
Sawubona bangane! Namuhla ngizoqhubeka nochungechunge olunikezelwe i-athikili emayelana nomklamo wenethiwekhi yebhizinisi.
Kulesi sihloko ngizozama ukuba mfushane ngangokunokwenzeka:
- chaza indlela ye-modular yokuklama inethiwekhi ye-Etnterprise
- cabangela izinhlobo zokwakhiwa kweyodwa yamamojula abaluleke kakhulu enethiwekhi yebhizinisi - inethiwekhi eyinhloko (i-ip-campus)
- chaza izinzuzo kanye nokubi kwezinketho zokulondoloza ama-node enethiwekhi abalulekile
- usebenzisa isibonelo esingabonakali ukuze udizayine/ubuyekeze inethiwekhi encane Yebhizinisi
- khetha Ukushintsha Okudlulele ukuze usebenzise inethiwekhi eklanyelwe
- sebenza ngemicu kanye nekheli le-IP
Lesi sihloko sizothakazelisa kakhulu konjiniyela benethiwekhi kanye nabaphathi benethiwekhi yebhizinisi abasanda kuqala uhambo lwabo "njengomsebenzi wenethiwekhi" kunonjiniyela abanolwazi asebesebenze iminyaka eminingi ku-telecom opharetha noma ezinkampanini ezinkulu ezinamanethiwekhi asabalaliswa ngokwendawo.
Kunoma yikuphi, kulabo abanentshisekelo, sicela ubheke ikati.
Indlela yokuklama inethiwekhi ye-modular
Ngizoqala i-athikili yami ngendlela ethandwa kakhulu ye-modular ekwakhiweni kwenethiwekhi, ekuvumela ukuthi uhlanganise iphazili kusuka ezingxenyeni zenethiwekhi ibe yisithombe esisodwa.
Okokuqala, ukukhishwa okuncane - ngivame ukucabanga le ndlela njengokusondeza kumamephu we-geo, lapho izwe libonakala ekulinganisweni kokuqala, izifunda kwesibili, amadolobha okwesithathu, njll.
Njengesibonelo, cabangela lesi sibonelo:
- 1st approximation - yonke inethiwekhi yebhizinisi isethi yamazinga ahlukene:
- umgogodla noma ikhampasi
- izinga lomngcele
- Ileveli ye-telecom operator
- izindawo ezikude
- Ukulinganisa kwesibili - ngalinye kulawa leveli linemininingwane libe amamojula ahlukene
- Inethiwekhi eyinhloko noma ikhampasi iqukethe:
- 3- noma 2-level module echaza inethiwekhi yebhizinisi kanye namazinga ayo - ukufinyelela, ukusatshalaliswa kanye/noma umongo
- imojula echaza isikhungo sedatha - isikhungo sokucubungula idatha (empeleni ingxenye yeseva yengqalasizinda)
- izinga lomngcele lona liqukethe:
- Imojula yokuxhumeka kwe-inthanethi
- Imojula ye-WAN ne-MAN, enesibopho sokuxhuma izinto zebhizinisi ezisatshalaliswe ngokwezindawo
- imojula yokwakha imigudu ye-VPN kanye nokufinyelela kokufinyelela kude
- Imvamisa, amabhizinisi amaningi amancane anamamojula amaningana, noma wonke, ahlanganiswe kwelinye
- ileveli yomhlinzeki:
- Leli zinga lihlanganisa ukuxhumana "ezweni elingaphandle" - ama-fiber optical amnyama (ukuqasha ama-fibers kuma-opharetha), iziteshi zokuxhumana (i-Ethernet, G.703, njll.), Ukufinyelela ku-inthanethi.
- ileveli yesilawuli kude:
- ngokwengxenye enkulu, lawa amagatsha ebhizinisi asatshalaliswa ngaphakathi kwedolobha, isifunda, izwe noma ngisho namazwekazi.
