Yadda muka tsara da aiwatar da sabuwar hanyar sadarwa akan Huawei a ofishin Moscow, Sashe na 3: masana'antar uwar garken

A kashi biyun da suka gabata (sau, два) mun kalli ka'idodin da aka gina sabon masana'antar al'ada, kuma mun yi magana game da ƙaura na duk ayyukan. Yanzu ya yi da za a yi magana game da uwar garken factory.

A baya can, ba mu da wani keɓantaccen kayan aikin uwar garken: an haɗa maɓallan uwar garken zuwa jigon guda ɗaya da masu rarraba rarraba mai amfani. An gudanar da sarrafa damar shiga ta amfani da hanyoyin sadarwa na zamani (VLANs), an aiwatar da hanyar VLAN a lokaci ɗaya - akan ainihin (bisa ga ka'ida). Rushewar Kashin baya).

Tsohon kayan aikin cibiyar sadarwa

A lokaci guda tare da sabuwar hanyar sadarwa na ofis, mun yanke shawarar gina sabon ɗakin uwar garken da sabon masana'anta daban don shi. Ya juya ya zama ƙananan (bankunan uwar garken guda uku), amma bisa ga duk canons: wani keɓaɓɓen asali akan masu sauya sheka CE8850, cikakkiyar meshed (leaf-leaf) topology, saman rack (ToR) CE6870, maɓalli daban-daban. na masu sauyawa don yin hulɗa tare da sauran hanyar sadarwa (bangon iyaka). A takaice, cika minceat.

Cibiyar sadarwa na sabuwar masana'antar uwar garken

Mun yanke shawarar yin watsi da SCS uwar garken don goyon bayan haɗa sabar kai tsaye zuwa masu sauya ToR. Me yasa? Mun riga muna da ɗakunan uwar garken guda biyu waɗanda aka gina ta amfani da SCS uwar garken, kuma mun fahimci cewa wannan shine:

• rashin dacewa don amfani (yawancin sake haɗawa, kuna buƙatar sabunta log ɗin USB a hankali);
• tsada dangane da sararin da ke mamaye da faci;
• cikas ne lokacin da ya zama dole don haɓaka saurin haɗin yanar gizo na sabobin (misali, canzawa daga haɗin 1 Gbit/s akan jan ƙarfe zuwa 10 Gbit/s akan na gani).

Lokacin matsawa zuwa sabuwar masana'antar uwar garken, mun yi ƙoƙarin ƙaura daga haɗa sabobin a cikin saurin 1 Gbit/s kuma mun iyakance kanmu zuwa musaya na 10 Gbit. Kusan duk tsoffin sabobin da ba za su iya yin hakan ba an yi su ne a zahiri, sauran kuma an haɗa su ta hanyar gigabit transceivers zuwa tashar jiragen ruwa gigabit 10. Mun yi lissafin kuma muka yanke shawarar cewa zai yi arha fiye da shigar musu daban daban na gigabit.

Canje-canje na ToR

Hakanan a cikin sabon ɗakin uwar garken mu, mun shigar da maɓalli daban-daban na gudanarwa na waje (OOM) tare da tashoshin jiragen ruwa 24, ɗaya kowace tara. Wannan ra'ayin ya zama mai kyau sosai, amma babu isassun tashoshin jiragen ruwa, lokaci na gaba za mu shigar da maɓallan OOM tare da tashoshin jiragen ruwa 48.

Muna haɗa hanyoyin sadarwa don sarrafa sabar nesa kamar iLO, ko iBMC a cikin kalmomin Huawei, zuwa cibiyar sadarwar OOM. Idan uwar garken ta rasa babban haɗin yanar gizon ta zuwa cibiyar sadarwar, to za a iya isa gare ta ta wannan hanyar sadarwa. Hakanan, hanyoyin sarrafawa na masu sauya ToR, na'urori masu auna zafin jiki, musaya masu sarrafa UPS da sauran na'urori masu kama da juna suna haɗe zuwa maɓallan OOM. Ana iya samun hanyar sadarwar OOM ta hanyar keɓantaccen keɓantawar bangon bango.

