Back to results
US 7,890,995 B2Granted
System and method for remote management of communications networks
AssigneeCisco Technology, Inc.
InventorsChoon B. Shim, Richard M. Tworek
Life of this patent
Estimating the term…
Abstract
The invention provides a system and method for that facilitating the remote management of one or more networks. In enabling the remote management of a network, embodiments of the invention provide limited access to service providers through a firewall, without the need to modify the configuration of the firewall. Advantageously, the cost of providing such access may be reduced compared to conventional approaches. In addition, such access may be limited to data inquiries or other commands, which can reduce the risk that the security of the network is compromised.
Claims13
A method for controlling a network remotely, the method comprising:
- configuring a first control unit, inside a first firewall, the first control unit separate from the first firewall and used to control the network, configuring of the first control unit including:
- querying a proxy server outside the first firewall from the first control unit to obtain a proxy server IP address,
- receiving proxy server identification information with respect to the proxy server outside the first firewall, the proxy server identification information including the proxy server IP address,
- generating an access key in the first control unit, and
- sending the access key and first control unit identification information to the proxy server;
- configuring the proxy server outside the first firewall, the proxy server being implemented within a De-Militarized Zone (DMZ) between the network and an unprotected public network, configuring of the proxy server including:
- receiving the first control unit identification information,
- storing the first control unit identification information in the proxy server,
- adding the first control unit as a first remote device, and
- exchanging a validation message between the first control unit and the proxy server,
- establishing a session between the first control unit and the proxy server, by use of the access key;
- and
- establishing a connection between the proxy server and a console which resides within the unprotected public network, to permit remote user management of the network by communication between the first control unit and the console via the proxy server.
10 more elements
A communications system, comprising:
- a first enterprise network;
- a first firewall;
- a first control unit communicatively coupled to the first enterprise network to manage the first enterprise network, the first control unit being separate from the first firewall:
- a public network;
- and
- a proxy server located outside the first fire wall and implemented within a De-Militarized Zone (DMZ) between the first enterprise network and the public network, the first control unit being configured to:
- querying the proxy server to obtain a proxy server IP address;
- receive proxy server identification information with respect to the proxy server, the proxy server identification information including the proxy server IP address;
- generate an access key;
- and
- send the access key and first control unit identification information to the proxy server,
- the proxy server being configured to:
- receive the first control unit identification information;
- store the first control unit identification information;
- add the first control unit as a first remote device;
- and
- exchange a validation message between the first control unit and the proxy server, the first control unit and the proxy server configured to establish a communication session based on the first access key, the proxy server to aggregate and store performance data provided by the first control unit.
14 more elements
A communications system, comprising:
- a first console residing within an unprotected public network and configured to generate at least one console request message, the console request message including at least one of a request for network management data, a request for Internet Protocol (IP)-Private Branch Exchange (PBX), or a request for status information;
- a first firewall communicatively coupled to the proxy server;
- a first control unit to control a protected network, the first control unit residing within the protected network and being communicatively coupled to the first firewall;
- and
- a proxy server communicatively coupled to the first console, the proxy server configured to establish a connection with the first control unit by sending proxy server identification information including a proxy server IP address to the first control unit, receive from the first control unit control unit identification information and an access key generated by the first control unit, adding the first control unit as a first remote device, and exchange a validation message with the first control unit, the proxy server further being configured to pool the at least one console request message, to provide access from the first console to the first control unit and to aggregate and store performance data provided by the first control unit, the proxy server being implemented within a De-Militarized Zone (DMZ) between a protected network and the unprotected public network
- the first control unit configured to receive the at least one request from the proxy server, and to output at least one response corresponding to the at least one request to the proxy server, the proxy server configured to output the at least one response to the first console.
3 more elements
Dependencies are inferred from the claim text.