Network verification method and apparatus
A network verification system obtains configuration data of a plurality of network devices, where a data model of the configuration data is described by using a general data modeling language independent of the network devices; and the network verification system verifies data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices. The network verification system verifies the data links between the plurality of network devices based on the topology structure between the plurality of network devices and the configuration data described by using the general data modeling language independent of the network devices. This helps improve scalability of the network verification system and avoids relatively poor scalability of network simulation software that occurs when conventional network simulation software provides a template for configuration data of each type of network device.
1. A network verification method, comprising:
obtaining, by a network verification system, configuration data of a plurality of network devices, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices; and
verifying, by the network verification system, data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices by:
calculating, by the network verification system based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and
verifying, by the network verification system, the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices.
2. The method according to claim 1 , wherein the data model comprises a common data attribute and an extensible data attribute, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute.
3. The method according to claim 1 , wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and the method further comprises:
performing, by the network verification system, configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device.
4. The method according to claim 1 , wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data.
5. The method according to claim 1 , wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the obtaining, by a network verification system, of the configuration data of a plurality of network devices on a network comprises:
receiving, by the network verification system, a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device.
6. A network verification apparatus, comprising:
an input/output interface configured to obtain configuration data of a plurality of network devices on a network, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices;
a memory configured to store instructions; and
a processor, configured to execute the instructions to: verify data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices, wherein the processor is configured to execute the instructions to:
calculate, based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and
verify the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices.
7. The apparatus according to claim 6 , wherein the data model of the configuration data comprises a common data attribute of the configuration data and an extensible data attribute of the configuration data, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute.
8. The apparatus according to claim 6 , wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and
the processor configured to execute the instructions to perform configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device.
9. The apparatus according to claim 6 , wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data.
10. The apparatus according to claim 6 , wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the processor is configured to execute the instructions to:
receive a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device.
11. A network system comprising a network verification system and plurality of network devices, the network verification system is configured to:
obtain configuration data of a plurality of network devices, wherein the configuration data of the plurality of network devices is at least one of configuration data that has been configured for the network devices, configuration data that is to be configured for the network devices, and configuration data that is to be updated for the network devices, wherein a data model of the configuration data is described by using a general data modeling language independent of the network devices; and
verify data links between the plurality of network devices based on the configuration data of the plurality of network devices and a topology structure between the plurality of network devices by:
calculating, based on the configuration data of the plurality of network devices and the topology structure between the plurality of network devices, a route to obtain routing forwarding entries of the plurality of network devices; and
verifying the data links between the plurality of network devices based on the routing forwarding entries of the plurality of network devices.
12. The network system according to claim 11 , wherein the data model comprises a common data attribute and an extensible data attribute, the common data attribute comprises one or more of the following data attributes: a configuration name, a device type, a device interface, a device Internet Protocol (IP) address or a virtual private network routing and forwarding table, and the extensible data attribute comprises a private data attribute.
13. The network system according to claim 12 , wherein the configuration data of the plurality of network devices comprises configuration data of a first network device, and the network verification system is further configured to:
perform configuration verification on the first network device based on the configuration data of the first network device, wherein the configuration verification is to verify one or more data attributes of a data model of the configuration data of the first network device.
14. The network system according to claim 13 , wherein the configuration data of the plurality of network devices comprises: to-be-configured configuration data, configured configuration data, and to-be-updated configuration data.
15. The network system according to claim 14 , wherein the plurality of network devices comprises a second network device, the general data modeling language is a YANG model, and the network verification system is further configured to:
receive a Network Configuration Protocol (NETCONF) packet, wherein the NETCONF packet comprises configuration data of the second network device, and the configuration data of the second network device is used to configure the second network device, or update configuration of the second network device.