公开(公告)号：US10708134B2

公开(公告)日：2020-07-07

申请号：US16387982

申请日：2019-04-18

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: G06F15/177 ,  H04L12/24

Abstract: A system may receive network device configuration information associated with a network service. The system may determine multiple settings associated with the network service based on receiving the network device configuration information. The multiple settings may include a common setting and a device-specific setting. The system may generate a first network service model of the network service based on the multiple settings. The first network service model may include multiple nodes corresponding to the multiple settings. The system may re-configure one or more nodes associated with the first network service model, and may generate a second network service model of the network service. The system may generate a user interface template based on the second network service model and may provide the user interface template to a client device for display. The client device may allow a configuration of the multiple settings based on the user interface template.

公开(公告)号：US10560370B1

公开(公告)日：2020-02-11

申请号：US15476010

申请日：2017-03-31

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: H04L12/707 ,  H04L12/703

Abstract: A system and method for responding to exceptions in network services. A network management system (NMS) configures a first network service having an endpoint and a plurality of externally mapped attributes, the externally mapped attributes including one or more service level attributes and an endpoint attribute associated with the endpoint. The NMS detects an exception in the first network service, modifies the first network service in response to the exception, wherein modifying the first network service includes assigning the current value of the endpoint attribute of the first network service to the endpoint attribute of a second network service and validates the externally mapped attributes of the second network service.

公开(公告)号：US10382265B1

公开(公告)日：2019-08-13

申请号：US15687990

申请日：2017-08-28

Applicant: Juniper Networks, Inc.

Inventor： Nirmal Anburose ,  Chandrasekhar A

IPC: G06F15/16 ,  H04L12/24 ,  H04L29/12 ,  H04L29/06

Abstract: In general, techniques are described for generating reversible mappings for management systems. The management system may include an interface and a processor. The interface may communicatively couple the management system to network devices. The processor may generate a data structure that represents each expression of a forward mapping as a separate node of the data structure. The processor may also translate one or more of the expressions represented as the separate nodes in the data structure to corresponding one or more negated expressions so as to form a reverse mapping. Further, the processor may apply the reverse mapping to the low-level configuration of the first network device to obtain the high-level configuration.

公开(公告)号：US10230585B1

公开(公告)日：2019-03-12

申请号：US15283030

申请日：2016-09-30

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Nirmal Anburose

IPC: G06F15/173 ,  H04L12/24 ,  H04L29/08 ,  H04L12/26

Abstract: In one example, a network management system (NMS) is configured to enable a target network device to support a particular network service based on service configuration information for the particular network service. The service configuration information may include information about nodes in a vendor neutral model that need to be added or modified in order to support the particular network service. The NMS determines similarity scores between nodes in a vendor neutral model and nodes in a target device specific model. Based on the similarity scores, the NMS generates a mapping from the vendor neutral model to the target device specific model. Using the mapping, the NMS may configure a target device to support the particular service.

公开(公告)号：US10200248B1

公开(公告)日：2019-02-05

申请号：US15198657

申请日：2016-06-30

Applicant: Juniper Networks, Inc.

Inventor： Tong Jiang ,  Sankar Ramamoorthi ,  Roshan Joyce ,  Chandrasekhar A ,  Nirmal Anburose ,  Premchandar N

IPC: H04L12/24

Abstract: In one example, a network management system (NMS) device manages a plurality of network devices including first and second network devices. Initially the first and second network devices are configured according to a first high-level configuration. The NMS is configured to determine a difference between the first high-level configuration and a second high-level configuration, apply a first transformation function, specific to the first network device, to the difference to generate a first low-level configuration change specific to the first device, apply a second transformation function, specific to the second network device, to the difference to generate a second low-level configuration change specific to the second device, configure the first device with the first low-level configuration change, and configure the second device with the second low-level configuration change.

