L2TPv2, L2TPv3, GRE ne-VPWS: khetha ngomthwalo
Qhathanisa i-L2TPv2, i-L2TPv3, i-GRE ne-MPLS VPWS ngokomthwalo ezivuthayo, izindleko ezengeziwe ezizifakayo nokuthi ngubani oqhubayo ngempela ukuthutha.
Izingxabano eziningi L2TP ne-GRE ziyawa ngesizathu esifanayo: amagama asezigabeni ezahlukene zenkinga. Ezimbili zazo zichaza ukufakwa okusakuhlela kuma-router akho. Enye ichaza isevisi okuthengiswa ngomunye umuntu kuwe. Qala ngomthwalo okumele ugcinwe amaphoyinti okugcina, futhi ukuqhathanisa kuphenduka uhlu olufushane lwemiphumela esikhundleni sempi yezici.
Umthwalo kuqala, iphrothokholi kamuva
Empeleni umthwalo ungenye yezinto ezine: iseshini ye-PPP, ifreyimu ye-Ethernet eluhlaza, iphakethe le-IP noma ifreyimu ye-MPLS enikezwa umhlinzeki. Ngayinye ibeka izidingo ezahlukene ekukhethweni kwamakheli, ekuphatheni kokusakaza nasekutholeni amaphutha. Uma lolu hlu lungalungile, akukho ukulungisa kokufakwa okuzosindisa umklamo.
| Payload | Natural fit | What it needs |
|---|---|---|
| PPP session | L2TPv2 | UDP reachability, PPP negotiation on both ends |
| Ethernet frame | L2TPv3 or VPWS | Pseudowire signalling, matched MTU on both sides |
| IP packet | GRE, with IPsec alongside | Routed underlay, protocol type supported by both devices |
| MPLS frame | VPWS | Provider attachment circuits and demarcation points |
Noma yini engaphandle kwale migqa yengezwa kamuva, njengokubethela, ukucindezela noma ukubunjwa kwethrafikhi. Khetha umugqa kuqala.
I-L2TPv2 ne-L2TPv3 zabelana ngegama futhi cishe akukho okunye
I-L2TPv2 ikhona ukuze ithwale amaseshini e-PPP phezu kwenethiwekhi ye-IP, yingakho ifundwa njengephrothokholi yokufinyelela kude kunokuba kube ukuthutha kwefreyimu okuvamile. I-L2TPv3 yenza lowo mqondo ube jikelele: uxhumano lokulawula luxoxisana ngamaseshini, futhi iseshini ngayinye ithwala uxhumano oluchaziwe lwesigaba 2 phakathi kwamaphoyinti amabili e-IP. Igama lomndeni elifanayo, iphrothokholi yokulawula ehlukile, imodeli yesevhini ehlukile. Isidingo esithi i-L2TP kuphela asiphelele, futhi ithempulethi ekopishwe kunguqulo engalungile ngeke ixoxisane nokuze.
Uma udinga i-PPP, i-L2TPv2 iyilungu kuphela lomndeni elingokoqobo; uma udinga amafreyimu e-Ethernet phezu komgogodla ohleliwe, usendaweni ye-L2TPv3.
Imininingwane yokuthutha iyahluka ngezindlela ezivelayo ngesikhathi sokubuyekezwa kwe-firewall. I-L2TPv3 ingahamba ngqo phezu kwephrothokholi ye-IP 115 noma ngaphakathi kwe-UDP, ngokuvamile e-chwebeni 1701, kuyilapho i-L2TPv2 ihlala ku-UDP 1701 ine-PPP ngaphakathi. Inqubomgomo ebhalelwe inguqulo eyodwa ingabonakala ilungile ngokuphelele futhi isilahle enye.
I-GRE iyisihloko, hhayi isevisi
I-GRE isonga umthwalo esihlokweni samabhayithi amane anenkambu yokhiye nokulandelana okuzikhethelayo, bese inikeza umphumela ku-IP ukuze uhanjiswe. Ayisho lutho ngincazelo yomthwalo, ngakho ukusetshenziswa kungafaka i-IPv4, i-IPv6 noma i-Ethernet emhubheni uma lezo zinhlobo zephrothokholi zisekelwa. Okujwayelekile akufani nakho konke: qinisekisa uhlobo lwephrothokholi nokuziphatha kokuhlukaniswa kudivayisi yangempela.
