-
公开(公告)号：US20240146774A1
公开(公告)日：2024-05-02
申请号：US18495305
申请日：2023-10-26
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
CPC classification number: H04L63/20 , G06F16/2246 , H04L43/08 , G06F2009/45595
Abstract: In some examples, a system creates a requirement including EPG selectors representing EPG pairs, a traffic selector, and a communication operator; determines that EPGs in distinct pairs are associated with different network contexts and, for each pair, which network context(s) contains associated policies; creates first data representing the pair, operator, and traffic selector; when only one network context contains the associated policies, creates second data representing a network model portion associated with the only network context and determines whether the first data is contained in the second data to yield a first check; when both network contexts contain the associated policies, also creates third data representing a network model portion associated with a second network context, and determines whether the first data is contained in the second and/or third data to yield a second check; and determines whether policies for the pairs comply with the requirement based on the checks.
-
公开(公告)号：US10911495B2
公开(公告)日：2021-02-02
申请号：US16217607
申请日：2018-12-12
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
Abstract: In some examples, a system creates a requirement including EPG selectors representing EPG pairs, a traffic selector, and a communication operator; determines that EPGs in distinct pairs are associated with different network contexts and, for each pair, which network context(s) contains associated policies; creates first data representing the pair, operator, and traffic selector; when only one network context contains the associated policies, creates second data representing a network model portion associated with the only network context and determines whether the first data is contained in the second data to yield a first check; when both network contexts contain the associated policies, also creates third data representing a network model portion associated with a second network context, and determines whether the first data is contained in the second and/or third data to yield a second check; and determines whether policies for the pairs comply with the requirement based on the checks.
-
公开(公告)号：US20200007584A1
公开(公告)日：2020-01-02
申请号：US16217607
申请日：2018-12-12
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
Abstract: In some examples, a system creates a requirement including EPG selectors representing EPG pairs, a traffic selector, and a communication operator; determines that EPGs in distinct pairs are associated with different network contexts and, for each pair, which network context(s) contains associated policies; creates first data representing the pair, operator, and traffic selector; when only one network context contains the associated policies, creates second data representing a network model portion associated with the only network context and determines whether the first data is contained in the second data to yield a first check; when both network contexts contain the associated policies, also creates third data representing a network model portion associated with a second network context, and determines whether the first data is contained in the second and/or third data to yield a second check; and determines whether policies for the pairs comply with the requirement based on the checks.
-
公开(公告)号：US20200007582A1
公开(公告)日：2020-01-02
申请号：US16217500
申请日：2018-12-12
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
Abstract: Systems, methods, and computer-readable media for configuring and verifying compliance requirements in a network. An example method can include receiving, via a user interface, endpoint group (EPG) inclusion rules defining which EPGs on a network should be included in specific EPG selectors; selecting EPGs that satisfy the EPG inclusion rules for inclusion in the specific EPG selectors; creating the specific EPG selectors based on the selected EPGs; creating a traffic selector including parameters identifying traffic corresponding to the traffic selector; creating a compliance requirement based on a first and second EPG selector from the specific EPG selectors, the traffic selector, and a communication operator defining a communication condition for traffic associated with the first and second EPG selectors and the traffic selector; determining whether policies on the network comply with the compliance requirement; and generating compliance events indicating whether the policies comply with the compliance requirement.
-
公开(公告)号：US10439875B2
公开(公告)日：2019-10-08
申请号：US15693220
申请日：2017-08-31
Applicant: Cisco Technology, Inc.
Inventor： Kartik Mohanram
Abstract: Systems, methods, and computer-readable media for identifying conflict rules between models of network intents. A first and second model of network intents are obtained, the models describing the operation and communication between one or more network devices in a network. A logical exclusive disjunction between the first and second models is calculated over the space of possible packet conditions and network actions defined by models, without enumerating all possible packet conditions and network actions. It is detected whether the models are in conflict with respect to at least a first network device. If the models are in conflict, it is determined whether a given rule of a plurality of rules associated with the first model is a conflict rule. The determining comprises calculating the intersection between the given rule and the logical exclusive disjunction, wherein the given rule is a conflict rule if the calculated intersection is non-zero.
-
Patent Agency Ranking
公开(公告)号：US11645131B2
公开(公告)日：2023-05-09
申请号：US15663455
申请日：2017-07-28
Applicant: Cisco Technology, Inc.
