Kukula kwa mizinda ikuluikulu ndi mapangidwe a agglomerations ndi chimodzi mwazinthu zofunika kwambiri pa chitukuko cha anthu masiku ano. Moscow yokha iyenera kukulitsa ndi 2019 miliyoni masikweya mita nyumba mu 4 (ndipo izi sizikuwerengera midzi 15 yomwe idzawonjezedwe ndi 2020). M'gawo lalikululi, ogwira ntchito pa telecom ayenera kupatsa ogwiritsa ntchito intaneti. Izi zitha kukhala midzi yaying'ono yokhala ndi nyumba zazitali zambiri, kapena midzi "yotulutsidwa" yambiri. Kwa milandu iyi, zofunikira za hardware ndizosiyana pang'ono. Tidasanthula chilichonse mwazinthu izi ndikupanga mawonekedwe osinthira owonera - T2600G-28SQ. Mu positi iyi tisanthula mwatsatanetsatane kuthekera kwa chipangizochi chomwe chingakhale chosangalatsa kwa ogwiritsa ntchito ma telecom ku Russia konse.
Ikani pa netiweki
T2600G-28SQ switch idapangidwa kuti igwire ntchito pamlingo wofikira pamaneti komanso kuphatikiza maulalo kuchokera ku masiwichi ena olowera. Ichi ndi chosinthira cha 2600 chomwe chimapangitsa kusintha ndi kusinthasintha. Ngati wogwiritsa ntchito asintha kuphatikizika ndi mwayi (kungoyendetsa pamanetiweki), T28G-XNUMXSQ idzakwanira mulingo uliwonse. Pankhani ya kuphatikizika kwa dynamically, muyenerabe kuganizira zoletsa zina pamilandu yogwiritsira ntchito.
Mtundu wa T2600G-28SQ ndi chosinthira cha Efaneti chathunthu popanda zoletsa zina zomwe zimawonekera mukamagwiritsa ntchito xPON kapena matekinoloje ofanana. Mwachitsanzo, popanda chiwopsezo cha kutsika kwakukulu kwa liwiro ndi kuchuluka kwa ogwiritsa ntchito kapena kusagwirizana pakati pa zida kuchokera kwa ogulitsa osiyanasiyana ndi firmware. Onse ogwiritsa ntchito kumapeto komanso ma switch oyambira okhala ndi ma uplinks owoneka bwino, mwachitsanzo, mtundu wa T2600G-28TS, amatha kulumikizana ndi mawonekedwe a chipangizocho. Chithunzi chomwe chili m'munsimu chikuwonetsa zitsanzo zodziwika kwambiri zamalumikizidwe otere.
Kuti mupeze netiweki ya wogwiritsa ntchito, chingwe chowonera kapena chingwe chopotoka chingagwiritsidwe ntchito. Pa mbali ya olembetsa, kuwala kwa kuwala kumatha kuthetsedwa mwina pogwiritsa ntchito chosinthira media (media converter), mwachitsanzo, TP-Link MC220L; ndikugwiritsa ntchito mawonekedwe owoneka mu rauta ya SOHO.
Kuti mulumikizane ndi kasitomala wapafupi, mutha kugwiritsa ntchito madoko anayi a RJ-45 omwe akugwira ntchito pa liwiro la 10/100/1000 Mbit/s. Ngati pazifukwa zina izi sizokwanira, wogwiritsa ntchito amatha "kutembenuza" mawonekedwe a mawonekedwe a switch kuti akhale mkuwa. Izi zitha kuchitika pogwiritsa ntchito ma SFP apadera a "mkuwa" okhala ndi cholumikizira cha RJ-45. Koma yankho lotere silingatchulidwe kuti ndilofanana.
Zitsanzo zina kuchokera muzochita
Kuti timalize chithunzichi, tipereka zitsanzo zingapo zogwiritsa ntchito masiwichi a T2600G-28SQ.
Wothandizira dera la Moscow , yomwe, kuwonjezera pa intaneti, imapereka mauthenga a telephony ndi chingwe TV, amagwiritsa ntchito T2600G-28SQ pamlingo wofikira pamene akumanga maukonde m'magulu apadera (nyumba zazing'ono ndi tauni). Kumbali ya kasitomala, kulumikizana kumapangidwira kwa ma routers okhala ndi doko la SFP, komanso osinthira media. Pakalipano, ma SOHO routers okhala ndi doko la SFP samapangidwa mochuluka m'dziko lathu, koma ife, ndithudi, tikuganiza za izo.
Wothandizira matelefoni ochokera kudera la Pavlovo-Posad amagwiritsa ntchito masiwichi a T2600G-28SQ ngati "kagulu kakang'ono", pogwiritsa ntchito masiwichi amitundu ya T2600G-28TS ndi T2500G-10TS kuti mupeze.
Gulu la kampani kupereka Intaneti, TV, telephony, ndi mavidiyo anaziika machitidwe kum'mwera chakum'mawa kwa dera Moscow (Kolomna, Lukhovitsy, Zaraysk, Serebryanye Prudy, Ozyory). Pafupifupi topology pano ndi yofanana ndi ya ISS: T2600G-28SQ pamlingo wophatikizira, ndi T2600G-28TS ndi T2500G-10TS pamlingo wofikira.
Wopatsa kuchokera ku Krasnoznamensk imapereka mwayi wopezeka pa intaneti pogwiritsa ntchito netiweki yokhala ndi malowedwe ozama owoneka bwino. Zimakhazikitsidwanso ndi T2600G-28SQ.
