Ukuphiliswa komakhelwane be-OSPF kungenzeki ku-VPN? Hlola lokhu ngokulandelana
Izinhlolo ezinhlanu, ngayinye inophawu lwayo: imodeli yoxhumano, ukuhlunga kweprotocol 89, amapharamitha kamakhelwane, isimo sokusondelana, futhi ekugcineni okumenyezelwayo ngempela.
Ithuneli liyasebenza, ama-interface asesubneti eyodwa, kodwa i-OSPF ayibonisi lutho. Isikhathi esiningi ithuneli lilungile futhi isimiso esisodwa se-OSPF asigcwalisiwe. Yenza izinhlolo ezinhlanu ezingezansi ngokulandelana futhi ume kokokuqala okwehlulwayo.
Uhlelo ngalunye lunophawu oluhlukile, ngakho ukulandelana kubaluleke kakhulu kunohlu.
Isihlolo 1: imodeli yoxhumano ilungile
I-interface yephuzu-kuphuzu kanye nenethiwekhi yokufinyelela okuningi eyabiwe kuyizimo ze-OSPF ezahlukene. Ukukopisha ukulungiselelwa kwe-LAN yokusakaza ethunelini iyiphutha elivame kakhulu lapha. Setha uhlobo lwenethiwekhi olusekelwa ukusetshenziswa kwe-VPN, ngokuvamile iphuzu-kuphuzu ethunelini elinomzila. Bese uqinisekisa ukuthi isizinda siyavuma, ngoba okunye ukusetshenziswa kuyayishaya indiva noma kuyibhale ngaphezulu.
Uma imodeli yoxhumano ingalungile, akukho okunye ohlwini okuzosiza.
Isihlolo 2: ingabe amaphakethe avunyelwe ukudlula
I-OSPFv2 iyiprotocol ye-IP 89, hhayi imbobo ye-TCP noma ye-UDP, ngakho umthetho wodonga lomlilo obhalelwe izimbobo uyilahla buthule. Ama-hello nawo aya kumakheli e-multicast, okungenzeka ukuthi inqubomgomo ayiwavumeli. Vumela iprotocol 89 phakathi kweziphetho zethuneli, bese uhlola ukuthi isizinda sidinga izitatimende zomakhelwane ezicacile.
Ithuneli elidlulisa i-ping kuphela liyinkinga yenqubomgomo, hhayi yomzila.
Isihlolo 3: amapharamitha kamakhelwane ayafana
I-ID yesifunda, izikhawu ze-hello ne-dead, ukuqinisekiswa kanye namafulegi e-stub kufanele kuvumelane. Ukungavumelani ngokuvamile kushiya umakhelwane esimweni esibonakalayo esikhundleni sokwehluleka buthule, okuwusizo. Qhathanisa ukulungiselelwa okusebenzayo kuzo zombili iziphetho, hhayi okuhleliwe.
Ukungavumelani kwe-MTU yikho okucashile. Kuvimbela ukushintshana kwesizindalwazi ku-ExStart, ngakho umakhelwane akakaze afinyelele ku-Full.
Isihlolo 4: isimo sithini
Isimo sisho ukwehluleka. I-Init isho ukuthi ama-hello ayafika kodwa le router ayifakiwe kuwo, okukhomba indlela yohlangothi olulodwa noma inkinga ye-multicast. I-Two-Way ijwayelekile esigabeni sokusakaza nomakhelwane ongeyena u-DR futhi ayijwayelekile kuxhumano lwephuzu-kuphuzu. I-ExStart noma i-Exchange ebambekile isho inkinga ye-MTU noma yencazelo yesizindalwazi. I-Loading isho ukuthi izicelo zesimo soxhumano aziphendulwa.
Funda isimo ngaphambi kokushintsha noma yini, ngoba sisusa ingxenye enkulu yohlu.
show ip ospf neighbor iphrinta isimo, ikheli lomakhelwane kanye nesikhathi se-dead. Qhathanisa leso sikhathi nesikhawu se-hello ezinhlangothini zombili: isikhawu se-dead esiphindwe kane kwe-hello sijwayelekile, noma yini enye ukungavumelani. Ikholomu yesimo iwukufunda okusheshayo kakhulu ekhasini lonke.
Isihlolo 5: yini emenyezelwayo ngempela
Ukusondelana kwe-Full akulona umzila. Hlola ukuthi yimaphi amanethiwekhi adalwayo, yimaphi afundwayo futhi yimaphi afakwa kuthebula lomzila. Isitatimende senethiwekhi esingekho noma inqubomgomo yokusabalalisa kabusha ekhipha isiqalo sesayithi kukhiqiza umakhelwane onempilo nethebula elingenalutho.
Bese uhlola uhlelo lokusebenza lwezinga lomsingathi kanye nomzila wokubuya, ngoba iprotocol yomzila ayivuli udonga lomlilo.
Ku-IPv6, i-OSPFv3 inezimfuneko zayo futhi ayisiyo iswishi yomndeni wamakheli kukho konke ukulungiselelwa kwe-OSPFv2. Sebenzisa iprotocol efanele kanye nemibhalo yesizinda. Futhi uma uxhumano luyisixhumanisi esisodwa esimile, qhathanisa imizila emile ngaphambi kokwengeza indiza yokulawula okuzodingeka uyisebenzise.