Wannan labarin ita ce ta biyu a cikin jerin kasidu "Yadda ake kula da hanyoyin sadarwar ku." Ana iya samun abubuwan da ke cikin duk labaran da ke cikin jerin da hanyoyin haɗin gwiwa .
Burinmu a wannan mataki shine mu kawo tsari ga takardu da daidaitawa.
A ƙarshen wannan tsari, ya kamata ku sami takaddun takaddun da suka dace da kuma saita hanyar sadarwa daidai da su.
Yanzu ba za mu yi magana game da binciken tsaro ba - wannan zai zama batun kashi na uku.
Wahalar kammala aikin da aka sanya a wannan matakin, ba shakka, ya bambanta sosai daga kamfani zuwa kamfani.
Yanayin da ya dace shine lokacin
- an ƙirƙiri hanyar sadarwar ku daidai da aikin kuma kuna da cikakkun takaddun takaddun
- an aiwatar da shi a cikin kamfanin ku don hanyar sadarwa
- bisa ga wannan tsari, kuna da takardu (ciki har da duk zane-zane masu mahimmanci) waɗanda ke ba da cikakkun bayanai game da yanayin halin yanzu.
A wannan yanayin, aikinku yana da sauƙi. Ya kamata ku yi nazarin takaddun kuma ku duba duk canje-canjen da aka yi.
A cikin mafi munin yanayin yanayin, za ku sami
- hanyar sadarwa da aka kirkira ba tare da aiki ba, ba tare da tsari ba, ba tare da izini ba, ta injiniyoyi waɗanda ba su da isasshen matakin cancanta,
- tare da rikice-rikice, canje-canje mara izini, tare da "datti" da yawa da mafita mafi kyau
A bayyane yake cewa halin da ake ciki yana wani wuri a tsakanin, amma rashin alheri, a kan wannan sikelin mafi kyau - mafi muni, akwai babban yiwuwar cewa za ku kasance kusa da mafi munin ƙarshe.
A wannan yanayin, za ku kuma buƙaci ikon karanta hankali, saboda dole ne ku koyi fahimtar abin da "masu tsarawa" suke so su yi, mayar da hankalinsu, gama abin da ba a gama ba kuma ku cire "sharar gida".
Kuma, ba shakka, za ku buƙaci gyara kurakuran su, canza (a wannan mataki a matsayin mafi ƙanƙanta) ƙira da canza ko sake haifar da makirci.
Wannan labarin ba yadda za a yi da'awar ya cika. Anan zan bayyana kawai ka'idodi na gaba ɗaya kuma in mai da hankali kan wasu matsalolin gama gari waɗanda dole ne a warware su.
Saitin takardu
Bari mu fara da misali.
A ƙasa akwai wasu takaddun da aka saba ƙirƙira a Sisfofin Cisco yayin ƙira.
CR - Bukatun Abokin ciniki, buƙatun abokin ciniki (ƙayyadaddun fasaha).
An ƙirƙira shi tare da abokin ciniki kuma yana ƙayyade bukatun cibiyar sadarwa.HLD - Babban Matsayin ƙira, ƙira mai ƙima dangane da buƙatun cibiyar sadarwa (CR). Takardar ta yi bayani da kuma ba da hujjar yanke shawara na gine-gine da aka ɗauka (topology, ladabi, zaɓin kayan aiki,...). HDD ba ta ƙunshi cikakkun bayanan ƙira, kamar musaya da adiresoshin IP da aka yi amfani da su. Hakanan, ƙayyadaddun ƙayyadaddun ƙayyadaddun kayan aikin ba'a tattauna anan. Maimakon haka, wannan takarda an yi niyya ne don bayyana mahimman ra'ayoyin ƙira ga gudanarwar fasaha na abokin ciniki.
LLD - Ƙimar Ƙarƙashin Ƙarƙashin Ƙarƙashin Ƙarƙashin Ƙaƙwalwar Ƙaƙwalwar Ƙaƙwalwar Ƙaƙwalwar Ƙaƙwalwar Ƙaƙwalwar Ƙirar Ƙirar Ƙira (HLD).
Ya kamata ya ƙunshi duk cikakkun bayanai masu mahimmanci don aiwatar da aikin, kamar bayanin yadda ake haɗawa da daidaita kayan aiki. Wannan cikakken jagora ne don aiwatar da zane. Ya kamata wannan takarda ta ba da isassun bayanai don aiwatar da ita ko da ta ƙwararrun ma'aikata.Wani abu, alal misali, adiresoshin IP, lambobin AS, tsarin sauya jiki (cabling), ana iya "fitar" a cikin takaddun daban, kamar su. PIN (Shirin Aiwatar da hanyar sadarwa).
