Ubani ohambisa imigwaqo phakathi kwezindawo zakho: i-VPN yezinga 2 noma yezinga 3?

Oda i-VPN kumnikezeli futhi ekugcineni othile uzoba ngumnikazi wokuhambisa imigwaqo phakathi kwezindawo, noma ngabe uwushilo lowo mnikazi noma cha. Sayina ukudluliswa kwesigaba 2 futhi umnikezeli unikeza ipayipi kuyilapho amaroutha akho akha ubudlelwano; sayina isevisi yesigaba 3 futhi umnikezeli uthwala iziqalo zakho ngaphakathi komongo wakhe wokuhambisa imigwaqo. Kokubili kuyimikhiqizo esemthethweni enezindaba ezahlukene zokubizwa. Landela i-oda kusukela esilinganisweni kuze kufike ekuhlolweni kokuqala kokwamukela futhi ukukhetha kuyeke ukuba yinto engabonakali.

Qala ngefomu yokudlulisa, hhayi ngesilayidi sokwakheka kwenethiwekhi

Umnikezeli ngamunye ekugcineni uthumela ifomu elibuza ukuthi kufanele akudlulisele ini: i-pseudowire, ingxenye ye-Ethernet enamaphoyinti amaningi noma ukuxhumeka okuhambiswayo emaphethelweni esevisi eyabiwe. Leyo mpendulo eyodwa inquma okuningi kunanoma yimuphi umdwebo esethulweni sokuthengisa, ngoba ibeka lapho umthwalo wakho uqala khona.

I-pseudowire yephoyinti-kuya-phoyinti iyisekhethi eyodwa phakathi kokuxhumeka okubili, futhi isevisi ye-Ethernet enamaphoyinti amaningi ihlanganisa izindawo ezimbalwa esizindeni esisodwa sokusakaza. Emdwebeni zibukeka zifana futhi ziziphatha ngendlela ehluke ngokuphelele lapho kukhona umjikelezo noma isiphepho sokusakaza. Qinisekisa ukuthi yikuphi okucashunwayo ngaphambi kokuhlela amakheli.

Amagama emikhiqizo awakuxazululi lokhu. Ilebula ye-MPLS, ukudluliswa kwefayibha emnyama kanye nokumboza okusekelwe ku-inthanethi konke kungabizwa ngokuthi inethiwekhi yangasese, futhi imibhalo yohlaka ibheka imodeli yesevisi nokwehlukaniswa kwekhasimende-nomhlinzeki njengento okufanele ichazwe. Cela incazelo yokuxhumeka ngokubhaliwe, bese uyifundela ithimba lakho ngamagama alula.

Funda okwafika ngosuku lokuvulwa

Ngosuku lokuvulwa, bheka i-interface oyinikiwe ngaphambi kokumisa noma yini phezu kwayo. Ukuxhumeka okuhambiswayo kwesigaba 3 ngokuvamile kubonakala njengephothi elinesubneti encane yephoyinti-kuya-phoyinti noma njengejump elilandelayo okufanele ufinyelele kulo. Ukuxhumeka kwesigaba 2 kubonakala njengesixhumanisi esilindele amafreyimu, ngakho umyalo wakho wokuqala owusizo ukuhlola ibhuloho noma umakhelwane, hhayi ukusesha umzila.

ip -br link show
ip -br addr show
ip route show default
ip neigh show

Leyo mifanekiso emine ikutshela ukuthi usesimweni esinjani. Umzila ozenzakalelayo okhomba ekhelini lomnikezeli kusho ukuthi umnikezeli uhambisa imigwaqo egameni lakho. I-interface engenalo ikheli lesigaba 3 eliwusizo kodwa ibhuloho ligcwele kusho ukuthi ukuhambisa imigwaqo kulindeleke kuwe, futhi noma isiphi isiqalo esingekho kungesakho ukusilungisa.

Isixhumanisi esibukeka sinesimo esixakile singase futhi sisho ukuthi ukudluliswa kufakwe ithegi, ngakho qinisekisa isivumelwano se-VLAN ngaphambi kokusola isekhethi. Amakheli e-MAC aphindayo kwisevisi enamaphoyinti amaningi ayisibonakaliso sokuklama, hhayi ukwehluleka kukamnikezeli.

