The recent advances in network management automation and Software-Defined Networking
(SDN) facilitate network policy management tasks. At the same time, these new technologies
create a new mode of failure in the management cycle itself. Network policies are presented
in an abstract model at a centralized controller and deployed as low-level rules across
network devices. Thus, any software and hardware element in that cycle can be a potential
cause of underlying network problems. In this paper, we present and solve a network policy …

Abstract Systems, methods, and computer-readable media for localizing faults in a network
policy are disclosed. In some examples, a system or method can obtain TCAM rules across
a network and use the TCAM rules to perform an equivalency check between the logical
model and the hardware model of the network policy. One or more risk models are
annotated with output from the equivalency check and the risk models are used to identify a
set of policy objects of the network policy that are likely responsible for the faults.