🥇3. Uyilo lwenethiwekhi yoShishino kwiiswitshi eziPhezulu

3. Uyilo lwenethiwekhi yoShishino kwizitshixo eziPhezulu

Good afternoon bahlobo! Namhlanje ndiza kuqhubeka nochungechunge olunikezelweyo Ukutshintsha okugqithisileyo inqaku kuyilo lwenethiwekhi yoShishino.

Kweli nqaku ndiza kuzama ukuba mfutshane kangangoko:

chaza indlela yemodyuli yokuyila inethiwekhi ye-Etnterprise
qwalasela iintlobo zokwakhiwa kwenye yeemodyuli ezibalulekileyo zothungelwano lweshishini - inethiwekhi engundoqo (ip-campus)
chaza izinto eziluncedo kunye nezingeloncedo kwiinketho zokugcina iindawo ezibalulekileyo zenethiwekhi
usebenzisa umzekelo ongabonakaliyo ukuyila/ukuhlaziya inethiwekhi encinci yoShishino
khetha Ukutshintsha Okugqithisileyo ukuphumeza umsebenzi womnatha oyiliweyo
sebenza ngemicu kunye nedilesi ye-IP

Eli nqaku liza kuba nomdla ngakumbi kwiinjineli zenethiwekhi kunye nabalawuli bothungelwano lwamashishini abaqala uhambo lwabo njenge "networker" kuneenjineli ezinamava ezisebenze iminyaka emininzi kubaqhubi be-telecom okanye kwiinkampani ezinkulu ezinothungelwano olusasazwe ngokwejografi.

Kuyo nayiphi na imeko, kwabo banomdla, nceda ubhekisele kwikati.

Indlela yoyilo lwenethiwekhi yemodyuli

Ndizakuqala inqaku lam ngendlela edumileyo yoyilo lwenethiwekhi, ekuvumela ukuba uhlanganise iphazili ukusuka kwiziqwenga zenethiwekhi ibe ngumfanekiso omnye.

Okokuqala, i-abstract encinci - ndihlala ndicinga le ndlela njengokusondeza kwi-geo-maps, xa ilizwe libonakala kuqikelelo lokuqala, imimandla okwesibini, izixeko kwisithathu, njl.

Ngokomzekelo, qwalasela lo mzekelo:

Uqikelelo lokuqala - inethiwekhi yeshishini lonke iseti yamanqanaba ahlukeneyo:
- umqolo okanye ikhampasi
- inqanaba lomda
- inqanaba lomsebenzisi womnxeba
- iindawo ezikude
Uqikelelo lwe-2 - ngalinye kula manqanaba lichazwe kwiimodyuli ezahlukeneyo
- Uthungelwano olungundoqo okanye ikhampasi ibandakanya:
  - Imodyuli ye-3 okanye i-2-level echaza uthungelwano lweshishini kunye namanqanaba ayo - ukufikelela, ukuhanjiswa kunye / okanye undoqo
  - imodyuli echaza iziko ledatha - iziko lokusetyenzwa kwedatha (ngokusisiseko inxenye yomncedisi wesiseko)
- Umda womda wona uqulathe:
  - Imodyuli yoqhagamshelo lwe-Intanethi
  - Imodyuli ye-WAN kunye ne-MAN, enoxanduva lokudibanisa izinto zoshishino ezisasazwe ngokwejografi
  - imodyuli yokwakha iitonela zeVPN kunye nokufikelela kwi-Remote-Access
  - Rhoqo, amashishini amancinci amaninzi aneemodyuli ezininzi, okanye zonke, zidityaniswe kwenye
- inqanaba lomboneleli:
  - Eli nqanaba libandakanya uxhulumaniso "kwilizwe langaphandle" - iifibers ezimnyama (ukurenta iifibers kubaqhubi), iziteshi zonxibelelwano (Ethernet, G.703, njl.), Ukufikelela kwi-Intanethi.
- inqanaba elikude:
  - ubukhulu becala, la ngamasebe eshishini asasazwa phakathi kwesixeko, ummandla, ilizwe okanye amazwekazi.
  - lo mmandla unokubandakanya iziko ledatha eligcinayo, eliphinda umsebenzi weyona nto iphambili
  - kwaye kunjalo, kutsha nje ukufumana ukuthandwa - abasebenzi befowuni (imisebenzi ekude)
Uqikelelo lwe-3 - nganye yeemodyuli zohlulwe kwiimodyuli ezincinci okanye amanqanaba. Umzekelo, kwinethiwekhi yekhampasi:
- I-3-tier network yahlulwe yaba:
  - inqanaba lofikelelo
  - inqanaba lokuhambisa
  - inqanaba le-kernel
- Kwiimeko ezinzima ngakumbi, iziko ledatha linokwahlulwa libe:
  - Inxalenye yenethiwekhi ye-2 okanye ye-3
  - inxalenye yomncedisi
Ndiza kuzama ukubonisa konke oku kungasentla kulo mzobo ulula ulandelayo:

Njengoko kunokubonwa kulo mzobo ungasentla, indlela yokujonga imodyuli inceda ekuchazeni nasekuhleleni umfanekiso uwonke ube ngamacandelo anokuthi kusetyenzwe ngawo kwixesha elizayo.
Ngenjongo yeli nqaku, ndiya kugxila kwinqanaba le-Campus Enterprise kwaye ndiyichaze ngokubanzi.
Iintlobo zothungelwano lwe-IP-CAMPUS
Xa ndandisebenzela umboneleli kwaye ngakumbi kamva - njengomhlanganisi, ndandijongene "nokukhula" okwahlukileyo kothungelwano lwabathengi. Andiyisebenzisi into yokuvuthwa kwegama, kuba amaxesha amaninzi kukho iimeko xa ulwakhiwo lwenethiwekhi lukhula ngokukhula kwenkampani ngokwayo, kwaye oku, ngokomgaqo, kuyindalo.
Kwinkampani encinci ebekwe ngaphakathi kwesakhiwo esinye, inethiwekhi yeshishini inokubandakanya kuphela i-router ye-1 edge esebenza njenge-firewall, iiswitshi ezininzi zokufikelela kunye neeseva ezimbalwa.
Ndibiza umnatha onjalo inethiwekhi "ye-single-layer" - akukho ngokupheleleyo umaleko ongundoqo womnatha ocacileyo, umaleko wokusabalalisa utshintshelwa kwi-router edge (kunye ne-firewall, i-VPN kunye nemisebenzi ye-proxy enokwenzeka), kunye nokufikelela kwiiswitshi zikhonza zombini iikhompyutha zabasebenzi kunye abancedisi.

Xa ishishini likhula-linyusa inani labasebenzi, iinkonzo, kunye neeseva-kudla ngokuyimfuneko ukuba:
- ukwandisa inani lokutshintsha kwinethiwekhi kunye nokufikelela kumazibuko
- ukwandisa umthamo womncedisi
- ukulwa nemimandla yosasazo-ukuphumeza ulwahlulo lwenethiwekhi kunye nomzila phakathi kwamacandelo
- jongana nokungaphumeleli kwenethiwekhi okubangela ixesha lokuphumla kubasebenzi, njengoko oku kubandakanya iindleko ezongezelelweyo zemali kulawulo (umqeshwa akasebenzi, umvuzo uyahlawulwa, kodwa umsebenzi awenziwanga)
- kwinkqubo yokujongana nokungaphumeleli, cinga malunga nokungafuneki kweendawo ezibalulekileyo zenethiwekhi - iirotha, iiswitshi, iiseva kunye neenkonzo.
- qinisa umgaqo-nkqubo wokhuseleko, njengoko iingozi zorhwebo zinokuvela kwaye, kwakhona, ekusebenzeni kwenethiwekhi ezinzile
Konke oku kukhokelela ekubeni injineli (umlawuli wenethiwekhi) ngokukhawuleza okanye kamva ucinga malunga nokwakhiwa okuchanekileyo kwenethiwekhi kwaye iza kwimodeli ye-2-level.
Lo mzekelo sele uhlula ngokucacileyo amanqanaba ama-2 - inqanaba lokufikelela kunye nenqanaba lokusabalalisa, elikwayinqanaba eliphambili (i-collapsed-core).
Unikezelo oludityanisiweyo kunye namaleko e-kernel enza le misebenzi ilandelayo:
- idibanisa amakhonkco ukusuka kwiiswitshi zofikelelo
- yazisa ukuhanjiswa kwamacandelo othungelwano - kukho abasebenzisi abaninzi kunye nezixhobo ezingenakukwazi ukungena kwinethiwekhi enye / i-24, kwaye ukuba zifanelekile, izaqhwithi zokusasaza zibangela ukusilela rhoqo (ingakumbi ukuba abasebenzisi bayabanceda ngokudala iilophu)
- inikeza unxibelelwano phakathi kwamacandelo okutshintsha akufutshane (ngekhonkco elikhawulezayo)
- inika unxibelelwano phakathi kwabasebenzisi kunye nezixhobo zabo kunye nefama yomncedisi, ethi ngeli xesha nayo iqala ukwahlulwa ibe yinxalenye yenethiwekhi eyahlukileyo - iziko ledatha.
- iqala ukubonelela, kunye nokutshintshwa kokufikelela, ukuya kwelinye idigri okanye enye, umgaqo-nkqubo wokhuseleko lowo ishishini liqala ukuba nalo ngeli xesha. Inkampani ikhula, kwaye iingozi zorhwebo nazo zikhula (apha andithethi kuphela amalungiselelo kwiimfihlo zorhwebo, ukuhlukana kwemigaqo-nkqubo yokufikelela, njl., Kodwa kunye nexesha elisisiseko lenethiwekhi kunye nabasebenzi).
Ke, inethiwekhi kungekudala okanye kamva ikhula ibe yimodeli yenqanaba eli-2:

