{"id":91348,"date":"2020-08-12T07:42:24","date_gmt":"2020-08-12T05:42:24","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn"},"modified":"2020-08-12T07:42:24","modified_gmt":"2020-08-12T05:42:24","slug":"otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn","title":{"rendered":"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Q\u00eb nga gushti 2017, kur kompania Cisco bleu kompanin\u00eb Viptela, teknologjia kryesore e ofruar p\u00ebr organizimin e rrjeteve korporative t\u00eb shp\u00ebrndara u b\u00eb <b>Cisco SD-WAN<\/b>. Gjat\u00eb tre viteve t\u00eb kaluara, teknologjia SD-WAN ka kaluar n\u00ebp\u00ebr shum\u00eb ndryshime, si n\u00eb cil\u00ebsi ashtu edhe n\u00eb sasi. K\u00ebshtu, mund\u00ebsit\u00eb funksionale jan\u00eb zgjeruar ndjesh\u00ebm dhe ka pasur mb\u00ebshtetje p\u00ebr router-at klasik\u00eb t\u00eb serive <b>Cisco ISR 1000, ISR 4000, ASR 1000 dhe virtual CSR 1000v<\/b>. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, shum\u00eb klient\u00eb dhe partner\u00eb t\u00eb Cisco vazhdojn\u00eb t\u00eb pyesin - <i>cila \u00ebsht\u00eb dallimi midis Cisco SD-WAN dhe qasjeve t\u00eb njohura t\u00eb bazuara n\u00eb teknologji si <b>Cisco DMVPN<\/b> dhe <b>Cisco Performance Routing<\/b> dhe sa t\u00eb r\u00ebnd\u00ebsishme jan\u00eb k\u00ebto dallime?<\/i> <\/p>\n<p>K\u00ebtu menj\u00ebher\u00eb duhet t\u00eb theksohet se para shfaqjes s\u00eb SD-WAN n\u00eb portofolin e Cisco, DMVPN s\u00eb bashku me PfR p\u00ebrb\u00ebnin nj\u00eb pjes\u00eb ky\u00e7e n\u00eb arkitektur\u00ebn <b>Cisco IWAN (Intelligent WAN)<\/b>, e cila, nga ana tjet\u00ebr, p\u00ebrb\u00ebnte paraardh\u00ebsin e teknologjis\u00eb plot\u00ebsisht t\u00eb zhvilluar SD-WAN. Nd\u00ebrsa ka nj\u00eb ngjashm\u00ebri t\u00eb p\u00ebrgjithshme, si n\u00eb detyrat q\u00eb zgjidhen ashtu edhe n\u00eb m\u00ebnyrat e zgjidhjes s\u00eb tyre, IWAN nuk arriti asnj\u00ebher\u00eb nivelin e nevojsh\u00ebm t\u00eb automatizimit, fleksibilitetit dhe shkall\u00ebzueshm\u00ebris\u00eb p\u00ebr SD-WAN dhe me kalimin e koh\u00ebs, zhvillimi i IWAN u reduktua ndjesh\u00ebm. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, vet\u00eb teknologjit\u00eb p\u00ebrb\u00ebr\u00ebse t\u00eb IWAN nuk kan\u00eb zhdukur, dhe shum\u00eb klient\u00eb vazhdojn\u00eb t\u2019i p\u00ebrdorin ato me sukses, duke p\u00ebrfshir\u00eb n\u00eb pajisjet moderne. N\u00eb fund, nj\u00eb situat\u00eb interesante \u00ebsht\u00eb krijuar - e nj\u00ebjta pajisje Cisco lejon t\u00eb zgjidhet teknologjia m\u00eb e p\u00ebrshtatshme p\u00ebr nd\u00ebrtimin e WAN (klasike, DMVPN+PfR ose SD-WAN) n\u00eb p\u00ebrputhje me k\u00ebrkesat dhe pritshm\u00ebrit\u00eb e klient\u00ebve. <br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><br \/>\nKy artikull nuk ka si q\u00ebllim t\u00eb diskutoj\u00eb holl\u00ebsisht t\u00eb gjitha ve\u00e7orit\u00eb e teknologjive Cisco SD-WAN dhe DMVPN (se bashku ose pa Performance Routing) - p\u00ebr k\u00ebt\u00eb ka nj\u00eb sasi t\u00eb madhe dokumentesh dhe materialesh n\u00eb dispozicion. Detyra kryesore \u00ebsht\u00eb t\u00eb p\u00ebrpiqemi t\u00eb vler\u00ebsojm\u00eb dallimet ky\u00e7e t\u00eb k\u00ebtyre teknologjive. Megjithat\u00eb, para se t\u00eb kalojm\u00eb n\u00eb diskutimin e k\u00ebtyre dallimeve, le t\u00eb kujtojm\u00eb shkurtimisht se \u00e7far\u00eb jan\u00eb k\u00ebto teknologji.<\/p>\n<h2>\u00c7far\u00eb \u00ebsht\u00eb Cisco DMVPN dhe p\u00ebr \u00e7far\u00eb nevojitet?<\/h2>\n<p>\nCisco DMVPN zgjidh problemin e lidhjes dinamike (=shkall\u00ebzuese) t\u00eb rrjetit t\u00eb deg\u00ebs s\u00eb larg\u00ebt me rrjetin e zyr\u00ebs qendrore t\u00eb biznesit duke p\u00ebrdorur lloje t\u00eb ndryshme kanalesh komunikimi, p\u00ebrfshir\u00eb Internetin (=me enkriptimin e kanalit t\u00eb komunikimit). Teknikisht, kjo realizohet duke krijuar nj\u00eb rrjet t\u00eb virtualizuar t\u00eb llojit L3. <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/vpn\/\"   title=\"VPN\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"124\">VPN<\/a> n\u00eb modin pik\u00eb \u2013 shum\u00eb pik\u00eb (point-to-multipoint) me nj\u00eb topologji logjike t\u00eb tipit \"Yll\" (Hub-n-Spoke). P\u00ebr k\u00ebt\u00eb, DMVPN p\u00ebrdor nj\u00eb kombinim t\u00eb teknologjive t\u00eb m\u00ebposhtme:<\/p>\n<ul>\n<li>IP routing<\/li>\n<li>T\u00eb fundit GRE tunelesh (mGRE)<\/li>\n<li>Protokolli i Zgjidhjes s\u00eb Hapur t\u00eb N\u00ebndhesh\u00ebm (NHRP)<\/li>\n<li>Profillet Crypto IPSec<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/a44d5ad8ed5dadd7fc9721002d8fa134.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nCilat jan\u00eb p\u00ebrpar\u00ebsit\u00eb kryesore t\u00eb Cisco DMVPN n\u00eb krahasim me rrug\u00ebtimin klasik duke p\u00ebrdorur kanale MPLS VPN?<\/p>\n<ul>\n<li>P\u00ebr t\u00eb krijuar nj\u00eb rrjet nd\u00ebr-zyrash, \u00e7do kanal komunikimi mund t\u00eb p\u00ebrdoret \u2013 \u00e7do gj\u00eb q\u00eb \u00ebsht\u00eb n\u00eb gjendje t\u00eb siguroj\u00eb lidhshm\u00ebri IP midis deg\u00ebve, nd\u00ebrkoh\u00eb q\u00eb trafik do t\u00eb enkriptohet (atje ku \u00ebsht\u00eb e nevojshme) dhe do t\u00eb balancohet (atje ku \u00ebsht\u00eb e mundur).<\/li>\n<li>Automatikisht formohet nj\u00eb topologji plot\u00ebsisht e lidhur midis deg\u00ebve. N\u00eb k\u00ebt\u00eb rast, nd\u00ebrmjet deg\u00ebs qendrore dhe asaj t\u00eb larg\u00ebt \u2013 ka tunel\u00eb statik\u00eb, nd\u00ebrsa midis deg\u00ebve t\u00eb larg\u00ebta \u2013 tunel\u00eb dinamik\u00eb sipas k\u00ebrkes\u00ebs (kur ka trafik).<\/li>\n<li>N\u00eb routerat e zyr\u00ebs qendrore dhe t\u00eb deg\u00ebs s\u00eb larg\u00ebt ka nj\u00eb konfigurim t\u00eb nj\u00ebtrajtsh\u00ebm me p\u00ebrputhje deri te <a class=\"wpil_keyword_link\" href=\"https:\/\/prohoster.info\/sq\/lir\/ipv4\/\"   title=\"IP-adresat\" data-wpil-keyword-link=\"linked\"  data-wpil-monitor-id=\"820\">IP-adresat<\/a> interfesi. Fal\u00eb p\u00ebrdorimit t\u00eb mGRE, nuk ka nevoj\u00eb p\u00ebr konfigurim t\u00eb ve\u00e7ant\u00eb t\u00eb dhjet\u00ebra, qindra ose madje mij\u00ebra tunelesh. Si pasoj\u00eb, nj\u00eb shkall\u00ebzim t\u00eb denj\u00eb n\u00eb dizajn t\u00eb duhur.<\/li>\n<\/ul>\n<p><\/p>\n<h2>\u00c7far\u00eb \u00ebsht\u00eb Cisco Performance Routing dhe pse \u00ebsht\u00eb e nevojshme?<\/h2>\n<p>\nDuke p\u00ebrdorur DMVPN n\u00eb rrjetin nd\u00ebr-zyrash, mbetet nj\u00eb pyetje shum\u00eb e r\u00ebnd\u00ebsishme e pazgjidhur \u2013 si t\u00eb vler\u00ebsojm\u00eb dinamikisht gjendjen e secilit nga tunel\u00ebt DMVPN n\u00eb lidhje me k\u00ebrkesat kritike p\u00ebr trafikun ton\u00eb dhe p\u00ebrs\u00ebri, n\u00eb baz\u00eb t\u00eb k\u00ebsaj vler\u00ebsimi, t\u00eb marrim vendim dinamik p\u00ebr rimarshtrimin? T\u00eb gjith\u00eb din, se DMVPN n\u00eb k\u00ebt\u00eb aspekt ndoshta \u00ebsht\u00eb pak ndryshe nga rrug\u00ebtimi klasik \u2013 m\u00eb e mira q\u00eb mund t\u00eb b\u00ebjm\u00eb \u00ebsht\u00eb t\u00eb konfigurojm\u00eb mekanizmat QoS, t\u00eb cilat do t\u00eb lejojn\u00eb prioritizimin e trafikut n\u00eb drejtimin e daljes, por nuk jan\u00eb n\u00eb gjendje t\u00eb marrin parasysh gjendjen e t\u00eb gjith\u00eb rrug\u00ebs n\u00eb momentin e caktuar.