Ukuma onokuthi uchukumise kwilebhu yethu ukuba uyafuna.
I-SD-WAN kunye ne-SD-Access ziindlela ezimbini ezahlukeneyo zobunini bokwakha uthungelwano. Kwixesha elizayo, kufuneka badibane kwinethiwekhi enye engaphezulu, kodwa okwangoku bayasondela. Ingqiqo yile: sithatha inethiwekhi ukusuka kwiminyaka yoo-1990 kwaye sikhupha zonke iipatches eziyimfuneko kunye neempawu kuyo, ngaphandle kokulinda ukuba ibe ngumgangatho omtsha ovulekileyo kwenye iminyaka eyi-10.
I-SD-WAN yipatch ye-SDN kuthungelwano lwamashishini asasazwayo. Uthutho lwahlukile, ulawulo lwahlukile, ngoko ke ulawulo lwenziwe lula.
Iipros - zonke iindlela zonxibelelwano zisetyenziswa ngokusebenzayo, kubandakanywa ne-backup. Kukho ukuhanjiswa kweepakethi kwizicelo: yintoni, ngeliphi itshaneli kunye nokuba yintoni ephambili. Inkqubo eyenziwe lula yokuhambisa amanqaku amatsha: endaweni yokukhupha i-config, chaza nje idilesi yomncedisi weCisco kwi-Intanethi enkulu, iziko ledatha ye-CROC okanye umthengi, apho i-configs ngokukodwa kwinethiwekhi yakho ithathwa kuyo.
I-SD-Access (i-DNA) i-automation yolawulo lwenethiwekhi yendawo: ukucwangciswa ukusuka kwindawo enye, i-wizards, i-interfaces efanelekileyo. Enyanisweni, enye inethiwekhi yakhiwe ngezothutho ezahlukeneyo kwinqanaba leprotocol phezulu kweyakho, kwaye ukuhambelana namanethiwekhi amadala kuqinisekiswa kwimida yeperimeter.
Siza kujongana nale nto ingezantsi.
Ngoku eminye imiboniso kwiibhentshi zovavanyo kwilebhu yethu, ukuba ijongeka njani kwaye isebenza njani.
Masiqale nge-SD-WAN. Iimpawu eziphambili:
- Ukwenziwa lula kokuthunyelwa kwamanqaku amatsha (ZTP) - kucingelwa ukuba ngandlela-thile uyondla inqaku ngedilesi yomncedisi kunye nezicwangciso. Inqaku liyankqonkqoza kulo, lifumana i-config, liyiqengqe kwaye lifakwe kwiqela lakho lolawulo. Oku kuqinisekisa iZero-Touch Provisioning (ZTP). Ukuhambisa isiphelo, injineli yenethiwekhi ayifuni ukuhamba ukuya kwindawo. Into ephambili kukuvula isixhobo ngokuchanekileyo kwisiza kwaye udibanise zonke iintambo kuyo, ngoko ke izixhobo ziya kudibanisa ngokuzenzekelayo kwinkqubo. Unokukhuphela i-configs ngemibuzo ye-DNS kwilifu lomthengisi kwi-USB drive edibeneyo, okanye unokuvula i-hyperlink kwi-laptop eqhagamshelwe kwisixhobo nge-Wi-Fi okanye i-Ethernet.
- Ukwenziwa lula kolawulo lwenethiwekhi yesiqhelo - config ukusuka templates, imigaqo-nkqubo jikelele, centrally iqwalaselwe ubuncinane amasebe amahlanu, ubuncinane 5. Yonke into evela kwindawo enye. Ukunqanda uhambo olude, kukho ukhetho olulula kakhulu lokubuyela ngokuzenzekelayo kuqwalaselo lwangaphambili.
- Ulawulo lwendlela yosetyenziso-ukuqinisekisa umgangatho kunye nohlaziyo oluqhubekayo lwesiginesha yesicelo. Imigaqo-nkqubo iqwalaselwe kwaye iqengqeleke embindini (akukho mfuneko yokubhala kunye nokuhlaziya iimephu zendlela zomzila ngamnye, njengangaphambili). Uyabona ukuba ngubani othumela ntoni, phi kwaye yintoni.