Inventor： John Thomas Monk , Kartik Mohanram , Ramana Rao Kompella , Sundar Iyer
IPC: G06F11/00 , G06F11/07 , H04L43/0823 , H04L43/065 , H04L41/0631
CPC classification number: G06F11/0712 , H04L41/065 , H04L41/0631 , H04L43/065 , H04L43/0823
Abstract: Systems, methods, and computer-readable media for fault code aggregation across application-centric dimensions. In an example embodiment, a system obtains respective fault codes corresponding to one or more network devices in a network and maps the one or more network devices and/or the respective fault codes to respective logical policy entities defined in a logical policy model of the network, to yield fault code mappings. The system aggregates the one or more of the fault code mappings along respective logical policy dimensions in the network to yield an aggregation of fault codes across respective logical policy dimensions and, based on the aggregation, presents, for each of the respective logical policy dimensions, one or more hardware-level errors along the respective logical policy dimension.
-
公开(公告)号：US20210152607A1
公开(公告)日：2021-05-20
申请号：US17157957
申请日：2021-01-25
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
Abstract: In some examples, a system creates a requirement including EPG selectors representing EPG pairs, a traffic selector, and a communication operator; determines that EPGs in distinct pairs are associated with different network contexts and, for each pair, which network context(s) contains associated policies; creates first data representing the pair, operator, and traffic selector; when only one network context contains the associated policies, creates second data representing a network model portion associated with the only network context and determines whether the first data is contained in the second data to yield a first check; when both network contexts contain the associated policies, also creates third data representing a network model portion associated with a second network context, and determines whether the first data is contained in the second and/or third data to yield a second check; and determines whether policies for the pairs comply with the requirement based on the checks.
-
公开(公告)号：US10951477B2
公开(公告)日：2021-03-16
申请号：US16595152
申请日：2019-10-07
Applicant: Cisco Technology, Inc.
Inventor： Kartik Mohanram
Abstract: Systems, methods, and computer-readable media for identifying conflict rules between models of network intents. A first and second model of network intents are obtained, the models describing the operation and communication between one or more network devices in a network. A logical exclusive disjunction between the first and second models is calculated over the space of possible packet conditions and network actions defined by models, without enumerating all possible packet conditions and network actions. It is detected whether the models are in conflict with respect to at least a first network device. If the models are in conflict, it is determined whether a given rule of a plurality of rules associated with the first model is a conflict rule. The determining comprises calculating the intersection between the given rule and the logical exclusive disjunction, wherein the given rule is a conflict rule if the calculated intersection is non-zero.
-
公开(公告)号：US20200007583A1
公开(公告)日：2020-01-02
申请号：US16217559
申请日：2018-12-12
Applicant: Cisco Technology, Inc.
Inventor： Advait Dixit , Navneet Yadav , Navjyoti Sharma , Ramana Rao Kompella , Kartik Mohanram
IPC: H04L29/06
Abstract: Systems, methods, and computer-readable media for assurance of rules in a network. An example method can include creating a compliance requirement including a first endpoint group (EPG) selector, a second EPG selector, a traffic selector, and a communication operator, the first and second EPG selectors representing sets of EPGs and the communication operator defining a communication condition for traffic associated with the first and second EPG selectors and the traffic selector. The method can include creating, for each distinct pair of EPGs, a first respective data structure representing the distinct pair of EPGs, the communication operator, and the traffic selector; creating a second respective data structure representing a logical model of the network; determining whether the first respective data structure is contained in the second respective data structure to yield a containment check; and determining whether policies on the network comply with the compliance requirement based on the containment check.
-
公开(公告)号：US20180309629A1
公开(公告)日：2018-10-25
申请号：US15663598
申请日：2017-07-28
Applicant: Cisco Technology, Inc.
Inventor： Kartik Mohanram , Chandra Nagarajan , Sundar Iyer , Shadab Nazar , Ramana Rao Kompella
Abstract: Systems, methods, and computer-readable media for static network policy analysis for a network. In one example, a system obtains a logical model based on configuration data stored in a controller on a software-defined network, the logical model including a declarative representation of respective configurations of objects in the software-defined network, the objects including one or more endpoint groups, bridge domains, contexts, or tenants. The system defines rules representing respective conditions of the objects according to a specification corresponding to the software-defined network, and determines whether the respective configuration of each of the objects in the logical model violates one or more of the rules associated with that object. When the respective configuration of an object in the logical model violates one or more of the rules, the system detects an error in the respective configuration associated with that object.
-
-
-
-
-
-
-
-
-
Search Results
35
records
(took 0.022 seconds)
