JP6003258B2 - Transmission device, command group guard method, command group guard program - Google Patents

Description

The present invention relates to a transmission apparatus, a command group guard method, and a command group guard program.

  Data communication in the communication network is performed via a plurality of NEs (Network Elements: transmission devices) arranged in the network. In addition, a control terminal that monitors and controls a plurality of transmission apparatuses is provided, and each transmission apparatus is monitored and controlled from the control terminal via a CUI (Command Line User Interface) or a GUI (Graphical User Interface). Yes.

  For example, the control terminal uses the TL1 (Telecom Language 1) or CLI (Cisco Command Line Interface), which is the interface of each transmission device, to set the communication path of the data for each transmission device. Monitor and control device operation.

  The control terminal stores network operation software (OPS: Operation System) for monitoring and controlling each transmission apparatus. On the other hand, basic software (OSL: Operating System Load) which is embedded software is stored in the transmission apparatus. The transmission apparatus receives a control command from the outside of the apparatus via a command transmission / reception unit in the OSL, updates the apparatus setting database provided in the apparatus, and transmits a command response to the outside of the apparatus. Also, the transmission apparatus issues an instruction to the device control software based on the apparatus setting database, and sets and controls various hardware devices.

  Here, the prior art discloses a guard method for a single or simple control command. For example, it is known to provide a function for guarding a control command for a transmission apparatus in an OPS of a control terminal. According to this, it is supposed that it is possible to prevent various control commands from being issued to the transmission apparatus by guarding an operator's GUI operation mistake or a prohibited command with the command guard block in the OPS.

  On the other hand, for example, in the basic software of the UNIX (registered trademark) server, a command guard that guards a specific control command among control commands input from a control terminal or complements a regular command from a part of character string input. It is also known to provide a part. According to this, guard or replacement can be performed on a single control command transmitted from the control terminal.

Japanese Patent Laid-Open No. 11-136199 JP 2001-175596 A

  However, in the prior art, a function of guarding or replacing a complicated combination of various control commands is not considered.

  That is, information processing apparatuses such as conventional transmission apparatuses have a relatively simple control architecture. For this reason, if restrictions / usage conditions or problems occur in the embedded software of the device, until the software improved version is released, the restrictions related to the device control will be disclosed to the operator, etc. so that the operator does not perform any operation that causes the problem. I was dealing with it. As described above, conventionally, since there are few restrictions, it has been dealt with only by manual handling.

  On the other hand, in recent years, since the control architecture has become complicated, it is difficult to cope with complicated combinations of various control commands only by manual operation. Moreover, it is difficult to cope with a complicated combination of various control commands even with the technique of guarding or replacing a single control command as in the above-described prior art.

The disclosed technology has been made in view of the above, and an object thereof is to realize a transmission device, a command group guard method, and a command group guard program capable of guarding or replacing a complicated combination of various control commands. And

In one aspect, a transmission device disclosed in the present application includes a receiving unit that receives a restriction definition file that defines a command transmitted from a control terminal and a restriction that indicates whether or not the execution of the command is restricted. Prepare. The transmission apparatus, a second database for managing a first database, the response command to be transmitted to said control terminal in response to said input commands for managing the history of the input command received by the receiving unit, and the self A memory including a third database for managing the state of the apparatus; In addition, when a command is received by the reception unit, the transmission apparatus refers to the restriction item definition file and the memory to determine whether or not the execution of the received command is limited, and according to the determination result A command control unit that notifies the basic program of the device itself.

According to one aspect of the transmission apparatus disclosed in the present application, it is possible to guard or replace a complicated combination of various control commands.