Lo mzekelo uzisa iimfuno ezikhethekileyo zombini kwizinga lokufikelela kwinqanaba, elidibanisa izixhumanisi ezivela kubasebenzisi kunye nezixhobo zenethiwekhi (abashicileli, iindawo zokufikelela, izixhobo zeVoIP, iifowuni ze-IP, iikhamera ze-IP, njl.) kunye nokutshintshwa kwenqanaba lokusabalalisa kunye neekernel.
Ukutshintsha kokufikelela kufuneka kube krelekrele kwaye kukwazi ukuhlangabezana nokusebenza kwenethiwekhi, ukhuseleko, kunye neemfuno zokuguquguquka kwaye kufuneka:
- zineentlobo ezahlukeneyo zokufikelela kumazibuko kunye namazibuko esiqu - ngokukhetha kunye nethuba lokugcinwa kokukhula kwezithuthi kunye nenani lamazibuko
- babe nomthamo owaneleyo wokutshintshela kunye ne-output
- inomsebenzi wokhuseleko oyimfuneko oya kwanelisa umgaqo-nkqubo wokhuseleko wangoku (kwaye ngokufanelekileyo, ukukhula kweemfuno zawo ezingaphezulu)
- banamandla okunika izixhobo zenethiwekhi ekunzima ukufikelela kuzo ngokukwazi ukuziqalisa ngokutsha usebenzisa amandla (PoE, PoE+)
- ube nako ukugcinela owakho umbane ukuze uwusebenzise kwiindawo apho ufuneka khona
- babe (ukuba kuyenzeka) amandla angaphezulu okukhula ekusebenzeni - umzekelo oqhelekileyo xa isitshixo sofikelelo ekugqibeleni sijikela kwisitshixo sokuhambisa
Iiswitshi zokusasaza, nazo, zikwaxhomekeke kwezi mfuno zilandelayo:
- zombini ngokwemiqathango ye-trunk downlink port ngokubhekiselele kutshintsho lofikelelo, kunye nojongano loontanga lotshintshiselwano losasazo olungabamelwane (kwaye nakwixesha elizayo, ujongano olunokwenzeka lwe-uplink oluya kwi-kernel)
- ngokumalunga nokusebenza kwe-L2 kunye ne-L3
- ngokwemigaqo yokusebenza kokhuseleko
- malunga nokuqinisekisa ukunyamezela iziphene (ukungasebenzi, ukudityaniswa kunye nokungasetyenziswa kwamandla)
- malunga nokubonelela ngokuguquguquka xa ulinganisa i-traffic
- babe (ukuba kuyenzeka) amandla angakumbi okukhula ekusebenzeni (utshintsho lwesixhobo sokudibanisa sibe ngundoqo ekuhambeni kwexesha)
- kwezinye iimeko, kunokuba kufanelekile ukusebenzisa i-PoE, i-PoE + izibuko ekutshintsheni ukuhanjiswa.
Ngaphezulu - ngakumbi: ukuba abaphathi balandela umgaqo-nkqubo wokukhula okusebenzayo kunye nophuhliso lweshishini, inethiwekhi iya kuqhubeka nokuphuhlisa kwixesha elizayo - ishishini linokuqalisa ukurenta izakhiwo ezingabamelwane, ukwakha izakhiwo zalo okanye ukuthabatha abakhuphisana abancinci, ngaloo ndlela ukwandisa inani lemisebenzi yabasebenzi. Ngexesha elifanayo, inethiwekhi iyakhula, efuna:
- ukubonelela abasebenzi ngeendawo zokusebenza - iiswitshi ezintsha zokufikelela ezinamazibuko okufikelela ziyafuneka
- ukufumaneka kotshintsho olutsha lokusasaza ukudibanisa amakhonkco ukusuka kwiiswitshi zokufikelela
- ukwakhiwa kwemitsha, kunye nokuphuculwa kweentambo zonxibelelwano ezikhoyo
Ngenxa yoko, ukunyuka kwetrafikhi ngenxa yezi zizathu zilandelayo:
- ngenxa yokwanda kwamazibuko okufikelela kwaye, ngokufanelekileyo, abasebenzisi benethiwekhi
- ngenxa yokwanda kwezithuthi ezivela kwiinkqubo ezingaphantsi ezikufutshane ezikhetha uthungelwano lweshishini njengezothutho - umnxeba, ukhuseleko, iinkqubo zobunjineli, njl.
- ngenxa yokuqaliswa kweenkonzo ezongezelelweyo - ngokukhula kwabasebenzi, amasebe amatsha abonakala efuna isofthiwe ethile
- Iziko ledatha amandla ekhompyutheni ayakhula ukuhlangabezana neziseko zophuhliso kunye neemfuno zesicelo
- iimfuno zokhuseleko womnatha kunye nolwazi ziyakhula - odumileyo CIA triad (joke), kodwa ngokunzulu, iCIA - Ubumfihlo, Integrity kunye nokufumaneka:
  - Ngokumalunga noku, iimfuno ezongezelelweyo zokunyamezela iimpazamo kunye nokukhutshwa komsebenzi kubonakala kumanqanaba abalulekileyo othungelwano - ukuhanjiswa kunye namaziko edatha.
  - kwakhona, kukho ukwanda kwezithuthi ngenxa yokuqaliswa kweenkqubo ezintsha zokhuseleko - umzekelo, i-RKVI, njl.
Kungekudala okanye kamva, ukukhula kwetrafikhi, iinkonzo kunye nenani labasebenzisi kuya kubangela imfuneko yokwazisa umaleko wothungelwano olongezelelweyo - ingundoqo, eya kwenza ukutshintshwa kwesantya esiphezulu / ukuhanjiswa kweepakethi usebenzisa izixhumanisi zonxibelelwano olukhawulezayo.
Ngeli xesha, ishishini lingafudukela kwimodeli yenethiwekhi enenqanaba eli-3:

