公开(公告)号：US20200162462A1

公开(公告)日：2020-05-21

申请号：US16197533

申请日：2018-11-21

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Michael Zayats ,  Sagar Bhanagay ,  Hitesh Padekar

IPC: H04L29/06 ,  G06F16/23 ,  G06F21/62 ,  H04L12/24

Abstract: A technique to manage a configuration database (CDB) for a network device is disclosed. Network devices may receive a configuration change request as a configuration change object. To process that request, a current configuration CLI set representative of the current CDB may be generated. The network device creates a shadow CDB initially corresponding to the current CDB and processes the change request against the shadow CDB. An updated configuration CLI set may then be generated from the updated shadow CDB. A differential CLI set indicating the difference between the first CLI set and the second CLI set may be generated to represent a set of CLI commands to transition from one CDB to the other (e.g., implement the request). Authorization of the user to execute the CLI commands of the differential CLI dataset may be verified. Upon verification, the current CDB may be replaced with the updated shadow CDB.

公开(公告)号：US11336527B2

公开(公告)日：2022-05-17

申请号：US16889648

申请日：2020-06-01

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Shaun Wackerly ,  Shaun Wakumoto ,  Sagar Bhanagay

IPC: H04L12/24 ,  H04L41/0893 ,  H04L41/28 ,  H04L41/22

Abstract: An expression evaluation system is provided. During operation, the system can obtain an encoded expression associated with a user group of a network and evaluate the encoded expression for a first switch to determine a first set of commands that the user group is allowed to execute on the first switch. The encoded expression can encode a set of commands. The system can then determine validity of the first set of commands for the user group by determining whether a respective user of the user group should be allowed to execute the first set of commands on the first switch. If the system identifies an issue with the validity of the first set commands, the system can generate a notification indicating the issue.

公开(公告)号：US11503027B2

公开(公告)日：2022-11-15

申请号：US16197533

申请日：2018-11-21

Applicant: HEWLETT PACKARD ENTERPRISE DEVELOPMENT LP

Inventor： Michael Zayats ,  Sagar Bhanagay ,  Hitesh Padekar

IPC: H04L29/06 ,  H04L9/40 ,  G06F16/23 ,  H04L41/0869 ,  H04L41/0853 ,  H04L41/0859 ,  G06F21/62

Abstract: A technique to manage a configuration database (CDB) for a network device is disclosed. Network devices may receive a configuration change request as a configuration change object. To process that request, a current configuration CLI set representative of the current CDB may be generated. The network device creates a shadow CDB initially corresponding to the current CDB and processes the change request against the shadow CDB. An updated configuration CLI set may then be generated from the updated shadow CDB. A differential CLI set indicating the difference between the first CLI set and the second CLI set may be generated to represent a set of CLI commands to transition from one CDB to the other (e.g., implement the request). Authorization of the user to execute the CLI commands of the differential CLI dataset may be verified. Upon verification, the current CDB may be replaced with the updated shadow CDB.

公开(公告)号：US20210377121A1

公开(公告)日：2021-12-02

申请号：US16889648

申请日：2020-06-01

Applicant: Hewlett Packard Enterprise Development LP

Inventor： Shaun Wackerly ,  Shaun Wakumoto ,  Sagar Bhanagay

IPC: H04L12/24

Abstract: An expression evaluation system is provided. During operation, the system can obtain an encoded expression associated with a user group of a network and evaluate the encoded expression for a first switch to determine a first set of commands that the user group is allowed to execute on the first switch. The encoded expression can encode a set of commands. The system can then determine validity of the first set of commands for the user group by determining whether a respective user of the user group should be allowed to execute the first set of commands on the first switch. If the system identifies an issue with the validity of the first set commands, the system can generate a notification indicating the issue.