Fadada manyan biranen da samuwar agglomerations na daya daga cikin muhimman abubuwan da suka shafi ci gaban zamantakewa a yau. Moscow kadai ya kamata ya fadada da murabba'in murabba'in mita miliyan 2019 a cikin 4 (kuma wannan baya kirga matsuguni 15 da za a kara ta 2020). A cikin wannan yanki mai faɗi, masu yin amfani da wayar za su ba wa masu amfani damar shiga Intanet. Waɗannan na iya zama ko dai ƙananan gundumomi na birni tare da ɗimbin gine-gine masu yawa, ko ƙarin ƙauyukan ƙauyuka na “fitarwa”. Don waɗannan lokuta, buƙatun kayan masarufi sun ɗan bambanta. Mun bincika kowane ɗayan waɗannan al'amuran kuma mun ƙirƙiri samfurin sauyawa na gani na duniya - T2600G-28SQ. A cikin wannan sakon za mu yi nazari dalla-dalla game da iyawar na'urar da za ta kasance mai ban sha'awa ga masu gudanar da sadarwa a duk faɗin Rasha.
Sanya kan hanyar sadarwa
An tsara maɓalli na T2600G-28SQ duka don aiki a matakin samun dama a cikin hanyar sadarwa da kuma haɗa hanyoyin haɗin kai daga sauran matakan samun damar sauyawa. Wannan maɓalli ne na Layer 2600 wanda ke yin sauyawa da daidaitawa. Idan mai aiki ya canza duka tarawa da samun dama (ta hanyar sadarwa kawai a cikin cibiyar sadarwar), T28G-XNUMXSQ zai dace da kowane matakan. A cikin yanayin tarawa mai ƙarfi, har yanzu kuna buƙatar yin la'akari da wasu hane-hane akan shari'o'in amfani.
Samfurin T2600G-28SQ cikakken aiki ne na Ethernet mai aiki ba tare da ƙarin hani da ke bayyana lokacin amfani da xPON ko fasaha makamantan su ba. Misali, ba tare da barazanar raguwar saurin gudu ba tare da haɓaka yawan masu amfani ko rashin daidaituwa tsakanin kayan aiki daga dillalai daban-daban da firmware. Dukan masu amfani da ƙarshen da maɓallan samun damar shiga tare da abubuwan haɓakawa na gani, misali, ƙirar T2600G-28TS, na iya haɗawa da mu'amalar na'urar. Hoton da ke ƙasa yana nuna mafi yawan misalan irin waɗannan haɗin gwiwa.
Don samun damar hanyar sadarwar mai amfani ta ƙarshe, ana iya amfani da fiber na gani ko igiyar igiyar igiya. A gefen masu biyan kuɗi, za a iya dakatar da fiber na gani ko dai ta amfani da mai sauya mai watsa labarai (mai juyawa), misali, TP-Link MC220L; da kuma amfani da na'ura mai ba da hanya tsakanin hanyoyin sadarwa na SOHO.
Don haɗa abokin ciniki na kusa, zaku iya amfani da tashoshin RJ-45 guda huɗu masu aiki akan saurin 10/100/1000 Mbit/s. Idan saboda wasu dalilai wannan bai isa ba, mai aiki zai iya "mayar da" musaya na gani na canji zuwa tagulla. Ana iya yin wannan ta amfani da SFPs na musamman na “Copper” tare da mai haɗin RJ-45. Amma irin wannan bayani ba za a iya kira na hali.
Wasu misalai daga aiki
Don kammala hoton, za mu ba da misalai da yawa na amfani da maɓallan T2600G-28SQ.
Moscow yankin mai bada , wanda, ban da Intanet, yana ba da sabis na wayar tarho da na USB, yana amfani da T2600G-28SQ a matakin shiga lokacin gina hanyoyin sadarwa a cikin kamfanoni masu zaman kansu (gidaje da gidajen gari). A gefen abokin ciniki, ana haɗa haɗin zuwa masu amfani da hanyar sadarwa tare da tashar jiragen ruwa na SFP, da kuma masu juyawa na kafofin watsa labaru. A halin yanzu, masu amfani da hanyar sadarwa na SOHO tare da tashar jiragen ruwa na SFP ba su da yawa a cikin kasarmu, amma muna, ba shakka, tunani game da shi.
Ma'aikacin sadarwa daga yankin Pavlovo-Posad yana amfani da T2600G-28SQ masu sauyawa a matsayin "ƙananan tarawa", ta amfani da maɓalli na T2600G-28TS da T2500G-10TS model don samun dama.
Kungiyar kamfani samar da hanyar Intanet, TV, telephony, da tsarin sa ido na bidiyo a kudu maso gabashin yankin Moscow (Kolomna, Lukhovitsy, Zaraysk, Serebryanye Prudy, Ozyory). Kimanin topology a nan daidai yake da na ISS: T2600G-28SQ a matakin tarawa, da T2600G-28TS da T2500G-10TS a matakin samun dama.
Mai Bayarwa daga Krasnoznamensk yana ba da damar Intanet ta amfani da hanyar sadarwa mai zurfi mai zurfi. Hakanan yana dogara ne akan T2600G-28SQ.
A cikin sassan masu zuwa za mu ɗan bayyana wasu fasalolin T2600G-28SQ. Domin kada mu kumbura kayan, mun bar zaɓuɓɓuka da yawa daga: QinQ (VLAN VPN), routing, QoS, da sauransu. Muna tsammanin za mu iya komawa gare su a cikin ɗayan waɗannan posts.
