Network strategy verification system and method

Abstract

The invention provides a network strategy verification system and method. The system comprises an input end, a network strategy verification unit and an output end; the input end is used for inputting a network topology, a network strategy and a constraint to be verified; the network strategy verification unit is used for receiving the network topology, the network strategy and the constraint to be verified, and outputting a network verification result based on the obtained configuration file of the network equipment; and the output end is used for outputting the constraint satisfaction information, the error positioning information and the error repairing suggestion. According to the embodiment of the invention, the modular program design is introduced into the network verification, the complexity of the network strategy verification tool design can be reduced, the workload segmentation is facilitated, the agile development is realized, and the debugging maintenance and problem positioning of the network strategy verification tool are simplified.

Description

technical field [0001] The invention relates to the technical field of network policy verification, in particular to a network policy verification system and method. Background technique [0002] The traditional network policy verification technology models and designs a certain network, reads the router and switch configuration of a specific manufacturer, analyzes the network policy based on a specific verification algorithm, such as the algorithm shown in the figure or theorem proof, and analyzes the network behavior. The state space is traversed. Limited by the specific constraints of policy verification technology, network operation and maintenance personnel usually cannot directly apply the original policy verification tool to the network being operated and maintained. Moreover, in the face of a variety of complex network verification tools, operation and maintenance personnel have no way to analyze and select a suitable solution. [0003] Traditional network policy v...

AI Technical Summary

Problems solved by technology

Limited by the specific constraints of policy verification technology, network operation and maintenance personnel usually cannot directly apply the original policy verification tool to the network being operated and maintained

Moreover, in the face of a variety of complex network verification tools, operation and maintenance personnel have no way to analyze and select a suitable solution

[0003] Traditional network policy verification tools, limited by the programming model, cannot cover various network devices and network constraints. Specifically, they have the following defects:

[0004] (1) The function definition is not clear, and it is difficult to select a network policy verification tool with sufficient functions and good performance for a specific network and specific problems

[0005] (2) The input format is not uniform. When using different network policy verification tools to verify the same network, it is necessary to adapt the input format to each verification tool, which greatly increases the workload of network administrators.

[0006] (3) The code reuse rate is low, and the phenomenon of repeated development is common

Due to the unclear module division of the existing network policy verification tools, developers often choose to redevelop irrelevant modules such as the network policy analysis module when designing new network verification algorithms, which brings waste of manpower and slows down technology iteration. speed

Images