Njengoko unokubona kumzobo ongentla, kwinethiwekhi enjalo kukho inqanaba eliphambili, elidibanisa izixhumanisi ezihamba ngesantya esiphezulu ukusuka kwiiswitshi zokusasaza. Ke, utshintsho lwe-kernel lukwajongana neemfuno zoku:
- i-interface bandwidth - 1GE, 2.5GE, 10GE, 40GE, 100GE
- tshintsha ukusebenza (ukutshintsha amandla kunye nokusebenza kokuthumela)
- iintlobo zojongano - 1000BASE-T, SFP, SFP+, QSFP, QSFP+
- inani kunye neseti yojongano
- ubunakho be-redundancy (i-stacking, i-clustering, i-redundancy yeebhodi zokulawula (ezifanelekileyo kwiimodyuli zokutshintsha), ukuchithwa kwamandla, njl.
- ukusebenza
Kweli nqanaba lothungelwano, ukuguqulwa kobugcisa ngokuqinisekileyo kuyafuneka:
- ukungafuneki kwe-kernel node kunye namakhonkco (kakhulu, kakhulu, anqweneleka kakhulu)
- ukungafuneki komgangatho wokuhanjiswa kweendawo kunye namakhonkco (kuxhomekeke ekubalulekeni)
- ukungafuneki kwamakhonkco onxibelelwano phakathi kokutshintsha ukufikelela kunye nenqanaba lokuhambisa (ukuba kuyimfuneko)
- ukwaziswa kweeprothokholi zomzila
- ulungelelwaniso lwetrafikhi kokubini kumbindi kunye nakumanqanaba okusasazwa kunye nokufikelela (ukuba kuyimfuneko)
- ukuphunyezwa kweenkonzo ezongezelelweyo - zombini ezothutho kunye neenkonzo zokhuseleko (ukuba kuyimfuneko)
kunye nomthetho, uchaza umgaqo-nkqubo wokhuseleko womnatha weshishini, ohambelana nomgaqo-nkqubo wokhuseleko jikelele ngokwemiqathango:
- iimfuno zokuphunyezwa kunye nokucwangciswa kwemisebenzi ethile yokhuseleko ekufikeleleni kunye nokusabalalisa ukutshintshwa
- iimfuno zofikelelo, esweni nolawulo lwezixhobo zenethiwekhi (iiprothokholi zokufikelela kude, iisegmenti zenethiwekhi ezivumelekileyo kulawulo, useto lokugawulwa kwemithi, njl.njl.)
- iimfuno zogcino
- iimfuno zokwenziwa kobuncinane bekhithi yamalungu afunekayo
Kweli candelo, ndichaze ngokufutshane inguquko yothungelwano kunye neshishini ukusuka kwiiswitshi ezimbalwa kunye nesibini sabasebenzi ukuya kwishumi elinesibini (kwaye mhlawumbi amakhulu okutshintsha) kunye namakhulu aliqela (okanye amawaka) kuphela abo basebenzi basebenza ngokuthe ngqo. kwinethiwekhi yeshishini (kwaye emva koko kukho amasebe okuvelisa kunye neenethiwekhi zobunjineli).
Kucacile ukuba ngokwenene "ummangaliso" kunye nophuhliso olukhawulezayo lweshishini alukwenzeka.
Ngokwesiqhelo kuthatha iminyaka ukuba ishishini kunye nenethiwekhi zikhule ukusuka kwinqanaba lokuqala ukuya kwinqanaba lesi-1 endilichazayo.
Kutheni ndibhala zonke ezi truisms? Emva koko, ndifuna ukukhankanya apha ixesha elifana ne-ROI - ukubuyiswa-kwi-investment (ukubuyisela / ukubuya kwi-investment) kwaye ucinge ngecala elijongene ngqo nokukhethwa kwezixhobo zenethiwekhi.
Xa ukhetha izixhobo, iinjineli zenethiwekhi kunye nabaphathi babo bahlala bekhetha izixhobo ezisekelwe kwizinto ezi-2 - ixabiso langoku lezixhobo kunye nomsebenzi ophantsi wobugcisa ofunekayo ngoku ukusombulula umsebenzi othile okanye imisebenzi (ndiya kuthetha malunga nokuthenga izixhobo zokuphinda ufune umsebenzi emva kwexesha." ).
Ngexesha elifanayo, amathuba okuqhubela phambili "ukukhula" kwezixhobo azifane zicatshangelwe. Ukuba imeko ivela xa izixhobo ziphelile ngokwazo ngokwemigaqo yokusebenza okanye ukusebenza, ngoko ke zinamandla ngakumbi kunye nezisebenzayo zithengwa kwixesha elizayo, kwaye endala inikezelwa kwindawo yokugcina impahla okanye kwindawo ethile kwinethiwekhi ngomgaqo othi "ukuze". stand” (oku, ngendlela, kukwabangela ukubonakala kwendawo yogcino-zilwanyana enkulu yezixhobo kunye nokuthenga iqela leenkqubo zolwazi ezisebenza nayo).
Ngaloo ndlela, endaweni yokuthenga inxalenye yeelayisensi ezongezelelweyo. ukusebenza kunye nokusebenza, okungabizi kakhulu kunezixhobo ezitsha, eziphezulu zokusebenza, kufuneka uthenge i-hardware entsha kunye ne-overpay ngezi zizathu zilandelayo:
- umsebenzi womnatha ukhula ngokucothayo kwaye ukwandiswa komsebenzi okanye usebenziso lokutshintsha kumsebenzi womnatha wakho lunokwanela ixesha elide.
- Akusiyo imfihlo ukuba izixhobo ezivela kubathengisi bangaphandle ziboshwe ngemali yangaphandle (idola okanye i-euro). Ukunyaniseka, ukukhula kwedola okanye i-euro (okanye i-mini-devaluation mini-devaluation ye-ruble, kuxhomekeke kwindlela oyijonga ngayo) ikhokelela ekubeni idola kwiminyaka eyi-10 eyadlulayo kunye nedola ngoku zizinto ezihluke ngokupheleleyo kwi-ruble. umbono we-ruble
Ukushwankathela konke oku kungasentla, ndingathanda ukuqaphela ukuba ukuthenga izixhobo zenethiwekhi ngokusebenza ngokubanzi kunokukhokelela ekongeni kwixesha elizayo.
Apha ndiqwalasela iindleko zokuthenga izixhobo kumxholo wotyalo-mali kwinethiwekhi yam kunye neziseko.
Ngaloo ndlela, abathengisi abaninzi (kungekhona kuphela i-Extreme) bathobela umgaqo wokuhlawula-njengoko-ukhula, ukupakisha umsebenzi omningi kwisixhobo kunye namathuba okwandisa ukusebenza kojongano, athi kamva asebenze ngokuthenga iilayisensi ezahlukeneyo. Bakwanikezela ngokutshintsha kweemodyuli kunye noluhlu olubanzi lwe-interface kunye namakhadi eprosesa, kunye nokukwazi ukunyusa ngokuqhubekayo inani labo kunye nokusebenza.
Ukungafuneki kweendawo ezibalulekileyo
Kule nxalenye yenqaku, ndingathanda ukuchaza ngokufutshane imigaqo esisiseko yokuphindaphinda i-nodes ebalulekileyo yenethiwekhi njengengundoqo, isikhungo sedatha okanye ukutshintshwa kokusabalalisa. Kwaye ndifuna ukuqala ngokujonga kwiintlobo eziqhelekileyo zogcino - ukupakisha kunye nokudibanisa.
Indlela nganye ineenzuzo kunye neengxaki zayo, endifuna ukuthetha ngayo.
Apha ngezantsi kukho isishwankathelo setheyibhile ethelekisa iindlela ezi-2:
- lawulo - njengoko kunokubonwa kwitheyibhile, kulo mba, ukupakisha kunenzuzo, ekubeni ukusuka kwindawo yokulawula, i-stack of switches eziliqela ibonakala njengetshintshi enye kunye nenani elikhulu lamachweba. Endaweni yokulawula, yithi, izitshixo ezisi-8 ezahlukeneyo ngokudibanisa, unokulawula enye kuphela ngokupakisha.
- umgama - okwangoku, ukuthetha ngokungqongqo, i-advanteji yokuhlanganisana ayibonakali kangako, kuba itekhnoloji yokupakisha utshintshiselwano ngokupakisha izibuko okanye izibuko ezineenjongo ezimbini zivele (umzekelo, iSummitStack-V ye-Extreme, iVSS yeCisco, njl.njl.), ekwaxhomekeke kwiindidi zeetransceivers. Apha, inzuzo inikezelwa ekuhlanganiseni ngokusekelwe kumgaqo wokuba xa ubeka, kukho iinketho apho kufuneka usebenzise izibuko zokupakisha rhoqo, ezihlala zidibene neentambo ezikhethekileyo zobude obulinganiselweyo - 0.5, 1, 1.5, 3 okanye 5 yeemitha.
- Uhlaziyo lweSoftware - apha sibona ukuba ukudibanisa kunenzuzo ngaphezu kokupakisha kwaye inqaku lilandelayo - xa uhlaziywa uguqulelo lwesoftware yezixhobo ngexesha lokupakisha, uhlaziya isoftware kwi-master switch, ethi emva koko ithathe indima yokubeka isoftware entsha kwi-stacking. Ukutshintsha kwelungu elilindileyo kwisitaki. Kwelinye icala, oku kwenza umsebenzi wakho ube lula, kodwa ukuhlaziya isoftware kudla ngokufuna ukuqaliswa ngokutsha kwesixhobo, nto leyo ekhokelela ekuqalisweni kwakhona kwesitaki sonke kwaye ngaloo ndlela kuphazamiseke ekusebenzeni kwayo kunye nazo zonke iinkonzo ezinxulumene nayo kangangexesha elithile. ixesha = ixesha lokuqalisa kwakhona. Oku ngokuqhelekileyo kubaluleke kakhulu kwisiseko kunye neziko ledatha. Ngokudibanisa, unezixhobo ezi-2 ezizimeleyo enye kwenye, apho unokuhlaziya isoftware ngokulandelelanayo emva kwenye. Kule meko, ukuphazamiseka kwiinkonzo kunokuphetshwa.
- uqwalaselo lwezicwangciso - apha, ngokuqinisekileyo, ukupakisha kunenzuzo, ekubeni kwimeko yolawulo, kufuneka uhlele kuphela izicwangciso zesixhobo esinye kunye nefayile yayo yoqwalaselo. Ngokudibanisa, inani leefayile zoqwalaselo liyakulingana nenani leendibano zeqela.
- ukunyamezela iimpazamo - apha zombini itekhnoloji iphantse yalingana, kodwa ukudibanisa kusenenzuzo encinci. Isizathu apha silele koku kulandelayo - ukuba siqwalasela isitaki ukusuka kwindawo yokujonga iinkqubo ezisebenzayo kunye neeprothokholi, siya kubona oku kulandelayo:
  - kukho i-master-switsha apho zonke iinkqubo eziphambili kunye neeprothokholi zisebenza (umzekelo, i-protocol yomzila oguquguqukayo - OSPF)
  - kukho ezinye iiswitshi zekhoboka eziqhuba iinkqubo eziphambili eziyimfuneko ekusebenzeni kwi-stack kunye nokubonelela ngezithuthi ezidlula kuzo
  - Xa i-master-switch isilela, into elandelayo ephambili yokutshintsha ikhoboka ifumanisa ukusilela okuyintloko
  - iyaziqalisa njengenkosi kwaye iqala zonke iinkqubo ebezisebenza kwinkosi (kubandakanywa nenkqubo ye-OSPF esiyibonileyo)
  - emva kwexesha elithile ukuze iinkqubo ziqale (ngokuqhelekileyo zifutshane kakhulu), i-OSPF protocol ngokwayo iqala ukusebenza
  - Ngaloo ndlela, ukuba enye i-nodes iyasilela, i-OSPF iya kusebenza ngokukhawuleza ngexesha lokuhlanganisana kunokuba xa ukupakisha (ixesha elifunekayo ukuqalisa kunye nokuqaliswa kweenkqubo kunye neeprothokholi kwi-switch switch of the stack). Nangona kufuneka ndiqaphele ukuba iiprothokholi zangoku zokupakisha kunye nokutshintsha zisebenza ngokukhawuleza, ngokufuthi ixesha lokuphazamiseka kwezithuthi xa utshintshela isitaki sithatha ngaphantsi kwesekondi enye, kodwa ukuphumelela ngokudibeneyo kule parameter.
- ukuntsokotha - njengoko kunokubonwa kwitheyibhile, i-stacking iphumelele ngokwemiqathango yobunzima. Esi sisiphumo esithe ngqo sezinto "zolawulo" kunye "nesetingi yokucwangcisa". I-node enye ithatha ixesha elincinci ukuyiqwalasela kunye nokulawula. Kwakhona, xa udityaniswa, kaninzi kufuneka uqwalasele iiprothokholi ezongezelelweyo zendlela okanye iiprothokholi zogcino lwesango-iVRRP, HSRP kunye nabanye.
