular, the creation of a configuration file must ultimately be made for each device existing in the network. For this reason, in addition to the fact that the setting items are diversified, they must be set without contradiction or error, which is a burden on the designer.

[0011] In addition, since attribute information determined in one specific place must be accurately defined for all devices, troubles in careless mistakes have been frequently observed. For example, although all setting items such as a subnet mask in an IP network must be the same, there may be a case where the setting is made differently, which may cause a packet to flow or not to flow. Was. As described above, most misconfigurations of network equipment occur for simple reasons such as misdefinition of subnet mask and misdefinition of addresses at both ends of the link, and it was difficult to discover such simple things. .

Further, in this type of network device, the setting items of the configuration file are also different depending on the model and the vendor, and this is a burden on the designer.

The present invention has been made in view of the above circumstances, and an object thereof is to generate a configuration file of a network device easily and without setting errors or inconsistencies. To provide a network design support system capable of automatically generating setting information of a network device for realizing a network equivalent to the network diagram from a network diagram described interactively regardless of various devices. It is in.

[0014]

According to one aspect of the present invention, there is provided an image forming apparatus for designing a network diagram in which logical or physical components of a network are described in an abstract figure. A network design support system comprising display means for displaying a screen, comprising: storage means for storing an object model in which the relationship between the components of the network is defined in advance; and model information corresponding to the components of the network. Setting information generating means for generating setting information according to the type of network device in the component of the network diagram based on setting information of the network device corresponding to the model information defined in advance. Features.

Further, according to the invention described in claim 2, the display means includes at least one first component and the first component.
A third component connected via the component and the second component is displayed, and when the attribute of the third component is selected and designated, the attribute of the second component is set to the attribute designated by the selection. It is characterized by having control means for performing display control so as to be the same.

The invention according to claim 3 further comprises a layer changing means for changing a network diagram by the logical or physical components so as to be editable for each layer of the network, and The means changes the display mode so that the logical or physical components of the network diagram in the first layer before being changed by the layer changing means are reflected in the network diagram in the second layer after the change. Display control.

According to a fourth aspect of the present invention, the control means controls the display so as to limit the association when the components of the network diagram in the second layer cannot be associated. It is characterized by:

According to a fifth aspect of the present invention, in the control means, the icon comprising an abstract graphic for constituting the network diagram of the second layer constitutes the network diagram of the first layer. It is characterized in that display control is performed so as to regulate such that it can be arranged only on the logical or physical second component having a dependency relationship with the logical or physical first component.

According to a sixth aspect of the present invention, the control means converts a network composed of a plurality of logical or physical components into a logical or physical pattern composed of at least one abstract figure based on a user's selecting operation. It is characterized in that control is performed such that the physical components are displayed collectively.

According to a seventh aspect of the present invention, there is provided an information processing apparatus, comprising:
Or a first acquisition unit for acquiring device information on the network obtained by RMON, a second acquisition unit for acquiring setting information of a device on the network by a TFTP protocol, and an analysis for parsing the acquired setting information. Means,
Means for generating a logical or physical component on the display means based on the setting information analyzed by the analysis means.

According to an eighth aspect of the present invention, the control means is configured to select one of the logical or physical components of the arranged network diagram based on an operation of selecting the logical or physical component. Alternatively, it is characterized in that a designation screen for designating a plurality of pieces of attribute information is displayed.

According to a ninth aspect of the present invention, in the control method, the control means selects each logical or physical component of the network diagram based on a selection operation of the logical or physical component. It is characterized by automatically generating and displaying a model that conforms to.

[0023]

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS Hereinafter, an example of a preferred embodiment of the present invention will be specifically described with reference to the drawings.

[First Embodiment] (Schematic Description) First, the feature of the present invention is that setting information corresponding to devices of different models (components in a network diagram (virtual network) drawn on an editor). For example, configuration information, etc.), the network diagram can be displayed, output, and designed for each layer.
A device automatic discovery function using NMP.

Prior to the description of such a characteristic configuration, an environment in which the network design support system of the present invention is mounted will be described. The network design support system of the present embodiment is software for designing a network diagram and generating setting information of network devices (for example, routers and switches) of the network diagram. For example, as shown in FIG. 3 is mounted on an information processing apparatus 2 such as a PC connected to the PC 3.

Here, the information processing apparatus 2 is, for example, a PC configured to transmit and receive data via the network 3.
And display means for displaying various information, operation input means such as a keyboard for inputting data on a display screen of the display means, and communication for transmitting and receiving data. Means, such as a communication interface, various programs (including a network design support system program of the present invention, other various application programs and an operating system, etc.), storage means such as a hard disk for storing various data, and control of these. And a control unit such as a central processing unit (CPU) for controlling the operation. The information processing device 2 includes a desktop, a laptop computer, and other
Any computer such as a portable computer device having a wired communication function or a similar computer may be used.

The user uses the software of the present invention installed in the information processing apparatus 2 to specify network needs such as resource allocation and route selection, and to specify a network part of a system to be constructed (for example, a network part). A network 3) as shown in FIG. 1 is created while interacting with the screen. At this time, setting information (configuration file) of network devices such as routers in the network 3 is automatically generated according to each model.
As a result, the setting information output from this system, such as the configuration file of the network device, is actually transmitted to the network devices of the network that is already operating (or the network that is to be built if it is the network to be built). To make the network device operable based on the configuration file, so that a predetermined function can be reliably performed.

In this way, an actually operating network is completed, and the network functions as in a network designed by a skilled engineer.

Although the details will be described later in order to automatically generate a configuration file corresponding to various devices, in this system, abstract network information (the number of interfaces connected to the router and its IP Another feature is that an object (repository) that holds an address or the like and an object (generator) that generates settings for controlling the device are separated. The generator keeps knowledge of the order of the commands described in the configuration file and the syntax of the command. When generating the configuration file, the generator queries the repository to obtain necessary information. Because of this structure, when increasing the number of corresponding router models,
There is an advantage that the repository part does not need to be changed and only a generator for each model needs to be added.

(Definition of terms in this specification)
In this specification, “network configuration information” is information indicating a network desired by a user. For example,
The network diagram represents network configuration information as a set of nodes and links. In the present system, what describes this network configuration information according to the network model is called a network model. The “configuration information of a network device (or simply configuration information, configuration)” refers to a series of settings required for controlling the network device. For example, a command for performing priority control of network traffic, a command for performing route control, and the like are provided. By providing appropriate setting information to the network device, the network device performs an activity desired by the user. Also called Configuration. Further, an individual command or command constituting the setting information is called a setting element (Configuration Element).

The “network meta model (or meta model)” is a model that defines the structure of the network model. That is, when an arbitrary network model is given by the user, this is a model serving as a criterion for determining which model is appropriate and which model is inappropriate. The "network model" is a representation of a network that a user desires to realize, as a set or system of network objects. The “network object” is an object that is a component of a network model. Each network element in the network model corresponds to it. By gathering the network objects, network devices and logical networks are represented. Each network object stores data and rules related to the data.

“DEN” is a directory-enabled network (Directory Enabled Networks), in which network setting information described by a certain method is placed in a directory server, and each network device or service refers to the setting information. This is a framework for centrally managing a plurality of network devices and services, and realizing network management in cooperation with a plurality of management tools and applications. Within this framework, especially policies (rules that traffic should follow)
What is specialized in is called policy networking, and network vendors are responding in this area. “CIM” means (Common I
nformation Model), which means a certain format for describing "network setting information described in a certain format", which is commonly used between any device or service of any vendor.

"Layer" is a so-called standard meaning, which is different from each layer in the seven-layer model defined in OSI, and is more abstract and depends on a certain service for another service. Indicates that there is a dependency relationship. In most cases, the protocol layer is the layer in the above sense. For example, on the Internet, the protocol for exchanging mail is S
MTP is used, which means not only mail transfer, but also depends on TCP and DNS,
In this example system, it is called the SMTP layer.

However, when the service contents are the same although the protocols are different, the protocols are collectively expressed as a layer. For example, RIP / OSPF used for routing in an IP network
Are different protocols, but both provide a service called routing, so the routing layer,
Alternatively, they are collectively expressed as a routing layer.

(Regarding Display Screen) Next, when designing a network, the display mode (screen development) of the display screen displayed by the above-described information processing apparatus will be described with reference to FIGS.
This will be described with reference to FIG.

First, in the software in the network setting support system according to the present embodiment, the network diagram is organized by layer, and only the minimum necessary items are presented. The layers are data link layer, IP layer, and IP routing layer.
A hierarchy is formed. Here, the plurality of service layers of the network have almost the same meaning as the layers in the hierarchical model in OSI, but are strictly defined as abstracted meanings.

