Izizinda zomzila ze-F5 kanye ne-MPLS VRF: hlela ukudluliswa komsetshenzisi
Abasetshenzisi ababili, ikheli elilodwa, izizinda zomzila ezimbili. Phina into ngayinye nge-%ID, sebenzisa i-VRF kanye nezinhloso zomzila zomhlinzeki, futhi uhlole umsetshenzisi ngamunye ngokwehlukana.
Abasetshenzisi ababili basebenzisa uhlelo lokusebenza olufanayo ku-10.50.0.10. Umhlinzeki ubahlukanisa kuma-MPLS VPN ahlukene, futhi i-BIG-IP igcina ukuxhumana kwabo kwasendaweni ezizindeni zomzila ezihlukene. Lolu hlelo lusebenza kuze kufike ukudluliswa, lapho isijobelelo esingekho noma inhloso yomzila ekhanyiwe ibeka buthule iphakethe lomsetshenzisi oyedwa esimweni somunye. Le ncwadi yokuhola ihlanganisa izinhlobo ezimbili futhi iphetha ngokuhlolwa komsetshenzisi ngamunye.
Iphepha lokusebenza: umugqa owodwa kumsetshenzisi ngamunye
Gcwalisa lokhu ngaphambi kokushintsha noma yini. Isinyathelo ngasinye esilandelayo sibhekisa kuseli elikulo, futhi iseli elingenalutho isinqumo okungekho muntu okade wasithatha.
| Tenant | BIG-IP side | Provider side |
|---|---|---|
| A | VLAN or tunnel, route domain, self address, virtual server | VRF, attachment, route targets for import and export |
| B | Separate VLAN or tunnel, separate route domain, separate self address | Separate VRF, separate route targets |
Isinyathelo 1: phina into ngayinye esizindeni sayo somzila
Imibhalo yezizinda zomzila ye-F5 ichaza izimo zokuxhumana ezihlukanisiwe, amakheli aphindiwe kanye nombhalo we-address%ID wezinto zokumisa. Ikheli elibhalwe njenge-10.50.0.10%2 libiza isimo sendawo yesizinda somzila, futhi leso sijobelelo akusilo ilebula le-MPLS elithwalwa kuphakethe le-IP lekhasimende.
I-VLAN noma umhubhe osekelwayo ingeyesizinda somzila esisodwa kumodeli ebhaliwe, ngakho isixhumanisi nekheli kufanele kuvumelane. Hlola futhi isizinda somzila esizenzakalelayo sesigaba sokuphatha, ngoba isijobelelo esishiyelelwe asisho ukuthi asikho isimo; sisho isimo isigaba esisisebenzisa ngokuzenzakalelayo. Leyo nto eyodwa eyenzakalelayo ichaza izigigaba eziningi lapho into entsha yayiphendula buthule kumsetshenzisi ongafanele. Yihlole ngaphambi kokwengeza ikheli lakho.
tmsh list net route-domain
tmsh list net vlan | grep -i domain
tmsh list ltm virtual one_vsIsinyathelo 2: sebenzisa i-VRF kanye nezinhloso zomzila zomhlinzeki
Emaphethelweni e-MPLS, umsetshenzisi ukhonjwa nge-VRF yomhlinzeki kanye nensizakalo yomzila yekhasimende okuvunyelwene ngayo. Izinhloso zomzila zilawula ukuthi imiphi imizila umhlinzeki ayithumelayo futhi ayikhiphayo phakathi kwama-VRF, futhi ukukhetha inombolo yesizinda somzila se-BIG-IP ebukeka ifana akudali lutho kulolo budlelwano.
Izimpawu ezimbili zihlala ezinhlelweni ezihlukene futhi zisho izinto ezihlukene. I-ID yesizinda somzila iyisimo sendawo kudivayisi. Inhloso yomzila iyisici senqubomgomo ohlangothini lomhlinzeki esinquma ukusatshalaliswa kwemizila, futhi isihlukanisi somzila ingenye into yesithathu, esetshenziselwa ukugcina iziqalo ezifanayo zihlukene.
Isinyathelo 3: nquma ukuthi izimo zingabelana ngokufinyeleleka yini
Buyekeza ngamabomu izilungiselelo zokusesha kwesizinda esingumzali kanye nokuhlukaniswa okuqinile, ngoba zishintsha ukuthi isimo singafinyelela ini. Umhlahlandlela we-F5 uvumela ukudluliswa okulawulwayo ngalolo budlelwano, futhi yingakho isizinda somzila akufanele sithathwe sisodwa njengenqubomgomo ephelele yokuphepha yomsetshenzisi.
Uma bobabili abasetshenzisi bedinga insizakalo eyabiwe, cacisa umzila kanye nezimvume ezivunyelwe esikhundleni sokukhomba umsetshenzisi oyedwa esimweni somzila somunye ngokunganaki. Gcina ubunikazi bohlelo lokusebenza kanye noma yikuphi ukuhunyushwa komthombo okuhlosiwe kanye nendawo yokufika yenethiwekhi, kungenjalo insizakalo eyabiwe izobona umsetshenzisi oyedwa njengomunye.
Ukudluliswa okujwayelekile okunomzila kuxhuma i-BIG-IP kumzila womhlinzeki womphetho ngaphandle kokwenza i-BIG-IP ibe yi-MPLS PE. Uma ukuhlanganiswa okuqondile kwe-MPLS noma komndeni wemizila ye-VPN kudingeka ngempela, thola ukusekelwa okucacile kwepulatifomu nokukhishwa okuqondile, ngoba ukuhlukaniswa kwesizinda somzila sasendaweni akukusunguli lokho kwekhono.
Isinyathelo 4: hlola umsetshenzisi oyedwa ngesikhathi
Hlola umsetshenzisi A kusukela endaweni yokuphela esimweni sika-A kuya ekhelini lohlelo lokusebenza luka-A, bese uphinda ngo-B. Sebenzisa ifomu le-%ID ekuxilongeni ukuze ubonise ukuthi yisiphi isimo esiphendulile, futhi qinisekisa ukuthi isicelo esivela esimweni esingalungile siyahluleka esikhundleni sokuhla ezindaweni ezikholakalayo.
Hlola futhi uhlangothi lomhlinzeki kulowo mkhakha: isiqalo sikhona ku-VRF efanele, izinhloso zomzila zihambisana nephepha lokusebenza, futhi indlela yokubuyisela isebenzisa ukuxhumeka okuhlosiwe. I-ping esebenza kudivayisi uqobo ibonisa isimo sedivayisi, hhayi esikometshenzisi.
Bhala ukumaphwa kokugcina ephepheni lokusebenza, kufaka phakathi isizinda somzila esizenzakalelayo sesigaba ngasinye kanye nanoma yibuphi ubudlelwano besizinda esingumzali osikwenzile. Ushintsho olulandelayo kule mvelo luzokwenziwa umuntu ofunda lelo thebula, hhayi umuntu ofunda le ndatshana.