<\/p>\n<p>\u00c7far\u00eb duhet t\u00eb b\u00ebni n\u00ebse kanali degradohet pjes\u00ebrisht, dhe jo plot\u00ebsisht \u2013 si ta zbulojm\u00eb dhe vler\u00ebsojm\u00eb at\u00eb? DMVPN vet\u00eb nuk \u00ebsht\u00eb n\u00eb gjendje ta b\u00ebj\u00eb k\u00ebt\u00eb. Duke marr\u00eb parasysh q\u00eb kanalet q\u00eb lidhin filialet mund t\u00eb kalojn\u00eb p\u00ebrmes operator\u00ebve t\u00eb ndrysh\u00ebm t\u00eb komunikimeve, duke p\u00ebrdorur teknologji t\u00eb ndryshme, kjo detyr\u00eb b\u00ebhet jasht\u00ebzakonisht sfiduese. K\u00ebtu vjen n\u00eb ndihm\u00eb teknologjia Cisco Performance Routing, e cila p\u00ebr at\u00eb koh\u00eb kishte kaluar disa faza zhvillimi.<\/p>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/be885ce87f36c143be1450c7e8587701.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nDetyra e Cisco Performance Routing (n\u00eb vijim PfR) \u00ebsht\u00eb t\u00eb mas\u00eb gjendjen e rrug\u00ebve (tunel\u00ebve) t\u00eb kalimit t\u00eb trafikut mbi baz\u00ebn e metrikave ky\u00e7e, t\u00eb r\u00ebnd\u00ebsishme p\u00ebr aplikacionet e rrjetit \u2013 <b>vonimi, variacioni i vonimit (jxheti) dhe humbjet e paketave (n\u00eb p\u00ebrqindje)<\/b>. Shtes\u00eb mund t\u00eb matet gjithashtu shfryt\u00ebzimi i band\u00ebs s\u00eb kapacitetit. K\u00ebto matje b\u00ebhen sa m\u00eb af\u00ebr koh\u00ebs reale (aq sa \u00ebsht\u00eb e mundur dhe e arsyeshme) dhe rezultati i k\u00ebtyre matjeve lejon routerin q\u00eb p\u00ebrdor PfR t\u00eb marr\u00eb vendime dinamike p\u00ebr nevoj\u00ebn p\u00ebr t\u00eb ndryshuar rrug\u00ebtimin e nj\u00eb lloji t\u00eb caktuar t\u00eb trafikut.<\/p>\n<p>Pra, detyra e kombinimit DMVPN\/PfR mund t\u00eb p\u00ebrshkruhet shkurtimisht si vijon:<\/p>\n<ul>\n<li>T\u00eb lejoj\u00eb klientin t\u00eb p\u00ebrdor\u00eb \u00e7do kanal komunikimi n\u00eb rrjetin WAN<\/li>\n<li>T\u00eb siguroj\u00eb cil\u00ebsin\u00eb maksimale t\u00eb mundshme p\u00ebr aplikacionet e r\u00ebnd\u00ebsishme n\u00eb k\u00ebto kanale<\/li>\n<\/ul>\n<p><\/p>\n<h2>\u00c7far\u00eb \u00ebsht\u00eb Cisco SD-WAN?<\/h2>\n<p>\nCisco SD-WAN \u00ebsht\u00eb nj\u00eb teknologji q\u00eb p\u00ebrdor qasjen SDN p\u00ebr t\u00eb krijuar dhe operuar rrjetin WAN t\u00eb organizat\u00ebs. Kjo n\u00ebnkupton ve\u00e7an\u00ebrisht p\u00ebrdorimin e ashtuquajturve kontrollor\u00eb (elemente softuer\u00ebsh), t\u00eb cil\u00ebt sigurojn\u00eb orkestrimin qendror dhe konfigurimin e automatizuar t\u00eb t\u00eb gjith\u00eb komponenteve t\u00eb zgjidhjes. Ndryshe nga SDN klasike (n\u00eb stilin Clean Slate), Cisco SD-WAN p\u00ebrdor menj\u00ebher\u00eb disa lloje kontrollor\u00ebsh, secili prej t\u00eb cil\u00ebve plot\u00ebson rolin e tij \u2013 kjo \u00ebsht\u00eb b\u00ebr\u00eb q\u00ebllimisht p\u00ebr t\u00eb siguruar nj\u00eb shkall\u00ebzim m\u00eb t\u00eb mir\u00eb dhe rezervim gjeografik.<\/p>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/555191e4b49b2b473bee72cdf118a328.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nN\u00eb rastin e SD-WAN, detyra e p\u00ebrdorimit t\u00eb \u00e7do lloji kanalesh dhe siguria e funksionimit t\u00eb aplikacioneve t\u00eb biznesit ruhet, por gjithashtu zgjerohen k\u00ebrkesat p\u00ebr automatizim, shkall\u00ebzim, siguri dhe fleksibilitet t\u00eb k\u00ebtij rrjeti.<\/p>\n<h2>Diskutimi i dallimeve<\/h2>\n<p>\nN\u00ebse tani fillojm\u00eb t\u00eb analizojm\u00eb dallimet e k\u00ebtyre teknologjive, ato do t\u00eb bien n\u00eb nj\u00eb nga kategorit\u00eb:<\/p>\n<ul>\n<li>Dallimet arkitektonike \u2013 si shp\u00ebrndahen funksionet n\u00ebp\u00ebr komponent\u00ebt e ndrysh\u00ebm t\u00eb zgjidhjes, si organizohet interaksioni i k\u00ebtyre komponent\u00ebve dhe si ndikon kjo n\u00eb mund\u00ebsit\u00eb dhe fleksibilitetin e teknologjis\u00eb?<\/li>\n<li>Funksionet - \u00e7far\u00eb mund t\u00eb ofroj\u00eb nj\u00eb teknologji q\u00eb tjetra nuk mundet? A \u00ebsht\u00eb v\u00ebrtet kaq e r\u00ebnd\u00ebsishme?<\/li>\n<\/ul>\n<p><\/p>\n<h3>Cilat jan\u00eb dallimet arkitektonike dhe a jan\u00eb ato kaq t\u00eb r\u00ebnd\u00ebsishme?<\/h3>\n<p>\n\u00c7do teknologji t\u00eb p\u00ebrmendur ka shum\u00eb 'pjes\u00eb l\u00ebviz\u00ebse', t\u00eb cilat kan\u00eb jo vet\u00ebm role t\u00eb ndryshme, por edhe principe t\u00eb ndryshme t\u00eb interaksionit me nj\u00ebra-tjetr\u00ebn. Sa m\u00eb mir\u00eb t\u00eb mendohen k\u00ebto principe, aq m\u00eb drejtp\u00ebrdrejt\u00eb varet shkall\u00ebzueshm\u00ebria, q\u00ebndrueshm\u00ebria ndaj defekteve dhe efikasiteti i p\u00ebrgjithsh\u00ebm i zgjidhjes. <\/p>\n<p>Le t\u00eb shqyrtojm\u00eb aspektet e ndryshme t\u00eb arkitektur\u00ebs m\u00eb n\u00eb detaje:<\/p>\n<p><b>Data-plane<\/b> - pjesa e zgjidhjes q\u00eb merret me transferimin e trafikut t\u00eb p\u00ebrdoruesit midis burimit dhe marr\u00ebsit. N\u00eb DMVPN dhe SD-WAN implementohet n\u00eb p\u00ebrgjith\u00ebsi n\u00eb m\u00ebnyr\u00eb t\u00eb ngjashme n\u00eb routerat e bazuar n\u00eb tunelin Multipoint GRE. Diferenca \u00ebsht\u00eb se \u00e7far\u00eb e formon grupin e nevojsh\u00ebm t\u00eb parametrave t\u00eb k\u00ebtyre tunel\u00ebve:<\/p>\n<ul>\n<li>n\u00eb <b>DMVPN\/PfR<\/b> - kjo \u00ebsht\u00eb nj\u00eb hierarki dy-nivelesh me nj\u00eb topologji t\u00eb tipit 'Ylli' ose Hub-n-Spoke. Konfigurimi statik i Hub-it dhe lidhja statike e Spoke me Hub-in jan\u00eb t\u00eb detyrueshme, si dhe interaksioni p\u00ebrmes protokollit NHRP p\u00ebr formimin e lidhjes data-plane. Si pasoj\u00eb, <b>ndryshimet n\u00eb Hub jan\u00eb<\/b>tejet t\u00eb v\u00ebshtira, si p\u00ebr shembull ndryshimi\/lidhja e kanaleve t\u00eb reja WAN ose ndryshimi i parametrave ekzistues.<\/li>\n<li>n\u00eb <b>SD-WAN<\/b> - kjo \u00ebsht\u00eb nj\u00eb model plot\u00ebsisht dinamik i zbulimit t\u00eb parametrave t\u00eb tunel\u00ebve t\u00eb vendosur, mb\u00ebshtetur n\u00eb control-plane (protokolli OMP) dhe orchestration-plane (interaksioni me kontrolluesin vBond p\u00ebr detyrat e zbulimit t\u00eb kontrolluesve dhe kalimi NAT). N\u00eb k\u00ebt\u00eb rast, topologjit\u00eb e imponuara mund t\u00eb jen\u00eb t\u00eb \u00e7far\u00ebdoshme, p\u00ebrfshir\u00eb ato hierarkike. Brenda topologjis\u00eb s\u00eb vendosur t\u00eb tunel\u00ebve, \u00ebsht\u00eb e mundur t\u00eb konfigurohet fleksib\u00ebl topologjia logjike n\u00eb \u00e7do VPN t\u00eb ve\u00e7ant\u00eb (VRF).<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/21c65d83989db5975ca87c90fed3b476.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Control-plane<\/b> - funksionet e ndarjes, filtrimit dhe modifikimit t\u00eb informacionit mbi rrug\u00ebt dhe informacionit tjet\u00ebr midis komponent\u00ebve t\u00eb zgjidhjes. <\/p>\n<ul>\n<li>n\u00eb <b>DMVPN\/PfR<\/b> - realizohet vet\u00ebm midis routerave Hub dhe Spoke. Ndarja e drejtp\u00ebrdrejt\u00eb e informacionit t\u00eb rrug\u00ebve midis Spoke-ve \u00ebsht\u00eb e pamundur. Si pasoj\u00eb, <b>pa nj\u00eb Hub aktiv, nuk \u00ebsht\u00eb e mundur funksionimi i control-plane dhe data-plane.<\/b>, e cila i vendos k\u00ebrkesa shtes\u00eb mbi Hub p\u00ebr disponueshm\u00ebri t\u00eb lart\u00eb, t\u00eb cilat nuk mund t\u00eb p\u00ebrmbushen gjithmon\u00eb.