NETCONF/DMI-based secure network device discovery

A device comprising:

• a memory;
• and
• one or more processors to:
• store, in the memory, data associated with devices that are manageable by a management system,
• the data identifying:
• one or more brands of the devices that are manageable by the management system, and
• one or more types of the devices that are manageable by the management system;
• receive inputs that include addresses, public key parameters, and simple network management protocol (SNMP) parameters that include privacy and authentication parameters;
• filter the addresses to remove a first address, of the address,
• the first address being associated with the one or more of:
• a broadcast address,
• a multicast address,
• a loop back address, or
• a previously discovered device;
• verify, based on the SNMP parameters, a device identifier associated with a second address included in the filtered addresses,
• the one or more processors, when verifying the device identifier, being further to:
• perform public key verification of the second address based on the public key parameters;
• obtain information related to a network device associated with the second address;
• determine, based on the information, whether the network device is manageable by the management system,
• the network device being determined as manageable by the management system when:
• a particular brand, associated with the network device, is included in the one or more brands of the devices that are manageable by the management system, and
• a particular device type, associated with the network device, is included in the one or more types of the devices that are manageable by the management system;
• and
• forward, to the management system, the information,
• the management system using the information to manage the network device.

A computer-readable memory device to store instructions, the instructions comprising:

• one or more instructions, which when executed by a processor, cause the processor to store data identifying devices that are manageable by a management system,
• the data including:
• first data identifying one or more brands of the devices that are manageable by the management system, and
• second data identifying one or more types of the devices that are manageable by the management system;
• one or more instructions, which when executed by the processor, cause the processor to receive discovery rule inputs that include at least one of a range of addresses or subnet masks;
• one or more instructions, which when executed by the processor, cause the processor to filter the at least one of the range of addresses or the subnet masks to remove at least one of an address or a subnet mask when the at least one of the address or the subnet mask is associated with:
• a broadcast,
• a multicast,
• a loop back, or
• a previously discovered device;
• one or more instructions, which when executed by the processor, cause the processor to verify one or more device identifiers associated with the filtered at least one of the range of addresses or the subnet masks,
• the one or more instructions to verify the one or more device identifiers including:
• one or more instructions to verify the one or more device identifiers using simple network management protocol (SNMP);
• one or more instructions, which when executed by the processor, cause the processor to perform public key verification for one or more devices corresponding to the one or more verified device identifiers;
• one or more instructions, which when executed by the processor, cause the processor to obtain respective information from the one or more devices;
• one or more instructions, which when executed by the processor, cause the processor to determine, based on the respective information, whether the one or more devices are manageable by the management system,
• one or more instructions to determine whether the one or more devices are manageable by the management system including:
• the one or more instructions to determine that a device, of the one or more devices, is manageable by the management system when
• a particular brand, associated with the device, is included in the one or more brands of the devices that are manageable by the management system, and
• a particular device type, associated with the device, is included in the one or more types of the devices that are manageable by the management system;
• and
• one or more instructions, which when executed by the processor, cause the processor to provide, to the management system, the respective information when the one or more devices are manageable by the management system,
• the management system using the respective information to manage the one or more devices.