Canza iyawa
Ajiye - STP
STP - Tsarin Tsarin Bishiyoyi. An san ka'idar bishiyar mai faɗi na dogon lokaci, godiya ga Radya Perlman mai daraja saboda wannan. A cikin cibiyoyin sadarwa na zamani, masu gudanarwa suna ƙoƙari ta kowace hanya don guje wa amfani da wannan yarjejeniya. Ee, STP ba tare da lahaninsa ba. Kuma yana da kyau sosai idan akwai madadinsa. Koyaya, kamar yadda galibi ke faruwa, madadin wannan yarjejeniya zai dogara sosai akan mai siyarwa. Don haka, har wa yau, Ƙa'idar Bishiyar Bishiyoyi ta kasance kusan mafita guda ɗaya wanda kusan dukkanin masana'antun ke goyan bayan kuma sananne ga duk masu gudanar da hanyar sadarwa.
Maɓallin TP-Link T2600G-28SQ yana goyan bayan nau'ikan STP guda uku: classic STP (IEEE 802.1D), RSTP (802.1W) da MSTP (802.1S).
Daga cikin waɗannan zaɓuɓɓukan, RSTP na yau da kullun ya dace da yawancin ƙananan masu samar da Intanet a Rasha, wanda ke da fa'ida ɗaya wanda ba za a iya musantawa ba akan sigar gargajiya - gajeriyar lokacin haɗuwa.
Mafi sassaucin ƙa'ida a yau shine MSTP, wanda ke goyan bayan hanyoyin sadarwa na zamani (VLANs) kuma yana ba da damar bishiyoyi daban-daban, waɗanda ke ba ku damar amfani da duk hanyoyin da ke akwai. Mai gudanarwa yana ƙirƙira misalan bishiya daban-daban (har zuwa takwas), kowannensu yana yin hidimar takamaiman tsarin cibiyoyin sadarwa.
Bayanan Bayani na MSTPMasu gudanarwa na novice suna buƙatar yin hankali sosai yayin amfani da MSTP. Wannan saboda halayen ladabi ya bambanta a cikin yanki da tsakanin yankuna. Don haka, lokacin daidaita maɓalli, yana da kyau a tabbatar da kasancewa a cikin yanki ɗaya.
Menene wannan sanannen yanki? A cikin sharuɗɗan MSTP, yanki shine saitin maɓalli da aka haɗa da juna waɗanda ke da halaye iri ɗaya: sunan yanki, lambar bita, da rarraba hanyoyin sadarwa (VLANs) tsakanin misalan yarjejeniya (misali).
Tabbas, ka'idar Spanning Tree (kowace sigar) tana ba ku damar magance madaukai waɗanda ke tasowa yayin haɗa tashoshi madadin, har ma don karewa daga kurakuran sauya kebul lokacin da injiniyan da gangan ya haɗa tashar jiragen ruwa mara kyau, ƙirƙirar madauki tare da nasa. ayyuka.
ƙwararrun masu gudanar da cibiyar sadarwa sun fi son amfani da ƙarin zaɓuɓɓuka iri-iri don kare ka'idar STP daga hare-hare ko yanayin bala'i masu rikitarwa. Samfurin T2600G-28SQ yana ba da nau'ikan nau'ikan irin wannan damar: Kariyar Loop da Kariyar Tushen, TC Guard, Kariyar BPDU da Tacewar BPDU.
Yin amfani da daidaitattun zaɓuɓɓukan da aka jera a sama tare da haɗin gwiwar wasu hanyoyin kariya masu goyan baya zai daidaita hanyar sadarwar gida kuma ya sa ta zama mai iya faɗi.
Ajiye - LAG
LAG - Ƙungiyar Haɗin Haɗin Kai. Wannan fasaha ce da ke ba ku damar haɗa tashoshi na zahiri da yawa zuwa ɗaya mai ma'ana. Duk sauran ka'idoji suna dakatar da amfani da tashoshi na zahiri da aka haɗa a cikin LAG daban kuma su fara "gani" hanya ɗaya mai ma'ana. Misalin irin wannan yarjejeniya shine STP.
An daidaita zirga-zirgar mai amfani tsakanin tashoshi na zahiri tsakanin tashoshi masu ma'ana dangane da jimlar zanta. Don ƙididdige shi, ana iya amfani da adiresoshin MAC na mai aikawa, mai karɓa, ko biyu daga cikinsu; da kuma adiresoshin IP na mai aikawa, mai karɓa, ko biyu daga cikinsu. Bayanin ka'idar Layer XNUMX (TCP/UDP tashar jiragen ruwa) ba a la'akari da shi ba.
Canjin T2600G-28SQ yana goyan bayan tsayayyen LAGs.
Don yin shawarwari akan sigogin aiki na ƙungiya mai ƙarfi, ana amfani da ka'idar LACP.
Tsaro - Lissafin shiga (ACLs)
Maɓallin mu na T2600G-28SQ yana ba ku damar tace zirga-zirgar mai amfani ta amfani da lissafin shiga (ACL - Jerin Kula da Samun damar).
Jerin hanyoyin samun tallafi na iya zama nau'ikan iri daban-daban: MAC da IP (IPv4/IPv6), hade, da kuma yin tace abun ciki. Adadin kowane nau'in lissafin shiga da aka goyan baya ya dogara da samfurin SDM da ake amfani da shi a halin yanzu, wanda muka bayyana a wani sashe.
