Kuwedzera kwemaguta makuru uye kuumbwa kweagglomerations ndeimwe yemaitiro akakosha mukusimudzira magariro nhasi. Moscow chete inofanira kuwedzera nemamiriyoni mana emamita emamita edzimba muna 2019 (uye izvi hazvisi kuverenga misha gumi neshanu ichawedzerwa ne4). Munharaunda yese iyi yakakura, vafambisi venhare vanozofanira kupa vashandisi mukana weInternet. Aya anogona kunge ari emudhorobha madiki ane zvivakwa zvakaomesesa, kana mamwe "akadzingwa" misha yemakottage. Panyaya idzi, zvinodiwa zvehardware zvakasiyana zvishoma. Isu takaongorora chimwe nechimwe chezviitiko izvi uye takagadzira universal optical switch modhi - T15G-2020SQ. Mune ino positi isu tichaongorora zvakadzama kugona kwechigadzirwa icho chichave chekufarira kune telecom vanoshanda muRussia yese.
Isa pane network
Iyo T2600G-28SQ switch yakagadzirirwa zvese kushanda pamwero wekuwana munetiweki uye yekuunganidza zvinongedzo kubva kune mamwe ekupinda level switch. Iyi ishizha 2600 switch inoita switching uye static routing. Kana mushandisi akachinja zvese kuunganidzwa uye kuwana (kutenderera chete muinetiweki musimboti), iyo T28G-XNUMXSQ inokwana mune chero yemazinga. Panyaya ye dynamically router aggregation, iwe uchiri kufanira kufunga nezve zvimwe zvinorambidzwa pamakesi ekushandisa.
Iyo T2600G-28SQ modhi ndeye yakazara-inoshanda inoshanda Ethernet switch isina zvimwe zvirambidzo zvinoonekwa kana uchishandisa xPON kana mamwe matekinoroji. Semuenzaniso, pasina kutyisidzira kwekudonha kwakanyanya kwekukurumidza nekuwedzera kwenhamba yevashandisi kana kusawirirana kwakashata pakati pemidziyo kubva kune vatengesi vakasiyana uye firmware. Vese vashandisi vekupedzisira uye epasi pekupinda switch ane optical uplinks, semuenzaniso, iyo T2600G-28TS modhi, inogona kubatana kune iyo mudziyo interfaces. Mufananidzo uri pasi apa unoratidza mienzaniso yakajairika yekubatana kwakadaro.
Kuti uwane network yemushandisi wekupedzisira, optical fiber kana twisted pair cable inogona kushandiswa. Padivi rekunyorera, iyo optical fiber inogona kugumiswa kana kushandisa media converter (media converter), semuenzaniso, TP-Link MC220L; uye kushandisa optical interface mune SOHO router.
Kuti ubatanidze mutengi ari pedyo, unogona kushandisa ina RJ-45 ports inoshanda nekumhanya kwe10/100/1000 Mbit/s. Kana nekuda kwechimwe chikonzero izvi zvisina kukwana, mushandisi anogona "kushandura" switch's optical interfaces kuita mhangura. Izvi zvinogona kuitwa uchishandisa nyanzvi "mhangura" SFPs ine RJ-45 yekubatanidza. Asi mhinduro yakadaro haigoni kunzi inowanzoitika.
Mimwe mienzaniso kubva mukuita
Kupedzisa mufananidzo, isu tinopa akati wandei mienzaniso yekushandisa T2600G-28SQ switch.
Moscow nharaunda inopa , iyo, kunze kweInternet, inopa telephony uye tambo dzeTV masevhisi, inoshandisa T2600G-28SQ padanho rekusvika pakuvaka network munharaunda yakazvimirira (kottage nemataundi). Padivi remutengi, chinongedzo chinoitwa kune marouters ane SFP port, pamwe nevashanduri midhiya. Parizvino, maSOHO routers ane SFP port haana kuwanda-kugadzirwa munyika yedu, asi isu tiri, hongu, tichifunga nezvazvo.
Telecommunications operator kubva kunharaunda yePavlovo-Posad inoshandisa T2600G-28SQ switch se "diki aggregation", uchishandisa switch dzeT2600G-28TS uye T2500G-10TS modhi kuti uwane.
Kambani boka inopa mukana weInternet, TV, telephony, uye mavhidhiyo ekutarisa masisitimu ari kumaodzanyemba kwakadziva kumabvazuva kwedunhu reMoscow (Kolomna, Lukhovitsy, Zaraysk, Serebryanye Prudy, Ozyory). Iyo yekufungidzira topology pano yakafanana neyeiyo ISS: T2600G-28SQ padanho rekuunganidza, uye T2600G-28TS uye T2500G-10TS padanho rekuwana.
Provider kubva kuKrasnoznamensk inopa kuwanikwa kweInternet uchishandisa network ine yakadzika optical penetration. Iyo zvakare yakavakirwa paT2600G-28SQ.
Muzvikamu zvinotevera tichatsanangura muchidimbu zvimwe zvezvinhu zveT2600G-28SQ. Kuti tisaputira zvinhu, takasiya nzira dzakawanda kunze: QinQ (VLAN VPN), routing, QoS, etc. Tinofunga kuti tinogona kudzokera kwavari mune imwe yezvinyorwa zvinotevera.