Inkambu yokhiye iyiyo eyenza i-GRE ibe usizo lapho amahubhu amaningi abelana ngabhangqa owodwa wamakheli okugcina, ngoba umamukeli wehlukanisa ngalelo nani. I-GRE phezu kwe-IPv4 ibiza cishe amabhayithi angama-24 ngaphambi kwanoma yiziphi izinketho ezengeziwe, futhi lokho kuqala ukubaluleka emishini esivele ilungiselelwe amafreyimu amabhayithi angu-1500. I-GRE iyodwa ayinikezi imfihlo, ngakho iphethini ejwayelekile iyihlanganisa ne-IPsec futhi ishiye i-IPsec iphethe umngcele wokubethela. Lokho kuhlanganisa kuyasebenza, kodwa isabelomali se-MTU kumele sikhawulele izihloko zombili.
I-GRE iphinde ithwale i-multicast nokusakaza emhubheni lapho umthwalo uyi-Ethernet, into umhubhe we-IP we-unicast ojwayelekile ongakwazi ukuyenza. Leso simo, hhayi isifinyezo, ngokuvamile siyisizathu sokuthi umklamo uyikhethe.
I-VPWS iyathengwa, ayilungiselelwa
Isevisi yocingo lwangasese olusetshenziswayo iletha isekethe lesigaba 2 lokusuka endaweni kuya endaweni phezu kwenethiwekhi yomhlinzeki. Isekethe lakho lokuxhuma liphelela kudivayisi yomphetho womhlinzeki, futhi i-pseudowire enqamula umgogodla ingeyomhlinzeki. Imibuzo ebalulekile ingeyokusebenza: uthi umngcele ukuphi, ubani ongumnikazi wemayela yokuqala neyokugcina, futhi umhlinzeki wenzani ngamafreyimu amakhulu ngokweqile.
Nakhu lapho ukuqhathanisa kuphenduka khona. I-L2TPv3 ne-GRE yizinto ozisebenzisa kusukela ekugcineni kuya ekugcineni, ngakho uzilungisa ngemininingwane yakho yokungena nokurekhodwa kwakho. I-VPWS iyinkontileka enokunikezelwa, ngakho ukuphazamiseka kuqala nge-tikithi esikhundleni sokuthwebula iphakethe. Asikho isibonelo esinqoba ngokuphelele; ziyahluleka ezindaweni ezahlukene, futhi ukukhetha kuncike ekutheni uyafuna yini ukuba umnikazi wemayela yokugcina.
Isitaki samalebula we-pseudowire sihlala ngaphakathi kwenethiwekhi yomhlinzeki, ngakho asishintshi izibalo zakho ze-MTU njengoba kwenza isihloko somhubhe esibonakalayo.
Khetha umugqa owodwa bese uwubhala phansi
Rekhoda isinqumo njengomusho owodwa onezingxenye ezintathu: umthwalo, ukufakwa nokumnikazi wokuthutha. Bese unamathisela izinombolo ezenza ukuthi kube nokucwaningwa.
Kumelikhethi ngamunye, bhala izindleko ezengeziwe ocingweni, ifreyimu enkulu kunazo zonke eyamukelwa indlela kanye nokugxuma kokuqala okungabika inkinga ye-MTU. Qinisekisa ukuthi womabili amaphoyinti okugcina asekela uhlobo lwephrothokholi noma uhlobo lwesevhini olukhethile, hhayi igama lokumaketha elikusheeti yedatha kuphela. Thatha isinqumo sokuthi ukuhlangana kuzobonakala kanjani uma isekethe lesibili livela ngonyaka ozayo, ngoba okhiye be-GRE nama-ID eseshini ye-L2TPv3 akuzona izixazululo ezishintshiswayo zale nkinga. Bese uthumela ifreyimu enkulu ngokweqile kanye nefremu evamile; lowo mbhangqwana ubamba iningi lemiklamo eyayibonakala kahle ephepheni.
Ukuqhathanisa amahubhu ngegama kuqhubeka nokudala izingxoxo-mpikiswano okungekho muntu ongazixazulula. Ukuwaqhathanisa ngomthwalo, izindleko ezengeziwe nokuba ngumnikazi kuveza isinqumo ntambama eyodwa, kanye nobufakazi obudingekayo ukuze buvikelwe kamuva.