Embodiments of the invention provide a method and an apparatus for automatic verification of a network access control construct for a network switch. In one method embodiment, the present invention accesses an actual network access control construct on a network switching device, the actual network access control construct for defining the device actually coupled with the network switching device. Additionally, a machine-readable map of the network is accessed, the map providing a pre-determined network access control construct defining the device which should be coupled with the network switching device. A validation is performed, wherein the validation verifies that the actual network access control construct on the network switching device correlates with the pre-determined network access control construct defined by the machine-readable map.