Phambi kokuba singene kwizinto ezisisiseko zeVLANs, bendiza kunicela nonke ukuba nikhe nime kancinci le vidiyo, nicofe i icon ekwikona esezantsi ekhohlo apho ithi Networking consultant, yiya kuFacebook wethu kwaye uyithande apho. Emva koko ubuyele kwividiyo kwaye ucofe i icon yeKumkani kwikona esezantsi ngasekunene ukuze ubhalisele ijelo lethu elisemthethweni likaYouTube. Sihlala songeza uchungechunge olutsha, ngoku oku kuchaphazela ikhosi ye-CCNA, ngoko siceba ukuqalisa izifundo zevidiyo ye-CCNA yoKhuseleko, iNethiwekhi +, i-PMP, i-ITIL, i-Prince2 kwaye ipapashe olu chungechunge oluhle kakhulu kwitshaneli yethu.
Ngoko, namhlanje siza kuthetha ngeziseko zeVLAN kwaye siphendule imibuzo emi-3: yintoni iVLAN, kutheni sifuna iVLAN kunye nendlela yokuyiqwalasela. Ndiyathemba ukuba emva kokubukela le vidiyo yokufundisa uya kuba nakho ukuphendula yonke imibuzo emithathu.
Yintoni iVLAN? I-VLAN sisishunqulelo sothungelwano lwendawo yendawo enenyani. Kamva kwesi sifundo siza kujonga ukuba kutheni le nethiwekhi inyanisekile, kodwa ngaphambi kokuba sidlulele kwiiVLAN, kufuneka siqonde ukuba iswitshi isebenza njani. Siza kuhlolisisa eminye yemibuzo ebesixubushe ngayo kwizifundo ezidlulileyo.
Okokuqala, makhe sixoxe ukuba yintoni i-Domain ye-Multiple Collision Domain. Siyazi ukuba olu tshintsho lwe-48-port lunemimandla ye-48 yokungqubana. Oku kuthetha ukuba ngalinye kula mazibuko, okanye izixhobo eziqhagamshelwe kula mazibuko, zinokunxibelelana nesinye isixhobo kwizibuko elahlukileyo ngendlela ezimeleyo ngaphandle kokuchaphazela omnye nomnye.
Zonke izibuko ze-48 zolu tshintsho ziyinxalenye yeNdawo enye yoSasazo. Oku kuthetha ukuba ukuba izixhobo ezininzi ziqhagamshelwe kumazibuko amaninzi kwaye enye yazo iyasasaza, izakuvela kuwo onke amazibuko apho izixhobo eziseleyo ziqhagamshelwe. Yile ndlela kanye esebenza ngayo iswitshi.
Kuba ngathi abantu bahleli kwigumbi elinye besondelelene, yaye xa omnye wabo ethethela phezulu, wonke umntu wayeyiva. Nangona kunjalo, oku akusebenzi ngokupheleleyo - okukhona abantu bevela kwigumbi, kokukhona kuya kuba nomsindo kwaye abo bakhoyo abasayi kuva omnye komnye. Imeko efanayo ivela kwiikhompyuter - ngakumbi izixhobo ezidityaniswe kwinethiwekhi enye, kokukhona "isandi esikhulu" sosasazo siba, esingavumeli unxibelelwano olusebenzayo lusekwe.
Siyazi ukuba enye yezi zixhobo iqhagamshelwe kwinethiwekhi ye-192.168.1.0/24, zonke ezinye izixhobo ziyinxalenye yenethiwekhi efanayo. Ukutshintsha kufuneka kwakhona kudityaniswe kwinethiwekhi enedilesi ye-IP efanayo. Kodwa apha utshintshi, njengesixhobo se-OSI se-2, sinokuba nengxaki. Ukuba izixhobo ezibini ziqhagamshelwe kwinethiwekhi efanayo, zinokunxibelelana ngokulula kunye neekhompyuter zomnye. Makhe sicinge ukuba inkampani yethu "inomntu ombi", i-hacker, endiya kumzoba ngasentla. Ngezantsi kukho ikhompyuter yam. Ke, kulula kakhulu ukuba le hacker ingene kwikhompyuter yam kuba iikhompyuter zethu ziyinxalenye yenethiwekhi efanayo. Nantso ke ingxaki.