<\/li>\n<li>n\u00eb <b>SD-WAN<\/b> \u2013 komunikimi i planit t\u00eb kontrollit nuk p\u00ebrcillet kurr\u00eb drejtp\u00ebrdrejt midis ruter\u00ebve \u2013 nd\u00ebrlidhja ndodh mbi baz\u00ebn e protokollit OMP dhe patjet\u00ebr realizohet p\u00ebrmes nj\u00eb lloji t\u00eb ve\u00e7ant\u00eb kontrolluesi vSmart, i cili siguron mund\u00ebsin\u00eb e balancimit, rezervimit geo dhe menaxhimit t\u00eb centralizuar t\u00eb ngarkes\u00ebs s\u00eb sinjalizimit. Nj\u00eb ve\u00e7ori tjet\u00ebr e protokollit OMP \u00ebsht\u00eb q\u00ebndrueshm\u00ebria e tij e lart\u00eb ndaj humbjeve dhe pavar\u00ebsia nga shpejt\u00ebsia e kanalit t\u00eb komunikimit me kontrolluesit (brenda kufijve t\u00eb arsyesh\u00ebm, natyrisht). Kjo gjithashtu lejon vendosjen e kontrolluesve SD-WAN n\u00eb re publike ose private me qasje p\u00ebrmes Internetit.<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/fd77c23b005705a9f8857d23a430ca7d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Policy-plane<\/b> \u2013 pjesa e zgjidhjes q\u00eb p\u00ebrgjigjet p\u00ebr p\u00ebrcaktimin, shp\u00ebrndarjen dhe zbatimin e politikave t\u00eb menaxhimit t\u00eb trafikut n\u00eb nj\u00eb rrjet t\u00eb shp\u00ebrndar\u00eb.<\/p>\n<ul>\n<li><b>DMVPN <\/b>\u2013 n\u00eb thelb \u00ebsht\u00eb e kufizuar nga politikat e cil\u00ebsis\u00eb s\u00eb sh\u00ebrbimit (QoS), t\u00eb cilat konfigurohen individualisht n\u00eb \u00e7do ruter p\u00ebrmes CLI ose shablloneve Prime Infrastructure.<\/li>\n<li><b>DMVPN\/PfR<\/b> \u2013 politikat PfR formohen n\u00eb ruterin e centralizuar Master Controller (MC) p\u00ebrmes CLI dhe pastaj shp\u00ebrndahen automatikisht n\u00eb MC-t\u00eb filial. Nd\u00ebrkoh\u00eb, p\u00ebrdoren t\u00eb nj\u00ebjtat rrug\u00eb p\u00ebr shp\u00ebrndarjen e politikave, si p\u00ebr planin e t\u00eb dh\u00ebnave. Nuk ka mund\u00ebsi p\u00ebr t\u00eb ndar\u00eb shk\u00ebmbimin e politikave, informacionin ruter dhe t\u00eb dh\u00ebnat e p\u00ebrdoruesve. Shp\u00ebrndarja e politikave k\u00ebrkon domosdoshm\u00ebrisht q\u00eb t\u00eb ket\u00eb IP-lidhje midis Hub dhe Spoke. Funksioni MC mund t\u00eb kombinohet me ruterin DMVPN sipas nevoj\u00ebs. P\u00ebrdorimi i shablloneve Prime Infrastructure p\u00ebr formimin e centralizuar t\u00eb politikave \u00ebsht\u00eb i mundur (por jo i detyruesh\u00ebm). Nj\u00eb ve\u00e7ori e r\u00ebnd\u00ebsishme \u00ebsht\u00eb q\u00eb politika formohet globalisht nj\u00eblloj p\u00ebr t\u00ebr\u00eb rrjetin \u2013 <b>politikat individuale p\u00ebr segmente t\u00eb ve\u00e7anta nuk mb\u00ebshteten<\/b>.<\/li>\n<li><b>SD-WAN<\/b> Politikat e menaxhimit t\u00eb trafikut dhe cil\u00ebsis\u00eb s\u00eb sh\u00ebrbimit p\u00ebrcaktohen n\u00eb m\u00ebnyr\u00eb qendrore p\u00ebrmes nd\u00ebrfaqes grafike Cisco vManage, e cila \u00ebsht\u00eb e aksesueshme edhe p\u00ebrmes internetit (sipaska nevoj\u00ebs). Ato shp\u00ebrndahen n\u00ebp\u00ebr kanale sinjalizuese drejtp\u00ebrdrejt ose n\u00ebp\u00ebrmjet kontroler\u00ebve vSmart (varet nga lloji i politik\u00ebs). Nuk varen nga lidhshm\u00ebria e data-plane midis route-rave, pasi p\u00ebrdorin t\u00eb gjitha rrug\u00ebt e disponueshme p\u00ebr transmetimin e trafikut midis kontrolerit dhe router-it.\n<p>P\u00ebr segmente t\u00eb ndryshme t\u00eb rrjetit \u00ebsht\u00eb e mundur formimi fleksib\u00ebl i politikave t\u00eb ndryshme \u2013 fusha e aplikimit t\u00eb politik\u00ebs p\u00ebrcaktohet nga nj\u00eb num\u00ebr i madh identifikator\u00ebsh unik\u00eb, t\u00eb parashikuar n\u00eb zgjidhje \u2013 numri i deg\u00ebs, lloji i aplikacionit, drejtimi i l\u00ebvizjes s\u00eb trafikut, etj.\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/ae897e83bf8a8be876af767f847d5cde.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Orkestra<\/b> mekanizmat q\u00eb lejojn\u00eb komponent\u00ebt t\u00eb zbulojn\u00eb nj\u00ebri-tjetrin n\u00eb m\u00ebnyr\u00eb dinamike, t\u00eb konfigurojn\u00eb dhe t\u00eb koordinojn\u00eb nd\u00ebrveprimin e m\u00ebtejsh\u00ebm.<\/p>\n<ul>\n<li>n\u00eb <b>DMVPN\/PfR<\/b> Zbulimi i nd\u00ebrsjell\u00eb i router-eve bazohet n\u00eb konfigurimin statik t\u00eb pajisjeve Hub dhe konfigurimin p\u00ebrkat\u00ebs t\u00eb pajisjeve Spoke. Zbulimi dinamik ndodh vet\u00ebm p\u00ebr Spoke, i cili raporton parametra t\u00eb lidhjes ndaj pajisjes Hub, e cila gjithashtu \u00ebsht\u00eb e p\u00ebrfshir\u00eb paraprakisht n\u00eb konfigurimin e Spoke. <b>Pa lidhshm\u00ebrin\u00eb IP t\u00eb Spoke me t\u00eb pakt\u00ebn nj\u00eb Hub, nuk \u00ebsht\u00eb e mundur t\u00eb formohet as data-plane, as control-plane.<\/b><\/li>\n<li>n\u00eb <b>SD-WAN<\/b> Orkestra e komponent\u00ebve t\u00eb zgjidhjes ndodh duke p\u00ebrdorur kontrollin vBond, me t\u00eb cilin \u00e7do komponent (router-e dhe kontroler\u00eb vManage\/vSmart) duhet t\u00eb ket\u00eb vendosur paraprakisht lidhshm\u00ebrin\u00eb IP.\n<p>Fillimisht, komponent\u00ebt nuk din\u00eb p\u00ebr parametrat e lidhjes s\u00eb nj\u00ebri-tjetrit \u2013 p\u00ebr k\u00ebt\u00eb iu nevojitet nj\u00eb nd\u00ebrmjet\u00ebs-orKestrator vBond. Principi i p\u00ebrgjithsh\u00ebm \u00ebsht\u00eb si m\u00eb posht\u00eb \u2013 \u00e7do komponent n\u00eb faz\u00ebn fillestare t\u00eb zbulon (autmatikisht ose statikisht) vet\u00ebm parametrat e lidhjes me vBond, m\u00eb pas vBond i njofton router-it p\u00ebr kontroler\u00ebt vManage dhe vSmart (t\u00eb zbuluar m\u00eb par\u00eb), \u00e7ka e b\u00ebn t\u00eb mundshme vendosjen automatike t\u00eb t\u00eb gjitha lidhjeve sinjalizuese t\u00eb nevojshme. <\/p>\n<p>Hapi tjet\u00ebr, \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 \u043d\u043e\u0432 \u0443\u0437\u043d\u0430\u0432\u0430 \u043e \u0434\u0440\u0443\u0433\u0438\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c \u0432 \u0441\u0435\u0442\u044c\u064a \u0447\u0435\u0440\u0435\u0437 OMP-\u043e\u0431\u043c\u0435\u043d \u0441 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u043e\u043c vSmart. \u0422\u0430\u043a\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440, \u0431\u0435\u0437 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438 \u043e \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0438\u043c\u0430 \u0441\u0435\u0442\u044c\u0438, \u0441\u043f\u043e\u0441\u043e\u0431\u043d\u044b \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0441\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u0438 \u0438 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0438\u0442\u044c\u0441\u044f \u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u043b\u0435\u0440\u0430\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u0438 \u0438 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u0438\u0442\u044c \u0441\u0432\u044f\u0437\u043d\u043e\u0441\u0442\u044c \u0441 \u043e\u0441\u0442\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u043c\u0438. \u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0439 \u0432\u0441\u0435\u0445 \u043a\u043e\u043c\u043f\u043e\u043d\u0435\u043d\u0442 \u043d\u0430\u0448 \u0438\u0437\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e \u043d\u0435\u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b \u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0437\u043c\u0435\u043d\u0438\u0442\u044c\u0441\u044f \u0432 \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0435 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438.\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/19cae5336892c6fa9140b09c124123a7.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Menaxhimi i planeve<\/b> \u2013 pjesa e zgjidhjes q\u00eb ofron menaxhim dhe monitorim t\u00eb centralizuar.