Chinja Kugona
Reservation - STP
STP - Kutenderera Muti Protocol. Iyo inotenderera yemuti protocol yave ichizivikanwa kwenguva yakareba kwazvo, nekuda kweanoremekedzwa Radya Perlman nekuda kweizvi. Mune network yemazuva ano, vatariri vanoedza munzira dzese kudzivirira kushandisa iyi protocol. Hongu, STP haina zvipingamupinyi zvayo. Uye zvakanaka kwazvo kana paine imwe nzira yairi. Zvisinei, sezvinowanzoitika, imwe nzira kune iyi protocol ichanyanya kuvimba nemutengesi. Naizvozvo, nanhasi, Spanning Tree Protocol inoramba iine mhinduro chete inotsigirwa nevanenge vese vanogadzira uye inozivikanwawo kune vese network administrator.
Iyo TP-Link T2600G-28SQ switch inotsigira matatu shanduro STP: classic STP (IEEE 802.1D), RSTP (802.1W) uye MSTP (802.1S).
Pane idzi sarudzo, yenguva dzose RSTP yakanyatsokodzera kune vazhinji vadiki Internet vanopa muRussia, iyo ine imwe isingarambike mukana pamusoro peiyo classic vhezheni - yakanyanya kupfupika yekubatanidza nguva.
Iyo inonyanya kuchinjika protocol nhasi iMSTP, inotsigira chaiwo network (VLANs) uye inobvumira miti yakati wandei, iyo inokutendera iwe kushandisa ese aripo ekuchengetedza nzira. Iye maneja anogadzira akati wandei akasiyana emiti mamiriro (anosvika masere), imwe neimwe inoshandira chaiyo seti yema network.
Zvinyorwa zveMSTPVatariri veNovice vanofanirwa kungwarira zvakanyanya kana vachishandisa MSTP. Izvi zvinodaro nekuti maitiro eprotocol anosiyana mukati medunhu uye pakati pematunhu. Naizvozvo, kana uchigadzira switch, zvakakosha kuve nechokwadi chekugara mukati medunhu rimwe chete.
Nzvimbo iyi ine mukurumbira wakashata chii? Mumashoko eMSTP, dunhu seti yekuchinja kwakabatana kune imwe neimwe ine hunhu hwakafanana: zita redunhu, nhamba yekudzokorora, uye kugovera kwechokwadi network (VLANs) pakati pezviitiko zveprotocol (zviitiko).
Ehe, iyo Spanning Tree protocol (chero vhezheni) inobvumidza iwe kwete chete kubata zvishwe zvinomuka kana uchibatanidza backup chiteshi, asi zvakare kudzivirira kubva kune tambo switching zvikanganiso kana injiniya achibatanidza nemaune kana nekusaziva machiteshi, achigadzira loop neake. zviito.
Vatariri venetiweki vane ruzivo rwakanyanya vanosarudza kushandisa dzakasiyana siyana dzekuwedzera sarudzo kuchengetedza STP protocol kubva pakurwiswa kana yakaoma njodzi mamiriro. Iyo T2600G-28SQ modhi inopa huwandu hwese hwekugona kwakadaro: Loop Dzivirira uye Root Dziviriro, TC Guard, BPDU Dzivirira uye BPDU Sefa.
Kushandiswa kwakakodzera kwesarudzo dzakanyorwa pamusoro pamwe chete nedzimwe nzira dzekudzivirira dzinotsigirwa kunodzikamisa network yenzvimbo uye kuita kuti iwedzere kufanotaura.
Reservation β LAG
LAG - Batanidza Aggregation Boka. Iyi tekinoroji inobvumidza iwe kusanganisa akati wandei emuviri chiteshi kuita imwe ine musoro. Mamwe maprotocol ese anomira kushandisa nzira dzemuviri dzinosanganisirwa muLAG zvakasiyana uye otanga "kuona" imwe inonzwisisika interface. Muenzaniso weiyo protocol ndeye STP.
Mushandisi traffic yakaenzana pakati pematanho emuviri mukati meane musoro nzira zvichibva pane iyo hash sum. Kuti uiverenge, kero dzeMAC dzeanotumira, mugamuchiri, kana vaviri vavo vanogona kushandiswa; pamwe chete nekero dzeIP dzemutumi, mugamuchiri, kana vaviri vavo. Layer XNUMX protocol ruzivo (TCP / UDP ports) haina kuverengerwa.
Iyo T2600G-28SQ switch inotsigira static uye ine simba LAGs.
Kutaurirana maitiro ekushanda eboka rine simba, iyo LACP protocol inoshandiswa.
Chengetedzo - Mazita ekuwana (ACLs)
Yedu T2600G-28SQ switch inokutendera kusefa mushandisi traffic uchishandisa rondedzero yekuwana (ACL - Access Control List).
Rondedzero yekuwana inotsigirwa inogona kuva yemhando dzakasiyana siyana: MAC uye IP (IPv4/IPv6), yakasanganiswa, uye zvakare yekuita sefa yemukati. Huwandu hwemhando yega yega yerunyorwa inotsigirwa zvinoenderana neiyo SDM template iri kushandiswa ikozvino, yatakatsanangura mune chimwe chikamu.