- le zoni ingase futhi ifake isikhungo sedatha eyisipele, esiphinda umsebenzi omkhulu
- futhi-ke, isanda kuthola ukuthandwa - abasebenza ngocingo (imisebenzi ekude)
- Inethiwekhi eyinhloko noma ikhampasi iqukethe:
- Ukulinganisa kwesithathu - imojuli ngayinye ihlukaniswe ngamamojula amancane noma amaleveli. Isibonelo, kunethiwekhi yekhampasi:
- Inethiwekhi ye-3-tier ihlukaniswe yaba:
- izinga lokufinyelela
- izinga lokusabalalisa
- izinga le-kernel
- Ezimweni eziyinkimbinkimbi kakhulu, isikhungo sedatha singahlukaniswa sibe:
- 2 noma 3 ingxenye yenethiwekhi yezinga
- ingxenye yeseva
Ngizozama ukubonisa konke okungenhla emfanekisweni owenziwe lula olandelayo:

Njengoba kubonakala esithombeni esingenhla, indlela ye-modular isiza ekuchazeni nasekuhleleni isithombe sisonke sibe izingxenye ezingasetshenzwa ngazo esikhathini esizayo.Ngezinjongo zalesi sihloko, ngizogxila ezingeni le-Campus Enterprise futhi ngiyichaze kabanzi.
Izinhlobo zamanethiwekhi e-IP-CAMPUS
Ngenkathi ngisebenzela umhlinzeki, futhi ikakhulukazi kamuva lapho ngisebenza njengomdidiyeli, ngangibhekene “nokuvuthwa” okuhlukile kwamanethiwekhi amakhasimende. Angisebenzisi igama lokuvuthwa ngeze, ngoba ngokuvamile kunezimo lapho isakhiwo senethiwekhi sikhula ngokukhula kwenkampani ngokwayo, futhi lokhu, empeleni, kungokwemvelo.
Enkampanini encane etholakala ngaphakathi kwebhilidi elilodwa, inethiwekhi yebhizinisi ingase iqukathe umzila onqenqemeni o-1 kuphela osebenza njengodonga lokuvikela, amaswishi amaningi okufinyelela kanye namaseva ambalwa.
Inethiwekhi enjalo ngiyibiza ngokuthi inethiwekhi “yesendlalelo esisodwa” - asikho neze isendlalelo esisobala senethiwekhi, isendlalelo sokusabalalisa sishintshelwa kumzila onqenqemeni (nge-firewall, i-VPN kanye nemisebenzi ye-proxy okungenzeka), futhi amaswishi okufinyelela asebenza kokubili amakhompyutha abasebenzi futhi amaseva.

Lapho ibhizinisi likhula—likhulisa isibalo sabasebenzi, izinsizakalo, namaseva—kuye kudingeke ukuthi:- khulisa inani lokushintsha kunethiwekhi kanye nezimbobo zokufinyelela
- khulisa umthamo weseva
- lwa nezizinda zokusakaza - sebenzisa ukuhlukaniswa kwenethiwekhi kanye nomzila phakathi kwamasegimenti
- ukubhekana nokwehluleka kwenethiwekhi okudala ukungasebenzi kwabasebenzi, njengoba lokhu kuhlanganisa nezindleko ezengeziwe zezimali zokuphatha (isisebenzi asisebenzi, siyakhokhelwa, kodwa umsebenzi awenziwa)
- enqubweni yokubhekana nokwehluleka, cabanga ngokungasebenzi kabusha kwamanodi enethiwekhi abalulekile - ama-routers, amaswishi, amaseva kanye nezinsizakalo
- qinisa inqubomgomo yezokuphepha, njengoba kungase kuvele izingozi zezohwebo futhi, futhi, ukuze kusebenze inethiwekhi ezinzile
Konke lokhu kuholela eqinisweni lokuthi unjiniyela (umphathi wenethiwekhi) ngokushesha noma kamuva ucabanga ngokwakhiwa okulungile kwenethiwekhi futhi ufika kumodeli wezinga le-2.
Le modeli isivele ihlukanisa ngokucacile amazinga angu-2 - izinga lokufinyelela kanye nezinga lokusabalalisa, okubuye kube ileveli eyinhloko (umgogodla ogoqiwe).
