Physical assets in a network are graphically modeled and controlled using a monitoring and control interface. Prior to committing configuration changes to the physical assets, the draft configuration changes are analyzed to determine if they violate any logical configuration change rules. The logical configuration rules can be model-based according to target physical asset(s) for the draft configuration changes. A logical configuration change rule violation can be graphically displayed on the monitoring and control interface. The configuration changes can be stored to debug the physical assets and to roll back the configuration of the physical assets to a prior state.