M'magawo otsatirawa tifotokoza mwachidule zina mwazinthu za T2600G-28SQ. Kuti tisawononge zinthuzo, tinasiya njira zingapo: QinQ (VLAN VPN), mayendedwe, QoS, ndi zina zotero.
Sinthani Maluso
Kusungitsa - STP
STP - Ndondomeko Yodutsa Mitengo. Ndondomeko yamtengo wapatali yakhala ikudziwika kwa nthawi yaitali, chifukwa cha Radya Perlman wolemekezeka pa izi. Mu ma network amakono, olamulira amayesa mwanjira iliyonse kuti asagwiritse ntchito protocol iyi. Inde, STP ilibe zovuta zake. Ndipo ndi zabwino kwambiri ngati pali njira ina. Komabe, monga momwe zimakhalira nthawi zambiri, njira ina ya protocol iyi idzadalira kwambiri wogulitsa. Choncho, mpaka lero, Spanning Tree Protocol imakhalabe yankho lokhalo lomwe limathandizidwa ndi pafupifupi opanga onse ndipo amadziwikanso ndi oyang'anira maukonde onse.
Kusintha kwa TP-Link T2600G-28SQ kumathandizira mitundu itatu ya STP: STP yachikale (IEEE 802.1D), RSTP (802.1W) ndi MSTP (802.1S).
Mwa izi, RSTP yanthawi zonse ndiyoyenera kwa opereka intaneti ang'onoang'ono ku Russia, omwe ali ndi mwayi umodzi wosatsutsika kuposa mtundu wakale - nthawi yakufupi kwambiri yolumikizana.
Protocol yosinthika kwambiri masiku ano ndi MSTP, yomwe imathandizira ma network (VLANs) ndipo imalola mitengo ingapo, yomwe imakulolani kugwiritsa ntchito njira zonse zosungira zomwe zilipo. Woyang'anira amapanga mitundu ingapo yamitengo (mpaka eyiti), iliyonse yomwe imakhala ndi ma network enieni.
Zithunzi za MSTPOyang'anira novice ayenera kusamala kwambiri akamagwiritsa ntchito MSTP. Izi zili choncho chifukwa machitidwe a protocol amasiyana m'chigawo komanso pakati pa zigawo. Chifukwa chake, pokonza masiwichi, ndikofunikira kuwonetsetsa kuti mukhale mdera lomwelo.
Kodi dera lodziwika bwinoli ndi liti? M'mawu a MSTP, dera ndi gulu la masiwichi olumikizidwa kwa wina ndi mnzake omwe ali ndi mawonekedwe ofanana: dzina lachigawo, nambala yokonzanso, ndi kugawa kwa ma network (VLAN) pakati pa zochitika za protocol (zochitika).
Zachidziwikire, protocol ya Spanning Tree (mtundu uliwonse) imakupatsani mwayi kuti musamangokhalira kuthana ndi malupu omwe amatuluka polumikiza njira zosunga zobwezeretsera, komanso kuti muteteze ku zolakwika zosinthira chingwe pomwe injiniya mwadala kapena mosadziwa amalumikiza madoko olakwika, ndikupanga lupu ndi ake. zochita.
Oyang'anira maukonde odziwa zambiri amakonda kugwiritsa ntchito njira zingapo zowonjezera kuti ateteze protocol ya STP ku zowukira kapena zovuta zovuta. Mtundu wa T2600G-28SQ umapereka kuthekera kosiyanasiyana kotere: Loop Protect and Root Protect, TC Guard, BPDU Protect ndi BPDU Fyuluta.
Kugwiritsa ntchito moyenera zosankha zomwe zatchulidwa pamwambapa molumikizana ndi njira zina zotetezedwa zidzakhazikitsira maukonde amderalo ndikupangitsa kuti zidziwike.
Kusungitsa - LAG
LAG - Link Aggregation Group. Uwu ndiukadaulo womwe umakupatsani mwayi wophatikiza njira zingapo zakuthupi kukhala imodzi yomveka. Ma protocol ena onse amasiya kugwiritsa ntchito njira zakuthupi zomwe zikuphatikizidwa mu LAG padera ndikuyamba "kuwona" mawonekedwe amodzi omveka. Chitsanzo cha ndondomeko yotereyi ndi STP.
Kuchuluka kwa ogwiritsa ntchito kumayenderana pakati pa ma tchanelo omwe ali mkati mwa mayendedwe omveka kutengera kuchuluka kwa hashi. Kuti muwerenge, ma adilesi a MAC a wotumiza, wowalandira, kapena awiri aiwo angagwiritsidwe ntchito; komanso ma adilesi a IP a wotumiza, wowalandira, kapena awiri a iwo. Chidziwitso cha protocol XNUMX (madoko a TCP/UDP) sichimaganiziridwa.
Kusintha kwa T2600G-28SQ kumathandizira ma LAG osasunthika komanso osunthika.
Kukambilana magawo ogwirira ntchito a gulu lamphamvu, protocol ya LACP imagwiritsidwa ntchito.
Chitetezo - Mndandanda Wofikira (ACLs)
Kusintha kwathu kwa T2600G-28SQ kumakupatsani mwayi wosefa kuchuluka kwa ogwiritsa ntchito pogwiritsa ntchito mindandanda yofikira (ACL - Access Control List).
Mindandanda yofikira yothandizidwa ikhoza kukhala yamitundu ingapo: MAC ndi IP (IPv4/IPv6), zophatikizidwa, komanso zosefera zomwe zili. Chiwerengero cha mndandanda wamtundu uliwonse womwe umathandizidwa zimatengera template ya SDM yomwe ikugwiritsidwa ntchito pano, yomwe tidafotokoza m'gawo lina.