- Ukwahlulahlula kwenethiwekhi. IiVPN ezizimeleyo ezizimeleyo ngaphezulu kweziseko zophuhliso - nganye inendlela yayo. Ngokungagqibekanga, i-traffic phakathi kwabo ivaliwe; unokuvula ukufikelela kuphela kwiintlobo eziqondakalayo zetrafikhi kwiindawo zenethiwekhi eziqondakalayo, umzekelo, ukudlula yonke into kwi-firewall enkulu okanye i-proxy.
- Ukubonakala kwembali yomgangatho womnatha - indlela izicelo kunye namajelo asebenze ngayo. Iluncedo kakhulu ekuhlalutyeni nasekulungiseni imeko nangaphambi kokuba abasebenzisi baqale ukufumana izikhalazo malunga nokusebenza okungazinzanga kwezicelo.
- Ukubonakala kuzo zonke iitshaneli - ngaba ziyixabisa imali, ngaba abaqhubi ababini abahlukeneyo beza kwisayithi yakho, okanye ngaba ngokwenene bahamba kuthungelwano olufanayo kunye nokuthotywa / ukuwa ngexesha elinye.
- Ukubonakala kwezicelo zefu kunye nokuhamba kwetrafikhi ngokusebenzisa amajelo athile asekelwe kuyo (i-Cloud Onramp).
- Inxalenye enye ye-hardware iqulethe i-router kunye ne-firewall (ngokuchanekileyo, i-NGFW). Iziqwenga ezimbalwa zehardware kuthetha ukuba kutshiphu ukuvula isebe elitsha.
Amacandelo kunye noyilo lwezisombululo ze-SD-WAN
Izixhobo zokugqibela zii-WAN routers, ezinokuba yi-hardware okanye inyani.
IiOkhestra sisixhobo solawulo lwenethiwekhi. Zibumbeke ngeeparamitha zesixhobo sokuphela, imigaqo-nkqubo yendlela yendlela, kunye nokusebenza kokhuseleko. Iziphumo zoqwalaselo zithunyelwa ngokuzenzekelayo ngenethiwekhi yolawulo ukuya kwiindawo. Ngokunxuseneyo, i-orchestrator imamela inethiwekhi kwaye ibeke iliso kubukho bezixhobo, amachweba, amajelo onxibelelwano, kunye nokulayisha ujongano.
Izixhobo zokuhlalutya. Benza iingxelo ezisekelwe kwidatha eqokelelwe kwizixhobo zokugqibela: imbali yomgangatho wamajelo, izicelo zenethiwekhi, ukufumaneka kwe-node, njl.
Abalawuli banoxanduva lokusebenzisa imigaqo-nkqubo yendlela yokuhamba kwinethiwekhi. I-analogue yabo esondeleyo kuthungelwano lwemveli inokuqwalaselwa i-BGP Route Reflector. Imigaqo-nkqubo yehlabathi equlunqwa ngumlawuli kwi-orchestrator ibangela ukuba abalawuli batshintshe ukubunjwa kweetafile zabo zomzila kwaye bathumele ulwazi oluhlaziyiweyo kwizixhobo zokugqibela.
Ifumana ntoni inkonzo ye-IT kwi-SD-WAN:
- Ijelo eligcinayo lihlala lisetyenziswa (alisebenzi). Ibonakala inexabiso eliphantsi kuba unako ukuthenga amajelo amabini amancinci.
- Ukutshintsha okuzenzekelayo kwetrafikhi yesicelo phakathi kwamajelo.
- Ixesha lomlawuli: unokuphuhlisa inethiwekhi kwihlabathi jikelele, kunokurhubuluza kwisiqwenga ngasinye se-hardware ene-configs.
- Isantya sokunyusa amasebe amatsha. Mde kakhulu.
