Back to results
US 11,153,167 B2Granted
Validation of L3OUT configuration for communications outside a network
AssigneeCisco Technology, Inc.
InventorsSanchay Harneja, Sanjay Sundaresan
Life of this patent
Estimating the term…
Abstract
Disclosed are systems, methods, and computer-readable media for assuring tenant forwarding in a network environment. Network assurance can be determined in layer 1, layer 2 and layer 3 of the networked environment including, internal-internal (e.g., inter-fabric) forwarding and internal-external (e.g., outside the fabric) forwarding in the networked environment. The network assurance can be performed using logical configurations, software configurations and/or hardware configurations.
Claims20
A system comprising:
- at least one memory configured to store data;
- and
- at least one processor operable to execute instructions associated with the data, which when executed by the at least one processor, causes the at least one processor to:
- convert at least a portion of Layer 3 out (L3out) content having a first format into a predefined common format;
- compare at least a portion of the converted L3out content with at least a portion of content of a local logical model and at least a portion of content of a software model to yield a result;
- when the result indicates an internal subnet has been leaked by a border network device, validate that a table has a next hop for the internal subnet that identifies the border network device;
- wherein a global logical model contains instructions on how endpoints connected to a network fabric communicate within a fabric, the software model is at least a subset of the instructions from the global logical model that are specific to software operability of one or more network devices within the fabric, and the local logical model is at least a portion of the global logical model that is specific to hardware operability of the one or more network devices;
- wherein the content of the software model and the local logical model subject to the comparison are either natively in the predefined common format or were previously converted to the predefined common format.
5 more elements
A method comprising:
- converting at least a portion of Layer 3 out (L3out) content having a first format into a predefined common format;
- comparing at least a portion of the converted L3out content with at least a portion of content of a local logical model and at least a portion of content of a software model to yield a result;
- and
- when the result indicates an internal subnet has been leaked by a border network device, validating a table has a next hop for the internal subnet that identifies the border network device;
- wherein a global logical model contains instructions on how endpoints connected to a network fabric communicate within a fabric, the software model is at least a subset of the instructions from the global logical model that are specific to software operability of one or more network devices within the fabric, and the local logical model is at least a portion of the global logical model that is specific to hardware operability of the one or more network devices;
- wherein the content of the software model and the local logical model subject to the comparison are either natively in the predefined common format or were previously converted to the predefined common format.
3 more elements
At least one non-transitory computer readable medium in non-transitory media that includes code that, when executed by at least one processor, cause the at least one processor to perform operations comprising:
- convert at least a portion of Layer 3 out (L3out) content having a first format into a predefined common format;
- compare at least a portion of the converted L3out content with at least a portion of content of a local logical model and at least a portion of content of a software model to yield a result;
- and
- when the result indicates an internal subnet has been leaked by a border network device, validate that a table has a next hop for the internal subnet that identifies the border network device;
- wherein a global logical model contains instructions on how endpoints connected to a network fabric communicate within a fabric, the software model is at least a subset of the instructions from the global logical model that are specific to software operability of one or more network devices within the fabric, and the local logical model is at least a portion of the global logical model that is specific to hardware operability of the one or more network devices;
- wherein the content of the software model and the local logical model subject to the comparison are either natively in the predefined common format or were previously converted to the predefined common format.
3 more elements
Dependencies are inferred from the claim text.