Wothandizira angagwiritse ntchito njirayi kuti aletse magalimoto osiyanasiyana osafunikira pa intaneti. Chitsanzo cha magalimoto otere chingakhale mapaketi a IPv6 (pogwiritsa ntchito gawo la EtherType) ngati ntchito yofananirayo sinaperekedwe; kapena kutsekereza SMB pa doko 445. Mu maukonde ndi static adiresi, DHCP / BOOTP magalimoto si chofunika, choncho pogwiritsa ntchito ACL, woyang'anira akhoza kusefa UDP detagrams pa madoko 67 ndi 68. Mukhozanso kuletsa IPoE m'deralo magalimoto ntchito ACL. Kutsekereza kotereku kungakhale kofunikira pamanetiweki ogwiritsa ntchito PPPoE.
Njira yogwiritsira ntchito mindandanda yofikira ndiyosavuta kwambiri. Pambuyo popanga mndandandawo, muyenera kuwonjezera nambala yofunikira ya zolemba, mtundu womwe umadalira mwachindunji pepala lomwe likusinthidwa.
Kukhazikitsa mindandanda yofikira
Ndikoyenera kudziwa kuti mindandanda yofikira imatha kuchita osati ntchito zanthawi zonse zololeza kapena kukana kuchuluka kwa magalimoto, komanso kuwalozeranso, kuwawonetsa, komanso kuchitanso zowerengera kapena kuchepetsa.
Ma ACL onse ofunikira atapangidwa, woyang'anira akhoza kuziyika. Ndizotheka kulumikiza mndandanda wofikira ku doko lachindunji komanso netiweki yeniyeni.
Chitetezo - chiwerengero cha ma adilesi a MAC
Nthawi zina ogwiritsira ntchito amafunika kuchepetsa chiwerengero cha maadiresi a MAC omwe switch idzaphunzira pa doko linalake. Mindandanda yofikira imakulolani kuti mukwaniritse zomwe mwatchulazo, koma nthawi yomweyo zimafunika kuwonetsa ma adilesi a MAC okha. Ngati mungofunika kuchepetsa chiwerengero cha maadiresi a tchanelo, koma osawafotokozera momveka bwino, chitetezo cha doko chidzakupulumutsani.
Kuletsa koteroko kungafunike, mwachitsanzo, kuteteza kuti musalumikizane ndi netiweki yapaderalo ndi mawonekedwe amodzi osinthira othandizira. Ndikoyenera kutchula apa kuti tikukamba za kulumikizana kwa dial-up, chifukwa polumikiza pogwiritsa ntchito rauta kumbali ya kasitomala, T2600G-28SQ iphunzira adilesi imodzi yokha - iyi ndi MAC yomwe ili pa doko la WAN la router kasitomala. .
Pali gulu lonse la zowukira zolunjika pa tebulo losinthira. Izi zitha kukhala kusefukira kwa tebulo kapena kusefukira kwa MAC. Njira yachitetezo cha doko imakupatsani mwayi kuti muteteze ku kusefukira kwa tebulo la mlatho ndikuwukira komwe cholinga chake ndikubwezeretsanso dala chosinthira ndikuyika poyizoni pampando wake.
Ndizosatheka kusatchula zida za kasitomala zomwe zili zolakwika. Nthawi zambiri pamakhala zochitika pamene khadi la netiweki yapakompyuta kapena rauta yomwe yasokonekera imapanga mafelemu ambiri okhala ndi maadiresi otumiza ndi olandila. Kuthamanga koteroko kumatha kukhetsa CAM mosavuta.
Njira ina yochepetsera kuchuluka kwa zolembera za mlatho zomwe zimagwiritsidwa ntchito ndi chida cha Chitetezo cha MAC VLAN, chomwe chimalola woyang'anira kuti afotokoze kuchuluka kwazomwe zalembedwera pa intaneti yeniyeni.
Kuphatikiza pa kuyang'anira zolembera zosinthika patebulo losinthira, woyang'anira amathanso kupanga zokhazikika.
The pazipita mlatho tebulo chitsanzo T2600G-28SQ akhoza kukhala mpaka 16K mbiri.
Njira ina yopangidwira kusefa kufalikira kwa magalimoto ogwiritsira ntchito ndi ntchito ya Port Isolation, yomwe imakupatsani mwayi wofotokozera momveka bwino momwe kutumizira kumaloledwa.
Chitetezo - IMPB
M'madera ambiri a dziko lathu lalikulu, njira za ogwiritsira ntchito telecom pa nkhani zowonetsetsa kuti chitetezo cha intaneti chikhale chosiyana kuchokera ku umbuli mpaka kugwiritsa ntchito kwakukulu kwa njira zonse zomwe zimathandizidwa ndi zipangizo.
Ntchito za IPv4 IMPB (IP-MAC-Port Binding) ndi IPv6 IMPB zimakulolani kuti muteteze kuzinthu zambiri zokhudzana ndi kuwononga ma adilesi a IP ndi MAC kwa olembetsa pomanga ma adilesi a IP ndi MAC a zida zamakasitomala. mawonekedwe osinthira operekera. Kumanga uku kumatha kuchitika pamanja kapena kugwiritsa ntchito ARP Scanning ndi DHCP Snooping.
