Abstract: A system and method for communicating with network devices without regard to the device type and/or manufacturer is described. In one embodiment, the present invention provides a global graphical user interface (GUI) for communicating with various network devices. The global GUI includes an intuitive interface driven by a template library. For each device type and each device manufacturer, this template library can store both the attribute fields required for device configuration and the format for communicating those attribute fields. When a network administrator wants to communicate with a particular network device, the template associated with that device can be retrieved from the template library. The network administrator can then populate the attribute fields of that template with the appropriate data. This attribute data can be formatted and provided to the network device.

Abstract: The present invention provides a system and method for configuring and managing networked communication systems. For example, an exemplary system and/or method according to one embodiment uses an information model to map between normalized representations of different network resources having different features. Moreover, the information model can represent different devices, different programming models, and/or different functionalities in a common representation, which is then used to configure and manage different network elements (e.g., different devices).

Abstract: A system and method for managing network device configurations is described. In one embodiment a device configuration is represented by configuration knowledge and configuration data, wherein the configuration knowledge may comprise one or more configuration knowledge instances, and the configuration data may comprise one or more configuration data instances. In preferred forms, the configuration knowledge instances and configuration data instances may comprise one or more schemata, which may be created, modified, or deleted without affecting other portions of a configuration knowledge instance or configuration data instance.

Abstract: A system and method for securing access to network resources are described. One embodiment includes an exemplary method for securing access to a network element and can include associating a network element with a set of data, and configuring a portion of the data to be responsive to a first subset of access rights. In accordance with other embodiments, an exemplary method and system provide for selection of an appropriate security to govern access by a user to network resources.

Abstract: A method and apparatus to initializing a network device is described. In one embodiment, the present invention includes the step of: retrieving an initial communications address from a local memory of the network device; transmitting a secure identifier to the initial communications address verifying the authenticity of the secure identifier; retrieving a configuration record from a configuration record repository, the retrieved configuration record being associated with the network device that corresponds to the secure identifier; receiving the configuration record at the network device; and installing the configuration record at the network device.

Abstract: A system and method for optimizing the use of network resources is described. In one embodiment, an enterprise first requests provisioning of network resources for a particular transaction. Responsive to that request, network resources are dynamically configured to meet the enterprise's request. When the transaction is complete, the network resources are returned to a default state.

Abstract: A policy engine generates configlets that are vendor-neutral, vendor-specific or both, based on a selected target level and a selected device/device group. A translator translates and combines the configlets to form vendor-dependent configuration files. The policy engine generates the configlets using policies associated with the selected target level and its sub-target levels, as defined by a target level hierarchy. A policy includes at least a condition, and an action which the policy engine performs if the condition is true. In performing the action, the policy engine typically writes to at least a partial configlet. A policy may further include a verification clause, which is used to verify a running configuration. Policy dependencies may also be defined such that where a second policy is dependent on a first policy, the second policy must be evaluated after the first policy. This is necessary, where, for example, the first policy generates and stores a value to be used by the second policy.

Abstract: A system and method for managing and modeling a network device using a representation of a configuration schema is disclosed. One implementation includes a configuration hash key storage module; a configuration hash object storage module; and a configuration manager.