- Ixesha lokuphumla eliphantsi ngelixa utshintsha izixhobo ezifileyo.
- Ukulungisa ngokukhawuleza uthungelwano lweenkonzo ezintsha.
Lifumana ntoni ishishini kwi-SD-WAN:
- Ukusebenza okuqinisekisiweyo kwezicelo zoshishino kwinethiwekhi esasazwayo, kubandakanywa namajelo e-Intanethi avulekileyo. Imalunga nokuqikelelwa kweshishini.
- Inkxaso ekhawulezileyo yezicelo ezitsha zeshishini kuwo wonke uthungelwano olusasaziweyo, kungakhathaliseki inani lamasebe. Imalunga nesantya soshishino.
- Uqhagamshelo olukhawulezayo nolukhuselekileyo lwamasebe nakweyiphi na indawo ekude kusetyenziswa nabuphi na ubuchwephesha bonxibelelwano (i-Intanethi ikhona yonke indawo, kodwa imigca eqeshisayo kunye ne-VPN ayikho). Oku kumalunga nokuguquguquka kweshishini ekukhetheni indawo.
- Oku kunokuba yiprojekthi kunye nokuhanjiswa kunye nokugunyaziswa, okanye inokuba yinkonzo
ngeentlawulo zenyanga ezivela kwinkampani ye-IT, umqhubi we-telecom okanye umqhubi wefu. Nantoni na ekulungeleyo.
Izibonelelo zoshishino ze-SD-WAN zinokuhluka ngokupheleleyo, umzekelo, omnye umthengi usixelele ukuba umphathi ophezulu ufumene isicelo somgca othe ngqo kunye nabo bonke abasebenzi benkampani yamawaka amaninzi kunye nokukwazi ukuhambisa umxholo.
Kuthi βyayingumsebenzi womkhosi.β Ngelo xesha, sasisele siyisombulula ingxaki yokuphucula i-CSPD. Kwaye xa siqonda ukuba thina, ngokomgaqo, kufuneka sibandakanyeke ekuhlaziyweni kwezixhobo, kwaye i-teknoloji ye-teknoloji iye yaqhubela phambili, kutheni kufuneka sibandakanyeke ekuhlaziyeni ubugcisa kunye neenkonzo ezifanayo ukuba sinokuthatha inyathelo elingaphezulu.
I-SD-WAN ifakwe kwisiza nguEnikey. Oku kubalulekile kumasebe akude, apho kusenokungabikho nje umlawuli oqhelekileyo. Thumela ngeposi, uthi: βFaka intambo yoku-1 kwibhokisi yoku-1, intambo yesi-2 kwibhokisi yesi-2, kwaye ungayixubi! Sukubhideka, #@$@%!β Kwaye ukuba abayixubanisi, isixhobo ngokwaso sinxibelelana nomncedisi ophakathi, sithatha kwaye sisebenzise i-configs yayo, kwaye le ofisi iba yinxalenye yenethiwekhi ekhuselekileyo yenkampani. Kuhle xa kungafuneki ukuba uhambe kwaye kulula ukuzithethelela kuhlahlo lwabiwo-mali lwakho.
Nanku umzobo westandi:
Eminye imizekelo yoqwalaselo:
Umgaqo-nkqubo-imithetho yehlabathi yokulawula i-traffic. Ukuhlela umgaqo-nkqubo.
Vula umgaqo-nkqubo wolawulo lwendlela.
Ukucwangciswa kobuninzi beeparamitha zesixhobo esisisiseko (idilesi ze-IP, iiphuli ze-DHCP).
Iikhusi zokubeka iliso kwisicelo
Ngezicelo zefu.
Iinkcukacha zeOfisi365.
Ngezicelo ze-on-prem. Ngelishwa, asikwazanga ukufumana izicelo ezineempazamo kwindawo yethu yokuma (Ireyithi yokuBuyisa i-FEC ingu-zero kuyo yonke indawo).
Ukongeza - ukusebenza kwamajelo osasazo lwedatha.