FIG. 1 is a diagram showing an outline of the present embodiment. FIG. 2 is a diagram illustrating an example of a control system of the transmission apparatus. FIG. 3 is a diagram illustrating functional blocks of the transmission apparatus according to the present embodiment. FIG. 4 is a diagram illustrating a hardware configuration of the transmission apparatus according to the present embodiment. FIG. 5 is a diagram showing the configuration of the program and the database. FIG. 6 is a diagram illustrating a guard method block of a control command group. FIG. 7 is a diagram illustrating an example of the configuration of the buffer and the selector. FIG. 8 is a diagram illustrating an example of the configuration of the database processing unit. FIG. 9 is a flowchart of processing of the dedicated U / I program. FIG. 10 is a flowchart of the processing of the dedicated U / I program. FIG. 11 is a flowchart of dedicated U / I program processing. FIG. 12 is a diagram illustrating an example of a control command group and a guard method. FIG. 13 is a diagram illustrating an example of a control command group and a guard method. FIG. 14 is a diagram illustrating an example of a control command group and a guard method. FIG. 15 is a diagram showing the correlation between the definition file and the database. FIG. 16 is a diagram illustrating the correlation among the definition file, the U / I program, and the DB. FIG. 17 is a diagram illustrating the correlation among the definition file, the U / I program, and the DB. FIG. 18 is a diagram illustrating an application example of this embodiment. FIG. 19 is a diagram illustrating an application example 2 of the present embodiment.

  Hereinafter, embodiments of an information processing apparatus, a command group guard method, and a command group guard program disclosed in the present application will be described in detail with reference to the drawings. The disclosed technology is not limited by this embodiment. For example, in the following embodiments, a transmission apparatus is described as an example of an information processing apparatus, but the present invention is not limited to this.

  FIG. 1 is a diagram showing an outline of the present embodiment. As illustrated in FIG. 1, the transmission apparatus 200 includes basic software (OSL) 204 that controls the transmission apparatus 200. The transmission apparatus 200 also includes a command guard / converter 202 that guards or replaces commands transmitted from the control terminal 100 via the user interface 150. The transmission apparatus 200 also includes a profile database 206 in which rewritable profiles such as a restriction list for commands and a command conversion list are stored.

  The command guard / converter 202 reads the profile stored in the profile database 206 and guards or replaces the command transmitted from the control terminal 100 via the user interface 150 based on the read profile. As a result, the transmission apparatus 200 can flexibly limit command access to the basic software 204 and automatically respond, or convert a response to the command.

  As described above, the transmission apparatus 200 according to the present embodiment includes the command guard / convert unit 202 that analyzes a command and guards the process or replaces the process with a different process on the transmission apparatus 200 side. For the operation of the command guard / convert unit 202, a definition file including text set by some users such as a network administrator is used. As a result, the program itself does not need to be changed.

  Next, an example of the control system of the transmission apparatus 200 will be described. FIG. 2 is a diagram illustrating an example of a control system of the transmission apparatus. In general, data communication and transmission in a network are performed via a plurality of transmission devices 200-1 to 200-5 arranged in the network as shown in FIG. The main function of the transmission devices 200-1 to 200-5 is to transmit various data such as user data. In addition, a control terminal (OPS) 100 that monitors and controls a plurality of transmission apparatuses 200-1 to 200-5 is provided, and the control terminal 100 provides a route of user data to each of the transmission apparatuses 200-1 to 200-5. Monitor settings and control operations.

  Next, functional blocks of the transmission apparatus according to this embodiment will be described. FIG. 3 is a diagram illustrating functional blocks of the transmission apparatus according to the present embodiment. As shown in FIG. 3, the transmission apparatus 200 includes a command control unit 210, basic software 220, and a restriction item definition file 230 that describes actual restriction items. Further, the transmission apparatus 200 includes device control software 240 for controlling devices, various hardware devices 250, and a device setting database 260 for grasping device setting states.

  The command control unit 210 is a dedicated UI (User Interface) program block for restricting the command 152 sent from the control terminal 100 to the basic software 220. The command control unit 210 includes a command transmission / reception unit 212 that performs monitoring and restriction processing based on a restriction item definition file 230 in which an input TL1 command is registered in advance, and inputs / outputs the basic software 220. Further, the command transmission / reception unit 212 transmits a response 154 corresponding to the received TL1 command to the control terminal 100.

  Next, the hardware configuration of the transmission apparatus according to the present embodiment will be described. FIG. 4 is a diagram illustrating a hardware configuration of the transmission apparatus according to the present embodiment. As illustrated in FIG. 4, the transmission device 200 includes a Management Complex Unit 300. The Management Complex Unit 300 includes a CPU (Central Processing Unit) 302, a timer counter 304, a nonvolatile memory 306, and a volatile memory 308. The Management Complex Unit 300 includes a LAN interface 310, a serial interface 318, an internal BUS 328, an in-device communication interface 330, and a line card unit 350. Detailed descriptions of the nonvolatile memory 306 and the volatile memory 308 will be described later.