Ukusabalalisa okuhlanganisiwe kanye nezendlalelo ze-kernel zenza imisebenzi elandelayo:
- ihlanganisa izixhumanisi ezivela ekushintsheni kokufinyelela
- yethula umzila wezingxenye zenethiwekhi - kunabasebenzisi abaningi namadivayisi angakwazi ukungena kunethiwekhi eyodwa / 24, futhi uma elingana, iziphepho zokusakaza zibangela ukwehluleka okuqhubekayo (ikakhulukazi uma abasebenzisi bebasiza ngokudala izihibe)
- inikeza ukuxhumana phakathi kwezingxenye zokushintshwa eziseduze (ngezixhumanisi ezisheshayo)
- inikeza ukuxhumana phakathi kwabasebenzisi kanye namadivayisi abo kanye nepulazi leseva, okuthi ngalesi sikhathi futhi iqale ukuhlukaniswa ibe ingxenye yenethiwekhi ehlukile - isikhungo sedatha.
- iqala ukuhlinzeka, kanye nokushintsha kokufinyelela, ngezinga elithile noma kwelinye, inqubomgomo yezokuphepha inkampani eqala ukuba nayo ngalesi sikhathi. Inkampani ikhula, futhi izingozi zezohwebo nazo ziyakhula (lapha angisho nje kuphela izinhlinzeko eziyimfihlo zokuhweba, ukuhlukaniswa kwezinqubomgomo zokufinyelela, njll., kodwa futhi nesikhathi esiyisisekelo sokuphumula senethiwekhi nabasebenzi).
Ngakho-ke, inethiwekhi ngokushesha noma kamuva ikhula ibe imodeli yezinga elingu-2:

Le modeli yethula izidingo ezikhethekile zombili zokushintsha kweleveli yokufinyelela, ezihlanganisa izixhumanisi ezivela kubasebenzisi namadivayisi enethiwekhi (amaphrinta, izindawo zokufinyelela, amadivayisi we-VoIP, amafoni we-IP, amakhamera we-IP, njll.) kanye namaswishi ezinga lokusabalalisa nama-kernel.Amaswishi okufinyelela kufanele ahlakaniphe futhi akwazi ukuhlangabezana nokusebenza kwenethiwekhi, ukuphepha, nezimfuneko zokuvumelana nezimo futhi kufanele:
- babe nezinhlobo ezahlukene zamachweba okufinyelela kanye namachweba amakhulu - okungcono uma kungenzeka kube nendawo yokugcina izimoto kanye nenani lamachweba
- ube namandla okushintsha owanele kanye nokusebenza
- abe nokusebenza kokuphepha okudingekayo okunganelisa inqubomgomo yezokuphepha yamanje (futhi ngokufanelekile, ukukhula kwezimfuneko zayo ezengeziwe)
- banamandla okunika amandla amadivayisi enethiwekhi okunzima ukuwafinyelela anekhono lokuwaqalisa kabusha ukude usebenzisa amandla (i-PoE, i-PoE+)
- ukwazi ukuzigcinela owakho ugesi ukuze uwusebenzise ezindaweni lapho edingeka khona
- babe (uma kungenzeka) amathuba engeziwe okukhula ekusebenzeni - isibonelo esivamile lapho iswishi yokufinyelela igcina iphenduke iswishi yokusabalalisa
Amaswishi okusabalalisa nawo angaphansi kwezidingo ezilandelayo:
- kokubili ngokuya ngamachweba we-trunk downlink abheke ekushintsheni kokufinyelela, kanye nasekuxhumaneni kontanga kwamaswishi okusabalalisa angomakhelwane (futhi esikhathini esizayo, ukuxhumana okungaba khona kwe-uplink ku-kernel)
- ngokusebenza kwe-L2 kanye ne-L3
- mayelana nokusebenza kokuphepha
- mayelana nokuqinisekisa ukubekezelelwa kwamaphutha (ukuphelelwa umsebenzi, ukuhlanganisa kanye nokwehliswa kwamandla)
- mayelana nokuhlinzeka ngokuguquguquka lapho kulinganisa ithrafikhi
- babe (uma kungenzeka) amathuba engeziwe okukhula ekusebenzeni (ukuguqulwa kwedivayisi yokuhlanganisa ibe yingqikithi ngokuhamba kwesikhathi)
- kwezinye izimo, kungase kulungele ukusebenzisa izimbobo ze-PoE, i-PoE+ kumaswishi okusabalalisa.
