Network Assurance System for Layer 3 Subnet Validation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Complex computer networks face challenges in accurate and efficient problem discovery due to their large and intricate nature, leading to difficulties in identifying configuration errors and ensuring proper network behavior.

Innovation Solution

The system and method for network assurance involve creating and comparing logical models across different formats to validate network configurations, generating events based on inconsistencies, and performing checks at various layers (Layer 1, 2, and 3) to ensure proper deployment and operation, using a platform that models network behavior without monitoring traffic.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Adaptability or versatility

If network configuration flexibility and control options are increased to meet diverse user needs, then network adaptability improves, but network complexity increases making configuration more error-prone and troubleshooting more difficult

Engineering Contradiction:
Improvenetwork adaptabilityVSAvoidnetwork complexity
Core Design Contradiction:
Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary system that acts as a mediator between network operators and the complex network configuration. This intermediary automatically validates configurations, checks for errors, and ensures consistency across network policies, thereby maintaining high adaptability while reducing the complexity burden on operators.

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The patent implements feedback mechanisms where the system continuously monitors network configurations, validates them against defined policies, and provides immediate feedback on configuration errors or inconsistencies. This feedback loop enables operators to correct issues before deployment, maintaining adaptability while reducing operational complexity.

Inventive Principle:
Principle #23Feedback

2Device complexity

If manual network configuration and validation processes are used, then device complexity remains low, but time consumption for configuration validation and error identification increases

Engineering Contradiction:
Improvevalidation system complexityVSAvoidconfiguration validation time
Core Design Contradiction:
Device complexityVSLoss of time

Solution Approach 1:

The patent applies preliminary action by performing configuration validation and consistency checks automatically before network configurations are deployed. The system pre-validates policies, checks for errors, and ensures consistency across the network, thereby reducing the time required for manual validation and troubleshooting without requiring complex post-deployment intervention.

Inventive Principle:
Principle #10Preliminary action

3Measurement precision

If comprehensive network monitoring and validation systems are implemented to improve error detection accuracy, then measurement precision improves, but device complexity and resource consumption increase

Engineering Contradiction:
Improveerror detection accuracyVSAvoidmonitoring system complexity
Core Design Contradiction:
Measurement precisionVSDevice complexity

Solution Approach 1:

The patent extracts and focuses validation and monitoring functions into a dedicated, specialized system rather than distributing complex monitoring capabilities across all network devices. This extraction approach improves error detection accuracy by concentrating validation resources while keeping individual device complexity low.

Inventive Principle:
Principle #2Taking out (Extraction)

Data Source

PatentEP3643013B1Validation of layer 3 bridge domain subnets in a network
Publication Date: 2022.11.23 CISCO TECHNOLOGY INC
  • EP3643013B1 patent drawingFigure 1A
  • EP3643013B1 patent drawingFigure 1B
  • EP3643013B1 patent drawingFigure 2A

AI summary

Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer (1), layer (2) and layer (3) of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations.