CN115643161A

CN115643161A - Out-of-band management method and system

Info

Publication number: CN115643161A
Application number: CN202211313993.9A
Authority: CN
Inventors: 高铭; 王炜煜; 王辉; 陈真伟; 章明辉; 侯发旺; 李双领
Original assignee: Shanghai Bilibili Technology Co Ltd
Current assignee: Shanghai Bilibili Technology Co Ltd
Priority date: 2022-10-25
Filing date: 2022-10-25
Publication date: 2023-01-24

Abstract

The application discloses an out-of-band management method. The method is applied to an out-of-band management system, the out-of-band management system comprises at least one data center, the data center comprises an APN access device, an out-of-band management core device and at least one network device, the APN access device is in communication connection with the APN access device, the network device is in communication connection with the out-of-band management core device, and the method comprises the following steps: the APN access equipment receives an out-of-band management command which is sent by a client and aims at target network equipment, and forwards the out-of-band management command to the out-of-band management core equipment; and the out-of-band management core equipment performs out-of-band management on the target network equipment according to the out-of-band management command. The method and the device can improve the emergency access capability in a fault scene.

Description

Out-of-band management method and system

Technical Field

The application relates to the technical field of internet, in particular to an out-of-band management method and system.

Background

The out-of-band network management system is a new generation network centralized management system developed based on an international advanced OOBI out-of-band management architecture, and is used for performing centralized integrated management on machine room network equipment (routers, switches, firewalls and the like), server equipment (miniatures, servers and workstations) and a machine room power supply system through a special management channel independent of a service data network. The existing out-of-band management system is generally implemented by establishing a set of networks dedicated to out-of-band management in a network, and then connecting network devices of each hierarchy through the network, but when the out-of-band management network is summarized upwards, the network devices are connected to a network core device, so that an intersection point exists between a service production network and the out-of-band network. Thus, when a core device failure or link outage occurs, traffic and network management traffic will be affected simultaneously.

Disclosure of Invention

In view of the above, an out-of-band management method, system, computer device and computer readable storage medium are provided to solve the problem in the prior art that when a core device fails or a link is interrupted, a service traffic and a network management traffic are affected at the same time by an out-of-band management system.

The application provides an out-of-band management method, which comprises the following steps:

an out-of-band management method applied to an out-of-band management system, the out-of-band management system comprising at least one data center, the data center comprising an APN access device and an out-of-band management core device communicatively connected to the APN access device and at least one network device communicatively connected to the out-of-band management core device, the method comprising:

the APN access equipment receives an out-of-band management command which is sent by a client and aims at target network equipment, and forwards the out-of-band management command to the out-of-band management core equipment;

and the out-of-band management core equipment performs out-of-band management on the target network equipment according to the out-of-band management command.

Optionally, the receiving, by the APN access device, an out-of-band management command for a target network device sent by a client, and forwarding the out-of-band management command to the out-of-band management core device includes:

the APN access equipment detects the network quality of at least two operators in real time, and sends the APN network of the operator with the best network quality to the client, so that the client can use the APN network of the best operator as the access network of the client;

and the APN access equipment receives an out-of-band management command which is sent by the client through the access network and aims at target network equipment, and forwards the out-of-band management command to the out-of-band management core equipment.

Optionally, the at least two operators include: move

Optionally, there are a plurality of the data centers, and the method further includes:

the method comprises the steps of establishing a network tunnel by using APN technology in APN access equipment among a plurality of data centers to realize the intercommunication of an out-of-band management network among the plurality of data centers.

Optionally, the data center further includes a security management server, and the method further includes:

and the safety management server carries out safety certification on the client.

The application also provides an out-of-band management system, which comprises at least one data center, wherein the data center comprises an APN access device, an out-of-band management core device in communication connection with the APN access device, and at least one network device in communication connection with the out-of-band management core device, wherein:

the APN access device is used for receiving an out-of-band management command which is sent by a client and aims at target network equipment, and forwarding the out-of-band management command to the out-of-band management core equipment;

and the out-of-band management core equipment is used for carrying out-of-band management on the target network equipment according to the out-of-band management command.

Optionally, the data center further includes a security management server, where the security management server is configured to perform security authentication on the client.

