NETCONF/DMI-based secure network device discovery

摘要

A system receives discovery rule inputs that include addresses, verifies one or more device identifiers for one or more addresses, obtains device information from each verified device associated with the one or more verified device identifiers, determines whether each verified device is a discovered device based on the device information, and automatically adds each verified device as a discovered device to a management system without human intervention when it is determined that the verified device is discovered. The system further creates device configuration information, creates an identifier and password, provides device configuration information, the identifier, and the password, to each of the discovered devices based on the NETCONF or the Device Management Interface standards, waits for a connection from the discovered devices, imports device configuration information from the discovered devices when the connection has been established, and indicates that the discovered devices are managed devices.

主权项

1. A method comprising:
determining, by a network device, that a device has been added to a network management system associated with the network device,
the device utilizing a network management protocol that requires the device to initiate a connection with the network device; generating, by the network device, configuration information for establishing the connection between the network device and the device; accessing, by the network device, the device,
accessing the device including logging into the device using secure shell version 2 (SSH v2) credentials; providing, by the network device and based on accessing the device, the configuration information for establishing the connection to the device to cause the device to establish the connection; logging off, by the network device, from the device based on the configuration information having been provided to the device; determining, by the network device, that the device has established the connection; receiving, by the network device, device configuration information from the device via the connection; and providing, by the network device, the device configuration information to the network management system,
the device configuration information being usable by the network management system to manage the device.