Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Ngaphambi kokuqala kwekhosi "Injineli yeNethiwekhi" Sikulungiselele inguqulelo yezinto ezinomdla kuwe

Kukho into enye enkulu malunga ne-DMVPN endiye ndadibana nayo kwixesha elidlulileyo: I-DMVPN Per-Tunnel QoS. Kuyabonakala ukuba ayindim ndedwa (njengempuku yelebhu) ocinga ukuba le nto ipholile. Ngalo lonke ixesha ndibonisa oku ebantwini, ndibona amehlo abo ekhanya njengoko izibane ezincinci ziqala ukukhanya kwiintloko zabo zibonisa imibono apho banokuyisebenzisa khona.

Lixesha lokuba ukhuphe igeek yakho!

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Masenze ngathi Isebe_1 и Isebe_2 bakwitonela enye ye-DMVPN kunye ne-DMVPN hub "Foxtrot14". Singathanda ukusebenzisa umgaqo-nkqubo we-QoS ukusuka kwindawo ukuya kwi-spock Isebe_2, kodwa hayi ngenxa Isebe_1. Kuba zikwitonela ye-mGRE enye, sikwenza njani oku?

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Eyona nto kufuneka siyenze kukuba:

  • Kwihabhu yeDMVPN:
    1. Siqwalasela kwicandelo loqwalaselo lwehlabathi ezahlukeneyo iinkqubo zeQoS ofuna ihabhu "inikeze" njengemigaqo-nkqubo yeQoS yee-spoks.
    2. Sisebenzisa yonke imigaqo-nkqubo oya "ukunikezela" kwi-spocks kujongano lwetonela yeDMVPN usebenzisa umyalelo. Iqela lemephu ye-ip nhrp
  • Kwi-spock ye-DMVPN, misela ujongano lwe-DMVPN ngegama leqela elinemephu ongathanda ukulisebenzisa kulo.

Kwihabhu yeDMVPN

Masiyiqonde:

"1) Qwalasela kwicandelo loqwalaselo lwehlabathi lonke imigaqo-nkqubo yeQoS ofuna ihabhu "inikeze" njengemigaqo-nkqubo yeQoS yee-spoks"

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Ke ngokusisiseko into oyibonayo apha ngasentla kukuba silungiselela hub yethu ye-DMVPN ye-5 eyahlukeneyo ye-spokam QoS.

  1. 1.5Mbps
  2. 2Mbps
  3. 5Mbps
  4. 10Mbps
  5. Akukho mda

"2) Sisebenzisa yonke imigaqo-nkqubo oya "kuyinikezela" kwi-spocks kwi-tunnel ye-DMVPN ujongano usebenzisa i-ip nhrp imephu yomyalelo weqela"

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Kwi-DMVPN Spock

"Kwi-spock ye-DMVPN, misela ujongano lwe-DMVPN ngegama leqela elinemephu ongathanda ukulisebenzisa kulo."

Ngoko ke ndiza kudlulela phambili I-Echo3 (iSebe_2) kwaye ubeke umyalelo “ip nhrp group spoke-2Mbps” kujongano lwetonela yeSpock.

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Kuza kwenzeka ntoni ngoku? Echo3 ibeka nje igama elithi "spoke-2Mbps" kwisicelo sobhaliso se-NHRP. Voila! Ngokwenene ilula ngolo hlobo. Ucocekile, akunjalo? Ukuba ufuna ukuhlaziya okuncinci kubhaliso lwe-NHRP, funda Ukonwabela kwiLebhu: I-Sniffer ikhangela i-DMVPN Tunnel Startup. Apho uya kufumana iziseko zokucela ubhaliso lwe-NHRP.

Makhe sibone ukuba ikhangeleka njani kwinethiwekhi nakwi-hub ye-DMVPN.

Ungafumana ifayile yangoku pcapesiza kuyiqwalasela kunye

dmvpn_tunnel_startup_per_tunnel_QoS.pcap <-Ikwi-Dropbox yam kawonke-wonke kwaye ndiceba ukuyigcina apho iminyaka embalwa.

Ngaba ulungile?

Siza kujonga iSakhelo se-18 kunye neSakhelo se-21 ngokumalunga nothungelwano olulandelayo kunye needilesi ze-IP. Beka oku kufutshane nomkhondo we-sniffer ukuze ukwazi ukuthelekisa ngcono iidilesi ze-IP.

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Ngoko ke eyokuqala sisikhokelo 18. Isicelo sobhaliso lwe-NHRP esivela I-Echo3 (iSebe_2) ibonakala iqhelekile ngokupheleleyo de sifike kwi-NHRP Vendor Private Extension.

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Ngaba uyafuna ukuzonwabisa nge-geek kuwe?
www.branah.com/ascii-converter

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Kwenzeka ntoni emva kokuba iSakhelo se-18 sibethe i-DMVPN hub Foxtrot14? Ngokuba I-Echo3 (iSebe_2) ifuna ukuba "spoke-2Mbps" isetyenziswe kuyo ayithethi ukuba olu lukhetho olumiselweyo kwi hub. Ngoko uya kuphinda ubone isakhelo se-21 njengempendulo kwi-prompt yokubhalisa eqinisekisa "i-spoke-2Mbps" kwicandelo lomthengisi.

Ngoku kuthweni?

Masiqhubele phambili kwi Foxtrot14 kwaye masibone ukuba ucinga ntoni ngale meko.

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS

Iyamangalisa! Kwitonela efanayo ye-mGRE sine-QoS efakwe kwi-hub yokuthetha ngetrafikhi isebe_2, kodwa hayi isebe_1.

*QAPHELA: Esi sithuba sapapashwa okokuqala kule ndawo ngo-2015. Yagqityelwa ukuhlaziywa yaza yafomathwa nge-15 kaFebruwari 2020.

Masiqonde ngokusebenza: i-DMVPN kunye ne-Per-Tunnel QoS


umthombo: www.habr.com

Thenga ukusingathwa okuthembekileyo kwiindawo ezinokhuseleko lweDDoS, iiseva zeVPS VDS 🔥 Thenga ukusingathwa kwewebhusayithi okuthembekileyo ngokhuseleko lwe-DDoS, iiseva zeVPS VDS | ProHoster