# US 11,909,744 B2 · Network verification method and apparatus > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 11,909,744 B2 - Document ID: US11909744B2 - Status: Granted - Kind: B2 - Application number: 17/360,028 - Filed: 2021-06-28 - Published: 2021-10-21 - Granted: 2024-02-20 - Earliest claimed: 2019-04-11 - Assignees: Huawei Technologies Co., Ltd. - Applicants: Huawei Technologies Co., Ltd. - Inventors: Chao Xing; Keke Xu; Ying Chen - Web page: https://patentgrep.com/patent/US11909744B2 ## CPC - H04L 41/0853: by actively collecting configuration information or by backing up configuration information - H04L 41/0213: Standardised network management protocols, e.g. simple network management protocol [SNMP] - H04L 41/0813: characterised by the conditions triggering a change of settings - H04L 41/0866: Checking the configuration - H04L 41/0873: Checking configuration conflicts between network elements - H04L 41/0883: {Semiautomatic configuration, e.g. proposals from system} - H04L 41/12: Discovery or management of network topologies - H04L 41/142: using statistical or mathematical methods - H04L 41/145: {involving simulating, designing, planning or modelling of a network} - H04L 45/42: Centralised routing - H04L 63/0272: {Virtual private networks} - H04L 63/0876: {based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint} - H04L 63/12: {Applying verification of the received information (cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32)} - H04L 63/20: {for managing network security; network security policies in general (filtering policies H04L63/0227)} - H04L 41/045: comprising client-server management architectures - H04L 41/082: the condition being updates or upgrades of network functionality - H04L 41/0895: Configuration of virtualised networks or elements, e.g. virtualised network function or OpenFlow elements - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract A network verification system obtains configuration data of a plurality of network devices, where a data model of the configuration data is described by using a general data modeling language independent of the network devices; and the network verification system verifies data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices. The network verification system verifies the data links between the plurality of network devices based on the topology structure between the plurality of network devices and the configuration data described by using the general data modeling language independent of the network devices. This helps improve scalability of the network verification system and avoids relatively poor scalability of network simulation software that occurs when conventional network simulation software provides a template for configuration data of each type of network device. ## Claims ### Claim 1 A network verification method, comprising: obtaining, by a network verification system, configuration data of a plurality of network devices, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices; and verifying, by the network verification system, data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices by: calculating, by the network verification system based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and verifying, by the network verification system, the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices. ### Claim 2 (depends on 1) The method according to claim 1, wherein the data model comprises a common data attribute and an extensible data attribute, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute. ### Claim 3 (depends on 1) The method according to claim 1, wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and the method further comprises: performing, by the network verification system, configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device. ### Claim 4 (depends on 1) The method according to claim 1, wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data. ### Claim 5 (depends on 1) The method according to claim 1, wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the obtaining, by a network verification system, of the configuration data of a plurality of network devices on a network comprises: receiving, by the network verification system, a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device. ### Claim 6 A network verification apparatus, comprising: an input/output interface configured to obtain configuration data of a plurality of network devices on a network, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices; a memory configured to store instructions; and a processor, configured to execute the instructions to: verify data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices, wherein the processor is configured to execute the instructions to: calculate, based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and verify the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices. ### Claim 7 (depends on 6) The apparatus according to claim 6, wherein the data model of the configuration data comprises a common data attribute of the configuration data and an extensible data attribute of the configuration data, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute. ### Claim 8 (depends on 6) The apparatus according to claim 6, wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and the processor configured to execute the instructions to perform configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device. ### Claim 9 (depends on 6) The apparatus according to claim 6, wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data. ### Claim 10 (depends on 6) The apparatus according to claim 6, wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the processor is configured to execute the instructions to: receive a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device. ### Claim 11 A network system comprising a network verification system and plurality of network devices, the network verification system is configured to: obtain configuration data of a plurality of network devices, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices; and verify data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices by: calculating, based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and verifying the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices. ### Claim 12 (depends on 11) The network system according to claim 11, wherein the data model comprises a common data attribute and an extensible data attribute, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute. ### Claim 13 (depends on 12) The network system according to claim 12, wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and the network verification system is further configured to: perform configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device. ### Claim 14 (depends on 13) The network system according to claim 13, wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data. ### Claim 15 (depends on 14) The network system according to claim 14, wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the network verification system is further configured to: receive a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device.