Kab lus no yog qhov thib ob hauv cov kab lus "Yuav Ua Li Cas Tswj Koj Cov Khoom Siv Hauv Network." Cov ntsiab lus ntawm tag nrho cov ntawv hauv koob thiab cov txuas tuaj yeem pom .
Peb lub hom phiaj ntawm theem no yog coj kev txiav txim rau cov ntaub ntawv thiab teeb tsa.
Thaum kawg ntawm txoj kev no, koj yuav tsum muaj cov ntaub ntawv tsim nyog thiab lub network teeb tsa raws li lawv.
Tam sim no peb yuav tsis tham txog kev soj ntsuam kev ruaj ntseg - qhov no yuav yog qhov kev kawm ntawm peb feem.
Qhov nyuaj ntawm kev ua tiav cov haujlwm uas tau muab rau ntawm theem no, tau kawg, nws txawv ntawm lub tuam txhab mus rau lub tuam txhab.
Qhov xwm txheej zoo tagnrho yog thaum twg
- koj lub network tau tsim raws li qhov project thiab koj muaj cov ntaub ntawv tiav
- tau raug coj los siv hauv koj lub tuam txhab rau network
- Raws li cov txheej txheem no, koj muaj cov ntaub ntawv (nrog rau txhua daim duab tsim nyog) uas muab cov ntaub ntawv tiav txog lub xeev tam sim no.
Hauv qhov no, koj txoj haujlwm yooj yim heev. Koj yuav tsum kawm cov ntaub ntawv thiab tshuaj xyuas txhua qhov kev hloov pauv uas tau ua.
Hauv qhov xwm txheej phem tshaj plaws, koj yuav muaj
- ib lub network tsim yam tsis muaj qhov project, tsis muaj kev npaj, tsis muaj kev pom zoo, los ntawm cov kws ua haujlwm uas tsis muaj kev txawj ntse txaus,
- nrog chaotic, undocumented hloov, nrog ntau "khoom khib nyiab" thiab suboptimal daws
Nws yog qhov tseeb tias koj qhov xwm txheej yog qhov chaw nyob nruab nrab, tab sis hmoov tsis, ntawm qhov ntsuas no zoo dua - zuj zus, muaj qhov tshwm sim siab uas koj yuav nyob ze rau qhov kawg phem tshaj.
Hauv qhov no, koj tseem yuav xav tau lub peev xwm los nyeem lub siab, vim tias koj yuav tsum kawm kom nkag siab tias "cov neeg tsim qauv" xav ua dab tsi, kho lawv cov logic, ua kom tiav qhov tsis tiav thiab tshem tawm "cov khib nyiab".
Thiab, ntawm chav kawm, koj yuav tsum tau kho lawv qhov yuam kev, hloov pauv (ntawm theem no kom tsawg li sai tau) tsim thiab hloov lossis rov tsim cov tswv yim.
Kab lus no tsis muaj txoj kev thov kom tiav. Ntawm no kuv yuav piav qhia tsuas yog cov ntsiab lus dav dav thiab tsom rau qee qhov teeb meem uas yuav tsum tau daws.
Txheej cov ntaub ntawv
Cia peb pib nrog ib qho piv txwv.
Hauv qab no yog qee cov ntaub ntawv uas raug tsim los ntawm Cisco Systems thaum tsim.
CR - Cov kev xav tau ntawm cov neeg siv khoom, cov neeg siv khoom xav tau (kev qhia tshwj xeeb).
Nws yog tsim ua ke nrog cov neeg siv khoom thiab txiav txim siab cov kev xav tau ntawm lub network.HLD - Kev Tsim Kho Qib Siab, tsim qib siab raws li kev xav tau hauv network (CR). Cov ntaub ntawv piav qhia thiab ua kom pom tseeb cov kev txiav txim siab ntawm kev tsim vaj tsev (topology, kev cai, kev xaiv kho vajtse, ...). HLD tsis muaj cov ntsiab lus tsim xws li cov interfaces thiab IP chaw siv. Tsis tas li ntawd, qhov tshwj xeeb kho vajtse configuration tsis tau tham ntawm no. Hloov chaw, daim ntawv no yog npaj los piav qhia cov ntsiab lus tseem ceeb tsim rau tus neeg siv khoom kev tswj hwm.