When the software of this embodiment is started,
The display screen shown in FIG. 2 is displayed. In FIG. 1, a display screen 10 is a screen for creating a network diagram in a link layer, and includes a network component selection unit 20 for selecting network components (physical components, logical components). A network display unit 30 serving as a canvas on which a network diagram is drawn, a layer selection unit 40 serving as a layer changing unit for selecting a layer, a property display unit 50 displaying various properties, and the like; An operation unit 80 displaying commands in a menu bar format, and an operation unit 90 displaying functions substantially similar to those of the operation unit 80 in a toolbar format
And

The network component selection unit 20 includes, for example, a graphic icon 21 formed as a symbol abstracted into a substantially circular shape representing a router, and an icon formed in a substantially rectangular shape representing a link layer protocol end point. 22, icons 23 and 24 formed in a substantially rectangular shape meaning LAN and WAN. These icons 21, 22, 23 and 24 are selected by dragging and dropping with a pointer or the like and pasted on the network display unit 30. You can create a network diagram that you can imagine in a diagram format. However, when a network configuration is formed, for example, the icon 22 of “Link Layer Protocol Endpoint” is displayed.
Can be placed only at the point where it can be connected, at the point.

In the example of FIG. 2, the network display unit 30 includes a router segment 31, protocol end point segments 32a and 32b, a LAN segment 33,
The display is formed in the arrangement as shown in the drawing, such as the AN segment 34 and the WAN connection line 35.

The layer selecting section 40 includes a layer 1 selecting section 41 for selecting a link layer, a layer 2 selecting section 42 for selecting an IP layer, and a layer 3 selecting section 43 for selecting an IP routing layer. The user can select one of the selection units 41, 4
By selecting 2, 43, it is possible to transition to a screen of a desired layer.

In the network display section 30, when the LAN segment 33 is selected by a pointer or the like, the LAN
A protocol selection unit 60 is displayed, and a network protocol in the LAN segment 33 is specified by selecting a plurality of predetermined selection items, for example, Ethernet (registered trademark) 61 or the like. At this time, in the protocol endpoint segment 32a, since the association with the LAN segment 33 is uniquely determined according to the protocol selected in the LAN segment 33,
The choice of Ethernet will be made automatically.

When the LAN segment 33 is selected as Ethernet, the icon 22 of the protocol endpoint is displayed as “Ethernet (registered trademark) Prot”.
ocol Endpoint ", and the protocol is automatically changed to the associated protocol. And "Ethernet Pro
Selecting "tocol Endpoint" also connects the protocol endpoint with "Ethernet". That is,
"Link Layer Protocol Endpoint" is "FrameRelay Protocol Endpoint" if it is a frame relay, and "Ethernet Protocol
Endpoint ".

On the other hand, in the network display section 40, when the WAN segment 34 is selected by a pointer or the like, a WAN protocol selection section 70 is displayed, and a predetermined plurality of selection items, for example, the ATM 71 and the frame relay 72 among the ATM 71 and the frame relay 72 are displayed. By selecting, the protocol of the network in the WAN segment 34 is specified. At this time, the protocol endpoint segment 32
In b, since the association with the WAN segment 34 is uniquely made in accordance with the protocol selected in the WAN segment 34, the ATM is automatically selected. The LAN segment 33
In the case where a protocol is not particularly selected in the WAN segment 34, each segment 33, 34, 32a
-The space in 32b is left blank.

Next, a link layer (OSI physical layer,
(Corresponding to the link layer), a network diagram is formed, for example, by selecting the layer 2 selection unit 42 and moving to a screen of another layer (for example, an IP layer), as shown in FIG. The designed network diagram is displayed in a state (dimmed) reflected on the screen of the IP layer.

On the display screen 10 shown in FIG. 3, the network diagram created by the link layer shown in FIG. At this time, unlike the case of the link layer, the network component selection unit 20 has, for example, a graphic icon 25 formed as a symbol abstracted into a substantially rectangular shape meaning an IP protocol end point, and a substantially icon meaning an IP subnet. An icon 26 formed in a square shape is displayed and formed.

For example, when the icon 26 is selected and pasted on the network display unit 30, the icon 26 is formed so that the icon 26 can be placed only on the segment 103, for example. Network design can be performed while maintaining the performance.
In this way, when the icon 26 is pasted on the segment displayed in a thin manner, the IP subnet segment 1
03 is formed. At this time, when the IP subnet segment 103 is selected, a network name selection unit (not shown) is displayed, and a network name such as subnet 1 or Yokohama can be selected and designated.

Similarly, the IP protocol endpoint segment 102 is formed by pasting the icon 25 on the thinly displayed segment, and is displayed as, for example, IP. The same applies to the segment 104. Further, since the network configuration of the IP layer directly reflects the network configuration of the link layer, the connection state of the connection line 105 is changed from, for example, between the IP protocol endpoint segment 102 and the segment 104 to another location. If you try to connect to, it is configured to be unable to connect. That is, the IP layer is configured so that the physical configuration cannot be changed, so that an erroneous network design is not performed. If it is desired to change the design of the link layer, it is necessary to select the layer 1 selection unit 41 and return to the link layer once to make the change.

In this way, while selecting the components required for the network from the options, the specifications,
A network configuration can be created by interactively drawing a network configuration diagram on a screen while checking physical constraints.

The operation unit 90 is provided with an IP address specification unit 91 for specifying an IP address or the like in the IP protocol end point segment 102 or the like. When this IP address designation section 91 is selected, a display screen 110 shown in FIG. 4 is displayed. On the display screen 110 of FIG. 4, an operation unit 120 for designating GridSize and the like, a first list display unit 130 displaying a list of networks associated with segments for which an IP address has not yet been set, and an IP address set A second list display section 140 for displaying a list of networks associated with the selected segment, an IP address specification display section 150 for specifying an IP address, and the like are formed.

In the IP address designation display unit 150, for example, 172.16.0, 172.17.0, 17
2.18.0,..., 0.0, 1.0, 2.0,
.. Are displayed, and by selecting each block where the vertical axis and the horizontal axis intersect, the address can be selected visually. Therefore, the already selected I
The P address is displayed in color. When a new IP address is designated or the IP address is changed, the P address is displayed.
If you specify a duplicate P address or violate the rules,
Designation of the P address can be prevented.

Further, by filling the blank address by dragging and dropping, the rearrangement can be easily performed, and the rearrangement of the address can be easily performed without duplication, and only the correct address can be set. .

FIG. 5 discloses an example of a display screen in a state where an IP address is specified in the IP layer.

In the figure, in the network display section 30 on the display screen 10, the router segment 10
1a, 101b and router segments 101a, 101
b, a subnet 4 segment 104 formed by WAN, a subnet 1 segment 103a connected to the router segment 101a, and a router segment 10
1b, a subnet 2 segment 103b and a subnet 3 segment 103c, and an IP protocol endpoint segment 102 between these segments.
b, 102c, 102a, 102d, and 102e are displayed. Here, for example, the IP of a certain subnet
When the address is changed, the IP address of the associated segment is uniquely changed accordingly.

For example, a configuration may be employed in which the value of an IPv6 address is given while maintaining the IPv4 addressing relationship. For example, it is preferable to prepare a fourth selector for conversion to IPv6, and to rearrange the addresses simply by dropping it there.

Next, by selecting the layer 3 selecting section 43, the operation shifts to the IP routing layer, and a display screen as shown in FIG. 6 displaying a network diagram reflecting the network diagram of the IP layer in FIG. 5 is displayed. Is displayed.

On the display screen 10 shown in FIG. 6, a network diagram created in the IP layer shown in FIG. At this time, unlike the case of the link layer and the IP layer, the network component selection unit 20 has, for example, a graphic icon 27a formed as a symbol abstracted into a substantially rectangular shape meaning a RIP protocol end point, and an OSPF protocol end. An icon 27b formed in a substantially rectangular shape indicating a point, an icon 28a formed in a substantially square shape indicating a RIP exchange, OSPFe
An icon 28b, which is formed in a substantially square shape meaning xchange, is displayed and formed.

Then, for example, by selecting the icon 28a and pasting it on the segment 162b of the network display unit 30, the RIP segment 163b is allocated (associated) with the segment 162b. In the IP routing layer, settings such as RIP and OSPF, which are protocols for performing dynamic routing and the like, are performed. Thus, when the area of the dynamic routing is determined, the protocol endpoint also changes to the corresponding protocol.

At this time, the related segment is also assigned as the RIP protocol endpoint segment 165d. The same applies to the segments 162c and 165e.

The segment 162a has a RIPex
change segment 163a, OSPFexcha
The neg segment 162a can also be allocated.
At this time, each of the RIP protocol endpoint segment 166 and the OSPF protocol endpoint segment 167 is assigned to the associated segment 165a. The same applies to the segments 170 and 165b.

Next, on the display screen thus configured, for example, as shown in FIG.
When 1 is selected, it can function as the router, ie,
A router property 50 is displayed that displays a plurality of routers that can use the RIP and OSPF and that can meet the condition that the port has two or more ports. In the router property 50, a display unit 51 that displays the shape of a router of a predetermined model, a model selection unit 52 that can select a router type such as GateD, a name specification unit 53 that specifies a name displayed on a segment, and the like Is formed.

For example, in the router property 50,
When a list of compatible router models is displayed, the user selects a specific model for the router on the network diagram (device selection function).

Further, for example, “IP Protocol Endpoint”
When OSPF is used, the device list is automatically displayed under the condition that the router has four or more ports and can use OSPF. As a result,
The device list is narrowed down, and a desired router is selected therefrom.