Ukuba ndingowolawulo lolawulo kwaye lo mfo mtsha unokufikelela kwiifayile kwikhompyuter yam, ayizukulunga kwaphela. Ewe kunjalo, ikhompyuter yam ine-firewall ekhusela kuzo izoyikiso ezininzi, kodwa ngekhe kube nzima ukuba i-hacker idlule kuyo.
Ingozi yesibini ekhoyo kuwo wonke umntu olilungu lesizinda sosasazo kukuba ukuba umntu unengxaki ngosasazo, oko kuphazamiseka kuya kuchaphazela ezinye izixhobo kwinethiwekhi. Nangona zonke izibuko ze-48 zinokudibaniswa kwimikhosi eyahlukeneyo, ukungaphumeleli komkhosi omnye kuya kuchaphazela enye i-47, engeyiyo into esiyidingayo.
Ukusombulula le ngxaki sisebenzisa ingqikelelo yeVLAN, okanye inethiwekhi yendawo enenyani. Isebenza ngokulula kakhulu, ukwahlula olu tshintsho lukhulu lwe-48-port kwizitshixo ezincinci ezininzi.
Siyazi ukuba ii-subnets zahlula inethiwekhi enye enkulu kwiinethiwekhi ezincinci ezincinci, kwaye iiVLAN zisebenza ngendlela efanayo. Ikwahlula i-48-port switch, umzekelo, kwi-4 switch of 12 port, nganye eyinxalenye yenethiwekhi entsha edibeneyo. Ngelo xesha, sinokusebenzisa i-12 izibuko zokulawula, i-12 izibuko ze-IP telephony, njalo njalo, oko kukuthi, ukwahlula iswitshi kungekhona ngokwasemzimbeni, kodwa ngokufanelekileyo, ngokuqinisekileyo.
Ndabele amazibuko amathathu aluhlaza kumtshini ongaphezulu wenethiwekhi yeVLAN10 eluhlaza, kwaye ndabela amazibuko amathathu e-orenji e-VLAN20. Ngaloo ndlela, nayiphi na i-traffic evela kwelinye lala mazibuko aluhlaza uya kuya kuphela kwamanye amazibuko aluhlaza, ngaphandle kokuchaphazela amanye amazibuko alolu tshintsho. I-traffic evela kumazibuko e-orenji iya kusasazwa ngokufanayo, oko kukuthi, kufana nokuba sisebenzisa iiswitshi ezimbini ezahlukeneyo zomzimba. Ngaloo ndlela, iVLAN yindlela yokwahlula isitshixo kwiiswitshi ezininzi zenethiwekhi ezahlukeneyo.
Ndazoba iiswitshi ezimbini phezulu, apha sinemeko apho ekhohlo switsha kuphela blue izibuko womnatha omnye ziqhagamshelwe, kwaye ngasekunene - kuphela izibuko orange enye inethiwekhi, kwaye ezi switsha azidityaniswanga enye kwenye nangayiphi na indlela. .
Masithi ufuna ukusebenzisa amazibuko amaninzi. Makhe sicinge ukuba sinezakhiwo ezi-2, nganye inabasebenzi bayo bolawulo, kunye nezibuko ezimbini ze-orenji zokutshintsha okusezantsi zisetyenziselwa ulawulo. Ke ngoko, sifuna ezi zibuko ukuba ziqhagamshelwe kuwo onke amazibuko e-orenji kwezinye iiswitshi. Imeko iyafana kunye namazibuko aluhlaza - onke amazibuko aluhlaza okutshintsha okuphezulu kufuneka aqhagamshelwe kwamanye amazibuko ombala ofanayo. Ukwenza oku, kufuneka sidibanise ngokwasemzimbeni ezi zitshintshi zimbini kwizakhiwo ezahlukeneyo ezinomgca wonxibelelwano owahlukileyo; emfanekisweni, lo ngumgca phakathi kwamazibuko amabini aluhlaza. Njengoko sisazi, ukuba iitshintshi ezimbini zidibene ngokwasemzimbeni, senza umqolo, okanye i-trunk.