  The LAN interface 310 includes a LAN I / F (Interface) 312, a PHY (physical layer) 314, and a MAC / L2SW 316. The serial interface 318 includes a serial I / F 320, an RS232C conversion unit 322, and a serial controller 324. The intra-device communication interface 330 includes MAC / L2 SWs 332 and 342, PHYs 334 and 340, and LAN I / Fs 336 and 338. The line card unit 350 includes a transmission device 352, a bridge 353, a memory 354, a CPU 356, and an internal BUS 358.

  For example, the TL1 command output from the TL1 command input / output unit 326 is sent to the internal BUS 328 via the LAN interface 310 or the serial interface 318, and the nonvolatile memory 306, the volatile memory 308, and the device internal via the internal BUS 328. It is sent to the communication interface 330 or the like. Various data including user data is transmitted to the transmission device 352 via the in-device communication interface 330, the internal BUS 358, and the like, and is transmitted to the outside via the various transmission paths 360.

  Next, the configuration of the program and database will be described. FIG. 5 is a diagram showing the configuration of the program and the database. As shown in FIG. 5, the non-volatile memory 306 includes an OSL 376 that is a basic program area, a DBS 378 that is an apparatus database area, a dedicated U / I program 380, and an LIM 382 that is an apparatus restriction storage area. The various control commands 370 and the restriction item definition file 230 transmitted from the control terminal 100 are input to the dedicated U / I program 380 via the LAN interface 310 or the serial interface 318.

  The volatile memory 308 includes a command / device status management database 384 and an execution database 386. The command and device status management database 384 manages DB_S (1) 388 for managing the history of input commands, DB_S (2) 390 for managing response commands, and device status (for example, internal status such as device load). DB_S (3) 392 to be executed. The execution database 386 includes DB_EXE 394 for executing predetermined processing based on DB_S (1) 388, DB_S (2) 390, and DB_S (3) 392.

  By using three types of state management databases DB_S (1) 388, DB_S (2) 390, and DB_S (3) 392 and DB_EXE 394, complicated processing such as a combination of a plurality of commands can be guarded. For example, since the history of input commands can be managed by DB_S (1) 388, complex control commands that specify the number of input commands can be guarded or replaced. Further, for example, since the response command can be managed by DB_S (2) 390, a complicated control command corresponding to the type of the response command can be guarded or replaced. Further, for example, since the state (for example, load) of the apparatus can be managed by DB_S (3) 392, a complicated control command corresponding to the apparatus load can be guarded or replaced. Further, complicated processing such as a combination of a plurality of commands can be set from the outside of the apparatus using a restriction definition file.

  In this embodiment, for convenience, three types of state management databases DB_S (1) 388, DB_S (2) 390, and DB_S (3) 392 are provided, but these may be a single DB. Moreover, it may be separated into more DBs.

  Next, the guard method of the control command group will be described in detail with reference to FIG. FIG. 6 is a diagram illustrating a guard method block of a control command group. The DB_S (1) processing unit 404 monitors the number of executions of the TL1 command (S1_in) itself input from the TL1 command input unit 402, the execution interval, and the timer after execution, and creates a database. The DB_S (2) processing unit 406 automatically issues a predetermined command directed to the apparatus based on the input TL1 command (S2_in1), and creates a database for the response. The DB_S (3) processing unit 416 performs notification that the command execution process is delayed when the load on the in-device processing is high, and performs waiting processing at certain intervals when a specific command is received.

  The DB_EXE processing unit 410 performs determination and control processing based on the DB_S (1) processing unit 404, the DB_S (2) processing unit 406, the DB_S (3) processing unit 416, and the TL1 command (EXE_in). The RxBUF 408 is a queue buffer that temporarily stores received commands. The RxSEL 412 selects either RSEL_In or EXE_out1 according to the instruction of RSEL_ctrl, outputs it to RSEL_out, and outputs it to the OSL 414.

  The TxBUF 424 adjusts the time for command transmission from the OSL 426 and outputs it to the TxSEL 422. The TxSEL 422 selects one of EXE_OUT2 and TxBUF in accordance with TSEL_ctrl control, and outputs it to the TL1 command response unit 420.