After applying the selected router to the network diagram, the configuration file of the corresponding device can be automatically generated by an operation such as dropping. That is, while selecting a desired router and each item from the applicable routers, the router segment 161 is selected.
Is selected, the operation selection unit 180 is displayed, and "toF
ront "181," toBack "182," Gen
It is formed so that each of the selection units such as “erateConfiguration” 183 can be selected. Then, for example, “GenerateConfig
By selecting “uration” 183, for example, Ga
The teD configuration file is automatically generated. Or, if you choose Cisco,
"GenerateConfiguration" 18
By selecting 3, a Cisco configuration file is automatically generated, for example.

For example, in the case of Cisco, this configuration file is displayed on a display screen 191 shown in FIG. 8, and in the case of GateD, the configuration file is displayed on a display screen 1 shown in FIG.
92 will be displayed. Then, the configuration file can be confirmed, customized, and edited on the displayed screen such as the display screens 191 and 192.

Here, a configuration file can be automatically generated according to each model by using a logical model of a network using object orientation and a definition file (command correspondence table) corresponding to each model. it can. The generated configuration file is stored as a file.
The configuration can be changed (rewritten) by incorporating it into the router at P.

In this example, if the address of the interface is set and input at the protocol end point, the address is automatically set at the time of generating the configuration. Also, for example, RIP,
Even when OSPF or the like is set, the rearrangement of addresses can be performed very easily.

Thus, finally, for example, FIG.
As shown in a display screen 201 shown in FIG. 0, a network diagram as shown can be configured in the network display unit 210 in the link layer.

In the example shown in the figure, for example, a frame relay 221 and an ATM 214 are also formed as a WAN. FIG. 11 discloses a display screen 201 displaying a network diagram in the IP layer of the network diagram. In the example of this figure, for example, as the WAN corresponding to the frame relay 221 in FIG.
261, a place name such as a Tokyo Yokohama WAN 252 is displayed as a WAN corresponding to the ATM 214. In this way, a network can be designed.

In this example, a device on the network has a discovery function of acquiring device information by using a protocol such as SNMP. Here, in the conventional network software, even if a diagram is generated, only the physical layer information based on the SNMP information is displayed and generated. Also, the display format is
Point-to-point only displayed information about which device was connected to which device.

On the other hand, in this example, information obtained by SNMP can be mapped to the network model to generate a logically understandable diagram. That is, S
With respect to the information obtained by the NMP, the configuration information of a certain router is obtained, analyzed again, and additional elements are created to create a network diagram suitable for the network model (discovery function).

The configuration of the network design support system having the above display screen will be described in detail below.

(Functional Configuration of System) The network design support system 300 according to the present embodiment is roughly classified in terms of function. The configuration defining means is an editor 310, a wizard generating means 320, a directory output means 330, a configuration information output means 400, And a repository 500.

The editor 310 interactively generates a network diagram, and a network model corresponding to the generated diagram is stored in the repository 500 and is used variously.

The wizard generation means 320 generates a network model by interactively specifying requirements for the network and displays it on the editor 310 in order to quickly design the network.

The directory output means 330 stores the network model information in the repository 500 in a directory server, and stores other application, management tools,
Make it accessible from the device.

The configuration information output means 400 generates and outputs, based on the network model information in the repository, the setting information of the actual network devices required to realize the model.

The repository 500 has a function of storing a network model to be designed. When storing a network model, the repository 500 stores the network model in a format in which rules specific to the protocol are reflected. To prevent it from being done.

The present system employs an abstract / general internal data structure, so that there is no restriction on the model. In this case, in order to make the internal data structure correspond to the actual device setting information, a file format called NDD is defined, in which data in the internal model corresponds to which setting information of the target device / service. To express By doing so, it is possible to convert the internal model into a format applicable to the actual device. Therefore, if only an appropriate NDD definition file is prepared, settings for different devices of different vendors and different vendors can be output.

Hereinafter, each of these units will be described.

(Editor) Network configuration definition means,
An editor 310, which is a display unit, interactively defines a network device and an entire network constituted by the network devices, and includes a network configuration diagram drawing unit and a CIM standard conversion registration unit.

The network configuration diagram drawing means selects the components required for the network from the selection options on which the network components are displayed, and displays the specifications,
By interactively drawing a network configuration diagram on a screen while checking physical constraints, all information of the network configuration is defined. This information is converted into a format conforming to the CIM standard and stored in a directory.

Here, interactively creating a network configuration diagram means that there is a mount (canvas) for drawing the network diagram, and an image of the user is created by placing an icon on the mount or drawing a line between the icons. Creating a network diagram in diagram form. That is, in the network configuration diagram drawing means, when started, an editor screen is opened, a physical object indicating a network component is placed at an arbitrary position on the screen, and the entire image of the network can be drawn by connecting each element. In addition, in order to simplify the operation, commands to be remembered by the user on the editor are minimized, and the operation can be learned in a short time.

Also, in order to reflect on the drawing screen that the contents to be set are different if the layers are different even on the same device, an independent design screen is provided for each layer, so that each layer can be designed independently. ing. As a result, it is possible to prevent extra elements from being mixed when designing the function of a certain layer. Then, the addition, change, or deletion of the setting made on the drawing function is immediately reflected on the network model behind the setting. The user can select the required action from the menu bar on the screen, and thereby easily create the network plan required by the user himself. In this way, it is possible to design a network with little omission of network configuration for each layer.

Further, information having the same attribute (layer) can be extracted from the definition information stored in the directory and displayed. It is also possible to display the network definition information registered in the directory by converting to the CIM standard.

Further, although the device corresponding to the drawing symbol differs for each layer, the function is the same.
Applying the same function to the same symbol helps the user to learn. At this time, the symbols are arranged on the drawing to visually represent the relationship between various elements constituting the network. The screen (canvas) on which this symbol is arranged differs for each layer. For example, IP
If it is a layer, there is an IP layer drawing canvas. Then, the IP layer canvas is displayed independently of the canvases of the other layers. However, if there is a dependency between the layers, the information of the dependent layers is displayed at the same time, and the design work can be performed while referring to the information of the layers.

The CIM standard conversion registration unit converts the network definition information described by the drawing function into a format conforming to the CIM standard, and outputs this to a directory. The CIM standard is added to the directory schema so that the network definition information created by the network configuration definition function can be stored in the directory and referenced.

Further, the configuration information of the network created by this product is stored and registered in a database, which is called a directory server and manages information on resources (users, devices, applications, etc.) on the network.

In this example, the repository (details will be described later) 50
0, the function is achieved by cooperation between the directory broker and the directory server. The directory server searches, saves, changes, and deletes data using an access protocol called LDAP. The directory broker obtains information on the server that is the destination of the storage. This is achieved by presenting a dialog to the user and obtaining information from it.

Next, a list of objects constituting the model is obtained from the network model, and data to be stored in the directory server is generated based on the list. Since each network object understands the data representation, the directory broker must simply request the data and convert the received data into a format that is suitable for the directory server. Become. Then, the directory broker stores data in the directory server using LDAP.

(Wizard Generation Means) The wizard generation means 320 has a function of designing a network satisfying the needs by cascading designating network configuration conditions according to a guide. First, in addition to this, network configuration, equipment used, required security, QOS,
It is preferable to have a prototype function that supports network design work by presenting a model for each industry type, backed by experience and technology, for the needs of route control and the like, and modifying it.

Here, the wizard function provides a function of inputting network configuration conditions in a cascade and determining the configuration. By interactively inputting the user environment such as the number of sites, the number of servers, and the number of clients, a network configuration is automatically generated. The user can use this definition information to immediately design a network that satisfies the request.

Also, since the network definition information is not generated from scratch by the editor, the number of steps required for designing the network can be reduced, and the burden on the design can be reduced.

Further, it is preferable to provide a wizard customizing function so that a user of the present system can generate a wizard according to his / her business type and business. When performing decentralized management, the central administrator describes in advance the definition information to be centrally managed in the prototype, and the items to be delegated to the managers at each site are questionable, so that there is no inconsistency. The network configuration can be generated in a distributed manner.

(Directory Output Means) The directory output means 330 stores network design information in a directory. The directory server stores the created network setting information in a format corresponding to the CIM in the directory server. Therefore, a CIM-compatible network device can directly refer to these pieces of information and realize a desired network configuration.

(Repository Function) In the repository 500, a model representing the entire network is composed of the following three sub-models: a physical device meta model, a logical interface meta model, and a protocol meta model.

The physical device meta model is a model indicating a hardware configuration of network devices constituting a network, and corresponds to a physical layer in OSI. The logical interface meta model is a model indicating what network interface the network device has, and the relationship with the physical device meta model is realized. That is, the role played by the logical interface metamodel has a relationship realized by the corresponding physical device. Therefore, a physical device model is not necessarily required in the design.

[0097] The protocol metamodel is modeled to express a state taken by a network protocol. The relationship between the protocol metamodel and the logical interface metamodel is dependent. That is, a logical interface model is indispensable as a logical premise for designing and implementing the protocol metamodel. This is a model of the third and higher layers in OSI.

Furthermore, each metamodel may depend on itself. For example, the protocol metamodel contains
The IP network metamodel and the OSPF routing metamodel are included.
It depends on the P metamodel.

Here, for example, as a logical interface model, an ATM (PVC) interface, an Et
It is preferable to have a hernet interface or the like. The protocol models include Ethernet and ATM (P
VC), IP, RIP, OSPF and the like.