Yabela umnikazi oyedwa entweni ngayinye ngaphambi kwesiqalo sokuqala

Landela uhlu lwezinto futhi usho ngokuzwakalayo igama lethimba elingumnikazi wayo ngayinye. Iziqalo zekhasimende kanye nezimemezelo phakathi kwezindawo. Ubudlelwano noma isikhombisi sesevisi esakha ubudlelwano nomphetho womnikezeli. Ubani ophula imijikelezo, futhi ubani ovumile ukuhlala esizindeni esibanzi sokusakaza. Lapho umkhawulo we-MTU ukhona, indlela ukwehluleka okubonakala ngayo nendlela isevisi ebuyayo ngayo. Inqubomgomo yokufinyelela, kanye nanoma yikuphi ukubethela isevisi engakufaki.

Uhlu lufushane ngoba yilolo phansi olwephukayo ngesikhathi sezigameko. Uma amathimba amabili womabili ekholelwa ukuthi anomgomo wemigwaqo, ukuphazamiseka kukhiqiza izinguquko ezimbili eziphikisanayo ngehora elilodwa. Uma kungekho oyena, indlela yokuqala engalingani ihlala khona kuze kubike ikhasimende.

Isevisi ehambiswayo ngokuvamile ikunikeza umkhawulo we-BGP noma oqinile, ngakho uhlangothi lwakho ludinga isimo seseshini esifundekayo: i-birdc show protocols noma okulingana kwayo kuroutha yakho kutshela ukuthi ubudlelwano bukhona yini, futhi izibali zitshela ukuthi iyagxuma ngesikhathi sokusebenza kuphela yini. Ukudluliswa kwesigaba 2 akunikezi isignali enjalo, ngakho ikhasimende kufanele libe nokuhlolwa okucacile kokufinyeleleka.

Landela icala lokwehluleka lesizinda esisodwa

Bhala ukuhlolwa kokwamukela ngaphambi kokuthi isevisi iqale ukusebenza: yehlisa ukuxhumeka kwesizinda esisodwa bese ubhala lokho ithimba ngalinye elikubonayo. Kwisevisi yesigaba 3 umnikezeli uhoxisa ukufinyeleleka kweziqalo zaleso sizinda, iseshini yakho ibhala ukuhoxiswa, futhi ezinye izindawo zigcina imigwaqo yazo. Kwisevisi yesigaba 2 isekhethi iyawa, iphrothokholi yakho yokuhambisa imigwaqo ibona umakhelwane ofile, futhi ukuhlangana okufanayo kuncike ngokuphelele kuma-timer akho.

Buyisela isixhumanisi futhi uhlole ingxenye yesibili yecala, ngoba isimo esidala iyona nsalela evamile. Qinisekisa ukuthi ubudlelwano buyabuya, iziqalo zibuya nezakhiwo ezilindelekile, futhi akukho mzila oqinile wesikhashana osele etafuleni ovela esigamekweni.

Hlola futhi ukwehluleka okuyisicefe: isizinda esisodwa siphindaphinda ithrafikhi yaso. Ekudlulisweni okuhambiswayo ubona izibali ngesiqalo ngasinye; kokunye okunebhuloho ungase ubone kuphela ukudlula kwe-interface, okukushiya uqagela ukuthi iyiphi ihositi enecala.

Lokho isivumelwano esingakuthengi

Ilebula yesigaba 2 noma 3 ayisho lutho ngokubambezeleka, umgogodla oqokiwe noma ukubethela. Lokho kuyizibopho ezihlukene, futhi izinombolo zokutholakala azisho lutho ngazo. Funda isivumelwano sesevisi ngalokho okuthenjisiwe futhi uphathe konke okunye njengokucabanga okufanele ukuhlole.

Uma isidingo sakho kuwukuxhumeka kwephoyinti-kuya-phoyinti phakathi kwamaroutha amabili ekhasimende, isevisi yesigaba 2 iyafaneleka ngaphandle kokucela umnikezeli ukuthi aqhube ukuhambisa imigwaqo kwangaphakathi kwakho. Uma isidingo kuyizindawo eziningi ezinamasubneti ahlukene kanye nethimba elincane lokusebenza, isevisi ehambiswayo ngokuvamile isusa umsebenzi obungaba ngowakho.

Akukho kokubili okuzenzakalelayo. Hlola ukusekelwa kwedivayisi kokufakwa, ubudlelwano bangempela bethrafikhi phakathi kwezindawo, imodeli yokungafani, nokuthi ithimba lakho lingayiqhuba yini ingxenye esanda kwamukelwa. Bese ubhala amagama abanikazi ku-runbook, ngoba yiyona ngxenye kuphela yesinqumo ehlala khona lapho kushintsha abasebenzi.