  Information input from the control terminal 100 is input to the TL1 command input unit 402 via the user interface 150. The DB_S (1) processing unit 404 determines whether the input command S1_in corresponds to the DB, and outputs the determination result S1_out to the DB_EXE processing unit 410.

  Further, the DB_S (2) processing unit 406 determines whether the input command S2_in corresponds to the DB, and outputs the determination result S2_out to the DB_EXE processing unit 410. Further, the DB_S (3) processing unit 416 collects internal processing information 418 such as a software process inside the apparatus by S3_in, converts it into a DB, and outputs it to the DB_EXE processing unit 410 as S3_out.

  The DB_EXE processing unit 410 outputs processing and a TL1 response to various restrictions based on information from the DB_S (1) processing unit 404, the DB_S (2) processing unit 406, and the DB_S (3) processing unit 416.

  Here, the configuration of the buffer, the selector, and the like will be described. FIG. 7 is a diagram illustrating an example of the configuration of the buffer and the selector. FIG. 8 is a diagram illustrating an example of the configuration of the database processing unit. As shown in FIG. 7, the input TL1 command is stored in the RxBUF (SEL1) area at the address 508 of the memory map, and the command from the DB_EXE processing unit 410 is stored in the RxBUF (SEL2) area at the address 506. RxSEL can be realized by switching the address 506 and the address 508 by a dedicated U / I program.

  The clear operation of RxBUF can be realized by clearing the address 508 by RBUF_ctrl from the DB_EXE processing unit 410. The response from the OSL is stored in the TxBUF (SEL1) area at the address 504 of the memory map, and the command from the DB_EXE processing unit 410 is stored in the TxBUF (SEL2) area at the address 502. TxSEL can be realized by switching addresses using a dedicated U / I program. Further, the clear operation of TxBUF can be realized by clearing the address 504 by TBUF_ctrl from the DB_EXE processing unit 410.

  Further, as shown in FIG. 8, the operation definition file for each DB from the operator includes the DB_S (1) operation definition area at the address 522 of the memory map of the database processing unit, the DB_S (3) operation definition area at the address 520, and the address. It is stored in the DB_EXE operation definition area 518. The dedicated U / I program is executed based on the information stored in this area. In addition, a DB_S (1) information holding area is stored at address 516, a DB_S (3) information holding area is stored at address 514, and a DB_EXE information holding area is stored at address 512, and a dedicated U / I program can write IN / OUT information. It becomes possible.

  Next, processing of the dedicated U / I program will be described. 9 to 11 are flowcharts of processing of the dedicated U / I program. First, as shown in FIG. 9, when the apparatus is powered on (S101), the dedicated U / I program starts OSL (S102). Subsequently, the dedicated U / I program reads the definition file from the nonvolatile memory (S103). In this way, since the definition file is stored in the nonvolatile memory area, it is possible to obtain immediate action in accordance with power restoration when the power supply is abnormal.

  On the other hand, when the definition file is written by the operator (S104), the dedicated U / I program writes the definition file to the nonvolatile memory (S105). After reading the definition file, the dedicated U / I program initializes the databases of DB_S (1) 388, DB_S (2) 390, DB_S (3) 392, and DB_EXE 394 (S106), and starts monitoring input commands. (S107).

  As shown in FIG. 10, when the TL1 command is input, the dedicated U / I program starts monitoring the input command (S201). The dedicated U / I program determines whether it matches or does not match the definition file described in DB_EXE 394 (S202). If the dedicated U / I program matches in S202, the dedicated U / I program acquires the database information of DB_S (1) 388, DB_S (2) 390, DB_S (3) 392 (S203), DB_S (1) 388, DB_S (2 ) 390, DB_S (3) It is determined whether or not the various conditions in 392 match (S204).

  If the dedicated U / I program matches in S204, the dedicated U / I program executes DB_EXE processing (S205). After the execution of S205, if there is a mismatch in S202 or a mismatch in S204, the dedicated U / I program determines whether it matches or does not match the description in DB_S (1) 388 (S206).