As the function of the repository, first, an object constituting the network model, that is, a network model generated by the drawing function and the wizard function and individual objects constituting the model are held.

Second, it has a function of verifying the consistency of input data for each object constituting the network model. If there is a problem, notify the program that has input it. In addition, it is configured so that an object cannot be generated without essential data for the object.
As a result, it is ensured that the data exists and is appropriate.

Third, it has a function of calling out data held by an object from another function and outputting the data so that the data can be used. For example, JNDI (Java Namin
g and Directory interface).

Next, an outline of the processing of the repository 500 when registering data will be described with reference to FIG.

As shown in FIG. 13, when registering data, the editor GUI 312 registers the data given by the user (step, hereinafter "S" 11).
Based on the registered data, the editor 310 requests the repository 500 to register the data (S1).
2). Upon receiving the request, the repository 500 verifies the contents of the parameter (S13), and then verifies the data (S14). Based on this verification result, the repository 500 sends the result to the editor 310 (S15). Upon receiving the result, the editor 310 sends the result to the editor GUI and prompts the display.

The exchange of data is substantially the same for data acquisition, change and deletion, and the structure is simple even in cases other than data registration. As a result, the function of retaining data and the function of verifying the accuracy of the data have become one, so if an appropriate program is created where the function is realized, the request for essential data and the verification of the data contents will be performed. Can be realized simultaneously and easily. Also, when saving data in the repository, by checking the data passed from the drawing tool, it is possible to prevent incorrect information from being input, and prevent incorrect input in advance. In addition, information can be easily verified.
Further, when the editor 310 stores the data, the data is necessarily stored in the repository, and when the data is stored, the required attribute is required, so that the correct data is automatically stored. .

Further, for example, what kind of model expresses that an interface corresponds to a protocol called RIP is examined, and various attributes for expressing the model are defined.

The protocol validity check function is implemented as two functions: a definition of a static model for correctly expressing a certain network design rule, and an implementation of a behavior in an actual program for implementing the model. Is done. The former static model is expressed as a class diagram, and is realized as a basic structure for storing data. The latter is realized by program code as an implementation of the class.

As described above, in the system of the present embodiment, the data constituting the network is decomposed into each element called an object, and the static relation between the elements is defined. Can be kept appropriate.

By enabling the input data to be checked inside each object, it is possible to prevent an erroneous configuration from being caused due to erroneous data being input.

This data structure is defined, and a place where data is actually stored is defined as a repository. By calling this repository as needed, each function can access the information that the rule agent has.

The repository holds network information in a form independent of various input / output functions, thereby increasing the independence of the repository itself. Then, when the various input / output functions store and retrieve data necessary for themselves, the input / output functions perform necessary conversion. This makes it possible to make the repository independent of other I / O functions, and to make the repository independent of other I / O functions. It becomes easy to add an output function (for example, output of network model data using XML). In addition, reusability of the repository itself can be ensured, and application to other different types of applications (for example, a policy management system or a network management system) becomes possible.

With such a repository function, first, data retention and data consistency maintenance can be simultaneously realized. That is, the network model is expressed as a system of objects corresponding to the components of the network.

When certain data is stored in a network object, it is possible to prevent the danger of accepting invalid data by automatically checking whether or not the data is abnormal during the storage process. Further, by requesting a certain amount of data (of course, the suitability check is also performed at the same time) when the object is generated, it is possible to prevent the necessary data from being lost.

Further, since the network model itself is configured to embody the rules to be followed in the protocol or layer, it is possible to simultaneously secure the appropriateness of the relationship between the objects and hold accurate data. .

Further, addition of a new rule or change of a rule can be achieved only by modifying a corresponding portion of a network object related to the added / changed portion, and the influence on other functions can be minimized. become able to.

Further, the network object is configured to understand what meaning the data has and how it should be represented. Therefore, when performing various data expressions such as LDAP and XML, data can be output in a format suitable for each data.

Protocols (systems) constituting a network have characteristic rules for each. For example, in the case of Ethernet, there are rules such as a cable length, the number of repeaters (hubs), the terminator specifications, and the upper limit of the number of nodes that can be connected to a network.
In the case of IP, the address range, subnet mask, and router address need to be set correctly.

In the IP routing, it is necessary that a routing protocol that can be processed by each router and a static route manually set by an administrator are correctly set.

Each layer has an individual rule. For example, in OSPF which is one of the IP routing protocols, the backbone (area ID 0.0.
0.0) is present and must be continuous. In the case of the IP layer, it is essential that no duplicate address exists. In the case of DNS, Primary exists in all zones, and in each zone information, there is a delegation in the upper zone, the address of the DNS server can be obtained by the Glue record, and a reverse lookup zone exists. , It must be compatible with the IP network.

In order to verify whether the network designed by the user conforms to these rules, the repository verifies the setting information.

Then, these rules are internally checked, and if a configuration that violates the rules is detected, a warning is issued to the user.

For example, in the second layer LAN, Ethernet,
Fast-Ethernet, Gigabit-Ethernet, TokenRing, FDDI,
In the WAN of the second layer, ATM, FrameRelay, dedicated line, dial-up (analog or ISDN), and in the third layer,
In IP, IPRouting, and Layer 7, DNS (Domain Name S
ystem), SMTP, Windows NT (registered trademark) Domain, WINS (Windows (registered trademark) Internet Name Service)
e) It is preferable to create in advance for each protocol of each layer such as Directory Server.

Further, a language for converting general / abstract information in a directory into commands or parameters / setting files that can be understood by each device / software of each vendor is defined.

Further, it is preferable to have a function of analyzing which function of which layer depends on which other layer or function. For example, the configuration of the DNS largely depends on the setting of the IP layer, which is the lower layer. Such interdependencies are provided as rules in the rule agent. If the configuration of dependent protocols, applications, or services is added, changed, or deleted, new configuration information is created,
Consider whether it needs to be changed or deleted, and if necessary, create new configuration information.

Next, NDD is defined as a rule for applying data in the repository to actual device configuration information so that network device configuration information can be appropriately generated from information in the repository. I have.

(Configuration Information Output Means) The network device definition function is an NDD (Networ) capable of uniformly describing specifications including the interface, regardless of the vendor or model.
k Device Description) function and a function to generate parameters (configuration file) for setting device functions.

NDD means the format of a definition file used when outputting setting information. In this way, the capabilities of each network device and the setting information for realizing the capabilities are expressed in a unified format,
The actual device can be correlated with the abstract network model. Then, based on the logical and abstract network diagram (network model) created by the drawing function, information for causing the device to actually operate in conformity with the contents defined in the diagram is generated. I do.

In the NDD function, unique physical properties (existence of expansion slots, connector shape, necessary cables and types of buses) that vary depending on the device, and software (network device O
The command set for utilizing the function of S) is expressed in a unified format independent of the device. In this NDD function, not only physical information such as external dimensions but also descriptions of available protocols, accompanying functions and corresponding command sets and other interfaces, and specifications of all network devices and interdependencies are described. You can describe a certain function.

In this example, a file format called NDD is defined, in which data in the internal model corresponds to which setting information of the target device or service. By doing so, the internal model can be converted into a format applicable to the actual device.

For this reason, if only an appropriate NDD definition file is prepared, settings can be immediately output for different devices of different vendors.

It has information defining the specifications of the devices constituting the network such as a router, and generates parameters (configuration) capable of exhibiting the functions of the devices.

With these functions, an optimum parameter can be easily generated even in a network composed of a plurality of devices from a plurality of vendors, and leakage of optional devices can be eliminated.

As described above, since the unified representation of network devices is enabled, it is possible to separate the logical network configuration from the actual network device settings. That is, as a result of designing the network with consideration for the actual device, the user can logically construct the network without danger of depending on the vendor.

In this way, the user can acquire appropriate setting information for the device without any knowledge about the setting method of the device.

It is preferable that the compatible network device has a network management function such as a band control, a dynamic path information exchange protocol, and filtering, and a remote management function, which correspond to the policy management function. For example, PCUNIX (registered trademark) Gate
D (route control program) is also included.

(Configuration Generation Function) In order for the defined network configuration to function as an actual network, the configuration of the network
Configuration information must be provided. NDD
Input the configuration information included in the file and generate the optimal configuration corresponding to the configuration definition information.

This function has a function of presenting and selecting a suitable device based on the network diagram realized by the editor 310, and a function of outputting configuration information usable by the actual device using NDD. Have.

It is possible to select a device corresponding to the network model defined through the drawing function of the editor 310 and output the setting information of the device.

For example, in order to know which device the network device icon on the network diagram actually corresponds to, select the target device and select the property display 5
Refer to a screen such as 0. Therefore, the devices displayed under "Router Type" are the network devices corresponding to the current diagram. Changing the correspondence of the devices can be performed by selecting a desired device from the devices output in the list.

It has a function of generating a Configuration file for each device that best matches the network configuration from the device database expressed in the NDD format.

(Device Selection; Configuration Information Output Function) Various conditions in each layer are integrated, and a device that meets the conditions is presented. At this time, the user accesses the NDD database (management agent), presents a list of functions (protocols) required by the symbols corresponding to the devices and a list of parameters for each protocol, and obtains devices that match the conditions. If there is more than one, prompt the user to make a selection. If there is no such device,
Prompt the user for the ability to remove the protocol, and then perform the search again.