- ukutshintshwa kweeyunithi - ukupakisha kunenzuzo ecacileyo apha. Amaxesha amaninzi, ukutshintsha iswitshi kwisitaki, kuyafuneka ukuba wenze ubuncinci useto lwehardware, umzekelo:
  - hlaziya isoftwe yotshintsho olutsha kuguqulelo lwesoftware yesitaki (kwaye oku kunokwenziwa ngoko nangoko xa iiswitshi zifika kwipakethe yamalungu asecaleni)
  - qwalasela imiyalelo embalwa esisiseko yokupakishwa (kwaye kwezinye iindidi zokutshintsha noku kungafuneki)
  - susa iswitshi yesitaki engaphumelelanga kwaye uqhagamshele entsha
  - qhagamshela unikezelo lwamandla kunye neentambo zokubopha
- luthambe — Ndizithathela ingqalelo enye yeeparamitha eziphambili. Ngokuqhelekileyo, i-elasticity yimpawu eyinkimbinkimbi, oku kuthetha ukuba ipropati yento yokutshintsha phantsi kwempembelelo yomthwalo kwaye ibuyele kwimo yayo yangaphambili emva kokunyamalala kwayo. Okungaqhelekanga kukuba, ekuhlanganiseni kuya kuba phezulu xa kuthathelwa ingqalelo amanqaku e-4: 3 ngokweempawu ezixhasa ukupakishwa. Konke malunga nomba womntu. Ewe, ewe, musa ukumangaliswa - amandla eeparamitha zokupakisha njengolawulo olumanyeneyo, ukucwangciswa koseto kunye nobunzima obulula bukwalele kubuthathaka bokupakisha xa into yomntu iqala ukudlala.
За свою работу в области IT я много раз встречал ситуации (да чего уж греха таить и сам наступал на эти же грабли, особенно в начале), когда при настройке стэка инженер ошибался в вводе той или иной команды или включением/oтключением того или иного функионала на оборудовании, что приводило к отказу всего стэка и его ручной перезагрузке. Отдельно стоит упомянуть любителей приложения Putty для Windows (ох уж это копирование правой кнопкой мыши).
Enyanisweni, zombini itekhnoloji ilungile (ngokukodwa xa kuthelekiswa nokungafunekiyo) kwaye nganye inamandla kunye nobuthathaka bayo, kodwa kwinqanaba eliphambili kunye neziko ledatha ephezulu, ndingathanda ukusebenzisa i-clustering.
Nangona olu luluvo lwam nje. Iinjineli ezininzi eziziingcali ezithathe inxaxheba kwinkxaso yenethiwekhi iminyaka emininzi kwinqanaba lobuchwephesha zinokusebenzisa ngokulinganayo zombini itekhnoloji - konke kuxhomekeke kumava kunye neziqinisekiso.
Ukongeza kwitekhnoloji yokupakisha kunye nokugcina iindawo zenethiwekhi, kukwakho nemigaqo jikelele yokugcina iindawo zenethiwekhi ngokwayo kunye noqhakamshelwano phakathi kweenodi:
Ngokugcina indawo kwindawo yenethiwekhi ndithetha ukuba:
- ukungafuneki kobonelelo lwamandla - ukufakela izixhobo zombane ezi-2 eziphindaphindanayo (kwaye kukhethwa ukuba ziqhagamshelwe kwicandelo loku-1 lonikezelo lwamandla) kunokwenza ubomi bakho bube lula kakhulu.
- ukudityaniswa kweebhodi zolawulo - kwinqanaba elikhulu lisebenza kwiimodyuli zokutshintsha, ezibonelela ngokudityaniswa kweebhodi ezininzi zolawulo eziphinda enye kwenye.
- ukungafuneki kwamakhadi ojongano - ikwasebenza kakhulu kwiimodyuli zokutshintsha.
Ugcino loqhagamshelo/amakhonkco ngokusisiseko kuthetha ubukho beendlela zekheyibhile ezithungelanayo (okanye amakhonkco erediyo kwimeko yeendawo ezivulekileyo) kunye:
- ukuhanjiswa phezu kweeshafu zekhebula ezahlukeneyo kunye nemijelo ngaphakathi kwesakhiwo
- ukusasazwa ngokwejografi phezu kommandla kwinqanaba le-2 okanye ngaphezulu kwezakhiwo, idolophu, ummandla okanye ilizwe (ebizwa ngokuba ngamakhonkco evolumetric)
Kwangaxeshanye, xa usakha amakhonkco onxibelelwano olugcinayo, kufuneka ulandele inani leengcebiso kwizixhobo:
- kwimeko yokuphindaphinda amakhadi e-interface ye-modular switch, okanye phambi kwe-stack, kuyimfuneko ukusabalalisa amakhonkco phakathi kweeyunithi - amakhadi e-interface kwimeko yokutshintsha kweemodyuli kunye nokutshintsha kwimeko ye-stack.
- Kucetyiswa ukuba kusetyenziswe iiprotocol zokudibanisa unxibelelwano (i-LACP, i-MLT, i-PAgP, njl.) Ukudibanisa amakhonkco kumaqela kunye nokulinganisa umthwalo phakathi kwabo.
- sebenzisa iirotha ezixhasa iiprothokholi zeECMP (Equal-Cost-Multi-Path) - xa, xa iipakethi ezininzi zihanjiswa ngendlela enye, ezi pakethe azihambi ngendlela enye (kunye nojongano) kodwa zisasazwa kwiindlela ezininzi ezilungileyo (kwaye ujongano oluninzi), olumiselwa ngokulingana kwemetrics zeprotocol yomzila, ethi yona ibe noxanduva lokuzalisa itheyibhile yokugqibela yokubonisa.
Kwaye ngoku, njengoko kuthenjisiwe, ndiza kuchaza imeko yokwenyani kwisenzo sam kunye nomgaqo wokonga xa ugcina iindawo ezibalulekileyo, ezenzeka kwiminyaka eliqela eyadlulayo:
- Inkampani enye, ndiza kuyibiza ngokuba yi-X, yayinemodeli yenethiwekhi enemigangatho emi-3:
  - ngeecores ezininzi
  - ishumi elinambini aggregations
  - amawaka aliqela okutshintsha ukufikelela
  - amashumi amawaka abasebenzisi
- Inethwekhi yayakhiwe ngokuntsokothileyo:
  - kunye neqela leendlela zokuziphatha eziguqukayo kunye neeprothokholi - i-OSPF, i-MP-BGP, i-MPLS, i-PIM, i-IGMP, i-IPv6, njl.
  - iqela leenkonzo - ukufikelela kwi-Intanethi, i-L2 kunye ne-L3 VPN, i-VoIP, i-IPTV, imigca eqeshisayo, njl.
- kodwa bekukho ibhotile enye kuthungelwano - umzila womda odibanisa imisebenzi yomda weBGP kwaye yaphelisa ezinye iinkonzo zabasebenzisi.
- ewe, ixabisa kakhulu njengephiko lenqwelomoya (izigidi zeeruble)
- ewe, ngelo xesha yayisesinye sezixhobo eziphezulu kumgca womthengisi wenethiwekhi odumileyo
- ewe, bekufuneka ithembeke kakhulu-ngomgangatho ogqwesileyo we-MTBF
- ewe, yayinezixhobo zombane ezi-4, ezihlanganiswe ngokweskimu se-2x2 kwaye ziqhagamshelwe kwi-UEPS eyahlukeneyo kunye negalelo.
Kodwa konke oku akuzange kutshintshe into yokuba yayiyinto enye yokusilela kwinethiwekhi.
Kwaye ngenye imini, kude kube yinto emangalisayo kum kunye noogxa bam, le router yafa ixesha elide (kamva safumanisa ukuba kukho ukusilela kwintambo yombane nge-UEPS, ekhokelele ekuphumeni kombane ombini ngexesha elifanayo kwaye xa Kule meko, enye yeebhloko yatshisa imodyuli ye-RP ye-router kunye nekhadi le-interface, elidibaniswe nebhasi yedatha eqhelekileyo yesixhobo).
Asizange sibe neebhodi zokugcina - i-RP kunye nekhadi le-interface, kodwa kwakukho isivumelwano sokutshintshwa kwezixhobo okanye amacandelo ayo kunye nomnye wamaqabane phantsi kweskimu se-NBD.
Ngelishwa, ngelo xesha amaqabane ayenayo kuphela ikhadi le-interface kwisitokhwe, kodwa akukho bhodi ye-RP yafika emva kweentsuku ezimbalwa (emva kweentsuku ze-3).
Ngenxa yoko, ubukho benqaku elinye lokungaphumeleli kwinethiwekhi (nangona ikhontrakthi yenkxaso kunye nokutshintshwa kwezixhobo) kubangele ezi ndleko zilandelayo zemali:
- Isabelo seenkonzo zenkampani ezibhekiselele okanye ezinxulumene nalo mda malunga ne-60-70%
- njengoko kubalwa kamva, inzuzo yemihla ngemihla yayimalunga ne-900 lamawaka eeruble (malunga) ngelo xesha.
- Ke, kwiintsuku ezi-3 zokuphumla, ngokwethiyori, inzuzo yalahleka kwisixa se-1 yezigidi ezingama-620 ukuya kwi-1 yezigidi ezingama-890.
Ngokuqinisekileyo, ilahleko eshiyekileyo yayincinci, kuba imbuyekezo yabasebenzisi abaninzi ayizange ibuyiswe ngendlela yemali, kodwa ngendlela yeenkonzo, kodwa zazisekho:
- inxalenye yembuyekezo kubasebenzisi bamashishini
- iindleko ezongezelelekileyo zabasebenzi benkampani abasebenza zonke ezi 3-4 iintsuku ngamandla apheleleyo - ixesha elongezelelweyo, ubusuku bobusuku, ukunyuka kweeshifti, njl.
- ilahleko yegama, nayo ebalulekileyo
- kwaye okona kubaluleke kakhulu - imithambo-luvo yabaphathi kunye nabasebenzi, kunye nabathengi
Ngenxa yoko, umgaqo-nkqubo wenkampani wahlaziywa:
- wala isivumelwano sokutshintshwa phantsi kwemiqathango ye-NBD
- ushiye isivumelwano senkonzo esiqhelekileyo
- kuthengwe i-backup router exabisa malunga ne-1 - 1.3 yezigidi zeeruble ukugcina i-90% yokusebenza kweyona nto iphambili.
Emva koko, ukuthengwa kwezixhobo ezongezelelweyo kunye nokugcinwa kweyona nto iphambili kwenza ukuba kube lula ukulinganisa umthwalo kumakhonkco angaphandle, i-traffic kunye nabasebenzisi phakathi kwabo, kwaye ibonelele umda wokhuseleko kwinkampani kwiingozi ezingaphezulu.
Umzekelo woYilo lomnatha woShishino
Kule nxalenye yenqaku ndiya kuzama ukuchaza iingongoma eziphambili xa kubalwa inethiwekhi yomqolo weshishini. Andizukukulayisha kakhulu ngayo yonke iPPDIOO (Lungiselela-uYilo-uYilo-Sebenzisa-Yenza kakuhle), kodwa iya kuchaza amanqaku ayo aphambili:
- Ukulungiselela/Ukulungiselela - kufuneka wenze isigqibo kunye nabaphathi bakho malunga neenjongo zokwenza inethiwekhi yala maxesha ofuna ukuyifeza-ukwandisa ukunyamezela iimpazamo, ukwazisa ngeenkonzo ezintsha okanye itekhnoloji. Ndiza kuyitsiba inkcazo yezithintelo - zobugcisa kunye nombutho - apha, kuba ndicinga ukuba ungumqeshwa wombutho kwaye unexesha elininzi lokuzoyisa. Ndiza kubuyela kwisihloko sohlahlo lwabiwo-mali olungezantsi.
- Ukucwangcisa - apha kuya kufuneka wakhe inkcazo epheleleyo yenethiwekhi yakho yangoku (ukuba awuyazi), okt. Chaza inethiwekhi njengoko injalo ngoku:
  - ubuninzi kunye nohlobo lwezixhobo
  - inani kunye neentlobo zamazibuko
  - iindlela ezikhoyo zeentambo kunye nezikimu zokutshintsha ngaphakathi naphakathi kwezakhiwo
  - iisekethe zokubonelela ngombane
  - I-L2 kunye ne-L3 idilesi
  - ukwakha iimephu zothungelwano lwe-Wi-Fi ezibonisa iindawo zofikelelo kunye nabalawuli
  - chaza ifama yeseva yakho
  - Kuyacetyiswa ukuba uchaze zonke iinkonzo zakho kunye noqhagamshelo phakathi kwazo
  - ukuba sele uphumeze umgaqo-nkqubo wokhuseleko womnatha kunye nomgaqo-nkqubo wolawulo lokufikelela kwinethiwekhi ngendlela enye okanye enye, qiniseka ukuba uyithathela ingqalelo xa uyila.
