Representing and verifying network management policies using collective constraints

Abstract

A method and apparatus are provided for representing abstract network management policies and processing such policies to resolve conflicts. In one aspect, the invention provides a method of managing a network according to a plurality of network management policies, comprising the steps of storing each of the policies as a constraint that comprises one or more variables, a set of possible values, and a set of restrictions on the values that the variables can simultaneously take; storing one or more collective constraints, in which at least one of the constraints is that none of the variables may interfere with one another; applying a constraint satisfaction algorithm to the stored variables, values, restrictions, to create zero or more solutions and checking the solution set against the collective constraints; identifying a conflict in the policies when zero solutions are created and when one or more of the instance or collective constraints is violated; and resolving the conflict by modifying one or more of the variables, values or restrictions. Using a collective constraint representation, policy conflicts are rapidly identified and resolved. Resolution may be accomplished simply by adding a constraint that defines a change in a variable, value, or restriction or redefining the collective constraints.