Systems and methods for automatically configuring network devices

Abstract

Systems and methods are disclosed for automatically configuring, managing, and maintaining a network device or VPN using a public network such as the Internet. Initial configuration of a network device or VPN occurs upon a user entering minimal information via a simple HTML page. After receipt of this minimal information, the present invention automatically configures the network device or VPN without user intervention. Thereafter, a user may modify the network device or VPN configuration via an easy-to-use and easy-to-understand graphical user interface. Parameters are presented such that a user simply checks and unchecks boxes, or clicks on radio buttons, to configure network device parameters. Upon completion of the selection, the user clicks on save, and the configuration is automatically modified. In addition, upon a significant change to any network device, the changed network device automatically initiates reconfiguration of the network device or VPN with zero input from a user.

1 - 4 . (canceled)  
   
   
       5 . A method for automatically configuring a network device, said method comprising the steps of: 
 receiving initial data input by a user;    automatically establishing a network connection between a network and said network device;    automatically establishing a first communication between a master device and said network device via said network;    transmitting management device information from said master device to said network device;    automatically establishing a second communication between a management device and said network device via said network connection to prompt transmission of a generic configuration file from said management device to said network device;    transmitting said generic configuration file from said management device to said network device via said network connection; and    automatically configuring said network device for at least one of the group consisting of network access, network browsing, electronic mail, and virtual private network participation;    wherein said network device is automatically configured upon local processing of said generic configuration file.    
   
   
       6 . A method according to  claim 5 , wherein said initial data includes at least one customer identifier, at least one password, and at least one network connection type.  
   
   
       7 . A method according to  claim 5 , wherein said network device is at least one of the group consisting of a broadband device, a router, a modem, a switch, and a wireless gateway.  
   
   
       8 . A method according to  claim 5 , said method further comprising the steps of: 
 encoding said generic configuration file; and    encrypting said generic configuration file;    wherein said encoding and said encrypting occur prior to transmission of said generic configuration file via said network.    
   
   
       9 . A method according to  claim 5 , wherein said initial data is input by said user via a user interface coupled to said network device.  
   
   
       10 . A method according to  claim 9 , wherein said user interface includes at least one of the group consisting of a personal computer, a personal data assistant, and a network-equipped appliance.  
   
   
       11 . A method according to  claim 9 , wherein said coupling of said user interface to said network device is performed via at least one of the group consisting of a cable, an Ethernet cable, a wireless connection, a local area network, a wide area network, and an Internet connection.  
   
   
       12 . A method according to  claim 5 , wherein said receiving of said initial data input by said user includes the sub-steps of: 
 redirecting a browser activated by said user to display at least one data input screen stored in said network device; and    receiving said initial data input by said user via at least one of said data input screens.    
   
   
       13 . A method according to  claim 12 , wherein said browser is a Web browser.  
   
   
       14 . A method according to  claim 12 , wherein at least one of said data input screens is a hypertext markup language page.  
   
   
       15 . A method according to  claim 5 , wherein said network connection is at least one of the group consisting of a wireless connection, a cable connection, a digital subscriber line, and a telephone line.  
   
   
       16 . A method according to  claim 5 , wherein said network is at least one of the group consisting of an Internet and a wide area network.  
   
   
       17 . A method according to  claim 5 , wherein a configuration transfer tool integral to said management device transmits said generic configuration file to said network device.  
   
   
       18 . A method according to  claim 5 , wherein said automatically configuring said network device includes the sub-steps of: 
 extracting configuration data from said generic configuration file; and    writing said configuration data to at least one storage location of said network device;    wherein at least one daemon executed by said network device retrieves and processes at least a portion of said configuration data contained in said storage location.    
   
   
       19 . A method according to  claim 5 , wherein said automatically configuring said network device includes the sub-steps of: 
 decrypting said generic configuration file;    decoding said generic configuration file;    extracting configuration data from said generic configuration file; and    writing said configuration data to at least one storage location of said network device;    wherein at least one daemon executed by said network device retrieves and processes at least a portion of said configuration data contained in said storage location.    
   
   
       20 . A method according to  claim 5 , wherein said master device and said management device are servers.  
   
   
       21 . A method according to  claim 5 , said method further comprising the steps of: 
 authenticating a first communication channel prior to said establishing of said first communication between said master device and said network device; and    authenticating a second communication channel prior to said establishing of said second communication between said management device and said network device.    
   
   
       22 . A method according to  claim 21 , wherein said authenticating is performed using at least one of the group consisting of IP security, secure sockets layer, passwords, digital certificates, smart cards, biometrics, and dynamic biometrics.  
   
   
       23 . A method according to  claim 5 , 
 wherein said master device includes at least one master device database;    wherein said management device includes at least one management device database; and    wherein a change to one of the group consisting of said master device databases and said management device databases is copied to at least one of the group consisting of said master device databases and said management device databases via database replication.