Uthini umahluko phakathi kokutshintsha rhoqo kunye neVLAN? Ayingomehluko mkhulu. Xa uthenga iswitshi entsha, ngokungagqibekanga onke amazibuko aqwalaselwe kwimowudi yeVLAN kwaye ayinxalenye yomsebenzi womnatha ofanayo, otyunjiweyo weVLAN1. Yiyo loo nto xa sinxibelelanisa nasiphi na isixhobo kwizibuko elinye, iphetha iqhagamshelwe kuwo onke amanye amazibuko kuba onke amazibuko angama-48 akwiVLAN1 enye. Kodwa ukuba siqwalasela amazibuko aluhlaza ukuba asebenze kuthungelwano lweVLAN10, izibuko eziorenji kwinethiwekhi yeVLAN20, kunye namazibuko aluhlaza kwiVLAN1, siya kufumana iiswitshi ezi-3 ezahlukeneyo. Ke, ukusebenzisa imowudi yothungelwano enenyani kusivumela ukuba siqokelele ngokusengqiqweni amazibuko kuthungelwano oluthile, sahlulahlule usasazo lube ngamacandelo, kwaye senze ii-subnets. Kule meko, izibuko ngalinye lombala othile lilo lothungelwano olwahlukileyo. Ukuba amazibuko aluhlaza asebenza kuthungelwano lwe-192.168.1.0 kunye namazibuko e-orenji asebenza kwinethiwekhi ye-192.168.1.0, ngoko nangona idilesi ye-IP efanayo, abayi kuqhagamshelwa omnye komnye, kuba baya kuba nengqiqo kwiiswitshi ezahlukeneyo. Kwaye njengoko sisazi, iiswitshi ezahlukeneyo zomzimba azinxibelelani ngaphandle kokuba ziqhagamshelwe ngumgca wonxibelelwano oqhelekileyo. Ke sidala ii-subnets ezahlukeneyo zeVLAN ezahlukeneyo.
Ndingathanda ukutsalela ingqalelo yakho kwinto yokuba ingcamango yeVLAN isebenza kuphela kwiiswitshi. Nabani na oqheleneyo neeprotocol ze-encapsulation ezifana ne-.1Q okanye i-ISL uyazi ukuba akukho zi-router okanye iikhompyutha ezinazo ii-VLAN. Xa udibanisa ikhomputha yakho, umzekelo, kwelinye lamazibuko aluhlaza okwesibhakabhaka, awutshintshi nantoni na kwikhompyutheni, zonke iinguqu zenzeke kuphela kwinqanaba le-OSI yesibini, inqanaba lokutshintsha. Xa siqwalasela izibuko ukusebenza kunye VLAN10 ethile okanye VLAN20 womnatha, iswitshi kudala VLAN database. I "irekhodi" kwimemori yayo ukuba izibuko 1,3 kunye ne-5 ze-VLAN10, izibuko 14,15 kunye ne-18 ziyingxenye ye-VLAN20, kunye namazibuko aseleyo abandakanyekayo ayingxenye ye-VLAN1. Ngoko ke, ukuba ezinye iitrafikhi zisuka kwizibuko eliluhlaza okwesibhakabhaka 1, iya kuphela kumazibuko 3 kunye no-5 weVLAN10 efanayo. Umtshintshi ujonge isiseko sayo kwaye ubona ukuba i-traffic ivela kwelinye lamazibuko e-orenji, kufuneka ihambe kuphela kumazibuko e-orenji eVLAN20.
Nangona kunjalo, ikhomputha ayazi nto malunga nezi VLAN. Xa sidibanisa iiswitshi ezi-2, i-trunk yenziwa phakathi kwamazibuko aluhlaza. Igama elithi "trunk" lifanelekile kuphela kwizixhobo zeCisco; abanye abavelisi besixhobo sothungelwano, njengeJuniper, basebenzisa igama elithi Tag port, okanye "izibuko eliphawulweyo". Ndicinga ukuba igama le-Tag port lifanelekile ngakumbi. Xa i-traffic iqala kule nethiwekhi, i-trunk idlulisela kuzo zonke izibuko zokutshintsha okulandelayo, oko kukuthi, sidibanisa ezimbini ii-switch 48-port kwaye sifumane enye i-96-port switch. Kwangaxeshanye, xa sithumela itrafikhi evela kwiVLAN10, iba ithegi, oko kukuthi, inikwe ileyibhile ebonisa ukuba yenzelwe kuphela izibuko zenethiwekhi yeVLAN10. Ukutshintsha kwesibini, emva kokufumana le traffic, ifunda ithegi kwaye iyaqonda ukuba le yitrafikhi ngokukodwa kwinethiwekhi yeVLAN10 kwaye kufuneka ihambe kuphela kumazibuko aluhlaza. Ngokufanayo, "orenji" traffic for VLAN20 tagged ukubonisa ukuba imiselwe VLAN20 izibuko kwi iswitshi yesibini.