Ngaphezu kwalokho - ngaphezulu: uma abaphathi bephishekela inqubomgomo yokukhula okusebenzayo nokuthuthukiswa kwebhizinisi, inethiwekhi izoqhubeka nokuthuthuka esikhathini esizayo - ibhizinisi lingaqala ukuqasha izakhiwo ezingomakhelwane, ukwakha izakhiwo zalo noma ukudonsa izimbangi ezincane, ngaleyo ndlela anda. inani lemisebenzi yabasebenzi. Ngasikhathi sinye, inethiwekhi iyakhula, edinga:
- ukuhlinzeka abasebenzi ngezindawo zokusebenza - amaswishi amasha okufinyelela anezimbobo zokufinyelela ayadingeka
- ukutholakala kwamaswishi amasha okusabalalisa okuhlanganisa izixhumanisi ezivela kumaswishi okufinyelela
- ukwakhiwa kwezintambo ezintsha, kanye nokuthuthukiswa kwezintambo zokuxhumana ezikhona
Ngenxa yalokho, ithrafikhi iyanda ngenxa yezizathu ezilandelayo:
- ngenxa yokwanda kwamachweba okufinyelela futhi, ngokufanele, abasebenzisi benethiwekhi
- ngenxa yokwanda kwethrafikhi evela ezinhlelweni ezingaphansi eziseduze ezikhetha inethiwekhi yebhizinisi njengezokuthutha - ucingo, ukuphepha, izinhlelo zobunjiniyela, njll.
- ngenxa yokwethulwa kwezinsizakalo ezengeziwe - ngokukhula kwabasebenzi, iminyango emisha ivela edinga isofthiwe ethile
- amandla ekhompuyutha esikhungo sedatha ayakhula ukuze ahlangabezane nezimfuneko zohlelo lokusebenza
- izidingo zokuphepha zenethiwekhi nolwazi ziyakhula - i-CIA triad edumile (ihlaya), kodwa ngokungathí sina, i-CIA - Ubumfihlo, Ubuqotho kanye Nokutholakala:
- Mayelana nalokhu, izidingo ezengeziwe zokubekezelela amaphutha kanye nokungaqedi umsebenzi zivela kumazinga abalulekile enethiwekhi - izikhungo zokusabalalisa nedatha.
- futhi, kukhona ukwanda kwethrafikhi ngenxa yokwethulwa kwezinhlelo ezintsha zokuphepha - isibonelo, i-RKVI, njll.
Ngokushesha noma kamuva, ukukhula kwethrafikhi, izinsizakalo kanye nenani labasebenzisi kuzoholela esidingweni sokwethula isendlalelo senethiwekhi eyengeziwe - umnyombo, ozokwenza ukushintshwa kwejubane eliphezulu / umzila wamaphakethe usebenzisa izixhumanisi zokuxhumana ngesivinini esikhulu.
Kuleli qophelo, inkampani ingadlulela kumodeli yenethiwekhi yeleveli engu-3:

Njengoba ungabona emfanekisweni ongenhla, kunethiwekhi enjalo kunezinga eliyisisekelo, elihlanganisa izixhumanisi zejubane eliphezulu kusuka ekushintsheni kokusabalalisa. Ngakho-ke, ukushintshwa kwe-kernel nakho kubhekana nezidingo zoku:- i-interface bandwidth - 1GE, 2.5GE, 10GE, 40GE, 100GE
- shintsha ukusebenza (ukushintsha umthamo kanye nokusebenza kokudlulisela phambili)
- izinhlobo zesixhumi esibonakalayo - 1000BASE-T, SFP, SFP+, QSFP, QSFP+
- inombolo kanye nesethi yokuxhumana
- amandla okushintsha kabusha (ukunqwabelanisa, ukuhlanganisa, ukuphinda kusetshenziswe amabhodi okulawula (okufanelekile kuma-switch modular), ukuncipha kwamandla, njll.)