LLD - Tsawg Theem Tsim, qis-qib tsim raws li qib siab tsim (HLD).
Nws yuav tsum muaj tag nrho cov ntsiab lus tsim nyog los siv qhov project, xws li cov ntaub ntawv hais txog kev sib txuas thiab teeb tsa cov cuab yeej siv li cas. Nov yog daim ntawv qhia ua tiav rau kev siv tus qauv tsim. Cov ntaub ntawv no yuav tsum muab cov ntaub ntawv txaus rau nws qhov kev siv txawm tias los ntawm cov neeg ua haujlwm tsis muaj peev xwm.Ib yam dab tsi, piv txwv li, IP chaw nyob, AS tus lej, lub cev hloov pauv (cabling), tuaj yeem "tso tawm" hauv cov ntaub ntawv sib cais, xws li NIP (Network Implementation Plan).
Kev tsim kho ntawm lub network pib tom qab tsim cov ntaub ntawv no thiab tshwm sim nyob rau hauv nruj raws li lawv thiab tom qab ntawd raug soj ntsuam los ntawm cov neeg siv khoom (kev ntsuam xyuas) kom ua raws li tus qauv tsim.
Tau kawg, cov neeg sib txawv sib txawv, cov neeg siv khoom sib txawv, thiab cov teb chaws sib txawv tuaj yeem muaj cov kev cai sib txawv rau cov ntaub ntawv ua haujlwm. Tab sis kuv xav kom tsis txhob raug cai thiab xav txog qhov teeb meem ntawm nws qhov zoo. Cov theem no tsis yog hais txog kev tsim, tab sis hais txog kev muab cov khoom hauv kev txiav txim, thiab peb xav tau cov ntaub ntawv txaus (daim duab, rooj, cov lus piav qhia ...) kom ua tiav peb cov dej num.
Thiab hauv kuv lub tswv yim, muaj qhov tsawg kawg nkaus, yam tsis muaj qhov tsis tuaj yeem tswj hwm lub network zoo.
Cov no yog cov ntaub ntawv hauv qab no:
- Daim duab (log) ntawm lub cev hloov pauv (cabling)
- network daim duab lossis daim duab kos nrog cov ntaub ntawv tseem ceeb L2/L3
Lub cev hloov daim duab
Hauv qee lub tuam txhab me me, kev ua haujlwm cuam tshuam txog kev teeb tsa thiab kev hloov lub cev (cabling) yog lub luag haujlwm ntawm cov engineers network.
Hauv qhov no, qhov teeb meem yog ib feem daws los ntawm txoj hauv kev hauv qab no.
- siv cov lus piav qhia ntawm lub interface los piav qhia txog dab tsi txuas nrog nws
- kev tswj hwm kaw tag nrho cov khoom siv network tsis txuas nrog cov chaw nres nkoj
Qhov no yuav muab sijhawm rau koj, txawm tias muaj teeb meem nrog qhov txuas (thaum cdp lossis lldp tsis ua haujlwm ntawm qhov kev sib txuas no), kom txiav txim siab sai li sai tau qhov txuas rau qhov chaw nres nkoj no.
Koj tuaj yeem pom tau yooj yim pom cov chaw nres nkoj twg nyob thiab qhov twg yog dawb, uas yog qhov tsim nyog rau kev npaj kev sib txuas ntawm cov cuab yeej tshiab network, servers lossis chaw ua haujlwm.
Tab sis nws yog qhov tseeb tias yog tias koj tsis nkag mus rau cov cuab yeej siv, koj kuj yuav tsis nkag mus rau cov ntaub ntawv no. Tsis tas li ntawd, nyob rau hauv txoj kev no koj yuav tsis tuaj yeem sau cov ntaub ntawv tseem ceeb xws li cov khoom siv zoo li cas, lub zog siv zog npaum li cas, muaj pes tsawg lub chaw nres nkoj, dab tsi khib nws nyob rau hauv, dab tsi thaj vaj huam sib luag nyob qhov twg thiab qhov twg (nyob rau hauv dab tsi khib / thaj vaj huam sib luag ) lawv sib txuas. Yog li ntawd, cov ntaub ntawv ntxiv (tsis yog cov lus piav qhia ntawm cov cuab yeej) tseem muaj txiaj ntsig zoo.
