基于角色的一体化配置管理模型与实现  

Role-based integrated configuration management modeling and implementation

作　　者：杨家海[1] 王继龙[1] 章勋[1] 

机构地区：[1]清华大学信息网络工程研究中心,北京100084

出　　处：《清华大学学报（自然科学版）》2008年第10期1671-1674,共4页Journal of Tsinghua University(Science and Technology)

基　　金：国家自然科学基金资助项目(60473083);国家"八六三"高技术项目(2005AA103110-2)

摘　　要：为满足网络管理需求,提出了基于角色的一体化网络配置管理方案。通过引入并扩展基于角色的访问控制机制,对不同的角色赋予不同的权限,从而实现不同逻辑路由器之间在配置权限上的隔离;通过引入可扩展标记语言(XML)技术扩展配置管理信息的表达能力,并将不同设备的命令封装为一系列不同的XML Schema,设计了基于XMLSchema的通用网络管理模型和统一的设备访问接口。通过扩充XML Schema库实现了功能扩展、系统扩展和支持新型设备管理的目标。对比测试表明,该设计在扩充功能的同时,基本保持了原有的性能。A role based integrated network configuration management model was developed to meet the increasingly complex requirements of network and services management. The model extends the role-based access control mechanism by assigning different privileges to different roles to isolate configuration privileges among different logical router administrators, extensible markup language （XML） technology is used to enhance the representation of the configuration information. The various command sets of the different devices are encapsulated as a series of XML schema. A universal network management model and a unified device access interface were designed based on the XML Schema base. The model functionality can be easily extended to incorporate new devices by simply adding more XML schema, Tests show that the design has good performance and overhead, with a reasonable tradeoff between functionality and performance.

关 键 词：网络管理 配置管理 基于角色的访问控制 XML 

分 类 号：TP393.07[自动化与计算机技术—计算机应用技术]