Ginin hanyar sadarwa yana farawa bayan ƙirƙirar waɗannan takaddun kuma yana faruwa daidai da su sannan abokin ciniki (gwaji) ya duba shi don bin tsarin ƙira.
Tabbas, masu haɗawa daban-daban, abokan ciniki daban-daban, da ƙasashe daban-daban na iya samun buƙatu daban-daban don takaddun aikin. Amma ina so in guje wa ka'idoji kuma in yi la'akari da batun a kan cancantarsa. Wannan mataki ba game da ƙira ba ne, amma game da tsara abubuwa, kuma muna buƙatar isassun takaddun takaddun (tsari, tebur, kwatancin ...) don kammala ayyukanmu.
Kuma a ra'ayi na, akwai takamaiman mafi ƙanƙanta, wanda ba tare da wanda ba shi yiwuwa a sarrafa hanyar sadarwa yadda ya kamata.
Waɗannan su ne takardu masu zuwa:
- zane (log) na sauyawa ta jiki (cabling)
- zane na cibiyar sadarwa ko zane tare da mahimman bayanan L2/L3
Jadawalin sauyawar jiki
A wasu ƙananan kamfanoni, aikin da ke da alaƙa da shigarwa na kayan aiki da sauyawa ta jiki (cabling) alhakin injiniyoyin cibiyar sadarwa ne.
A wannan yanayin, an warware matsalar ta hanyar hanya mai zuwa.
- yi amfani da bayanin da ke kan mahaɗin don bayyana abin da aka haɗa da shi
- tsarin mulki yana rufe duk tashoshin kayan aikin cibiyar sadarwa maras alaƙa
Wannan zai ba ku dama, ko da idan akwai matsala tare da hanyar haɗin yanar gizon (lokacin da cdp ko lldp ba ya aiki akan wannan dubawa), don ƙayyade abin da ke da alaka da wannan tashar jiragen ruwa da sauri.
Hakanan zaka iya ganin waɗanne tashoshin jiragen ruwa ne kuma waɗanda ke da kyauta, waɗanda ke da mahimmanci don tsara haɗin sabbin kayan aikin cibiyar sadarwa, sabar ko wuraren aiki.
Amma a fili yake cewa idan ka rasa damar yin amfani da kayan aiki, za ka kuma rasa damar yin amfani da wannan bayanin. Bugu da ƙari, ta wannan hanyar ba za ku iya yin rikodin mahimman bayanai ba kamar nau'in kayan aiki, abin da ake amfani da wutar lantarki, yawan tashar jiragen ruwa, abin da yake ciki, wane nau'i na faci da kuma inda (a cikin wane rack / patch panel). ) an haɗa su . Sabili da haka, ƙarin takaddun (ba kawai kwatancin kayan aiki ba) har yanzu yana da amfani sosai.
Mafi kyawun zaɓi shine amfani da aikace-aikacen da aka tsara don aiki tare da irin wannan bayanin. Amma kuna iya iyakance kanku zuwa tebur masu sauƙi (misali, a cikin Excel) ko nuna bayanan da kuke ganin ya dace a cikin zane-zane na L1/L2.
Muhimmin!
Injiniyan hanyar sadarwa, ba shakka, na iya sanin tsattsauran ra'ayi da ma'auni na SCS, nau'ikan racks, nau'ikan samar da wutar lantarki mara katsewa, menene hanyar sanyi da zafi, yadda ake yin ƙasa mai kyau ... kamar yadda a ka'ida zai iya. san ilimin physics na elementary particles ko C++. Amma har yanzu mutum ya fahimci cewa duk wannan ba fannin iliminsa bane.
Sabili da haka, yana da kyau a sami ko dai sassan da aka keɓe ko kuma mutane masu sadaukar da kai don magance matsalolin da suka shafi shigarwa, haɗi, kula da kayan aiki, da kuma sauyawar jiki. Yawancin lokaci ga cibiyoyin bayanai wannan injiniyoyi ne na cibiyar bayanai, kuma ga ofishi shine tebur-taimako.
Idan an ba da irin wannan rarrabuwa a cikin kamfanin ku, to, al'amurran shigar da canjin jiki ba aikinku ba ne, kuma zaku iya iyakance kanku kawai don kwatancen keɓancewa da rufewar gudanarwar tashar jiragen ruwa da ba a yi amfani da su ba.
Tsarin hanyar sadarwa
Babu wata hanya ta duniya don zana zane.