Mai aiki zai iya amfani da wannan zaɓi don toshe hanyoyin da ba'a so daban-daban akan hanyar sadarwar. Misali na irin wannan zirga-zirga zai zama fakitin IPv6 (ta amfani da filin EtherType) idan ba a samar da sabis ɗin da ya dace ba; ko toshe SMB akan tashar jiragen ruwa 445. A cikin hanyar sadarwa tare da adireshi na tsaye, DHCP/BOOTP zirga-zirga ba a buƙata, don haka ta amfani da ACL, mai gudanarwa na iya tace bayanan UDP akan tashar jiragen ruwa 67 da 68. Hakanan zaka iya toshe zirga-zirgar IPoE na gida ta amfani da ACL. Irin wannan toshewar na iya kasancewa cikin buƙata a cikin cibiyoyin sadarwar afareta ta amfani da PPPoE.
Tsarin amfani da lissafin shiga abu ne mai sauƙi. Bayan ƙirƙirar lissafin kanta, kuna buƙatar ƙara adadin da ake buƙata na rikodin zuwa gare shi, nau'in wanda kai tsaye ya dogara da takaddar da aka keɓance.
Saita lissafin shiga
Yana da kyau a lura cewa lissafin shiga na iya yin ba kawai ayyukan da aka saba na ba da izini ko ƙin zirga-zirgar ababen hawa ba, har ma da tura shi, nuna shi, da kuma aiwatar da remarking ko iyakance ƙimar.
Da zarar an ƙirƙiri duk ACL ɗin da ake buƙata, mai gudanarwa na iya shigar da su. Yana yiwuwa a haɗa lissafin shiga zuwa duka tashar jiragen ruwa ta zahiri kai tsaye da takamaiman hanyar sadarwa mai kama-da-wane.
Tsaro - adadin adiresoshin MAC
Wani lokaci masu aiki suna buƙatar iyakance adadin adiresoshin MAC waɗanda maɓalli zai koya akan takamaiman tashar jiragen ruwa. Lissafin shiga suna ba ku damar cimma ƙayyadaddun sakamako, amma a lokaci guda suna buƙatar bayyananniyar nuni na adiresoshin MAC da kansu. Idan kawai kuna buƙatar iyakance adadin adiresoshin tashoshi, amma ba a fayyace su a sarari ba, tsaron tashar jiragen ruwa zai zo wurin ceto.
Ana iya buƙatar irin wannan ƙuntatawa, alal misali, don kare kariya daga haɗa duk hanyar sadarwa ta gida zuwa ƙirar mai sauyawa ɗaya. Yana da mahimmanci a ambata a nan cewa muna magana ne game da haɗin bugun kira, saboda lokacin haɗawa ta amfani da na'ura mai ba da hanya tsakanin hanyoyin sadarwa a gefen abokin ciniki, T2600G-28SQ zai koyi adireshin ɗaya kawai - wannan shine MAC wanda ke cikin tashar WAN na mai ba da hanya tsakanin hanyoyin sadarwa. .
Akwai duka nau'ikan hare-hare da aka kai kan teburin sauyawa. Wannan na iya zama tebur ambaliya ko MAC spoofing. Zaɓin tsaro na tashar jiragen ruwa zai ba ku damar kariya daga ambaliya tebur na gada da hare-hare da nufin sake horar da maɓalli da gangan da kuma lalata teburin gada.
Ba shi yiwuwa a ambaci kayan aikin abokin ciniki mara kyau kawai. Yawancin lokaci ana samun yanayi lokacin da katin cibiyar sadarwar kwamfuta mara aiki ko na'ura mai ba da hanya tsakanin hanyoyin sadarwa ke haifar da rafi na firam tare da mai aikawa da adiresoshin mai karɓa gaba ɗaya na sabani. Irin wannan kwarara yana iya sauke CAM cikin sauƙi.
Wata hanyar da za a iyakance adadin shigarwar tebur na gada da aka yi amfani da ita ita ce kayan aikin Tsaro na MAC VLAN, wanda ke ba mai gudanarwa damar tantance matsakaicin adadin shigarwar don takamaiman hanyar sadarwa mai kama-da-wane.
Baya ga sarrafa abubuwan shigarwa masu ƙarfi a cikin tebur mai sauyawa, mai gudanarwa kuma yana iya ƙirƙirar madaidaici.
Matsakaicin teburin gada na ƙirar T2600G-28SQ na iya ɗaukar rikodin har zuwa 16K.
Wani zaɓi da aka ƙera don tace watsa zirga-zirgar mai amfani shine aikin keɓewar Port, wanda ke ba ka damar fayyace kai tsaye a cikin wacce aka yarda da turawa.
Tsaro - IMPB
A cikin faɗuwar faɗuwar ƙasarmu ta asali, hanyar da masu aikin sadarwar ke bi don tabbatar da tsaron cibiyar sadarwa ya bambanta daga jahilci zuwa matsakaicin yiwuwar amfani da duk zaɓuɓɓukan da kayan aikin ke goyan bayan.
IPv4 IMPB (IP-MAC-Port Binding) da kuma ayyukan IPv6 IMPB suna ba ku damar kare kai daga duk hare-haren da suka shafi lalata adireshin IP da MAC a ɓangaren masu biyan kuɗi ta hanyar ɗaure adiresoshin IP da MAC na kayan aikin abokin ciniki. na'ura mai ba da hanya tsakanin hanyoyin sadarwa. Ana iya yin wannan ɗaurin da hannu ko ta amfani da ARP Scanning da DHCP Snooping ayyuka.