Qhov kev xaiv zoo tshaj plaws yog siv cov ntawv thov tsim los ua haujlwm nrog hom ntaub ntawv no. Tab sis koj tuaj yeem txwv koj tus kheej rau cov lus yooj yim (piv txwv li hauv Excel) lossis tso saib cov ntaub ntawv uas koj xav tias tsim nyog hauv L1 / L2 daim duab.
Tseem ceeb!
Ib tus kws tshaj lij network, tau kawg, tuaj yeem paub zoo txog cov kev tsis sib haum xeeb thiab cov qauv ntawm SCS, hom racks, hom khoom siv hluav taws xob tsis cuam tshuam, qhov chaw txias thiab kub yog dab tsi, yuav ua li cas rau hauv av kom zoo ... ib yam li hauv paus ntsiab lus nws tuaj yeem ua tau. paub physics ntawm elementary hais los yog C ++. Tab sis ib tug yuav tsum to taub tias tag nrho cov no tsis yog nws cheeb tsam ntawm kev paub.
Yog li ntawd, nws yog ib qho kev xyaum zoo uas yuav tsum muaj cov chaw ua haujlwm siab lossis cov neeg mob siab rau los daws cov teeb meem ntsig txog kev teeb tsa, kev sib txuas, kev saib xyuas cov cuab yeej, nrog rau kev hloov lub cev. Feem ntau rau cov chaw zov me nyuam cov ntaub ntawv no yog cov chaw ua haujlwm cov ntaub ntawv, thiab rau lub chaw ua haujlwm nws yog pab pawg.
Yog tias qhov kev faib tawm no tau muab rau hauv koj lub tuam txhab, ces cov teeb meem ntawm kev nkag mus rau lub cev hloov pauv tsis yog koj txoj haujlwm, thiab koj tuaj yeem txwv koj tus kheej nkaus xwb rau cov lus piav qhia ntawm lub interface thiab kev tswj hwm ntawm cov chaw nres nkoj tsis siv.
Network daim duab
Tsis muaj universal mus kom ze rau kev kos duab kos duab.
Qhov tseem ceeb tshaj plaws yog cov duab kos yuav tsum muaj kev nkag siab txog kev khiav tsheb yuav ua li cas, los ntawm cov ntsiab lus thiab lub cev ntawm koj lub network.
Los ntawm lub cev peb txhais tau tias
- khoom siv
- interfaces / chaw nres nkoj ntawm cov khoom siv nquag
Nyob rau hauv logical -
- Cov khoom siv logical (N7K VDC, Palo Alto VSYS, ...)
- VRF
- Vilans
- subinterfaces
- cov qhov
- thaj chaw
- ...
Tsis tas li, yog tias koj lub network tsis yog theem pib, nws yuav muaj cov ntu sib txawv.
Piv txwv
- data center
- hauv internet
- WAN
- chaw taws teeb nkag
- chaw ua haujlwm LAN
- DMZ
- ...
Nws yog qhov zoo kom muaj ob peb daim duab uas muab ob daim duab loj (yuav ua li cas cov tsheb khiav ntawm txhua ntu) thiab cov lus piav qhia ntxaws ntawm txhua ntu.
Txij li thaum nyob rau hauv niaj hnub tes hauj lwm muaj peev xwm muaj ntau lub logic txheej, tej zaum nws yog ib tug zoo (tab sis tsis tsim nyog) txoj kev los ua kom sib txawv circuits rau txawv khaubncaws sab nraud povtseg, piv txwv li, nyob rau hauv cov ntaub ntawv ntawm ib tug overlay mus kom ze qhov no yuav yog cov nram qab no circuits:
- overlay
- L1 / L2 hauv qab
- L3 qab
Tau kawg, daim duab tseem ceeb tshaj plaws, yam tsis muaj qhov tsis yooj yim sua kom nkag siab lub tswv yim ntawm koj tus qauv tsim, yog daim duab routing.
Routing tswvyim
Yam tsawg kawg, daim duab no yuav tsum xav txog
- dab tsi routing raws tu qauv siv thiab nyob qhov twg
- Cov ntaub ntawv yooj yim txog kev teeb tsa raws tu qauv (chaw / AS tus lej / router-id / ...)
- ntawm cov khoom siv twg puas rov faib dua?
