Network yamabizinesi ang'onoang'ono pa zida za Cisco. Gawo 1

Moni, okondedwa a Habro okhala ndi alendo mwachisawawa. M'nkhani zotsatizanazi tikambirana za kumanga maukonde osavuta a kampani yomwe siili yovuta kwambiri pazitsulo zake za IT, koma panthawi imodzimodziyo imafunika kupatsa antchito ake intaneti yapamwamba kwambiri, kupeza mafayilo omwe amagawana nawo. zothandizira, ndikupatsa antchito mwayi wopita ku VPN kumalo ogwirira ntchito ndikulumikiza njira yowonera kanema, yomwe ingapezeke kulikonse padziko lapansi. Gawo laling'ono lazamalonda limadziwika ndi kukula kwachangu komanso, motero, kukonzanso maukonde. M'nkhaniyi tiyamba ndi ofesi imodzi yokhala ndi malo ogwirira ntchito 15 ndipo tidzawonjezera maukonde. Choncho, ngati mutu uliwonse uli wosangalatsa, lembani mu ndemanga, tidzayesetsa kuugwiritsa ntchito m'nkhaniyi. Ndidzaganiza kuti owerenga amadziwa bwino zoyambira zamakompyuta, koma ndipereka maulalo ku Wikipedia pamawu onse aumisiri; ngati china chake sichikumveka bwino, dinani ndikuwongolera kuperewera uku.

Kotero, tiyeni tiyambe. Maukonde aliwonse amayamba ndi kuyang'anira dera ndikupeza zofunikira za kasitomala, zomwe pambuyo pake zidzapangidwa mwaukadaulo. Nthawi zambiri kasitomala mwiniwake samamvetsetsa bwino zomwe akufuna komanso zomwe akufunikira pa izi, kotero ndikofunikira kumutsogolera pazomwe tingachite, koma iyi ndi ntchito yoposa woyimira malonda, timapereka gawo laukadaulo, kotero tikuganiza kuti tili ndi zofunikira zotsatirazi:

• 17 zogwirira ntchito za ma PC apakompyuta
• Network disk yosungirako (Sitefana)
• CCTV dongosolo pogwiritsa ntchito NVR ndi makamera a IP (zidutswa 8)
• Kufalikira kwa Office Wi-Fi, maukonde awiri (wamkati ndi alendo)
• Ndi zotheka kuwonjezera osindikiza maukonde (mpaka 3 zidutswa)
• Chiyembekezo chotsegula ofesi yachiwiri kumbali ina ya mzindawo

Kusankha zida

Sindidzayang'ananso pakusankhidwa kwa ogulitsa, chifukwa iyi ndi nkhani yomwe imayambitsa mikangano yakale; tiyang'ana kwambiri kuti mtunduwo wasankhidwa kale, ndi Cisco.

Maziko a maukonde ndi rauta (rauta). Ndikofunika kuyesa zosowa zathu, pamene tikukonzekera kukulitsa maukonde mtsogolomu. Kugula rauta yokhala ndi malo osungira izi kudzapulumutsa kasitomala ndalama pakukulitsa, ngakhale zikhala zotsika mtengo pang'ono pagawo loyamba. Cisco ya gawo laling'ono labizinesi imapereka mndandanda wa Rvxxx, womwe umaphatikizapo ma routers amaofesi akunyumba (RV1xx, nthawi zambiri okhala ndi gawo lokhazikika la Wi-Fi), lomwe lapangidwa kuti lilumikize malo angapo ogwirira ntchito ndi kusungirako maukonde. Koma sitikuwakonda, chifukwa ali ndi mphamvu zochepa za VPN komanso bandwidth yotsika. Sitikhalanso ndi chidwi ndi gawo lopanda zingwe lopanda zingwe, chifukwa likuyenera kuyikidwa muchipinda chaukadaulo muchoyika; Wi-Fi idzakonzedwa pogwiritsa ntchito AP (Malo a Access Point). Kusankha kwathu kudzagwera pa RV320, yomwe ndi chitsanzo chaching'ono cha mndandanda wakale. Sitifunikira madoko ambiri muzosintha zomangidwa, popeza tidzakhala ndi chosinthira chosiyana kuti tipereke madoko okwanira. Ubwino waukulu wa rauta ndi kutulutsa kwake kwakukulu. VPN seva (75 Mbits), chiphaso cha ngalande 10 za VPN, kuthekera kokweza njira ya VPN ya Site-2. Chofunikanso ndi kukhalapo kwa doko lachiwiri la WAN kuti mupereke zosunga zobwezeretsera pa intaneti.