Optionally, the out-of-band management system further includes a central configuration synchronization server, where the central configuration synchronization server is configured to synchronize data in the security management servers in each data center, and when a failure of a target security management server is detected, switch to another security management server to perform security authentication for the client.

The present application also provides a computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, wherein the processor implements the steps of the above method when executing the computer program.

The present application also provides a computer-readable storage medium having stored thereon a computer program which, when being executed by a processor, carries out the steps of the above-mentioned method.

In this embodiment, the APN access device and the out-of-band management core device are added in the out-of-band management system, instead of using the network core device of the production network to process the network management traffic, so that the production network is completely isolated from the out-of-band management network, and thus, when the network core device of the production network has a device failure or link interruption problem, only the service traffic will be affected, the network management traffic will not be affected, and the out-of-band management of each device network can still be implemented.

Drawings

FIG. 1 is an environment diagram illustrating an embodiment of an out-of-band management method according to an embodiment of the present application;

FIG. 2 is a flow diagram of one embodiment of an out-of-band management method described herein;

fig. 3 is a flowchart illustrating a detailed process of the step in which the APN access device receives an out-of-band management command for a target network device sent by a client and forwards the out-of-band management command to the out-of-band management core device in an embodiment of the present application;

FIG. 4 is an architecture diagram of an example of an out-of-band management system in an embodiment of the present application;

FIG. 5 is a diagram of an AAA service architecture in an embodiment of the present application;

fig. 6 is a schematic hardware structure diagram of a computer device that executes an out-of-band management method according to an embodiment of the present application.

Detailed Description

The advantages of the present application are further illustrated below with reference to the accompanying drawings and specific embodiments.

Reference will now be made in detail to the exemplary embodiments, examples of which are illustrated in the accompanying drawings. When the following description refers to the accompanying drawings, like numbers in different drawings represent the same or similar elements unless otherwise indicated. The implementations described in the exemplary embodiments below are not intended to represent all implementations consistent with the present disclosure. Rather, they are merely examples of apparatus and methods consistent with certain aspects of the present disclosure, as detailed in the appended claims.

The terminology used in the disclosure is for the purpose of describing particular embodiments only and is not intended to be limiting of the disclosure. As used in this disclosure and the appended claims, the singular forms "a", "an", and "the" are intended to include the plural forms as well, unless the context clearly indicates otherwise. It should also be understood that the term "and/or" as used herein refers to and encompasses any and all possible combinations of one or more of the associated listed items.

It is to be understood that although the terms first, second, third, etc. may be used herein to describe various information, such information should not be limited to these terms. These terms are only used to distinguish one type of information from another. For example, first information may also be referred to as second information, and similarly, second information may also be referred to as first information, without departing from the scope of the present disclosure. The word "if" as used herein may be interpreted as "at" \8230; "or" when 8230; \8230; "or" in response to a determination ", depending on the context.

In the description of the present application, it should be understood that the numerical references before the steps do not identify the order of performing the steps, but merely serve to facilitate the description of the present application and to distinguish each step, and therefore should not be construed as limiting the present application.

Fig. 1 schematically shows an environment diagram of an out-of-band management method according to an embodiment of the present application.

In this embodiment, the out-of-band management method is applied to an environment including an out-of-band management network and a service production network, where the out-of-band management network and the service production network are isolated from each other.

The out-of-band management network is a network formed in an out-of-band management system and used for carrying out-of-band management on network management flow of network equipment. The service production network is a network formed in the service production system and used for processing service production flow.

In one embodiment, the out-of-band management system includes at least one data center (IDC), each deployed within a computer room. Each data center comprises an APN access device 1, an out-of-band management core device 2 connected with the APN access device 1 in a communication mode, and at least one network device 3 connected with the out-of-band management core device 2 in a communication mode. In this embodiment, the out-of-band management system includes 2 data centers as an example.

The service production system comprises network core equipment 4 which is deployed in each data center and used for bearing service flow, at least one network equipment 3 which is in communication connection with the network core equipment 4, a switch 5 which performs data interaction with the network core equipment 4 in each data center, firewall equipment 6 and the like.