Saitunan IMPB na asali
Don yin gaskiya, ya kamata a ce ana iya amfani da aiki na musamman don kare ka'idar DHCP - DHCP Filter.
Yin amfani da wannan aikin, mai gudanar da cibiyar sadarwa zai iya tantance waɗancan musaya da aka haɗa ainihin sabar DHCP zuwa gare su. Wannan zai hana sabobin DHCP na dan damfara daga tsoma baki tare da tsarin shawarwarin IP.
Tsaro - DoS Kare
Samfurin da ake la'akari da shi yana ba mu damar kare masu amfani daga yawancin sanannun hare-haren DoS da aka yaɗa a baya.
Yawancin hare-haren da aka jera ba su da haɗari ga na'urori masu tsarin aiki na zamani, amma cibiyoyin sadarwar mu na iya ci karo da waɗanda aka sabunta software na ƙarshe shekaru da yawa da suka wuce.
DHCP goyon baya
Maɓallin TP-Link T2600G-28SQ zai iya aiki duka azaman uwar garken DHCP ko relay, da kuma yin tace saƙonnin DHCP daban-daban idan wata na'ura tana aiki azaman uwar garken.
Hanya mafi sauƙi don samarwa masu amfani da sigogin IP da suke buƙatar aiki shine amfani da ginanniyar uwar garken DHCP na maɓalli. Tare da taimakonsa, ana iya ba da sigogi na asali ga masu biyan kuɗi.
Mun haɗa na'ura mai ba da hanya tsakanin hanyoyin sadarwa na Archer C6 SOHO zuwa ɗaya daga cikin musaya masu sauyawa kuma mun tabbatar da cewa na'urar abokin ciniki ta sami nasarar samun adireshin.
Ga alama haka
Sabar DHCP da aka gina a cikin maɓalli shine watakila ba shine mafi girman ma'auni da sassauci ba: babu goyon baya ga zaɓuɓɓukan da ba daidai ba, kuma babu haɗi tare da IPAM. Idan mai aiki yana buƙatar ƙarin iko akan tsarin rarraba adireshin IP, to za a yi amfani da sabar DHCP mai kwazo.
T2600G-28SQ yana ba ku damar ƙididdige keɓaɓɓen uwar garken DHCP daban don kowane gidan yanar gizon mai amfani wanda za a tura saƙon ƙa'idar da ke ƙarƙashin tattaunawa. An zaɓi gunkin subnet ta hanyar ƙayyadaddun ƙirar L3 mai dacewa: VLAN (SVI), tashar jiragen ruwa ko tashar tashar jiragen ruwa.
Don gwada aikin gudun ba da sanda, mun saita na'ura mai ba da hanya tsakanin hanyoyin sadarwa daga wani mai siyarwa don aiki azaman uwar garken DHCP, saitunan da aka gabatar a ƙasa.
R1#sho run | s pool
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8Mai amfani da hanyar sadarwa na abokin ciniki ya sake samun nasarar samun adireshin IP.
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.2 010c.8063.f0c2.6a May 24 2019 05:07 PM AutomaticƘarƙashin ɓarna - abubuwan da ke cikin fakitin da aka katse tsakanin maɓalli da sabar DHCP mai sadaukarwa.
Kunshin abun ciki
Ya kamata a lura cewa sauyawa yana goyan bayan Zaɓin 82. Lokacin da aka kunna, canjin zai ƙara bayani game da mahaɗin mai amfani wanda daga ciki aka karɓi saƙon Gano DHCP. Bugu da kari, samfurin T2600G-28SQ yana ba ku damar daidaita manufofin sarrafa ƙarin bayanai yayin saka zaɓi na 82. Kasancewar goyan bayan wannan zaɓi na iya zama da amfani a cikin yanayin da mai biyan kuɗi ya buƙaci a ba shi adireshin IP iri ɗaya, ba tare da la'akari da abin da abokin ciniki-id abokin ciniki ya ba da rahoto game da kansa ba.
Hoton da ke ƙasa yana nuna saƙon Gano DHCP (wanda aka aiko ta hanyar relay) tare da zaɓi No. 82 ƙara.
Saƙo tare da zaɓi na 82
Tabbas, zaku iya sarrafa zaɓin No. 82 ba tare da kafa cikakken isar da saƙo na DHCP ba; ana gabatar da saitunan da suka dace a cikin sashin "DHCP L2 Relay".
Yanzu bari mu canza saitunan uwar garken DHCP don nuna yadda zaɓi No. 82 ke aiki.
R1#sho run | s dhcp
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
class option82_test
address range 192.168.0.222 192.168.0.222
ip dhcp class option82_test
relay agent information
relay-information hex 010e010c74702d6c696e6b5f746573740208000668ff7b66f675
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.222 010c.8063.f0c2.6a May 24 2019 05:33 PM AutomaticWani abu kamar wannan
Ayyukan ba da hanya ta hanyar sadarwa na DHCP zai kasance da amfani a yanayin da mai sauyawa ba wai kawai yana da haɗin L3 da aka haɗa zuwa takamaiman hanyar sadarwa ba, amma wannan ƙirar yana da adireshin IP. Idan babu adireshi akan irin wannan keɓancewa, aikin relay na DHCP VLAN zai zo wurin ceto. Bayani game da subnet a cikin wannan yanayin ana ɗaukar shi daga tsoho dubawa, wato, wuraren adireshi a cikin cibiyoyin sadarwa da yawa za su kasance iri ɗaya (zoowa).