公开(公告)号：US20240179183A1

公开(公告)日：2024-05-30

申请号：US18070948

申请日：2022-11-29

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R

IPC: H04L9/40

CPC classification number: H04L63/20

Abstract: A system may identify a security intent policy model associated with an initial time. The system may generate one or more delta snapshots that respectively indicate one or more incremental changes to the security intent policy model at times subsequent to the initial time. The system may determine that the system is to deploy an updated version of the security intent policy model to a device and may thereby determine a previous deployment time at which the system deployed a previous version of the security intent policy model to the device. The system may generate, based on the one or more delta snapshots and the previous deployment time, a cumulative delta snapshot, and may thereby update a low-level security intent policy model associated with the device. The system may generate, based on the low-level security intent policy model, device-level security configuration information for the device.

公开(公告)号：US20230214208A1

公开(公告)日：2023-07-06

申请号：US18178708

申请日：2023-03-06

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Jayanthi R ,  Javier Antich

IPC: H04L41/082 ,  H04L41/0853 ,  H04L41/0894

CPC classification number: H04L41/082 ,  H04L41/0856 ,  H04L41/0894

Abstract: A controller device manages a plurality of network devices. The controller device includes one or more processing units configured to receive an upgrade request; obtain a redundancy model indicating network device redundancies or service redundancies; determine, based on the upgrade request and the redundancy model, an update graph having nodes each representing one of the network devices or one of the services, the update graph also having at least one edge that connects two of the nodes and that indicates the network redundancy or the service redundancy; determine, based on the update graph including the at least one edge, an update schedule for performing an update of software for the network devices that ensures availability for the first network device or second network device or availability for the service; and update the software of each of the network devices according to the update schedule.

公开(公告)号：US20230195544A1

公开(公告)日：2023-06-22

申请号：US17698579

申请日：2022-03-18

Applicant: Juniper Networks, Inc.

Inventor： Jayanthi R ,  Bhaskar T. REDDY ,  Chandrasekhar A

IPC: G06F9/54

CPC classification number: G06F9/542

Abstract: Some implementations described herein relate to a system that is configured to obtain one or more event logs associated with a tenant of the system. The system may be configured to determine, based on the one or more event logs, an event rate associated with the tenant and thereby determine, based on the event rate, a rotation interval. The system may be configured to cause, based on the rotation interval, a data structure to be generated for storing event logs associated with the tenant that are obtained during a time window. The system may be configured to obtain, within the time window, one or more additional event logs associated with the tenant and to cause, based on obtaining the one or more additional event logs within the time window, the one or more additional event logs to be stored in the data structure.

公开(公告)号：US11665050B2

公开(公告)日：2023-05-30

申请号：US17585920

申请日：2022-01-27

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A ,  Patricio Giecco ,  Sri Sampath Mallipudi

IPC: G06F15/177 ,  H04L41/0803

CPC classification number: H04L41/0803

Abstract: A centralized configuration management system (CCM) may receive, from an NMS device, a request concerning a configuration for a microservice associated with the NMS device. The CCM may identify, based on the request, a first data model associated with default configuration information. The CCM may identify, based on the request, a second data model associated with customized configuration information. The CCM may generate, based on the first data model and the second data model, a response that includes at least one configuration parameter. The CCM may send the response to the NMS device to allow the microservice to be configured based on the at least one configuration parameter.

公开(公告)号：US11652704B2

公开(公告)日：2023-05-16

申请号：US17652458

申请日：2022-02-24

Applicant: Juniper Networks, Inc.

Inventor： Chandrasekhar A

IPC: H04L41/00 ,  G06F16/22 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/0873 ,  H04L41/0893 ,  H04L41/14 ,  H04L9/40 ,  H04L69/22

CPC classification number: H04L41/24 ,  G06F16/2246 ,  H04L41/0803 ,  H04L41/0866 ,  H04L41/0873 ,  H04L41/0893 ,  H04L41/145 ,  H04L63/02 ,  H04L69/22

Abstract: A method includes maintaining, by a controller device that manages a plurality of network devices, a data structure and receiving, by the controller device, an indication of a stateful intent. The method further includes generating, by the controller device, a logical packet based on the stateful intent and determining, by the controller device, a dependent intent of the data structure based on the logical packet. The method further includes determining that the dependent intent conflicts with the stateful intent. The method further includes, in response to determining that the dependent intent conflicts with the stateful intent, determining, by the controller device, a resolution that resolves the conflict between the dependent intent and the stateful intent based on the dependent intent and the stateful intent and outputting, by the controller device, an indication of the resolution.