At present, an out-of-band management scheme for managed network devices is to establish a set of networks specially used for out-of-band management in a network, and the networks are connected with network devices of various levels, but the networks are connected to a network core device when the out-of-band management network is summarized upwards, so that an intersection point exists between a production network and the out-of-band management network, and when a core device fault or a link is interrupted, service flow and network management flow are simultaneously affected, thereby easily causing loss of management and monitoring data, affecting processing efficiency of the fault, seriously even having network device offline, and completely breaking away from management of the network devices.

Therefore, the embodiment of the present disclosure provides an out-of-band management method, which can avoid that service traffic and network management traffic are affected simultaneously when a core device fails or a link is interrupted.

Fig. 2 is a flowchart illustrating an out-of-band management method according to an embodiment of the present application. The out-of-band management method can be applied to an out-of-band management system, the out-of-band management system comprises at least one data center, and the data center comprises APN access equipment, out-of-band management core equipment and at least one network equipment, wherein the APN access equipment is in communication connection with the APN access equipment, and the network equipment is in communication connection with the out-of-band management core equipment. It is to be understood that the flow charts in the embodiments of the present method are not intended to limit the order in which the steps are performed. As can be seen from the figure, the out-of-band management method provided in this embodiment includes:

step S21, the APN access device receives an out-of-band management command which is sent by a client and aims at target network equipment, and forwards the out-of-band management command to the out-of-band management core device.

Specifically, when a user wants to implement out-of-band management on a target network device in a company or a home, the user may send an out-of-band management command for the target network device to the APN access device through a client installed on a computer device (e.g., a computer) in the company or the home, and the APN access device may forward the out-of-band management command to the out-of-band management core device after receiving the out-of-band management command sent by the client.

The target network device is any one of all network devices in the data center, which are in communication connection with the out-of-band management core device. For example, all network devices communicatively coupled to the out-of-band management core device include network device a, network device B, and network device C. When the user wants to perform out-of-band management on the network device C, the network device C may be used as a target network device.

The out-of-band management command may be a command for performing startup, shutdown, restart, and collecting temperature, power consumption, voltage, state, system configuration, and the like of each hardware module of the target network device, which is not limited in this embodiment.

In an exemplary embodiment, to improve the capability of emergency access in a failure state, referring to fig. 3, the APN access device receiving an out-of-band management command sent by a client for a target network device and forwarding the out-of-band management command to the out-of-band management core device includes: step S30, the APN access equipment detects the network quality of at least two operators in real time, and sends the APN network of the operator with the best network quality to the client, so that the client can use the APN network of the best operator as the access network of the client; step S31, the APN access device receives the out-of-band management command which is sent by the client through the access network and aims at the target network device, and forwards the out-of-band management command to the out-of-band management core device

In particular, the out-of-band management system may be accessible via networks of at least two operators. In this embodiment, the APN access device may detect network qualities of at least two operators in real time or at regular time, and after obtaining a network quality detection result, may send an APN network of an operator with a best network quality to the client, so that the client may use the APN network of the best operator as an access network of the client, so that when a user performs out-of-band management on a network device through the client, an out-of-band management command for a target network device may be sent through the access network, thereby implementing out-of-band management on the network device through a line with the best quality, and improving out-of-band management efficiency. Meanwhile, the APN network of the operator with the best network quality is selected from the multiple operators to serve as the access network of the client, so that the situation that when the network of one operator fails, the networks of other operators can be switched to perform out-of-band management on the network equipment can be avoided, and the emergency access capability under the fault scene can be further guaranteed.

It should be noted that an APN refers to a network access technology, and is a parameter that must be configured when a computer device (e.g., a mobile phone) accesses a network, and determines which access method the computer device accesses the network through.

In an exemplary embodiment, the at least two operators include: mobile operators, telecom operators, and unicom operators.

And S21, the out-of-band management core device carries out-of-band management on the target network device according to the out-of-band management command.

Specifically, after receiving the out-of-band management command, the out-of-band management device may perform out-of-band management on the target network device according to the out-of-band management command.