Yiyiphi i-hardware exhaswayo kwi-SD-WAN
1. Amaqonga ezixhobo:
- Iirotha zeCisco vEdge (eyayifudula iyiViptela vEdge) iqhuba iViptela OS.
- I-1 kunye ne-000 yochungechunge lwe-Integrated Services Routers (ISRs) eqhuba i-IOS XE SD-WAN.
- I-Aggregation Services Router (ASR) 1 series eqhuba i-IOS XE SD-WAN.
2. Amaqonga abonakalayo:
- Cloud Services Router (CSR) 1v eqhuba IOS XE SD-WAN.
- vEdge Cloud Router eqhuba iViptela OS.
Iiplatifti ze-Virtual zingafakwa kwiiplatifti ze-Cisco x86 zekhompyutha, ezifana ne-Enterprise Network Compute System (ENCS) 5 series, i-Unified Computing System (UCS), kunye ne-Cloud Services Platform (CSP) 000. usebenzisa i-hypervisor efana ne-KVM okanye i-VMware ESi.
Siqhuba njani isixhobo esitsha
Uluhlu lwezixhobo ezinelayisenisi zokusasazwa zikhutshelwa mhlawumbi kwi-akhawunti ye-Cisco smart okanye ilayishwe njengefayile ye-CSV. Ndizakuzama ukufumana ezinye izikrini kamva, okwangoku asinazo izixhobo ezitsha zokuzisebenzisa.
Ulandelelwano lwamanyathelo isixhobo esiya kuwo xa sisetyenzisiwe.
Isixhobo esitsha/indlela yokuhanjiswa kwenkqubo ikhutshwa njani
Songeza izixhobo kwi-Akhawunti ye-Smart.
Uyakwazi ukukhuphela ifayile ye-CSV, okanye unokukhuphela enye ngexesha:
Gcwalisa iiparamitha zesixhobo:
Okulandelayo, kwi-vManage sivumelanisa idatha kunye ne-Akhawunti ye-Smart. Isixhobo siyavela kuluhlu:
Kwimenyu eyehlayo ejongene nesixhobo, cofa ukuvelisa ubumbeko lweBootstrap
kwaye ufumane uqwalaselo lokuqala:
Olu qwalaselo kufuneka londliwe kwisixhobo. Eyona ndlela ilula kukudibanisa i-flash drive enefayile egciniweyo ebizwa ngokuba yi-ciscosd-wan.cfg kwisixhobo. Xa uqala, isixhobo siya kujonga le fayile.
Ukufumana uqwalaselo lokuqala, isixhobo siya kukwazi ukufikelela kwi-orchestrator kwaye sifumane uqwalaselo olupheleleyo ukusuka apho.
Sijonge kwi-SD-Access (DNA)
I-SD-Access yenza kube lula ukuqwalasela izibuko kunye namalungelo okufikelela kubasebenzisi abadibanisayo. Oku kwenziwa ngokusebenzisa iiwizards. Iiparamitha zePort zisetwe ngokunxulumene "nabalawuli", "i-Accounting", "Abashicileli" amaqela, kwaye kungekhona kwii-VLAN kunye ne-IP subnets. Oku kunciphisa iimpazamo zabantu. Ukuba, umzekelo, inkampani inamasebe amaninzi kulo lonke elaseRashiya, kodwa iofisi ephakathi igcwele kakhulu, ngoko i-SD-Access ikuvumela ukuba usombulule iingxaki ezininzi ekuhlaleni. Umzekelo, iingxaki ezifanayo malunga nokulungisa ingxaki.
Ukhuseleko lolwazi, kubalulekile ukuba i-SD-Access ibandakanya ulwahlulo olucacileyo lwabasebenzisi kunye nezixhobo zibe ngamaqela kunye nenkcazo yemigaqo-nkqubo yokusebenzisana phakathi kwabo, ukugunyaziswa kwanoma yimuphi uxhulumaniso lomxhasi kwinethiwekhi, kunye nokubonelelwa "kwamalungelo okufikelela" kwinethiwekhi yonke. Ukuba ulandela le ndlela, ulawulo luba lula kakhulu.