Sau da yawa, masu aiki kuma suna buƙatar kare masu biyan kuɗi daga kuskure ko kunnawa uwar garken DHCP akan kayan abokin ciniki. Mun yanke shawarar tattauna wannan aikin a ɗaya daga cikin sassan da aka keɓe ga batutuwan tsaro.
IEEE 802.1
Hanya ɗaya don tabbatar da masu amfani akan hanyar sadarwa shine amfani da ka'idar IEEE 802.1X. Shahararriyar wannan yarjejeniya a cikin cibiyoyin sadarwa na masu gudanar da sadarwa a Rasha ya riga ya ragu, har yanzu ana amfani da shi musamman a cikin cibiyoyin sadarwar gida na manyan kamfanoni don tabbatar da masu amfani da kungiyar. Maɓallin T2600G-28SQ yana da goyon bayan 802.1X, don haka mai badawa zai iya amfani da shi cikin sauƙi idan ya cancanta.
Don ka'idar IEEE 802.1X don yin aiki, ana buƙatar mahalarta uku: kayan aikin abokin ciniki (mai roƙon), canjin damar mai ba da izini (mai tabbatarwa) da sabar tabbatarwa (yawanci sabobin RADIUS).
Tsarin asali a gefen mai aiki yana da sauƙi sosai. Kuna buƙatar kawai saka adireshin IP na uwar garken RADIUS da aka yi amfani da shi, wanda za a adana bayanan mai amfani a kansa, sannan kuma zaɓi hanyoyin da ake buƙatar tantancewa.
Basic 802.1X saitin
Ana kuma buƙatar ƙaramin tsari a gefen abokin ciniki. Duk tsarin aiki na zamani sun riga sun ƙunshi software masu mahimmanci. Amma idan ya cancanta, zaku iya shigar da amfani da TP-Link 802.1x Client - aikace-aikacen da ke ba ku damar tantance abokin ciniki akan hanyar sadarwar.
Lokacin haɗa PC mai amfani kai tsaye zuwa cibiyar sadarwar mai bayarwa, dole ne a kunna saitunan tabbatarwa don katin sadarwar da aka yi amfani da shi don haɗin.
Duk da haka, a halin yanzu, ba kwamfutar mai amfani ba ne yawanci ana haɗa shi da cibiyar sadarwar mai aiki kai tsaye, amma na'ura mai ba da hanya tsakanin hanyoyin sadarwa na SOHO wanda ke tabbatar da aikin cibiyar sadarwar gida na masu biyan kuɗi (duka masu waya da mara waya). A wannan yanayin, duk saitunan ladabi na 802.1X dole ne a yi su kai tsaye akan na'ura mai ba da hanya tsakanin hanyoyin sadarwa.
Da alama a gare mu an manta da wannan hanyar tantancewa ba tare da cancanta ba a cikin cibiyoyin sadarwar afareta. Ee, tsananin ɗaure mai biyan kuɗi zuwa tashar jiragen ruwa na iya zama mafita mafi sauƙi daga mahangar saitunan kayan aikin mai amfani. Amma idan amfani da shiga da kalmar sirri ya zama dole, to 802.1X ba zai zama irin wannan yarjejeniya mai nauyi ba idan aka kwatanta da haɗin gwiwar da aka yi amfani da su a kan tunnels PPTP/L2TP/PPPoE.
Shigar da ID na PPPoE
Yawancin masu amfani ba kawai a cikin ƙasarmu ba, amma a duk faɗin duniya har yanzu sun fi son amfani da kalmomin sirri masu sauƙi. Kuma shari’o’in satar shaida, kash, ba bakon abu ba ne. Idan mai aiki yana amfani da ka'idar PPPoE a cikin hanyar sadarwarsa don tantance masu amfani, to TP-Link T2600G-28SQ canza zai taimaka wajen magance matsalar da ke da alaƙa da zubar da takaddun shaida. Ana samun wannan ta ƙara tambari na musamman zuwa saƙon Gano Active PPPoE. Ta wannan hanyar, mai badawa zai iya tantance mai biyan kuɗi ba kawai ta hanyar shiga da kalmar sirri ba, har ma ta ƙarin bayanai. Wannan ƙarin bayanan sun haɗa da adireshin MAC na na'urar abokin ciniki, da kuma maɓalli na sauyawa wanda aka haɗa shi.
Wasu masu aiki, bisa ƙa'ida, suna so su hana mai biyan kuɗi (biyu na shiga da kalmar sirri) ikon kewaya cibiyar sadarwa. Aikin shigar da ID na PPPoE zai taimaka a wannan yanayin kuma.
IGMP
IGMP (Ka'idojin Gudanar da Rukunin Intanet) ya kasance kusan shekaru da yawa. Shahararrinta abu ne mai sauƙin fahimta da sauƙin bayyanawa. Amma akwai ƙungiyoyi biyu da ke cikin hulɗar IGMP: PC na mai amfani (ko kowace na'ura, misali, STB) da kuma na'ura mai ba da hanya tsakanin hanyoyin sadarwa na IP da ke aiki da takamaiman sashin cibiyar sadarwa. Masu sauyawa ba sa shiga cikin wannan musayar ta kowace hanya. Gaskiya, magana ta ƙarshe ba gaskiya ba ce gaba ɗaya. Ko a cikin hanyoyin sadarwa na zamani wannan ba gaskiya bane kwata-kwata. Sauyawa suna goyan bayan IGMP don inganta yawan isar da zirga-zirgar ababen hawa. Sauraron zirga-zirgar mai amfani, mai sauyawa yana gano saƙonnin Rahoton IGMP a ciki, tare da taimakon abin da yake ƙayyade tashar jiragen ruwa don isar da zirga-zirgar multicast. Zaɓin da aka kwatanta ana kiransa IGMP Snooping.