When the selection of the device is completed, the configuration information necessary for realizing various network functions defined by the editor 310 is output. Again, N
It accesses the DD database agent and obtains this information by passing the required parameters.

For example, when a router segment has three Ethernets, two ATMs, and one dedicated line, a device suitable for the router is selectively extracted. To meet this requirement, Cisco's 720
6, 7511, 12006, and the like are output and selected.

This processing is based on the assumption that there are three slots, each of which enters a slot, and models an Ethernet card, an ATM card, and a high-speed serial port card, and dynamically combines them. There is a method that leaves something to be satisfied.

In another method, for example, the first configuration of 7206 is that one Ethernet and 10 serials are used.
In the second configuration of the 7206, there are four Ethernet and eight serials, and various patterns are prepared like this, and all combinations are defined from the beginning, and the interface Compare by number and give out only those that exceed it.

It should be noted that, based on the information of the network devices described using the NDD, restrictions on the physical configuration (interoperability, upper limit of bus band, number of slots, card, (Inter-dependency) may be provided.

Further, a list of network devices, optional parts, media converters, and other devices necessary for realizing the network configuration is created based on the network configuration definition and information on the devices realized by the NDD. Then, a required device list output unit for outputting the information may be configured.

Each setting element (Configuration Element) defined in the NDD describes which CIM object contains the setting item required by itself. This makes it possible to represent the system of objects represented as a CIM network model as actual network settings.

Here, the CIM is a common information model (Co
mmon Information Model), which is a framework (meta model) for enabling a network to be represented as a set of objects using an object-oriented analysis technique such as UML. And the user
A network is represented as a model using various objects defined by IM.

As a result, a common attribute is given to a certain network device under a certain condition, and these devices are controlled simultaneously to realize a certain traffic pattern. Can be obtained.

The network configuration information designed in this way is usually stored in a directory server so that it can be referred to from various management tools, devices, and applications.

The present system has a configuration independent of a specific vendor by taking an internal data structure based on CIM. As a result, even if new vendors, devices, and services appear in the future, it is possible to respond to them without making a change that would break compatibility of the internal model. In addition, since the configuration does not depend on a specific language protocol, internal data is output as a configuration file of the device (described above), output to a directory server via LDAP, or output in XML format. That is easy.

Each layer has a relationship of providing a function in an upper layer while being dependent on a function provided by a lower layer. For example, the network layer provides a service for correctly delivering data to the specified destination for the upper layer, and relies on the data transfer service for the next node of the lower layer for the lower layer. It has become.

Therefore, in order for the network to function properly, it is necessary to correctly maintain the relationship between the upper layer and the lower layer and to correctly configure the service provided by each service layer.

For example, in the IP layer, an IP address and a subnet must be correctly defined. In the OSPF layer, the entire network is divided into areas.
This is to select where to be the backbone, which router to be the area border router, and so on.

(Characteristic Configuration of the Present Invention: Generator) Here, the characteristics of the present invention, that is, the specific configuration of the generator will be described. It is preferable to use, for example, an object method, a template file method, or the like as a generator mounting method.

More specifically, as shown in FIG. 14, a network model 501 as storage means having a plurality of network elements 502, a definition file storage 410 storing an NDD definition file for each model, and a network The model information is obtained from the model 501, and the definition information corresponding to the model information (including the model information) is obtained from the NDD definition file, and the setting information is generated according to the model (setting information generating means). And a parser 420. Thereby, the setting information (configuration file) 43 corresponding to each model
1, 432 can be generated.

In addition, according to the implementation method of the generator,
There are cases where the NDD parser 420 functions as a generator, and cases where the NDD parser 420 and the definition file storage unit 410 function as a generator.

As shown in FIG. 15, the definition file storage unit 410 (the structure of the NDD) is configured so as to match the structure of a general network device.
uration) 411 configuration element
412 is a common configuration element (Common Configuration Eleme)
nt) 413 and an Iterative Configur
ation Element) 414.

[0160] Common Configuration Ele
ment) 413 is an item that is set only once,
Iterative Configuration Elemen
t) is repeated any number of times. For example, host name and SNMP-related settings are common setting elements for the system. On the other hand, the interface, the detailed setting of the routing protocol, and the like are repeatedly set in the system.

Furthermore, the repetition setting element 414 includes a routing setting element 415 and an interface setting element 4
16 That is, the elements in the repetition setting element 414 also have a common element and a repetition element. For example, in the case of a sub-interface, since one or more interface elements exist in the interface element, the sub-interface becomes a repetition setting element for the interface.

(Model) FIG. 16 discloses an example of a network model for setting information generating means (generator, NDD parser) 420 to acquire model information. In the figure, a network model 501 is:
For example, a data link layer 510, an IP layer 520, and an IP routing layer 530 are included, including a model of IP data input.

In the data link layer 510, eth
er1 (512), lan1 (513), ether2
(514) is a common object in the related class. In the IP layer, ip1 (522), i
Psubnet1 (523) and ip2 (524) are common objects in related classes. In the IP routing layer 530, for example, RIP1 (53
2) etc. Thus, the layer is represented by the model.

In the network model 501,
For example, system1 (5
The computer system of 11), that is, the main body of the router is formed. These are ether1 (51
2), ip1 (522), etc. on the other hand,
System2 (515) associated with service 503
Is formed, and ether2 (514), i
p2 (524) and so on. And lan
1 (513), LAN with ipsubnet 1 (523)
560.

In addition, the port 55 of lan1 (513)
InSegment (541) associated with 1,552,
InSubnet (546), SystemC associated with ports 553, 554 of ipsubnet (523)
component542, HostedSAP545, etc. are also comprised. Here, it is shown that the IP is enabled in the Ethernet port.

The network model 50 having such a configuration
When ND1 is used to actually generate setting information, ND
The D parser (setting information generating means) 420 (generator) reads which network element 502 first, then reads which network element 502 while reading the procedure and procedure of generating a different setting file for each predefined device. , And the information obtained from the element (object) is written down to the corresponding location on the setting file. At this time, the NDD parser 42
It is preferable that 0 is prepared for an amount corresponding to the model.

For example, in the case of GateD, an inquiry is made to an IP routing model, and information on all protocols (for example, RIP, OSPF, etc.) is extracted. Then, when the information of the RIP is taken out, there is information as to which protocol end point is related, and the IP address is taken out based on the information. Then, RIP parameters are determined for the IP address. Next, for the OSPF, information as to which IP address is associated with the OSPF is extracted from the model, and parameters are determined for each address.

As described above, all routers have common and abstracted information, and a configuration can be created based on the information, so that various types of routers can be used.

(Network Model) FIGS. 17 to 22 disclose a more detailed structure of the network model. The network model is large and includes a system 610 indicating a management unit shown in FIG. 17, a service 630 shown in FIG. 18, a logical network 640, and a network model shown in FIG.
9 comprises a protocol endpoint 650 and a logical device 660.

The system 610 indicates a management unit and represents a computer system, for example, a network device such as a server, a client, a router, or a switch. This system 610, as shown in FIG.
ement ”611,“ Entity ”612,“ Collection ”6
13, "CollectionOfMSEs" 614, "IPAdressRang
e ”615,“ System ”616,“ ComputerSystem ”6
17, “AdminDomain” 618, “SNMPManagementDomai
n "620," AutonomousSystem "619," SNMPCommu
niy ”621. The correlation between the objects is as illustrated. Here, "AdminDomain" 618
This is the management domain, which indicates the management area.

Next, the service 630 represents a service such as a network service. Here, the service indicates some behavior to the outside, and for example, processing in a router such as relaying an IP packet is understood as a service. Alternatively, when exchanging information using a protocol called RIP, RI
Assume that there is a P service. Furthermore, if the OSPF shows a behavior of exchanging routing information with each other using OSPF, it is interpreted that the OSPF service is running.

As shown in FIG. 18, the service 630 includes “Service” 631, “NetworkService” 632,
“ManagementService” 633, “CarrierNetworkServi
ce ”634,“ ForwardingService ”635,“ RouteCa
lculationService ”636,“ SNMPService ”637
a, "FrameRelayService" 637b, "DedicatedLine
Service ”637c,“ IGPService ”638,“ OSPFSer
vice "639a and" RIPService "639b. The correlation between the objects is as illustrated.

Next, the endpoint 650 indicates where in the node the service is provided, as shown in FIG. For example, assuming that there are three ports as the node, the service is performed or not performed depending on the port, such as performing a service only on a certain one of the three ports, or as a service. Are the same, but the setting items change for each port, for example, when an IP address uses a service called IP but the address items are different, etc.
If you need to express different information for each port,
Use this protocol endpoint. If there is no protocol endpoint, it means that the service is not provided. Further, since the information held by the protocol endpoint differs for each port, it is possible to indicate that the information is different even if the service is common.

As shown in FIG. 19, the end point 650 includes “ProtocolEndPoint” 651 and “LANEndPoint”.
652, "OSPFEndPoint" 653, "RIPProtocolEndPo"
int "654," WANEndPoint "655," IPProtocolEn "
dPoint ”656,“ FrameRelayPVCEndPoint ”657,
"PPPEndPoint" 658, "ATMPVCEndPoint" 659,
including. The correlation between the objects is as illustrated.