Inkqubo yokuqaliswa kweeofisi ezintsha yenziwe lula ngenxa ye-plug-and-Play agents kwiiswitshi. Akukho mfuneko yokubaleka ujikeleze ilizwe nge-console, okanye uye kwindawo konke konke.
Nantsi imizekelo yoqwalaselo:
Ubume ngokubanzi.
Iziganeko apho umlawuli kufuneka aziqwalasele.
Iingcebiso ezizenzekelayo malunga nokuba utshintshe ntoni kuqwalaselo.
Isicwangciso sokudibanisa i-SD-WAN kunye ne-SD-Access
Ndivile ukuba iCisco inezicwangciso ezinjalo - i-SD-WAN kunye ne-SD-Access. Oku kufuneka kunciphise kakhulu i-hemorrhoids xa ulawula i-CSPDs esasazwa ngokwelizwe kunye neyendawo.
I-vManage (i-SD-WAN orchestrator) ilawulwa nge-API esuka kwi-DNA Centre (umlawuli we-SD-Access).
Imigaqo-nkqubo yolwahlulo oluncinci kunye nolwahlulo olukhulu luzotywe ngolu hlobo lulandelayo:
Kwinqanaba lepakethe, yonke into ibonakala ngolu hlobo:
Ngubani ocinga ngale nto kwaye yintoni?
Siye sasebenza kwi-SD-WAN ukususela ngo-2016 kwibhubhoratri eyahlukileyo, apho sivavanya izisombululo ezahlukeneyo kwiimfuno zokuthengisa, iibhanki, ezothutho kunye nezoshishino.
Sinxibelelana kakhulu nabathengi bokwenyani.
Ndingatsho ukuba ukuthengisa sele kuvavanya ngokuzithemba i-SD-WAN, kwaye abanye benza oku kunye nabathengisi (uninzi lwabo luhlala kunye neCisco), kodwa kukho nabo bazama ukusombulula lo mba ngokwabo: babhala inguqulelo yabo. isoftwe efana nokusebenza kwi-SD-WAN.
Wonke umntu, ngandlela thile, ufuna ukufezekisa ulawulo olusembindini wezoo yonke yezixhobo. Le ngongoma enye yolawulo lofakelo olungekho mgangathweni kunye nemigangatho yabathengisi abahlukeneyo kunye nobuchwepheshe obuhlukeneyo. Kubalulekile ukunciphisa umsebenzi wezandla kuba, okokuqala, kunciphisa umngcipheko wento yomntu xa ubeka izixhobo, kwaye okwesibini, ukhulula izixhobo zenkonzo ye-IT ukusombulula ezinye iingxaki. Ngokwesiqhelo, ukuqondwa kwemfuno kuvela kwimijikelo yohlaziyo emide kakhulu kwilizwe lonke. Kwaye, umzekelo, ukuba umthengisi uthengisa utywala, ngoko kufuneka unxibelelwano oluqhubekayo lokuthengisa. Ukuhlaziya okanye ukuphumla ngexesha lasemini lichaphazela ngqo ingeniso.
Ngoku kwintengiso kukho ukuqonda okucacileyo kwemisebenzi ye-IT eya kusebenzisa i-SD-WAN:
- Ukusasazwa ngokukhawuleza (okuhlala kufunwa kwi-LTE phambi kokuba umboneleli wentambo afike, kudla ngokufuneka ukuba indawo entsha iphakanyiswe ngumlawuli esixekweni nge-GPC, emva koko iziko lijonge ngokulula kwaye liqwalasele).
- Ulawulo oluphakathi, unxibelelwano lwezinto zangaphandle.
- Ukunciphisa iindleko ze-telecom.
- Iinkonzo ezongezelelweyo ezahlukeneyo (iimpawu zeDPI zenza kube lula ukubeka phambili ukuhanjiswa kwezithuthi ezivela kwizicelo ezibalulekileyo ezifana neerejista zemali).
