# US 10,873,505 B2 · Validation of layer 2 interface and VLAN in a networked environment > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 10,873,505 B2 - Document ID: US10873505B2 - Status: Granted - Kind: B2 - Application number: 16/597,220 - Filed: 2019-10-09 - Published: 2020-02-06 - Granted: 2020-12-22 - Earliest claimed: 2017-06-19 - Assignees: Cisco Technology, Inc. - Applicants: Cisco Technology, Inc. - Inventors: Sanchay Harneja; Ramadoss Venkatesan - Web page: https://patentgrep.com/patent/US10873505B2 ## CPC - H04L 41/0873: Checking configuration conflicts between network elements - H04L 41/0894: Policy-based network configuration management - H04L 41/122: of virtualised topologies, e.g. software-defined networks [SDN] or network function virtualisation [NFV] - H04L 41/145: {involving simulating, designing, planning or modelling of a network} - H04L 12/4641: {Virtual LANs, VLANs, e.g. virtual private networks [VPN] (LAN interconnection over a bridge based backbone H04L12/462; encapsulation techniques H04L12/4633; routing of packets H04L45/00; packet switches H04L49/00; virtual private networks for security H04L63/0272)} - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations. ## Claims ### Claim 1 A method comprising: receiving, from one or more network devices within a fabric, a software model including instructions that are specific to operability of the one or more network devices within the fabric; creating a local logical model in a first format, the local logical model being at least a portion of a received logical model that is specific to operability of one or more network devices in the fabric; converting at least a portion of Layer 2 content of the created local logical model and at least a portion of Layer 2 content of the received software model into a common format; and comparing content of at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model, wherein a positive outcome of the comparison represents that the one or more network devices at least partially and accurately created the software model from the received logical model that is specific to operability of the one or more network devices in the fabric. ### Claim 2 (depends on 1) The method of claim 1, wherein the at least a portion of the Layer 2 content of the received software model that is converted into the common format and compared to the at least a portion of the Layer 2 content of the created local logical model includes VLAN information and interface information. ### Claim 3 (depends on 2) The method of claim 2, wherein the operability of the one or more network devices is identified based on the comparison relates to deployment of any bridge domains and/or endpoints groups (EPGs) through the one or more network devices. ### Claim 4 (depends on 1) The method of claim 1, further comprising generating an error event in response to a negative outcome of the comparison between the at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model, wherein the negative outcome of the comparison represents that that the one or more network devices at least partially and inaccurately created the software model from the received logical model that is specific to operability of the one or more network devices in the fabric. ### Claim 5 (depends on 4) The method of claim 4, further comprising: identifying a severity level of the error event based on one or more inconsistencies between the at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model; and outputting the error event with the severity level. ### Claim 6 (depends on 1) The method of claim 1, wherein the software model includes one of an L-Model, a C-Model, and an H-Model. ### Claim 7 (depends on 1) The method of claim 1, further comprising: populating one or more virtual routing and forwarding instance (VRF) containers for the VRFs based on the received software model; and processing the one or more VRF containers to identify one or more Layer 3 misconfigurations in the one or more network devices in the fabric based on the local logical model. ### Claim 8 (depends on 7) The method of claim 7, further comprising: validating the received software model by comparing content of the received software model processed in the one or more VRF containers with content of the local logical model; and identifying the one or more Layer 3 misconfiguration in the one or more network devices based on the comparison between the content of the received software model processed in the one or more VRF containers with the content of the local logical model. ### Claim 9 (depends on 7) The method of claim 7, wherein the one or more Layer 3 misconfigurations include a deployment of the software model on an incorrect network device of the one or more network devices in the fabric. ### Claim 10 (depends on 7) The method of claim 7, wherein the one or more Layer 3 misconfigurations indicate that one or more BD subnets are deployed incorrectly in the fabric. ### Claim 11 A system comprising: one or more processors; and at least one computer-readable storage medium having stored therein instructions which, when executed by the one or more processors, cause the one or more processors to perform operations comprising: receiving, from one or more network devices within a fabric, a software model including instructions that are specific to operability of the one or more network devices within the fabric; creating a local logical model in a first format, the local logical model being at least a portion of a received logical model that is specific to operability of one or more network devices in the fabric; converting at least a portion of Layer 2 content of the created local logical model and at least a portion of Layer 2 content of the received software model into a common format; and comparing content of at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model, wherein a positive outcome of the comparison represents that the one or more network devices at least partially and accurately created the software model from the received logical model that is specific to operability of the one or more network devices in the fabric. ### Claim 12 (depends on 11) The system of claim 11, wherein the at least a portion of the Layer 2 content of the received software model that is converted into the common format and compared to the at least a portion of the Layer 2 content of the created local logical model includes VLAN information and interface information. ### Claim 13 (depends on 12) The system of claim 12, wherein the operability of the one or more network devices is identified based on the comparison relates to deployment of any bridge domains and/or endpoints groups (EPGs) through the one or more network devices. ### Claim 14 (depends on 11) The system of claim 11, wherein the instructions which, when executed by the one or more processors, further cause the one or more processors to perform operations comprising generating an error event in response to a negative outcome of the comparison between the at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model, wherein the negative outcome of the comparison represents that that the one or more network devices at least partially and inaccurately created the software model from the received logical model that is specific to operability of the one or more network devices in the fabric. ### Claim 15 (depends on 14) The system of claim 14, wherein the instructions which, when executed by the one or more processors, further cause the one or more processors to perform operations comprising: identifying a severity level of the error event based on one or more inconsistencies between the at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model; and outputting the error event with the severity level. ### Claim 16 (depends on 11) The system of claim 11, wherein the software model includes one of an L-Model, a C-Model, and an H-Model. ### Claim 17 (depends on 11) The system of claim 11, wherein the instructions which, when executed by the one or more processors, further cause the one or more processors to perform operations comprising: populating one or more virtual routing and forwarding instance (VRF) containers for the VRFs based on the received software model; and processing the one or more VRF containers to identify one or more Layer 3 misconfigurations in the one or more network devices in the fabric based on the local logical model. ### Claim 18 (depends on 17) The system of claim 17, wherein the instructions which, when executed by the one or more processors, further cause the one or more processors to perform operations comprising: validating the received software model by comparing content of the received software model processed in the one or more VRF containers with content of the local logical model; and identifying the one or more Layer 3 misconfiguration in the one or more network devices based on the comparison between the content of the received software model processed in the one or more VRF containers with the content of the local logical model. ### Claim 19 (depends on 17) The system of claim 17, wherein the one or more Layer 3 misconfigurations include a deployment of the software model on an incorrect network device of the one or more network devices in the fabric. ### Claim 20 A non-transitory computer-readable storage medium having stored therein instructions which, when executed by a processor, cause the processor to perform operations comprising: receiving, from one or more network devices within a fabric, a software model including instructions that are specific to operability of the one or more network devices within the fabric; creating a local logical model in a first format, the local logical model being at least a portion of a received logical model that is specific to operability of one or more network devices in the fabric; converting at least a portion of Layer 2 content of the created local logical model and at least a portion of Layer 2 content of the received software model into a common format; and comparing content of at least some Layer 2 overlapping fields from the common format of the created local logical model and the common format of the received software model, wherein a positive outcome of the comparison represents that the one or more network devices at least partially and accurately created the software model from the received logical model that is specific to operability of the one or more network devices in the fabric.