3. Typical Check Point Maestro kushandiswa mamiriro

Muzvinyorwa zviviri zvekupedzisira (kutanga, chechipiri) takatarisa musimboti wekushanda Tarisa Point Maestro, pamwe chete nehunyanzvi uye hupfumi zvakanakira mhinduro iyi. Iye zvino ndinoda kuenda kune imwe muenzaniso uye kutsanangura chiitiko chinogoneka chekushandisa Check Point Maestro. Ini ndicharatidza yakajairwa yakatarwa pamwe netiweki topology (L1, L2 uye L3 dhayagiramu) uchishandisa Maestro. Muchidimbu, iwe uchaona yakagadzirira-yakagadzirwa yakajairika purojekiti.

Ngatitii isu takasarudza kuti isu tichashandisa scalable Check Point Maestro chikuva. Kuti tiite izvi, ngatitorei bundle retatu 6500 magedhi uye maviri orchestrators (kuitira kushivirira zvakakwana kukanganisa) - CPAP-MHS-6503-TURBO + CPAP-MHO-140. Dhiyagiramu yekubatanidza yemuviri (L1) ichaita seizvi:



Ndokumbira utarise kuti zvinosungirwa kubatanidza maManagement ports evaimbi, ayo ari pane yekumashure mapaneru.

Ini ndinofungidzira kuti zvinhu zvakawanda zvingave zvisina kunyatsojeka kubva pamufananidzo uyu, saka ini ndichakurumidza kupa yakajairika dhizaini yeyechipiri nhanho yeOSI modhi:

Mamwe mashoma mapoinzi pamusoro pechirongwa:

• Maochestra maviri anowanzo kuisirwa pakati pepakati switch uye ekunze switch. Avo. kuparadzaniswa kwemuviri kwechikamu cheInternet.
• Zvinofungidzirwa kuti "musimboti" ndeye stack (kana VSS) yeaviri switch pane iyo PortChannel ye4 ports yakarongeka. Kune Yakazara HA, imwe neimwe orchestrator yakabatana kune yega switch. Kunyangwe iwe uchigona kushandisa imwe link panguva, sezvinoitwa neVLAN 5 - manejimendi network (red links).
• Manongedzo ane basa rekufambisa inobereka traffic (yero) akabatana negumi gigabit ports. SFP modules inoshandiswa kune izvi - CPAC-TR-10SR-B
• Nenzira yakafanana (Yakazara HA) nzira, vaimbi vanobatana kune ekunze switch (blue link), asi vachishandisa gigabit ports uye inoenderana SFP modules - CPAC-TR-1T-B.

Iwo magedhi pachawo akabatana kune yega yega orchestrator vachishandisa yakakosha tambo dzeDAC dzinouya dzakasanganisirwa (Yakananga Batanidza Cable (DAC), 1m - CPAC-DAC-10G-1M):

Sezvinoonekwa kubva padhizaini, panofanirwa kuve nekubatana kwekubatanidza pakati pevanoodha (pink links). Iyo tambo inodiwa inosanganisirwa mukiti. Chimiro chekupedzisira chinotaridzika seizvi:

Nehurombo, handikwanise kuburitsa mitengo pachena. Asi unogona nguva dzose vakumbire purojekiti yako.

Kana iri L3 dunhu, rinotaridzika zvakanyanya nyore:

Sezvauri kuona, ese masuwo padanho rechitatu anotaridzika senge mudziyo mumwe. Kuwanikwa kune orchestrators kunogoneka chete kuburikidza neManagement network.

Izvi zvinopedzisa chinyorwa chedu chipfupi. Kana uine mibvunzo nezve madhayagiramu kana kuti uchida masosi, wobva wasiya mhinduro kana nyora netsamba.

Muchinyorwa chinotevera tichaedza kuratidza kuti Check Point Maestro inosangana sei nekuenzanisa uye kuitisa kuyedzwa kwemutoro. Saka gara wakatarisa (teregiramu, Facebook, VK, TS Solution Blog)!

PS Ndinotaura kuonga kwangu kuna Anatoly Masover naIlya Anokhin (Check Point company) nerubatsiro rwavo mukugadzirira madhayagiramu aya!

Source: www.habr.com