Za a iya amfani da goyon bayan yarjejeniyar IGMP ba kawai don inganta zirga-zirga kamar haka ba, har ma don ƙayyade masu biyan kuɗi waɗanda za a iya ba da wani sabis, misali, IPTV. Kuna iya cimma burin da ake so ta hanyar saita sigogi masu tacewa da hannu ko ta amfani da tantancewa.
Ana aiwatar da goyan bayan zirga-zirgar simintin ɗimbin yawa akan masu sauya TP-Link da sauƙi. Misali, ana iya saita duk sigogi don kowace cibiyar sadarwar kama-da-wane daban.
Idan maɓalli da yawa waɗanda ke ƙunshe da masu karɓar zirga-zirgar zirga-zirgar multicast an haɗa su zuwa hanyar sadarwa ta na'ura mai ba da hanya tsakanin hanyoyin sadarwa, to za a tilasta wa na'ura mai ba da hanya tsakanin hanyoyin sadarwa aika kwafi da yawa na fakiti ta wannan hanyar sadarwa (ɗaya don kowane cibiyar sadarwa mai kama-da-wane).
A wannan yanayin, zaku iya haɓaka hanya don isar da zirga-zirgar watsa labarai ta hanyar amfani da fasahar MVR - Rijistar Multicast VLAN.
Asalin mafita shine an ƙirƙiri hanyar sadarwa mai kama-da-wane wacce ta haɗa dukkan masu karɓa. Koyaya, wannan hanyar sadarwar kama-da-wane ana amfani da ita don zirga-zirgar sifofin multicast kawai. Wannan hanya tana ba mai amfani da na'ura mai ba da hanya tsakanin hanyoyin sadarwa damar aika kwafi ɗaya kawai na zirga-zirgar multicast ta hanyar sadarwa.
DDM, OAM da DLDP
DDM – Digital Diagnostic Monitoring. A lokacin aiki na na'urorin na gani, sau da yawa wajibi ne don saka idanu da yanayin tsarin kanta, da kuma tashar tashar tashar da aka haɗa ta. Ayyukan DDM zai taimake ka ka jimre da wannan aikin. Tare da taimakonsa, injiniyoyi masu aiki za su iya saka idanu da zafin jiki na kowane nau'i mai goyan bayan wannan aikin, ƙarfin lantarki da na yanzu, da kuma ikon da aka aiko da karɓar sigina na gani.
Saita matakan ƙofa don sigogin da aka kwatanta a baya zai ba ku damar haifar da wani taron idan sun faɗi a waje da kewayon karɓuwa.
Saita ƙofofin amsa DDM
A zahiri, mai gudanarwa na iya duba ƙimar halin yanzu na ƙayyadaddun sigogi.
Maɓallin TP-Link T2600G-28SQ yana da tsarin sanyaya iska mai aiki. Haka kuma, ba mu taɓa cin karo da ɗumamar ɗumbin kayayyaki na SFP ba a cikin musanyawar mu saboda yawan tashar jiragen ruwa. Koyaya, idan, a cikin ka'idar kawai, an ba da izinin irin wannan yuwuwar (misali, saboda wasu matsaloli a cikin tsarin SFP), to tare da taimakon DDM za a sanar da mai gudanarwa nan da nan game da wani yanayi mai haɗari. Haɗarin a nan, a fili, ba don sauyawar kanta ba ne, amma ga diode / Laser a cikin SFP, tun lokacin da zafin jiki ya karu, ikon siginar da aka fitar na iya raguwa, wanda zai haifar da raguwa a cikin kasafin kuɗi na gani.
Yana da kyau a lura a nan cewa masu sauyawa na TP-Link ba su da "aiki" na kulle mai siyarwa, wato, duk wani nau'in SFP masu dacewa suna goyan bayan, wanda, ba shakka, zai dace sosai ga masu gudanar da cibiyar sadarwa.
OAM - Aiki, Gudanarwa, da Kulawa (IEEE 802.3ah). OAM yarjejeniya ce ta Layer Layer na biyu na samfurin OSI wanda aka ƙera don saka idanu da magance hanyoyin sadarwar Ethernet. Yin amfani da wannan ka'ida, maɓalli na iya sa ido kan yadda ake gudanar da wani takamaiman haɗin gwiwa da kurakurai, kuma ya haifar da faɗakarwa ta yadda mai gudanar da cibiyar sadarwa zai iya sarrafa cibiyar sadarwa yadda ya kamata.
Saitin OAM na asali
Bayanin Ayyukan OAMNa'urori biyu masu maƙwabtaka na OAM suna musayar saƙo lokaci-lokaci ta hanyar aika OAMPDUs, waɗanda suka zo cikin nau'ikan uku: Bayani, Sanarwa na Biki, da Kulawa da Loopback. Yin amfani da bayanan OAMPDUs, maɓallan maƙwabta suna aika junan bayanan ƙididdiga da bayanan da aka ayyana mai gudanarwa. Hakanan ana amfani da wannan nau'in saƙon don kiyaye haɗin kai ta hanyar ka'idar OAM. Ana amfani da saƙonnin sanarwar taron ta aikin sa ido na haɗin gwiwa don sanar da ɗayan ɓangaren cewa gazawar ta faru. Ana amfani da saƙon Saƙon Loopback don gano madauki akan layi.
