JP2004072453A - Network management system and network management method - Google Patents

Abstract

<P>PROBLEM TO BE SOLVED: To secure security and reduce network manager's labor for network setting in a network management system using a DHCP system and a DNS system. <P>SOLUTION: In the network management system which has a DHCP server and dynamically delivers IP addresses to DHCP clients by DHCP, the DHCP server is provided with a DHCP cooperation server for registering information of DHCP clients to which IP addresses will be delivered, and host names, MAC addresses, and network segments of the clients are set as DHCP setting information. In the DNS system, DNS information is generated in a DNS cooperation server and is allowed to be semi-automatically registered in a DNS server. <P>COPYRIGHT: (C)2004,JPO

Description

[0001]
TECHNICAL FIELD OF THE INVENTION
The present invention relates to a network management system and a network management method, and more particularly to a network management system suitable for use in a DHCP system and a DNS system, which can reduce the trouble of a network administrator in setting up a network and enhance security. The present invention relates to a system and a network management method.
[0002]
[Prior art]
Recently, the TCP / IP protocol has been widely used as a network protocol.
[0003]
In order to use this protocol, a unique IP address is registered in the host that is the communication subject. Conventionally, there is a DHCP (Dynamic Host Configuration Protocol) as a protocol for automating the IP address setting for a host. In DHCP, a DHCP server placed in a system distributes an address to a DHCP client according to a procedure determined from a pool of IP addresses prepared in advance.
[0004]
Further, as a mechanism of a name service widely used in the world of the Internet, there is a DNS (Domain Name System). In this method, a hierarchical group called a domain is set, and a part of the host name is incorporated in the domain name as the name. The DNS server has a correspondence table between the host name and the IP address, and when the DNS client does not know the IP address of the other party with which it wants to communicate, when the DNS client inquires about the host name, it notifies the IP address of the host.
[0005]
[Problems to be solved by the invention]
When DHCP is used, the IP address is automatically distributed to the host, so that the network administrator does not need to set an IP address for each host, which reduces the trouble.
[0006]
However, a general DHCP server distributes an IP address to all hosts in the same network segment, so that an unauthorizedly connected personal computer can communicate with the host, which poses a security problem. . In order to prevent this, there is a method in which a host to which distribution of an IP address is permitted is registered in a DHCP server in advance. For this reason, there is a problem that the network administrator needs to create and register the DHCP information file again. In particular, when the scale of the network system is increased and the network system is divided into a plurality of network segments, and a plurality of DHCP servers are provided, this trouble is extremely large.
[0007]
When DNS is used, a user can use various functions by describing a domain name without specifying an IP address, and thus is commonly used on the Internet.
[0008]
As a matter of course, in order to use this function, the correspondence between the domain name, host name, and IP address used by the user must be registered in the DNS server in advance. As for the maintenance work for this, when the scale of the system is large and the number of DNS servers is many, or when the system is frequently changed, the trouble of the network administrator becomes large.
[0009]
The present invention has been made to solve the above problems, and an object of the present invention is to secure security in a network management system used for a DHCP system and a DNS system, and to save time for a network setting of a network administrator. The goal is to be able to reduce it.
[0010]
[Means for Solving the Problems]
According to the present invention, a DHCP cooperation server is provided in a system using DHCP, and information of a host that performs automatic distribution of an IP address can be generated as DHCP information in the DHCP cooperation server and registered in the DHCP server semi-automatically. To do.
[0011]
Also, a DNS cooperation server is provided in a system using DNS so that DNS information relating to a domain name used by a user is generated as DNS information in the DNS cooperation server, and can be semi-automatically registered in the DNS server. I do.
[0012]
BEST MODE FOR CARRYING OUT THE INVENTION
Hereinafter, embodiments of the present invention will be described with reference to FIGS. 1 to 8.
[0013]
[Embodiment 1]
Hereinafter, a first embodiment according to the present invention will be described with reference to FIGS.
[0014]
First, the overall configuration of a network system according to the first embodiment of the present invention will be described with reference to FIG.
FIG. 1 is an overall configuration diagram of a network system according to a first embodiment of the present invention.
[0015]
This is a mode in which network segments A, B, and C according to the first embodiment of the present invention are connected by an in-house network 101 via a router 100 in an in-house network. The in-house network 101 connecting the network segments may be a public network.
[0016]
Within each network segment, various PCs and servers are connected by a LAN. A DHCP server 02 is installed in each network segment, and distributes IP addresses by DHCP.
[0017]
When a DHCP server is located in the same segment, the DHCP client cannot receive an IP address from a DHCP server in another segment. If there is no DHCP server in the same segment, an IP address cannot be obtained from a DHCP server in another segment unless a router is set.
[0018]
In the network segment A, the DHCP cooperation server 01 of the present invention is installed. Then, the operator 200 sets the DHCP setting information in the DHCP cooperation server 01 and instructs the DHCP cooperation server 01 to transmit information, thereby rewriting the DHCP information of the DHCP server 02 in each network segment. The DHCP setting information, which will be described in detail later, is information indicating to which host on the network the IP address is to be distributed.
[0019]
Limiting the hosts that can use DHCP in this manner has the effect of increasing system security. In addition, conventionally, the DHCP information had to be set in each of the DHCP servers of the network segments A, B, and C. However, by using the DHCP cooperation function of the DHCP cooperation server 01 of the present invention, it is possible to set one location at a time. Since the setting can be performed from the network, there is an advantage in network management, and the trouble of the network administrator is reduced.
[0020]
Next, the processing of the DHCP cooperation function of the present invention will be described with reference to FIGS.
FIG. 2 is a schematic diagram of the processing of the DHCP cooperation function of the present invention.
FIG. 3 is a flowchart showing a processing procedure of the DHCP cooperation function of the present invention.
[0021]