Mushandisi anogona kushandisa iyi sarudzo kuvharira akasiyana-siyana asingadiwe traffic pane network. Muenzaniso wetraffic yakadaro ingave IPv6 mapaketi (uchishandisa EtherType munda) kana sevhisi inoenderana isina kupihwa; kana kuvhara SMB pachiteshi 445. Mune network ine static addressing, DHCP / BOOTP traffic haidiwi, saka uchishandisa ACL, mutungamiri anogona kusefa UDP datagrams pazvikepe 67 uye 68. Unogonawo kuvhara IPoE yemunharaunda uchishandisa ACL. Kuvharira kwakadaro kungave kuri kudiwa mumashandisi emagetsi uchishandisa PPPoE.
Maitiro ekushandisa mazita ekuwana ari nyore kwazvo. Mushure mekugadzira iyo rondedzero pachayo, iwe unofanirwa kuwedzera iyo inodiwa nhamba yemarekodhi kwairi, iyo mhando iyo yakanangana nepepa rinogadziriswa.
Kugadzira mazita ekuwana
Izvo zvakakosha kucherechedza kuti rondedzero yekuwana inogona kuita kwete chete yakajairwa mashandiro ekubvumidza kana kuramba traffic, asi zvakare kuitungamira, kuiratidzira, uye zvakare kuita kudzokorora kana chiyero chekudzikamisa.
Kamwe zvose zvinodiwa ACLs vakasikwa, mutungamiri anogona kugadza navo. Zvinogoneka kubatanidza runyorwa rwekuwana kune ese ari maviri akananga chiteshi chemuviri uye chaiyo chaiyo network.
Chengetedzo - nhamba yeMAC kero
Dzimwe nguva vashandisi vanofanirwa kudzikamisa nhamba yeMAC kero iyo switch ichadzidza pane imwe chiteshi. Rondedzero dzekuwana dzinokutendera kuti uwane iyo yakatsanangurwa mhedzisiro, asi panguva imwechete inoda chiratidzo chakajeka cheMAC kero pachadzo. Kana iwe uchingoda kudzikamisa nhamba yemakero echiteshi, asi usingaatsanangure zvakajeka, kuchengetedza kwechiteshi kuchauya kuzonunura.
Kurambidzwa kwakadaro kunogona kudiwa, semuenzaniso, kudzivirira kubva pakubatanidza network yese yemuno kune imwe mupi switch interface. Zvakakodzera kutaura pano kuti tiri kutaura nezve dial-up yekubatanidza, nekuti kana uchibatanidza uchishandisa router kudivi revatengi, iyo T2600G-28SQ ichadzidza kero imwe chete - iyi ndiyo MAC inova yeWAN chiteshi chemutengi router. .
Kune kirasi yese yekurwiswa yakanangana neiyo switching tafura. Iyi inogona kunge iri tafura yekufashukira kana MAC spoofing. Iyo sarudzo yekuchengetedza chiteshi inokubvumidza iwe kudzivirira kubva pakufashukira kwetafura yebhiriji uye kurwiswa kwakanangana nekudzorera nemaune switch uye kuisa chepfu patafura yebhiriji.
Hazvigoneke kuti tirege kungotaura zvisina kunaka zvevatengi. Pane kazhinji mamiriro ezvinhu apo kadhi yetiweki yekombuta isingashande kana router inogadzira rwizi rwemafuremu ane anopokana akatumira uye anogamuchira kero. Kuyerera kwakadaro kunogona kubvisa nyore CAM.
Imwe nzira yekudzikamisa huwandu hwematafura ebhiriji ekupinda anoshandiswa ndeye MAC VLAN Chengetedzo chishandiso, chinobvumira maneja kuti ataure huwandu hwakanyanya hwekupinda kune chaiyo chaiyo network.
Pamusoro pekugadzirisa manyorerwo ane simba mutafura yekuchinja, maneja anogona zvakare kugadzira iwo akamira.
Iyo yepamusoro bhiriji tafura yeT2600G-28SQ modhi inogona kugarisa anosvika gumi nematanhatu marekodhi.
Imwe sarudzo yakagadzirirwa kusefa kutapurirana kwemushandisi traffic ndeye Port Isolation basa, iro rinokutendera kuti unyatso kutsanangura kuti ndeipi nzira inotenderwa kutumira.
Chengetedzo - IMPB
Munzvimbo dzakakura dzenyika yedu yakakura, maitiro evafambisi venhare kunyaya dzekuona kuchengetedzwa kwenetiweki kunosiyana kubva pakusaziva kuzere kusvika pakushandiswa kwakanyanya kwesarudzo dzese dzinotsigirwa nemidziyo.
Iyo IPv4 IMPB (IP-MAC-Port Binding) uye IPv6 IMPB mabasa inokutendera iwe kuti udzivirire kubva kune huwandu hwese hwekurwiswa hune chekuita nekupambwa kweIP neMAC kero kune chikamu chevanyoreri nekusunga IP neMAC kero yemidziyo yemutengi the provider's switch interface. Kusunga uku kunogona kuitwa nemaoko kana kushandisa ARP Scanning uye DHCP Snooping mabasa.
