3. Zochitika zodziwika bwino za Check Point Maestro

3. Zochitika zodziwika bwino za Check Point Maestro

M'nkhani ziwiri zapitazi (Choyamba, chachiwiri) tinayang'ana pa mfundo ya ntchito Onani Point Maestro, komanso ubwino waumisiri ndi zachuma za yankho ili. Tsopano ndikufuna kupita ku chitsanzo chapadera ndikufotokozera momwe mungagwiritsire ntchito Check Point Maestro. Ndiwonetsa mafotokozedwe amtundu komanso ma network topology (L1, L2 ndi L3 zithunzi) pogwiritsa ntchito Maestro. M'malo mwake, mudzawona pulojekiti yokhazikika yopangidwa kale.

Tiyerekeze kuti tasankha kuti tigwiritse ntchito nsanja ya Check Point Maestro. Kuti tichite izi, tiyeni titenge mtolo wa zipata zitatu za 6500 ndi oimba awiri (chifukwa cholekerera zolakwika) - CPAP-MHS-6503-TURBO + CPAP-MHO-140. Chithunzi cholumikizira thupi (L1) chidzawoneka motere:

3. Zochitika zodziwika bwino za Check Point Maestro

Chonde dziwani kuti ndikofunikira kulumikiza madoko a Management a orchestrators, omwe ali pagawo lakumbuyo.

Ndikukayikira kuti zinthu zambiri sizingakhale zomveka bwino pachithunzichi, kotero ndipereka chithunzi chofananira cha gawo lachiwiri lachitsanzo cha OSI:

3. Zochitika zodziwika bwino za Check Point Maestro

Mfundo zazikuluzikulu za ndondomekoyi:

  • Oimba awiri nthawi zambiri amaikidwa pakati pa masiwichi oyambira ndi masiwichi akunja. Iwo. kudzipatula pagulu la intaneti.
  • Zimaganiziridwa kuti "core" ndi stack (kapena VSS) ya masiwichi awiri pomwe PortChannel ya madoko 4 imapangidwa. Kwa HA Yathunthu, woyimba aliyense amalumikizidwa ndi switch iliyonse. Ngakhale mutha kugwiritsa ntchito ulalo umodzi panthawi imodzi, monga zimachitikira ndi VLAN 5 - network management (maulalo ofiira).
  • Maulalo omwe ali ndi udindo wotumiza magalimoto opindulitsa (achikasu) amalumikizidwa ndi madoko 10 a gigabit. Ma module a SFP amagwiritsidwa ntchito pa izi - Chithunzi cha CPAC-TR-10SR-B
  • Momwemonso (Full HA) njira, oimba amalumikizana ndi ma switch akunja (malumikizidwe abuluu), koma pogwiritsa ntchito madoko a gigabit ndi ma module ofanana a SFP - CPAC-TR-1T-B.

Zipata zokha zimalumikizidwa ndi oyimba aliyense pogwiritsa ntchito zingwe zapadera za DAC zomwe zimaphatikizidwa (Direct Attach Cable (DAC), 1m - CPAC-DAC-10G-1M):

3. Zochitika zodziwika bwino za Check Point Maestro

Monga momwe tikuonera pa chithunzichi, payenera kukhala kugwirizana pakati pa oyitanitsa kuti agwirizane (pinki ulalo). Chingwe chofunikira chimaphatikizidwanso mu kit. Mafotokozedwe omaliza akuwoneka motere:

3. Zochitika zodziwika bwino za Check Point Maestro

Tsoka ilo, sindingathe kufalitsa mitengo poyera. Koma mukhoza nthawi zonse afunseni za polojekiti yanu.

Ponena za dera la L3, limawoneka losavuta:

3. Zochitika zodziwika bwino za Check Point Maestro

Monga mukuwonera, zipata zonse pamlingo wachitatu zimawoneka ngati chipangizo chimodzi. Kufikira kwa oimba ndi kotheka kudzera mumanetiweki a Management.

Izi zikumaliza nkhani yathu yayifupi. Ngati muli ndi mafunso okhudza zojambulazo kapena mukufuna magwero, siyani ndemanga kapena lembani ndi makalata.

M'nkhani yotsatira tidzayesa kuwonetsa momwe Check Point Maestro imathandizira ndikuyesa kuyezetsa katundu. Ndiye khalani maso (uthengawo, Facebook, VK, TS Solution Blog)!

PS Ndimapereka kuthokoza kwanga kwa Anatoly Masover ndi Ilya Anokhin (kampani ya Check Point) chifukwa cha thandizo lawo pokonzekera zojambulazi!

Source: www.habr.com

Kuwonjezera ndemanga