Abstract: Real-world Techniques for Automating the Configuration of Network Devices

Mark Epstein, Ponte

In this talk, the presenter will discuss real-world experience garnered doing automated configuration of network devices in the field using Tcl and Expect. What were the challenges? What was learned about exception handling and reliability? What are some strange discoveries made about common devices?

An outline follows:

I. Issues surrounding move, add and change control for network devices

  • Complexity from having multiple devices
  • Complexity from having a large, highly distributed network--how to update firmware, etc. for remote devices
  • Need for reliability
  • Need for automation
  • II. Need for Network Integrity

  • Detection of drift
  • Archiving
  • III. Description of an architecture for automated network device control. Based on work done in conjunction with several large organizations managing global networks.

    IV. Automated device manipulation techniques using Tcl and Expect

  • Description of a large global financial services firm's experience with device control automation, problems that arose, and how they were handled.
  • Specific examples (with Tcl/Expect code on screen):
    • The problem of prompts; buffer skew, false positives and how to deal with the problem in Tcl code
    • Speed of entry
    • Use of terminal servers and real (not virtual) consoles
    • Firmware revision annoyances
    • Control channel networking problems
    • Parse-ability of configurations
    • Differential configuration

  • About the Presenter
    Mark Epstein has 14 years of experience in the security and network administration fields, having held leadership positions at organizations such as McAfee and Silicon Graphics. While at Silicon Graphics, Epstein led the team that created OpenVault (TM), a distributed storage resource broker that enables any storage management application to interface with robotic storage libraries, regardless of vendor. Epstein drove the OpenVault technology to become an IEEE standard.

    Prior to working at Silicon Graphics, Epstein headed the team that created the X-terminal multi-platform installer for Network Computing Devices (NCD), which enabled NCD's X-terminal products to be used with more than a dozen Unix platforms. The code eliminated a formerly arduous manual process by automating the creation of the host-side objects that enabled the X-terminals to function properly.

    In addition, he has front-line Network Operations Center (NOC) experience from his tenure at UC Berkeley Central Computing Services, where his duties included resource control, security, and network and systems administration for much of the campus.

    PowerPoint presentation
    HTML & PDF presentations
    RealVideo stream