Basic IMPB marongero
Kuti zvive zvakanaka, zvinofanira kutaurwa kuti basa rinokosha rinogona kushandiswa kuchengetedza DHCP protocol - DHCP Filter.
Uchishandisa basa iri, maneja wetiweki anogona kutsanangura nemaoko iwo mainterface ayo chaiwo maseva eDHCP akabatana. Izvi zvinodzivirira hutsinye hweDHCP maseva kubva mukukanganisa iyo IP yekutaurirana maitiro.
Chengetedzo - DoS Dzivirira
Iyo modhi iri kutariswa inotibvumira kuchengetedza vashandisi kubva kune akati wandei anozivikanwa uye akambopararira DoS kurwisa.
Mazhinji ekurwiswa kwakanyorwa haasisiri ane njodzi kune zvishandiso zvine masisitimu emazuva ano, asi network yedu inogona kuramba ichisangana neiyo iyo yekupedzisira software yakagadziridzwa makore mazhinji apfuura.
DHCP rutsigiro
Iyo TP-Link T2600G-28SQ switch inogona kuita ese sevhavha yeDHCP kana relay, uye kuita kusefa kwakasiyana kwemameseji eDHCP kana chimwe chishandiso chichiita sevhavha.
Nzira iri nyore yekupa vashandisi iyo IP paramita yavanoda kushandisa ndeye kushandisa switch yakavakirwa-mukati DHCP server. Nerubatsiro rwayo, iwo ekutanga paramita anogona kutopihwa kune vanyoreri.
Isu takabatanidza yedu Archer C6 SOHO router kune imwe yekuchinja interface uye takaita chokwadi chekuti mutengi mudziyo wakagamuchira kero.
Zvinoita seizvi
Iyo DHCP sevha yakavakirwa muchinjiko ingangove isiri iyo yakanyanya scalable uye inochinjika mhinduro: hapana tsigiro yezvisiri-standard sarudzo, uye hapana kubatana neIPAM. Kana mushandisi achida kutonga kwakawanda pamusoro peiyo IP kero yekugovera maitiro, ipapo yakazvitsaurira DHCP server ichashandiswa.
T2600G-28SQ inokutendera kuti utaure yakatsaurwa yakatsaurwa yeDHCP server kune yega yega mushandisi subnet uko mameseji eprotocol ari kukurukurwa anozoendeswazve. Iyo subnet inosarudzwa nekutsanangura iyo yakakodzera L3 interface: VLAN (SVI), yakafambiswa chiteshi kana chiteshi-chiteshi.
Kuti uedze kushanda kweiyo relay, takagadzira router yakaparadzana kubva kune mumwe mutengesi kuti ishande seDHCP server, iyo marongero ayo anoratidzwa pazasi.
R1#sho run | s pool
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8Iyo mutengi router yakabudirira kuwana IP kero zvakare.
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.2 010c.8063.f0c2.6a May 24 2019 05:07 PM AutomaticPasi pemuparadzi - zviri mukati mepaketi yakabatwa pakati pekuchinja uye yakatsaurirwa DHCP server.
Package content
Izvo zvinofanirwa kucherechedzwa kuti switch inotsigira Option 82. Kana yagoneswa, switch inozowedzera ruzivo nezve mushandisi interface kubva iyo DHCP Discover meseji yakatambirwa. Mukuwedzera, iyo T2600G-28SQ modhi inokubvumira kuti ugadzirise mutemo wekugadzirisa ruzivo rwakawedzerwa paunoisa sarudzo Nhamba 82. Kuvapo kwerutsigiro rweiyi sarudzo kunogona kubatsira mumamiriro ezvinhu apo munyoreri anoda kupihwa yakafanana IP kero, zvisinei nekuti mutengi-id iyo mutengi anoshuma nezvayo.
Nhamba iri pazasi inoratidza meseji yeDHCP Discover (yakatumirwa nerelay) ine sarudzo Nhamba 82 yakawedzerwa.
Mharidzo ine sarudzo Nhamba 82
Zvechokwadi, iwe unogona kutarisira sarudzo Nhamba 82 pasina kuisa yakazara-yakazara DHCP relay; zvigadziriso zvinowirirana zvinoratidzwa muchikamu che "DHCP L2 Relay".
Iye zvino ngatichinjei DHCP server settings kuratidza kuti sarudzo Nhamba 82 inoshanda sei.
R1#sho run | s dhcp
ip dhcp pool test
network 192.168.0.0 255.255.255.0
default-router 192.168.0.1
dns-server 8.8.8.8
class option82_test
address range 192.168.0.222 192.168.0.222
ip dhcp class option82_test
relay agent information
relay-information hex 010e010c74702d6c696e6b5f746573740208000668ff7b66f675
R1#sho ip dhcp binding
Bindings from all pools not associated with VRF:
IP address Client-ID/ Lease expiration Type
Hardware address/
User name
192.168.0.222 010c.8063.f0c2.6a May 24 2019 05:33 PM AutomaticChinhu chakadai
Iyo DHCP interface relay basa ichave yakakosha mumamiriro ezvinhu apo shanduko haina kungoita L3 interface yakabatana kune chaiyo network, asi iyi interface inewo IP kero. Kana pasina kero pane yakadaro interface, iyo DHCP VLAN relay basa ichauya kuzonunura. Ruzivo nezve subnet mune iyi kesi inotorwa kubva kune yakasarudzika interface, ndiko kuti, nzvimbo dzekero mune akati wandei maratidziro network ichave yakafanana (inopindirana).