- ukusebenza
Kuleli zinga lenethiwekhi, ukuguqulwa kobuchwepheshe kuyadingeka ngempela:
- ukuphindaphindeka kwama-kernel node nezixhumanisi (kakhulu, kakhulu, efiseleka kakhulu)
- ukungafuneki kwamanodi nezinga lokusabalalisa (kuye ngokuthi kubaluleke kangakanani)
- ukungadingeki kwezixhumanisi zokuxhumana phakathi kwamaswishi okufinyelela kanye nezinga lokusabalalisa (uma kunesidingo)
- ukwethulwa kwamaphrothokholi omzila aguqukayo
- ukulinganisa kwethrafikhi kokubili kungqikithi kanye namazinga okusabalalisa nawokufinyelela (uma kunesidingo)
- ukuqaliswa kwezinkonzo ezengeziwe - kokubili ezokuthutha nezinsizakalo zokuphepha (uma kunesidingo)
kanye nezomthetho, echaza inqubomgomo yokuphepha yenethiwekhi yebhizinisi, ehambisana nenqubomgomo yokuphepha evamile ngokuya:
- izimfuneko zokuqaliswa nokucushwa kwemisebenzi ethile yokuphepha kumaswishi okufinyelela nokusabalalisa
- izidingo zokufinyelela, ukuqapha kanye nokuphatha okokusebenza kwenethiwekhi (izivumelwano zokufinyelela kude, izingxenye zenethiwekhi ezivunyelwe ukuphathwa, izilungiselelo zokungena, njll.)
- izidingo zokubhuka
- izidingo zokwakhiwa kwekhithi yezingxenye ezisele ezidingekayo
Kulesi sigaba, ngichaze kafushane ukuvela kwenethiwekhi kanye nebhizinisi kusuka ekushintsheni okumbalwa kanye nabasebenzi abambalwa kuya kweshumi nambili (futhi mhlawumbe amakhulu okushintsha) kanye namakhulu ambalwa (noma izinkulungwane) zalabo basebenzi abasebenza ngokuqondile. kunethiwekhi yebhizinisi (futhi emva kwakho konke Kukhona neminyango yokukhiqiza kanye namanethiwekhi onjiniyela).
Kuyacaca ukuthi empeleni "okumangalisayo" futhi ukuthuthukiswa okusheshayo kwebhizinisi akwenzeki.
Ngokuvamile kuthatha iminyaka ukuthi ibhizinisi nenethiwekhi zikhule ukusuka kuleveli yokuqala ukuya kuleveli yesi-1 engiyichazayo.Kungani ngibhala wonke lawa maqiniso? Khona-ke, ngifuna ukusho lapha igama elifana ne-ROI - ukubuyisela-on-investment (ukubuyisela/ukubuyisela ekutshalweni kwezimali) futhi ucabangele lolo hlangothi lwalo oluthinta ngokuqondile ukukhethwa kwemishini yenethiwekhi.
Lapho kukhethwa imishini, onjiniyela benethiwekhi nabaphathi babo bavame ukukhetha okokusebenza okusekelwe ezintweni ezi-2 - inani lamanje lemishini kanye nobuncane bokusebenza kwezobuchwepheshe okudingekayo njengamanje ukuxazulula umsebenzi othile noma imisebenzi ethile (ngizokhuluma ngokuthenga imishini ukuze ingasebenzi kabusha ngokuhamba kwesikhathi. ).
Ngesikhathi esifanayo, amathuba okuthi "ukukhula" okuqhubekayo kwemishini acatshangelwe. Uma isimo siphakama lapho okokusebenza sekuphelelwe amandla ngokwemibandela yokusebenza noma ukusebenza, khona-ke okunamandla kakhulu futhi okusebenzayo kuthengwa esikhathini esizayo, futhi endala idluliselwa endaweni yokugcina impahla noma kwenye indawo kunethiwekhi ngomgomo othi “ukuze stand” (lokhu, ngendlela, kubangela ukuvela kwe-zoo enkulu yemishini nokuthenga inqwaba yezinhlelo zolwazi ezisebenza nayo).
