Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Kusati kwatanga kosi Network Engineer Takagadzirira shanduro yezvinyorwa zvinonakidza kwauri

Pane chinhu chimwe chikuru nezveDMVPN chandakawana nguva yapfuura: DMVPN Per-Tunnel QoSSezviri pachena, handisi ndega (segonzo rerabhoritari) anofunga kuti izvi zvakanaka. Pese pandinoriratidza kuvanhu, ndinoona maziso avo achipenya semagirobhu madiki anotanga kupenya mumisoro yavo, zvichiratidza pfungwa dzekuti vangashandise kupi.

Inguva yekusunungura geek yako!

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Ngatiedzei kuti Bazi_1 и Bazi_2 vari mune imwecheteyo DMVPN mugero neiyo DMVPN hub Foxtrot14Tinoda kushandisa mutemo weQoS kubva kuhub kutaura Bazi_2, asi kwete nokuda Bazi_1Sezvo vari muGRE mugero mumwechete, tinoita sei izvi?

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Chaizvoizvo zvatinofanira kuita ndezvekuti:

  • PaDMVPN hub:
    1. Gadzira akasiyana maQoS marongero aunoda kuti hubhu ipe seQoS marongero evatauri muchikamu chepasirese chekugadzirisa.
    2. Nyorera zvese marongero auri kuzo "kupa" kune spokes pane iyo DMVPN tunnel interface uchishandisa rairo. ip nhrp mepu boka
  • PaDMVPN yakataura, gadzirisa iyo DMVPN interface ine zita reboka rine mepu raungade kuisa kwariri.

PaDMVPN hub

Ngatitorei izvi zvakananga:

"1) Gadzira akasiyana maQoS marongero aunoda kuti hubhu ipe seQoS marongero kune vanotaurisa muchikamu chepasi rose chekugadzirisa."

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Saka, chaizvo zvaunogona kuona pamusoro ndezvokuti isu tinogadzirisa DMVPN hub yedu kuti ipe 5 yakasiyana QoS kune spokes.

  1. 1.5Mbps
  2. 2Mbps
  3. 5Mbps
  4. 10Mbps
  5. Unlimited

2) Nyorera zvese marongero auri kuda "kupa" kune spokes paDMVPN tunnel interface uchishandisa ip nhrp mepu yeboka rekuraira.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

PaDMVPN Spock

"Pakutaura kweDMVPN, gadzirisa iyo DMVPN interface ine zita reboka rine mepu raungade kuisa kwariri."

Saka ini ndichaenderera mberi Echo3 (Bazi_2) uye ndinoisa murayiro “ip nhrp group spoke-2Mbps” muSpock's tunnel interface.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Chii chichaitika zvino? echo3 inongoisa zita rekuti "spoke-2Mbps" muchikumbiro chekunyoresa cheNHRP. Voila! Zviri nyore kudaro. Neat, huh? Kana iwe uchida kuzorodza zvishoma pakunyoresa kweNHRP, tarisa Kunakidzwa muLab: Sniffer Kutsvaga DMVPN Tunnel KutangaIkoko iwe unowana izvo zvekutanga zveNHRP chikumbiro chekunyoresa.

Ngatione kuti izvi zvinotaridzika sei pane network uye paDMVPN hub.

Iwe unogona kuwana ikozvino faira pcap, zvatichakurukura pamwe chete

dmvpn_tunnel_startup_per_tunnel_QoS.pcap <- iri muDropbox yangu yeruzhinji uye ndinoronga kuichengeta ikoko kwemakore mashoma.

Kugadzirira?

Isu tichatarisa Frame 18 uye Frame 21 maererano neanotevera network uye IP kero. Isa iyi padhuze neiyo sniffer trace kuti iwe ugone kufananidza zvirinani IP kero.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Saka, yekutanga ndeye frame 18. NHRP chikumbiro chekunyoresa kubva Echo3 (Bazi_2) inotaridzika zvakanaka kusvika tasvika kuNHRP Vendor Private Extension.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Unoda kufadza geek mauri?
www.branah.com/ascii-converter

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Chii chinoitika mushure mekunge Frame 18 yapinda muDMVPN hub? Foxtrot14? Nokuti Echo3 (Bazi_2) Nekuda kwekuti iwe unoda kuti "spoke-2Mbps" ishandiswe hazvireve kuti yakagadziridzwa pahubhu. Naizvozvo, iwe uchaona furemu 21 zvakare semhinduro kuchikumbiro chekunyoresa ichisimbisa "yakataura-2Mbps" muchikamu chemutengesi.

Zvino chii?

Ngatienderere mberi Foxtrot14 uye ngationei zvaanofunga nezvemamiriro ezvinhu aya.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS

Hukuru! Mune imwechete mGRE mugero, isu tine QoS yakaiswa kune hub ye spok traffic kune bazi_2, asi kwete bazi_1.

*Cherechedza: Ichi chinyorwa chakabudiswa panzvimbo ino muna 2015. Yakapedzisira kugadziridzwa uye yakafomatidzwa muna Kukadzi 15, 2020.

Kunzwisisa mukuita: DMVPN uye Per-Tunnel QoS


Source: www.habr.com

Tenga inovimbika yekutambira kwemasaiti ane DDoS dziviriro, VPS VDS maseva 🔥 Tenga webhusaiti yakavimbika ine dziviriro yeDDoS, maseva eVPS VDS | ProHoster