In this embodiment, the APN access device and the out-of-band management core device are added in the out-of-band management system, instead of using the network core device of the production network to process the network management traffic, so that the production network is completely isolated from the out-of-band management network, and thus, when the network core device of the production network has a device failure or a link interruption problem, only the service traffic is affected, the network management traffic is not affected, and the out-of-band management of each device network can still be achieved. In addition, in this embodiment, because the APN access device and the out-of-band management core device are added, in this embodiment, when out-of-band management is implemented, a public network IP address and a VRF (virtual routing and forwarding) technology that are independent of a production network may be used to implement complete isolation between a service production network and a management network.

In an exemplary embodiment, to increase the availability of the out-of-band management method, in each data center, for the APN access device and the out-of-band management core device, device redundancy may be implemented using stacking techniques.

In an exemplary embodiment, there are a plurality of the data centers, in order to implement an out-of-band management network between the respective data centers; and the intercommunication can be realized by establishing a network tunnel by using an APN technology in APN access equipment among a plurality of data centers so as to realize the intercommunication of the out-of-band management network among the plurality of data centers.

As an example, assuming that there are 4 data centers in total, which are respectively a data center a, a data center b, a data center c, and a data center d, an APN technology may be used in an APN access device of the data center a and an APN access device of the data center b to establish a network tunnel 1 to implement out-of-band management network interworking between the data center a and the data center b; the APN technology can be used in APN access equipment of a data center a and APN access equipment of a data center c to establish a network tunnel 2 so as to realize the out-of-band management network intercommunication between the data center a and the data center c; the APN technology can be used in APN access equipment of a data center a and APN access equipment of a data center d to establish a network tunnel 3 to realize the out-of-band management network intercommunication between the data center a and the data center d; an APN technology can be used in APN access equipment of a data center b and APN access equipment of a data center c to establish a network tunnel 4 so as to realize the intercommunication of an out-of-band management network between the data center a and the data center c; the APN technology can be used in APN access equipment of a data center b and APN access equipment of a data center d to establish a network tunnel 5 so as to realize the out-of-band management network intercommunication between the data center b and the data center d; the APN technology can be used in the APN access device of the data center c and the APN access device of the data center d to establish the network tunnel 6, so that the out-of-band management network intercommunication between the data center c and the data center d is realized.

Compared with the scheme for realizing the out-of-band management network intercommunication among the data centers in the prior art in a special line APN manner, the scheme for realizing the out-of-band management network intercommunication among the data centers in the embodiment of the invention has the following advantages:

1. because the APN operator establishes the private virtual data communication network in the public network, the data does not need to be exposed in the public network, so that the scheme in the application has the advantages of higher efficiency, flexibility, safety and economy.

2. The APN technology is based on dial-up user network authentication access, so the technical scheme of the application can be flexibly and quickly deployed in different scenes.

3. The APN technology can simultaneously use APN resources of three operators to realize common availability, so that the technical scheme of the application can be timely switched to other normal networks to realize the common availability when any APN network has problems, and has better redundancy.

4. The technical scheme of the application can be deployed on enterprise networks, data center networks and cloud networks, multi-network fusion is achieved, networking is flexibly deployed, and therefore the application range of the technical scheme of the application is wider.

In an exemplary embodiment, the data center further includes a security management server, which may be an AAA management server. The AAA is short for Authentication, authorization, and Accounting (Authentication, authorization, accounting), and is used to perform security Authentication on the client, thereby implementing security management on a network device accessed by a user, so as to provide services only to the client with an access right.

The safety certification refers to verifying whether the client has the authority to send out-of-band management commands to each network device.

In this embodiment, since the out-of-band management network is used to carry management traffic and monitoring traffic of the network, if the out-of-band management network is attacked, all network devices may be exposed to danger, so that security is very important to it. In the embodiment, the safety management server is deployed in each data center, so that the verification and authorization of the client and the audit of the user behavior can be realized, and the reliability of the service is guaranteed.

Referring to FIG. 4, an architecture diagram of an embodiment of the out-of-band management system of the present application is shown.

In this embodiment, the out-of-band management system includes at least one data center, and taking a data center a, a data center b, a data center c, and a data center d as an example, each data center includes an APN access device 40, an out-of-band management core device 41 communicatively connected to the APN access device, and at least one network device 42 communicatively connected to the out-of-band management core device.

