Isikhathi se-BGP sikhona, indlela yekhasimende iphukile: I-MPLS phezu kwe-DMVPN

Ukuxhumana kwama-peer kukhona amasonto amaningi, inani lama-prefix libukeka lilungile, kodwa ithrafikhi yekhasimende elilodwa isahamba ngendlela ende noma ayifiki nhlobo. Izinto ezimbili ezihlukene zihlolwa isibonakaliso esisodwa. Isikhathi se-BGP sibika ukuthi ama-peer amabili angashintshana imiyalezo ngoxhumano lwe-TCP; asisho lutho mayelana nokuthi i-overlay ingakwazi yini ukuthwala iphakethe elinelebula lalelo khasimende.

Leyo gekheke yombonakala kalula kumklamo we-MPLS phezu kwe-DMVPN, lapho indlela ye-hub nendlela eqondile ye-spoke zingaziphatha ngendlela ehlukile ngenxa yezizathu ezingenakho ukuhlangana nokuxhumana kwama-peer.

Isikhathi sifakazelani ngempela

I-BGP isebenza phezu kwe-TCP, ngakho i-peer ngayinye idinga umzila oya ekhelini lomunye umkhawulo ngaphambi kokuba enye into yenzeke. Uma ukhetha i-loopback njengalowo mkhawulo, ususungule isidingo sokufinyeleleka, hhayi isiqinisekiso sokudlulisa. Isikhathi singase sihlale sikhona ngokusebenzisa i-interface ithrafikhi yekhasimende engasoze iyisebenzise.

Bhala amaqiniso amane ezinhlangothini zombili ngaphambi kokuphetha: ikheli lomthombo wesikhathi, ikheli lendawo, umongo wokuhambisa umzila okulo, nokuthi iyiphi i-interface i-kernel noma i-router engayikhetha kulelo bhangqa. Lawa maqiniso achaza izinga lokulawula. Amaphakethe ekhasimende engeza i-VRF, isitaki samalebula nokumephu kwe-overlay phezu kwako.

Izindlela ezine, hhayi eyodwa

Imibhalo ye-Cisco mayelana ne-MPLS phezu kwe-DMVPN ihlukanisa izingxenye ngokucacile. I-MP-BGP isabalalisa amalebula e-overlay ekhasimende phakathi kwamadivayisi asemaphethelweni omnikezeli. I-MPLS isebenzisa lawo malebula ukukhetha umongo wokudlulisa wephakethe. I-NHRP imephu ikheli le-overlay kuya emkhawulweni wokuthutha odingwa ithunele eguqukayo. I-IPsec ivikela indlela yama-peer lapho kusebenza khona.

Noma yikuphi kwalokhu kune kungase kulunge ngenkathi okunye kungalungi, futhi inhlanganisela yikho okuthwala ithrafikhi. Ukushintshana kwemizila kungase kuqede ngenkathi ukuxhumana kwamalebula kwe-VRF eyodwa kungekho, ngenkathi ukumephu kwe-NHRP kukhomba ikheli lokuthutha eliphelelwe yisikhathi, noma ngenkathi ithunele likhona kodwa kungekho nqubo evumela iphakethe langaphakathi. Azikho kulezi zimo eziwisa isikhathi.

Qhathanisa indlela ye-hub nendlela emfushane, ukuguquguquka okukodwa ngesikhathi

Gxila kumsingathi womthombo, umsingathi wendawo kanye ne-VRF, bese ulandela umfudlana ofanayo kabili. Endleleni ye-hub bhala i-hop elandelayo, ilebula lesevisi elibona umongo wekhasimende elikude, nokumephu kwe-overlay-kuya-kokuthutha okusetshenziswayo. Endleleni eqondile ehlosiwe bhala lezo zinto zintathu. Umehluko phakathi kwezinhlu ezimbili yiwo iphutha, noma ukungabi khona kwalo.

Gcina umfudlana unjalo ngesikhathi sokuqhathanisa. Ukushintsha umsingathi womthombo, i-VRF noma indawo phakathi kokubhekwa kudala izindaba ezimbili ezingahlobene, futhi yiyo leyo indlela evamile yokuthi lo msebenzi wehluleke.

Gcina izivivinyo ze-loopback egumbini lazo

I-ping ethunyelwa kusuka ku-loopback ye-router iyisivivinyo esiwusizo, futhi ihlola isimo esihlukile kunomfudlana ovela kumsingathi. Ikheli lomthombo ngele-router, umongo walo wokuhambisa umzila ungase ube ngowomhlaba wonke esikhundleni se-VRF, futhi indlela yimpendulo ingase ihluke kuleyo i-prefix yekhasimende engayihamba. Ngakho i-loopback ephendulayo kanye nohlelo olusebenza ngendlela emfushane kuyimiphumela ehlukene, futhi ngumphumela wesibili kuphela ochaza ikhasimende.

Zivivinye zombili, bese uzimaka ngokwehlukana emanothini akho. Uma zingavumelani, ufunde okuthile okuqondile mayelana nalapho umklamo uphambuka khona, futhi lokho kungaphezu kwalokho uphawu olulodwa oluluhlaza olungasho.

Izimangalo zenguqulo nezamaphutha zidinga ubufakazi bazo

Imibiko yasensimini ngezinye izikhathi incoma ukushintsha imaski yomsingathi noma ikheli lomthombo le-BGP, futhi leyo mibiko ifanele ifundwe kanye nephutha eyabhalelwa lona kanye nezinguqulo ezithintekile. Isisombululo sokuvelela esivela kunguqulo eyodwa akusona isitatimende sokuthi umklamo awusekeli noma iyiphi i-prefix engu-/32.

Sebenzisa imibhalo ehambisana nesigaba sakho se-DMVPN, inkundla nenguqulo, futhi khumbula ukuthi isahluko esisodwa singase sihlanganise izinhlelo eziningi, kuhlanganise ne-FlexVPN. Isibonelo esivela kuhlelo olulodwa asidluleli ngokuthula kolunye. Khetha iziphetho zesikhathi zomklamo wezinga lokulawula owudinga ngempela, bese uqinisekisa indlela yokudlulisa yekhasimende ngokwehlukana, ngoba ukubhala kabusha yonke imaski ye-loopback akusikho ukuthatha isikhundla kokuthola ukuthi yimuphi umsebenzi ohlulekile.