Next, as shown in FIG. 18, the logical network 640 has various kinds of networks in the lower layer, and what kind of networks the network systems are connected to, for example, as a large classification, If it is a WAN or a LAN, it is an Ethernet segment, if it is a LAN, or, in another layer, an IP subnet or an IPX, and if it is a WAN, its protocol is ATM or frame relay. , Then NTT or O
Various models such as DN and TTNet are defined.

More specifically, the logical network 640
Are "LogicalNetwork" 641, as shown in FIG.
“OSPFArea” 642, “OSPFLink” 643, “IPSubne
t "644," LANSegment "645," OSPFVirtualLin
k "646," RIPLink "647," ATMPVCconnection "
648, etc. The correlation between the objects is as illustrated.

[0177] In this model, the LAN endpoint and the WAN endpoint are separated, so that the same LAN technology can be used to change from Ethernet to Fast Ethernet, from Fast Ethernet to Gigabit Ethernet, or to use the same WAN technology. If so, changing from frame relay to ATM can be expressed as a model.

[0178] Since the RIP and OSPF can be switched by setting, as a service,
Displayed separately.

The network adapter 662 is necessary when defining a model for a multi-function device (for processing a plurality of protocols with one card), for example, a card capable of processing Ethernet, Fast Ethernet, and Gigabit Ethernet. Become.

As shown in FIG. 20, the logical device 660 includes “LogicalDevice” 661 and “NetworkAdapte”.
r "662," DedicatedLineAdapter "663," Frame
"RelayAdapter" 664, "SerialAdapter" 665, "E
thernetAdapter "666," GigabitEthernetAdapter "
667, and “FastEthernetAdapter” 668. The correlation between the objects is as illustrated.

In addition, as shown in FIG.
ystemElement ”670,“ LogicalElement ”671 and the like. As shown in FIG.
672, “IPRoute” 674, “AdministrativeDistanc”
e "675, and so on. The correlation between the objects is as illustrated.

In FIG. 21, associations between various objects are defined here as association classes, which are themselves objects. Each has an attribute as a related object. It is a model of the attribute.

This association class has, for example, a function to joint both objects. that time,
When joining with this related class, the opponents who can be joined are limited.

Network Model Association Class 700
Are “Dependency” 701 and “SA” as shown in FIG.
PSAPDependency ”702,“ ForwardedRoutes ”703
a, "CalculatedRoutes" 703b, "ServiceSAPDepe
ndency "704," Realizes "705," ServiceAcces "
sBySAP ”706,“ ServiceSAPDependency ”707,
"BindTo" 711, "BindToLANEndPoint" 712, "A
ctiveConnection ”713,“ CalculatesAmong ”71
4. "ForwardsAmong" 715, "RIPServiceEnabled"
716, “ProvidesEndPoint” 717, and “HostedService” 708, “Servi
ceServiceDependency "709," HostedRoutingServic
e "721," NetworkServicesInAdminDomain "72
2. “HostedForwardingServices” 723, “InSNMPCo
mmunity ”724 and“ RedistributeRoutes ”725, and the correlation between the objects is as shown.

In addition, as shown in FIG. 22, the class 730 includes “Component” 731 and “SystemComponent”
732, “EntriesinFilterList” 733, “ListsinRo”
utingPolicy "734," BGPRouteMapsinRoutingPolic
y ”735,“ FilteredBGPAttributes ”736,“ BGPS
erviceAttributes "737," RoutersinAS "738,
"Confederation" 739, "ASBGPEndPoints" 74
0, etc. The correlation between the objects is as illustrated.

Further, as shown in FIG.
0 is “CollectedMSEs” 741, “RoutersinBGPClust”
er "742," InLogicalNetwork "743," OSPFArea
inAS ”744,“ InSegment ”745,“ HasOSPFlink ”
746 and the like. The correlation between the objects is as illustrated.

In addition, as shown in FIG.
gicalNetworkService ”751,“ NetworksinAdminDoma
in "752, and as shown in FIG.
ollectins ”761,“ OSPFLinkInArea ”762,“ Log
icalIdentity "771 and" EndPointIdentity "772. The correlation between the objects is as illustrated. In this example, “SAPSAPDependenc
It is preferable to use “y” 702 or the like.

(Processing Procedure) Next, a processing procedure in the case of generating a configuration file in the network design support system having the above configuration will be described with reference to FIGS.

Here, in order to automatically generate a configuration file corresponding to various devices, in the present system, abstract network information (the number of interfaces connected to the router, its IP address, etc.)
It is also characterized in that an object (repository) that holds the device and an object (generator) that generates settings for controlling the device are separated. The generator keeps knowledge of the order of the commands described in the configuration file and the syntax of the command. When generating the configuration file, the generator queries the repository to obtain necessary information. With such a structure, there is an advantage that, when the number of corresponding router models is increased, the repository portion does not need to be changed, and only a generator for each model need be added. However, in the case of the template file system as in the second embodiment described later, the number of applicable models can be increased by adding a template file instead of adding a generator.

In this embodiment, in particular, Gat
A case where a configuration file is generated for an eD (a gateway routing daemon used in a UNIX OS) will be described. Further, as a condition of the router, it is connected to two networks A and B,
The network A is connected to the IP address X interface, and the network B is connected to the IP address Y interface. The route information is exchanged by RIP for the network on the A side and OSP for the network on the
F, the address of the loopback interface for OSPF is Z, and the OSPF area of the network B is the backbone.

First, in the configuration file of GateD, gat
ed. conf is an options statement, interfa
ce statement, definition statement, protocol statement, static statement, control statement, Aggregate statement, directive statement, trace statement, and the like. Here, except for the directive statement and the trace statement, the order must be in this order.
It is a set of objects (or subsystems, subroutines) describing procedures for sequentially generating setting information corresponding to the s sentence to the Aggregate sentence.

[0192] Specifically, first, originally, opt
information corresponding to the interface statement (S101), and further, information corresponding to the interface statement (S1).
02), but in this example, since there is no corresponding information, these steps S101 and S102 are skipped.

Next, the generator performs a process of generating a definition sentence (S103). That is, in the part where the definition statement is generated, the repository is requested of the IP address of the OSPF loopback interface (S1).
03a), an IP address "Z" is obtained (S103b), and as a result, a process of generating a sentence "routerid Z" is performed (S103c).

Next, the generator performs a process of generating an ospf sentence (and corresponding information) among the protocol sentence (S104). That is, in the ospf statement, the repository requests the area ID and the interface IP address of the network of which the OSPF is performing route exchange among the networks connected to this router (S104a).
"Backbone" is obtained (S104b). And FIG.
A process of generating five rows as shown in S104c of No. 3 is performed (S104c).

Next, the generator determines the r of the protocol statement.
A process for generating an ip sentence (and corresponding information) is performed (S105). That is, in the rip statement, the repository requests the IP address of the interface of the network that exchanges routing information by RIP among the networks connected to this router (S1).
05a), thereby obtaining an IP address “X” (S10)
5b). Then, a process of generating three rows as shown in S105c of FIG. 24 is performed (S105c).

Next, the generator normally generates each statement after the protocol statement (S110),
That is, generation of a hello statement (S111), isis
Statement generation (S112), bgp statement generation (S113),
Generation of egp sentences (S114), generation of snmp sentences (S1
15), generation of redirect statement (S116), ic
Generation of mp sentence (S117), routerdisrov
The ery sentence is generated (S118), and the number of kernels is generated. In this example, since there is no corresponding information after the hello sentence, the generator sets S111 to S11.
9 is skipped.

Also, normally, a static sentence is generated (S120), and an import sentence is generated (S12).
1a), a control statement such as an export statement (S121b) is generated (S121), an aggregate statement is generated (S122), and a directive statement is generated (S1).
23) A trace statement is generated (S124). In this example, since there is no corresponding information after the static statement, the generator skips the processing for generating them.

Then, a process of synthesizing each sentence partially generated as described above is performed (S125), and as shown in FIG. A conf file 800 is generated.

In this example, GateD has been described. As for the setting information in the Cisco router, information corresponding to each statement of the configuration file is sequentially inquired to the repository in the same manner as described above. At the same time, it is possible to obtain correspondence information, generate each sentence and the corresponding information, and finally combine each partially generated sentence and the corresponding information to obtain a configuration file. In this case, it is sufficient to configure a generator corresponding to the Cisco router, and the repository can be commonly used.

As described above, it is only necessary to have each generator corresponding to each model and the selection means for selecting each generator according to the model set by the network element.

As described above, according to the present embodiment, setting information of network devices can be automatically generated by using a mouse or the like in a network diagram created on an editor. You don't have to look through a huge manual to set it up.

Further, the system of this example has a general-purpose data structure capable of expressing any vendor or device, and based on network setting information defined for a specific vendor, other systems can be used. Since the setting information of the vendor can be easily generated, the configuration file can be automatically generated regardless of the specific vendor or the specific device.

Further, in the system of this example, the network layers (according to the OSI hierarchical model) are understood, and necessary information can be displayed and input for each layer. Since the interdependencies of the setting information are accurately and strictly understood, and the settings that conflict with each other are designed so that they cannot be performed from the beginning, the burden on the designer is greatly reduced.