Zokonda zoyambira za IMPB
Kunena zowona, ziyenera kunenedwa kuti ntchito yapadera ingagwiritsidwe ntchito kuteteza protocol ya DHCP - DHCP Filter.
Pogwiritsa ntchito ntchitoyi, woyang'anira ma netiweki amatha kufotokozera pamanja malo omwe ma seva enieni a DHCP amalumikizidwa. Izi zidzalepheretsa ma seva achinyengo a DHCP kusokoneza njira yolankhulirana ya IP.
Chitetezo - DoS Defend
Chitsanzo chomwe chikuganiziridwa chimatilola kuteteza ogwiritsa ntchito kuzinthu zingapo zodziwika bwino komanso zofala kwambiri za DoS.
Zambiri mwazomwe zatchulidwazi sizowopsanso pazida zomwe zili ndi machitidwe amakono, koma maukonde athu amatha kukumana ndi omwe mapulogalamu omaliza adapangidwira zaka zambiri zapitazo.
Thandizo la DHCP
Kusintha kwa TP-Link T2600G-28SQ kumatha kuchita zonse ngati seva ya DHCP kapena kutumizirana mauthenga, ndikuchita kusefa kosiyanasiyana kwa mauthenga a DHCP ngati chipangizo china chikuchita ngati seva.
Njira yosavuta yoperekera ogwiritsa ntchito magawo a IP omwe akufunika kuti agwiritse ntchito ndikugwiritsa ntchito seva ya DHCP yolumikizidwa. Ndi chithandizo chake, magawo oyambira atha kuperekedwa kale kwa olembetsa.
Tidalumikiza rauta yathu ya Archer C6 SOHO ku imodzi mwamalo osinthira ndikuwonetsetsa kuti chipangizo cha kasitomala chidalandira bwino adilesi.
Zikuwoneka chonchi
Seva ya DHCP yomangidwa mu switch mwina si njira yowongoka komanso yosinthika: palibe chothandizira pazosankha zosakhazikika, ndipo palibe kulumikizana ndi IPAM. Ngati wogwiritsa ntchito akufuna kuwongolera njira yogawa adilesi ya IP, ndiye kuti seva yodzipereka ya DHCP idzagwiritsidwa ntchito.
T2600G-28SQ imakupatsani mwayi kuti mutchule seva yodzipatulira ya DHCP pagawo lililonse la ogwiritsa ntchito komwe mauthenga a protocol omwe akukambidwa adzatumizidwanso. Subnet imasankhidwa pofotokoza mawonekedwe oyenera a L3: VLAN (SVI), doko loyendetsedwa kapena doko.
Kuti tiyese kugwira ntchito kwa relay, tinakonza router yosiyana ndi wogulitsa wina kuti azigwira ntchito ngati seva ya DHCP, zoikidwiratu zomwe zili pansipa.
R1#sho run | s pool
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8Routa ya kasitomala yapezanso IP adilesi.
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.2 010c.8063.f0c2.6a May 24 2019 05:07 PM AutomaticPansi pa wowononga - zomwe zili mu paketi yolandidwa pakati pa chosinthira ndi seva yodzipereka ya DHCP.
Zamkatimu
Tiyenera kudziwa kuti kusinthaku kumathandizira Option 82. Ikayatsidwa, kusinthaku kudzawonjezera zambiri za mawonekedwe a ogwiritsa ntchito komwe uthenga wa DHCP Discover unalandilidwa. Kuonjezera apo, chitsanzo cha T2600G-28SQ chimakupatsani mwayi wokonza ndondomeko yopangira zowonjezera zowonjezera poyika njira nambala 82. Kukhalapo kwa chithandizo cha njirayi kungakhale kothandiza pamene wolembetsa ayenera kupatsidwa adilesi yomweyo ya IP, mosasamala kanthu za zomwe kasitomala adzinenera yekha.
Chithunzi chomwe chili pansipa chikuwonetsa uthenga wa DHCP Discover (wotumizidwa ndi relay) ndi njira No. 82 yowonjezera.
Uthenga wokhala ndi njira nambala 82
Inde, mukhoza kuyang'anira njira No. 82 popanda kukhazikitsa DHCP relay yodzaza; zosintha zofananira zimaperekedwa mu gawo la "DHCP L2 Relay".
Tsopano tiyeni tisinthe makonzedwe a seva ya DHCP kuti tisonyeze momwe njira No. 82 imagwirira ntchito.
R1#sho run | s dhcp
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
class option82_test
address range 192.168.0.222 192.168.0.222
ip dhcp class option82_test
relay agent information
relay-information hex 010e010c74702d6c696e6b5f746573740208000668ff7b66f675
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.222 010c.8063.f0c2.6a May 24 2019 05:33 PM AutomaticChinachake chonga ichi
Ntchito yolumikizira mawonekedwe a DHCP idzakhala yothandiza pomwe kusinthaku sikungokhala ndi mawonekedwe a L3 olumikizidwa ndi netiweki inayake, koma mawonekedwewa amakhalanso ndi adilesi ya IP. Ngati palibe adilesi pamawonekedwe otere, ntchito ya DHCP VLAN relay ibwera kudzapulumutsa. Zambiri za subnet pankhaniyi zimatengedwa kuchokera ku mawonekedwe osasinthika, ndiye kuti, malo adilesi mumanetiweki angapo adzakhala ofanana (kuphatikizana).
Nthawi zambiri, ogwira ntchito amafunikanso kuteteza olembetsa kuti asayambitse zolakwika kapena zoyipa za seva ya DHCP pazida zamakasitomala. Tinaganiza zokambilana za ntchitoyi m'modzi mwa magawo okhudzana ndi chitetezo.