Abu mafi mahimmanci shi ne cewa zane-zane ya kamata ya ba da fahimtar yadda zirga-zirga za ta gudana, ta abin da abubuwa masu ma'ana da na zahiri na hanyar sadarwar ku.
Da abubuwa na zahiri muna nufin
- kayan aiki masu aiki
- musaya / tashoshin jiragen ruwa na kayan aiki masu aiki
Ƙarƙashin ma'ana -
- na'urori masu ma'ana (N7K VDC, Palo Alto VSYS, ...)
- VRF
- Vilans
- subinterfaces
- tunnels
- yankuna
- ...
Hakanan, idan cibiyar sadarwar ku ba gaba ɗaya ba ce ta farko, za ta ƙunshi sassa daban-daban.
Alal misali
- cibiyar bayanai
- danna
- WAN
- shiga nesa
- ofishin LAN
- DMZ
- ...
Yana da kyau a sami zane-zane da yawa waɗanda ke ba da babban hoto (yadda zirga-zirga ke gudana tsakanin duk waɗannan sassan) da cikakken bayani na kowane yanki.
Tunda a cikin cibiyoyin sadarwa na zamani ana iya samun yadudduka masu ma'ana da yawa, wataƙila hanya ce mai kyau (amma ba lallai ba ne) don yin da'irori daban-daban don yadudduka daban-daban, alal misali, idan aka yi la'akari da abin rufe fuska wannan na iya zama da'irori masu zuwa:
- mai rufi
- L1/L2
- L3 kasa
Tabbas, zane mai mahimmanci, wanda ba tare da wanda ba shi yiwuwa a fahimci ra'ayin zanenku, shine zane-zane.
Tsarin hanya
Aƙalla, wannan zane ya kamata yayi tunani
- Waɗanne ka'idojin da aka yi amfani da su da kuma inda
- mahimman bayanai game da saitunan ladabi (yanki/lambar AS / na'ura mai ba da hanya tsakanin hanyoyin sadarwa /…)
- akan wanne na'urori ne ake sake rarrabawa?
- inda tacewa da tara hanya ke faruwa
- bayanan hanyar da ta dace
Hakanan, tsarin L2 (OSI) yana da amfani sau da yawa.
Tsarin L2 (OSI)
Wannan zane na iya nuna bayanan masu zuwa:
- abin da VLANs
- wadanne tashoshin jiragen ruwa ne tashoshin gangar jikin
- Waɗanne tashoshin jiragen ruwa ne aka haɗa su zuwa tashar ether-tashar (tashar tashar jiragen ruwa), tashar tashar tashar tashar tashar jiragen ruwa
- menene ka'idojin STP da ake amfani da su kuma akan waɗanne na'urori
- saitunan STP na asali: tushen / tushen madadin, farashin STP, fifiko na tashar jiragen ruwa
- ƙarin saitunan STP: BPDU gadi / tace, tushen tushen…
Kuskuren ƙira na yau da kullun
Misalin mummunar hanya don gina hanyar sadarwa.
Bari mu ɗauki misali mai sauƙi na gina LAN ofis mai sauƙi.
Kasancewa da gogewar koyar da tarho ga ɗalibai, zan iya cewa kusan kowane ɗalibi a tsakiyar semester na biyu yana da ilimin da ya dace (a matsayin wani ɓangare na kwas ɗin da na koyar) don kafa LAN ofis mai sauƙi.
Menene mawuyaci game da haɗa maɓallai zuwa juna, saita VLANs, SVI musaya (a cikin yanayin L3 switches) da kuma kafa madaidaiciyar hanya?
Komai zaiyi aiki.
Amma a lokaci guda, tambayoyin da suka shafi
- tsaro
- ajiyar wuri
- sikelin cibiyar sadarwa
- yawan aiki
- kayan aiki
- dogara
- ...
Daga lokaci zuwa lokaci nakan ji bayanin cewa LAN ofis wani abu ne mai sauqi qwarai kuma yawanci ina jin wannan daga injiniyoyi (da manajoji) waɗanda ke yin komai sai hanyoyin sadarwa, kuma suna faɗin hakan da tabbaci cewa kada kuyi mamakin idan LAN ɗin zai kasance. mutanen da ba su da isasshen aiki da ilimi kuma za a yi su da kusan kuskuren da zan bayyana a ƙasa.
Kuskuren ƙira na L1 (OSI) gama gari
- Idan, duk da haka, kai ma ke da alhakin SCS, to ɗayan mafi kyawun gadon gado da za ku iya samu shine rashin kulawa da muguwar tunani.