The APN access device 40 is configured to receive an out-of-band management command for a target network device sent by a client, and forward the out-of-band management command to the out-of-band management core device 41.

The out-of-band management command may be a command for starting up, shutting down, restarting, and collecting temperature, power consumption, voltage, state, system configuration, and the like of each hardware module of the target network device, which is not limited in this embodiment.

In an exemplary embodiment, in order to improve the capability of emergency access in a failure state, the APN access device is further configured to detect network qualities of at least two operators in real time, and send an APN network of an operator with the best network quality to the client, so that the client uses the APN network of the best operator as an access network of the client; the APN access device is also used for receiving an out-of-band management command which is sent by the client through the access network and aims at the target network device, and forwarding the out-of-band management command to the out-of-band management core device

It should be noted that an APN refers to a network access technology, which is a parameter that must be configured when a computer device (e.g., a mobile phone) accesses a network, and determines which access method the computer device accesses the network through.

The out-of-band management core device 41 is configured to perform out-of-band management on the target network device 42 according to the out-of-band management command.

In an exemplary embodiment, there are a plurality of data centers, and in order to implement the out-of-band management network interworking between the data centers, a network tunnel may be established in an APN access device between the data centers using an APN technique to implement the out-of-band management network interworking between the data centers.

As an example, assuming that there are 4 data centers in total, which are respectively a data center a, a data center b, a data center c, and a data center d, an APN technology may be used in an APN access device of the data center a and an APN access device of the data center b to establish a network tunnel 1 to implement out-of-band management network interworking between the data center a and the data center b; the APN technology can be used in APN access equipment of a data center a and APN access equipment of a data center c to establish a network tunnel 2 so as to realize the out-of-band management network intercommunication between the data center a and the data center c; the APN technology can be used in APN access equipment of a data center a and APN access equipment of a data center d to establish a network tunnel 3 so as to realize the out-of-band management network intercommunication between the data center a and the data center d; the APN technology can be used in APN access equipment of a data center b and APN access equipment of a data center c to establish a network tunnel 4 so as to realize the out-of-band management network intercommunication between the data center a and the data center c; the APN technology can be used in APN access equipment of a data center b and APN access equipment of a data center d to establish a network tunnel 5 so as to realize the out-of-band management network intercommunication between the data center b and the data center d; the APN technology can be used in the APN access device of the data center c and the APN access device of the data center d to establish the network tunnel 6, so that the out-of-band management network intercommunication between the data center c and the data center d is realized.

Compared with the scheme for realizing the out-of-band management network intercommunication among the data centers in the prior art in a manner of a dedicated line APN, the scheme for realizing the out-of-band management network intercommunication among the data centers in the embodiment has the following advantages:

In an exemplary embodiment, the data center further includes a security management server, which may be an AAA management server. AAA is short for Authentication, authorization and Accounting (Authentication, authorization and Accounting), and is used to perform security Authentication on the client, so as to perform security management on network devices accessed by a user, so as to provide services only to the client with access right.

In this embodiment, since the out-of-band management network is used to carry management traffic and monitoring traffic of the network, security is very important to the out-of-band management network because all network devices are exposed to danger if the out-of-band management network is attacked. In the embodiment, the safety management server is deployed in each data center, so that the verification and authorization of the client and the audit of the user behavior can be realized, and the reliability of the service is guaranteed.

In an exemplary embodiment, in order to further improve the security of the system, the out-of-band management system further includes a central configuration synchronization server, where the central configuration synchronization server is configured to synchronize data in the security management servers in the respective data centers, and when detecting that a target security management server fails, switch to another security management server to perform security authentication for the client. And the other safety management servers are any one of the plurality of safety management servers deployed in the data center except the target safety management server without a fault.

In this embodiment, the AAA service architecture shown in fig. 5 is formed by a central configuration synchronization server and a plurality of security management servers deployed in each data center, so that redundant hot standby of each security management server is realized, and thus, when one of the security management servers has a problem, the security management servers can be automatically switched to other service nodes.