Kazhinji, vashandisi vanofanirwawo kuchengetedza vanyoreri kubva mukukanganisa kana kwakashata activation yeDHCP server pamidziyo yemutengi. Takasarudza kukurukura nezvekushanda uku mune chimwe chezvikamu zvakatsaurirwa nyaya dzekuchengetedza.
IEEE 802.1X
Imwe nzira yekutendesa vashandisi pane network ndeye kushandisa IEEE 802.1X protocol. Kuzivikanwa kweprotocol iyi muma network evafambisi venhare muRussia kwatove kuderera; ichiri kushandiswa kunyanya mumatanho emunharaunda emakambani makuru kuratidza vashandisi vemukati vesangano. Iyo T2600G-28SQ switch ine 802.1X rutsigiro, saka mupi anogona kuishandisa nyore kana zvichidikanwa.
Kuti iyo IEEE 802.1X protocol ishande, vatori vechikamu vatatu vanodiwa: midziyo yemutengi (munyoreri), mupi wekupinda switch (authenticator) uye maseva echokwadi (kazhinji RADIUS maseva).
Iyo yekutanga kumisikidzwa padivi revashandisi iri nyore kwazvo. Iwe unongoda kutsanangura iyo IP kero yeRADIUS server yakashandiswa, iyo iyo mushandisi dhatabhesi ichachengetwa, uye zvakare sarudza iyo interfaces iyo inodiwa chokwadi.
Basic 802.1X setup
Kugadzirisa kudiki kunodiwawo padivi remutengi. Masisitimendi ese emazuva ano anotova nesoftware inodiwa. Asi kana zvichidikanwa, unogona kuisa uye kushandisa TP-Link 802.1x Client - chishandiso chinokutendera kuti utendese mutengi panetiweki.
Kana uchibatanidza PC yemushandisi zvakananga kune network yemupi, zvigadziriso zvekusimbisa zvinofanirwa kuvhurwa kunetiweki kadhi rinoshandiswa pakubatanidza.
Zvisinei, pari zvino, haisi kombiyuta yemushandisi iyo inowanzobatanidzwa kune network yevashandi zvakananga, asi SOHO router inovimbisa kushanda kwevanyoreri vemunharaunda network (zvose zviri zviviri wired uye wireless segments). Muchiitiko ichi, ese 802.1X protocol marongero anofanirwa kuitwa zvakananga pane router.
Zvinoratidzika kwatiri kuti iyi nzira yechokwadi yakakanganwika zvisina kufanira mumashandisi emagetsi. Ehe, kunyatsosunga munyoreri kune switch port inogona kunge iri nyore mhinduro kubva pakuona kwemushandisi wemidziyo marongero. Asi kana kushandiswa kwelogin nepassword kuchidikanwa, saka 802.1X haizove inorema protocol kana ichienzaniswa nekubatanidza kunoshandiswa kwakavakirwa paPPTP/L2TP/PPPoE tunnels.
PPPoE ID Insertion
Vazhinji vashandisi kwete munyika yedu chete, asi pasi rese vachiri kuda kushandisa mapassword akareruka. Uye nyaya dzekuba zvitupa, maiwe, hadzina kujairika. Kana mushandisi akashandisa PPPoE protocol munetiweki yayo kuratidza vashandisi, ipapo TP-Link T2600G-28SQ switch ichabatsira kugadzirisa dambudziko rine chekuita nekudonha kwezvitupa. Izvi zvinowanikwa nekuwedzera yakakosha label kune iyo PPPoE Active Discovery meseji. Nenzira iyi, mupi anogona kutendesa munyoreri kwete chete nekupinda uye password, asiwo nekuwedzera data. Iyi yekuwedzera data inosanganisira iyo MAC kero yemutengi mudziyo, pamwe neiyo switch interface iyo yakabatana nayo.
Vamwe vashandisi, mumusimboti, vanoda kuramba munyoreri (peyi yekupinda uye password) kugona kufamba netiweki. Iyo PPPoE ID Insertion basa ichabatsira mune iyi kesi futi.
IGMP
Iyo IGMP (Internet Group Management Protocol) yave iripo kwemakumi emakore. Kukurumbira kwayo kunonzwisisika uye kunonzwisisika nyore. Asi kune mapato maviri anobatanidzwa mukubatana kweIGMP: PC yemushandisi (kana chero imwe mudziyo, semuenzaniso, STB) uye IP router inoshandira imwe network segment. Maswichi haatore chikamu mukutsinhana uku neimwe nzira. Chokwadi, kutaura kwekupedzisira hakusi kwechokwadi zvachose. Kana muma network emazuvano ichi hachisi chokwadi zvachose. Shanduko dzinotsigira IGMP kukwirisa multicast traffic kutumira. Kuteerera kune traffic yevashandisi, iyo switch inoona IGMP Report mameseji mairi, nerubatsiro rwainotaridza madoko ekutumira multicast traffic. Sarudzo inotsanangurwa inonzi IGMP Snooping.