Ngakho, esikhundleni sokuthenga ingxenye yamalayisensi engeziwe. ukusebenza nokusebenza, okushibhe kakhulu kunemishini emisha, esebenza kahle kakhulu, kufanele uthenge ihadiwe entsha futhi ukhokhe ngokweqile ngenxa yalezi zizathu ezilandelayo:
- inethiwekhi ivamise ukukhula kancane futhi ukunwetshwa komsebenzi noma ukusebenza kweswishi kunethiwekhi yakho kungase kwanele isikhathi eside.
- Akuyona imfihlo ukuthi imishini evela kubathengisi bangaphandle iboshwe ngemali yangaphandle (i-dollar noma i-euro). Uma sikhuluma iqiniso, ukukhula kwedola noma i-euro (noma i-mini-devaluation ye-ruble, kuye ngokuthi uyibheka kanjani) kuholela eqinisweni lokuthi idola eminyakeni eyi-10 edlule kanye nedola manje liyizinto ezihluke ngokuphelele ku- umbono we-ruble
Ngifingqa konke lokhu okungenhla, ngingathanda ukuqaphela ukuthi ukuthenga okokusebenza kwenethiwekhi ngokusebenza okubanzi manje kungaholela ekongeni esikhathini esizayo.
Lapha ngibheka izindleko zokuthenga izinto zokusebenza kumongo wokutshala imali kunethiwekhi yami nengqalasizinda.Ngakho-ke, abathengisi abaningi (hhayi kuphela i-Extreme) banamathela kumgomo wokukhokha njengoba-ukhula, bapakisha ukusebenza okuningi kumishini kanye namathuba okwandisa ukusebenza kwesixhumi esibonakalayo, okuvulwa kamuva ngokuthenga amalayisensi ahlukene. Baphinde banikeze ngokushintsha kwe-modular enohlu olubanzi lwesixhumi esibonakalayo namakhadi okucubungula, kanye nekhono lokukhulisa ngokuqhubekayo kokubili inombolo yabo nokusebenza.
Ukudayiswa kwama-node abalulekile
Kule ngxenye ye-athikili, ngithanda ukuchaza kafushane izimiso eziyisisekelo zokuphindaphinda ama-node abalulekile enethiwekhi njengengqikithi, isikhungo sedatha noma ukushintshwa kokusabalalisa. Futhi ngifuna ukuqala ngokubheka izinhlobo ezijwayelekile zokubhukha - ukunqwabelanisa nokuhlanganisa.
Indlela ngayinye inobuhle nebubi bayo, engingathanda ukukhuluma ngayo.
Ngezansi ithebula elifingqiwe elijwayelekile eliqhathanisa izindlela ezi-2:

- ukuphatha - njengoba kungabonakala etafuleni, kulokhu, ukupakisha kunenzuzo, kusukela ekubukeni kokuphatha, inqwaba yokushintshwa okuningana ibonakala njengeswishi eyodwa enenani elikhulu lamachweba. Esikhundleni sokuphatha, yithi, ukushintsha oku-8 okuhlukene ngokuhlanganisa, ungaphatha eyodwa kuphela ngokupakisha.
- ibanga - okwamanje, uma sikhuluma ngokuqinile, inzuzo yokuhlanganisa ayibonakali kangako, ngoba ubuchwepheshe bokushintshashintsha ngokufaka amachweba noma amachweba anezinjongo ezimbili (isibonelo, i-SummitStack-V ye-Extreme, i-VSS ye-Cisco, njll.), okubuye kuncike ezinhlotsheni zama-transceivers. Lapha, inzuzo inikezwa ukuhlanganisa ngokusekelwe esimisweni sokuthi uma ubeka, kunezinketho lapho kufanele usebenzise amachweba wokupakisha ajwayelekile, avame ukuxhunyaniswa nezintambo ezikhethekile zobude obulinganiselwe - 0.5, 1, 1.5, 3 noma 5 amamitha.