The operator 200 sets the DHCP information in the DHCP cooperation server 01 by inputting it from the console as shown in FIG.
[0022]
Then, when transmitting this information to the DHCP server 02, the operator 200 instructs the DHCP cooperation server 01 to transmit (S200 in FIG. 3). The DHCP cooperation server 01 creates a transmission file from the DHCP setting information (S201), and transmits the transmission file to the DHCP server 02 (S202).
[0023]
The DHCP server 02 reflects it in its own DHCP information.
[0024]
Details of the DHCP setting information used in the DHCP cooperation function will be described below.
[0025]
When the DHCP request message is sent from the PC 15, the DHCP server 02 compares the host name and MAC address of the transmitted parameters with its own DHCP information, and distributes the IP address to the PC 15 if the distribution is permitted. To do.
[0026]
Next, the data structure of the DHCP setting information used for the DHCP cooperation function of the present invention will be described with reference to FIG.
FIG. 4 is a schematic diagram of the data structure of the DHCP setting information.
[0027]
The DHCP setting information 1000 includes fields of a DHCP host name 1001, a MAC address 1002, and a network segment 1003 as shown in FIG.
[0028]
The DHCP host name 1001 is a field indicating a host name of the PC 15 or the like using DHCP. The MAC address 1002 is a field indicating the MAC address of a device such as the PC 15 using DHCP. The MAC (Media Access Control) address is a device-specific physical address defined in the data link layer. The network segment 1003 represents a network segment to which a host such as the PC 15 using DHCP can connect. Multiple segments can be registered.
[0029]
The DHCP host set in the DHCP setting information 1000 indicates that DHCP can be used. Conversely, a format in which a host that cannot receive distribution of a DHCP IP address can be specified is also possible.
[0030]
[Embodiment 2]
Hereinafter, a second embodiment according to the present invention will be described with reference to FIGS.
[0031]
First, the overall configuration of the network system according to the second embodiment of the present invention will be described with reference to FIG.
FIG. 5 is an overall configuration diagram of a network system according to the second embodiment of the present invention.
[0032]
The network configuration of this embodiment is the same as that of the first embodiment, in which network segments A, B, and C are connected by an in-house network 101 via a router 100 in an in-house network. Inside each network segment, various PCs and servers are connected by a LAN, as in the first embodiment.
[0033]
In this embodiment, a DNS server is installed in each network segment, and the DNS user 202 can receive the DNS system name service.
[0034]
In the network segment A, the DNS cooperation server 11 of the present invention is installed. Then, the operator 200 sets the DNS setting information in the DNS cooperation server 11 and instructs the DNS cooperation server 11 to transmit the information, thereby rewriting the DNS information of the DNS server 12 of each network segment. The DNS setting information, which will be described in detail later, is information indicating a correspondence between a domain name, a host name, and an IP address. Conventionally, DNS information had to be set for each of the network segments A, B, and C. However, by using the DNS cooperation function of the DNS cooperation server 11 of the present invention, it is possible to set from one place at a time. This has advantages in network management, and reduces the trouble of the network administrator.
[0035]
Next, the processing of the DNS cooperation function of the present invention will be described with reference to FIGS.
FIG. 6 is a schematic diagram of the processing of the DNS cooperation function of the present invention.
FIG. 7 is a flowchart showing a processing procedure of the DNS cooperation function of the present invention.
[0036]
The operator 200 sets DNS information in the DNS cooperation server 01 by inputting it from the console as shown in FIG.
[0037]
Then, when transmitting this information to the DNS server 12, the operator 200 instructs the DNS cooperation server 11 to transmit (S300 in FIG. 7). The DNS cooperation server 11 creates a transmission file from the DNS setting information (S301), and transmits the transmission file to the DNS server 02 (S302).
[0038]
The DNS server 12 reflects it in its own DNS information.
[0039]
Details of the DNS setting information used in the DNS cooperation function will be described below.
[0040]
When a DNS inquiry is sent from the PC 15, the DNS server 12 returns a response of the IP address to the PC 15 based on the transmitted domain name.
[0041]
Next, a data structure of DNS setting information used for the DNS cooperation function of the present invention will be described with reference to FIG.
FIG. 8 is a schematic diagram of the data structure of the DNS setting information.
[0042]
As shown in FIG. 4, the DNS setting information 2000 includes fields of a DNS host name 2001, a domain name 2002, an IP address 2003, a representative flag 2004, and a reverse registration flag 2005.
[0043]
The DNS host name 2001 is a field representing a host name registered in the DNS server. The domain name 2002 is a field indicating a domain name for registering the host described in the field of the DNS host name 2001. A plurality of domains can be registered for one host name.
[0044]
The IP address 2003 is the IP address of the host described in the DNS host name 2001 field.
[0045]
The representative flag 2004 is a flag for indicating a DNS registration method. When YES, the host having the DNS host name 2001 is registered at once for all the domain names predetermined in the DNS cooperation server. Means For example, in the example shown in FIG. 8, when “cs.xxx.com, yok.xxx.com, miu.xxx.com” is defined as a domain name, the representative flag is YES, and the DNS host name “ By registering "SYSPV028", it is possible to register all three domains at once.
[0046]
The reverse lookup registration flag 2005 is a flag indicating whether or not a reverse lookup is set by DNS for the field described in the specified IP address 2003.
[0047]
Based on the information of the DNS setting information 2000, the DNS server 11 performs DNS name service by rewriting its own DNS information.
[0048]
【The invention's effect】
According to the present invention, in a network management system used for a DHCP system and a DNS system, security can be ensured and the trouble of network setting by a network administrator can be reduced.
[Brief description of the drawings]
FIG. 1 is an overall configuration diagram of a network system according to a first embodiment of the present invention.
FIG. 2 is a schematic diagram of processing of a DHCP cooperation function of the present invention.
FIG. 3 is a flowchart showing a processing procedure of a DHCP cooperation function of the present invention.
FIG. 4 is a schematic diagram of a data structure of DHCP setting information.
FIG. 5 is an overall configuration diagram of a network system according to a second embodiment of the present invention.
FIG. 6 is a schematic diagram of processing of a DNS cooperation function of the present invention.
FIG. 7 is a flowchart showing a processing procedure of a DNS cooperation function of the present invention.
FIG. 8 is a schematic diagram of a data structure of DNS setting information.

