Methods and systems for onboarding network equipment

Abstract

Methods are systems are provided for onboarding network equipment to managed networks. An onboarding controller may be used in authenticating the to-be-onboarded network equipment. The onboarding controller may issue a challenge, which may include instructions for making configuration changes to the network equipment. The configuration changes may include adding, removing, and/or changing connections within and/or to the network equipment within a local network including the network equipment. The onboarding controller may determine whether or not the configuration changes have been made to the network equipment. The determination of configuration changes may be used in verifying the identity and/or location of the network equipment, and/or in determining determine to which managed network the network equipment should be onboarded.

What is claimed: 
     
         1 . A method comprising:
 in an onboarding controller of a managed network:
 generating a challenge for network equipment to be onboarded into the managed network, wherein the challenge comprises information relating to a configuration code to be made to the network equipment at the same location as the network equipment, wherein the configuration code comprises at least one action for configuring one or more connections to the network equipment, and wherein the configuration code is associated with time constraint information for performing the at least one action; 
 sending the challenge to a communication device different from the network equipment, wherein the challenge is sent over a connection that is different than a connection used in communicating with the network equipment, and wherein the communication device is at the same location as the network equipment; and 
 verifying, based on applying the configuration code, an identity of the network equipment. 
   
     
     
         2 . The method of  claim 1 , wherein the network equipment is identified with a particular user. 
     
     
         3 . The method of  claim 1 , wherein the communication device comprises a mobile phone. 
     
     
         4 . The method of  claim 1 , wherein the configuration code is manually implemented at the network equipment. 
     
     
         5 . The method of  claim 1 , further comprising:
 generating a command at the network equipment; and   receiving the configuration code at the network equipment to verify the identity of the network equipment.   
     
     
         6 . The method of  claim 1 , further comprising:
 sending an onboarding request that includes data, wherein the data comprises functional capabilities of the network equipment or a network address of the network equipment.   
     
     
         7 . The method of  claim 1 , further comprising:
 receiving a confirmation via the communication device that the at least one action is performed.   
     
     
         8 . The method of  claim 1 , further comprising:
 re-sending the challenge to the communication device in response to a determination that the challenge was unsuccessful.   
     
     
         9 . The method of  claim 1 , wherein the time constraint information comprises a time window for applying the at least one action. 
     
     
         10 . The method of  claim 1 , wherein the configuration code is associated with sequence information for performing the at least one action. 
     
     
         11 . A system comprising:
 an onboarding controller circuit for onboarding network equipment to a managed network, wherein the onboarding controller circuit is configured to:
 generate a challenge for the network equipment to be onboarded into the managed network, wherein the challenge comprises information relating to a configuration code to be made to the network equipment at the same location as the network equipment, wherein the configuration code comprises at least one action for configuring one or more connections to the network equipment, and wherein the configuration code is associated with time constraint information for performing the at least one action; 
 send the challenge to a communication device different from the network equipment, wherein the challenge is sent over a connection that is different than a connection used in communicating with the network equipment, and wherein the communication device is at the same location as the network equipment; and 
 verify, based on applying the configuration code, an identity of the network equipment. 
   
     
     
         12 . The system of  claim 11 , wherein the network equipment is identified with a particular user. 
     
     
         13 . The system of  claim 11 , wherein the communication device comprises a mobile phone. 
     
     
         14 . The system of  claim 11 , wherein the configuration code is manually implemented at the network equipment. 
     
     
         15 . The system of  claim 11 , wherein the onboarding controller circuit is configured to:
 generate a command at the network equipment; and   receive the configuration code at the network equipment to verify the identity of the network equipment.   
     
     
         16 . The system of  claim 11 , wherein the onboarding controller circuit is configured to send an onboarding request that includes data, wherein the data comprises functional capabilities of the network equipment or a network address of the network equipment. 
     
     
         17 . The system of  claim 11 , wherein the onboarding controller circuit is configured to receive a confirmation via the communication device that the at least one action is performed. 
     
     
         18 . The system of  claim 11 , wherein the onboarding controller circuit is configured to re-send the challenge to the communication device in response to a determination that the challenge was unsuccessful. 
     
     
         19 . The system of  claim 11 , wherein the time constraint information comprises a time window for applying the at least one action. 
     
     
         20 . The system of  claim 11 , wherein the configuration code is associated with sequence information for performing the at least one action.