IEEE 802.1X
Njira imodzi yotsimikizira ogwiritsa ntchito pa netiweki ndikugwiritsa ntchito protocol ya IEEE 802.1X. Kutchuka kwa protocol iyi pamanetiweki a oyendetsa ma telecom ku Russia kwayamba kuchepa; imagwiritsidwabe ntchito makamaka pama network am'makampani akuluakulu kutsimikizira ogwiritsa ntchito mkati mwa bungwe. Kusintha kwa T2600G-28SQ kuli ndi chithandizo cha 802.1X, kotero wothandizira angagwiritse ntchito mosavuta ngati kuli kofunikira.
Kuti protocol ya IEEE 802.1X igwire ntchito, otenga nawo mbali atatu amafunikira: zida zamakasitomala (wopempha), chosinthira chaothandizira (chotsimikizika) ndi ma seva otsimikizira (nthawi zambiri ma seva a RADIUS).
Kusintha kofunikira pa mbali ya opareshoni ndikosavuta kwambiri. Mukungoyenera kufotokoza adilesi ya IP ya seva ya RADIUS yomwe imagwiritsidwa ntchito, pomwe malo osungira ogwiritsira ntchito adzasungidwa, ndikusankhanso mawonekedwe omwe kutsimikizika kumafunikira.
Kukonzekera kwa Basic 802.1X
Kusintha kwakung'ono kumafunikanso kumbali ya kasitomala. Zonse zamakono zogwirira ntchito zili kale ndi mapulogalamu ofunikira. Koma ngati kuli kofunikira, mutha kukhazikitsa ndikugwiritsa ntchito TP-Link 802.1x Client - ntchito yomwe imakulolani kutsimikizira kasitomala pamaneti.
Mukalumikiza PC ya wosuta molunjika ku netiweki ya woperekayo, zosintha zotsimikizira ziyenera kukhazikitsidwa pamakhadi ochezera omwe amagwiritsidwa ntchito polumikizira.
Komabe, pakali pano, si kompyuta ya wogwiritsa ntchito yomwe nthawi zambiri imagwirizanitsidwa ndi makina ogwiritsira ntchito mwachindunji, koma SOHO router yomwe imatsimikizira kugwira ntchito kwa maukonde amtundu wa olembetsa (magawo onse a waya ndi opanda zingwe). Pankhaniyi, zosintha zonse za 802.1X protocol ziyenera kupangidwa mwachindunji pa rauta.
Zikuwoneka kwa ife kuti njira yotsimikizirayi yayiwalika mosayenera mumanetiweki ogwiritsira ntchito. Inde, kumangiriza olembetsa ku doko losinthira kungakhale njira yosavuta kuchokera pamawonedwe a zida za ogwiritsa ntchito. Koma ngati kugwiritsa ntchito malowedwe ndi mawu achinsinsi kuli kofunikira, ndiye kuti 802.1X sikhala protocol yolemetsa kwambiri poyerekeza ndi maulumikizidwe omwe amagwiritsidwa ntchito potengera ngalande za PPTP/L2TP/PPPoE.
Kuyika kwa ID ya PPPoE
Ogwiritsa ntchito ambiri osati mdziko lathu lokha, koma padziko lonse lapansi amakondabe kugwiritsa ntchito mapasiwedi osavuta kwambiri. Ndipo milandu yakuba mbiri, tsoka, si yachilendo. Ngati wogwiritsa ntchito akugwiritsa ntchito protocol ya PPPoE mumanetiweki ake kuti atsimikizire ogwiritsa ntchito, ndiye kusintha kwa TP-Link T2600G-28SQ kumathandizira kuthetsa vuto lomwe limakhudzana ndi kutayikira kwa zidziwitso. Izi zimatheka powonjezera chizindikiro chapadera ku uthenga wa PPPoE Active Discovery. Mwanjira iyi, woperekayo akhoza kutsimikizira wolembetsayo osati polowera ndi mawu achinsinsi, komanso ndi deta yowonjezera. Deta yowonjezerayi imaphatikizapo adilesi ya MAC ya chipangizo cha kasitomala, komanso mawonekedwe osinthira omwe amalumikizidwa.
Ogwiritsa ntchito ena, makamaka, amafuna kukana wolembetsa (kulowetsamo ndi mawu achinsinsi) kuthekera koyenda pa intaneti. Ntchito ya PPPoE ID Insertion ithandizanso pankhaniyi.
IGMP
IGMP (Internet Group Management Protocol) yakhalapo kwa zaka zambiri. Kutchuka kwake ndikomveka komanso kosavuta kulongosola. Koma pali maphwando awiri omwe akukhudzidwa ndi kuyanjana kwa IGMP: PC ya wogwiritsa ntchito (kapena chipangizo china chilichonse, mwachitsanzo, STB) ndi router IP yomwe imagwiritsa ntchito gawo linalake la intaneti. Masinthidwe satenga nawo gawo pakusinthana uku mwanjira iliyonse. Zoona, mawu omalizirawo si oona kwenikweni. Kapena muma network amakono izi sizowona konse. Masinthidwe amathandizira IGMP kuti apititse patsogolo kutumiza kwa anthu ambiri. Pomvera kuchuluka kwa ogwiritsa ntchito, chosinthiracho chimazindikira mauthenga a IGMP Report momwemo, mothandizidwa ndizomwe zimasankha madoko otumizira anthu ambiri. Njira yofotokozedwayo imatchedwa IGMP Snooping.