  When the dedicated U / I program matches in S206, the dedicated U / I program executes the process of DB_S (1) (S207) and updates DB_S (1) 388 (S208). Further, when there is a mismatch in S206, the dedicated U / I program determines whether it matches or does not match the description in DB_S (2) 390 (S209). When the dedicated U / I program matches in S209, the dedicated U / I program executes the process of DB_S (2) (S210) and updates DB_S (2) 390 (S211). The dedicated U / I program returns to the process of S202 after the process of S208 or S211 is completed or when there is a mismatch in S209.

  As shown in FIG. 11, when the dedicated U / I program starts monitoring information in the apparatus (S301), the dedicated U / I program determines whether it matches or does not match the description in DB_S (3) 392 (S302). If the dedicated U / I program matches in S302, DB_S (3) is executed (S303), and DB_S (3) 392 is updated (S304). On the other hand, the dedicated U / I program returns to the processing of S302 when there is a mismatch in S302 or when the processing of S304 is completed.

  Next, an example of a control command group and a guard method will be described. FIG. 12 is a diagram illustrating an example of a control command group and a guard method. As shown in FIG. 12, the restriction items of the transmission apparatus 200 are summarized in nine cases (C1 to C9) shown in FIG. FIG. 12 shows 9 cases (C1 to C9) that are the restrictions of the transmission apparatus 200, and DB_S (1) 388, DB_S (2) 390, DB_S (3) 392, and DB_EXE394 in each case. It is a list of what is used.

  Case 1 (C1) is a content that rejects [command A], and is used as a static and simple command guard method by UNIX or the like. As shown in FIG. 12, this embodiment can be realized by using DB_EXE 394.

  Case 2 (C2) is a content that replaces [command B] with [command C], and is used as a static and simple command guard method in UNIX or the like. As shown in FIG. 12, this embodiment can be realized by using DB_EXE 394.

  Case 3 (C3) is a content that permits execution of [command D] up to three times, and is difficult to realize by a static and simple command guard method such as UNIX. On the other hand, in the present embodiment, as shown in FIG. 12, case 3 (C3) can be realized by using DB_S (1) 388 and DB_EXE 394.

  Case 4 (C4) is such that the execution interval of [command E] is 30 seconds or more, and it is difficult to realize it by a static and simple command guard method such as UNIX. On the other hand, in this embodiment, Case 4 (C4) can be realized by using DB_S (1) 388 and DB_EXE 394.

  Case 5 (C5) is a content for rejecting [command G] for 60 seconds after executing [command F]. This case 5 is used, for example, in a case of rejecting [command G (setting for new unit registration)] for 60 seconds after executing [command F (maintenance)]. Case 5 is difficult to realize by a static and simple command guard method such as UNIX. On the other hand, in this embodiment, Case 5 (C5) can be realized by using DB_S (1) 388 and DB_EXE 394.

  Case 6 (C6) is a content in which [response J], which is a response to [command H], is replaced with [response K], and is difficult to achieve with a static and simple command guard method such as UNIX. On the other hand, in this embodiment, Case 6 (C6) can be realized by using DB_S (2) 390 and DB_EXE 394.

  Case 7 (C7) is such that execution of [command L] is rejected (when response [response Y] of [command X] is Z). This case 7 is used, for example, when the execution of [command L (service start)] is rejected when the response [response Y] of [command X (device status acquisition command)] is Z (problem). It is done. Case 7 is difficult to realize by a static and simple command guard method such as UNIX. On the other hand, in this embodiment, Case 7 (C7) can be realized by using DB_S (2) 390 and DB_EXE 394.

  Case 8 (C8) is a content that notifies the operator in advance that the execution of [command P] is delayed when the apparatus CPU load is high, and it is difficult to realize with a static and simple command guard method such as UNIX. On the other hand, in this embodiment, case 8 (C8) can be realized by providing DB_S (3) 392 and DB_EXE 394.

  Case 9 (C9) is such that after receiving [command Q], it waits for [command R] for 90 seconds, but when the CPU load falls below 50%, it can be executed within 90 seconds. Case 9 is difficult to realize with a static and simple command guard system such as UNIX. In contrast, in this embodiment, Case 9 (C9) can be realized by using DB_S (1) 388, DB_S (3) 392, and DB_EXE 394.