Siphinde sakhankanya i-encapsulation kwaye apha kukho iindlela ezimbini ze-encapsulation. Eyokuqala yi-.1Q, oko kukuthi, xa siququzelela i-trunk, kufuneka sinikeze i-encapsulation. I-.1Q encapsulation protocol ngumgangatho ovulekileyo ochaza inkqubo yokumakisha i-traffic. Kukho enye iprotocol ebizwa ngokuba yi-ISL, i-Inter-Switch link, ephuhliswe yiCisco, ebonisa ukuba i-traffic yeye-VLAN ethile. Zonke iinguqu zanamhlanje zisebenza kunye neprotocol ye-.1Q, ngoko ke xa uthatha utshintsho olutsha ngaphandle kwebhokisi, awudingi ukusebenzisa nayiphi na imiyalelo ye-encapsulation, kuba ngokungagqibekanga iqhutyelwa yi-.1Q protocol. Ngaloo ndlela, emva kokudala i-trunk, i-traffic encapsulation iyenzeka ngokuzenzekelayo, evumela ukuba iithegi zifundwe.
Ngoku makhe siqalise ukuseta iVLAN. Masenze inethiwekhi apho kuya kubakho iiswitshi ezi-2 kunye nezixhobo ezimbini zokuphela - iikhomputha ze-PC1 kunye ne-PC2, esiya kudibanisa kunye neentambo zokutshintsha #0. Masiqale ngezicwangciso ezisisiseko zokutshintsha koqwalaselo oluSisiseko.
Ukwenza oku, cofa kwiswitshi kwaye uye kujongano lwelayini yomyalelo, kwaye emva koko usete igama lenginginya, ubiza olu switshi sw1. Ngoku makhe siqhubele phambili kwizicwangciso zekhompyuter yokuqala kwaye sibeke idilesi ye-IP engatshintshiyo 192.168.1.1 kunye ne-subnet mask 255.255. 255.0. Akukho mfuneko yedilesi yesango engagqibekanga kuba zonke izixhobo zethu zikwinethiwekhi efanayo. Emva koko, siya kwenza okufanayo kwikhompyuter yesibini, siyinike idilesi ye-IP 192.168.1.2.
Ngoku makhe sibuyele kwikhompyuter yokuqala ukubethelela ikhompyuter yesibini. Njengoko ubona, i-ping ibe yimpumelelo kuba zombini ezi khomputha ziqhagamshelwe kwisitshixo esifanayo kwaye ziyinxalenye yenethiwekhi efanayo ngokungagqibekanga kweVLAN1. Ukuba ngoku sijonga i-interfaces yokutshintsha, siya kubona ukuba zonke izibuko ze-FastEthernet ukusuka kwi-1 ukuya kwi-24 kunye nee-ports ezimbini ze-GigabitEthernet ziqwalaselwe kwi-VLAN #1. Nangona kunjalo, ukufumaneka okugqithisileyo okunjalo akufuneki, ngoko singena kwisethingi yokutshintsha kwaye singenise umyalelo we-vlan wokubonisa ukujonga kwi-database yenethiwekhi yenyani.
Uyabona apha igama lothungelwano lwe-VLAN1 kunye nenyaniso yokuba onke amazibuko okutshintsha ale nethiwekhi. Oku kuthetha ukuba unokudibanisa naliphi na i-port kwaye bonke baya kukwazi "ukuthetha" omnye komnye ngenxa yokuba bayingxenye yenethiwekhi efanayo.
Siza kutshintsha le meko; ukwenza oku, siya kuqala ukudala iinethiwekhi ezimbini ezinenyani, oko kukuthi, ukongeza iVLAN10. Ukwenza inethwekhi enenyani, sebenzisa umyalelo ofana βnenombolo yenethiwekhi ye-vlanβ.