Thandizo la protocol ya IGMP lingagwiritsidwe ntchito osati kungowonjezera kuchuluka kwa magalimoto, komanso kudziwa olembetsa omwe angaperekedwe ndi ntchito inayake, mwachitsanzo, IPTV. Mutha kukwaniritsa cholinga chomwe mukufuna pokhazikitsa pamanja zosefera kapena kugwiritsa ntchito kutsimikizira.
Kuthandizira kwa magalimoto ambiri pama switch a TP-Link kumayendetsedwa mosavuta. Mwachitsanzo, magawo onse amatha kukhazikitsidwa pa netiweki iliyonse padera.
Ngati ma subnet angapo okhala ndi olandila magalimoto ambiri alumikizidwa ndi mawonekedwe a rauta imodzi, ndiye kuti rautayo idzakakamizika kutumiza mapaketi angapo kudzera pa mawonekedwewo (imodzi pa netiweki iliyonse).
Pankhaniyi, mutha kukhathamiritsa njira yotumizira magalimoto ambiri pogwiritsa ntchito ukadaulo wa MVR - Kulembetsa kwa Multicast VLAN.
Chofunikira cha yankho ndikuti netiweki imodzi yokha imapangidwa yomwe imagwirizanitsa onse olandira. Komabe, netiweki iyi imagwiritsidwa ntchito popanga ma multicast. Njirayi imalola rauta kutumiza kopi imodzi yokha ya ma multicast traffic kudzera pa mawonekedwe.
DDM, OAM ndi DLDP
DDM - Digital Diagnostic Monitoring. Panthawi yogwiritsira ntchito ma modules optical, nthawi zambiri zimakhala zofunikira kuyang'anira momwe module ikuyendera, komanso njira yowunikira yomwe imagwirizanitsidwa. Ntchito ya DDM ikuthandizani kuthana ndi ntchitoyi. Ndi chithandizo chake, mainjiniya oyendetsa azitha kuyang'anira kutentha kwa gawo lililonse lothandizira izi, magetsi ake ndi apano, komanso mphamvu yazomwe zimatumizidwa ndikulandila mawotchi.
Kuyika malire pazigawo zomwe zafotokozedwa kale kumakupatsani mwayi wopanga chochitika ngati zitsika pamlingo wovomerezeka.
Kukhazikitsa mayankho a DDM
Mwachilengedwe, woyang'anira amatha kuwona zomwe zilipo pazigawo zomwe zatchulidwa.
Kusintha kwa TP-Link T2600G-28SQ kuli ndi makina oziziritsira mpweya. Kuphatikiza apo, sitinakumanepo ndi kutenthedwa kwa ma module a SFP mu masinthidwe athu chifukwa cha kuchuluka kwa madoko. Komabe, ngati, mwachidziwitso, kuthekera koteroko kumaloledwa (mwachitsanzo, chifukwa cha vuto linalake mkati mwa gawo la SFP), ndiye mothandizidwa ndi DDM woyang'anira adzadziwitsidwa mwamsanga za vuto lomwe lingakhale loopsa. Choopsa apa, mwachiwonekere, sichiri chosinthira chokha, koma kwa diode / laser mkati mwa SFP, popeza kutentha kwake kumawonjezeka, mphamvu ya chizindikiro cha optical yomwe imatulutsidwa ikhoza kuwononga, zomwe zingayambitse kuchepa kwa bajeti ya kuwala.
Ndizofunikira kudziwa kuti masiwichi a TP-Link alibe "ntchito" yotsekera ogulitsa, ndiye kuti, ma module aliwonse a SFP amathandizidwa, omwe, ndithudi, adzakhala abwino kwambiri kwa oyang'anira maukonde.
OAM - Ntchito, Utsogoleri, ndi Kusamalira (IEEE 802.3ah). OAM ndi protocol yachiwiri ya mtundu wa OSI yopangidwira kuyang'anira ndi kuthetsa mavuto pamanetiweki a Ethernet. Pogwiritsa ntchito protocol iyi, chosinthiracho chimatha kuyang'anira magwiridwe antchito a kulumikizana kwina ndi zolakwika, ndikupanga zidziwitso kuti woyang'anira maukonde azitha kuyendetsa bwino maukonde.
Kupanga kwa Basic OAM
Tsatanetsatane wa Ntchito ya OAMZida ziwiri zoyandikana ndi OAM zothandizidwa ndi OAM nthawi ndi nthawi zimasinthana mauthenga potumiza ma OAMPDU, omwe amabwera m'mitundu itatu: Information, Event Notification, ndi Loopback Control. Pogwiritsa ntchito ma OAMPDU odziwa zambiri, masiwichi oyandikana nawo amatumizana zidziwitso zamawerengero komanso deta yofotokozedwa ndi olamulira. Mauthenga amtunduwu amagwiritsidwanso ntchito kusunga kulumikizana kudzera mu protocol ya OAM. Mauthenga a Chidziwitso cha Zochitika amagwiritsidwa ntchito ndi ntchito yowunikira kulumikizana kuti adziwitse gulu lina kuti zalephera. Mauthenga a Loopback Control amagwiritsidwa ntchito kuti azindikire kuzungulira pamzere.
Pansipa tidaganiza zolembera zomwe zidaperekedwa ndi protocol ya OAM:
- kuyang'anira chilengedwe (kuzindikira ndi kuwerengera mafelemu osweka),
- RFI - Chizindikiro Cholephereka Kutali (kutumiza zidziwitso zakulephera panjira),
- Remote Loopback (kuyesa tchanelo kuyeza kuchedwa, kuchedwa kusinthika (jitter), kuchuluka kwa mafelemu otayika).