<\/p>\n<ul>\n<li><b>DMVPN\/PfR<\/b> \u2013 nuk parashikohet nj\u00eb zgjidhje t\u00eb specializuar p\u00ebr menaxhimin e planeve. P\u00ebr automatizimin dhe monitorimin baz\u00eb, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrdoren produkte si Cisco Prime Infrastructure. \u00c7do \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 ka mund\u00ebsi menaxhimi p\u00ebrmes komand\u00ebs CLI. <b>Integrimet me sisteme t\u00eb jashtme p\u00ebrmes API-s\u00eb nuk parashikohen.<\/b><\/li>\n<li><b>SD-WAN<\/b> \u2013 t\u00eb gjitha nd\u00ebrveprimet dhe monitorimet e zakonshme realizohen n\u00eb m\u00ebnyr\u00eb t\u00eb centralizuar p\u00ebrmes nd\u00ebrfaqes grafike t\u00eb kontrolluesit vManage. T\u00eb gjitha mund\u00ebsit\u00eb e zgjidhjes, pa p\u00ebrjashtim, jan\u00eb t\u00eb disponueshme p\u00ebr konfigurim p\u00ebrmes vManage, si dhe p\u00ebrmes nj\u00eb biblioteke t\u00eb plot\u00eb t\u00eb dokumentuar t\u00eb nd\u00ebrfaqes programore REST API.\n<p>T\u00eb gjitha konfigurimet e rrjetit SD-WAN n\u00eb vManage p\u00ebrfshijn\u00eb dy struktura kryesore \u2013 formimin e template-ve t\u00eb pajisjeve (Device Template) dhe formimin e politik\u00ebs q\u00eb p\u00ebrcakton logjik\u00ebn e funksionimit t\u00eb rrjetit dhe p\u00ebrpunimit t\u00eb trafikut. Duke qen\u00eb k\u00ebshtu, vManage, duke transmetuar politik\u00ebn e formuar nga administrator, zgjedh automatikisht se cilat ndryshime dhe n\u00eb cilat pajisje\/kontrollues individuale duhet t\u00eb b\u00ebhen, duke rritur ndjesh\u00ebm efikasitetin dhe shkall\u00ebzueshm\u00ebrin\u00eb e zgjidhjes.<\/p>\n<p>P\u00ebrmes nd\u00ebrfaqes vManage \u00ebsht\u00eb e disponueshme jo vet\u00ebm konfigurimi i zgjidhjes Cisco SD-WAN, por edhe monitorimi i plot\u00eb i gjendjes s\u00eb t\u00eb gjitha komponenteve t\u00eb zgjidhjes deri n\u00eb gjendjen aktuale t\u00eb metrikeve t\u00eb tunelave individuale dhe statistikave t\u00eb p\u00ebrdorimit t\u00eb aplikacioneve t\u00eb ndryshme bazuar n\u00eb analiz\u00ebn DPI.<\/p>\n<p>Megjith\u00ebse nd\u00ebrveprimi \u00ebsht\u00eb i centralizuar, t\u00eb gjith\u00eb komponent\u00ebt (kontrolluesit dhe router\u00ebt) kan\u00eb gjithashtu nj\u00eb komand\u00eb t\u00eb plot\u00eb CLI, e cila \u00ebsht\u00eb e nevojshme n\u00eb faz\u00ebn e implementimit ose n\u00eb rast t\u00eb nj\u00eb situate emergjente p\u00ebr diagnostikimin lokal. N\u00eb modin normal (n\u00eb prani t\u00eb nj\u00eb kanali sinjalizimi midis komponent\u00ebve), komanda \u00ebsht\u00eb e disponueshme vet\u00ebm p\u00ebr diagnostikim n\u00eb router\u00eb dhe nuk \u00ebsht\u00eb e aksesueshme p\u00ebr ndryshime lokale, gj\u00eb q\u00eb garanton sigurin\u00eb lokale dhe burimin e vet\u00ebm t\u00eb ndryshimeve n\u00eb nj\u00eb rrjet t\u00eb till\u00eb \u2013 vManage.<\/li>\n<\/ul>\n<p>\n<b>Siguria e integruar<\/b> \u2013 k\u00ebtu flitet jo vet\u00ebm p\u00ebr mbrojtjen e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve gjat\u00eb transferimit p\u00ebrmes kanaleve t\u00eb hapura, por edhe p\u00ebr sigurin\u00eb e p\u00ebrgjithshme t\u00eb rrjetit WAN bazuar n\u00eb teknologjin\u00eb e zgjedhur.<\/p>\n<ul>\n<li>n\u00eb <b>DMVPN\/PfR<\/b> Parashikohet mund\u00ebsia e enkriptimit t\u00eb t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve dhe protokolleve t\u00eb sinjalizimit. Kur p\u00ebrdoren modele t\u00eb ve\u00e7anta router\u00ebsh, jan\u00eb gjithashtu t\u00eb disponueshme funksione t\u00eb firewall-it me inspektimin e trafikut, IPS\/IDS. Ekziston mund\u00ebsia e segmentimit t\u00eb rrjeteve deg\u00ebsore duke p\u00ebrdorur VRF. Ka mund\u00ebsi autentikimi (n\u00eb nj\u00eb faktor) p\u00ebr protokollet e kontrollit.\n<p>Me gjith\u00eb k\u00ebt\u00eb, routeri i larg\u00ebt konsiderohet si nj\u00eb element i besuesh\u00ebm i rrjetit \u2013 dmth. nuk supozohen dhe nuk merren parasysh rastet e kompromitimit fizik t\u00eb pajisjeve t\u00eb ve\u00e7anta dhe mund\u00ebsia e aksesit t\u00eb paautorizuar n\u00eb to, nuk ka autentikim me dy faktor\u00eb t\u00eb komponent\u00ebve t\u00eb zgjidhjes, q\u00eb n\u00eb rastin e nj\u00eb rrjeti gjeografikisht t\u00eb shp\u00ebrndar\u00eb <b>mund t\u00eb sjell\u00eb rreziqe t\u00eb m\u00ebdha shtes\u00eb.<\/b> <\/li>\n<li>n\u00eb <b>SD-WAN<\/b> Si nj\u00eb analogji me DMVPN, parashikohet mund\u00ebsia e enkriptimit t\u00eb t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve, por me funksione t\u00eb fuqishme t\u00eb siguris\u00eb s\u00eb rrjetit dhe segmentimit L3\/VRF (MSE, IPS\/IDS, filtrimi i URL-ve, filtrimi i DNS, AMP\/TG, SASE, TLS\/SSL proxy etj.). N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, shk\u00ebmbimi i \u00e7el\u00ebsave t\u00eb enkriptimit b\u00ebhet m\u00eb efikas p\u00ebrmes kontrolluesve vSmart (e jo direkt), p\u00ebrmes kanaleve t\u00eb paracaktuara t\u00eb sinjalizimit, t\u00eb mbrojtura me enkriptimin DTLS\/TLS t\u00eb bazuar n\u00eb certifikatat e siguris\u00eb. Kjo nga ana e saj garanton sigurin\u00eb e k\u00ebtij shk\u00ebmbimi dhe siguron nj\u00eb shkall\u00ebzueshm\u00ebri m\u00eb t\u00eb mir\u00eb t\u00eb zgjidhjes deri n\u00eb dhjet\u00ebra mij\u00ebra pajisje n\u00eb nj\u00eb rrjet.\n<p>T\u00eb gjitha lidhjet sinjalizuese (kontroller-kontroller, kontroller router) gjithashtu jan\u00eb t\u00eb mbrojtura mbi baz\u00ebn e DTLS\/TLS. Routerat jan\u00eb t\u00eb pajisur me certifikata sigurie gjat\u00eb prodhimit me mund\u00ebsi p\u00ebr z\u00ebvend\u00ebsim\/zhvillim. Autentikimi me dy faktor\u00eb arrihet p\u00ebrmes p\u00ebrmbushjes s\u00eb detyrueshme dhe nj\u00ebkohshme t\u00eb dy kushteve p\u00ebr funksionimin e routerit\/kontrollerit n\u00eb rrjetin SD-WAN:<\/p>\n<ul>\n<li>Certifikat\u00eb sigurie e vlefshme<\/li>\n<li>Shqyrtimi dhe kuptimi i qart\u00eb nga administratori i \u00e7do komponente n\u00eb list\u00ebn e bardh\u00eb t\u00eb pajisjeve t\u00eb lejuara.<\/li>\n<\/ul>\n<p>\n<\/li>\n<\/ul>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/13191eb92f25094112471a0ff3855cac.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h2>Dallimet funksionale midis SD-WAN dhe DMVPN\/PfR<\/h2>\n<p>\nDuke kaluar n\u00eb diskutimin e dallimeve funksionale, \u00ebsht\u00eb e r\u00ebnd\u00ebsishme t\u00eb theksohet se shum\u00eb prej tyre jan\u00eb vazhdim i dallimeve arkitektonike \u2014 nuk \u00ebsht\u00eb sekret se gjat\u00eb formimit t\u00eb arkitektur\u00ebs s\u00eb zgjidhjes, zhvilluesit t\u00ebrheqin nga ato mund\u00ebsi q\u00eb d\u00ebshirojn\u00eb t\u00eb arrijn\u00eb n\u00eb fund. Le t\u00eb shqyrtojm\u00eb dallimet m\u00eb t\u00eb r\u00ebnd\u00ebsishme midis dy teknologjive.<\/p>\n<h3>AppQ (Cil\u00ebsia e Aplikacionit) \u2013 funksionet e sigurimit t\u00eb cil\u00ebsis\u00eb s\u00eb transmetimit t\u00eb trafikut t\u00eb aplikacioneve t\u00eb biznesit<\/h3>\n<p>\nFunksionet kryesore t\u00eb teknologjive t\u00eb diskutuar jan\u00eb t\u00eb orientuara p\u00ebr t\u00eb p\u00ebrmir\u00ebsuar sa m\u00eb shum\u00eb t\u00eb jet\u00eb e mundur p\u00ebrvoj\u00ebn e p\u00ebrdoruesit gjat\u00eb p\u00ebrdorimit t\u00eb aplikacioneve kritike p\u00ebr biznes n\u00eb nj\u00eb rrjet t\u00eb shp\u00ebrndar\u00eb. Kjo \u00ebsht\u00eb ve\u00e7an\u00ebrisht e r\u00ebnd\u00ebsishme n\u00eb kushte kur nj\u00eb pjes\u00eb e infrastruktuar\u00ebs nuk kontrollohet nga IT ose madje nuk garanton nj\u00eb transmetim t\u00eb suksessh\u00ebm t\u00eb t\u00eb dh\u00ebnave.