Labeling gateway for compartmented multi-operator network elements over a heterogeneous network
The present invention provides adequate service virtualization and compartmentalization in Network Management Systems for heterogeneous Network Elements to provide interoperability. It introduces a generic mediation layer that can be added to each Network Element that does not provide a network compartmentalization model that is compatible with the one used by the Network Management System. The mediation layer acts as a reverse proxy for the Network Management System to provide an operator with transparent access to an appropriate Management Service. The present invention is also instrumental in providing a high level of security in such hybrid networks.
1. A method of sharing a network element (NE) of a communication network between a plurality of operators, said method comprising the following steps:
providing all NEs that include elements that do not support management by said operators in a compartment of a compartmented network management system (NMS) with a label conversion gateway( LCG) that acts as a reverse proxy for said NMS and provides at least one of said operators with management access to said NE;
mapping, with said LCG, an incoming service request with a management service to be executed by said NE as defined by a Labeling Conversion Policy (LCP) stored in a database on said NE;
making changes corresponding to entries in said LCP, when needed, to at least one of the following:
an Internet Protocol (IP) address of a destination of said incoming service request,
a Transmission Control Protocol (TCP) destination port of said incoming service request,
a User Datagram Protocol (UDP) destination port of said incoming service request, and
labeling information contained in IP options; and
executing, at said NE, said service according to a policy pre-established for said operators of said compartment of said NMS,
2. The method of claim 1 , further comprising the following step:
relaying said incoming service request with a mediator to said NMS.
3. the method of claim 2 further comprising the following step:
Specifying said changes required by said mediator to relay said incoming service request in said policy.
4. The method of claim 2 , further comprising the following step:
accessing said management service only through said mediator.
5. The method of claim 3 , further comprising the following step:
storing said policy on said NE.
6. A compartmented network management system (NMS), comprising:
means for providing all network elements (NEs) including elements that do not support management by an operator in a compartment of said NMS with a label conversion gateway (LCG) that acts as a reverse proxy for said NMS and provides at least one of said operators with management access to said NE;
means for mapping, with said LCG, an incoming service request with a management service to be executed by said NE as defined by a Labeling Conversion Policy (LCP) stored in a database on said NE;
means for making changes corresponding to entries in said LCP, when needed, to at least one of the following:
an IP address of a destination of said incoming service request,
a TCP destination port of said incoming service request,
a UDP destination port of said incoming service request, and
labeling information contained in IP options; and means for executing, at said NE, said service according to a policy pre-established for said operators of said compartment of said NMS.
7. The system of claim 6 , further comprising a mediator on each said NE that relays said incoming service request to a said management service.
8. The system of claim 7 comprising means for verifying that said changes are specified in said policy.
9. The system of claim 7 , further comprising means for denying access to said management service unless said access is through said mediator.
10. The system of claim 6 , wherein said NE comprises means for storing said policy.