Njira ina yomwe ikufunika pa ma switch optical ndikutha kuzindikira zovuta panjira yolumikizirana, zomwe zimapangitsa kuti njirayo ikhale yosavuta, ndiye kuti, deta imatha kutumizidwa mbali imodzi. Masinthidwe athu amagwiritsa ntchito DLDP - Device Link Detection Protocol kuti azindikire maulalo amtundu uliwonse. Kunena zowona, ndikofunikira kuzindikira kuti protocol ya DLDP imathandizidwa pazolumikizana zonse zowoneka bwino ndi zamkuwa, koma m'malingaliro athu, idzakhala yotchuka kwambiri mukamagwiritsa ntchito mizere ya fiber optic.
Pamene unidirectional ulalo wazindikirika, chosinthira akhoza basi kutseka mawonekedwe ovuta, zomwe zidzatsogolera ku kumangidwanso kwa mtengo wa STP ndi kugwiritsa ntchito njira zolumikizirana zosunga zobwezeretsera.
Mu arsenal yathu pali ma module a SFP omwe amalandira ndi kutumiza zizindikiro pa fiber imodzi. Amagwira ntchito awiriawiri ndipo amagwiritsa ntchito ma siginecha owoneka pamafunde osiyanasiyana kuti afalitse mkati mwa awiriwo. Chitsanzo ndi TL-SM321A ndi TL-SM321B. Mukamagwiritsa ntchito ma module oterowo, kuwonongeka kwa ulusi umodzi kumayambitsa kusagwira ntchito kwathunthu kwa njira yonse ya kuwala. Komabe, ngakhale pamakina oterowo protocol ya DLDP ikufunika, chifukwa, ngakhale izi zimachitika kawirikawiri, njirayo imatha kukhala ndi mawonekedwe owonekera pamafunde osiyanasiyana. Vuto lomwe lingakhalepo ndikuti kuwonekera kwa tchanelo kumasiyanasiyana kutengera komwe kuwalako kumafalikira. Refleogram imathandizira kuzindikira zovuta izi, koma iyi ndi nkhani yosiyana kwambiri.
LLDP
M'magulu akuluakulu amakampani kapena ogwira ntchito, mavuto amadza nthawi ndi nthawi ndi kutha kwa zolemba zapaintaneti kapena zolakwika pakukonzekera kwake. Woyang'anira ma netiweki atha kukumana ndi vuto lomwe likufunika kudziwa kuti ndi zida ziti zomwe zimalumikizidwa ndi mawonekedwe enaake osinthira. LLDP - Link Layer Discovery Protocol (IEEE 802.1AB) ibwera kudzapulumutsa.
LLDP Operation Parameters
Zosintha zathu zimathandizira LLDP osati kungopeza masiwichi oyandikana nawo kapena zida zina zapaintaneti, komanso kudziwa zomwe ali nazo.
Othandizira athu amkuwa a switch amatha kugwiritsa ntchito LLDP-MED kuti achepetse njira yolumikizira mafoni a IP. Komanso, pogwiritsa ntchito njirayi, kusintha kwa PoE kumatha kukambirana magawo amagetsi ndi chipangizo choyendetsedwa. Takambirana kale za izi mwatsatanetsatane mu umodzi wathu .
SDM ndi oversubscription
Pafupifupi masiwichi amakono amadutsa mafelemu ndi mapaketi osagwiritsa ntchito purosesa yapakati. Kukonza (kuwerengera ma checksums, kugwiritsa ntchito mindandanda yofikira ndikuchita macheke ena achitetezo, komanso kupanga zosankha zosintha / kusintha) kumachitika pogwiritsa ntchito tchipisi tapadera, zomwe zimalola kuti anthu azithamanga kwambiri. Kusinthana komwe kumakambitsirana kumalola kukonza magalimoto pa liwiro lapakati. Izi zikutanthauza kuti mawonekedwe a chipangizocho ndi okwanira kutumiza deta pa liwiro lapamwamba kwambiri pamadoko onse nthawi imodzi. Mtundu wa T2600G-28SQ uli ndi ma doko 24 otsika (opita kwa ogwiritsa ntchito), akugwira ntchito pa liwiro la 1 Gbit/s, komanso madoko anayi okwera (kumalo olowera pamaneti) a 4 Gbit/s. Nthawi yomweyo, magwiridwe antchito a mabasi osinthira ndi 10 Gbit / s, omwe ndi okwanira kukonza kuchuluka kwa magalimoto omwe akubwera.
Mwachilungamo, ndi bwino kudziwa kuti ntchito ya masanjidwewo kusintha ndi mapaketi miliyoni 95,2 pa sekondi. Ndiko kuti, mukamagwiritsa ntchito mafelemu ochepa omwe ali ndi kutalika kwa ma byte 64 okha, ntchito yonse ya chipangizocho idzakhala 97,5 Gbit / s. Komabe, mbiri yamagalimoto yotereyi ndiyosatheka kwa maukonde oyendetsa ma telecom.