  - Ndiza kuqaphela ngokukhawuleza ukuba inyathelo lesibini liyi-inventory epheleleyo yothungelwano, ukususela kwisiseko sekhebula kunye neesekethe zokubonelela ngombane, kunye nokuphela kweenkonzo (izicelo kunye namachweba azo). Eli nyathelo lidla kakhulu ixesha kwaye liyadika ngamanye amaxesha. Ukuba wena okanye owandulelayo akazange agcine amaxwebhu okanye inkqubo yokubeka iliso esisiseko, lixesha lokucinga ngayo. Inethiwekhi idla ngokutshintsha ngokuhamba kwexesha ngesantya esahlukileyo, kwaye ukugcina kuphela amaxwebhu ahlaziyiweyo okanye inkqubo yokubeka iliso inokukunceda ugcine umkhondo wemeko yayo kwaye uququzelele ulawulo lwayo. Kodwa oku sele kusebenza kwinyathelo lokusebenza.
- Yila -Uxhotyiswe ngolwazi olupheleleyo lwenethiwekhi yakho efunyenwe kwinyathelo langaphambili, ekugqibeleni uhlala phantsi kwaye ucinge ngendlela yokwenza inethiwekhi yakho ibe yesimanje. Ngezantsi ndiza kuzama ukubonisa umzekelo omncinci wokubala kwenethiwekhi.
Mna ngokwam, ndiqulunqe uluhlu oluncinci kunye nedatha yokuqala eya kundikhokela xa ndibala kwaye ndiyila inethiwekhi engundoqo.
Masibe nomfanekiso-ngqondweni wenyathelo lokuLungisa njengoluhlu lwezinto esinazo kunye nento esiceba ukuyenza:
- kukho ishishini elikhulu elinenani eliqikelelweyo lemisebenzi, malunga nama-700-800 (apha ndithetha abo basebenzi bafuna ukufikelela kuthungelwano lweshishini)
- Kukho izakhiwo ezininzi ezahlukeneyo ngaphakathi kwendawo yeshishini:
- Izakhiwo eziphambili:
  - inani lezakhiwo - 2 pcs.
  - inani lemigangatho kwisakhiwo - iipcs ezi-7.
  - inani leekhabhathi zonxibelelwano ngomgangatho ngamnye kwisakhiwo esinye - iziqwenga ezi-3 (zizonke ezingama-21).
  - inani labasebenzi kwisakhiwo =~ 250 abantu
- Iindawo ezivaliweyo ezongezelelweyo:
  - inani lezakhiwo - 10 pcs.
  - inani lemigangatho kwisakhiwo / iworkshop - 2 pcs.
  - inani leekhabhinethi zonxibelelwano kwisakhiwo - iipcs ezi-3.
  - inani labasebenzi kwisakhiwo =~ 20 abantu
- Inqanaba londoqo womnatha wangoku (ngendlela, icebo elixhaphake kakhulu endikhe ndadibana nalo ngaphezu kwesinye kwimo enye okanye enye kunye nokwakhiwa kwamazibuko) ibonisiwe:
  - 2 L2 utshintsho:
    - I-1Gb RJ-45 izibuko - iipcs ezingama-24.
    - I-1Gb izibuko ze-SFP - iipcs ezi-4.
  - 1st L2 iswitshi:
    - I-1Gb izibuko ze-SFP - iipcs ezi-24.
  - core topology - ring
  - amakhonkco oontanga-ku-peer phakathi kokutshintsha anikwe amandla kusetyenziswa iifiber optical
  - iiswitshi zibekwe kumagumbi amancinane eseva aneekhabhathi
- Inqanaba losasazo lwangoku:
  - kudityaniswe nenqanaba lesiseko sothungelwano ngokwemigaqo yokuhlanganiswa kwamakhonkco ukusuka kutshintsho lofikelelo
  - Idilesi ye-L3 ibekwe kumda wendlela kunye/okanye kwi-firewall
- Inqanaba lofikelelo lwangoku:
  - I-L2 itshintsha nge-16 x 100 Mb i-RJ-45 ukufikelela kumachweba kunye ne-2 Gigabit uplink combo port RJ-45 / SFP
  - iiswitshi zibekwe kwiikhabhathi kwimigangatho
  - ukufikelela kwitopology yokutshintsha:
    - inkwenkwezi (i-hub-and-spoke - hub kunye ne-spokes) kunye ne-core / distribution switch phakathi
    - umqadi/wathetha lisebe lokutshintsha ngokomgangatho - iziqwenga ezi-3 kwitsheyini
  - kukho iiswitshi zofikelelo ezingalawulwayo
  - iiswitshi kwiimeko ezi-9 ezongezelelweyo ziqhagamshelwe ngokusebenzisa abaguquli bemidiya (i-optical to electronic signal converters)
- Izibonelelo zekhebula zangoku:
  - Inkqubo yekhebhula phakathi kwezakhiwo:
    - kukho intambo ye-optical phakathi kwezakhiwo ezi-2 eziphambili ezinomthamo we-8 fibers
    - kukho intambo ye-optical e-1 phakathi kwesinye sezakhiwo ezongezelelweyo (apho i-core switch ifakwe khona) kunye nesakhiwo ngasinye esikhulu esinomthamo we-8 fibers nganye.
    - Kukho intambo enye ye-optical phakathi kokudibanisa. iimeko kunye namatyala aneenguqu eziphambili ezifakelweyo ezinomthamo we-1 fibers (ukuhanjiswa kwazo kuboniswe kumfanekiso ongezantsi)
    - uhlobo lwefayibha kuzo zonke iintambo-imowudi enye/SMF
    - I-2-fiber ye-mode eyodwa ye-transceivers ye-SFP isetyenziswa
    - Ezinye iintambo ziyayekiswa kuqhagamshelo lwe-optical cross-connections (ODF) kumagumbi ahlukeneyo (iiholo ezinqamlezileyo/amagumbi omncedisi), kwaye ezinye iintambo zipheliswe kwi-SHTOs zomgangatho womgangatho.
  - Inkqubo yekhebhula ngaphakathi kwezakhiwo:
    - kukho umxube wentambo edibeneyo phakathi kwamagumbi omncedisi kunye neekhabhathi zokuqala kwimigangatho:
    - Iintambo zobhedu zeCat5e - iipcs ezili-10 (okanye iintambo ze-100)
    - i-fiber optic multimode / intambo ye-MMF ye-4 okanye i-8 fibers - 1 pc.
    - i-fiber optic multimode/intambo ye-MMF yeefiber ezi-4 phakathi kweekhabhathi zomgangatho
    - iintambo zeCat5e zethusi phakathi kweekhabhinethi zomgangatho kunye neziseko zokufikelela
  - iziko ledatha langoku:
    - kukho iiseva ezininzi, umzekelo iziqwenga ezi-6
    - zibandakanya i-1Gb izibuko kwi-core switch kwisakhiwo esikhulu se-1
    - zonke izicelo zeshishini zibanjwa kwiiseva
  - L2, L3 idilesi kunye nendlela:
    - inethiwekhi ine VLAN eziliqela - 2,3 isakhiwo ngasinye
    - abancedisi babelwe kwinethiwekhi eyahlukileyo /24
    - Kwiimfuno zangaphakathi, iinethiwekhi zegrey B zisetyenziswa, zifakwe kuluhlu - 172.16.0.0/16
    - Iidilesi ze-L3 ziphelisiwe kumda wendlela kunye/okanye kwi-firewall
    - Umzila omileyo uyasetyenziswa
  - Iinkcukacha ezongezelelweyo:
    - umnxeba:
      - Kwizakhiwo nakwezinye izakhiwo, umnxeba wemveli usetyenziswa kusetyenziswa isimbo sakudala sedijithali PBXs (hayi IP-PBX)
      - kuyimfuneko ukufaka iifowuni kwizakhiwo ezitsha, ngaphandle kweendleko zokubeka imigca yentambo yobhedu ebiza kakhulu yomthamo othile kunye nokwakha i-SCS ephindwe kabini yefowuni ngaphakathi kwezakhiwo.
      - Ngokuhamba kwexesha, kucwangciswe ukwazisa ngefowuni ye-IP kwishishini lonke, idibanise neenkqubo zeCRM kwaye idlulisele bonke abasebenzi kuyo.
    - umthamo wezibuko:
      - kuyimfuneko ukuhlalutya umthamo wangoku wamazibuko e-trunk kunye namazibuko okufikelela, kwaye ugcine ubuncinane i-25-30% kwiimfuno zexesha elizayo.
      - Hlalutya ukwanela kokuphuma kwangoku kwamazibuko okufikelela kunye namakhonkco e-trunk
      - ukubonelela nge-PoE / PoE + izibuko zokufikelela kwizixhobo ezivela kwiinkqubo ezihambelanayo - ucupho lwevidiyo kunye nefowuni
    - CCTV:
      - kucwangciswe ukusebenzisa inethiwekhi yeshishini njengothutho lwenethiwekhi yokucupha ividiyo
      - kuyimfuneko ukubonelela ngezibuko ze-PoE kwiikhamera zeCCTV
    - Iinkqubo ezingenazingcingo:
      - Kwixesha elizayo, kucwangciswe ukwazisa iziseko zoncedo ezingenazingcingo zokushukumiseka kwabasebenzi
      - kuyimfuneko ukubonelela ngezibuko ze-PoE kwiindawo zokufikelela
    - Uhlahlo lwabiwo-mali, ixesha kunye neemfuno zezixhobo:
      - sebenzisa izixhobo ezikhoyo
      - xa uyila uthungelwano, thatha ingqalelo ukuba kunokwenzeka ukwandisa umthamo womnatha we-N kwiminyaka engaphambili
      - xa uyila inethiwekhi, qwalasela inkxaso yazo zonke iintlobo zemisebenzi yokhuseleko - nantsi uluhlu lwemisebenzi, ukusuka kwi-port-security kunye nokuphela ngokuqinisekiswa kunye nokugunyaziswa kwabasebenzisi usebenzisa i-802.1x.
      - gcina kangangoko kunokwenzeka iindawo ezibalulekileyo zenethiwekhi ezibaluleke kakhulu - ingundoqo kunye neziko ledatha, kwaye unikeze ithuba lokugcinwa kweendawo ezibalulekileyo zesibini - iindawo zokusabalalisa
      - Uhlahlo lwabiwo-mali lweprojekthi kufuneka lubonelele ngenkxaso-mali engaguqukiyo kwizigaba ezininzi
      - isixa sohlahlo lwabiwo-mali - apha ishishini ngalinye lizigqibela ngokwalo, likhokelwa zizibonakaliso zalo zemali
      - imihla ebekiweyo - kwimeko efanelekileyo kakhulu, akuyi kubakho imihla ecacileyo, kuba le yiprojekthi yenkampani yangaphakathi ephunyezwa ngabasebenzi bayo, okanye baya kuba bekhululekile - umzekelo, unyaka o-1 (okanye ngaphezulu). Kwimeko embi kakhulu, ingaba ukusuka kwiinyanga ezi-3 ukuya kwiinyanga ezintandathu.
    - Sombulula iingxaki zangoku zenethiwekhi:
      - ilahleko yepakethe
      - iingxaki nge-DHCP kutshintsho lofikelelo olungaphezulu okanye olungaphantsi olukrelekrele olunxulumene nokusetyenziswa kosapho lwe-STP lwemigaqo yokulwa iilophu kumazibuko okufikelela.
      - lahla ubukho be-server ye-DHCP kwi-VLAN nganye yabasebenzi
      - ukwenzeka kokutshintsha amaluphu adityaniswe nokutshintshwa okungagunyaziswanga kotshintsho olulawulwayo/ olungalawulwayo kwiiofisi kunye noqhagamshelo lwezixhobo ezahlukeneyo kuzo.
      - uluhlu luyaqhubeka...
    UCwangciso lweNyathelo - ukubonakaliswa kwemeko yenethiwekhi yakho yangoku, njengoko sele ndibhale, kuxhomekeke kubukho benkqubo yokuhlola ekumgangatho ophezulu kunye nomgangatho wamaxwebhu ayo. Kweli nyathelo kuya kufuneka:
    - ubuncinane, zoba uthungelwano olukhoyo ukuze uhlalutywe ngakumbi
    - qokelela idatha kwisixhobo:
      - traffic kumazibuko amakhulu
      - iimpazamo kwizibuko
      - Umthwalo we-CPU kunye nokusetyenziswa kwememori kwiitshintshi kunye nee-routers
      - chaza izicwangciso ze-L2-L3 ngeeVLAN kunye needilesi ze-IP
    - phakamisa imizobo yendlela yentambo:
      - i-fiber circuits kunye ne-wiring diagrams ze-optical cross-connects
      - imizobo yokuhanjiswa kwekhebula lobhedu phakathi kwamagumbi omncedisi kunye nemigangatho
      - imizobo yokuhanjiswa kwentambo yobhedu phakathi kwemigangatho kunye namagumbi
      - khangela ubukho be-optical cross-connects kunye neepatch panels kumagumbi omncedisi kunye neekhabhinethi
    - khangela iisekethe zonikezelo lwamandla kwiseva kunye neekhabhinethi zomgangatho
    - khangela ubukho be-UPS kunye nebhetri kwiindawo ezibalulekileyo
    - Hlalutya zonke iinkcukacha
    Ngokusekwe kwidatha esuka kwinqanaba lokulungiselela, ndize nomzobo oqikelelweyo onengqiqo:
    
