Methods and systems for onboarding network equipment
View Patent ↗Methods are systems are provided for onboarding network equipment to managed networks. An onboarding controller may be used in authenticating the to-be-onboarded network equipment. The onboarding controller may issue a challenge, which may comprise instructions for making configuration changes to the network equipment. The configuration changes may comprise adding, removing, and/or changing connections within and/or to the network equipment within a local network comprising the network equipment. The onboarding controller may determine whether or not the configuration changes have been made to the network equipment. The determination of configuration changes may be used in verifying the identity and/or location of the network equipment, and/or in determining determine to which managed network the network equipment should be onboarded.
1. A method comprising:
in an onboarding controller of a managed network:
receiving an onboarding request communicated from network equipment to be onboarded into the managed network, wherein the onboarding request is communicated via the managed network;
generating a challenge for the network equipment;
sending the challenge to a user device of a user associated with the network equipment, wherein:
the challenge is sent to the user device over a secure connection that is different than and is used concurrently with a connection used in communicating the onboarding request;
the challenge comprises instruction information of a configuration change to be made to the network equipment;
the configuration change comprises a sequence of at least a first and a second configuration change of the network equipment; and
the sequence comprises a timed interval between the first and second configuration changes of the network equipment;
detecting the configuration change;
verifying based on detecting of the configuration change, an identity and/or a network location of the network equipment; and
onboarding the network equipment onto a particular remote management system based on the verification of the identity and/or the network location of the network equipment.
2. The method of claim 1 , comprising:
determining that the configuration change is made to the network equipment; and
selectively onboarding the network equipment to the managed network, based on outcome of the made configuration change.
3. The method of claim 2 , wherein:
the managed network is one of a plurality of managed networks; and
the selective onboarding comprises selecting to which of the plurality of managed networks to onboard the network equipment.
4. The method of claim 2 , wherein determining that the configuration change is made comprises:
transmitting one or more test signals to the network equipment; and
receiving one or more test response signals from the network equipment.
5. The method of claim 1 , wherein the configuration change comprises configuring one or more connections to and/or within the network equipment.
6. The method of claim 5 , wherein the one or more connections comprise at least one local connection to a network device local to and different from the network equipment.
7. The method of claim 5 , wherein the one or more connections comprise at least one local connection between two different ports of the network equipment.
8. The method of claim 1 , comprising communicating with the network equipment via a first network and a second network that is different than the first network, wherein
the onboarding request is received via the first network, and
the challenge and/or information related to the challenge is communicated via the second network.
9. The method of claim 1 , wherein application of the configuration change requires that at least one action be performed manually at the network equipment by the user associated with the network equipment.
10. A system comprising:
an onboarding controller for onboarding network equipment to a managed network, the onboarding controller comprises at least a processing circuit and a communication circuit, wherein:
the communication circuit is operable to receive an onboarding request communicated from network equipment to be onboarded into the managed network, wherein the onboarding request is communicated via the managed network;
the processing circuit is operable to generate a challenge for the network equipment, wherein:
the challenge comprises instruction information of a configuration change to be made to the network equipment;
the configuration change comprises a sequence of at least a first and a second configuration change of the network equipment; and
the sequence comprises a timed interval between the first and second configuration changes of the network equipment;
the communication circuit is operable to send the challenge to a user device of a user associated with the network equipment, wherein the challenge is communicated to the user device over a secure connection that is different than and is used concurrently with a connection used in communicating the onboarding request; and
the onboarding controller is operable to:
detect the configuration change;
verify based on detecting of the configuration change, and identity and/or a network location of the network equipment; and
onboard the network equipment onto a particular remote management system based on the verification of the identity of the network equipment and/or the network location of the network equipment.
11. The system of claim 10 , wherein the onboarding controller is operable to:
determine that the configuration change is made to the network equipment; and
selectively onboard the network equipment to the managed network, based on outcome of the made configuration change.
12. The system of claim 11 , wherein:
the managed network is one of a plurality of managed networks; and
the selective onboarding comprises selecting to which of the plurality of managed networks to onboard the network equipment.
13. The system of claim 11 , wherein determining that the configuration change is made comprises:
transmitting one or more test signals to the network equipment; and
receiving one or more test response signals from the network equipment.
14. The system of claim 10 , wherein the configuration change comprises configuring one or more connections to and/or within the network equipment.
15. The system of claim 14 , wherein the one or more connections comprise at least one local connection to a network device local to and different from the network equipment.
16. The system of claim 14 , wherein the one or more connections comprise at least one local connection between two different ports of the network equipment.
17. The system of claim 10 , wherein the onboarding controller is operable to communicate with the network equipment via a first network and a second network that is different than the first network, wherein:
the onboarding request is received via the first network, and
the challenge and/or information related to the challenge is communicated via the second network.
18. The system of claim 10 , wherein:
application of the configuration change requires that at least one action be performed manually at the network equipment by the user associated with the network equipment; and
the onboarding controller is operable to detect the configuration change based on a determination that the user performed the at least one action.