  Here, Case 5 (C5) and Case 7 (C7) are typical contents of the restriction items of the transmission apparatus, and will be described in detail with reference to FIGS. 13 and 14 are diagrams illustrating an example of the control command group and the guard method. FIG. 15 is a diagram showing the correlation between the definition file and the database. FIG. 16 is a diagram illustrating the correlation among the definition file, the U / I program, and the DB. FIG. 17 is a diagram illustrating the correlation among the definition file, the U / I program, and the DB.

  FIG. 13 shows in detail the case 5 (C5) of the control command group and its guard method example. As shown in FIG. 13, when [command F] is input, [command F] is input to the DB_S (1) processing unit 404 from S1_in. When [command F] matches the definition file of DB_S (1), the post-execution timer count (Tf) of the database of DB_S (1) is started. (Tf) is output to the DB_EXE processing unit 410 by S1_out.

  In the DB_EXE processing unit 410, S1_out and EXE_in are determined based on the database of the DB_EXE processing unit 410. When the condition (Tf ≦ 60 and EXE_in) is met, [command G] is disabled and cleared by RBUF_ctrl, and RxBUF Control the output.

  Further, since EXE_out2 can be selected by TxSEL by TSEL_ctrl and DENY can be responded to a TL1 command, command processing can be performed at a time interval after execution for a specific command. When [command W] is input, the timer count (Tf) is cleared.

  Next, FIG. 14 shows details describing case 7 of the control command group and its guard method example. As shown in FIG. 14, when [command L] is input, it is input from S2_in to the DB_S (2) processing unit 406. When [command L] matches the definition file of DB_S (2), the post-execution reception status (SI) of the database of DB_S (2) is output to the DB_EXE processing unit 410 by S2_out.

  The DB_EXE processing unit 410 makes a determination based on S2_out, EXE_in, and the database of the DB_EXE processing unit 410. If the conditions match, the Rx_ctrl selects two systems Rx_SEL and outputs [command X] from the EXE_out1 to the OSL. The response of [command X] is monitored by S2_In2, and if the response is [response Y], the reception status (Sz) is output to the DB_EXE processing unit 410 by S2_out.

  When the reception status (SI, Sz) matches the condition (SI occurrence and EXE_in), the DB_EXE processing unit 410 controls the output of RxBUF by RBUF_ctrl and selects EXE_out2 by TxSEL by TSEL_ctrl. Further, since the DB_EXE processing unit 410 can respond to DENY with a TL1 command, the DB_EXE processing unit 410 can reject command processing by a response response after execution of the specific command. Note that the DB_EXE processing unit 410 executes [command L] when there is a mismatch.

  Next, using FIG. 15 to FIG. 17, a correlation diagram between the definition file, the database, and the dedicated U / I program is shown. As illustrated in FIG. 15, the definition file 602 includes a DB_S1 definition file 604, a DB_S2 definition file 606, and a DB_EXE definition file 608. In FIG. 15, the DB_S1 definition file 604, the DB_S2 definition file 606, and the DB_EXE definition file 608 are described separately, but a single file may be used.

  The DB_S1 definition file 604, the DB_S2 definition file 606, and the DB_EXE definition file 608 are configured to define variables for IN / OUT of each DB. For example, as one of the input side monitoring commands in the DB_S1 definition file 604, there is a character string [command D], which is defined as D1in. Further, Te is defined as a timer, and the usage condition can be set for timer 1 at the same time as the usage declaration for timer 1. The same applies to the response command, and the character string “response DENY” output to EXE_out2 is defined as “DENY”.

  Further, the DB_S1 memory area 612, 614, the DB_S2 memory area 618, and the DB_EXE memory area 620 show specific correlations about how the contents of the definition file indicated by the definition file 602 are stored. It was. This correlation is shown as an arrow from the definition file 602 to the DB_S1 memory area 612, 614, the DB_S2 memory area 618, and the DB_EXE memory area 620. Basically, a variable such as D1in defined in the definition file becomes a pointer to the memory, and the substance of the data becomes various command character strings. The timer is realized by creating links to a plurality of general-purpose timer counters 616.

  The actual operation for case 5 (C5) will be described with reference to FIG. The definition files 702 and 704 are definition files in which operation descriptions of the dedicated U / I program are written. FIG. 16 is a diagram showing the correlation between the dedicated U / I program and each database arranged in the memory. The operation of case 5 will be described in detail with reference to FIG.