    Okulandelayo, ngokulandela indlela yeemodyuli, kuyafuneka ukuba uqaqambise amanqanaba kunye neemodyuli zeshishini:
    
    Kweli nqaku andizukuchukumisa uMda, kodwa ndiza kukhumbula ngokufutshane iithisisi ezisisiseko kwimodyuli nganye yeKhampasi:
    - Ukufikelela - kweli nqanaba kufuneka kubonelele:
      - inani elifunekayo lamazibuko okufikelela komsebenzisi kuthungelwano
      - ukuphunyezwa kwemigaqo-nkqubo yokhuseleko - ukuhluza i-traffic kunye neeprothokholi
      - Uxinzelelo lwesizinda sosasazo kunye nokwahlulahlulwa kwenethiwekhi kusetyenziswa iiVLAN
      - ukuphunyezwa kweeVLANs ezahlukeneyo zetrafikhi yelizwi
      - Inkxaso yeQoS
      - inkxaso yokufikelela kumazibuko e-PoE
      - IP inkxaso yemulticast
      - ukunyamezela impazamo yonxibelelwano oluphezulu kunye nenqanaba losasazo (elifunekayo)
    - Ukuhanjiswa - kweli nqanaba okulandelayo kufuneka kuqinisekiswe:
      - inani elifunekayo lamazibuko ukudibanisa iiswitshi zofikelelo
      - ukudityaniswa kunye nokungafuneki kwamakhonkco okutshintsha ukufikelela
      - IP umzila
      - ukuhluza ipakethi
      - Inkxaso yeQoS
      - ukunyamezela impazamo kwinqanaba leekhonkco, izixhobo kunye nokunikezelwa kwamandla (okunqweneleka kakhulu)
    - Undoqo kufuneka ubonelele:
      - ukutshintshwa kwesantya esiphezulu kunye nomzila wepakethi
      - inani elifunekayo lamazibuko ukudibanisa iiswitshi zokusasaza
      - inkxaso yomzila we-IP kunye neeprothokholi zomzila eziguquguqukayo kunye nokudibanisa okukhawulezileyo kwenethiwekhi
      - Inkxaso yeQoS
      - umsebenzi wokhuseleko ukukhusela ukufikelela kwizixhobo kunye nenqwelomoya yokulawula
      - ukunyamezela impazamo kwihardware kunye nenqanaba lonikezelo lwamandla (kuyafuneka)
    - Iziko ledatha - umaleko wothungelwano lwale modyuli kufuneka unike:
      - amakhonkco onxibelelwano olukhawulezayo
      - inani elifunekayo lamazibuko ukudibanisa abancedisi
      - ukungafuneki kwamakhonkco onxibelelwano phakathi kweeseva kunye nokutshintsha kweziko ledatha, naphakathi kokutshintsha kweziko ledatha kunye nondoqo womnatha (ofunekayo)
      - ukungafuneki kwezixhobo kunye nonikezelo lombane (kuyafuneka)
      - Inkxaso yeQoS
    Emva koko, kufuneka sibale izibuko zethu kunye namakhonkco onxibelelwano kwaye sigqibe iimfuno.
    Inqanaba lofikelelo - itheyibhile yokubala izibuko
    Ke, sifumene idatha malunga nokuhanjiswa kwamazibuko okufikelela kuzo zonke izakhiwo. Ngoku kufuneka uhlalutye iimfuno zomgangatho wofikelelo kunye nezimvo kunye nokhetho lwesisombululo.
    Inqanaba lokufikelela - iimfuno kunye nokhetho lwesisombululo
    Okulandelayo, siya kubala amazibuko kunye namakhonkco onxibelelwano kula manqanaba alandelayo:
    Inqanaba lokusasaza
    Inqanaba le-kernel
    Inqanaba leziko ledatha
    Xa sibala, sifumene oku kulandelayo:
    - inqanaba lofikelelo - I-24- kunye ne-48-i-port access switches iyadingeka, ngokukhethekileyo kunye ne-1Gb yokufikelela kwii-port kunye ne-optical uplink ye-SFP izibuko kunye nenkxaso ye-PoE kunye nokusebenza okubanzi:
      - lilonke baya kubonelela 504 ukufikelela amazibuko, leyo, ngokomgaqo, iya kugubungela iimfuno izibuko spare ukuba isigqibo senziwe ukusebenzisa 2 izibuko kwisikhululo somsebenzi - i yefowuni IP kunye nedatha data.
      - Kuyenzeka ukuba usebenzise iswitshi enye ye-48-port kunye nokusebenza kwe-PoE kumgangatho ngamnye, ukubonelela ngezibuko zokufikelela kwiimfuno:
        
