Ukuhamba kwemizila yamagatsha e-MPLS: i-CE ifundani, futhi kubani

Ihosti egatsheni elilodwa ivula uxhumano iya kuseva kwelinye igatsha, futhi zombili izindawo zingemuva kwe-VPN ye-MPLS esezingeni lesi-3 elawulwayo efanayo. Ihosti yazi kuphela isango layo lokumisiwe futhi akukho okunye, okulungile. Okubalulekile ukuthi umphetho wamakhasimende wendawo udlulisela iphakethe kumphetho womhlinzeki waso, futhi isimo sokuhamba kwemizila se-VPN somhlinzeki siyisa egatsheni eliphethe isiqalo sendawo.

Ukulandela iphakethe elilodwa endleleni yonke kuyindlela eshesha kakhulu yokubona ukuthi iyiphi ingxenye engumthwalo kamakhasimende nokuthi iyiphi ingxenye engokwensizakalo.

10.20.0.0/24 → CE-A → PE → provider core → PE → CE-B → 10.30.0.0/24

Isho kuphi ukuphela komsebenzi wehophu ngayinye

I-CE-A idinga umzila oya e-LAN ekude okhombisa uxhumano lwayo lomhlinzeki wendawo, hhayi ikheli le-WAN legatsha elikude. Ngemuva kwalokho umhlinzeki uthwala iphakethe enkabeni yakhe esebenzisa isimo sokuhamba kwemizila se-VPN, futhi i-CE-B iyisa ku-LAN yendawo. Asikho isikhathi lapho ihosti idinga ukuqonda amalebula, i-VRF noma umzila we-inthanethi wohlangothi olunye.

Iphutha eliphindaphindayo emathikithini ukuhlela ikheli le-WAN legatsha B njengehophu elilandelayo egatsheni A. Womabili amagatsha athenge insizakalo efanayo, ngakho kubonakala sengathi kufanele abe omakhelwane. Akunjalo: ihophu elilandelayo kufanele lifinyeleleke ngomklamo wokuhamba kwemizila onawo ngempela, futhi i-CE ekude ivamise ukuba mahophu amaningi kude ngemuva kwempahla ongayilawuliyo. Umzila oqinile owakhiwe phezu kwalokho kucabanga ubonakala usebenza futhi awuxazululi lutho, okubi kakhulu kunomzila ongekho ngoba etafuleni ubonakala ulungile.

I-RFC 4364 ihlukanisa ukushintshana phakathi komphetho wamakhasimende nomphetho womhlinzeki nokusatshalaliswa kwemizila ye-VPN okwenziwa umhlinzeki, futhi lowo ngumngcele okhulunywa ngawo kulo mhlahlandlela. Umsebenzi wamakhasimende ukutshela umphetho wawo ukuthi yini engayithumela nokuthi yamukele ukufinyeleleka okunikezwa yinsizakalo.

Ukudluliswa kufanele kuvumelane ngani

Khetha indlela kanye nomhlinzeki, hhayi ukuyizungeza. Imizila eqinile, i-BGP noma isivumelwano sephrothokholi yokuhamba kwemizila phakathi kwe-CE ne-PE kukho konke kusemthethweni, futhi i-OSPF inemodeli ye-MPLS VPN echaziwe yalokho kudluliswa. Akukho kulokhu okuyisizathu sokwakha ubudlelwane be-OSPF phakathi kwemiphetho emibili yamakhasimende ekude ngokusebenzisa umongo womhlinzeki ongachaziwe, ngoba lowo umklamo umhlinzeki angavumelananga nawo futhi ongeke awusekele.

Ngaphambi kokuthi i-LAN entsha iqale ukusebenza, bhala izinto ezine: isiqalo, umzila olandelayo wendawo ku-CE, isimemezelo umhlinzeki azosamukela, nemizila umhlinzeki azoyibuyisela. Engeza noma yikuphi ukuhlunga, umkhawulo wesiqalo noma imikhawulo phakathi kwezindawo ebekwa yinkontileka. Ubudlelwane obunempilo buyindlela yokushintshana ngolwazi, futhi akubona ubufakazi bokuthi isiqalo esithile samukelwe; isikhathi sengxoxo singase sisebenze ngenkathi i-subnet yakho entsha ihlezi kusihlungi.

Bese ulandela impendulo. Igatsha B lidinga umzila obuyela ku-LAN yomthombo, futhi ihosti ohlangothini olwamukelayo idinga isango layo nezimvume zayo zensizakalo. Umzila ovela ku-CE-A usungula uhhafu wohambo, futhi lolo hhafu yisizathu sokuthi uhlangothi olulodwa lokuhlola i-ping lubonakale lunempilo ngenkathi uhlelo lusahluleka.

Qinisekisa ukudluliswa kokubili ngaphambi kokwamukela

Qoqa isimo sokuhamba kwemizila kumiphetho yomabili yamakhasimende, qinisekisa nomhlinzeki ukuthi iziqalo ze-LAN ezihlosiwe zamukelwe ku-VPN, bese uhlola uhlelo olulodwa oluvunyelwe ohlangothini ngalunye. Amatafula emizila wodwa awafakazi ukuthi uhlelo luyasebenza, futhi ukuhlolwa kohlelo kuphela akusho ukuthi yiluphi uhlangothi lokulawula olwehlulekile uma lungasebenzi.

show ip route vrf BRANCH 10.30.0.0
show ip bgp vpnv4 vrf BRANCH
show ip cef vrf BRANCH 10.30.0.10

Funda imiphumela emithathu ndawonye. Eyokuqala isho ukuthi umphetho ukholwa ini, eyesibili isho ukuthi wafunda ini futhi kubani, eyesithathu isho ukuthi izodlulisa ini ngempela. Ukungavumelani phakathi kwazo ngokuvamile inkinga yomgomo noma yokuphindaphinda hhayi isimemezelo esilahlekile, futhi kufanelekile ukuyixazulula ngaphambi kokucela umhlinzeki ukuthi aphenye. Hamba nalemiphumela emithathu engxoxweni nomqhubi, ngoba iphendula imibuzo eminingi onjiniyela bosekelo abangayibuza.

Yazi ukuthi insizakalo ayinikezi ini

Lokhu ukufinyelela okuhamba ngemizila kwezinga lesi-3. Lokhu akusona isekethe lezinga lesi-2 elandisa ukusakaza phakathi kwamahhovisi, ngakho amaphrothokholi okuthola, izinhlelo ezincike ekusakazeni kanye nokucatshangwa kwesigaba esabiwe akuhambi nakho. Ukuphrinta, ukuphequlula amagama kanye nanoma yini encike esigabeni sendawo kudinga umklamo waso.

Ukwehlukaniswa kwe-VPN nakho akusona ukubethela. Ukushintsha amalebula kugcina amakhasimende ehlukene ngaphakathi kwenethiwekhi yomhlinzeki, futhi akwenzi umthwalo ube yimfihlo uma inkontileka ifuna imfihlo. Lapho lokho kubalulekile, kufanele kuhlinzekwe uhlelo noma ungqimba olungaphezulu.

Ekugcineni, gcina imodeli yensizakalo ibhaliwe eduze kokuhlelwa kokuhamba kwemizila kwesayithi. Unjiniyela olandelayo ozofaka i-subnet kufanele akwazi ukufunda ukuthi iziphi iziqalo ezimemezelwayo, ubani ozamukelayo nokuthi iyiphi indlela yokubuya elindelekile: isicaciso se-BGP/MPLS IP VPN siyisithenjwa semodeli engemuva kwakho konke lokhu.