Tsigiro yeiyo IGMP protocol inogona kushandiswa kwete chete kukwirisa traffic sekudaro, asi zvakare kuona vanyoreri vanogona kupihwa imwe sevhisi, semuenzaniso, IPTV. Iwe unogona kuzadzisa chinangwa chaunoda kungave nemaoko kusefa ma paramita kana nekushandisa chokwadi.
Tsigiro ye multicast traffic paTP-Link switch inoitwa zviri nyore. Semuenzaniso, ese ma parameter anogona kusetwa kune yega yega virtual network zvakasiyana.
Kana akawanda ma subnet ane multicast traffic anogamuchira akabatana kune imwe router interface, saka iyo router inomanikidzwa kutumira akawanda makopi emapaketi kuburikidza neiyo interface (imwe yega yega yega network).
Muchiitiko ichi, unogona kukwidziridza maitiro ekutumira multicast traffic uchishandisa MVR tekinoroji - Multicast VLAN Registration.
Chinokosha chemhinduro ndechekuti imwe yetiweki inogadzirwa inobatanidza vese vanogamuchira. Nekudaro, iyi virtual network inoshandiswa chete kune multicast traffic. Iyi nzira inobvumira router kutumira kopi imwe chete ye multicast traffic kuburikidza neiyo interface.
DDM, OAM uye DLDP
DDM - Digital Diagnostic Monitoring. Munguva yekushanda kwe optical modules, zvinowanzodiwa kutarisa mamiriro emodule pachayo, pamwe chete neoptical channel iyo yakabatanidzwa. Basa reDDM richakubatsira kubata nebasa iri. Nerubatsiro rwayo, mainjiniya emagetsi anozokwanisa kutarisa tembiricha yemodule yega yega inotsigira iyi mashandiro, voltage yayo uye yazvino, pamwe nesimba reakatumirwa uye anogamuchirwa masaini masaini.
Kuisa zvikumbaridzo mazinga ezvakambotsanangurwa paramita zvinokutendera iwe kuti ugadzire chiitiko kana iwo akawira kunze kweiyo inogamuchirwa renji.
Kuseta madhigirii emhinduro yeDDM
Nomuzvarirwo, maneja anogona kuona kukosha kwazvino kweiyo yakatarwa paramita.
Iyo TP-Link T2600G-28SQ switch ine inoshanda mhepo yekutonhodza system. Uyezve, isu hatina kumbobvira tasangana nekupisa kweSFP modules mukuchinja kwedu nekuda kwekuwanda kwechiteshi. Nekudaro, kana, mukufungidzira, mukana wakadaro unobvumidzwa (semuenzaniso, nekuda kweimwe dambudziko mukati meSFP module), ipapo nerubatsiro rweDDM maneja anozoziviswa nekukurumidza nezvemamiriro angangoita njodzi. Njodzi pano, zviri pachena, haisi yekushandura pachayo, asi nokuda kwe diode / laser mukati meSFP, sezvo sezvo kutonhora kwayo kunowedzera, simba rechiratidzo che optical rinobudiswa rinogona kuderedza, izvo zvichaita kuti kuderera kwebhajheji ye optical.
Zvakakosha kucherechedza pano kuti TP-Link switch haina kukiyiwa kwevatengesi "basa," ndiko kuti, chero mamodule eSFP anoenderana anotsigirwa, izvo, zvechokwadi, zvichave zviri nyore kune network administrator.
OAM - Kushanda, Kutonga, uye Maintenance (IEEE 802.3ah). OAM ndeyechipiri-layer protocol yeOSI modhi yakagadzirirwa kutarisa uye kugadzirisa matambudziko eEthernet network. Uchishandisa iyi protocol, switch inogona kutarisa kushanda kweimwe yekubatanidza uye zvikanganiso, uye kugadzira yambiro kuitira kuti network maneja agone kubata network zvakanyanya.
Basic OAM setup
OAM Functional DetailsMidziyo miviri yakavakidzana neOAM-inogonesa nguva nenguva inochinjana mameseji nekutumira maOAMPDU, ayo anouya mumhando nhatu: Ruzivo, Chiitiko Chiziviso, uye Loopback Control. Uchishandisa ruzivo rweOAMPDUs, ma switch evavakidzani anotumirana ruzivo rwenhamba pamwe nedata rakatsanangurwa nemutungamiriri. Iyi mhando yemeseji inoshandiswawo kuchengetedza chinongedzo kuburikidza neOAM protocol. Chiitiko Chekuzivisa meseji anoshandiswa neiyo yekubatanidza yekutarisa basa kuzivisa imwe bato kuti kukundikana kwakaitika. Loopback Control meseji inoshandiswa kuona loop pamutsetse.
