I-hub ye-DMVPN enegama uma iqhathaniswa nenombolo: i-FQDN ishintsha ini

I-spoke ye-DMVPN ingathola i-hub yayo ngegama le-host kumapulatifomu asekela lesi sici, futhi isilingo sokuqala ukufunda lelo gama njengenye indlela yokubhala ikheli le-tunnel ye-hub. Akunjalo. Igama lixazululeka libe iphoyinti lokugcina lezokuthutha, kuyilapho ikheli lephrothokholi ye-hub likhomba ukugxuma okulandelayo ngaphakathi kwe-overlay, futhi zombili izindima zihlala kuzo zonke izinhlobo zokucushwa. Lowo mehluko unquma ukuthi ukuqanjwa kabusha kungalungisa ini futhi kungenakulungisa ini.

Amakheli amabili, imisebenzi emibili

Esibonelweni esimenyezelwe, i-hub.example.net itshela i-spoke ukuthi ithumele kuphi ithrafikhi yezokuthutha, futhi i-10.90.0.1 ikhomba i-NHS ngaphakathi kwe-tunnel. Ukutholakala kusebenza kwelokuqala; ukubhaliswa nokuhlela imizila kusebenza kwelesibili. Ukushintsha kwegama kuthinta indlela eya ephoyintini lokugcina, kuyilapho ukushintsha kwekheli lephrothokholi kuthinta ubudlelwano be-overlay uqobo.

Ukuhlukanisa izindima yikho okwenza ifomu elinegama likwazi ukulungiswa. Lapho i-spoke ihluleka ukubhalisa, ungabuza imibuzo emibili ehlukene: ingabe igama laxazululeka laba yikheli ebengililindele, futhi ingabe lelo kheli lahambisana nekheli lephrothokholi elishiwo ukucushwa? Akukho mpendulo echaza enye.

Qhathanisa izinhlobo ezimbili zokucushwa

Uhlobo olulodwa lucushwa ngokusobala ikheli lephrothokholi ye-NHS eduze kwegama. Olunye luvumela i-spoke ukuthi ifunde lelo kheli lephrothokholi empendulweni yokubhalisa. Zombili zibhalisiwe, futhi zombili zigcina ngohlobo olufanayo lobudlelwano be-NHS lapho ziphumelela.

Uhlobo olusobala lunomkhawulo okufanele ukhunjulwe: ikheli lezokuthutha elixazululiwe elingahlangani nekheli lephrothokholi elicushiwe livimbela ukubhalisa. Lokhu akukona ukwehluleka kwe-DNS, nakuba uphawu lubonakala ngokushesha ngemva koshintsho lwe-DNS. Igama laxazululeka ngendlela efanele futhi umphumela wenqatshwa ngesinye isizathu. Funda ikheli elixazululiwe kanye nekheli lephrothokholi elicushiwe ndawonye.

Uhlobo lokufunda lususa isinyathelo esisodwa sesandla kanye nomthombo owodwa wokwehluka, ngenani lokuncika empendulweni ukuze kusungulwe ukuhlangana. Khetha uhlobo olusobala lapho ikheli le-hub lizinze futhi ufuna ukungafani kwehluleke ngokuzwakalayo. Khetha uhlobo lokufunda lapho ikheli lephrothokholi ye-hub lingashintsha futhi uncamela ukuthi i-spoke ililandele. Kunoma yikuphi, bhala ukuthi uhlobo luni olusetshenziswa ukuklama.

Qhathanisa i-cache ye-DNS ne-hub emile

Ikheli le-hub elimile lishintsha lapho othile ehlela ukucushwa. I-hub enegama ishintsha lapho i-DNS ishintsha, futhi izimpendulo ze-DNS zigcinwa ku-cache isikhathi sakho sonke sokuphila. Imibhalo iphawula ukuthi ulwazi olugcinwe ku-cache luhlala lusebenziseka kuze kuphele isikhathi salo, futhi umbuzo wakamuva ungase ubuyisele ikheli elisha.

Lowo mehluko uwumehluko wesikhathi, hhayi ukufuduka okusheshayo. Ukuphila isikhathi eside kwe-cache kubambezela ukwamukelwa kwephoyinti lokugcina eliqanjwe kabusha, futhi ukubambezeleka akubonakali uma ubheka irekhodi le-DNS kuphela. Hlela ukuqanjwa kabusha ngokuzungeza ukuphila kwe-cache kanye nokuziphatha kokubhalisa kwenguqulo efakiwe, esikhundleni sokucabanga ukuthi yonke i-tunnel ihamba ngesikhathi esisodwa.

Uhlobo olumile lunokubambezeleka kwalo, yebo: akukho okushintshayo kuze kube yilapho i-spoke ngayinye ihlelwa. Ukuqhathanisa kuphakathi kokusunduzwa kokucushwa okuxhunyanisiwe nokuvuselelwa kokutholakala okugcinwe ku-cache, hhayi phakathi kokuhamba kancane nokusheshayo.

Qhathanisa okuhlala kufana

Ukuqinisekiswa kontanga akunyakazi. Igama le-host elithola iphoyinti lokugcina lezokuthutha alithathi indawo yobunikazi be-IKE obucushiwe noma inqubomgomo yokuqinisekisa eqinisekisa untanga. Uma ubunikazi bungalungile, ukuxazululwa kwe-DNS okuphumelelayo kukuholela ngokushesha ku-tunnel enqatshiwe.

Ithrafikhi evikelwe nayo ayishintshanga. I-NHS ephendulayo ayifakazeli ukuthi umzila weklayenti ukhona noma ukuthi ukugeleza kohlelo kuvunyelwe. Ukubhaliswa, ukuhlela imizila kanye nenqubomgomo kuyizivivinyo ezintathu, futhi igama lithinta kuphela isinyathelo sokuqala esiziphakelayo.

Ukuqhathanisa ongakugunyaza

I-Cisco ibhala imibono ehlukene yeseshini nobudlelwano be-NHS. Sebenzisa i-show dmvpn ukufunda isimo sontanga neseseshini, kanye ne-show ip nhrp nhs ukufunda umbono wokubhalisa we-NHS. Qhathanisa ikheli lezokuthutha elixazululiwe, untanga we-overlay kanye nesimo sokubhalisa ngalolo hlelo.

Isahluko se-IOS XE FQDN-DMVPN sibhala ukuziphatha kokutholakala, kwe-cache kanye nomkhawulo ngemuva kwalokhu kuqhathanisa. Kusifunde ngokuqhathanisa nenguqulo yakho efakiwe ngaphambi kokuthatha i-hub eqanjwe kabusha njengokufaka okusheshayo kwe-hub enenombolo.