In an embodiment, the out-of-band management system in the application may be applied to a scenario of independent out-of-band networking of multiple data centers, that is, in a data center, traffic may be carried by deploying independent network devices and lines, and each data center deploys one or more APN access devices, and achieves inter-band management network interworking across the data centers by accessing an APN network.

In another embodiment, the out-of-band management system in the present application may be applied to a scenario of combining multiple data center out-of-band management networks, i.e., an office network/enterprise network, where deployment of the out-of-band network may be completed in the data center/office network/enterprise network, which is different from the scenario in the foregoing embodiment in that the out-of-band network of the data center may be directly accessed through the enterprise network of the office network without logging in to a fixed access point.

In another embodiment, the out-of-band management system in the present application may be applied to a scenario in which a multi-data center out-of-band management network is combined with a public cloud network, that is, a data center carries traffic by deploying independent network devices and lines. The APM network is communicated with the public cloud network, the advantages of the public cloud are fully utilized, and the applications such as multi-active deployment, IDC private line access and the like can be realized.

Fig. 6 schematically shows a hardware architecture diagram of a computer device 6 adapted to implement the out-of-band management method according to an embodiment of the present application. In the present embodiment, the computer device 6 is a device capable of automatically performing numerical calculation and/or information processing in accordance with a command set or stored in advance. For example, the server may be a tablet computer, a notebook computer, a desktop computer, a rack server, a blade server, a tower server, or a rack server (including an independent server or a server cluster composed of a plurality of servers). As shown in fig. 6, the computer device 6 includes at least, but is not limited to: the memory 111, processor 121, and network interface 122 may be communicatively linked to each other by a system bus. Wherein:

the memory 111 includes at least one type of computer-readable storage medium, which may be volatile or nonvolatile, and particularly, includes a flash memory, a hard disk, a multimedia card, a card type memory (e.g., SD or DX memory, etc.), a Random Access Memory (RAM), a Static Random Access Memory (SRAM), a Read Only Memory (ROM), an Electrically Erasable Programmable Read Only Memory (EEPROM), a Programmable Read Only Memory (PROM), a magnetic memory, a magnetic disk, an optical disk, and the like. In some embodiments, the storage 111 may be an internal storage module of the computer device 6, such as a hard disk or a memory of the computer device 6. In other embodiments, the memory 111 may also be an external storage device of the computer device 6, such as a plug-in hard disk provided on the computer device 6, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like. Of course, the memory 111 may also comprise both an internal memory module of the computer device 6 and an external memory device thereof. In this embodiment, the memory 111 is generally used for storing an operating system installed in the computer device 6 and various types of application software, such as program codes of out-of-band management methods and the like. Further, the memory 111 may also be used to temporarily store various types of data that have been output or are to be output.

Processor 121 may be a Central Processing Unit (CPU), controller, microcontroller, microprocessor, or other out-of-band management chip in some embodiments. The processor 121 is generally used for controlling the overall operation of the computer device 6, such as performing control and processing related to data interaction or communication with the computer device 6. In this embodiment, the processor 121 is configured to execute the program code stored in the memory 111 or process data.

Network interface 122 may comprise a wireless network interface or a wired network interface, with network interface 122 typically being used to establish communication links between computer device 6 and other computer devices. For example, the network interface 122 is used to connect the computer device 6 to an external terminal via a network, establish a data transmission channel and a communication link between the computer device 6 and the external terminal, and the like. The network may be a wireless or wired network such as an Intranet (Intranet), the Internet (Internet), a Global System of Mobile communication (GSM), wideband Code Division Multiple Access (WCDMA), a 4G network, a 5G network, bluetooth (Bluetooth), or Wi-Fi.

It is noted that fig. 6 only shows a computer device with components 111-122, but it is understood that not all shown components are required to be implemented, and more or less components may be implemented instead.

In this embodiment, the out-of-band management method stored in the memory 111 may be divided into one or more program modules and executed by one or more processors (in this embodiment, the processor 121) to complete the present application.

Embodiments of the present application provide a computer-readable storage medium having stored thereon a computer program, which, when executed by a processor, implements the steps of the out-of-band management method in the embodiments.