- qhov twg filtering thiab txoj kev aggregation tshwm sim
- default route information
Tsis tas li ntawd, L2 tswvyim (OSI) feem ntau muaj txiaj ntsig.
L2 Scheme (OSI)
Daim duab no tuaj yeem qhia cov ntaub ntawv hauv qab no:
- dab tsi VLANs
- cov chaw nres nkoj twg yog cov chaw nres nkoj lub cev
- cov chaw nres nkoj twg tau sib sau ua ke rau hauv ether-channel (chaw nres nkoj channel), virtual port channel
- Dab tsi STP raws tu qauv siv thiab ntawm cov khoom siv dab tsi
- yooj yim STP nqis: hauv paus / hauv paus thaub qab, STP nqi, qhov tseem ceeb chaw nres nkoj
- Ntxiv STP nqis: BPDU tus neeg saib xyuas / lim, tus neeg saib xyuas hauv paus…
Cov qauv tsim yuam kev
Ib qho piv txwv ntawm txoj kev tsis zoo rau kev tsim lub network.
Cia peb ua piv txwv yooj yim ntawm kev tsim lub chaw ua haujlwm yooj yim LAN.
Muaj kev paub txog kev qhia xov tooj rau cov tub ntxhais kawm, kuv tuaj yeem hais tias yuav luag txhua tus tub ntxhais kawm los ntawm nruab nrab ntawm lub semester thib ob muaj qhov kev paub tsim nyog (raws li ib feem ntawm chav kawm uas kuv tau qhia) los teeb tsa lub chaw ua haujlwm LAN yooj yim.
Dab tsi yog qhov nyuaj heev txog kev sib txuas cov keyboards rau ib leeg, teeb tsa VLANs, SVI interfaces (nyob rau hauv rooj plaub ntawm L3 keyboards) thiab teeb tsa cov kev sib txuas zoo li qub?
Txhua yam yuav ua haujlwm.
Tab sis tib lub sijhawm, cov lus nug ntsig txog
- kev ruaj ntseg
- kev tshwj tseg
- network scaling
- kev tsim khoom
- hla kev
- kev ntseeg tau
- ...
Qee lub sij hawm kuv hnov cov lus hais tias lub chaw ua haujlwm LAN yog ib yam yooj yim heev thiab kuv feem ntau hnov qhov no los ntawm engineers (thiab cov thawj coj) uas ua txhua yam tab sis networks, thiab lawv hais qhov no kom ntseeg tau tias tsis txhob xav tsis thoob yog tias LAN yuav yog. ua los ntawm cov neeg uas muaj kev xyaum tsis txaus thiab kev paub thiab yuav ua nrog kwv yees li qhov yuam kev uas kuv yuav piav qhia hauv qab no.
Common L1 (OSI) Design mistakes
- Yog tias, txawm li cas los xij, koj kuj yog lub luag haujlwm rau SCS, tom qab ntawd ib qho ntawm cov txiaj ntsig tsis zoo tshaj plaws uas koj yuav tau txais yog kev hloov pauv tsis tu ncua thiab tsis xav txog.
Kuv kuj tseem yuav faib raws li hom L1 yuam kev cuam tshuam nrog cov peev txheej ntawm cov cuab yeej siv, piv txwv li,
- bandwidth tsis txaus
- TCAM tsis txaus ntawm cov khoom siv (lossis siv tsis zoo)
- kev ua haujlwm tsis txaus (feem ntau cuam tshuam nrog firewalls)
Common L2 (OSI) Design mistakes
Feem ntau, thaum tsis muaj kev nkag siab zoo txog yuav ua li cas STP ua haujlwm thiab qhov teeb meem uas nws coj los nrog nws, cov keyboards tau txuas nrog chaotically, nrog rau kev teeb tsa, tsis muaj STP ntxiv.