<\/p>\n<p>DMVPN vet\u00eb nuk ofron mekanizma t\u00eb till\u00eb. M\u00eb e mira q\u00eb mund t\u00eb b\u00ebhet n\u00eb nj\u00eb rrjet klasike DMVPN \u00ebsht\u00eb t\u00eb klasifikosh trafik outbound sipas aplikacioneve dhe t\u00eb prioritizosh at\u00eb gjat\u00eb transmetimit n\u00eb drejtim t\u00eb kanaleve WAN. Zgjedhja e tunelit DMVPN n\u00eb k\u00ebt\u00eb rast \u00ebsht\u00eb e bazuar vet\u00ebm n\u00eb disponibilitetin e tij dhe rezultatin e pun\u00ebs s\u00eb protokolleve t\u00eb ruterimit. N\u00eb k\u00ebt\u00eb pik\u00eb, nuk merret parasysh gjendja e plot\u00eb e rrug\u00ebs\/tunelit dhe mund\u00ebsia e degradimit t\u00eb pjessh\u00ebm t\u00eb tij nga pik\u00ebpamja e metrikave ky\u00e7e, t\u00eb r\u00ebnd\u00ebsishme p\u00ebr aplikacionet rrjet\u00ebrore \u2013 vonesa, variacioni i vones\u00ebs (jitter) dhe humbjet (%). P\u00ebr k\u00ebt\u00eb arsye, krahasimi direkt i DMVPN klasike me SD-WAN n\u00eb aspektin e zgjidhjes s\u00eb detyrave AppQ humbet \u00e7do kuptim \u2013 DMVPN nuk mund ta zgjidh\u00eb k\u00ebt\u00eb problem. Me shtimin n\u00eb k\u00ebt\u00eb kontekst t\u00eb teknologjis\u00eb Cisco Performance Routing (PfR), situata ndryshon dhe krahasimi me Cisco SD-WAN b\u00ebhet m\u00eb i arsyesh\u00ebm. <\/p>\n<p>Para se kalojm\u00eb n\u00eb diskutimin e dallimeve, leht\u00eb p\u00ebr t\u00eb p\u00ebrmbledhur se ku teknologjit\u00eb jan\u00eb t\u00eb ngjashme. Pra, t\u00eb dyja teknologjit\u00eb:<\/p>\n<ul>\n<li>kan\u00eb n\u00eb dispozicion nj\u00eb mekaniz\u00ebm q\u00eb lejon vler\u00ebsimin dinamik t\u00eb gjendjes s\u00eb \u00e7do tunele t\u00eb instaluar n\u00eb raport me metrikat e caktuara - s\u00eb paku, vonesa, variacioni i vones\u00ebs dhe humbja e paketeve (%).<\/li>\n<li>p\u00ebrdorin nj\u00eb grup t\u00eb caktuar mjetesh p\u00ebr formimin, shp\u00ebrndarjen dhe zbatimin e rregullave (politikave) t\u00eb menaxhimit t\u00eb trafikut duke marr\u00eb parasysh rezultatin e matjes s\u00eb gjendjes s\u00eb metrikave ky\u00e7 t\u00eb tuneleve.<\/li>\n<li>klasifikojn\u00eb trafikun e aplikacioneve n\u00eb nivelet L3-L4 (DSCP) t\u00eb modelit OSI ose sipas n\u00ebnshkrimeve L7 t\u00eb aplikacioneve n\u00eb p\u00ebrputhje me mekanizmat DPI t\u00eb brendsh\u00ebm n\u00eb router.<\/li>\n<li>lejojn\u00eb p\u00ebr aplikacione t\u00eb r\u00ebnd\u00ebsishme p\u00ebrcaktimin e vlerave prag t\u00eb metrikave, rregullave t\u00eb transferimit t\u00eb trafikut n\u00eb m\u00ebnyr\u00eb t\u00eb paracaktuar, rregullave t\u00eb ri-rutimit t\u00eb trafikut n\u00eb rast se tejkalohen vlerat prag.<\/li>\n<li>kur inkapsulojn\u00eb trafik n\u00eb GRE\/IPSec p\u00ebrdorin nj\u00eb mekaniz\u00ebm t\u00eb vendosur n\u00eb industri p\u00ebr t\u00eb transferuar etiketimin e brendsh\u00ebm DSCP n\u00eb titullin e paket\u00ebs GRE\/IPSec, q\u00eb lejon sinkronizimin e politikave QoS t\u00eb organizat\u00ebs dhe operatorit t\u00eb komunikimit (n\u00ebse ka SLA p\u00ebrkat\u00ebse).<\/li>\n<\/ul>\n<p>\n<img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/df997d02f9a2832a22d6f71e67b2b962.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Si ndryshojn\u00eb mekanizmat e vler\u00ebsimit t\u00eb metrikave t\u00eb kalimit SD-WAN dhe DMVPN\/PfR?<\/h3>\n<p>\n<b>DMVPN\/PfR <\/b><\/p>\n<ul>\n<li>P\u00ebr vler\u00ebsimin e metrikave standarde t\u00eb gjendjes s\u00eb tunelit p\u00ebrdoren si sensore aktive ashtu edhe pasive (Probes). Aktive - bazuar n\u00eb trafikun e p\u00ebrdoruesit, pasive emulojn\u00eb nj\u00eb trafik t\u00eb till\u00eb (n\u00eb munges\u00eb t\u00eb tij). <\/li>\n<li>Rregullimi i holl\u00eb i timer\u00ebve dhe kushteve t\u00eb identifikimit t\u00eb degradimit \u00ebsht\u00eb i munguar - algoritmi \u00ebsht\u00eb i fiksuar.<\/li>\n<li>P\u00ebr m\u00eb tep\u00ebr, \u00ebsht\u00eb e mundur t\u00eb matet gjer\u00ebsia e brezit t\u00eb p\u00ebrdorur n\u00eb drejtimin e daljes. Kjo e b\u00ebn DMVPN\/PfR m\u00eb fleksib\u00ebl n\u00eb menaxhimin e trafikut.<\/li>\n<li>N\u00eb k\u00ebt\u00eb rast, disa mekanizma PfR, n\u00eb rast se metrikat tejkalohen, mb\u00ebshteten n\u00eb kthim t\u00eb sinjalizimit n\u00eb form\u00ebn e mesazheve speciale TCA (Threshold Crossing Alert), t\u00eb cilat duhet t\u00eb vijn\u00eb nga marr\u00ebsi i trafikut drejt burimit, q\u00eb nj\u00ebkoh\u00ebsisht n\u00ebnkupton se gjendjet e kanaleve t\u00eb matur duhet t\u00eb jen\u00eb t\u00eb pakt\u00ebn t\u00eb mjaftueshme p\u00ebr t\u00eb transmetuar k\u00ebto mesazhe TCA. Q\u00eb n\u00eb shumic\u00ebn e rasteve nuk \u00ebsht\u00eb nj\u00eb problem, por natyrisht, nuk mund t\u00eb garantoh\u00ebt. <\/li>\n<\/ul>\n<p>\n<b>SD-WAN <\/b><\/p>\n<ul>\n<li>P\u00ebr vler\u00ebsimin e vazhduesh\u00ebm t\u00eb metrikeve standard t\u00eb gjendjes s\u00eb tunelit p\u00ebrdoret protokolli BFD n\u00eb modin echo. N\u00eb k\u00ebt\u00eb rast, nuk k\u00ebrkohet nj\u00eb reagim i posa\u00e7\u00ebm n\u00eb form\u00ebn e mesazheve TCA ose t\u00eb ngjashme \u2013 respektohet izolimi i domen\u00ebve t\u00eb d\u00ebshtimit. Gjithashtu, nuk k\u00ebrkohet prania e trafikut t\u00eb p\u00ebrdoruesit p\u00ebr vler\u00ebsimin e gjendjes s\u00eb tunelit.<\/li>\n<li>Ekziston mund\u00ebsia p\u00ebr t\u00eb b\u00ebr\u00eb nj\u00eb konfigurim t\u00eb holl\u00eb t\u00eb timer\u00ebve BFD p\u00ebr t\u00eb rregulluar shpejt\u00ebsin\u00eb e aktivizimit dhe ndjeshm\u00ebrin\u00eb e algoritmit ndaj degradimeve t\u00eb kanaleve t\u00eb komunikimit nga disa sekonda n\u00eb minuta.\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/cd7fe1fa4f23a9d0695874bc5c6fa985.jpg\" style=\"display:block;margin: 0 auto;\" \/>\n<\/li>\n<li>N\u00eb momentin e shkruarjes s\u00eb k\u00ebtij artikulli, n\u00eb \u00e7do tunel \u00ebsht\u00eb parashikuar vet\u00ebm nj\u00eb sesion BFD. Kjo potencialisht krijon nj\u00eb granularitet m\u00eb t\u00eb ul\u00ebt n\u00eb analiz\u00ebn e gjendjes s\u00eb tunelit. N\u00eb t\u00eb v\u00ebrtet\u00eb, kjo mund t\u00eb b\u00ebhet nj\u00eb kufizim vet\u00ebm n\u00eb raste t\u00eb p\u00ebrdorimit t\u00eb nj\u00eb lidhjeje WAN mbi nj\u00eb VPN MPLS L2\/L3 me nj\u00eb SLA QoS t\u00eb miratuar \u2013 n\u00ebse markimi DSCP i trafikut BFD (pas enkapsulimit n\u00eb IPSec\/GRE) p\u00ebrputhet me radh\u00ebn me p\u00ebrprioritet t\u00eb lart\u00eb n\u00eb rrjetin e operatorit t\u00eb komunikimit, at\u00ebher\u00eb kjo mund t\u00eb ndikoj\u00eb n\u00eb sakt\u00ebsin\u00eb dhe shpejt\u00ebsin\u00eb e identifikimit t\u00eb degradimeve p\u00ebr trafikun me p\u00ebrprioritet t\u00eb ul\u00ebt. Megjithat\u00eb, ekziston mund\u00ebsia p\u00ebr t\u00eb ndryshuar markimin e BFD-n\u00eb sipas paracaktimeve p\u00ebr t\u00eb zvog\u00ebluar rrezikun e ndodhjes s\u00eb situatave t\u00eb tilla. N\u00eb versionet e ardhshme t\u00eb softuerit Cisco SD-WAN pritet q\u00eb t\u00eb ket\u00eb mund\u00ebsi m\u00eb t\u00eb holl\u00ebsishme p\u00ebr konfigurimin e BFD, si dhe mund\u00ebsin\u00eb p\u00ebr t\u00eb nisur disa sesione BFD n\u00eb kuad\u00ebr t\u00eb nj\u00eb tuneli me vlera t\u00eb ndryshme DSCP (p\u00ebr aplikacione t\u00eb ndryshme).<\/li>\n<li>BFD gjithashtu lejon vler\u00ebsimin e madh\u00ebsis\u00eb maksimale t\u00eb paket\u00ebs, e cila mund t\u00eb d\u00ebrgohet p\u00ebrmes nj\u00eb tuneli t\u00eb caktuar pa fraksionim. Kjo lejon SD-WAN t\u00eb konfiguroj\u00eb dinamikisht parametra t\u00eb till\u00eb si MTU dhe Rregullimin e TCP MSS, p\u00ebr t\u00eb shfryt\u00ebzuar maksimalisht gjer\u00ebsin\u00eb e band\u00ebs s\u00eb disponueshme n\u00eb \u00e7do kanal.