I-ping ye-router nomhambi we-VLAN: iyiphi inqubomgomo ye-PBR esebenzayo?

I-VLAN 10 kufanele isebenzise i-VPN futhi i-VLAN 20 isebenzise i-WAN, ngakho ukuhlolwa kokuqala i-ping evela ku-router enedilesi ye-interface ye-VLAN 10 njengomthombo. Iyaphumelela, izibali ze-route-map ziyakhula futhi wonke umuntu uphetha ngokuthi umklamo uyasebenza. Awusebenzi. Leyo ping yadalwa ngaphakathi, futhi ithrafikhi edalwe ngaphakathi ifinyelela indawo ehlukile yokuxhuma inqubomgomo kunephakethe elingena ku-interface ye-VLAN.

Izimo ezintathu zinquma ukuthi iyiphi inqubomgomo oyihlola ngempela: lapho iphakethe lidalwa khona, lapho lingena khona nokuthi lihambisana nani.

Lapho iphakethe lingena khona kunquma ukuthi iyiphi inqubomgomo esebenzayo

I-route-map ye-interface exhunywe nge-ip policy route-map isebenza kumaphakethe angena kuleyo interface, njengoba umhlahlandlela we-PBR we-IOS XE uchaza. I-host ku-VLAN 10 ithumela isicelo sayo, ifreyimu ifika ku-subinterface ye-VLAN futhi i-router ihlola inqubomgomo lapho. Iphakethe le-router uqobo alifiki kuleyo interface, ngoba lazanywa ngaphakathi ku-router.

Ukukhetha idilesi ye-VLAN njengomthombo kushintsha isihloko. Akushintshi umsuka.

Kungani i-ping enomthombo ingeyona i-host

Idilesi yomthombo ibalulekile ekufanisweni kwe-ACL, futhi yikho kanye okwenza lolu hlolo lukholiseke kangaka. Iphakethe lifana nesimo somthombo, izibali ziyakhula futhi umphumela ubonakala ulungile. Into uhlolo olungenakuyikhombisa i-interface yokungena, umongo wokufika, noma ukuthi iphakethe le-host lingathatha igatsha elifanayo yini.

Uhlolo olukhiqiza kabusha ukufana kodwa hhayi umongo lubonisa ingxenye yomklamo, futhi kuyingxenye yobufakazi lapho imiklamo iphuma khona nenqubomgomo engafanele.

Nini inqubomgomo yasendaweni iyimpendulo efanele

I-Cisco ibhala i-ip local policy route-map yethrafikhi edalwa i-router uqobo. Lokho kuwububanzi obuhlukile, futhi kuyithuluzi elifanele lapho imfuneko iphathelene ngempela nethrafikhi ye-router uqobo. Akusona isinyathelo esilahlekile edingwa yiwona wonke umklamo wokuqondisa i-VLAN. Ukufana okubanzi lapho kungase kuphazamise ukuxhumana kokuphatha nokweseka, okuwushintsho olukhulu kakhulu kunalokho okubonakala.

I-TCP edalwe ngaphakathi inombandela owengeziwe: idinga ukungena kwendawo ekuyiwa kuyo okusebenzayo kuthebula lokuhambisa ngisho lapho inqubomgomo ikhetha enye indlela. Umphumela we-ICMP awufakazi ukuziphatha okufanayo ku-TCP.

Yini okufanele ihlolwe ku-host esikhundleni salokho

Gcwalisa uhlolo kusuka ku-host egunyaziwe ku-VLAN 10, nedilesi yayo yomthombo yangempela, indawo ekuyiwa kuyo, iphrothokholi kanye nechwecwe. Rekhoda i-interface yokungena nokufana kwe-route-map eduze komphumela, ukuze ubufakazi busho inqubomgomo esebenzile. Bese uphinda lokho ku-host ku-VLAN 20 futhi uqinisekise ukuthi ithatha enye indlela.

Zombili izindlela zidinga i-next hop esebenzayo, ukufikeleleka kokubuyela kanye, lapho kusebenza khona, nokumbozwa kwe-VPN. I-PBR ikhetha isinqumo sokudlulisa; ayidali isevisi ekude futhi ayinikezi uhlelo imvume.

Umphumela ungafakazela ini futhi ungakwazi ukufakazela ini

Ukugeleza kwe-host okuphumelelayo kufakazela ukuthi inqubomgomo yafana nokuthi indlela ekhethiwe yasebenza ngaleso sikhathi. Akufakazeli ukuthi ithrafikhi ye-router uqobo iqondiswa, futhi akufakazeli ukuthi uhlelo lwalugunyaziwe, ngoba leyo yimibuzo ehlukile enobufakazi obuhlukile.

Gcina i-ping encwadini njengobufakazi mayelana nephakethe lasendaweni. Bese uyahamba uyothola ubufakazi bokugeleza kwe-host, esikhundleni sokukhulisa ububanzi benqubomgomo kuze kube yilapho izivivinyo ezimbili zibonakala zifana.