3. Imeko yoPhumezo lweNdawo yokuHlola

Kumanqaku amabini okugqibela (kuqala, okwesibini) sijonge umgaqo wokusebenza Jonga iPoint Maestro, kunye neenzuzo zobugcisa kunye nezoqoqosho zesi sisombululo. Ngoku ndingathanda ukuqhubela phambili kumzekelo othile kwaye ndichaze imeko enokwenzeka yokuphumeza i-Check Point Maestro. Ndiza kubonisa inkcazo eqhelekileyo kunye ne-topology yenethiwekhi (L1, L2 kunye ne-L3 diagrams) usebenzisa i-Maestro. Ngokwenene, uya kubona iprojekthi esemgangathweni eyenziweyo.

Masithi sigqibe ekubeni siza kusebenzisa iqonga elinokwehla lokuHlola i-Maestro. Ukwenza oku, makhe sithathe inyanda yamasango amathathu angama-6500 kunye neokhestra ezimbini (ukunyamezela iimpazamo ngokupheleleyo) - I-CPAP-MHS-6503-TURBO + CPAP-MHO-140. Umzobo wonxibelelwano lomzimba (L1) uya kujongeka ngolu hlobo:



Nceda uqaphele ukuba kunyanzelekile ukudibanisa izibuko zoLawulo lwee-orchestrators, ezibekwe kwipaneli yangasemva.

Ndiyakrokrela ukuba izinto ezininzi zinokungacaci kakuhle kulo mfanekiso, ngoko ke ndiza kunika umzobo oqhelekileyo wenqanaba lesibini lemodeli ye-OSI:

Amanqaku ambalwa abalulekileyo malunga nesikimu:

• Ii-orchestrators ezimbini zihlala zifakwe phakathi kokutshintsha okungundoqo kunye nokutshintsha kwangaphandle. Ezo. ukwahlukaniswa ngokwasemzimbeni kwecandelo le-Intanethi.
• Kucingelwa ukuba "ingundoqo" yi-stack (okanye i-VSS) yokutshintsha ezimbini apho i-PortChannel ye-4 izibuko ihlelwe. Kwi-HA epheleleyo, i-orchestrator nganye iqhagamshelwe kwiswitshi nganye. Nangona ungasebenzisa ikhonkco elinye ngexesha, njengoko kwenziwa ngeVLAN 5 - inethiwekhi yolawulo (iikhonkco ezibomvu).
• Amakhonkco anoxanduva lokuhambisa i-traffic evelisayo (ephuzi) ixhunyiwe kwii-gigabit port ze-10. Iimodyuli ze-SFP zisetyenziselwa oku - CPAC-TR-10SR-B
• Ngendlela efanayo (i-HA egcweleyo), ii-orchestrators zidibanisa nokutshintsha kwangaphandle (iikhonkco eziluhlaza okwesibhakabhaka), kodwa usebenzisa izibuko zegigabit kunye neemodyuli ze-SFP ezihambelanayo - CPAC-TR-1T-B.

Amasango ngokwawo aqhagamshelwe kwiokhestra nganye esebenzisa iintambo ezikhethekileyo zeDAC eziza zibandakanya (Intambo yoQoboshelo oluthe ngqo (DAC), 1m - CPAC-DAC-10G-1M):

Njengoko kunokubonwa kumzobo, kufuneka kubekho unxibelelwano longqamaniso phakathi kwabacwangcisi (iikhonkco ezipinki). Ikhebula elifunekayo likwafakwe kwikiti. Inkcazo yokugqibela ibonakala ngolu hlobo:

Ngelishwa, andikwazi ukupapasha amaxabiso esidlangalaleni. Kodwa unako ngamaxesha onke bacele kwiprojekthi yakho.

Ngokuphathelele isekethe ye-L3, ibonakala ilula kakhulu:

Njengoko ubona, onke amasango kwinqanaba lesithathu akhangeleka njengesixhobo esinye. Ukufikelela kwiiokhestra kunokwenzeka kuphela ngothungelwano loLawulo.

Oku kuqukumbela inqaku lethu elifutshane. Ukuba unemibuzo malunga nemizobo okanye ufuna imithombo, shiya izimvo okanye bhala ngeposi.

Kwinqaku elilandelayo siza kuzama ukubonisa indlela i-Check Point Maestro ehlangabezana ngayo nokulinganisa kunye nokuqhuba uvavanyo lomthwalo. Ngoko hlala ubukele (yocingo, Facebook, VK, TS Solution Blog)!

I-PS Ndivakalisa umbulelo wam ku-Anatoly Masover kunye no-Ilya Anokhin (i-Check Point inkampani) ngoncedo lwabo ekulungiseleleni le mizobo!

umthombo: www.habr.com