<\/li>\n<li>N\u00eb SD-WAN gjithashtu \u00ebsht\u00eb e disponueshme mund\u00ebsia e sinkronizimit t\u00eb QoS me operator\u00ebt e komunikimit jo vet\u00ebm mbi baz\u00ebn e fush\u00ebs L3 DSCP, por edhe mbi baz\u00ebn e vlerave L2 CoS, t\u00eb cilat mund t\u00eb krijohen automatikisht n\u00eb rrjetin e deg\u00ebve nga pajisje t\u00eb specializuara \u2014 p\u00ebr shembull, telefonat IP.<\/li>\n<\/ul>\n<p><\/p>\n<h3>Si dallohen mund\u00ebsit\u00eb, m\u00ebnyrat e p\u00ebrcaktimit dhe zbatimit t\u00eb politikave AppQ?<\/h3>\n<p><\/p>\n<h4>Politikat DMVPN\/PfR:<\/h4>\n<p><\/p>\n<ul>\n<li>P\u00ebrcaktohen n\u00eb routerin(-\u00ebt) e deg\u00ebs qendrore (QF) p\u00ebrmes komand\u00ebs CLI ose CLI-sabloneve t\u00eb konfigurimeve. Formimi i sabloneve CLI k\u00ebrkon p\u00ebrgatitje dhe njohuri t\u00eb sintaks\u00ebs s\u00eb politikave.\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/5869bd7ff365cb4c810580d4b68392d1.jpg\" style=\"display:block;margin: 0 auto;\" \/>\n<\/li>\n<li>P\u00ebrcaktohen globalisht <b>pa mund\u00ebsi personalizimi\/ndryshimi p\u00ebr k\u00ebrkesat e segmenteve t\u00eb ndryshme t\u00eb rrjetit.<\/b><\/li>\n<li>Formimi interaktiv i politikave n\u00eb nd\u00ebrfaqen grafike nuk jan\u00eb t\u00eb parashikuara.<\/li>\n<li>Ndjekja e ndryshimeve, trash\u00ebgimia, krijimi i versioneve t\u00eb shumta t\u00eb politikave p\u00ebr kalim t\u00eb shpejt\u00eb nuk jan\u00eb t\u00eb parashikuara.<\/li>\n<li>Shp\u00ebrndahen automatikisht n\u00eb routerat e deg\u00ebve t\u00eb larg\u00ebta. N\u00eb k\u00ebt\u00eb rast, p\u00ebrdoren t\u00eb nj\u00ebjtat kanale komunikimi si p\u00ebr shp\u00ebrndarjen e t\u00eb dh\u00ebnave t\u00eb p\u00ebrdoruesve. N\u00eb rast se nuk ka kanale komunikimi mes qendr\u00ebs dhe deg\u00ebs s\u00eb larg\u00ebt, shp\u00ebrndarja\/ndryshimi i politikave nuk \u00ebsht\u00eb e mundur.<\/li>\n<li>Aplikohen n\u00eb \u00e7do router dhe, kur \u00ebsht\u00eb e nevojshme, modifikojn\u00eb rezultatin e protokolleve standarde t\u00eb rrug\u00ebzimit, duke pasur prioritet m\u00eb t\u00eb lart\u00eb. <\/li>\n<li>P\u00ebr rastet kur t\u00eb gjith\u00eb kanalet WAN t\u00eb deg\u00ebs p\u00ebrjetojn\u00eb humbje t\u00eb konsiderueshme t\u00eb trafikut, <b>mekanizmat e kompensimit nuk jan\u00eb t\u00eb parashikuara<\/b>.<\/li>\n<\/ul>\n<p><\/p>\n<h4>Politikat SD-WAN:<\/h4>\n<p><\/p>\n<ul>\n<li>P\u00ebrcaktohen n\u00eb nd\u00ebrfaqen grafike vManage p\u00ebrmes nj\u00eb ndihm\u00ebs interaktiv p\u00ebr shabllonat.<\/li>\n<li>Mb\u00ebshtesin krijimin e politikave t\u00eb shumta, kopjimin, trash\u00ebgimin\u00eb dhe kalimin midis politikave n\u00eb koh\u00eb reale.<\/li>\n<li>Mb\u00ebshtesin personalizimin e politikave p\u00ebr segmente t\u00eb ndryshme (dega) t\u00eb rrjetit<\/li>\n<li>Shp\u00ebrndahen, duke p\u00ebrdorur \u00e7do kanal sinjalizimi t\u00eb disponuesh\u00ebm midis kontrolluesit dhe routerit dhe\/ose vSmart - nuk varen direkt nga lidhja data-plane midis routerave. Megjithat\u00eb, k\u00ebrkohet natyrisht lidhshm\u00ebria IP midis vet\u00eb routerit dhe kontrolluesve.\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/9ed48b430fd39ec69af4c9d16efa3d32.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li>P\u00ebr rastet kur t\u00eb gjith\u00eb kanalet e disponueshme t\u00eb deg\u00ebs p\u00ebrjetojn\u00eb humbje t\u00eb konsiderueshme t\u00eb t\u00eb dh\u00ebnave q\u00eb tejkalojn\u00eb pragjet e pranueshme p\u00ebr aplikacionet kritike, \u00ebsht\u00eb e mundur t\u00eb p\u00ebrdoren mekanizma shtes\u00eb q\u00eb rrisin besueshm\u00ebrin\u00eb e transferimit:\n<ul>\n<li><b>FEC (Korrigjimi i Gabimeve t\u00eb Avancuara)<\/b> - p\u00ebrdor nj\u00eb algorit\u00ebm t\u00eb ve\u00e7ant\u00eb kodimi t\u00eb tep\u00ebrt. N\u00eb momentin e transmetimit t\u00eb trafikut kritik p\u00ebrmes kanaleve me nj\u00eb p\u00ebrqindje t\u00eb r\u00ebnd\u00ebsishme humbjesh, FEC mund t\u00eb aktivizohet automatikisht dhe lejon, kur \u00ebsht\u00eb e nevojshme, rikuperimin e pjes\u00ebs s\u00eb humbur t\u00eb t\u00eb dh\u00ebnave. Kjo rrit n\u00eb m\u00ebnyr\u00eb t\u00eb vog\u00ebl band\u00ebn e p\u00ebrdorur, por rrit n\u00eb m\u00ebnyr\u00eb t\u00eb konsiderueshme besueshm\u00ebrin\u00eb.\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/9b2deecf42b334b682c293ca92a52562.jpg\" style=\"display:block;margin: 0 auto;\" \/><\/li>\n<li><b>Dublikimi i rrjedhave t\u00eb t\u00eb dh\u00ebnave<\/b> S\u00eb bashku me politik\u00ebn FEC, mund t\u00eb parashikohet gjithashtu dyfishimi automatik i trafikut t\u00eb aplikacioneve t\u00eb zgjedhura n\u00eb rastin e nivelit edhe m\u00eb t\u00eb lart\u00eb humbjesh, t\u00eb cilat nuk mund t\u00eb kompensohen me an\u00eb t\u00eb FEC. N\u00eb k\u00ebt\u00eb rast, t\u00eb dh\u00ebnat e zgjedhura do t\u00eb transmetohen p\u00ebrmes t\u00eb gjith\u00eb tunel\u00ebve n\u00eb drejtim t\u00eb filiales pranues me pastrimin e dyfisht\u00eb (heqjen e kopjeve t\u00eb tep\u00ebrta t\u00eb pacjeve). Mekanizmi rrit ndjesh\u00ebm shfryt\u00ebzimin e kanaleve, por gjithashtu rrit ndjesh\u00ebm besueshm\u00ebrin\u00eb e transmetimit.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p><\/p>\n<h3>Aft\u00ebsit\u00eb e Cisco SD-WAN, pa analoge t\u00eb drejtp\u00ebrdrejta n\u00eb DMVPN\/PfR<\/h3>\n<p>\nArchitektura e zgjidhjes Cisco SD-WAN n\u00eb disa raste lejon marrjen e mund\u00ebsive, realizimi i t\u00eb cilave brenda DMVPN\/PfR \u00ebsht\u00eb ose jasht\u00ebzakonisht i v\u00ebshtir\u00eb, ose i pap\u00ebrshtatsh\u00ebm p\u00ebr shkak t\u00eb pun\u00ebs s\u00eb nevojshme, ose krejt\u00ebsisht i pamundur. Le t\u00eb shqyrtojm\u00eb m\u00eb interesante nga ato:<\/p>\n<h4>Inxhinieria e trafikut (TE)<\/h4>\n<p>\nTE p\u00ebrfshin mekanizma, t\u00eb cil\u00ebt lejojn\u00eb devijimin e trafikut nga rruga standarde, e formuar nga protokollet e routingut. TE shpesh p\u00ebrdoret p\u00ebr t\u00eb siguruar disponueshm\u00ebri t\u00eb lart\u00eb t\u00eb sh\u00ebrbimeve rrjet, p\u00ebr shkak t\u00eb aft\u00ebsis\u00eb p\u00ebr t\u00eb kaluar shpejt dhe\/apo paraprakisht trafikun e r\u00ebnd\u00ebsish\u00ebm n\u00eb nj\u00eb rrug\u00eb alternative (q\u00eb nuk nd\u00ebrthuret), me q\u00ebllim q\u00eb t\u00eb sigurohet nj\u00eb cil\u00ebsi m\u00eb e mir\u00eb e sh\u00ebrbimit ose nj\u00eb shpejt\u00ebsi m\u00eb e shpejt\u00eb e rikuperimit n\u00eb rast d\u00ebshtimi n\u00eb rrug\u00ebn kryesore. <\/p>\n<p>V\u00ebshtir\u00ebsia e realizimit t\u00eb TE p\u00ebrfshin nevoj\u00ebn p\u00ebr t\u00eb llogaritur dhe rezervuar paraprakisht (validuar) nj\u00eb rrug\u00eb alternative. N\u00eb rrjetet MPLS t\u00eb operator\u00ebve t\u00eb komunikimit, kjo detyr\u00eb zgjidhet duke p\u00ebrdorur teknologji t\u00eb tilla si MPLS Traffic-Engineering me zgjerime p\u00ebr protokollet IGP dhe protokollin RSVP. Gjithashtu, p\u00ebr t\u00eb fundit, teknologjia Segment Routing po fiton gjithnj\u00eb e m\u00eb shum\u00eb popullaritet, e cila \u00ebsht\u00eb m\u00eb e optimizuar p\u00ebr konfigurim dhe orkestrim t\u00eb centralizuar. N\u00eb rrjetet klasike WAN, k\u00ebto teknologji, zakonisht, nuk jan\u00eb t\u00eb pranishme ose jan\u00eb reduktuar n\u00eb p\u00ebrdorimin e mekanizmave hop-by-hop si Policy-Based Routing (PBR), t\u00eb cil\u00ebt mund t\u00eb devijojn\u00eb trafik, por e realizojn\u00eb k\u00ebt\u00eb n\u00eb \u00e7do router ve\u00e7mas - pa pasur parasysh gjendjen e p\u00ebrgjithshme t\u00eb rrjetit apo rezultatin PBR n\u00eb hapat e m\u00ebparsh\u00ebm ose t\u00eb m\u00ebvonsh\u00ebm. Rezultati i aplikimit t\u00eb k\u00ebtyre varianteve t\u00eb TE nuk \u00ebsht\u00eb premtues - MPLS TE, p\u00ebr shkak t\u00eb kompleksitetit n\u00eb konfigurim dhe funksionim, p\u00ebrdoret zakonisht vet\u00ebm n\u00eb pjes\u00ebn m\u00eb kritike t\u00eb rrjetit (n\u00eb b\u00ebrtham\u00eb), nd\u00ebrsa PBR p\u00ebrdoret n\u00eb router t\u00eb ve\u00e7ant\u00eb pa mund\u00ebsi p\u00ebr t\u00eb formuar nj\u00eb politik\u00eb t\u00eb unifikuar PBR n\u00eb t\u00eb gjith\u00eb rrjetin. Kjo \u00ebsht\u00eb e qart\u00eb edhe p\u00ebr rrjetet mbi baz\u00ebn e DMVPN.