Ma u baahan tahay Azure VNet oo peering lagu xidhay VPN gateway u gaar ah?

Waxaa soo baxa spoke VNet cusub, hub waxay hore u leedahay gateway site-to-site shaqeynaya, su'aasha cadna waa haddii ay tahay inaad bixiso gateway labaad. Badanaa maya: transit gateway waxay u ogolaataa spoke inay isticmaasho gateway-ga hub-ka iyada oo loo marayo peering. Saddex shuruudood ayaa go'aamiya haddii taas ay shaqeyn doonto, midkoodna lagama arko calaamadda xaaladda peering. Xiriirka peering iyo fasaxa isticmaalka gateway-ga qof kale waa goobooyin gaar ah, sidaas darteed laba VM oo hore isu pingi kara waxba kama caddeeyaan jidka VPN.

Shuruudda koowaad: gateway-ga, iyo la'aanta mid ku yaal spoke

Azure waxay taageertaa transit gateway ee SKU-yada VPN Gateway ee aan Basic ahayn, oo peering gobol iyo mid caalami ah labaduba way qaadi karaan. Spoke waxay isticmaashaa gateway aan iyada lahayn, sidaas darteed ma yeelan karto mid u gaar ah: haddii gateway hore ugu jiro spoke, ama ikhtiyaarka gateway fog hore loo doortay, dejinta transit ee aad rabto waxay noqon doontaa mid aan la heli karin ama aan waxtar lahayn. Hubi taas ka hor intaadan wax debuggin, sababtoo ah sanduuqa calaamadeynta oo aan shaqeynayn waa calaamad, ma aha cilad. Marka hore akhri SKU iyo gateway-ga jira, ka dib eeg dejinta peering.

Ha tirtirin gateway spoke jira si ikhtiyaarku u muuqdo ilaa aad ogaato waxa ku tiirsan. Nidaamka guuritaanku waa muhiim ka badan yahay sanduuqa calaamadeynta.

Shuruudda labaad: hal dejin oo ku yaal jid kasta oo peering ah

Peering waa laba shay, mid kasta oo VNet ah, dejinta transit-na waxay ku nool yihiin dhinacyo kala duwan oo lammaanahaas ah. Peering-ga hub-ka ee dhanka spoke waa inuu u ogolaado gateway-ga hub-ka inuu u adeego spoke; peering-ga spoke-ka ee dhanka hub waa inuu aqbalaa gateway-ga hub-ka. hagaha transit gateway ee Microsoft wuxuu u magacaabaa jihada, taasna waa dariiqa kaliya ee lagu hayo iyaga oo sax ah:

Kontoroolka lagu calaamadeeyay remote wuxuu beddelaa macnaha iyadoo ku xiran peering-ga VNet ee aad wax ka beddelayso, sidaas darteed akhri jihada, ma aha ereyga. Deji labada dhinac, kaydi oo xaqiiji in peering-ku soo sheegayo xiriir labada goobood.

Shuruudda saddexaad: booska ciwaanka iyo xadka fasaxyada

Transit ma samayn karto in isla horgalaha meesha loo socdo uu micneeyo laba shabakadood, sidaas darteed xadka hub-ka, spoke iyo shabakadda maxalliga ah waa inay kala duwanaadaan ka hor inta mid ka mid ah tani uusan shaqeyn. VNet-yadu waxay sidoo kale ku jiri karaan rukhsadaha ama kireystayaasha kala duwan; taasi ma aha mamnuuc, laakiin aqoonsiga abuura ama cusboonaysiiya peering kasta wuxuu u baahan yahay fasaxyada loo baahan yahay ee shabakaddaas. Isbeddelada ka dhexeeya rukhsadaha badanaa waxay ku guuldareystaan fasaxa, khaladkana way fududahay in si khaldan loo akhriyo dhibaato topology.

Qor xadka iyo milkiilayaasha ka hor isbeddelka. Qiyaasta mid kasta oo iyaga ka mid ah waxay soo saartaa peering isku xira oo aan waxba marin.

Ku xaqiiji dariiqooyinka waxtarka leh, ma aha xaaladda peering

Eeg dariiqooyinka waxtarka leh ee interface-ka shabakadda shaqada spoke oo hel horgalaha dhabta ah ee shabakadda maxalliga ah. Hubi shaxda dariiqooyinka subnet-ka iyo haddii faafinta dariiqooyinka gateway ay shaqeynayso, sababtoo ah dariiqa isticmaale ku qeexay ama qalabka kormeerka ayaa ka sarreeya dariiqa calaamadaha peering soo jeediyaan. Kadib xaqiiji jihada kale: shabakadda maxalliga ah waa inay ogaato sida loo gaaro horgalaha spoke iyada oo loo marayo xiriirka site-to-site, ha ahaato iqraamada la bartay ama dariiq cad iyo gelitaan shabakad la ilaaliyay oo u dhigma qalabka macmiilka. Haddii horgalaha ka maqan yahay dhinac kasta, calaamadaha peering ma aha waxa la beddeli lahaa.

Tijaabi hal adeeg oo ka yimaada shaqada spoke oo raac jawaabta. Tijaabada ka timaada gateway-ga VPN ama VM hub waxay isticmaashaa horgale isha iyo dariiq kale.

Haddii topology-ga sidoo kale u adeego macmiilka point-to-site, si gooni ah u xaqiiji dariiqooyinkooda rakiban. Windows macmiil xirmooyinku waxaa laga yaabaa inay u baahan yihiin dib-u-soo-saaris ka dib isbeddel topology, taasna waa hawsha dariiqa macmiilka ee ma aha caddayn in wadaagga gateway-ga uu fashilmay.

Waxa aan wadaagga gateway-ga bixin

Transit gateway waa fududaan dariiqa, ma aha oggolaansho. Kooxaha amni ee shabakadda, shaandheeyayaasha maxalliga ah iyo xeerarka heerka adeegga ayaa wali go'aamiya waxa shaqada spoke gaari karto, sidaas darteed hawlgeliso adeegga gaarka ah ee isha-ilaa-meesha halkii aad ka fikiri lahayd in tunnel-ka la wadaago uu oggolaado wax kasta oo ka dambeeya.

Peering sidoo kale ma aha mid gudbiya sida dadku rajaynayaan. Ku darista spoke kale, ama dhibic dhamaad ah oo gaar ah, waxay keentaa shuruudo dariiqa iyo gelitaan u gaar ah oo aanay dejinta transit-ka jira daboolin.