Njengoko ubona, xa uzama ukwenza inethiwekhi, inkqubo ibonise umyalezo ngoluhlu lwemiyalelo yoqwalaselo yeVLAN ekufuneka isetyenziselwe esi senzo:
phuma - sebenzisa utshintsho kunye nesethingi yokuphuma;
igama - ngenisa igama le-VLAN yesiko;
hayi β rhoxisa umyalelo okanye uwusete njengemiyo.
Oku kuthetha ukuba ngaphambi kokuba ungenise i-VLAN umyalelo, kufuneka ufake umyalelo wegama, ovula indlela yokulawula igama, uze uqhubeke nokudala inethiwekhi entsha. Kule meko, inkqubo ikhuthaza ukuba inombolo ye-VLAN inokunikezelwa kuluhlu ukusuka kwi-1 ukuya kwi-1005.
Ke ngoku sifaka umyalelo wokudala inombolo yeVLAN 20 - vlan 20, kwaye uyinike igama lomsebenzisi, elibonisa ukuba luhlobo luni lwenethiwekhi. Kwimeko yethu, sisebenzisa igama elithi Employees command, okanye inethiwekhi yabasebenzi benkampani.
Ngoku kufuneka sinikeze izibuko elithile kule VLAN. Sifaka imowudi yokuseta utshintsho int f0/1, emva koko sitshintshele ngesandla izibuko kwimowudi yoFikelelo usebenzisa imowudi yokufikelela kwimowudi yokutshintsha kwaye ubonise ukuba yeyiphi izibuko ekufuneka itshintshelwe kule mowudi - eli lizibuko lenethiwekhi yeVLAN10.
Siyabona ukuba emva koku umbala wendawo yokudibanisa phakathi kwe-PC0 kunye nokutshintsha, umbala we-port, utshintshile ukusuka eluhlaza ukuya kwi-orange. Izakujika ibe luhlaza kwakhona nje ukuba utshintsho lwesethingi luqale ukusebenza. Makhe sizame ukubethelela ikhompyuter yesibini. Asenzanga naluphi na utshintsho kwiisethingi zenethiwekhi kwiikhomputha, zisenazo iidilesi ze-IP ze-192.168.1.1 kunye ne-192.168.1.2. Kodwa ukuba sizama ukucofa iPC0 ukusuka kwiPC1 yekhompyuter, akukho nto iya kusebenza, kuba ngoku ezi khompyuter zezenethiwekhi ezahlukeneyo: eyokuqala ukuya kwiVLAN10, eyesibini ukuya kwiVLAN1 yomthonyama.
Masibuyele kujongano lokutshintsha kwaye siqwalasele izibuko lesibini. Ukwenza oku, ndiza kukhupha umyalelo int f0/2 kwaye ndiphinda amanyathelo afanayo e-VLAN 20 njengoko ndenzayo xa ndiqwalasela inethiwekhi yangaphambili yenyani.
Siyabona ukuba ngoku i-port esezantsi yokutshintsha, apho ikhompyutheni yesibini idibaniswe nayo, iphinde yatshintsha umbala wayo ukusuka eluhlaza ukuya kwi-orenji - imizuzwana embalwa kufuneka idlule ngaphambi kokuba utshintsho kwizicwangciso lusebenze kwaye luphinde lube luhlaza kwakhona. Ukuba siqala ukubetha ikhompyuter yesibini kwakhona, akukho nto iya kusebenza, kuba iikhompyuter zisezezothungelwano ezahlukeneyo, iPC1 kuphela ngoku iyinxalenye yeVLAN1, hayi iVLAN20.
Ke ngoko, wahlule iswitshi enye yomzimba kwizitshixo ezimbini ezahlukeneyo ezinengqondo. Uyabona ukuba ngoku umbala wezibuko utshintshile ukusuka kwi-orenji ukuya eluhlaza, izibuko liyasebenza, kodwa alisaphenduli kuba lilo lothungelwano olwahlukileyo.
Masenze utshintsho kwisekethe yethu - qhawula ikhompyuter ye-PC1 ukusuka kwiswitshi yokuqala kwaye uyidibanise kwiswitshi yesibini, kwaye uqhagamshele iiswitshi ngokwazo ngentambo.
