Tunel aan lambar lahayn: goorma cinwaan ayay amaahataa?
Tunel aan lambar lahayn waxay amaahataa cinwaanka interface kale, taasoo ka dhigaysa deeq-bixiyaha ku-tiirsanaan. Kala sooc isha dibadda, aqoonsiga la amaahday iyo prefixyada la maroojiyay.
Tunel aan lambar lahayn waxay dhaafisaa tallaabada aad ku hindiso subnet-ka interface-ka macquulka ah, laakiin si buuxda uma dhaafiso cinwaanaynta. Hirgelinta wali waxay u baahan tahay aqoonsi IP maxalli ah, sidaas darteed waxay amaahataa cinwaanka interface kale oo la habeeyay. Deeq-bixiyahaas hadda waa qayb ka mid ah naqshaddaada: haddii cinwaankiisu is beddelo ama interface-kiisu kacsado, hab-dhaqanka IP ee tunelka ayaa raacaa. Saddex go'aan ayaa isku dhafan qoraallada badankood, kala-soociddooduna waxay ka hortagtaa habayn u eg mid sax ah oo aan waxba marin.
U tixgeli deeq-bixiyaha doorasho naqshadeed, ma aha faahfaahin xog-odhan.
Saddex doorar cinwaan, oo kala duwan
Isha dibadda waa cinwaanka u qaada baakadaha tunelka lakabka hoose, waana kan ay tahay in uu gaaro lammaanaha. Cinwaanka la amaahday waa aqoonsiga ay interface-ka macquulka ah ee aan lambar lahayn u isticmaalo socodsiinta IP marka baakadaha la furo. Prefixyada la ilaaliyo waa shabakadaha LAN ee taraafikoodu tahay in uu tunelka dhex maro, waxaana lagu dhawaaqaa borotokoolka marinka, ma aha cinwaanka tunelka. Calaamadaynta interface-ka mid aan lambar lahayn ma siiso mid ka mid ah doorarkan kuwa kale.
Kala-soociddaas waxay sharraxaysaa jahwareer caadi ah: amaahashada cinwaan ma gudbiso dhammaan qaybta Ethernet ee deeq-bixiyaha lammaanaha fog.
Doorashada interface-ka deeq-bixiyaha
Loopback ayaa badanaa ah deeq-bixiye wanaagsan sababtoo ah cinwaankiisu waa xasilloon, had iyo jeer firfircoon oo ka madax bannaan hal xiriir jireed. Amaahashada interface LAN waxay tunelka ku xidhaa xaaladda interface-kaas iyo qoondaynta cinwaanka, taasoo ah beddelka hawleed kale: ku habboon shaybaadhka, jilicsan marka LAN-ka dib loo cinwaaneeyo. Ka hor inta aanad dooran midkoodna, xaqiiji in madal taageerto shaqada aan lambar lahayn nooca tunelka aad dhisayso.
Deeq-bixiye kasta oo aad dooratid, ku qor isaga oo ku-tiirsanaan ah diiwaanka isbeddelka ee agagaarka habaynta tunelka laftiisa.
Habeey tunelka oo dib u akhri
Tusaalaha hoose waa tunel GRE dhawr-geesood ah oo ku yaal router-yada qoyska IOS, kaasoo amaahda loopback oo u jeediya isha dibadda interface-ka lakabka hoose. Aqoonsiga NHRP wuu ka duwan yahay cinwaanka la amaahday waana in si cad loo habeeyo.
interface Loopback0 ip address 10.255.255.1 255.255.255.255 interface Tunnel0 ip unnumbered Loopback0 tunnel source GigabitEthernet0/0 tunnel mode gre multipoint ip nhrp network-id 100 ! verify show interfaces Tunnel0 | include line protocol|Tunnel source show ip interface brief | include Tunnel|Loopback show ip nhrp
Marka hore akhri xariiqda interface-ka: tunel aan lambar lahayn oo sheegaya down ma marin doono iyada oo aan loo eegin cinwaanka la amaahday. Kadib hubi in deeq-bixiyuhu firfircoon yahay iyo in cinwaankiisu yahay kii aad u jeeddaysay, sababtoo ah loopback dib loo cinwaaneeyay wuxuu si aamusnaan ah u beddelaa aqoonsiga tunelku soo bandhigo.
Ku dhammee inaad hubiso shaxda marinka ee prefixyada la ilaaliyo iyo deriska tunelka dushiisa, sababtoo ah xaalad interface oo sax ah ma caddeyso helidda midkoodna.
Waxa aan cinwaanka la amaahday bixin
DMVPN waxay u baahan tahay diiwaangelinta NHRP iyo khariidadaha si spokes ay isu helaan; xariiq aan lambar lahayn wax ka mid ah ma bixiso. Xaqiijinta, gudbinta la ogolaaday iyo marinnada soo noqodka wali waa loo baahan yahay, borotokoolka marinkuna waa in uu tunelka ka samaystaa deris ka hor inta aan la isweydaarsan prefix kasta. Mid kasta oo ka mid ah kuwaas wuu dhici karaa iyada oo interface-ku sheegayo in uu firfircoon yahay, taas ayaa sababta xaqiijintu uga socoto cinwaan ilaa khariidad ilaa marin.
Xog-odhanka amarrada iyo xeerarka cinwaanaynta sidoo kale way kala duwan yihiin badeecada iyo sii-deynta, marka la qabsado qaabka interface-ka qalabka hortaada halkii aad ka koobi lahayd habayn madal kale. Hadafku wuu isku mid noqon karaa halka xariiqaha loo baahan yahay aysan ahayn.
Ku qor deeq-bixiyaha, isha dibadda iyo prefixyada la dhawaaqay dukumeentiga tunelka, kadib ku dar hal hubin oo si cod dheer u guuldareysta haddii cinwaanka deeq-bixiyaha is beddelo. Hubintaas keliya waxay qabataa habka guuldarada ee naqshadaha aan lambar lahayn ay ugu badan yihiin inay qariyaan.