Network Assurance Appliance Endpoint Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Network configurations in large data center networks are complex and prone to errors, leading to inconsistencies that are difficult to identify and can cause significant problems, affecting the network's intended behavior and performance.

Innovation Solution

A network assurance appliance that retrieves and compares configured static endpoint information from a network controller with connected static endpoint information from nodes, identifying inconsistencies and generating events to address them, ensuring consistent network behavior and performance.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If network configurations are manually specified at a centralized controller, then network control and management are simplified, but configuration errors and inconsistencies increase

Engineering Contradiction:
Improvenetwork controlVSAvoidconfiguration accuracy
Core Design Contradiction:
Ease of operationVSReliability

Solution Approach 1:

The patent implements a feedback mechanism where the network controller receives status information from network elements about their actual configuration states. This feedback loop enables the controller to detect inconsistencies between intended and actual configurations, allowing for automated correction and validation of configuration accuracy while maintaining centralized control.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The system performs preliminary validation of network configurations before they are fully deployed. The controller checks configuration parameters against predefined policies and constraints prior to implementation, preventing erroneous configurations from being applied to network elements, thus ensuring configuration accuracy before operation.

Inventive Principle:
Principle #10Preliminary action

2Adaptability or versatility

If complex network configurations are implemented across multiple layers, then network functionality and performance are enhanced, but configuration complexity and error potential increase

Engineering Contradiction:
Improvenetwork functionalityVSAvoidconfiguration complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent segments the complex network configuration into multiple hierarchical levels and modular components. Each layer (access, aggregation, core) is configured independently with specific policy sets, allowing complex functionality to be built from manageable modules. This segmentation reduces configuration complexity by breaking down multi-layer configurations into discrete, controllable units.

Inventive Principle:
Principle #1Segmentation

Solution Approach 2:

The system implements universal configuration templates and policies that can be applied across multiple network layers and elements. A single policy definition can be propagated to numerous network elements, providing complex functionality through reusable, multi-functional configuration objects rather than individual custom configurations for each element.

Inventive Principle:
Principle #6Universality (Multi-functionality)

3Reliability

If centralized configuration management is used, then network policy enforcement is improved, but detection of configuration errors becomes more difficult

Engineering Contradiction:
Improvepolicy enforcementVSAvoiderror detection
Core Design Contradiction:
ReliabilityVSDifficulty of detecting and measuring

Solution Approach 1:

The system establishes continuous feedback channels from network elements to the centralized controller, where actual configuration states and operational parameters are reported back. This feedback enables automated detection of configuration errors by comparing reported states against intended policies, making error detection easier while maintaining centralized policy enforcement.

Inventive Principle:
Principle #23Feedback

Solution Approach 2:

The patent replaces manual error detection methods with automated electronic validation mechanisms. The controller automatically validates configurations against policy rules and detects inconsistencies through electronic comparison algorithms, substituting mechanical/manual checking processes with automated digital validation that is both more accurate and easier to implement.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS10560355B2Static endpoint validation
Publication Date: 2020.02.11 CISCO TECHNOLOGY INC
  • US10560355B2 patent drawing
  • US10560355B2 patent drawing
  • US10560355B2 patent drawing

AI summary

Systems, methods, and computer-readable media are disclosed for validating endpoint information for nodes in a network. A network assurance appliance is configured to retrieve a configured static endpoint information in a logical model of a network from a network controller and connected static endpoint information from one or more nodes in the network. The network assurance appliance determines that there is an inconsistency based on a comparison of the configured static endpoint information and the connected static endpoint information and generating an event specifying the inconsistency.