  First, when the definition files 702 and 704 are read, the contents of the definition file are stored in a corresponding area of the operation definition area 706 in which DB_EXE, DB_S1, and the like are stored. Next, the dedicated U / I program 710 reads all the contents written in the operation definition area 706 and operates based on the definition contents of DB_EXE, DB_S1, DB_S2, and DB_S3 (720).

  For example, according to the definition of DB_S1, the dedicated U / I program 710 compares S1_in, which is an input command of DB_S1, with the monitoring target command F1in included in the information holding area 708, and starts counting the timer Tf if they match. (722). Further, the dedicated U / I program 710 matches the EX_in input command of DB_EXE with the monitoring target command Gin included in the information holding area 708 in accordance with the definition of DB_EXE, and the Tf is less than 60 (seconds). If there is (724), RxBUF 712 is invalidated and deleted. Further, TxBUF is selected to the SEL2 side, and a DENY response is transmitted to TxBUF 712 (726).

  The actual operation of case 7 (C7) will be described with reference to FIG. The definition file 802 is a definition file in which the operation description of the dedicated U / I program is written. FIG. 17 is a diagram showing the correlation between the dedicated U / I program and each database arranged in the memory. The operation of case 7 will be described in detail with reference to FIG.

  First, when the definition files 802 and 806 are read, the contents of the definition file are stored in a corresponding area of the operation definition area 804 in which DB_EXE, DB_S2, and the like are stored. Next, the dedicated U / I program 810 reads all the contents written in the operation definition area 804 and operates based on the definition contents of DB_EXE, DB_S1, DB_S2, and DB_S3 (820).

  For example, in accordance with the definition of DB_S1, the dedicated U / I program 810 compares S2_in1 that is the input of DB_S2 with the monitoring target command L2in included in the information holding area 808, and if they match, the flag bit Sl is set to “1”. ”(822). Also, the dedicated U / I program 810 compares S2_in2 and the monitoring target command Y2in included in the information holding area 808, and if they match, resets the flag bitSl to “0”, and if Y2in includes Z The flag bitSz is set to “1” (824).

  Further, the dedicated U / I program 810 compares EXE_in, which is an input command of DB_EXE, with the monitoring target command Lin included in the information holding area 808 in accordance with the definition of DB_EXE, and checks the flag S1 if they match. When the flag S1 is “1” (826), the dedicated U / I program 810 switches RxBUF to the SEL2 side, and transmits a command defined by Xout from the DB_EXE output EXE_OUT1 to the RxBUF and TXBUF 812 (828). Here, the condition for internally acquiring the response of the Xout command and rejecting the command, that is, when an event of “S1 = 0” and “Sz = 1” occurs, from the output EXE_OUT2 of DB_EXE to the TxBUF SEL2 side included in the RxBUF and TXBUF812 A command response defined by DENY is transmitted to (830).

  Next, an application example of this embodiment will be described. FIG. 18 is a diagram illustrating an application example of this embodiment. FIG. 19 is a diagram illustrating an application example 2 of the present embodiment. As shown in FIG. 18, in the application example of this embodiment, the transmission apparatus 900 includes a command guard / converter 910 that can logically multiplex and demultiplex various commands. The transmission apparatus 900 also includes a basic software 920 and a high priority processing program 930 that is lower layer software than the basic software 920.

  In this application example, the command guard / converter 910 logically multiplexes and separates a command supported by TL1, CLI, and the like and a separate emergency command (930). Therefore, according to this application example, when the transmission apparatus 900 becomes uncontrollable by a command system supported by TL1, CLI, etc., a reset command is sent to the high priority processing program 930 by another system emergency command. It can be controlled by emergency commands such as

  As shown in FIG. 19, the transmission device 940-1 is a GNE (Gateway Network Elements) connected to the control terminal 100, and the transmission devices 940-2 to 940-4 are normal NEs (Network Elements). And The CPU load status of each transmission device 940-1 to 940-4 can be acquired by DB_S3 of each transmission device. The CPU load status 942, 948, 952, 956 of each of the transmission apparatuses 940-1 to 940-4 may notify the transmission apparatus 940-1 that is a GNE using, for example, a transfer bit of the SOAM (Service Layer OAM). It becomes possible.