Kodi oversubscription ndi chiyaniNkhani ina yofunika ndi chiΕ΅erengero cha liwiro la mayendedwe okwera ndi otsika (kulembetsa mopitirira muyeso). Apa, mwachiwonekere, chirichonse chimadalira pa topology. Ngati woyang'anira ntchito zonse zinayi 10 GE zolumikizira kulumikiza ku netiweki pachimake ndi kuphatikiza iwo ntchito LAG (Link Aggregation Gulu) kapena Port-Channel luso, ndiye zowerengera analandira liwiro lopita pachimake adzakhala 40 Gbit/s, amene adzakhala zambiri. kuposa zokwanira kukwaniritsa zosowa za olembetsa onse olumikizidwa. Komanso, sikofunikira kuti ma uplink onse anayi agwirizane ndi chipangizo chimodzi chakuthupi. Kulumikizana kutha kupangidwa pagulu la masiwichi, kapena ku zida ziwiri zophatikizidwa kukhala gulu (pogwiritsa ntchito ukadaulo wa vPC kapena zofanana). Pamenepa palibe oversubscription.
Mutha kugwiritsa ntchito uplinks onse anayi nthawi imodzi osati kaphatikizidwe ntchito LAG. Zotsatira zofananazi zitha kupezedwa mwa kukonza bwino MSTP, koma ndi nkhani yosiyana kotheratu.
Yachiwiri amagwiritsidwa ntchito L2 kugwirizana njira ndi ntchito awiri palokha LAGs (chimodzi kwa aliyense aggregation lophimba). Pankhaniyi, mwina, imodzi mwamalumikizidwe enieni idzatsekedwa ndi protocol ya STP (pogwiritsa ntchito STP kapena RSTP). Kulembetsa mochulukira kudzakhala 5:6.
Mkhalidwe wosowa, koma wotheka kwambiri: T2600G-28SQ imalumikizidwa ndi njira zodziyimira pawokha kumtunda kapena masiwichi. Protocol ya STP/RSTP ingosiya ulalo umodzi wokha m'malo osatsekedwa. Kulembetsa mochulukira kudzakhala 5:12.
Ntchito yokhala ndi nyenyezi: werengerani kulembetsa mochulukira pazomwe zafotokozedwa mu gawo la STP, pomwe tidayang'ana chitsanzo cha topology pomwe masiwichi awiri olowera alumikizidwa ku chipangizo chimodzi chophatikizira ndikulumikizana.
Tchipisi zosinthika zomwe zimathandizira kuthamanga kwambiri koteroko ndizokwera mtengo kwambiri, chifukwa chake timayesa kukulitsa ntchito zawo pogawa bwino zinthu pakati pa ntchito zosiyanasiyana. SDM - Switch Database Management ndiyomwe imayang'anira kugawa.
Kugawa kumapangidwa pogwiritsa ntchito mbiri ya SDM. Pali ma profaili atatu omwe akupezeka kuti agwiritsidwe ntchito, omwe alembedwa pansipa.
- Kusasinthika kumapereka yankho loyenera logwiritsa ntchito mindandanda yofikira ya MAC ndi IP, komanso zolembedwa za ARP.
- EnterpriseV4 imakupatsani mwayi wokulitsa zomwe zilipo kuti zigwiritsidwe ntchito ndi mndandanda wamtundu wa MAC ndi IP.
- EnterpriseV6 imagawa zinthu zina kuti zigwiritsidwe ntchito ndi mndandanda wa IPv6.
Kusinthaku kuyenera kuyambiranso kuti mugwiritse ntchito mbiri yatsopano.
Pomaliza
Mogwirizana ndi malo oyamba, kusinthaku ndikoyenera kwambiri kwa ogwiritsa ntchito ma telecom omwe akukumana ndi ntchito yopereka mwayi wopezeka pa intaneti pamtunda wautali. Chipangizochi chitha kugwiritsidwa ntchito pamlingo wofikira, mwachitsanzo, m'midzi yanyumba ndi nyumba zamatawuni, komanso kuphatikiza njira zobwera kuchokera ku masiwichi olowera omwe ali m'nyumba zogona; ndiko kuti, kulikonse komwe kulumikizidwa kuzinthu zakutali kumafunikira. Mukamagwiritsa ntchito njira zoyankhulirana zowoneka bwino, wolembetsa wolumikizidwa amatha kupezeka patali mpaka ma kilomita angapo.
Kumbali ya kasitomala, maulalo owoneka amatha kuthetsedwa pa masiwichi ang'onoang'ono okhala ndi mawonekedwe owoneka bwino kapena osinthira media.
Chiwerengero chachikulu cha ma protocol ndi zosankha zidzalola kuti T2600G-28SQ igwiritsidwe ntchito pa intaneti ya Ethernet ya ogwiritsira ntchito ndi topology iliyonse ndi zipangizo zamakono zomwe zimagwiritsidwa ntchito ndi ntchito zoperekedwa. Kusinthaku kumayendetsedwa patali pogwiritsa ntchito mawonekedwe a intaneti kapena mzere wolamula. Ngati kusinthika kwanuko kuli kofunikira, mutha kugwiritsa ntchito doko la console; mtundu wa T2600G-28SQ uli ndi ziwiri: RJ-45 ndi yaying'ono-USB. Monga ntchentche yaing'ono mumafuta, timawona kusowa kwa chithandizo cha stacking ndi mphamvu yachiwiri. Zoona, kawirikawiri kunja kwa malo opangira deta a operekera, kukhalapo kwa mzere wachiwiri wamagetsi kudzakhala kosowa.
Ubwino wake umaphatikizapo mtengo wotsika, chiwerengero chachikulu cha optical ports optical, kupezeka kwa 10 GE optical uplinks, komanso madoko anayi ophatikizana ndi kutumiza magalimoto pamtunda wapakati.
Source: www.habr.com