Ukuze ndiseke uxhulumaniso phakathi kwabo, ndiya kungena kwizicwangciso zokutshintsha kwesibini kwaye ndenze iVLAN10, ndiyinike igama elithi Ulawulo, oko kukuthi, inethiwekhi yolawulo. Emva koko ndiya kwenza imo yoFikelelo kwaye ndichaze ukuba le ndlela yeyeVLAN10. Ngoku umbala wamazibuko apho utshintsho oludityanisiweyo lutshintshile ukusuka kuorenji ukuya koluhlaza kuba zombini ziqwalaselwe kwiVLAN10. Ngoku kufuneka senze i-trunk phakathi kwezitshintshi zombini. Omabini la mazibuko Fa0/2, ngoko ke kufuneka wenze umboko Fa0/2 izibuko iswitshi yokuqala usebenzisa umboko wokutshintsha umyalelo umboko. Okufanayo kufuneka kwenziwe kwi-switch yesibini, emva koko i-trunk yenziwe phakathi kwala mazibuko mabini.
Ngoku, ukuba ndifuna ukucofa iPC1 kwikhompyuter yokuqala, yonke into iya kusebenza, kuba unxibelelwano phakathi kwePC0 kunye nokutshintsha #0 yinethiwekhi yeVLAN10, phakathi kokutshintsha #1 kunye nePC1 ikwaVLAN10, kwaye zombini iiswitshi ziqhagamshelwe ngesiqu. .
Ngoko ke, ukuba izixhobo zifumaneka kwiiVLAN ezahlukeneyo, ke azixhunyiwe omnye komnye, kodwa ukuba zikwinethiwekhi efanayo, i-traffic inokutshintshwa ngokukhululekileyo phakathi kwabo. Makhe sizame ukongeza isixhobo esinye kwiswitshi nganye.
Kwiisetingi zenethiwekhi yePC2 yekhompyuter eyongeziweyo, ndiya kubeka idilesi ye-IP kwi-192.168.2.1, kwaye kwizicwangciso zePC3, idilesi iya kuba yi-192.168.2.2. Kule meko, amazibuko apho ezi PC zimbini ziqhagamshelwe kuzo ziya kuchongwa njengeFa0/3. Kwizicwangciso zokutshintsha #0 siya kuseka imowudi yoFikelelo kwaye sibonise ukuba eli zibuko lenzelwe iVLAN20, kwaye siya kwenza okufanayo ngokutshintsha #1.
Ukuba ndisebenzisa i-switchport yokufikelela kwi-vlan 20 umyalelo, kwaye i-VLAN20 ayikadalwa, inkqubo iya kubonisa imposiso efana ne-"Finyelela i-VLAN ayikho" kuba iiswitshi ziqwalaselwe ukusebenza kuphela ngeVLAN10.
Masenze iVLAN20. Ndisebenzisa umyalelo othi "bonisa iVLAN" ukujonga idatabase yenethiwekhi yenyani.
Uyakwazi ukubona ukuba inethiwekhi engagqibekanga yi VLAN1, apho izibuko Fa0/4 ukuya Fa0/24 kunye Gig0/1, Gig0/2 ziqhagamshelwe. Inombolo ye-VLAN ye-10, ebizwa ngokuba yi-Management, iqhagamshelwe kwi-port Fa0/1, kunye nenombolo ye-VLAN 20, ebizwa ngokuba yi-VLAN0020 ngokungagqibekanga, iqhagamshelwe kwi-port Fa0/3.
Ngokomgaqo, igama lomnatha alinandaba, into ephambili kukuba ayiphindaphindwa kumanethiwekhi ahlukeneyo. Ukuba ndifuna ukutshintsha igama lothungelwano olunikezelwa yinkqubo ngokungagqibekanga, ndisebenzisa umyalelo we-vlan 20 kunye negama labasebenzi. Ndiyakwazi ukutshintsha eli gama kwenye into, njenge-IPphones, kwaye ukuba sibhala idilesi ye-IP 192.168.2.2, sinokubona ukuba igama le-VLAN alinantsingiselo.
