Networks and devices may communicate with each other using virtual connections. In one embodiment, a computer-implemented model is generated and includes a representation of the path of a virtual connection. The path of a virtual connection, such as an IP tunnel, is traced between its source and destination. The physical connection corresponding to such IP tunnels are found by tracing through the device configuration and routing tables at routers in the network. The path between the source and destination devices is traced until the path is terminated at the destination device, or at an interface to an external network. If the path ends at an external network, the path is traced from the destination device toward the source device until a corresponding interface to the external network is reached.