Router iyenera kukhala kusintha (kusintha). Chofunikira kwambiri pa switch ndi ntchito yomwe ili nayo. Koma choyamba, tiyeni tiwerenge madoko. Kwa ife, tikukonzekera kugwirizanitsa ndi kusintha: Ma PC 17, 2 APs (malo olowera pa Wi-Fi), makamera 8 a IP, 1 NAS, 3 osindikiza ma network. Pogwiritsa ntchito masamu, timapeza nambala 31, yolingana ndi kuchuluka kwa zida zomwe zidalumikizidwa ndi netiweki, onjezerani 2 ku izi. uplink (tikukonzekera kukulitsa maukonde) ndipo tiyima pamadoko 48. Tsopano za magwiridwe antchito: kusintha kwathu kuyenera kutero Zithunzi za VLAN, makamaka zonse 4096, sizidzapweteka SFP mgodi, popeza zitha kulumikiza chosinthira kumapeto kwina kwa nyumbayo pogwiritsa ntchito ma optics, ziyenera kugwira ntchito mozungulira, zomwe zimapangitsa kuti tisunge maulalo (STP-Spanning Tree Protocol), komanso AP ndi makamera azidzayendetsedwa kudzera pawiri zopotoka, kotero ndikofunikira kukhala nazo MALO (mutha kuwerenga zambiri za ma protocol omwe ali mu wiki, mayinawo ndi otsika). Zovuta kwambiri L3 Sitifunikira magwiridwe antchito, kotero kusankha kwathu kudzakhala Cisco SG250-50P, popeza ili ndi magwiridwe antchito okwanira kwa ife ndipo nthawi yomweyo sichimaphatikizapo ntchito zosafunikira. Tidzakambirana za Wi-Fi m'nkhani yotsatira, chifukwa uwu ndi mutu waukulu. Kumeneko tikhala pa kusankha kwa AR. Sitisankha NAS ndi makamera, timaganiza kuti anthu ena akuchita izi, koma timangokonda maukonde.

Kupanga

Choyamba, tiyeni tisankhe ma netiweki omwe tikufuna (mutha kuwerenga zomwe ma VLAN ali pa Wikipedia). Chifukwa chake, tili ndi magawo angapo omveka a netiweki:

• Malo ogwirira ntchito Makasitomala (ma PC)
• Seva (NAS)
• CCTV
• Zida za alendo (WiFi)

Komanso, malinga ndi malamulo a makhalidwe abwino, tidzasuntha mawonekedwe a kasamalidwe ka chipangizo kukhala VLAN yosiyana. Mutha kuwerengera ma VLAN mwanjira iliyonse, ndisankha izi:

• VLAN10 Management (MGMT)
• Seva ya VLAN50
• VLAN100 LAN + WiFi
• VLAN150 Mlendo WiFI (V-WiFi)
• Zithunzi za VLAN200CAM

Kenako, tipanga dongosolo la IP ndikugwiritsa ntchito chigoba 24 bits ndi subnet 192.168.x.x. Tiyeni tiyambe.

Dziwe losungidwa lidzakhala ndi ma adilesi omwe azikonzedwa motsatana (osindikiza, maseva, malo oyang'anira, ndi zina zotero, kwa makasitomala DHCP ipereka adilesi yosinthika).

Chifukwa chake tidayerekeza IP, pali mfundo zingapo zomwe ndikufuna kulabadira:

• Palibe chifukwa chokhazikitsa DHCP pamaneti owongolera, monga momwe ziliri m'chipinda cha seva, popeza ma adilesi onse amaperekedwa pamanja pokonza zida. Anthu ena amasiya dziwe laling'ono la DHCP ngati akugwirizanitsa zipangizo zatsopano, chifukwa cha kasinthidwe kake koyambirira, koma ndazolowera ndipo ndikukulangizani kuti mukonze zida osati pamalo a kasitomala, koma pa desiki yanu, kuti ndisatero. chitani dziwe ili pano.
• Makamera ena angafunike adilesi yokhazikika, koma timaganiza kuti makamera amalandira okha.
• Pamaneti am'deralo, timasiya dziwe la osindikiza, popeza ntchito yosindikiza ya netiweki siigwira ntchito modalirika ndi ma adilesi osinthika.

Kukonza rauta

Chabwino, potsiriza tiyeni tipite ku khwekhwe. Timatenga chingwe cha chigamba ndikugwirizanitsa ndi imodzi mwa madoko anayi a LAN a rauta. Mwachikhazikitso, seva ya DHCP imayatsidwa pa rauta ndipo imapezeka pa adilesi 192.168.1.1. Mukhoza kuyang'ana izi pogwiritsa ntchito ipconfig console utility, mu zotsatira zomwe router yathu idzakhala chipata chosasinthika. Tiyeni tione:

Mu msakatuli, pitani ku adilesi iyi, tsimikizirani kulumikizidwa kosatetezeka ndikulowa ndi dzina lolowera / mawu achinsinsi cisco/cisco. Nthawi yomweyo sinthani mawu achinsinsi kukhala otetezeka. Ndipo choyamba, pitani ku Setup tabu, gawo la Network, apa timapereka dzina ndi dzina lachidakwa cha rauta.