<\/p>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/85e0bc4dc068f4e5db4fec330c7ed78d.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nSD-WAN ofron n\u00eb k\u00ebt\u00eb aspekt nj\u00eb zgjidhje shum\u00eb m\u00eb elegante, e cila jo vet\u00ebm q\u00eb konfigurorohet leht\u00ebsisht, por gjithashtu shkall\u00ebzohet shum\u00eb m\u00eb mir\u00eb. Kjo \u00ebsht\u00eb rezultat i arkitekturave t\u00eb p\u00ebrdorura p\u00ebr control-plane dhe policy-plane. Realizimi i policy-plane n\u00eb SD-WAN lejon p\u00ebrcaktimin central t\u00eb politik\u00ebs TE - cili trafik na intereson? p\u00ebr cilat VPN? p\u00ebrmes cilave nodosh\/kanale \u00ebsht\u00eb e nevojshme apo p\u00ebrkundrazi e ndaluar t\u00eb formohet nj\u00eb rrug\u00eb alternative? Nga ana tjet\u00ebr, centralizimi i menaxhimit t\u00eb control-plane mbi baz\u00ebn e kontroler\u00ebve vSmart lejon modifikimin e rezultateve t\u00eb rrug\u00ebs, pa nevoj\u00ebn p\u00ebr konfigurimin e pajisjeve t\u00eb ve\u00e7anta - routerat tashm\u00eb shohin vet\u00ebm rezultatin e logjik\u00ebs q\u00eb \u00ebsht\u00eb formuar n\u00eb nd\u00ebrfaqen e vManage dhe \u00ebsht\u00eb transmetuar p\u00ebr aplikim n\u00eb vSmart.<\/p>\n<h4>Service-chaining (Zinxhir\u00ebt e Sh\u00ebrbimeve) <\/h4>\n<p>\nFormimi i zinxhir\u00ebve t\u00eb sh\u00ebrbimeve \u00ebsht\u00eb nj\u00eb detyr\u00eb edhe m\u00eb e v\u00ebshtir\u00eb n\u00eb rrug\u00ebtin\u00eb klasike sesa mekanizmi i p\u00ebrshkruar i Menaxhimit t\u00eb Trafikut. N\u00eb k\u00ebt\u00eb rast, \u00ebsht\u00eb e nevojshme jo vet\u00ebm t\u00eb formohet nj\u00eb itinerar i ve\u00e7ant\u00eb p\u00ebr nj\u00eb aplikacion t\u00eb caktuar rrjetesh, por gjithashtu t\u00eb sigurohet mund\u00ebsia e daljes s\u00eb trafikut nga rrjeti n\u00eb pika t\u00eb caktuara (apo n\u00eb t\u00eb gjitha) t\u00eb rrjetit SD-WAN p\u00ebr p\u00ebrpunim nga nj\u00eb aplikacion ose sh\u00ebrbim t\u00eb ve\u00e7ant\u00eb (MCSE, Balancimi, Keshimi, Inspektimi i Trafikut etj.). N\u00eb k\u00ebt\u00eb drejtim, \u00ebsht\u00eb e nevojshme t\u00eb ket\u00eb mund\u00ebsi p\u00ebr t\u00eb kontrolluar gjendjen e k\u00ebtyre sh\u00ebrbimeve t\u00eb jashtme, p\u00ebr t\u00eb shmangur situatat e black-holing, dhe gjithashtu jan\u00eb t\u00eb nevojshme mekanizma q\u00eb lejojn\u00eb vendosjen e k\u00ebtyre sh\u00ebrbimeve t\u00eb nj\u00ebjta n\u00eb lokacione t\u00eb ndryshme gjeografike me mund\u00ebsin\u00eb q\u00eb rrjeti t\u00eb zgjidh\u00eb automatikisht nodin m\u00eb optimal t\u00eb sh\u00ebrbimeve p\u00ebr p\u00ebrpunimin e trafikut nga \u00e7do filiale. N\u00eb rastin e Cisco SD-WAN, kjo arrihet mjaft leht\u00eb duke krijuar nj\u00eb politik\u00eb p\u00ebrqendrore p\u00ebrkat\u00ebse, e cila do t\u00eb 'bashkoj\u00eb' t\u00eb gjitha aspektet e zinxhirit t\u00eb sh\u00ebrbimeve n\u00eb nj\u00eb t\u00ebr\u00ebsi dhe do t\u00eb ndryshoj\u00eb automatikisht logjik\u00ebn e data-plane dhe control-plane atje ku \u00ebsht\u00eb e nevojshme.<\/p>\n<p><img decoding=\"async\" alt=\"A do t\u00eb pres\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN?\" src=\"\/wp-content\/uploads\/2020\/08\/84bd6eba2de33a90baeb77697b844eec.jpg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAft\u00ebsia p\u00ebr t\u00eb formuar p\u00ebrpunimin gjeo-shp\u00ebrndar\u00ebs t\u00eb trafikut p\u00ebr lloje t\u00eb caktuara aplikacionesh n\u00eb nj\u00eb renditje t\u00eb caktuar n\u00eb pajisje t\u00eb specializuara (por q\u00eb nuk kan\u00eb lidhje me vet\u00eb rrjetin SD-WAN) - kjo ndoshta \u00ebsht\u00eb demonstrimi m\u00eb ilustrues i avantazheve t\u00eb Cisco SD-WAN mbi teknologjit\u00eb klasike dhe madje disa zgjidhje alternative SD-WAN t\u00eb prodhuesve t\u00eb tjer\u00eb.<\/p>\n<h2>\u00c7far\u00eb n\u00eb p\u00ebrfundim?<\/h2>\n<p>\nKjo \u00ebsht\u00eb evidente se DMVPN (n\u00eb m\u00ebnyr\u00eb t\u00eb p\u00ebrbashk\u00ebt ose pa Performance Routing) dhe Cisco SD-WAN <b>p\u00ebrfundimisht zgjidhin detyra shum\u00eb t\u00eb ngjashme<\/b> n\u00eb lidhje me rrjetin e shp\u00ebrndar\u00eb WAN t\u00eb organizat\u00ebs. N\u00eb k\u00ebt\u00eb kontekst, dallimet arkitekturore dhe funksionale t\u00eb teknologjis\u00eb Cisco SD-WAN e \u00e7ojn\u00eb procesin e zgjidhjes s\u00eb k\u00ebtyre detyrave <b>n\u00eb nj\u00eb nivel tjet\u00ebr cil\u00ebsor<\/b>. Duke p\u00ebrmbledhur, mund t\u00eb theksohen k\u00ebto dallime t\u00eb r\u00ebnd\u00ebsishme midis teknologjive SD-WAN dhe DMVPN\/PfR:<\/p>\n<ul>\n<li>DMVPN\/PfR n\u00eb p\u00ebrgjith\u00ebsi p\u00ebrdorin teknologji t\u00eb provuar me koh\u00ebn p\u00ebr nd\u00ebrtimin e rrjeteve VPN t\u00eb shtrir\u00eb dhe n\u00eb pjes\u00ebn e data-plane jan\u00eb t\u00eb ngjashme me teknologjin\u00eb m\u00eb moderne SD-WAN, nd\u00ebrkoh\u00eb q\u00eb ka disa kufizime si\u00e7 jan\u00eb konfigurimi statik i detyruesh\u00ebm i ruter\u00ebve dhe zgjedhja e topologjive e kufizuar n\u00eb Hub-n-Spoke. Nga ana tjet\u00ebr, DMVPN\/PfR ka disa funksionalitete q\u00eb p\u00ebr momentin nuk jan\u00eb t\u00eb disponueshme n\u00eb kuad\u00ebr t\u00eb SD-WAN (b\u00ebhet fjal\u00eb p\u00ebr per-application BFD).<\/li>\n<li>N\u00eb kuad\u00ebr t\u00eb teknologjis\u00eb control-plane ndryshojn\u00eb n\u00eb m\u00ebnyr\u00eb thelb\u00ebsore. Duke marr\u00eb parasysh p\u00ebrpunimin e centralizuar t\u00eb protokolleve t\u00eb sinjalit, SD-WAN lejon, p\u00ebr shembull, t\u00eb ngushtohen ndjesh\u00ebm domenet e d\u00ebshtimit dhe t\u00eb 'shk\u00ebputet' procesi i transmetimit t\u00eb trafikut t\u00eb p\u00ebrdoruesit nga nd\u00ebrveprimi i sinjalit - mosdisponueshm\u00ebria temporale e kontrolleve nuk ndikon n\u00eb mund\u00ebsin\u00eb e transmetimit t\u00eb trafikut t\u00eb p\u00ebrdoruesit. N\u00eb t\u00eb nj\u00ebjt\u00ebn koh\u00eb, mosdisponueshm\u00ebria temporale e ndonj\u00eb filiali (p\u00ebrfshir\u00eb at\u00eb qendror) nuk ndikon n\u00eb mund\u00ebsin\u00eb e filial\u00ebve t\u00eb tjer\u00eb p\u00ebr t\u00eb bashk\u00ebvepruar me nj\u00ebri-tjetrin dhe me kontrollet.<\/li>\n<li>Arkitektura e formimit dhe zbatimit t\u00eb politikave t\u00eb menaxhimit t\u00eb trafikut n\u00eb rastin e SD-WAN gjithashtu e tejkalon at\u00eb n\u00eb DMVPN\/PfR - \u00ebsht\u00eb realizuar shum\u00eb m\u00eb mir\u00eb rezervimi geo, nuk ka lidhje me Hub-in, ka m\u00eb shum\u00eb mund\u00ebsi p\u00ebr p\u00ebrshtatjen e politikave, lista e skenar\u00ebve t\u00eb zbatuar p\u00ebr menaxhimin e trafikut gjithashtu \u00ebsht\u00eb shum\u00eb m\u00eb e gjer\u00eb.