Zan kuma rarraba azaman nau'in kurakuran L1 masu alaƙa da albarkatun kayan aikin da aka yi amfani da su, misali,
- rashin isasshen bandwidth
- rashin isasshen TCAM akan kayan aiki (ko rashin amfani da shi)
- rashin isasshen aiki (sau da yawa yana da alaƙa da firewalls)
Kuskuren ƙira na L2 (OSI) gama gari
Sau da yawa, lokacin da babu kyakkyawar fahimtar yadda STP ke aiki da kuma matsalolin matsalolin da zai iya kawowa tare da shi, ana haɗa masu sauyawa a cikin rudani, tare da saitunan tsoho, ba tare da ƙarin kunna STP ba.
A sakamakon haka, sau da yawa muna da wadannan
- babban diamita na cibiyar sadarwa ta STP, wanda zai iya haifar da guguwar watsa shirye-shirye
- Za a ƙayyade tushen STP ba da gangan (dangane da adireshin mac) kuma hanyar zirga-zirga za ta kasance mafi kyau
- tashoshin jiragen ruwa da aka haɗa da runduna ba za a saita su azaman gefen (fatfast), wanda zai haifar da sake lissafin STP lokacin kunna / kashe tashoshin ƙarshen.
- Ba za a raba hanyar sadarwa a matakin L1/L2 ba, sakamakon haka matsaloli tare da kowane canji (misali, karfin wutar lantarki) zai haifar da sake lissafin tsarin STP da kuma dakatar da zirga-zirga a cikin duk VLANs akan duk masu sauyawa (ciki har da na'urar). daya mai mahimmanci daga ra'ayi na ci gaba da sabis)
Misalai na kurakurai a cikin ƙirar L3 (OSI).
Wasu kurakurai na yau da kullun na novice networkers:
- Amfani akai-akai (ko amfani kawai) na a tsaye
- amfani da ƙa'idodi masu ƙayyadaddun ƙa'ida don ƙirar da aka bayar
- suboptimal ma'ana rabo na cibiyar sadarwa
- suboptimal amfani da adireshin sarari, wanda baya bada izinin tara hanya
- babu madadin hanyoyin
- babu ajiya don tsohowar ƙofa
- Hanyar asymmetric lokacin sake gina hanyoyin (zai iya zama mahimmanci a cikin yanayin NAT/PAT, cikakken firewalls)
- matsaloli tare da MTU
- idan aka sake gina hanyoyin, zirga-zirgar ababen hawa kan bi ta wasu wuraren tsaro ko ma wasu guraren wuta, wanda hakan ya kai ga barin wannan zirga-zirga.
- matalauta topology scalability
Ma'auni don tantance ingancin ƙira
Lokacin da muke magana game da mafi kyau / rashin dacewa, dole ne mu fahimci daga ma'anar abin da za mu iya kimanta wannan. Anan, daga ra'ayi na, sune mafi mahimmanci (amma ba duka) ma'auni ba (da bayani dangane da ka'idojin zirga-zirga):
- scalability
Misali, kun yanke shawarar ƙara wani cibiyar bayanai. Yaya sauƙin za ku iya yi? - sauƙin amfani (managability)
Yaya sauƙaƙa da amintaccen canje-canjen aiki, kamar sanar da sabon grid ko hanyoyin tacewa? - samuwa
Kashi nawa na lokacin tsarin ku yana samar da matakin sabis ɗin da ake buƙata? - tsaro
Yaya amintaccen bayanan da ake watsawa? - Farashin
Canje-canje
Za a iya bayyana ainihin ƙa'idar a wannan mataki ta hanyar dabara "kada ku cutar da ku."
Sabili da haka, ko da idan ba ku yarda da ƙira da ƙira da zaɓin aiwatarwa ba (daidaitawa), ba koyaushe yana da kyau a yi canje-canje ba. Hanya mai ma'ana ita ce tsara duk matsalolin da aka gano bisa ga sigogi biyu:
- yadda za a iya gyara wannan matsala cikin sauki
- kasadar nawa tayi?
Da farko, ya zama dole don kawar da abin da a halin yanzu ya rage matakin sabis ɗin da aka bayar a ƙasa da matakin yarda, alal misali, matsalolin da ke haifar da asarar fakiti. Sa'an nan kuma gyara abin da ya fi sauƙi kuma mafi aminci don gyarawa a cikin raguwar tsari na haɗarin haɗari (daga ƙira mai haɗari ko batutuwan daidaitawa zuwa ƙananan haɗari).
Kammalawa a wannan matakin na iya zama cutarwa. Kawo ƙira zuwa yanayi mai gamsarwa kuma daidaita tsarin hanyar sadarwa daidai da haka.
source: www.habr.com