Protocol Support Matrix
This page is the public support map for netverdict’s simulation engine. It separates protocol behaviour from command parsing and from full vendor emulation.
Support labels
Section titled “Support labels”| Label | Meaning |
|---|---|
| Supported | Implemented as runtime behaviour and covered by simulator state, CLI, or tests. |
| Behaviour model | The important network outcome is modelled, but not every packet or vendor edge case. |
| Config model | Parsed, stored, emitted, or shown, but not yet a full live protocol runtime. |
| Partial | Useful subset implemented; limits are called out. |
| Not modelled | Accepted as out of scope or planned later. |
Routing and MPLS
Section titled “Routing and MPLS”| Protocol / feature | Level | Standards / references | Notes |
|---|---|---|---|
| IPv4 static routing | Supported | RFC 791 behaviour | Recursive lookup, interface routes, admin distance, VRF-aware routes. |
| IPv6 static routing | Supported | RFC 8200 behaviour | Address and egress-interface next-hop forms. |
| OSPFv2 | Supported | RFC 2328, RFC 3101 | See OSPFv2. |
| OSPFv3 | Behaviour model | RFC 5340 | IPv6 OSPF routing with interface-to-area bindings. |
| BGP-4 | Supported | RFC 4271 | See BGP-4. |
| MP-BGP VPNv4 | Supported | RFC 4364 | VRF RD / RT import-export, VPNv4 route carriage, VPN labels. |
| EIGRP | Behaviour model | RFC 7868 | Deterministic solver for classic lab topologies; not a full DUAL event model. |
| RIPv2 | Behaviour model | RFC 2453 | Deterministic route computation for configured networks. |
| RIPng | Behaviour model | RFC 2080 | IPv6 RIP-style solver. |
| IS-IS | Behaviour model | ISO 10589 style | Basic routing solver and config surface; advanced TE/auth/leaking omitted. |
| BFD | Supported | RFC 5880 | Gates OSPF and BGP sessions when enabled. |
| MPLS dataplane | Supported | RFC 3031 behaviour | Ethernet MPLS frames, label push/swap/pop, PHP, TTL modes. |
| LDP | Supported | RFC 5036 | Discovery, neighbour state, label mapping for IGP /32s. |
| 3rd-party MPLS cloud | Behaviour model | Provider abstraction | Black-box provider PoPs redistribute customer BGP by matching route targets. |
Switching and Layer 2
Section titled “Switching and Layer 2”| Protocol / feature | Level | Standards / references | Notes |
|---|---|---|---|
| Ethernet switching | Supported | IEEE 802.3 behaviour | MAC learning, flooding, unicast forwarding. |
| VLANs and trunks | Supported | IEEE 802.1Q | Access ports, trunks, allowed VLANs, native VLANs, SVIs. |
| STP / PVST / RSTP / MST | Behaviour model | IEEE 802.1D / 802.1w / 802.1s | Deterministic root and blocking decisions; no full BPDU stream replay. |
| EtherChannel | Supported | Cisco-style bundles | Static bundles plus LACP / PAgP-style member selection. |
| LACP | Behaviour model | IEEE 802.1AX | Bundle eligibility and selected/unselected member state. |
| CDP | Behaviour model | Cisco Discovery Protocol | Neighbour discovery and show output. |
| LLDP | Behaviour model | IEEE 802.1AB | Neighbour discovery and show output. |
| VTP | Config / behaviour model | Cisco VTP | VLAN propagation model for supported modes. |
| UDLD | Behaviour model | Cisco UDLD | Error-disable style handling and reset surface. |
| Port security | Supported | Cisco switching feature | Static/sticky MACs, maximum, violation modes. |
| DHCP snooping | Behaviour model | L2 security feature | Trust ports and binding table from DHCP ACKs. |
| BPDU guard / storm control | Behaviour model | L2 protection features | Config and deterministic inconsistency/blocking effects. |
| 802.1X / MAB | Behaviour model | IEEE 802.1X | Port authorization state with fixture supplicants, guest/failure paths. |
Security and policy
Section titled “Security and policy”| Protocol / feature | Level | Standards / references | Notes |
|---|---|---|---|
| IPv4 ACLs | Supported | Cisco ACL semantics | Standard and extended ACLs, port operators, ranges, interface binding. |