A ƙasa mun yanke shawarar jera manyan abubuwan da ka'idar OAM ta bayar:
- lura da muhalli (ganowa da kirga firam ɗin da suka karye),
- RFI – Alamar gazawar nesa (aika sanarwar gazawar akan tashar),
- Loopback mai nisa (gwajin tashoshi don auna jinkiri, bambancin jinkiri (jitter), adadin firam ɗin da suka ɓace).
Wani zaɓin da ake buƙata akan masu sauyawa na gani shine ikon gano matsaloli akan tashar sadarwa, wanda ke haifar da tashar ta zama simplex, wato, ana iya aika bayanai ta hanya ɗaya kawai. Maɓallan mu suna amfani da DLDP - Tsarin Gano Haɗin Na'ura don gano hanyoyin haɗin kai. Don zama gaskiya, yana da kyau a lura cewa ana goyan bayan ka'idar DLDP akan duka hanyoyin sadarwa na gani da jan ƙarfe, amma a cikin ra'ayinmu, zai zama mafi shahara yayin amfani da layin fiber optic.
Lokacin da aka gano hanyar haɗin kai ba tare da izini ba, mai kunnawa zai iya rufe matsala ta atomatik, wanda zai haifar da sake gina bishiyar STP da amfani da tashoshi na sadarwa na ajiya.
A cikin arsenal ɗinmu akwai samfuran SFP waɗanda ke karɓa da watsa sigina akan fiber ɗaya. Suna aiki na musamman cikin nau'i-nau'i kuma suna amfani da sigina na gani a tsawon tsayi daban-daban don watsawa tsakanin su biyun. Misali shine TL-SM321A da TL-SM321B. Lokacin amfani da irin waɗannan kayayyaki, lalacewar fiber ɗaya zai haifar da cikakkiyar rashin aiki na dukkan tashar gani. Duk da haka, ko da a irin waɗannan tashoshi tsarin DLDP zai kasance cikin buƙata, tun da yake, ko da yake wannan yana faruwa da wuyar gaske, tashar na iya samun nau'o'in nuna gaskiya daban-daban don nau'i-nau'i daban-daban. Matsala mai yuwuwa ita ce bayyanan tashar ta bambanta dangane da alkiblar yada hasken. Na'urar nazari zai taimaka wajen gano waɗannan matsalolin, amma wannan labari ne mabanbanta.
LLDP
A cikin manyan cibiyoyin sadarwar kamfanoni ko masu aiki, matsaloli suna tasowa lokaci-lokaci tare da ƙarewar takaddun cibiyar sadarwa ko rashin daidaito a cikin shirye-shiryenta. Mai gudanar da cibiyar sadarwa na iya fuskantar yanayi inda ya zama dole don gano ainihin kayan aikin afaretan da ke haɗe zuwa wani ƙayyadaddun musaya. LLDP – Link Layer Discovery Protocol (IEEE 802.1AB) zai zo wurin ceto.
Ayyukan Ayyukan LLDP
Maɓallan mu na goyan bayan LLDP ba kawai don gano maɓallan maƙwabta ko wasu na'urorin cibiyar sadarwa ba, har ma don tantance iyawar su.
Takwarorinsu na tagulla na mu na iya amfani da LLDP-MED don sauƙaƙa tsarin haɗa wayoyin IP. Har ila yau, ta yin amfani da wannan zaɓi, PoE mai sauyawa zai iya yin shawarwari da sigogi na wutar lantarki tare da na'urar da aka kunna. Mun riga mun yi magana game da wannan dalla-dalla a cikin ɗayanmu .
SDM da oversubscription
Kusan duk masu sauyawa na zamani suna aiwatar da firam da fakiti ba tare da amfani da na'ura mai sarrafawa ta tsakiya ba. Ana aiwatar da aiki (ƙididdige ƙididdige ƙididdiga, yin amfani da lissafin samun dama da yin wasu duban tsaro, da kuma yin yanke shawara na sauyawa / tukwici) ta amfani da kwakwalwan kwamfuta na musamman, wanda ke ba da damar saurin watsawa na zirga-zirgar mai amfani. Canjin da ke ƙarƙashin tattaunawa yana ba da damar sarrafa zirga-zirga a matsakaicin matsakaici. Wannan yana nufin cewa aikin na'urar ya isa don aika bayanai a mafi girman saurin gudu akan duk tashar jiragen ruwa a lokaci guda. Samfurin T2600G-28SQ yana da tashar jiragen ruwa na ƙasa 24 (zuwa masu amfani), waɗanda ke aiki a cikin saurin 1 Gbit/s, da kuma 4 tashoshi masu tasowa (zuwa cibiyar sadarwar) na 10 Gbit/s. A lokaci guda, aikin motar bas na ƙetare shine 128 Gbit / s, wanda ya isa don aiwatar da matsakaicin adadin zirga-zirga mai shigowa.
Don yin gaskiya, ya kamata a lura cewa aikin matrix na canzawa shine fakiti miliyan 95,2 a sakan daya. Wato, lokacin amfani da mafi ƙarancin yuwuwar firam masu tsayin 64 bytes kawai, jimillar aikin na'urar zai zama 97,5 Gbit/s. Koyaya, irin wannan bayanin martabar zirga-zirga kusan ba zai yuwu ba ga cibiyoyin sadarwar sadarwar sadarwar.