In addition, since a function for automatically discovering network devices using SNMP is provided, setting for routers and switches supporting SNMP can be performed immediately without writing a network diagram from the beginning. . Of course, even a device that does not support SNMP can perform the setting work of the device by arranging and re-setting the network device by the user himself.

The system of this embodiment can store network definition information in an LDAP-based directory. The stored data can be linked with other policy management products.

By storing the information of the network model in the directory server, other directory correspondences (D
EN), and cooperate with network management, design, and simulation tools.

If the definition information for policy management is given in advance, the information necessary for policy management is automatically generated when the setting information of the network device is generated. Trouble can be prevented.

The system of the present embodiment fully supports IP network design and routing design. IPv
4. In addition to basic settings such as IPv6 and OSPF / RIP / EIGRP, it supports important protocols such as DHCP / DNS which are indispensable for IP network design. It is possible to perform a routing design which is simple but unexpectedly troublesome, and difficult to find the cause of a problem when a mistake occurs, in a short time, accurately and reliably.

Here, most of conventional tools corresponding to DEN (CIM) are dedicated to policy management, that is, only priority control and access control of each network device. These tools are based on the assumption that the existing network configuration supports policy management, and cannot detect or improve configuration problems, and can make non-policy-compliant networks comply with policies. It was difficult.

On the other hand, in the present embodiment, it is possible to design a network that does not cause problems such as setting errors when designing the network. In addition, the DEN standard conversion registration function allows data to be output in a form recognizable by the policy management tool, eliminating the need to configure a network that does not support policies, making it easier to design a network that supports policy management. Network design that is useful to users can be realized at low cost.

Further, a routing protocol, which is said to be difficult, such as OSPF, can be easily set by an intermediate person using a GUI. If these protocols are set incorrectly, unexpected routes are set, and in the worst case, connectivity is lost in the entire network. In this example, it can be set accurately. In addition, since the configuration does not depend on a specific language or protocol,
Outputs internal data as a device setting file,
Output to directory server via DAP, XM
It becomes easy to output in L format.

[Second Embodiment] Next, a second embodiment according to the present invention will be described with reference to FIGS. In the following, description of substantially the same configuration of the first embodiment will be omitted, and only different portions will be described.

In the above-described first embodiment, the generator is generated by a set of objects in which a procedure for sequentially generating information corresponding to each statement of the configuration file is described (object method). In the present embodiment, an example in which the order and syntax of commands are described in a template file (a template file method) is disclosed.

Specifically, a tag designating information to be obtained from the repository is embedded in the template file. Here, the tag defines only the type of information to be acquired. In this case, to generate a configuration file (configuration file), first, as shown in FIG.
The generator reads the template file while analyzing the syntax (S131).

Next, when a tag is detected as a result of the syntax analysis in S132, information indicated by the tag is obtained from the repository (S133). Then, a tag obtained by replacing the tag with the acquired information is output to the buffer (S1).
34). On the other hand, if the result of the syntax analysis is other than the tag in S132, information other than the tag is output to the buffer as it is (S135).

Steps S131 to S136 are repeated until the end of the template file is reached. Finally, the contents of the buffer are output to a file (S137).

FIG. 27 discloses an example of a template file. In the template file 900 in FIG.
From "% ifOspfOn" to "% endOspfOn"
In steps S201 to S201, when OSPF is enabled, the enclosed portion is output. Also, "% IFEth
In S202 from “erStart” to “% IFEtherEnd”, if there is an Ethernet interface, the range enclosed for each Ethernet interface is repeated. Furthermore, "% IF
S from "OspfOn" to "% EndOspfOn"
In step 203, when the interface exists in the loop of the Ethernet interface and the OSPF is enabled, the enclosed portion is output.

[0218] Here, "% IFEther"
“Name” 901 is a process of outputting an interface name, “% IFNumber” 902 is a process of outputting an interface number, and “% IFOspf”.
“Cost” 903 is a process of outputting the cost of the interface, and “% IFOspfPriority”
Reference numeral 904 denotes processing for outputting a priority value used for selecting a designated router.

Similarly, “% IFATMVCSSt”
S2 from "art" to "% IFATMVCSEnd"
At 04, if there are ATM interfaces, the range enclosed by each ATM interface is repeated. Further, from “% IFOspfOn” to “% E
In S205 up to “ndOspfOn”, when the interface exists in the loop of the ATM interface and the OSPF is enabled for the interface, the enclosed portion is output.

As described above, according to the present embodiment, when configuring a generator using this template file,
To increase the number of compatible models, it is only necessary to generate a new template file, and the generator is common to all models.
Even in this case, the repository is common to all models.

[Third Embodiment] Next, a third embodiment according to the present invention will be described with reference to FIG. FIG. 28 is an explanatory diagram showing a third embodiment according to the present invention.

Network diagram 100 in this embodiment
0, for example, a network management unit 1010 in China, a network management unit 1020 in Hong Kong, a network management unit 1030 in Southeast Asia, and a network 1040 in Japan are formed.

The one management unit corresponds to the admin domain. For example, the management unit 1010
The IP address assigned to each of the network components in the table means that the IP address can be distributed only in the address space of the management unit 1010.

FIG. 1 shows a network having such a configuration.
000, when a certain location, for example, a management unit 1010 of a Chinese network is selected and a predetermined operation is performed, the management unit 1010 itself becomes a small icon meaning an admin domain, and the internal detailed network is invisible. Changes are made.

Thus, it is possible to focus on a management unit at a certain place and to adopt a configuration in which the management unit fits on the display screen.

For example, a person in China designs a network of the management unit 1010, and a person in Hong Kong designs a network of the management unit 1020.
The person in Southeast Asia designs the network of the management unit 1030, and the person in Tokyo
A configuration in which each person in charge performs the design in a shared manner, that is, a so-called distributed design may be adopted, such as designing the zero-portion network. In this case, the network design support software of the present embodiment may be installed in the information processing device of each management unit. Alternatively, the network design support software may be installed on a specific server as a certain Web application, and each management unit may be installed. May be configured to be accessible by the person in charge of the system, and is not limited to the location of software resources in the network.

Although the apparatus and method according to the present invention have been described according to some specific embodiments thereof,
Those skilled in the art can make various modifications to the embodiments described in the text of the present invention without departing from the spirit and scope of the present invention. For example, in each of the embodiments described above, each layer of the link, the IP, and the IP routing has been described. However, in each layer of various other various protocols, the association and the one-layer network are performed by using the same principle. The diagram can be configured to be able to be reflected on the network diagram of another layer, and a configuration file (setting information) of a network device that can use such a different protocol can be generated in the same manner.

In the above-described embodiment, IP, IP
Routing, mainly composed of design, but other layers, D
atalink (WAN is only Transit), IPFiltering / Queue
ing, DNS (Domain Name Service), SMTP (Simp
le Mail Transfer Protocol), NNTP (NetNews Tra
nsfer Protocol), DiffServ (Differentiated Servic)
e), VPNs (Ipsec, L2TP, PPTP), etc., may of course be configured to support them. Furthermore, DLSw + (SNA
over TCP / IP), Windows NT Domain, WindowsNT Active
Directory, Windows NT WINS, Datalink Layer
(ATM, FrameRelay, SONET / SDH, etc.), RSVP (o
ptional) may be configured to be supported.

A protocol classified into an application layer in OSI and an entity implementing the protocol, for example, DHCP, DNS, LDAP
May be configured.

[0230] Further, a policy migration function may be configured so that an existing network configuration can be downloaded and reconfigured as a policy network. Furthermore, a configuration may be formed in which information is extracted from the directory using a directory-compatible simulation tool and is reflected in the network model.

Further, a function may be provided that enables the user to visually and quantitatively grasp which service is dependent on the network by collecting and classifying actual traffic and associating it with the business. It may have the function of analyzing the problems of the current network based on the degree of dependency and the importance of the work, and finally generating the network design information necessary to support the work to the maximum extent. .

Further, a device configuration necessary for realizing the network configuration content passed from the drawing tool is generated and output from the network device database described in NDD, and delivery and file to the network device are performed. A configuration may be adopted in which a report is output or the actually created device configuration is distributed to the network using a means such as TFTP, TELNET, or SNMP.

Also, the existing network information is collected, and the information is automatically stored in the internal DEN format directory. As a result, the current network can be immediately restored on the drawing tool and the design work can be started. It is preferable to use an automatic discovery function using SNMP. In this case, first acquisition means formed on the information processing device connected to the network and acquiring device information on the network obtained by SNMP or RMON, and setting information of the device on the network by TFT
A second acquisition unit for acquiring by the P protocol, an analysis unit for parsing the acquired setting information, and a logical or physical component on the display unit based on the setting information analyzed by the analysis unit. And a means for generating

Further, in a layer, a logical network diagram (component) of another layer is generated by associating a logical network diagram (component) of another layer with a physical network diagram (component) of one layer, or a logical network component (layer) of a certain layer. Accordingly, a configuration in which another logical network element of another layer is generated in association with the logical network element is also possible. Further, it is preferable to have a function of combining and searching for device information, a function of distributing device configuration, and a function of automatic discovery.