Yog li ntawd, peb feem ntau muaj cov hauv qab no
- loj STP network txoj kab uas hla, uas tuaj yeem ua rau cov cua daj cua dub tshaj tawm
- STP hauv paus yuav raug txiav txim random (raws li mac chaw nyob) thiab txoj kev tsheb yuav zoo tshaj
- cov chaw nres nkoj txuas nrog cov tswv yuav tsis raug teeb tsa raws li ntug (portfast), uas yuav ua rau STP rov suav dua thaum qhib / tawm qhov kawg chaw nres tsheb
- lub network yuav tsis raug segmented nyob rau theem L1/L2, raws li qhov tshwm sim ntawm cov teeb meem nrog ib qho kev hloov (piv txwv li, lub hwj chim overload) yuav ua rau ib tug recalculation ntawm STP topology thiab nres tsheb nyob rau hauv tag nrho cov VLANs ntawm tag nrho cov keyboards (xws li lub ib qho tseem ceeb los ntawm qhov pom ntawm kev pabcuam txuas ntxiv)
Piv txwv ntawm kev ua yuam kev hauv L3 (OSI) tsim
Ob peb yam yuam kev ntawm novice networkers:
- Kev siv ntau zaus (lossis siv nkaus xwb) ntawm kev ua haujlwm zoo li qub
- siv cov suboptimal routing raws tu qauv rau ib tug muab
- suboptimal logical network segmentation
- suboptimal siv qhov chaw nyob, uas tsis pub txoj kev aggregation
- tsis muaj txoj kev thaub qab
- tsis muaj kev tshwj tseg rau lub rooj vag qub
- asymmetric routing thaum rebuilding txoj kev (tuaj yeem yog qhov tseem ceeb nyob rau hauv rooj plaub ntawm NAT / PAT, statefull firewalls)
- teeb meem nrog MTU
- Thaum cov kev tsim kho dua tshiab, cov tsheb khiav mus los ntawm lwm thaj chaw ruaj ntseg lossis txawm tias lwm qhov hluav taws xob, uas ua rau cov tsheb khiav no raug poob
- tsis zoo topology scalability
Kev ntsuas ntsuas kev tsim qauv zoo
Thaum peb tham txog optimality/tsis-optimality, peb yuav tsum to taub los ntawm qhov kev pom ntawm cov txheej xwm uas peb yuav ntsuam xyuas qhov no. Ntawm no, los ntawm kuv qhov kev xav, yog qhov tseem ceeb tshaj plaws (tab sis tsis yog tag nrho) cov txheej txheem (thiab kev piav qhia nyob rau hauv kev cuam tshuam rau kev coj ua raws cai):
- scalability
Piv txwv li, koj txiav txim siab ntxiv lwm qhov chaw khaws ntaub ntawv. Koj ua tau yooj yim npaum li cas? - yooj yim siv (managability)
Cov kev hloov pauv tau yooj yim thiab nyab xeeb npaum li cas, xws li tshaj tawm cov phiaj xwm tshiab lossis kev lim dej? - muaj
Qhov feem pua ntawm lub sijhawm koj qhov system muab cov kev pabcuam uas xav tau? - kev ruaj ntseg
Kev nyab xeeb npaum li cas yog cov ntaub ntawv xa mus? - nqi
Hloov
Lub hauv paus ntsiab lus ntawm theem no tuaj yeem qhia los ntawm cov qauv "tsis txhob ua phem."
Yog li ntawd, txawm tias koj tsis pom zoo tag nrho nrog rau tus qauv tsim thiab xaiv qhov kev siv (configuration), nws tsis yog ib txwm xav kom hloov pauv. Ib txoj hauv kev tsim nyog yog txhawm rau txheeb xyuas txhua qhov teeb meem raws li ob qho kev txwv:
- Qhov teeb meem no yuav kho tau yooj yim npaum li cas
- Nws muaj kev pheej hmoo ntau npaum li cas?
Ua ntej tshaj plaws, nws yog ib qho tsim nyog los tshem tawm dab tsi tam sim no txo cov qib kev pab cuam uas tau muab qis dua qib uas tau txais, piv txwv li, teeb meem ua rau pob ntawv poob. Tom qab ntawd kho qhov uas yooj yim tshaj plaws thiab nyab xeeb tshaj plaws los txhim kho hauv kev txo qis ntawm kev pheej hmoo loj (los ntawm kev pheej hmoo siab tsim lossis teeb meem teeb meem rau cov uas tsis tshua muaj kev pheej hmoo).
Perfectionism nyob rau theem no tuaj yeem tsim kev puas tsuaj. Nqa tus tsim mus rau lub xeev txaus siab thiab synchronize lub network configuration raws li.
Tau qhov twg los: www.hab.com