Pazasi isu takafunga kunyora iwo makuru maficha anopihwa neOAM protocol:
- kutarisisa nharaunda (kuona uye kuverenga kwemafuremu akatyoka),
- RFI - Remote Failure Chiratidzo (kutumira chiziviso chekutadza pachiteshi),
- Remote Loopback (kuyedzwa kwechiteshi kuyera kunonoka, kunonoka kuchinja (jitter), nhamba yemafuremu akarasika).
Imwe sarudzo iri kudiwa pane optical switch kugona kuona matambudziko pachiteshi chekutaurirana, zvichiita kuti chiteshi ive simplex, ndiko kuti, data inogona kutumirwa munzira imwe chete. Maswichi edu anoshandisa iyo DLDP - Device Link Detection Protocol kuona unidirectional link. Kuti zvive zvakanaka, zvakakosha kuziva kuti DLDP protocol inotsigirwa pane zvose optical uye copper interfaces, asi mumaonero edu, ichave yakakurumbira pakushandisa fiber optic mitsara.
Kana unidirectional link ichionekwa, shanduko inogona kungoerekana yavhara iyo inonetsa interface, izvo zvinozotungamira mukuvakwazve kwemuti we STP uye kushandiswa kwekuchengetedza nzira dzekukurukurirana.
Mune arsenal yedu kune SFP modules inogamuchira uye inotumira masaini pane imwe fiber. Ivo vanoshanda chete vari vaviri uye vanoshandisa masaini masaini pamawavelengths akasiyana ekutapurirana mukati mevaviri. Muenzaniso ndeye TL-SM321A uye TL-SM321B. Paunenge uchishandisa ma modules akadaro, kukanganisa kune imwe fiber kuchaita kuti kusashanda kwakakwana kweiyo yose optical channel. Nekudaro, kunyangwe pamatanho akadaro iyo DLDP protocol ichave iri kudiwa, sezvo, kunyangwe izvi zvikaitika zvakanyanya kashoma, chiteshi chinogona kuve neakasiyana maratidziro emhando dzakasiyana dzewavelengths. Dambudziko rinonyanya nderekuti kujeka kwechiteshi kunosiyana zvichienderana negwara rekuparadzira chiedza. Reflexogram ichabatsira kuona aya matambudziko, asi iyo inyaya yakasiyana zvachose.
LLDP
Mumakambani makuru emakambani kana evashandisi, matambudziko anomuka nguva nenguva nekusashanda kwemagwaro etiweki kana kusarurama mukugadzirira kwayo. Mutariri wetiweki anogona kutarisana nemamiriro ezvinhu apo pazvinenge zvakakodzera kuti uone kuti ndeupi midziyo yevashandisi yakanyatsobatanidzwa kune imwe switch interface. Iyo LLDP - Link Layer Discovery Protocol (IEEE 802.1AB) ichauya kuzonunura.
LLDP Operation Parameters
Maswichi edu anotsigira LLDP kwete chete kutsvaga ma switch evavakidzani kana mamwe maturusi etiweki, asiwo kuona kugona kwavo.
Yedu switch yemhangura vamwe vanogona kushandisa LLDP-MED kurerutsa maitiro ekubatanidza IP mafoni. Zvakare, uchishandisa iyi sarudzo, iyo PoE switch inogona kutaurirana magetsi paramita neiyo powered mudziyo. Takatotaura nezve izvi mune zvimwe zvakadzama mune imwe yedu .
SDM uye oversubscription
Anenge ese emazuva ano ma switch anogadzira mafuremu nemapaketi pasina kushandisa central processor. Kugadzirisa (kuverenga macheki, kushandisa mazita ekuwana uye kuita mamwe macheki ekuchengetedza, pamwe nekuita sarudzo dzekuchinja / nzira) kunoitwa uchishandisa machipisi akasarudzika, ayo anobvumira kumhanyisa kumhanya kwemushandisi traffic. Kuchinja kuri kukurukurwa kunobvumira kugadzirisa traffic pane yepakati kumhanya. Izvi zvinoreva kuti mashandiro emudziyo wacho akakwana kutumira data nekumhanya kwakanyanya pazviteshi zvese panguva imwe chete. Iyo T2600G-28SQ modhi ine 24 downlink ports (yakananga kune vashandisi), inoshanda nekumhanya kwe1 Gbit/s, pamwe ne 4 uplink ports (yakananga kune network core) yegumi Gbit/s. Panguva imwecheteyo, kushanda kwekuchinja kwebhasi-bhasi ndeye 10 Gbit / s, iyo inokwana kugadzirisa huwandu hwehuwandu hwehuwandu hunouya.
Mukurongeka, zvakakosha kuziva kuti kuita kweiyo switching matrix ndeye 95,2 miriyoni mapaketi pasekondi. Ndiko kuti, kana uchishandisa mashoma anokwanisika mafuremu ane hurefu hwemabhayiti makumi matanhatu nemana chete, kuita kwese kwechigadzirwa kuchave 64 Gbit/s. Nekudaro, iyo traffic profiles inenge isingaite kune telecom operator network.
