Systems and methods for inferring services on a network

Abstract

A method and system are configured to infer one or more virtual private network (VPN) services within a physical network. Topologically relevant network information is received for the physical network with regard to nodes, interfaces, connections, and protocols, and the existence of each virtual private network service is inferred based on the stored network topology information. Network objects are also inferred, including routed paths, label switched paths, Internet Protocol Security (IPSec) tunnels, and Layer Two Tunneling Protocol (L2TP) tunnels.

1 . A method for inferring one or more virtual private network services within a physical network comprising:
 receiving topologically relevant network information for the physical network concerning at least one of: nodes, interfaces, connections, and protocols;   resolving conflicts in the received information;   determining and storing network topology information from the received and resolved information; and   inferring one or more virtual private network services based on the stored network topology information.   
     
     
         2 . The method of  claim 1 , comprising inferring a plurality of aggregate network objects based on the received information, wherein the aggregate network objects comprise at least one of a routed path, a label switched path, an Internet Protocol Security (IPSec) tunnel, and a Layer Two Tunneling Protocol (L2TP) tunnel. 
     
     
         3 . The method of  claim 1 , wherein the one or more virtual private network services comprise at least one of a virtual private local area network service, a virtual private wire service, a layer-3 VPN, and a layer-2 VPN. 
     
     
         4 . The method of  claim 1 , wherein inferring the one or more virtual private network services includes inferring, as at least one of the virtual private network services, an association of one or more network objects. 
     
     
         5 . The method of  claim 1 , wherein inferring the one or more virtual private network services includes inferring a topology of a virtual private network. 
     
     
         6 . The method of  claim 1 , where at least one of the one or more virtual private network services includes an agreement to provide a predetermined quality of service to a user. 
     
     
         7 . The method of  claim 1 , comprising using the stored network topology information as a model of the network. 
     
     
         8 . The method of  claim 7 , comprising performing at least one of the following actions based on the one or more virtual private network services and the model:
 planning a topology of the physical network,   managing the physical network,   determining performance of the physical network, and   reporting the performance of the physical network.   
     
     
         9 . The method of  claim 1 , comprising detecting a change in the physical network. 
     
     
         10 . The method of  claim 9 , comprising updating the stored network topology information based on the detected change. 
     
     
         11 . The method of  claim 9 , comprising updating the inferred virtual private network services based on the detected change. 
     
     
         12 . The method of  claim 1 , wherein receiving network information includes receiving, at a processor, information concerning the physical network, wherein the processor poses as a router. 
     
     
         13 . The method of  claim 1 , wherein receiving network information includes receiving based on a passive protocol. 
     
     
         14 . The method of  claim 13 , wherein the passive protocol includes at least one of a Border Gateway Protocol (BGP), a Routing Information Protocol (RIP), an Intermediate System to Intermediate System (IS-IS) protocol, and an Open Shortest Path First (OSPF) protocol. 
     
     
         15 . The method of  claim 1 , wherein receiving topologically relevant network information includes receiving based on an active protocol. 
     
     
         16 . The method of  claim 15 , wherein the active protocol includes at least one of a Simple Network Management Protocol (SNMP) and a Command Line Interface (CLI). 
     
     
         17 . The method of  claim 1 , comprising associating a user-defined service with at least one of the inferred one or more virtual private network services. 
     
     
         18 . The method of  claim 17 , wherein the associating includes associating a name as the user-defined service. 
     
     
         19 . The method of  claim 18 , wherein the associating includes associating a quality-of-service with the name. 
     
     
         20 . The method of  claim 18 , wherein associating includes associating a quality-of-service with the name, such that the quality-of service represents a predetermined level of service. 
     
     
         21 . A system for inferring one or more virtual private network services within a physical network comprising:
 a processor; and   a memory operably coupled to the processor;   wherein the processor is configured to:
 receive topologically relevant network information for the physical network concerning at least one of: nodes, interfaces, connections, and protocols; 
 resolve conflicts in the received information; 
 determine and store network topology information from the received and resolved information; and 
 infer one or more virtual private network services based on the stored network topology information. 
   
     
     
         22 . The system of  claim 21 , wherein the processor is configured to infer a plurality of aggregate network objects based on the received information, wherein the aggregate network objects comprise at least one of a routed path, a label switched path, an Internet Protocol Security (IPSec) tunnel, and a Layer Two Tunneling Protocol (L2TP) tunnel. 
     
     
         23 . The system of  claim 21 , wherein the processor is configured to infer, as at least one of the virtual private network services, an association of one or more network objects. 
     
     
         24 . The system of  claim 21 , where at least one of the one or more virtual private network services includes an agreement to provide a predetermined quality of service to a user. 
     
     
         25 . The system of  claim 21 , wherein the stored network topology information is stored as a model of the network. 
     
     
         26 . The system of  claim 25 , wherein the processor is configured to perform at least one of the following actions based on the one or more virtual private network services and the model:
 plan a topology of the physical network,   manage the physical network,   determine a performance of the physical network, and   report the performance of the physical network.   
     
     
         27 . The system of  claim 21 , wherein the processor is configured to detect a change in the physical network. 
     
     
         28 . The system of  claim 27 , wherein the processor is configured to update the stored network topology information based on the detected change. 
     
     
         29 . The system of  claim 27 , wherein the processor is configured to update the inferred virtual private network services based on the detected change. 
     
     
         30 . The system of  claim 21 , wherein the processor is configured to pose as a router. 
     
     
         31 . The system of  claim 21 , wherein the processor is configured to associate a user-defined service with at least one of the inferred one or more virtual private network services. 
     
     
         32 . A non-transient computer readable medium that includes a computer program that, when executed by a processor, causes the processor to:
 receive topologically relevant network information for the physical network concerning at least one of: nodes, interfaces, connections, and protocols;   resolve conflicts in the received information;   determine and store network topology information from the received and resolved information; and   infer one or more virtual private network services based on the stored network topology information.   
     
     
         33 . The medium of  claim 32 , wherein the computer program causes the processor to infer a plurality of aggregate network objects based on the received information, wherein the aggregate network objects comprise at least one of a routed path, a label switched path, an Internet Protocol Security (IPSec) tunnel, and a Layer Two Tunneling Protocol (L2TP) tunnel. 
     
     
         34 . The medium of  claim 32 , wherein the computer program causes the processor to infer, as at least one of the virtual private network services, an association of one or more network objects. 
     
     
         35 . The medium of  claim 32 , where at least one of the one or more virtual private network services includes an agreement to provide a predetermined quality of service to a user. 
     
     
         36 . The medium of  claim 32 , wherein the stored network topology information is stored as a model of the network. 
     
     
         37 . The medium of  claim 32 , wherein the computer program causes the processor to perform at least one of the following actions based on the one or more virtual private network services and the model:
 plan a topology of the physical network,   manage the physical network,   determine a performance of the physical network, and   report the performance of the physical network.   
     
     
         38 . The medium of  claim 32 , wherein the computer program causes the processor to detect a change in the physical network. 
     
     
         39 . The medium of  claim 38 , wherein the computer program causes the processor to update the stored network topology information based on the detected change. 
     
     
         40 . The medium of  claim 38 , wherein the computer program causes the processor to update the inferred virtual private network services based on the detected change. 
     
     
         41 . The medium of  claim 38 , wherein the computer program causes the processor to pose as a router. 
     
     
         42 . The medium of  claim 32 , wherein the computer program causes the processor to associate a user-defined service with at least one of the inferred one or more virtual private network services.