Indlela engu-null ye-NX-OS EVPN: gcina ukulahla ngaphakathi kwe-tenant eyodwa

Isicelo siza njengoshintsho lomugqa owodwa: vimba ikheli elilodwa. Ufaka indlela yesibungu eya ku-Null0 ngaphakathi kwengqikithi ye-tenant, isiqalo siyanyamalala ethebulini lendawo njengoba bekulindelekile, bese kuba nemibuzo. Ingabe indlela yaphuma kudivayisi? Ingabe ama-VTEP akude alahlile, noma avele aphelelwa ukufinyeleleka? Ingabe i-tenant yesibili isithintekile manje?

Indlela eqondile yasendaweni engashintshi ihlala ihlinzeka ngempendulo yombuzo wokuqala kuphela, yingakho ushintsho lwe-blackhole empeleni luyimiphumela emithathu ebuyekezwe hhayi umyalo owodwa.

Ushintsho kufanele lukhiqize ini ngempela

Qala ngokubhala imiphumela emithathu. I-tenant ehlosiwe kufanele ilahle indawo ngaphakathi. Indlela egunyaziwe kuphela ingathunyelwa ngaphandle, futhi akukho okunye okufanele kuhamba nayo. Yonke i-VTEP eyamukelayo kufanele ikhethe isenzo sokulahla esihlosiwe hhayi omunye umzila.

Umphumela ngamunye unobufakazi bawo, futhi awekho olusho okunye. Indlela ye-Null0 yasendaweni ikhiqiza ukulahla kwasendaweni futhi, ngaphandle kokusabalalisa kabusha, ayithumeli lutho ngaphandle. Indlela esabalaliswe kabusha ngaphandle kwe-community okuvunyelwene ngayo ifika njengesiqalo esivamile futhi iyadluliswa. I-community engenawo umgomo wokwamukela ingase indatshulwe ngokuphelele.

Ukubhala imiphumela kuqala kukuvikela nasemhlulekweni ovamile: ushintsho olubonakala lusebenza ngoba indawo ibivele ingafinyeleleki ngesizathu esingahlobene. Uma ungakwazi ukuchaza ukuthi ungahlukanisa kanjani kokubili, isivivinyo sokwamukela asikahlelwa.

Isitatimende sasendaweni senza ingxenye yokuqala kuphela

Ku-NX-OS ochungechungeni lwe-10.4(x), indlela engu-null ihlezi ngaphakathi kwengqikithi ye-VRF ye-tenant hhayi kumyalo owodwa osho i-VRF. Ingxenye imfushane, futhi akusona nhlobo isethulo se-EVPN esiphelele.

vrf context TENANT_A
  ip route 192.0.2.10/32 Null0

Ikheli liyisiqalo sokuqopha, hhayi umgomo. Qaphela umehluko wesakhiwo somusho ne-IOS, lapho igama le-VRF livela khona ngaphakathi komyalo wendlela uqobo, futhi qinisekisa ifomu elisekelwayo lenguqulo oyisebenzisayo ngempela ngaphambi kokunamathisela noma yini.

Iyodwa le migqa ilahla ithrafikhi yalowo msingathi ngaphakathi kwe-TENANT_A futhi ayenzi okunye. Ayimaki indlela, ayikhethi i-BGP, futhi ayimisi i-community. Lezi yizinqumo zesethulo ezihlukene, futhi ngayinye iyindawo lapho ushintsho lungase lube mncane kakhulu ukusebenza noma lubanzi kakhulu ukuphepha.

Ukulahla kwasendaweni kuthinta nethrafikhi esemthethweni eya endaweni efanayo. Uma inhloso kuwukuvimba umthombo owodwa osebenzisa kabi ngesikhathi abasebenzisi bangempela besayidinga ikheli, indlela engu-null iyithuluzi elingalungile futhi uzokufunda lokho ocingweni lokuqala losizo.

Ukuthumela ngaphandle nokungenisa kuyizivumelwano ezihlukene

Ukusabalalisa kabusha yikhona lapho ubukhulu bunqunywa khona. Khawulela iziqalo ezifanele ekunciphiseni okuvunyelwe, kugcine ngaphakathi kwe-tenant, futhi ukhawulele ontanga bomthombo kulabo abasemklamweni. Ukusabalalisa kabusha yonke indlela engashintshi ngoba indlela eyodwa yesibungu emakiwe kufanele ihambe yiyona ndlela ushintsho lwesondlo oluba khona isigameko sokuhambisa.

I-community ye-BLACKHOLE iyisivumelwano ngenani elaziwayo, hhayi imvume yokuthi noma yimuphi umakhelwane alahle noma yiliphi ikheli. I-RFC 7999 iyichaza ngalowo magama, futhi umngcele wokwethemba mayelana nokuthi ubani angayimemezela uyingxenye yomklamo hhayi imininingwane yokusebenzisa.

Uhlangothi olwamukelayo ludinga isethulo salo. Ku-NX-OS, izindlela engu-null zohlobo lwe-5 zidinga ukucutshungulwa kwe-route-map ku-VTEP ukuze kukhethwe indlela yokulahla, okuqoshiwe kanye nezinyathelo zokuthumela ngaphandle. Idivayisi ethumelayo emaka ngendlela efanele kanye nomamukeli odlula umaka badala ushintsho olubonakala lusetshenzisiwe futhi lusadlulisa ithrafikhi.

Buyekeza i-route-map ngemiphumela eseceleni ngesikhathi usukhona. Inqubomgomo entsha evimbelayo ingacindezela ukufinyeleleka okusemthethweni kweziqalo ezingahlobene, futhi lowo monakalo uvela emuva kwe-blackhole futhi kunzima ukuwuhlobanisa nayo.

Bhala ukuhoxiswa ngaphambi kokufakwa

Rekhoda umnikazi wendawo, isizathu, ogunyazayo kanye nosuku lokuphelelwa yisikhathi ngaphambi kokuthi kusethwe noma yini. Ukulahla okungenasikhathi sokuphelelwa kuba ukufakwa okuhlala njalo okungekho muntu okhumbula umsuka wakho, futhi umuntu olandelayo ozolungisa ikheli uzokuthatha njengengxenye evamile yenethiwekhi.

Gcina indlela yokuphatha ezimele engancikile endleleni oyishintshayo. Uma ukunciphisa kuhlanganisa ikheli olisebenzisa ukufinyelela idivayisi, usudale ukuvalelwa ngaphandle okunezinyathelo ezengeziwe.

Shono ukulawula okuqondile okususa ukunciphisa, futhi uhlole lokho kususwa elabhu noma efasiteleni ongakwazi ukulikhokhela. Ukuhoxiswa okungekho muntu owakuzilolongayo kuyicebo hhayi inqubo.

Yamukela ngobufakazi, hhayi ngomphumela womyalo

Hlola isimo sokuhambisa esikhethiwe kanye nesimo sokudlulisa kuma-VTEP ahlosiwe, futhi uhlole indawo engumakhelwane okufanele ihlale ingathintekile. Qinisekisa ukuthi ayikho enye i-tenant engenise isiqalo, ngoba ukuvuza phakathi kwama-tenant yikho ukwehluleka okuguqula isenzo sesondlo sibe yisigameko.

Bese uhoxisa futhi uqinisekise ukuthi indlela evamile nensizakalo ziyabuya. Umhlahlandlela we-NX-OS EVPN wezindlela engu-null wenguqulo ye-10.4(x) uqopha ukumaka, ukusabalalisa kabusha kanye nenqubomgomo yokwamukela echazwe lapha, futhi uyisibonelo okufanele siqhathaniswe nenguqulo yakho.