Configuring network devices using compilations of coherent subsections of configuration settings
View Patent ↗A method of configuring a networking device comprises: collecting data regarding the networking device; conveying the data to a remote server; selecting configuration slice instances based on the data using the server, wherein templates for the slice instances are stored on the server; compiling the configuration slice instances using the server; and delivering the compiled configuration slice instances to the networking device; wherein the slice instances are coherent sub-sections of configuration settings for the networking device.
1. A system comprising:
a slice instances datastore configured to store coherent subsections of network device configuration settings, each coherent subsection of network device configuration settings being sufficient to express a coherent fraction of a larger network device configuration;
a slice selection engine, coupled to the slice instances datastore, comprising a plurality of slice identification engines configured to identify a plurality of the coherent subsections of network device configuration settings;
a slice compilation engine, coupled to the slice selection engine, configured to assemble the plurality of the coherent subsections of network device configuration settings identified by the slice identification engines into a combined set of configuration settings for a network device.
2. The system of claim 1 , wherein:
the slice instances datastore includes a security slice datastore;
the plurality of slice identification engines include a security slice identification engine coupled to the security slice datastore, wherein, in operation, the security slice identification engine identifies a security slice that is valid for the network device, the security slice being sufficient to express a coherent fraction of a larger security-related configuration.
3. The system of claim 1 , wherein:
the slice instances datastore includes a geographic slice datastore;
the plurality of slice identification engines include a geographic slice identification engine coupled to the geographic slice datastore, wherein, in operation, the geographic slice identification engine identifies a geographic slice that matches a geographic location of the network device, the geographic slice being sufficient to express a coherent fraction of a larger geography-related configuration.
4. The system of claim 1 , wherein:
the slice instances datastore includes a geographic slice datastore;
the plurality of slice identification engines include a geographic slice identification engine coupled to the geographic slice datastore, wherein, in operation, the geographic slice identification engine identifies a geographic slice that matches a LAN associated with an authentication of the network device, the geographic slice being sufficient to express a coherent fraction of a larger geography-related configuration.
5. The system of claim 1 , wherein:
the slice instances datastore includes a device group slice datastore;
the plurality of slice identification engines include a device group slice identification engine coupled to the device group slice datastore, wherein, in operation, the device group slice identification engine identifies a device group slice that matches a device parameter of the network device, the device group slice being sufficient to express a coherent fraction of a larger device group-related configuration.
6. The system of claim 1 , wherein:
the slice instances datastore includes a device group slice datastore;
the plurality of slice identification engines include a device group slice identification engine coupled to the device group slice datastore;
wherein, in operation:
the device group slice identification engine identifies multiple device group slices that match a device parameter of the network device, each device group slice being sufficient to express a coherent fraction of a larger device group-related configuration;
the slice selection engine selects one of the multiple device group slices for the network device.
7. The system of claim 1 , wherein:
the slice instances datastore includes a device group slice datastore;
the plurality of slice identification engines include a device group slice identification engine coupled to the device group slice datastore;
wherein, in operation:
the device group slice identification engine identifies multiple device group slices that match a device parameter of the network device, each device group slice being sufficient to express a coherent fraction of a larger device group-related configuration;
the slice selection engine merges at least two of the multiple device group slices into a single device group slice for the network device.
8. The system of claim 1 , wherein:
the slice instances datastore includes a user role slice datastore;
the plurality of slice identification engines include a user role slice identification engine coupled to the user role slice datastore, wherein, in operation, the user role slice identification engine identifies a user role slice that matches a role of a user of the network device, the user role slice being sufficient to express a coherent fraction of a larger user-related configuration.
9. The system of claim 1 , wherein:
the slice instances datastore includes a user role slice datastore;
the plurality of slice identification engines include a user role slice identification engine coupled to the user role slice datastore;
wherein, in operation:
the user role slice identification engine identifies multiple user role slices that match a role of a user of the network device, each user role slice being sufficient to express a coherent fraction of a larger user-related configuration;
the slice selection engine merges at least two of the multiple user role slices into a single user role slice for the network device.
10. The system of claim 1 , wherein:
the slice instances datastore includes a user custom slice datastore;
the plurality of slice identification engines include a user custom slice identification engine coupled to the user custom slice datastore, wherein, in operation, the user custom slice identification engine identifies a user custom slice that matches user-customized characteristics for the network device, the user custom slice being sufficient to express a coherent fraction of a larger user-customized configuration.
11. The system of claim 1 , further comprising a network management engine configured to provide a set of user attributes to the slice selection engine, wherein, in operation, the slice selection engine identifies at least one coherent subsection in the plurality of coherent subsections of network device configuration settings for the network device using a subset of the user attributes applicable to a user of the network device.
12. The system of claim 1 , further comprising a network management engine configured to provide device attributes of the network device to the slice selection engine, wherein, in operation, the slice selection engine identifies at least one coherent subsection in the plurality of coherent subsections of network device configuration settings for the network device using the device attributes.
13. The system of claim 1 , further comprising a network management engine configured to provide a set of network attributes to the slice selection engine, wherein, in operation, the slice selection engine identifies at least one coherent subsection in the plurality of coherent subsections of network device configuration settings for the network device using a subset of the network attributes applicable to a network with which the network device will attempt, is attempting, or has attempted to associate.
14. The system of claim 1 , further comprising:
a templates datastore configured to store data structures comprising a set of configuration variables;
a slice editing engine, coupled to the templates datastore, wherein, in operation, the slice editing engine generates a slice instance with one or more of the set of configuration variables of one of the data structures instantiated with one or more values;
a slice deployment engine, coupled to the slice editing engine, wherein, in operation, the slice deployment engine provides the slice instance to the slice instances datastore in response to a deployment instruction.
15. The system of claim 1 , further comprising:
a device configuration datastore coupled to the slice compilation engine, wherein, in operation, the slice compilation engine provides the combined set of configuration settings for the network device to the device configuration datastore;
a network management engine coupled to the device configuration datastore, wherein, in operation, the network management engine provisions the network device with the combined set of configuration settings for the network device.