Tsopano tiyeni tiwonjezere ma VLAN ku rauta yathu. Pitani ku Umembala wa Port Management/VLAN. Tidzalandilidwa ndi chizindikiro cha VLAN-ok, chokonzedwa mwachisawawa

Sitikuzifuna, tidzachotsa zonse kupatula yoyamba, popeza ndizokhazikika ndipo sizingachotsedwe, ndipo nthawi yomweyo tidzawonjezera ma VLAN omwe tidakonza. Osayiwala kuwona bokosi lomwe lili pamwamba. Tilolanso kasamalidwe ka zida kokha kuchokera pamanetiweki oyang'anira, ndikulola kuyenda pakati pamanetiweki paliponse kupatula netiweki ya alendo. Tikonza madoko pakapita nthawi.

Tsopano tiyeni tikonze seva ya DHCP molingana ndi tebulo lathu. Kuti muchite izi, pitani ku DHCP/DHCP Setup.
Kwa ma netiweki omwe DHCP idzayimitsidwa, tidzangokonza adilesi yokhayo, yomwe idzakhala yoyamba mu subnet (ndi chigoba moyenerera).

Pamanetiweki ndi DHCP, chilichonse ndi chosavuta, timakonzanso adilesi yachipata, ndikulembetsa maiwe ndi DNS pansipa:

Ndi izi tathana ndi DHCP, tsopano makasitomala olumikizidwa ndi netiweki yakomweko alandila adilesi yokha. Tsopano tiyeni tikonze madoko (madoko amakonzedwa molingana ndi muyezo 802.1q, ulalowu ndi wosavuta, mutha kuzidziwa bwino). Popeza zimaganiziridwa kuti makasitomala onse adzalumikizidwa kudzera pa masinthidwe oyendetsedwa a VLAN yosadziwika (yachibadwidwe), madoko onse adzakhala MGMT, izi zikutanthauza kuti chipangizo chilichonse cholumikizidwa ndi dokoli chidzagwera mu netiweki iyi (zambiri apa). Tiyeni tibwerere ku Umembala wa Port Management/VLAN ndikukonza izi. Timasiya VLAN1 Kupatula pa madoko onse, sitikufuna.

Tsopano pa khadi lathu la intaneti tiyenera kukonza adilesi yokhazikika kuchokera ku subnet yoyang'anira, popeza tidathera mu subnet iyi titadina "kusunga", koma palibe seva ya DHCP pano. Pitani ku zoikamo ma adapter network ndikukonzekera adilesi. Pambuyo pake, rauta idzapezeka pa 192.168.10.1

Tiyeni tiyike intaneti yathu. Tiyerekeze kuti talandira adilesi yokhazikika kuchokera kwa omwe amapereka. Pitani ku Setup/Network, lembani WAN1 pansi, dinani Sinthani. Sankhani Static IP ndikusintha adilesi yanu.

Ndipo chinthu chomaliza cha lero ndikukonza mwayi wofikira kutali. Kuti muchite izi, pitani ku Firewall / General ndikuyang'ana bokosi la Remote Management, sinthani doko ngati kuli kofunikira

Mwina ndi zonse za lero. Chifukwa cha nkhaniyi, tili ndi rauta yokhazikika yomwe titha kugwiritsa ntchito intaneti. Kutalika kwa nkhaniyi ndiutali kuposa momwe ndimayembekezera, kotero mu gawo lotsatira tidzamaliza kukhazikitsa rauta, kukhazikitsa VPN, kukonza ma firewall ndi kudula mitengo, komanso kukonza kusinthana ndipo tidzatha kuyika ofesi yathu. . Ndikukhulupirira kuti nkhaniyi inali yothandiza komanso yophunzitsa kwa inu. Ndikulemba kwa nthawi yoyamba, ndidzakhala wokondwa kulandira kutsutsidwa kolimbikitsa ndi mafunso, ndiyesetsa kuyankha aliyense ndikuganiziranso ndemanga zanu. Komanso, monga ndidalemba koyambirira, malingaliro anu pazomwe zingawonekere muofesi ndi zina zomwe tidzakonza ndizolandiridwa.

Magulu anga:
Telegalamu: hebelez
Skype / imelo: [imelo ndiotetezedwa]
Tiwonjezereni, tikambirane.

Source: www.habr.com