M'nkhani ziwiri zapitazi (
Tiyerekeze kuti tasankha kuti tigwiritse ntchito nsanja ya Check Point Maestro. Kuti tichite izi, tiyeni titenge mtolo wa zipata zitatu za 6500 ndi oimba awiri (chifukwa cholekerera zolakwika) - CPAP-MHS-6503-TURBO + CPAP-MHO-140. Chithunzi cholumikizira thupi (L1) chidzawoneka motere:
Chonde dziwani kuti ndikofunikira kulumikiza madoko a Management a orchestrators, omwe ali pagawo lakumbuyo.
Ndikukayikira kuti zinthu zambiri sizingakhale zomveka bwino pachithunzichi, kotero ndipereka chithunzi chofananira cha gawo lachiwiri lachitsanzo cha OSI:
Mfundo zazikuluzikulu za ndondomekoyi:
- Oimba awiri nthawi zambiri amaikidwa pakati pa masiwichi oyambira ndi masiwichi akunja. Iwo. kudzipatula pagulu la intaneti.
- Zimaganiziridwa kuti "core" ndi stack (kapena VSS) ya masiwichi awiri pomwe PortChannel ya madoko 4 imapangidwa. Kwa HA Yathunthu, woyimba aliyense amalumikizidwa ndi switch iliyonse. Ngakhale mutha kugwiritsa ntchito ulalo umodzi panthawi imodzi, monga zimachitikira ndi VLAN 5 - network management (maulalo ofiira).
- Maulalo omwe ali ndi udindo wotumiza magalimoto opindulitsa (achikasu) amalumikizidwa ndi madoko 10 a gigabit. Ma module a SFP amagwiritsidwa ntchito pa izi - Chithunzi cha CPAC-TR-10SR-B
- Momwemonso (Full HA) njira, oimba amalumikizana ndi ma switch akunja (malumikizidwe abuluu), koma pogwiritsa ntchito madoko a gigabit ndi ma module ofanana a SFP - CPAC-TR-1T-B.
Zipata zokha zimalumikizidwa ndi oyimba aliyense pogwiritsa ntchito zingwe zapadera za DAC zomwe zimaphatikizidwa (Direct Attach Cable (DAC), 1m - CPAC-DAC-10G-1M):
Monga momwe tikuonera pa chithunzichi, payenera kukhala kugwirizana pakati pa oyitanitsa kuti agwirizane (pinki ulalo). Chingwe chofunikira chimaphatikizidwanso mu kit. Mafotokozedwe omaliza akuwoneka motere:
Tsoka ilo, sindingathe kufalitsa mitengo poyera. Koma mukhoza nthawi zonse
Ponena za dera la L3, limawoneka losavuta:
Monga mukuwonera, zipata zonse pamlingo wachitatu zimawoneka ngati chipangizo chimodzi. Kufikira kwa oimba ndi kotheka kudzera mumanetiweki a Management.
Izi zikumaliza nkhani yathu yayifupi. Ngati muli ndi mafunso okhudza zojambulazo kapena mukufuna magwero, siyani ndemanga kapena
M'nkhani yotsatira tidzayesa kuwonetsa momwe Check Point Maestro imathandizira ndikuyesa kuyezetsa katundu. Ndiye khalani maso (
PS Ndimapereka kuthokoza kwanga kwa Anatoly Masover ndi Ilya Anokhin (kampani ya Check Point) chifukwa cha thandizo lawo pokonzekera zojambulazi!
Source: www.habr.com