Understanding Correctness Constraints What correctness property does it address? What type of rule will verify it? One router, or multiple? Need information from other routing protocols? Need a specification of intended behavior? Need external information? Single AS, or more than one? Can static analysis catch the error?