- Sebenza ngamatshaneli ngokuzenzekelayo, hayi ngesandla.
Kwaye kukwakho netshekhi yokuthobela - wonke umntu uthetha ngayo kakhulu, kodwa akukho mntu uyibona njengengxaki. Ukugcina ukuba yonke into isebenza ngokuchanekileyo nayo isebenza kakuhle kule paradigm. Abaninzi bakholelwa ukuba yonke imarike yeteknoloji yenethiwekhi iya kuhamba kweli cala.
Iibhanki, i-IMHO, ngoku zivavanya i-SD-WAN kunokuba ibe yinto entsha yetekhnoloji. Balindele ukuphela kwenkxaso kwizizukulwana zangaphambili zezixhobo kwaye kuphela baya kutshintsha. Iibhanki ngokubanzi zinemoya yazo ekhethekileyo ngokusebenzisa amajelo onxibelelwano, ngoko ke imeko yangoku yoshishino ayibakhathazi kakhulu. Iingxaki zilele kwezinye iinqwelomoya.
Ngokungafaniyo nemarike yaseRashiya, i-SD-WAN iphunyezwa ngenkuthalo eYurophu. Iziteshi zabo zonxibelelwano zibiza kakhulu, kwaye ke iinkampani zaseYurophu zizisa isitakhi sazo kwizahlulo zaseRussia. E-Russia, kukho uzinzo oluthile, kuba iindleko zamatshaneli (nangona ummandla uxabisa ngokuphindwe ngama-25 kuneziko) ubonakala uqhelekileyo kwaye awuphakamisi imibuzo. Unyaka nonyaka, kukho uhlahlo lwabiwo-mali olungenamiqathango lwamajelo onxibelelwano.
Nanku umzekelo ovela kwihlabathi, xa inkampani igcina ixesha kunye nemali isebenzisa i-SD-WAN kwiCisco.
Kukho inkampani enjalo - izixhobo zeSizwe. Ngexesha elithile, baqala ukuqonda ukuba uthungelwano lwekhompyutha yehlabathi, "efunyenwe" ngokudibanisa iindawo ezingama-88 emhlabeni jikelele, yayingasebenzi. Ukongeza, inkampani iswele amandla kunye nokusebenza konikezelo lwamanzi ashushu asekhaya. Kwakungekho lungelelwano phakathi kokukhula okuqhubekayo kwenkampani kunye nohlahlo lwabiwo-mali olulinganiselwe lwe-IT.
I-SD-WAN incede i-National Instruments ukunciphisa iindleko ze-MPLS nge-25% (ukugcina i-$ 450 ekupheleni kwe-2018), ukwandisa i-bandwidth nge-3%.
Njengomphumo wokuphunyezwa kwe-SD-WAN, inkampani ifumene inethiwekhi echazwe nge-smart software kunye nolawulo lomgaqo-nkqubo ophakathi ukuze kulungiswe ngokuzenzekelayo i-traffic kunye nokusebenza kwesicelo. - ityala elineenkcukacha.
imeko ephambeneyo yokuhambisa i-S7 kwenye iofisi, xa ekuqaleni yonke into yaqala nzima, kodwa inomdla - kwakuyimfuneko ukuphinda kwenziwe izibuko eziliwaka ezili-1,5. Kodwa ke kukho into engahambi kakuhle kwaye ngenxa yoko, i-admins yaba ngabokugqibela ngaphambi komhla wokugqibela, apho konke ukulibaziseka okuqokelelweyo kuwela.
Funda ngakumbi ngesiNgesi:
- .
- .
- .
- .
- Kodwa kwiindlela zothungelwano kwihlabathi.
NgesiRashiya:
- .
- .
- .
- .
- I-imeyile yam, ukuba unayo nayiphi na imibuzo okanye ungathanda ukuvavanya imisebenzi yakho kwindawo yethu yokuma, - [imeyile ikhuselwe].
umthombo: www.habr.com