Chii chinonzi oversubscriptionImwe nyaya yakakosha ireshiyo yekumhanya kwematanho ekukwira nekudzika (kupfuura kunyoresa). Pano, zviri pachena, zvinhu zvose zvinoenderana netopology. Kana maneja akashandisa ese mana 10 GE interfaces kuti abatanidze kunetiweki musimboti uye anosanganisa iwo achishandisa LAG (Link Aggregation Group) kana Port-Channel tekinoroji, ipapo iyo statistically yakawanikwa kumhanya yakananga musimboti ichave 40 Gbit/s, iyo ichave yakawanda. kupfuura zvakaringana kugutsa zvido zvevose vakanyoresa vanobatana. Zvakare, hazvifanirwe kuti ese mana uplinks abatanidze kune imwe yemuviri mudziyo. Iyo yekubatanidza inogona kuitwa kune stack yekuchinja, kana kumidziyo miviri yakasanganiswa kuita sumbu (uchishandisa vPC tekinoroji kana yakafanana). Muchiitiko ichi hapana oversubscription.
Unogona kushandisa ese mana uplinks panguva imwe chete kwete chete nekuvasanganisa uchishandisa LAG. Mhedzisiro yakafanana inogona kuwanikwa nekumisikidza zvakanaka MSTP, asi iyo inyaya yakasiyana zvachose.
Yechipiri inowanzoshandiswa L2 yekubatanidza nzira ndeye kushandisa maviri akazvimirira LAGs (imwe kune yega yega aggregation switch). Muchiitiko ichi, zvichida, imwe yezvibatanidza zvinongedzo ichavharwa neSTP protocol (kana uchishandisa STP kana RSTP). Kuwedzera kubhadhara kuchava 5:6.
Chinhu chisingawanzoitiki, asi chichiri chiitiko chinogona kuitika: iyo T2600G-28SQ yakabatana nematanho akazvimirira kune switch yekumusoro kana switch. Iyo STP/RSTP protocol inongosiya imwe chete iyi link mune isina kuvharwa. Kuwedzera kubhadhara kuchava 5:12.
Basa rine asterisk: kuverenga oversubscription yemamiriro anotsanangurwa muchikamu cheSTP, patakatarisa muenzaniso wetopology apo maswiti maviri ekupinda akabatana kune imwechete aggregation mudziyo uye akabatana.
Iwo machipisi anogoneka anogonesa kumhanya kwakakwira kwakadaro imari inodhura, saka tinoedza kukwirisa mashandisiro awo nekugovera zvakanaka zviwanikwa pakati pemabasa akasiyana. SDM - Switch Database Management ine basa rekugovera.
Kugovera kunoitwa uchishandisa iyo SDM mbiri. Parizvino pane matatu profiles aripo ekushandisa, akanyorwa pazasi.
- Default inopa mhinduro yakaringana yekushandisa MAC uye IP yekuwana zvinyorwa, pamwe neARP yekuona zvinyorwa.
- EnterpriseV4 inokutendera iwe kuti uwedzere zviwanikwa zviripo kuti zvishandiswe neMAC uye IP mazita ekuwana.
- EnterpriseV6 inogovera zvimwe zviwanikwa zvekushandisa neIPv6 kuwana zvinyorwa.
Iyo switch inofanirwa kutangwazve kuti ishandise iyo nyowani nyowani.
mhedziso
Zvinoenderana nechinzvimbo chekutanga, switch iyi inonyatsokodzera vafambisi venhare vanotarisana nebasa rekupa network yekupinda madaro marefu. Chishandiso ichi chinogona kushandiswa zvese padanho rekupinda, semuenzaniso, munharaunda dzekottage uye dzimba dzemadhorobha, uye kuunganidzwa kwezviteshi zvinouya kubva kumagetsi ekupinda ari muzvivakwa zvefurati; ndiko kuti, pese panodiwa kubatana kuzvinhu zviri kure. Paunenge uchishandisa optical communication channels, munyoreri akabatana anogona kuwanikwa ari chinhambwe chinosvika makiromita akati wandei.
Padivi remutengi, zvinongedzo zvinongedzo zvinogona kugumiswa pane madiki madiki ane optical interfaces kana pane midhiya inoshandura.
Nhamba huru yezvibvumirano zvinotsigirwa uye zvingasarudzwa zvinobvumira iyo T2600G-28SQ kuti ishandiswe munhare yeEthernet network ine chero topology uye chero seti yetekinoroji inoshandiswa uye masevhisi anopihwa. Switch inotungamirirwa kure uchishandisa web interface kana command line. Kana kugadziridzwa kwenzvimbo kuchidikanwa, unogona kushandisa iyo console port; iyo T2600G-28SQ modhi ine maviri acho: RJ-45 uye micro-USB. Sezvo nhunzi duku mumafuta, tinocherechedza kushayikwa kwerutsigiro rwekugadzirisa uye kechipiri magetsi. Ichokwadi, kazhinji kunze kwe data data yevanopa, kuvapo kwechipiri mutsara wemagetsi kuchave kushoma.
Zvakanakira zvayo zvinosanganisira mutengo wakaderera, nhamba huru yevanyoreri optical ports, kuvapo kwe10 GE optical uplinks, pamwe chete nemadoko mana akabatanidzwa uye traffic kumberi kune pakati kumhanya.
Source: www.habr.com