Gadar TAP don VLAN ɗaya: haɗa subinterface ɗin

Abokin ciniki na TAP da ya isa LAN kafin VLAN kuma ya tsaya bayan haka yawanci yana da gada da har yanzu tana ɗauke da interface ɗin da ba daidai ba. Tura firam ɗin ba ya ƙara alamar VLAN, don haka firam ɗin abokin ciniki marar alama da aka tura zuwa uplink na zahiri yana isowa a tashar trunk ba tare da alama ba kuma ko dai an watsar da shi ko ya faɗa cikin VLAN ta asali. Kasancewar subinterface ɗin a wani wuri a kan host ɗin ba ya canza kome a jerin membobin gada. Wannan shi ne tatsuniya da ya kamata a kashe da farko: interface ɗin da ya mallaki alamar shi ne yake yin ta, ba host ɗin ba saboda kawai yana da ita.

Faɗaɗa VLAN ɗaya yana nufin yanki ɗaya na layer-2, kuma gadar dole ta shiga wannan yankin maimakon trunk ɗin da ke ɗaukar duka.

Alamar ba ta bayyana saboda ka haɗa trunk ɗin

Ɗauki uplink na Linux eno1 da ke ɗauke da VLAN 120 zuwa switch mai sarrafawa. Tsarin da ke aiki don VLAN ɗaya shi ne haɗa tap_vpn zuwa br_vpn, inda br_vpn ke ɗauke da eno1.120 maimakon eno1. Subinterface ɗin VLAN yana sanya alamar a kan fitarwa kuma yana cire ta a kan shigowa, don haka gada tana ganin firam marasa alama kawai don wannan VLAN ɗaya. A maimakon haka sanya interface ɗin zahiri a cikin gada, kuma waɗannan firam ɗin suna fita ba tare da alama a tashar trunk, wanda ba shi ne abin da ka shirya ba.

Haɗa trunk ɗin tare da kashe tacewar VLAN ba gajeriyar hanya ba ce zuwa sakamako ɗaya. Yana ba gadar kowace VLAN a kan wannan waya, har da waɗanda bai kamata abokan ciniki su gani ba.

Tsare-tsare biyu halal, mai alama ɗaya

Gadar da ta san VLAN ita ce ɗaya ingantacciyar shiri: trunk ɗin yana shiga tashar gada, kuma memba na kowace tasha, PVID da saitunan fitarwa mai alama suke yanke shawara wace VLAN za ta wuce. A can gadar ce ke da alamar, kuma ƙara subinterface ɗin VLAN a ƙasa zai sanya mai shi na biyu don aiki ɗaya. Duk tsare-tsaren biyu suna aiki; guntu-guntun duka biyu ba sa aiki. Yanke shawara wane abu ne ke sanya alamar kafin ka gyara kowane jerin membobi.

Tashar switch ɗin dole ta dace da tsarin da ka zaɓa. Tashar access da ke ɗauke da VLAN ba tare da alama ba tana dacewa da interface ɗin zahiri a matsayin haɗi, yayin da tashar trunk ke dacewa da subinterface mai alama. Ƙara subinterface zuwa tashar access da ba ta dace ba ba ya gyara kome.

Motsa adireshin tare da membobin

A tsarin subinterface, adireshin host ɗin don subnet ɗin da aka haɗa na br_vpn ne, ba na tashar VLAN baiwa inda zai iya kasancewa a baya ba. Barin shi a tashar zai iya nuna yana aiki sannan ya yi halin ban mamaki, domin gada tana turawa a layer 2 yayin da adireshin ke zaune a kan memba. Motsa shi a matsayin ɓangare na canjin memba ba a matsayin gwaji daban ba.

Motsa adireshi na iya yanke hanyar gudanarwa. Kafa hanyar dawo da kai mai zaman kanta, ajiye tsarin da ake da shi ta hanyar manajan cibiyar sadarwar rarraba ɗin kanta, kuma ka guje wa script ɗin farawa mai hamayya wanda zai yi yaƙi da shi bayan haɓakawa na gaba.

Adireshin abokan ciniki yana buƙatar irin wannan kulawa. VPN ɗin da aka haɗa yana sanya abokan ciniki a cikin subnet ɗin da aka faɗaɗa, don haka tafki ba dole ba ya yi karo da sauran haya ko rabon da aka tsayar, kuma shirin da DHCP ke hidima dole ya zama wanda LAN ke fata da gaske. Hanyar layer-2 mai aiki ba ta ce kome ba game da adireshi masu maimaitawa.

Tabbatar da membobin kafin ka zargi hanyoyin

Karanta halin yanzu maimakon abin da aka yi niyya: ip -d link show dev eno1.120 yana buga id ɗin VLAN da mahaifinsa, ip link show master br_vpn yana lissafa membobin gada, kuma bridge vlan show yana bayar da rahoton memba na kowace tasha da yadda ake fitarwa. A tsarin subinterface, tabbatar cewa na'urar TAP da na'urar VLAN su ne membobin. A gadar da ta san VLAN, duba manufar tashar kanta, domin kasancewar gada ba ya tabbatar da abin da take halatta.

Sannan gwada abokin ciniki ɗaya da aka halatta da sabis a cikin wannan VLAN, ka tuna cewa ARP, manufar wuta da hanyar amsa batutuwa ne daban da membobin. Idan kana ɗaukar fakiti, lura cewa offload na kayan aiki na iya canza inda alamun VLAN ke bayyana a cikin burbushin. Riƙe kuma fannin da gaskiya: abokin ciniki na TUN mai hanya ba ya zama memba na VLAN ta kowace canjin gada, kuma zirga-zirgar abokin ciniki-zuwa-abokin ciniki ba ya maye gurbin haɗin host ɗin da VLAN.