Into yokugqibela endifuna ukuyikhankanya yinjongo yoLawulo lwe-IP, esathetha ngayo kwisifundo sokugqibela. Ukwenza oku sisebenzisa umyalelo we-int vlan1 kwaye ungenise idilesi ye-IP 10.1.1.1 kunye ne-subnet mask 255.255.255.0 kwaye emva koko wongeze umyalelo wokungavala. Sabela i-IP yoLawulo kungekhona kwi-switch yonke, kodwa kuphela kwii-ports ze-VLAN1, oko kukuthi, sabela idilesi ye-IP apho inethiwekhi ye-VLAN1 ilawulwa khona. Ukuba sifuna ukulawula iVLAN2, kufuneka senze ujongano oluhambelanayo lweVLAN2. Kwimeko yethu, kukho izibuko ze-VLAN10 eziluhlaza kunye ne-orange VLAN20 izibuko, ezihambelana needilesi 192.168.1.0 kunye ne-192.168.2.0.
I-VLAN10 kufuneka ibe needilesi ezibekwe kuluhlu olufanayo ukuze izixhobo ezifanelekileyo zikwazi ukuqhagamshela kuyo. Ulungiselelo olufanayo kufuneka lwenzelwe iVLAN20.
Olu tshintsho lwefestile yelayini yomyalelo ibonisa useto lojongano lweVLAN1, oko kukuthi, iVLAN yomthonyama.
Ukuze kuqwalaselwe Ulawulo IP for VLAN10, kufuneka senze ujongano int vlan 10, kwaye emva koko wongeze idilesi IP 192.168.1.10 kunye subnet imaski 255.255.255.0.
Ukuqwalasela i-VLAN20, kufuneka senze i-interface int vlan 20, kwaye emva koko wongeze idilesi ye-IP 192.168.2.10 kunye ne-subnet mask 255.255.255.0.
Kutheni oku kuyimfuneko? Ukuba iPC0 yekhompyuter kunye nezibuko eliphezulu lasekhohlo lokutshintsha #0 lizelothungelwano lwe-192.168.1.0, i-PC2 yeyothungelwano lwe-192.168.2.0 kwaye iqhagamshelwe kwizibuko lemveli le-VLAN1, eliye-10.1.1.1 network, ngoko i-PC0 ayinakuseka. unxibelelwano ngolu tshintsho ngeSSH yomthetho kuba zezothungelwano ezahlukeneyo. Ke ngoko, ukuze iPC0 inxibelelane nokutshintsha nge-SSH okanye iTelnet, kufuneka siyinike ufikelelo loFikelelo. Yingakho sifuna ulawulo lwenethiwekhi.
Kufuneka sikwazi ukubopha i-PC0 sisebenzisa i-SSH okanye iTelnet kwidilesi ye-IP yojongano lweVLAN20 kwaye senze naluphi na utshintsho esiludingayo nge-SSH. Ngaloo ndlela, i-IP yoLawulo iyimfuneko ngokukodwa ekulungiseleleni iiVLAN, kuba inethiwekhi nganye yenyani kufuneka ibe nolawulo lwayo lokufikelela.
Kwividiyo yanamhlanje, siye saxoxa ngemiba emininzi: izicwangciso zokutshintsha ezisisiseko, ukudala iiVLAN, ukwabela izibuko zeVLAN, ukwabela i-IP yoLawulo lweeVLAN, kunye nokumisela iziqu. Musa ukuba neentloni ukuba awuyiqondi into, oku kungokwemvelo, kuba i-VLAN iyisihloko esinzima kakhulu kwaye sibanzi esiya kubuyela kuso kwizifundo ezizayo. Ndiyaqinisekisa ukuba ngoncedo lwam unokuba yinkosi yeVLAN, kodwa ingongoma yesi sifundo yayikukucacisa imibuzo emi-3 kuwe: ziziphi iiVLAN, kutheni sizifuna kunye nendlela yokuyiqwalasela.
Enkosi ngokuhlala nathi. Ngaba uyawathanda amanqaku ethu? Ngaba ufuna ukubona umxholo onomdla ngakumbi? Sixhase ngokufaka iodolo okanye ngokucebisa abahlobo, I-30% isaphulelo kubasebenzisi beHabr kwi-analogue ekhethekileyo yeeseva zomgangatho wokungena, eyenzelwe wena: (ifumaneka nge-RAID1 kunye ne-RAID10, ukuya kuthi ga kwi-24 cores kunye ne-40GB DDR4).
I-Dell R730xd 2 amaxesha aphantsi? Kuphela apha eNetherlands! Dell R420 - 2x E5-2430 2.2Ghz 6C 128GB DDR3 2x960GB SSD 1Gbps 100TB - ukusuka $99! Funda malunga
umthombo: www.habr.com