  Thereby, the transmission apparatus 940-1 can grasp | ascertain beforehand that the CPU load factor of the transmission apparatus 940-2 and the transmission apparatus 940-4 is high. For this reason, when receiving a command to the transmission device 940-2 or the transmission device 940-4, it is possible to notify the operator in advance that the processing of the command is delayed, or to acquire information on the transmission device 940-3. It is possible to change the control order such as 940-2 and transmission apparatus 940-4. As a result, the application example 2 has an advantage of mounting the control command guard block on the transmission device side.

  As described above, according to the present embodiment, it is possible to guard or replace complicated combinations of various control commands. In addition, according to the present embodiment, the network administrator on the user side can freely set a predetermined restriction or conversion with respect to various received commands of the transmission apparatus with a predetermined profile, and manage and operate the network more safely. Will be able to. Therefore, it is possible to prevent an operation error by restricting the command itself by the administrator in advance. In addition, although the operation is supported as a specification of a single device, it is effective when there is a limit when the entire network is targeted (which cannot be predicted by the device manufacturer).

  For example, when execution is prohibited as a restriction or caution for each operator, human error can be reduced by applying this embodiment. In particular, the effect is significant when there is a restriction that causes a network failure due to a command error. Further, according to the present embodiment, for example, when there is a possibility of causing a serious problem in a complex operation such as “execution of B command immediately after A operation”, the A operation is stored and a waiting time is provided for B command execution. It becomes possible to apply restrictions, and it becomes possible to cope with complicated restrictions unique to the transmission apparatus.

100 Control terminal 150 User interface 152 Command 154 Response 200 Transmission device 202 Command guard / convert unit 204 Basic software 206 Profile database 210 Command control unit 212 Command transmission / reception unit 230 Restriction definition file

Claims (7)

Managing a command sent from the control terminal and a restriction definition file in which restrictions indicating whether or not the command is executed are defined, and managing a history of input commands received by the reception unit A memory including a first database that manages, a second database that manages a response command to be transmitted to the control terminal in response to the input command, and a third database that manages a state of the device itself;
When a command is received by the receiving unit, it is determined whether or not there is a restriction on the execution of the received command with reference to the restriction item definition file and the memory, and the command according to the determination result A command control unit for notifying the basic program;
A transmission apparatus comprising: If the command control unit determines that there is no restriction on the execution of the received command, the command control unit executes control according to the received command, and determines that the execution of the received command is limited, The transmission apparatus according to claim 1, wherein a command rejection is notified to the control terminal. The command control unit analyzes the plurality of command groups transmitted from the control terminal with reference to the restriction item definition file and the memory, and limits execution of the plurality of command groups based on the analysis result. The transmission apparatus according to claim 1, wherein it is determined whether or not there is the transmission apparatus. The command control unit analyzes the plurality of command groups transmitted from the control terminal with reference to the restriction definition file and the memory, and guards the execution of the plurality of command groups based on the analysis result. The transmission apparatus according to claim 1, further comprising: The transmission device according to claim 1, wherein the restriction item definition file is stored in a nonvolatile memory in the transmission device. Receiving a restriction definition file that defines a command sent from the control terminal and restrictions indicating whether or not the execution of the command is restricted;
When the command is received, a first database that manages a history of the received input command, a second database that manages a response command to be transmitted to the control terminal in response to the input command, and the own device Referring to the memory including the third database for managing the state and the restriction definition file, it is determined whether there is a restriction on the execution of the received command, and the command corresponding to the determination result is determined. Notify the basic program of your device,
A command group guard method characterized by the above. In transmission equipment
Receiving a restriction definition file that defines a command sent from the control terminal and restrictions indicating whether or not there is a restriction on the execution of the command;
When the command is received, a first database that manages a history of the received input command, a second database that manages a response command to be transmitted to the control terminal in response to the input command, and the own device Referring to the memory including the third database for managing the state and the restriction definition file, it is determined whether there is a restriction on the execution of the received command, and the command corresponding to the determination result is determined. Notify the basic program of your device,
A command group guard program characterized by causing processing to be executed.

Images