        uvimba - malunga ne-102 yamazibuko asecaleni (22%) kwizakhiwo eziphambili. Kwizakhiwo ezongezelelweyo kancinci - 25%.
        
        ukubonwa kwevidiyo
        
        inethiwekhi engenazingcingo
    - inqanaba lokuhambisa - ukutshintshwa kuyadingeka kunye nesethi yezibuko ze-SFP ukusuka kwi-12 ukuya kwi-48 izibuko ubuncinane ubuncinane be-2 SFP + izibuko, kunye nezakhono zokupakisha kunye nokusebenza okwandisiweyo, kunye nobukho bombane obungafunekiyo.
    - inqanaba le-kernel - ukutshintshwa kwesantya esiphezulu ukusuka kwi-12 ukuya kwi-24 SFP / SFP + izibuko kunye nenkxaso ye-stacking kunye nokudibanisa kunye nenkxaso ye-MC-LAG iyafuneka. Ndimele ndiqaphele ukuba kunokwenzeka ukusebenzisa izixhobo zomzila ukulinganisa i-traffic. Izizukulwana zamva nje zokutshintsha kwe-L3 kunye nee-router zixhasa i-ECMP kunye nokulinganisa i-traffic kwiindlela ezi-4 okanye ngaphezulu ezine-metric efanayo.
    - inqanaba leziko ledatha - ukutshintsha kunye ne-8 ukuya kwi-24 SFP / SFP + izibuko kunye nenkxaso yokubeka zombini kunye nokudibanisa kunye nenkxaso ye-MC-LAG iyafuneka.
    Idayagram yothungelwano ekujoliswe kuyo igqibele ngokuba onjalo
    Ukukhetha iiswitshi ezigqithisileyo zokuphunyezwa kweprojekthi
    Ewe, ngoku sifikile kwinto ephambili - umzuzu wokukhetha utshintsho lokuphunyezwa kweprojekthi yethu. Olu tshintsho lulandelayo lufanelekile kwisekethe ekujoliswe kuyo enesiphumo:
    kwinqanaba
    Umzekelo
    Izibuko
    inkcazelo
    nucleus
    x620-16x-Isiseko *
    x670-G2-48x-4q-Base*
    16 x 10GE SFP +
    
    48x10GE SFP + kunye ne-4x40GE QSFP +
    Kwiimfuno ezisisiseko ze-kernel:
    - amakhonkco ngesantya esiphezulu
    - umzila ophezulu kunye nokusebenza kokhuseleko
    - unikezelo lwamandla olongezelelweyo backup izixhobo zombane
    - ukupakisha kunye nenkxaso yokudibanisa
    Ngeemfuno ezincinci, i-x620 series switch iya kwenza.
    Ukuba uthe wandisa iimfuno zenani lamazibuko kunye nokusebenza okubanzi, kuya kufuneka uqwalasele utshintsho lwe-x670-G2.
    Iziko ledatha
    x620-16x-Isiseko*
    x590-24x-1q-2c*
    x670-G2-48x-4q-Base*
    16 x 10GE SFP +
    
    24x10GE SFP, 1xQSFP+, 2xQSFP28
    
    48x10GE SFP + kunye ne-4x40GE QSFP +
    Ngeemfuno ezisisiseko zeziko ledatha:
    - amakhonkco ngesantya esiphezulu
    - unikezelo lwamandla olongezelelweyo backup izixhobo zombane
    - ukupakisha kunye nenkxaso yokudibanisa
    Ngeemfuno ezincinci, i-x620 series switch iya kwenza.
    Kwimeko yeemfuno ezandisiweyo zenani lamazibuko kunye nokusebenza okubanzi, kuyafaneleka ukuqwalasela i-x670-G2 kunye ne-x590-24x-1q-2c series switch.
    ukuhanjiswa
    X460-G2-24x-10GE4-Base*
    X460-G2-48x-10GE4-Base*
    24x1GE SFP, 8x1000 RJ-45, 4x10GE SFP+
    
    48x1GE SFP, 4x10GE SFP +
    Ngeemfuno ezisisiseko zokusasaza:
    - inani elifunekayo lamazibuko okukhanya
    - unikezelo lwamandla olongezelelweyo backup izixhobo zombane
    - ukupakisha kunye nenkxaso yokudibanisa
    - umsebenzi ofunekayo we-L3
    Uluhlu lwe-x460-G2 utshintsho lufanelekile. Ubukho bamandla ombane angafunekiyo kunye nokukwazi ukwandisa kunye nokongeza i-10G, i-CX (ye-stacking) kunye ne-QSFP + izibuko zibenza ukuba batshintshe ngokufanelekileyo umgca wokusabalalisa kunye namachweba ukuya kwi-1 Gb.
    fikelela
    X440-G2-24p-10GE4*
    X440-G2-24t-10GE4*
    X440-G2-48t-10GE4*
    X440-G2-48p-10GE4*
    24x1000BASE-T(4 x SFP combo), 4x10GE SFP+ (i-PoE budget 380 W)
    