In this embodiment, the computer-readable storage medium includes a flash memory, a hard disk, a multimedia card, a card type memory (e.g., SD or DX memory, etc.), a Random Access Memory (RAM), a Static Random Access Memory (SRAM), a Read Only Memory (ROM), an Electrically Erasable Programmable Read Only Memory (EEPROM), a Programmable Read Only Memory (PROM), a magnetic memory, a magnetic disk, an optical disk, and the like. In some embodiments, the computer readable storage medium may be an internal storage unit of the computer device, such as a hard disk or a memory of the computer device. In other embodiments, the computer readable storage medium may be an external storage device of the computer device, such as a plug-in hard disk, a Smart Media Card (SMC), a Secure Digital (SD) Card, a Flash memory Card (Flash Card), and the like provided on the computer device. Of course, the computer-readable storage medium may also include both internal and external storage devices of the computer device. In this embodiment, the computer-readable storage medium is generally used to store an operating system and various types of application software installed on the computer device, for example, the program code of the out-of-band management method in the embodiment, and the like. In addition, the computer-readable storage medium may also be used to temporarily store various types of data that have been output or are to be output.

The above-described embodiments of the apparatus are merely illustrative, and the units described as separate parts may or may not be physically separate, and the parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on at least two network units. Some or all of the modules can be screened out according to actual needs to achieve the purpose of the scheme of the embodiment of the application. One of ordinary skill in the art can understand and implement it without inventive effort.

Through the above description of the embodiments, it is obvious to those skilled in the art that the embodiments may be implemented by software plus a general hardware platform, and may also be implemented by hardware. It will be understood by those skilled in the art that all or part of the processes of the methods of the embodiments described above can be implemented by hardware related to instructions of a computer program, which can be stored in a computer readable storage medium, and when executed, can include the processes of the embodiments of the methods described above. The storage medium may be a magnetic disk, an optical disk, a Read-only memory (ROM), a Random Access Memory (RAM), or the like.

Finally, it should be noted that: the above embodiments are only used to illustrate the technical solutions of the present application, and not to limit the same; although the present application has been described in detail with reference to the foregoing embodiments, it should be understood by those of ordinary skill in the art that: the technical solutions described in the foregoing embodiments may still be modified, or some or all of the technical features may be equivalently replaced; and these modifications or substitutions do not depart from the scope of the technical solutions of the embodiments of the present application.

Claims

1. An out-of-band management method is applied to an out-of-band management system, the out-of-band management system comprises at least one data center, the data center comprises an APN access device and an out-of-band management core device connected with the APN access device in a communication manner, and at least one network device connected with the out-of-band management core device in a communication manner, and the method comprises the following steps:

2. The out-of-band management method of claim 1, wherein the APN access device receiving an out-of-band management command sent by a client for a target network device and forwarding the out-of-band management command to the out-of-band management core device comprises:

3. The out-of-band management method of claim 2, wherein the at least two operators comprise: mobile operators, telecom operators, and unicom operators.

4. The out-of-band management method of claim 1, wherein there are a plurality of the data centers, the method further comprising:

the method comprises the steps of establishing a network tunnel by using an APN technology in APN access equipment among a plurality of data centers to realize the intercommunication of an out-of-band management network among the plurality of data centers.

5. The out-of-band management method of claim 1, wherein the data center further comprises a security management server, the method further comprising:

and the safety management server carries out safety authentication on the client.

6. An out-of-band management system comprising at least one data center, the data center comprising an APN access device and an APN access device communicatively coupled out-of-band management core and at least one network device communicatively coupled to the APN access device, wherein:

7. The out-of-band management system of claim 6, wherein the data center further comprises a security management server configured to securely authenticate the client.

8. The out-of-band management system of claim 7, further comprising a central configuration synchronization server, configured to synchronize data in the security management servers in the data centers, and switch to another security management server to perform security authentication for the client when detecting that the target security management server fails.

9. A computer device comprising a memory, a processor and a computer program stored on the memory and executable on the processor, the processor implementing the steps of the method of any one of claims 1 to 5 when executing the computer program.

10. A computer-readable storage medium having stored thereon a computer program, characterized in that: the computer program, when executed by a processor, implementing the steps of the method of any one of claims 1 to 5.