<\/li>\n<li>Procesi i orkestrimit t\u00eb zgjidhjes gjithashtu ndryshon ndjesh\u00ebm. DMVPN supozon pranin\u00eb e parametrave t\u00eb njohur paraprakisht, t\u00eb cil\u00ebt duhet t\u00eb pasqyrohen ndonj\u00ebher\u00eb n\u00eb konfigurim, gj\u00eb q\u00eb kufizon pak fleksibilitetin e zgjidhjes dhe mund\u00ebsin\u00eb p\u00ebr ndryshime dinamike. Nga ana tjet\u00ebr, SD-WAN bazohet n\u00eb parimin se n\u00eb momentin fillestar t\u00eb lidhjes, ruteri 'nuk di asgj\u00eb' p\u00ebr kontrollet e tij, por di 'k\u00eb mund t\u00eb pyes\u00eb' - kjo \u00ebsht\u00eb e mjaftueshme jo vet\u00ebm p\u00ebr t\u00eb vendosur automatikisht nj\u00eb lidhje me kontrollet, por edhe p\u00ebr t\u00eb formuar automatikisht nj\u00eb topologji data-plane t\u00eb plot\u00eb, e cila mund t\u00eb rregullohet\/ndryshohet me fleksibilitet p\u00ebrmes politikave.<\/li>\n<li>N\u00eb aspektin e menaxhimit t\u00eb centralizuar, automatizimit dhe monitorimit, SD-WAN pritet t\u00eb tejkaloj\u00eb mund\u00ebsit\u00eb e DMVPN\/PfR, t\u00eb cilat jan\u00eb rezultat i zhvillimit t\u00eb teknologjive klasike dhe mb\u00ebshteten n\u00eb mas\u00eb t\u00eb madhe n\u00eb komand\u00ebn e linj\u00ebs CLI dhe p\u00ebrdorimin e sistemeve NMS t\u00eb bazuara n\u00eb \u0448\u0430\u0431\u043b\u043e\u043d\u0438. <\/li>\n<li>N\u00eb SD-WAN krahasuar me DMVPN, k\u00ebrkesat p\u00ebr sigurin\u00eb kan\u00eb arritur nj\u00eb nivel cil\u00ebsor tjet\u00ebr. Parimet kryesore \u2013 besimi zero, shkall\u00ebzueshm\u00ebria dhe autentikimi me dy faktor\u00eb.<\/li>\n<\/ul>\n<p>\nNga k\u00ebto p\u00ebrfundime t\u00eb thjeshta mund t\u00eb krijohet nj\u00eb p\u00ebrshtypje e gabuar q\u00eb krijimi i nj\u00eb rrjeti mbi baz\u00ebn e DMVPN\/PfR ka humbur sot \u00e7do relevanc\u00eb. Kjo natyrisht nuk \u00ebsht\u00eb plot\u00ebsisht e sakt\u00eb. P\u00ebr shembull, n\u00eb rastet kur rrjeti p\u00ebrdor shum\u00eb pajisje t\u00eb vjetra dhe nuk ka mund\u00ebsi p\u00ebr t'i z\u00ebvend\u00ebsuar ato, DMVPN mund t\u00eb lejoj\u00eb bashkimin e pajisjeve \"t\u00eb vjetra\" dhe \"t\u00eb reja\" n\u00eb nj\u00eb rrjet t\u00eb gjer\u00eb-geografik me nj\u00eb num\u00ebr t\u00eb madh p\u00ebrfitimesh t\u00eb p\u00ebrshkruara m\u00eb sip\u00ebr.<\/p>\n<p>Nga ana tjet\u00ebr, duhet t\u00eb mbahet mend se t\u00eb gjitha rrug\u00ebzat m\u00eb t\u00eb fundit t\u00eb Cisco q\u00eb mb\u00ebshteten n\u00eb IOS XE (ISR 1000, ISR 4000, ASR 1000, CSR 1000v) mb\u00ebshtesin sot \u00e7do mod t\u00eb funksionimit \u2013 dhe ruterat klasik\u00eb dhe DMVPN dhe SD-WAN \u2013 <b>zgjedhja p\u00ebrcaktohet nga nevojat aktuale dhe kuptimi se n\u00eb \u00e7do moment n\u00eb t\u00eb nj\u00ebjtin ekip mund t\u00eb fillohet t\u00eb l\u00ebvizet drejt nj\u00eb teknologjie m\u00eb t\u00eb avancuar.<\/b><br \/>\n<br \/>Burimi: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/cisco\/blog\/514616\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2017 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Viptela, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 Cisco SD-WAN. \u0417\u0430 \u043f\u0440\u043e\u0448\u0435\u0434\u0448\u0438\u0435 3 \u0433\u043e\u0434\u0430 SD-WAN \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u044f \u043f\u0440\u043e\u0448\u043b\u0430 \u043c\u043d\u043e\u0436\u0435\u0441\u0442\u0432\u043e \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439, \u043a\u0430\u043a \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e, \u0442\u0430\u043a \u0438 \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u0433\u043e \u0445\u0430\u0440\u0430\u043a\u0442\u0435\u0440\u0430. \u0422\u0430\u043a \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e \u0440\u0430\u0441\u0448\u0438\u0440\u0438\u043b\u0438\u0441\u044c \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0438 \u043f\u043e\u044f\u0432\u0438\u043b\u0430\u0441\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0430 \u043d\u0430 \u043a\u043b\u0430\u0441\u0441\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 \u0441\u0435\u0440\u0438\u0439 Cisco ISR 1000, ISR 4000, ASR 1000 \u0438 [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91349,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-91348","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2017 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Viptela, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 Cisco SD-WAN.\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"sq_AL\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041e\u0442\u043f\u0438\u043b\u0438\u0442 \u043b\u0438 Cisco SD-WAN \u0441\u0443\u043a, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0438\u0434\u0438\u0442 DMVPN? | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2017 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Viptela, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 Cisco SD-WAN.\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-12T05:42:24+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-12T05:42:24+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47A do ta godas\u00eb Cisco SD-WAN deg\u00ebn mbi t\u00eb cil\u00ebn q\u00ebndron DMVPN? | ProHoster","description":"Q\u00eb nga gushti 2017, kur Cisco bleu kompanin\u00eb Viptela, teknologjia kryesore e ofruar p\u00ebr organizimin e rrjeteve t\u00eb shp\u00ebrndara t\u00eb korporatave \u00ebsht\u00eb b\u00ebr\u00eb Cisco SD-WAN.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041e\u0442\u043f\u0438\u043b\u0438\u0442 \u043b\u0438 Cisco SD-WAN \u0441\u0443\u043a, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u0441\u0438\u0434\u0438\u0442 DMVPN? | ProHoster","og:description":"\u0421 \u0430\u0432\u0433\u0443\u0441\u0442\u0430 2017 \u0433\u043e\u0434\u0430, \u043a\u043e\u0433\u0434\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f Cisco \u043f\u0440\u0438\u043e\u0431\u0440\u0435\u043b\u0430 \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044e Viptela, \u043e\u0441\u043d\u043e\u0432\u043d\u043e\u0439 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u043c\u043e\u0439 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0435\u0439 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u0430\u0446\u0438\u0438 \u0440\u0430\u0441\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0442\u0438\u0432\u043d\u044b\u0445 \u0441\u0435\u0442\u0435\u0439 \u0441\u0442\u0430\u043b\u0430 Cisco SD-WAN.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/otpilit-li-cisco-sd-wan-suk-na-kotorom-sidit-dmvpn","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-12T05:42:24+00:00","article:modified_time":"2020-08-12T05:42:24+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91348","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:29:22","updated":"2026-02-08 20:40:12","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91348","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=91348"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91348\/revisions"}],"predecessor-version":[{"id":158011,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/91348\/revisions\/158011"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/91349"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=91348"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=91348"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=91348"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}