Claims (12)

In a network management system having a DHCP server and dynamically distributing an IP address to a DHCP client by DHCP,
A network management system comprising a DHCP cooperation server for registering information on a DHCP client that distributes an IP address to the DHCP server. 2. The network management system according to claim 1, wherein the information of the DHCP client is a host name, a MAC address, and a network segment of the client. In a network management method for a network management system having a DHCP server and dynamically distributing an IP address to a DHCP client by DHCP,
Network management, wherein information of a DHCP client that distributes an IP address is registered in a DHCP cooperation server, and the DHCP server determines a DHCP client that distributes an IP address based on the information of the DHCP client. Method. 4. The network management method according to claim 3, wherein the information of the DHCP client is a host name, a MAC address, and a network segment of the client. In a network management program for a network management system having a DHCP server and dynamically distributing an IP address to a DHCP client by DHCP,
A network management program executed by a DHCP cooperation server installed in the system,
A network management program for causing the DHCP cooperation server to execute a procedure for registering information of a DHCP client that distributes an IP address. 6. The network management program according to claim 5, wherein the information of the DHCP client is a host name, a MAC address, and a network segment of the client. In a network management system having a DNS server and responding to an inquiry of a DNS of a DNS client,
A network management system, comprising: a DNS cooperation server for registering DNS information for responding to a DNS inquiry of a DNS client in the DNS server. The network management system according to claim 7, wherein the DNS information is a DNS host name, a domain name, and an IP address. In a network management method of a network management system having a DNS server and responding to a DNS inquiry of a DNS client,
A network management method, wherein DNS information is registered in a DNS cooperation server, and the DNS server executes a DNS function for the DNS client based on the DNS information. 10. The network management method according to claim 9, wherein the DNS information is a DNS host name, a domain name, and an IP address. In a network management program of a network management system having a DNS server and responding to a DNS inquiry of a DNS client,
A network management program executed by a DNS cooperation server installed in the system,
A network management program for causing the DNS cooperation server to execute a procedure for registering DNS information used by the DNS server. The network management program according to claim 11, wherein the DNS information is a DNS host name, a domain name, and an IP address.

Images