    24x1000BASE-T(4 x SFP combo), 4x10GE SFP+
    
    24x1000BASE-T (4 x SFP combo), 4x10GE SFP+ combo izibuko
    
    I-48x1000BASE-T (4 x SFP combo), i-4x10GE SFP+ i-combo port (i-Budget ye-PoE 740 W)
    Ngeemfuno zofikelelo:
    - inani elifunekayo lamazibuko okufikelela
    - Inkxaso ye-PoE/PoE+
    - ukusebenza kunye nokukwazi ukwandisa amazibuko
    - ibhonasi eyongezelelweyo ngendlela yenkxaso yokupakisha izibuko ze-10Gb ngaphandle kwebhokisi
    Ndincoma ukuba ubeke ingqalelo kulo mgca ngenxa yokuguquguquka kwayo ngokubhekiselele kumachweba, ukusebenza kunye nokusebenza.
    *iinkcukacha zokutshintsha okukhethiweyo zinokufumaneka kwinqaku lokuqala loluhlu - uphononongo lokutshintsha Okugqithisileyo
    Ndingaligqiba eli nqaku apha, kodwa ndingathanda ukuqaqambisa imiba emi-2 eyongezelelweyo eya kuthi nayiphi na injineli iya kudibana nayo xa iphuhlisa okanye iphucula inethiwekhi yayo:
    - sebenza ngeendlela zekhebula - iifayili kunye nemigca yobhedu
    - Idilesi yeIP
    Ukusebenza ngeefibers
    Ngaphezulu ndinike iskim ekujoliswe kuso ekufuneka kufikelelwe kuso. Ukuyiphumeza, inani elilandelayo loqhagamshelo lwezixhobo liyafuneka:
    inani lamakhonkco onxibelelwano
    Njengoko kunokubonwa kwitheyibhile, inani elincinci leefayili ezifunekayo ukuze kuqinisekiswe ukunyamezela kwephutha kumanqanaba enethiwekhi (imodyuli engundoqo, amaziko edatha kunye nokusabalalisa kwizakhiwo ze-2) iziqwenga ze-10.
    Kwinqanaba le-network characterization, sifumene ukuba kukho imicu ye-8 kuphela kwintambo phakathi kwezakhiwo. Yintoni onokuyenza kwimeko enjalo?
    Ndiza kunika izisombululo ezimbalwa:
    - Isinyathelo sokuqala esicacileyo kukusebenzisa iifiber zamahhala kwikhebula phakathi kweSakhiwo 1 - iSakhiwo soku-1 kunye neSakhiwo 1 - iSakhiwo sesi-2 (njengoko unokubona kwitheyibhile - kuphela i-2 ye-8 ye-fibers kwintambo nganye isetyenzisiweyo). Ukwenza oku, kwanele ukufaka i-optical cross-connects phakathi kwe-cross-connects kwimeko ye-1 kwaye, ukuba kuyimfuneko, sebenzisa iimodyuli ze-SFP kunye nokugcinwa kwebhajethi ye-optical.
    - Isinyathelo sesibini kukusetyenziswa kweteknoloji yeCWDM - i-multiplexing ye-carrier wavelengths ngaphakathi kwefayibha enye. Le teknoloji inexabiso eliphantsi kune-DWD kwaye ilula kakhulu ukuyiphumeza. Ngokwenene, iimfuno zisemgangathweni we-optical fibers kunye ne-SFP / SFP + i-transceivers yobude obuthile kunye nohlahlo lwabiwo-mali. Njengoko benditshilo kwinqaku elidlulileyo, amandla okutshintsha ukuqonda i-transceivers yomntu wesithathu anokwenza ubomi bethu bube lula kwaye anciphise iindleko zenkunzi yokwakhiwa kweentambo ezongezelelweyo ze-optical.
    - Isinyathelo sesithathu kukuqwalasela ithuba lokunyusa iifayili ngokubeka iintambo ezongezelelweyo ze-optical.
    Okulandelayo sijonga inani lemicu phakathi kwezakhiwo ezineenguqu zokusasaza ezifakiweyo kunye nezongezelelweyo. izakhiwo 2-10. Apha, kwakhona, ayizizo zonke izinto ezicacileyo:
    - okokuqala, akukho micu yaneleyo yokuphumeza inkqubo yethu ekujoliswe kuyo - iifayili ezi-2 ngokutshintsha (njengoko sikhumbula, sineentambo ezine-OBs ngemeko nganye)
    - okwesibini, nokuba kukho inani elaneleyo leefayili phakathi kwezakhiwo, iifayili ze-MMF zisetyenziselwa ngaphakathi kwezakhiwo, ezingayi kusivumela ukuba sidibanise i-SMF kunye ne-MMF fibers (ndithetha malunga nemigama phakathi kwezakhiwo ezingaphezu kweemitha ezingama-300-400)
    Kwiimeko ezinjalo, oku kulandelayo kunokuqwalaselwa:
    - Ubonelelo lweswitshi nganye ye-SMF enemicu:
      - ukuba umgama uyavuma, unokolula iintambo ezongezelelweyo ezinde phakathi kokutshintsha. Ngaxa lithile sasisebenzisa iintambo zokuvala eziziimitha ezingama-30-50 ubude.
      - beka intambo ye-SMF ebonakalayo enexabiso eliphantsi phakathi kweekhabhathi
      - njengendlela yokugqibela, sebenzisa abaguquli abahlukeneyo be-SMF-MMF
    - Ukunciphisa inani lefayibha esetyenziswa phakathi kwezakhiwo, unako:
      - sebenzisa i-stacking ukusebenza kwe-x440-G2 yokufikelela kwi-switch switch - ngelixa usebenzisa i-1 SMF fiber kwi-switch nganye emgangathweni, eya kukuvumela ukuba usebenzise i-6 fibers kunye namachweba kwicala ngalinye endaweni ye-3 fibers kunye namazibuko.
      - sebenzisa iintsinga ezi-2 ukudibanisa iswitshi yokuqala kwisebe kunye neyokugqibela. Aggregate links on edge access switches and use STP protocols kwiringi eneziphumo.
    Idilesi ye-IP
    Apha ndiza kunika idilesi eqikelelweyo yokubala kwisekethe yethu.
    Okwangoku sineenethiwekhi ezininzi zeklasi B - 172.16.0.0/16. Xa ubala indawo yedilesi ye-IP, ndiya kukhokelwa zezi ngqwalasela zilandelayo:
    - I-4 bits ye-octet yesibini iya kubonisa izakhiwo - 172.16.0.0/12.
    - Octet 3 iya kubonisa inombolo yomgangatho kwisakhiwo.
    - I-Octet 3 = 255 iya kwabelwa i-point-to-point izixhobo zekhonkco kunye nenethiwekhi yokulawula.
    - ulawulo olunye VLAN umgangatho ngamnye ukulawula utshintsho.
    - umsebenzisi omnye VLAN iswitshi nganye (i-avareji 24 izibuko).
    - enye Voice VLAN iswitshi nganye (i-avareji 24 izibuko).
    - enye VLAN yenkqubo yokucupha ividiyo ngomgangatho ngamnye.
    - vlan enye kwizixhobo Wi-Fi umgangatho ngamnye.
    Ndigqibezele ngeetafile ezinje:
    inethiwekhi 172.16.0.0/14
    inethiwekhi 172.20.0.0/14
    Kwitheyibhile engentla, ndinike ulwabiwo oluqikelelweyo lothungelwano kwizakhiwo kunye nemigangatho kwelinye icala, kunye nothungelwano (umsebenzisi, ulawulo kunye nenkonzo) kwelinye.
    Ngapha koko, ukukhetha inethiwekhi engwevu 172.16.0.0/12 ayisiyiyo eyona ilungileyo, kuba isithintele kwinani lothungelwano (ukusuka kwi-16 ukuya kwi-31) yezakhiwo, kwaye kukho neeofisi ezikude ezifuna ukugawula iibhloko zenethiwekhi. , mhlawumbi enye ingcono kakhulu iya kuba nenketho usebenzisa i-10.0.0.0/8 networks, okanye ukwabelana nge-172.16.0.0/12 inethiwekhi (umzekelo, kwiimfuno zenkonzo kunye neeseva) kunye ne-10.0.0.0/8 (yenethiwekhi yomsebenzisi).
    Ngokubanzi, indlela yokwabiwa kothungelwano lwe-IP nayo imodyuli kwaye kuyacetyiswa ukuba uhambelane nemithetho yokushwankathela ii-subnets zibe sisishwankathelo sothungelwano kumanqanaba okusasazwa, kunye nakwii-router zemida kumasebe akude. Oku kwenziwa ngenxa yezizathu ezininzi:
    - ukunciphisa iitafile zomzila kwiirouters
    - ukunciphisa uthungelwano lwenkonzo yeendlela zokuziphatha (zonke iintlobo zemiyalezo yohlaziyo, xa ii-subnets ezisecaleni zingafumanekiyo)
    - ukwenza lula ulawulo kunye nokufundeka ngcono kothungelwano lwe-L3
    Nangona, malunga namanqaku ama-2 okuqala, kuyafaneleka ukuba uqaphele ukuba amandla ee-router zanamhlanje aphezulu kakhulu kunezo ze-15-20 iminyaka edlulileyo kwaye zivumele ukuba ziqulathe iitafile ezinkulu zomzila kwi-RAM yazo, kunye nomlinganiselo wexabiso kunye nomthamo wejelo lonxibelelwano. iye yehla xa kuthelekiswa namaxabiso ukusuka kumaxesha okusetyenziswa ngokubanzi kwemijelo ye-E1/T1 (G.703).
    isiphelo
    Bahlobo, kweli nqaku ndizamile ukuthetha ngokufutshane kangangoko malunga nemigaqo esisiseko yokuyila uthungelwano lwekhampasi. Ewe, bekukho izinto ezininzi, kwaye oku nangona ndingakhange ndichukumise kwizihloko ezinje:
    - umbutho womda weshishini (kwaye eli libali elahlukileyo kunye nokutshintsha, imida, i-firewall, iinkqubo ze-IPS / IDS, i-DMZ, i-VPN kunye nezinye izinto)
    - umbutho wothungelwano lwe-Wi-Fi
    - umbutho wothungelwano lweVoIP
    - umbutho wamaziko edatha
    - ukhuseleko (kwaye eli ikwalihlabathi lalo elahlukileyo, elihambelana nomthamo kunye neemfuno ezingekho ngaphantsi koyilo lwesiseko sothungelwano olusulungekileyo, kwaye ngamanye amaxesha lude lugqithe)
    - ubunjineli bamandla
    - uluhlu luyaqhubeka kwaye luqhubeke
    Ngapha koko, ukuyila kunye nokwakha inethiwekhi yeshishini ngumsebenzi onzima kakhulu ofuna ixesha elininzi kunye nezixhobo.
    Kodwa ndiyathemba ukuba inqaku lam liya kukunceda ukuba uvavanye kwaye uqonde kwinqanaba lokuqala indlela yokwenza lo msebenzi.
    Eli ayilonqaku lokugqibela Iinethiwekhi eziGqithisileyo, ke hlala ubukele (yocingo, Facebook, VK, TS Solution Blog)!