F5 yankunan hanya da MPLS VRF: tsara miƙa wa ɗan haya

Masu haya biyu suna gudanar da aikace-aikace ɗaya a 10.50.0.10. Mai bayarwa yana raba su a cikin MPLS VPN daban-daban, kuma BIG-IP yana ajiye zirga-zirgarsu na gida a cikin yankunan hanya daban-daban. Wannan tsari yana aiki har zuwa miƙawa, inda wani ƙaramin suffix da ya ɓace ko maƙasudin hanya da aka kwafa a hankali yana sanya fakitin ɗan haya ɗaya cikin mahallin ɗayan. Wannan littafin yana haɗa samfuran biyu tare kuma yana ƙare da gwaji ga kowane ɗan haya.

Takardar aiki: layi ɗaya ga kowane ɗan haya

Cika wannan kafin ka canza komai. Kowane mataki na gaba yana magana da wani tantanin da ke cikinsa, kuma tantanin da ba kome a ciki shiri ne da babu wanda ya yanke hukunci a kansa tukuna.

Mataki 1: ɗaura kowane abu ga yankin hanyarsa

Takardun F5 game da yankunan hanya sun bayyana mahallin zirga-zirgar da aka keɓe, adireshi masu maimaita, da alamar address%ID don abubuwan daidaitawa. Adireshin da aka rubuta a matsayin 10.50.0.10%2 yana ambaton mahallin yankin hanya na gida, kuma wannan suffix ba wata alama ce ta MPLS da ake ɗauka a cikin fakitin IP na abokin ciniki ba.

VLAN ko rami da aka goyi bayan yana cikin yankin hanya ɗaya a cikin samfurin da aka rubuta, don haka dole ne interfejs da adireshin su jitu. Duba kuma yankin hanya na tsoho na sashin gudanarwa, domin rashin suffix ba ya nufin babu mahalli; yana nufin mahallin da sashin yake amfani da shi ta tsohuwa. Wannan tsoho ɗaya yana bayyana yawancin al'amuran da sabon abu ya amsa cikin nutsuwa ga ɗan hayan da bai dace ba. Duba shi kafin ka ƙara adireshin kanka.

tmsh list net route-domain
tmsh list net vlan | grep -i domain
tmsh list ltm virtual one_vs

Mataki 2: yi amfani da VRF da maƙasudin hanya na mai bayarwa

A gefen MPLS, ana gane ɗan hayan ta hanyar VRF na mai bayarwa da sabis ɗin hanyar abokin ciniki da aka amince da shi. Maƙasudin hanya suna sarrafa waɗanne hanyoyi mai bayarwa ke shigo da su da fitar da su tsakanin VRF, kuma zaɓin lambar yankin hanya ta BIG-IP mai kama da ita ba ya haifar da kome daga wannan dangantaka.

Alamun biyu suna rayuwa a tsarin daban kuma suna nufin abubuwa daban. ID na yankin hanya mahalli ne na gida a kan na'urar. Maƙasudin hanya wani sifa ne na manufa a gefen mai bayarwa wanda ke yanke shawarar rarraba hanyoyi, kuma mai bambanta hanya abu ne na uku kuma, ana amfani da shi don ajiye prefis ɗaya a ware.

Mataki 3: yanke shawara ko mahallin na iya raba isa

Yi bitar binciken yankin iyaye da tsauraran keɓewa da gangan, domin suna canza abin da mahalli zai iya isa. Jagorar F5 ta yarda da turawa mai kulawa ta waɗannan dangantaka, kuma shi ya sa bai kamata a ɗauki yankin hanya a matsayin cikakkiyar manufar tsaron ɗan haya shi kaɗai ba.

Idan masu haya biyun duka suna buƙatar sabis ɗin da aka raba, ayyana hanyar da izinin da aka amince da su maimakon kai ɗan haya ɗaya kai tsaye zuwa mahallin hanyar ɗayan. Kiyaye asalin aikace-aikacen da duk wani fassarar tushe da aka yi da gangan tare da makomar cibiyar sadarwa, in ba haka ba sabis ɗin da aka raba zai ga ɗan haya ɗaya a matsayin ɗayan.

Miƙawa ta hanya ta yau da kullum tana haɗa BIG-IP da na'urar hanya ta gefen mai bayarwa ba tare da mai da BIG-IP MPLS PE ba. Idan ana buƙatar haɗin kai kai tsaye na MPLS ko dangin hanyar VPN, sami tallafi bayyananne ga ainihin dandamali da sakin, domin keɓewar yankin hanya na gida ba ta kafa wannan ƙarfin ba.

Mataki 4: tabbatar da ɗan haya ɗaya a lokaci ɗaya

Gwada ɗan haya A daga wani ƙarshen aiki a cikin mahallin A zuwa adireshin aikace-aikacen A, sannan sake maimaita ga B. Yi amfani da sifar %ID a cikin bincike don tabbatar da wane mahalli ya amsa, kuma tabbatar da cewa buƙatun daga mahallin da bai dace ba ya gaza maimakon ya sauka a wani wuri mai yiwuwa.

Duba gefen mai bayarwa a cikin wannan zagayen: prefis ɗin yana cikin VRF daidai, maƙasudin hanya sun dace da takardar aiki, kuma hanyar dawowa tana amfani da haɗin da aka nufa. Ping da ke aiki daga na'urar kanta yana tabbatar da mahallin na'urar, ba na ɗan hayan ba.

Rubuta taswirar ƙarshe a cikin takardar aiki, gami da yankin hanya na tsoho na kowane sashe da duk wata alaƙar yankin iyaye da ka kunna. Canjin na gaba a wannan muhalli zai yi shi wanda ke karanta wannan tebur, ba wanda ke karanta wannan labarin ba.