Haɗin hanyar sadarwar OOM

Haɗa uwar garken da cibiyoyin sadarwar mai amfani

A cikin masana'anta na al'ada, ana amfani da VRF daban-daban don dalilai daban-daban - don haɗa wuraren aikin mai amfani, tsarin sa ido na bidiyo, tsarin multimedia a cikin ɗakunan taro, don tsara tashoshi da wuraren demo, da sauransu.

An ƙirƙiri wani saitin VRFs a masana'antar uwar garken:

• Don haɗa sabar na yau da kullun waɗanda aka tura sabis na kamfani.
• VRF daban, wanda a cikinsa ake tura sabar masu samun dama daga Intanet.
• VRF daban don uwar garken bayanai waɗanda wasu sabar kawai ke samun dama (misali, sabar aikace-aikace).
• VRF daban don tsarin saƙonmu (MS Exchange + Skype don Kasuwanci).

Don haka muna da saitin VRFs a gefen masana'anta mai amfani da saitin VRFs a gefen masana'antar uwar garken. An shigar da duka saitin biyu akan gungu na Firewall na kamfani (FW). MEs an haɗa su da maɓalli na kan iyaka (bankunan kan iyaka) na masana'anta na uwar garken da masana'anta mai amfani.

Interfacing masana'antu ta ME - kimiyyar lissafi

Interfacing masana'antu ta hanyar ME - dabaru

Yaya hijirar ta kasance?

A lokacin ƙaura, mun haɗa sabbin masana'antun sabar uwar garken a matakin haɗin bayanai, ta hanyar kututture na wucin gadi. Don ƙaura sabobin da ke cikin takamaiman VLAN, mun ƙirƙiri wani yanki na gada daban, wanda ya haɗa da VLAN na tsohuwar masana'anta da VXLAN na sabuwar masana'antar sabar.

Tsarin yana kama da wani abu kamar haka, layin biyu na ƙarshe shine maɓalli:

bridge-domain 22
 vxlan vni 600022
 evpn 
  route-distinguisher 10.xxx.xxx.xxx:60022
  vpn-target 6xxxx:60022 export-extcommunity
  vpn-target 6xxxx:60022 import-extcommunity

interface Eth-Trunk1
 mode lacp-static
 dfs-group 1 m-lag 1

interface Eth-Trunk1.1022 mode l2
 encapsulation dot1q vid 22
 bridge-domain 22

Hijira na injunan kama-da-wane

Sannan, ta amfani da VMware vMotion, injunan kama-da-wane a cikin wannan VLAN an yi ƙaura daga tsoffin hypervisors (version 5.5) zuwa sababbi (sigar 6.5). A lokaci guda, sabar kayan masarufi sun kasance masu kamanceceniya.

Lokacin da kuka sake gwadawaSanya MTU a gaba kuma duba hanyar manyan fakiti "karshen zuwa ƙarshe".

A cikin tsohuwar hanyar sadarwar uwar garken, mun yi amfani da VMware vShield kama-da-wane Tacewar zaɓi. Tunda VMware baya goyan bayan wannan kayan aikin, mun canza daga vShield zuwa kayan wuta na kayan aiki a daidai lokacin da muka yi ƙaura zuwa sabuwar gona mai ƙima.

Bayan da babu sabar da aka bari a cikin wani VLAN na musamman akan tsohuwar hanyar sadarwa, mun canza hanyar sadarwa. A baya can, an yi shi ne a kan tsohuwar core, wanda aka gina ta amfani da fasahar Kashin baya na Rushewa, kuma a cikin sabuwar masana'antar uwar garken mun yi amfani da fasahar Anycast Gateway.

Canza hanyar hanya

Bayan canza hanyar zuwa wani takamaiman VLAN, an cire haɗin daga yankin gada kuma an cire shi daga gangar jikin tsakanin tsofaffi da sabbin hanyoyin sadarwa, watau gaba ɗaya ya koma sabon masana'antar sabar. Don haka, mun yi ƙaura kusan 20 VLANs.

Don haka mun ƙirƙiri sabuwar hanyar sadarwa, sabuwar uwar garken da sabuwar gona mai ƙima. A cikin ɗayan labaran da ke gaba za mu yi magana game da abin da muka yi da Wi-Fi.

Maxim Klochkov
Babban mashawarci na cibiyar bincike na cibiyar sadarwa da hadaddun ayyuka kungiyar
Cibiyar Sadarwar Sadarwa
"Jet Infosystems"

source: www.habr.com