Menene oversubscriptionWani muhimmin al'amari shine rabon saurin tashoshi na sama da na ƙasa (cikakken rajista). A nan, a fili, duk abin da ya dogara da topology. Idan mai gudanarwa ya yi amfani da duk hanyoyin sadarwa na 10 GE guda hudu don haɗawa zuwa cibiyar sadarwar kuma ya haɗa su ta amfani da LAG (Link Aggregation Group) ko fasahar Port-Channel, to, saurin da aka samu ta hanyar ƙididdiga zai zama 40 Gbit/s, wanda zai fi girma. fiye da isa don biyan bukatun duk masu biyan kuɗi da aka haɗa. Bugu da ƙari, ba lallai ba ne cewa duk hanyoyin haɗin kai huɗu sun haɗa zuwa na'urar jiki ɗaya. Ana iya haɗa haɗin zuwa tarin maɓalli, ko zuwa na'urori biyu a haɗa su cikin gungu (ta amfani da fasahar vPC ko makamancin haka). A wannan yanayin babu fiye da biyan kuɗi.
Kuna iya amfani da duk hanyoyin haɗin kai guda huɗu a lokaci guda ba kawai ta hanyar haɗa su ta amfani da LAG ba. Ana iya samun irin wannan tasiri ta hanyar daidaita MSTP yadda ya kamata, amma wannan labari ne mabanbanta.
Hanyar haɗin L2 da aka saba amfani da ita ta biyu ita ce a yi amfani da LAGs masu zaman kansu guda biyu (ɗaya zuwa kowane maɓalli na tarawa). A wannan yanayin, mai yuwuwa, ɗayan hanyoyin haɗin gwiwar za a toshe ta hanyar ka'idar STP (lokacin amfani da STP ko RSTP). Over subscription zai zama 5:6.
A rarer, amma har yanzu quite yuwuwar halin da ake ciki: T2600G-28SQ an haɗa ta tashoshi masu zaman kansu zuwa sama ko sauyawa. Ka'idar STP/RSTP zata bar irin wannan hanyar haɗin gwiwa ɗaya kawai a cikin yanayin da ba a katange. Over subscription zai kasance 5:12.
Aiki tare da alamar alama: ƙididdige biyan kuɗin shiga don yanayin da aka kwatanta a cikin sashin STP, inda muka kalli wani misali topology lokacin da aka haɗa maɓallan shiga guda biyu zuwa na'urar tarawa iri ɗaya kuma suna haɗa juna.
Chips ɗin da za a iya tsarawa waɗanda ke ba da damar irin wannan babban saurin canja wuri abu ne mai tsadar gaske, don haka muna ƙoƙarin inganta amfani da su ta hanyar rarraba albarkatu da kyau tsakanin ayyuka daban-daban. SDM - Canja Database Management yana da alhakin rarrabawa.
Ana yin rarraba ta amfani da bayanin martabar SDM. A halin yanzu akwai bayanan martaba guda uku don amfani, da aka jera a ƙasa.
- Default yana ba da daidaitaccen bayani don amfani da jerin hanyoyin shiga MAC da IP, da kuma abubuwan ganowar ARP.
- EnterpriseV4 yana ba ku damar haɓaka albarkatun da ke akwai don amfani ta MAC da lissafin samun damar IP.
- EnterpriseV6 yana keɓance wasu albarkatu don amfani da lissafin samun damar IPV6.
Dole ne a sake kunna canjin don amfani da sabon bayanin martaba.
ƙarshe
Dangane da matsayi na farko, wannan canji ya fi dacewa ga masu gudanar da sadarwa waɗanda ke fuskantar aikin samar da hanyar sadarwa ta nesa mai nisa. Ana iya amfani da na'urar duka a matakin shiga, alal misali, a cikin ƙananan gidaje da gidajen gari, da kuma tara tashoshi masu zuwa daga masu sauyawa masu shiga cikin gine-gine; wato, duk inda ake buƙatar haɗin kai zuwa abubuwa masu nisa. Lokacin amfani da tashoshi na sadarwa na gani, mai haɗin haɗin yana iya kasancewa a nesa har zuwa kilomita da yawa.
A gefen abokin ciniki, ana iya ƙare hanyoyin haɗin kai a kan ƙananan maɓalli tare da musaya na gani ko a kan masu juyawa.
Babban adadin ƙa'idodin ladabi da zaɓuɓɓuka za su ba da damar yin amfani da T2600G-28SQ a cikin hanyar sadarwar Ethernet na ma'aikaci tare da kowane nau'in topology da kowane saitin fasahar da aka yi amfani da shi da sabis ɗin da aka bayar. Ana sarrafa maɓalli daga nesa ta amfani da hanyar yanar gizo ko layin umarni. Idan daidaitawar gida ya zama dole, zaku iya amfani da tashar jiragen ruwa, samfurin T2600G-28SQ yana da biyu daga cikinsu: RJ-45 da micro-USB. A matsayin karamin tashi a cikin maganin shafawa, mun lura da rashin goyon baya ga stacking da kuma na biyu ikon samar. Gaskiya ne, yawanci a waje da cibiyoyin bayanai na masu samarwa, kasancewar layin lantarki na biyu zai kasance da wuya.
Fa'idodinsa sun haɗa da ƙarancin farashi, babban adadin masu biyan kuɗi na tashoshin gani na gani, kasancewar 10 GE uplinks na gani na gani, da tashoshin jiragen ruwa guda huɗu da aka haɗa da isar da zirga-zirga a matsakaicin matsakaici.
source: www.habr.com