Further, for example, the network design support system of each of the above-described embodiments, the information processing apparatus used therefor, the processing program processed by the network equipment, the described processing, data, the entire object or each part of the object is recorded as information. A configuration recorded on a medium may be used. Furthermore, the present invention also includes an electronic mail software in which the above-described processing program is operable on a general personal computer or a portable terminal, or an information recording medium in which the embedded electronic mail software is recorded.

As this information recording medium, for example, RO
M, RAM, a semiconductor memory such as a flash memory, an integrated circuit, an optical disk, a magneto-optical disk, a magnetic recording medium, etc. may be used. Further, a CD-ROM, hard disk, CD-R, CD-RW, FD, DVDRAM, DV
The information may be recorded on a DROM, MO, ZIP, magnetic card, magnetic tape, non-volatile memory card, IC card, or the like for use.

Still further, examples of the medium include a wireless or infrared transmission channel between a computer and another device, a computer-readable card such as a PCMC.
An IA card, a network connection to another computer or device on a network, and the Internet or an intranet that includes e-mail transmission and information recorded on a website or other.

By using this information recording medium in a system or apparatus other than the system according to each of the above-described embodiments, the system or the computer reads out and executes the program code stored in the storage medium to execute the above-described method. A function equivalent to that of the embodiment can be realized, and an equivalent effect can be obtained.

[0239] In addition, O running on the computer
S, when the OS or the like on the information processing device performs a part or all of the processing, or when the program code read from the storage medium is transferred to an extended function board inserted into the computer or an extended function unit connected to the computer. After being written in the provided memory, based on the instruction of the program code, even when the CPU or the like provided in the extended function board or the extended function unit performs a part or all of the processing, the same processing as in the above embodiments is performed. The function can be realized, and the same effect can be obtained.

When at least one first component and a third component connected through the first component and the second component are displayed on a display means such as an editor, control is performed. The means controls the display so that, when the attribute of the third component is selected and specified, the attribute of the second component is the same as the attribute specified and specified. Further, the control means displays the logical or physical components of the network diagram in the first layer before being changed by the layer changing means so as to be reflected in the network diagram in the second layer after the change. Display control is performed by changing the mode.
Further, the control unit controls the display so as to limit the association when the components of the network diagram in the second layer cannot be associated.

[0241] The control means may be arranged such that an icon comprising an abstract figure for composing the network diagram of the second layer is a logical or physical first composing element constituting the network diagram of the first layer. The display control is performed so as to regulate such that it can be arranged only on the logical or physical second component having a dependency relationship with the element. Further, based on a user's selection operation, the control means aggregates and displays a network including a plurality of logical or physical components into a logical or physical component including at least one abstract figure. Control.

The control means may designate one or a plurality of pieces of attribute information of the logical or physical component based on an operation of selecting a logical or physical component of the arranged network diagram. Display the specified screen.
Further, the control means automatically generates and displays a model suitable for each condition relating to the logical or physical component based on a selection operation of a logical or physical component of the arranged network diagram.

Further, needless to say, the above-described embodiments include examples obtained by combining the above-described embodiments and any one of the embodiments and the modified examples. In this case, even if not explicitly described in the present embodiment, the obvious operational effects that can be produced by the combination of the respective configurations disclosed in the respective embodiments and the modified examples are, of course, not explicitly described in the present embodiment, unless explicitly stated. The same effect can be obtained also in the above.

[0244]

As described above, according to the present invention, setting information of network devices can be automatically generated using a mouse or the like in a network diagram created on an editor. You don't have to look through a huge manual to set up. In particular, since the setting work of the network equipment is almost completed just by drawing the diagram, there is no need to pay a high cost to hire a network technician or request a dispatch.

Further, the system of this example has a general-purpose data structure capable of expressing any vendor or device, and based on network setting information defined for a specific vendor, another system is used. Since the setting information of the vendor can be easily generated, the configuration file can be automatically generated regardless of the specific vendor or the specific device.

Further, the internal structure does not depend on a specific vendor. As a result, even if new vendors, devices, and services appear in the future, it is possible to respond to them without making a change that would break compatibility of the internal model.

Also, if an operating network device is damaged by an accident such as a lightning strike, there is no need to panic.
If there is no hand-held device, it can be substituted by using the immediately obtained device if there is no hand-held device. At this time, the problem is how to make the same settings as the device that caused the problem, but by using the system of the present invention, it is necessary only to specify the vendor name and model name of the device on the setting screen. Get information.

Furthermore, since a person who is not a network engineer can easily design a network, a person who is familiar with business needs can directly design a network. The system of the present invention understands various conventions existing in network design and network equipment, and guides the user not to make designs that cannot be realized.

[Brief description of the drawings]

FIG. 1 is an explanatory diagram illustrating an environment in which a network design support system of the present invention is used.

FIG. 2 is an explanatory diagram showing an example of a display screen displayed on an information processing device equipped with the network design support system of the present invention.

FIG. 3 is an explanatory diagram showing an example of a display screen displayed on an information processing device equipped with the network design support system of the present invention.

FIG. 4 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 5 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 6 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 7 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 8 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 9 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 10 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 11 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

FIG. 12 is an explanatory diagram functionally showing an example of a schematic configuration of a network design support system of the present invention.

FIG. 13 is a sequence diagram illustrating an example of an outline of a process between an editor and a repository.

FIG. 14 is an explanatory diagram illustrating a principle for generating a configuration.

FIG. 15 is an explanatory diagram illustrating an example of a schematic configuration of an NDD definition file.

FIG. 16 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 17 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 18 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 19 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 20 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 21 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 22 is an explanatory diagram showing an example of a network model used in the network design support system of the present invention.

FIG. 23 is an explanatory diagram showing an example of a processing procedure for generating a configuration file in the network design support system of the present invention.

FIG. 24 is an explanatory diagram showing an example of a processing procedure for generating a configuration file in the network design support system of the present invention.

FIG. 25 is an explanatory diagram illustrating an example of a generated configuration file.

FIG. 26 is an explanatory diagram showing an example of a processing procedure for generating a configuration file in the network design support system of the present invention.

FIG. 27 is an explanatory diagram illustrating an example of a template file.

FIG. 28 is an explanatory diagram showing an example of a display screen displayed on the information processing device equipped with the network design support system of the present invention.

[Explanation of symbols]

 2 Information processing device 410 Definition file storage unit 420 NDD parser (setting information generation unit) 501 Network model

 ──────────────────────────────────────────────────続 き Continued on the front page (72) Inventor Noritaka Abe 3-5-2 Sotokanda, Chiyoda-ku, Tokyo F-term inside Iiga Co., Ltd. 5B046 AA00 CA06 DA00 HA09 KA03 5B089 GB10 HB10 KA04 KB10 KC22 LB14 LB19 5K030 KA02 MD07

Claims (9)

[Claims] 1. A network design support system comprising display means for displaying a drawing screen for designing a network diagram in which logical or physical components of a network are described in an abstract figure, wherein each of the network Based on storage means storing an object model in which the relationship between the components is predefined, model information corresponding to each component of the network, and setting information of a network device corresponding to the predefined model information, And a setting information generating means for generating setting information according to the type of network device in a component of the network diagram. 2. The display means displays at least one first component and a third component connected via the first component and a second component. When the attribute is selected and specified, the second
2. The network design support system according to claim 1, further comprising control means for controlling display so that an attribute of a component is the same as the attribute specified and specified. 3. A layer changing means for changing a network diagram by the logical or physical components so as to be editable for each layer of the network, wherein the control means comprises: The logical or physical components of the network diagram in the first layer before the change are changed in display mode so as to be reflected in the network diagram in the second layer after the change, and display control is performed. The network design support system according to claim 2. 4. The apparatus according to claim 3, wherein said control means controls display so as to limit the association when the components of the network diagram in said second layer cannot be associated. The described network design support system. 5. The control unit according to claim 1, wherein an icon made of an abstract graphic for configuring the network diagram of the second layer is a logical or physical first configuration that configures the network diagram of the first layer. 4. The network design support system according to claim 3, wherein display control is performed so as to regulate such that it can be arranged only on a logical or physical second component having a dependency relationship with the element. 5. 6. The control means according to a user's selection operation, collectively displays a network composed of a plurality of logical or physical components into a logical or physical component composed of at least one abstract figure. The network design support system according to any one of claims 2 to 5, wherein the control is performed so as to be performed. 7. A first acquisition unit which is formed on an information processing device connected to a network and acquires device information on the network obtained by SNMP or RMON; and a TFTP protocol for setting information of the device on the network. A second obtaining means for obtaining the setting information; an analyzing means for performing syntax analysis on the obtained setting information; and generating a logical or physical component on the display means based on the setting information analyzed by the analyzing means. The network design support system according to claim 1, further comprising: 8. The control means for specifying one or a plurality of pieces of attribute information of the logical or physical component based on an operation of selecting a logical or physical component of the arranged network diagram. 3. The network design support system according to claim 2, wherein a designation screen is displayed. 9. The control means automatically generates a model suitable for each condition relating to the logical or physical component based on a selection operation of a logical or physical component of the arranged network diagram. 3. The network design support system according to claim 2, wherein the display is displayed.