Ensuring Consistency of Simulink Models with Requirements