I-RD ne-RT ku-MPLS VPN: ukuhluka nomgomo wokungenisa

Isihlukanisi somzila senza izandiso ezihlangene zihluke, futhi umgomo womzila unquma ukuthi iyiphi imizila i-VRF engayingenisa. Landela umzila owodwa we-MPLS kuzo zombili izindima.

Izindawo ezimbili zamakhasimende zingamemezela i-10.20.0.0/24 futhi zombili zihlala zivumelekile ngaphakathi kwenethiwekhi eyodwa yomhlinzeki. Isihlukanisi somzila sigcina lezo zimemezelo zihlukene; umgomo womzila unquma ukuthi iyiphi i-VRF yekhasimende engathatha ikhophi. Zimi eduze komunye nomunye ekuhlelweni futhi zenza imisebenzi ehluke ngokuphelele. Ukudidanisa lezi zimbili kuholela ezinguqukweni ezibonakala zinengqondo futhi ezingalungisi lutho.

Landela umzila owodwa kusukela emaphethelweni ekhasimende kuze kufike ku-VRF ekude futhi ukwehlukanisa kuba sobala: ubunikazi bunamathiselwa ngaphambi kokuthi umzila ungene ku-BGP, futhi umgomo wokusabalalisa uyahlolwa lapho umzila ufika emaphethelweni omhlinzeki owamukelayo.

Umzila we-VPN-IPv4 yi-RD kanye nesandiso se-IPv4

I-RFC 4364 ichaza umndeni wamakheli e-VPN-IPv4 njengesihlukanisi somzila samabhayithi ayisishiyagalombili esilandelwa ikheli le-IPv4 lamabhayithi amane. I-RD ifakwa phambi kwesandiso sekhasimende, ngakho izandiso ezimbili ezifanayo ezivela ezindaweni ezihlukene ziba imizila emibili ehlukene ye-BGP.

Leso sakhiwo siyiyo yonke indlela yokuhluka. Umhlinzeki akadingi ukuthi amakhasimende avumelane ngendawo yamakheli engahlangani, futhi umzila ovela kwenye indawo awukwazi ukushintsha buthule isandiso esifanayo esivela kwenye indawo.

Ifomethi ye-RD ngokwayo iyinani elikhethwa umqondisi, ngokuvamile inombolo yesistimu ezimele kanye nenombolo yendawo. Isimo sayo sezinombolo siyisiko, hhayi uphawu lokuthi izinkambu ezimbili zabelana incazelo nomgomo womzila osebenzisa izingqinamba ezifanayo ngengozi.

I-RD yenza izandiso ezihlangene zihlukaniseke

Cabanga ngezimemezelo ezimbili zesandiso esifanayo. Indawo A ithwala i-RD 65000:101 futhi indawo B ithwala i-RD 65000:202, zombili ze-10.20.0.0/24. Manje i-BGP isiphethe imizila emibili ye-VPN-IPv4 engaqhathaniswa, ihlungiwe futhi ikhethwe ngokuzimela.

I-RD ayisho ukuthi iyiphi i-VRF okufanele yamukele noma yimuphi yale mizila, futhi ayikhombi ikhasimende noma insiza. Kuyinkambu yobunikazi yomzila, hhayi uhlu lwamalungu. I-RD ye-VRF uqobo akudingeki ihambisane ne-RD yomzila ewungenisayo.

Yingakho ukushintsha i-RD ukuze ihambisane nenombolo yendawo enye akulungisi lutho. Uma umzila ungekho ngaphesheya, ukuhambisana kwezingqinamba kudala enye inkinga yobunikazi esikhundleni sokulungisa isinqumo sokungenisa.

I-RT iyisici se-BGP, hhayi ithegi esephaketheni

Umgomo wokuthumela ngaphandle unamathisela umgomo womzila owodwa noma ngaphezulu emzileni njengezici zomphakathi ezikhulisiwe ze-BGP. Umphetho womhlinzeki owamukelayo uqhathanisa lezo zici nomgomo wokungenisa we-VRF ngayinye. I-RT ihamba nomzila ngokusebenzisa indiza yokulawula. Ukuqhathanisa kwenzeka ngokuphelele kumgomo womzila, ngaphambi kokuba noma iyiphi iphakethe yekhasimende idluliselwe.

Amaphakethe edatha ekhasimende awathwali i-RT. Uma umzila usufakiwe ku-VRF, ukudlulisa kusebenzisa ithebula laleyo VRF kanye nenqwaba yamalebula e-MPLS eyabelwa ukwakheka. Umphetho womhlinzeki awufundi umgomo womzila kuwo wonke amaphakethe ekhasimende.

Umzila ungathwala ama-RT amaningi, futhi i-VRF ingangenisa amaningi. Ukuhlela kuvame ukubonakala njengebhlokhi emfushane:

vrf definition CUST-A
 rd 65000:101
 address-family ipv4
  route-target export 65000:500
  route-target import 65000:500

Funda leyo bhlokhi njengezitatimende ezimbili ezihlukene. Umugqa wokuthumela ngaphandle ulawula okunamathiselwa emizileni ephuma kule VRF; umugqa wokungenisa ulawula lokho i-VRF ekulungele ukukucabangela. Izinombolo ezihambisanayo ziwusizo, hhayi impoqo.

Ilungelo lokungenisa akulona ukufakwa

Umzila ungafaneleka ku-VRF kodwa ungaveli kuthebula layo lokudlulisa. Ukufaneleka kuyisihlungi; bese inqubo evamile yesinqumo se-BGP iqhathanisa imizila efanelekile futhi ikhethe eyodwa. Umzila omdala noma ongathandwa kakhulu ungahlulwa omunye umgudu ofanelekile.

Hlola umzila okhethiwe, hhayi umgomo wokungenisa kuphela. I-VRF engenisa i-RT 65000:500 futhi engabonisi mzila we-10.20.0.0/24 kungenzeka yathola umzila futhi yawunqaba ngesikhathi sokukhetha, noma kungenzeka ayizange iwuthole neze.

Lo mehluko ubalulekile nalapho kuvela isandiso esingalindelekile. Umgomo wokungenisa obanzi kakhulu ungadonsa imizila indawo eyayingakuhlosile ukuyisebenzisa, futhi ukuhluka kwe-RD akukuvimbeli nhlobo lokho. Ububanzi bokusabalalisa umbuzo womgomo we-RT.

Landelela umzila ongekho ngokulandelana kwendiza yokulawula

Qala ngommemezelo: ingabe i-VRF yomthombo ithumela ngaphandle i-RT ehlosiwe, futhi ingabe umzila ukhona njengomzila we-VPN-IPv4 kusibonisi semizila noma ku-PE eyamukelayo? Bese uhlola isici ngendlela esamukelwe ngayo, hhayi ngendlela esilungiselelwe ngayo kumthumeli.

Bese uqhathanisa uhlu lokungenisa lwe-VRF eyamukelayo namazinga angempela e-RT omzila. Ekugcineni hlola umzila okhethiwe kuleyo VRF kanye nokubopha ilebula. Isinyathelo ngasinye siphendula umbuzo ohlukile, futhi ukugxuma kuya ku-RD ngokuvamile kweqa isinyathelo esiyiphutha.

Bhala i-RD, i-RT ethunyelwe ngaphandle, i-RT engenisiwe kanye nesinyathelo esilandelayo esikhethiwe sendawo esebenzayo nendawo ehlulekayo. Amanani amane eduze komunye nomunye aguqula “i-VPN ayidlulisi imizila” engacacile abe isinyathelo sendiza yokulawula esihluke ngempela.

Izihloko ezihlobene