| IPv6 ACLs | Supported | Cisco IPv6 ACL semantics | Named IPv6 ACLs and interface traffic filters. |
| Object groups | Supported | Cisco-style policy objects | Network and service objects in ACL evaluation. |
| Time ranges | Supported | Cisco-style time-range | ACL entries can be gated by simulation time. |
| Zone-based firewall | Behaviour model | Cisco ZBFW style | Class maps, policy maps, zone pairs, inspect/drop/pass behaviour. |
| NAT / PAT | Supported | RFC 3022 behaviour | Static NAT and overload PAT with inside/outside interfaces. |
| ASA twice NAT | Behaviour model | Cisco ASA NAT style | Parser and runtime translation for modelled ASA cases. |
| GRE | Supported | RFC 2784 behaviour | IPv4 GRE tunnels with tunnel source/destination. |
| IPsec / IKEv2 | Behaviour model | IKE/IPsec tunnel mode | SA solver, ESP forwarding, PSK-style tunnel scenarios; not full crypto negotiation. |
| QoS classification / marking | Behaviour model | DSCP / policy-map model | Class-map and policy-map parsing, DSCP marking, policing/shaping fields. No packet scheduler. |
| Route policy | Supported | Prefix-list / route-map model | Shared by BGP, OSPF redistribution, and import analysis. |
Services, management, and telemetry
Section titled “Services, management, and telemetry”| Protocol / feature | Level | Standards / references | Notes |
|---|---|---|---|
| ARP | Supported | RFC 826 | Request/reply, cache, retry behaviour. |
| IPv6 ND | Supported | RFC 4861 | Neighbour solicitation/advertisement and cache. |
| SLAAC | Behaviour model | RFC 4862 | IPv6 autoconfiguration solver. |
| DHCPv4 | Supported | RFC 2131 | Server, client, relay, leases, default route install. |
| DHCPv6 | Behaviour model | RFC 8415 style | Solver and CLI surface for IPv6 lease scenarios. |
| ICMP / ping | Supported | RFC 792 / ICMPv6 | Echo and deterministic ping results. |
| Traceroute | Behaviour model | TTL / hop walk | Deterministic FIB-walk output. |
| DNS | Behaviour model | UDP/53 | Resolver / wire model for supported records and tests. |
| NTP | Supported | RFC 5905 behaviour | Associations, peers, stratum solver, prefer, source interface, auth, access-groups, and show output. |
| SNMP / traps | Behaviour model | SNMP-style telemetry | Community config and trap dispatch buffer. |
| Syslog | Behaviour model | RFC 5424-style events | Event log plus UDP/514 dispatch path. |
| AAA / TACACS+ / RADIUS | Behaviour model | Auth service model | Login/enable authorization and external service simulations. |
| SSH | Behaviour model | CLI transport | Device-to-device SSH session stack and authentication flow. |
| HTTP / TFTP / SCP | Behaviour model | Management services | Wire or executor surfaces for supported operational scenarios. |
| NetFlow | Config / behaviour model | Flow telemetry | Flow tracking surface; not a full exporter implementation. |
| IP SLA / object tracking | Behaviour model | Cisco IP SLA style | Tracking feeds HSRP / VRRP and failover scenarios. |
| HSRP | Supported | RFC 2281 style | Active/standby election, virtual IP/MAC, preempt, track decrement. |
| VRRP | Supported | RFC 5798 style | IPv4 and IPv6 virtual router election behaviour. |
| GLBP | Behaviour model | Cisco GLBP | AVG / AVF style model and wire output for supported scenarios. |
| Wireless / CAPWAP | Behaviour model | WLAN controller model | Profiles, AP/controller state, selected EAP and mobility scenarios. |
Deep dives
Section titled “Deep dives”Routing: IPv4 / IPv6, OSPFv2, OSPFv3, BGP-4, EIGRP, RIPv2, RIPng, IS-IS, BFD, PIM / IGMP, and MPLS / LDP / RSVP.
Switching and L2: VLANs, STP, EtherChannel / LACP / PAgP, CDP / LLDP, and Layer-2 security.
Security and policy: ACLs, NAT, Zone-based firewall, GRE / IPsec, QoS, and Route policy.
Services, management, and telemetry: ARP / IPv6 ND, DHCP, DNS, NTP, ICMP / ping / traceroute, HSRP / VRRP / GLBP / IP SLA, AAA, Management services, Telemetry and logging, and Wireless / CAPWAP.