- Ukuvuselelwa Kwesoftware - lapha sibona ukuthi ukuhlanganisa kunenzuzo ngaphezu kokunqwabelanisa futhi iphuzu yilokhu okulandelayo - lapho ubuyekeza inguqulo yesofthiwe yemishini ngesikhathi sokupakisha, ubuyekeza isofthiwe ku-master switch, kamuva ethatha indima yokubeka isofthiwe entsha ku-stacking. amaswishi elungu elilindile lesitaki. Ngakolunye uhlangothi, lokhu kwenza umsebenzi wakho ube lula, kodwa ukuvuselela isofthiwe ngokuvamile kudinga ukuqaliswa kabusha kwe-hardware yemishini, okuholela ekuqaliseni kabusha isitaki sonke futhi ngaleyo ndlela kube nokuphazamiseka ekusebenzeni kwayo nazo zonke izinsizakalo ezihambisana nayo isikhathi esithile. isikhathi = isikhathi sokuqalisa kabusha. Lokhu kuvame ukubaluleke kakhulu kusizindalwazi kanye nesikhungo sedatha. Ngokuhlanganisa, unamadivayisi angu-2 azimele, ongabuyekeza isofthiwe ngokulandelana ngokulandelana. Kulokhu, ukuphazamiseka kumasevisi kungagwenywa.
- ukucushwa kwezilungiselelo - lapha, yiqiniso, ukupakisha kunenzuzo, ngoba endabeni yokuphatha, udinga kuphela ukuhlela izilungiselelo zedivayisi eyodwa kanye nefayela layo lokucushwa. Ngokuhlanganisa, inani lamafayela okumisa lizolingana nenani lamanodi eqoqo.
- ukubekezelelana kwamaphutha - lapha bobabili ubuchwepheshe bucishe bulingane, kodwa ukuhlanganisa kusenenzuzo encane. Isizathu lapha sikulokhu okulandelayo - uma sicubungula isitaki ngokombono wokuqhuba izinqubo nezivumelwano, sizobona okulandelayo:
- kukhona i-master-switch lapho zonke izinqubo nezimiso eziyisisekelo zisebenza khona (isibonelo, i-dynamic routing protocol - OSPF)
- kukhona amanye amaswishi okushintsha izigqila asebenzisa izinqubo eziyinhloko ezidingekayo ukuze kusebenze esitakini futhi kunikezwe ithrafikhi edlula kuzo
- Lapho i-master-switch yehluleka, ukushintshwa kwesigqila okubalulekile okulandelayo kuthola ukwehluleka okuyinhloko
- iyaziqalisa njengengcweti futhi iqala zonke izinqubo ebezisebenza ku-master (kuhlanganise nephrothokholi ye-OSPF esiyibonile)
- ngemva kwesikhathi esithile ukuze izinqubo ziqale (imvamisa zimfushane kakhulu), iphrothokholi ye-OSPF ngokwayo iqala ukusebenza
- Ngakho-ke, uma enye yama-node ihluleka, i-OSPF izosebenza ngokushesha kancane phakathi nokuhlanganisa kunalapho kunqwabelanisa (isikhathi esidingekayo ukuze kuqaliswe futhi kuqaliswe izinqubo kanye nezivumelwano ekushintsheni kwesigqila sesitaki). Nakuba kufanele ngiqaphele ukuthi amaphrothokholi namaswishi amastakhi asebenza ngokushesha kakhulu, ngokuvamile ubude besikhathi sokuphazamiseka kwethrafikhi lapho ushintsha isitaki sithatha ngaphansi kwesekhondi elilodwa, kodwa noma kunjalo ukuhlanganisa ngokwegama kuyawina kule pharamitha.
- ubunkimbinkimbi - njengoba kungabonwa etafuleni, ukunqwabelanisa kuyawina ngokuya ngobunkimbinkimbi. Lona umphumela oqondile wezinto "zokulawula" kanye "nokulungiselelwa kwezilungiselelo". I-node eyodwa ithatha isikhathi esincane kakhulu ukuyilungisa nokuphatha. Futhi, lapho uhlanganisa, ngokuvamile kufanele ulungiselele izivumelwano zomzila ezengeziwe noma izivumelwano zokubhuka zesango - i-VRRP, i-HSRP nezinye.
- ukushintshwa kwamayunithi - ukupakisha kunenzuzo ecacile lapha. Imvamisa, ukufaka esikhundleni iswishi kusitaki, kuyadingeka ukwenza izilungiselelo ezidingekayo zehadiwe, isibonelo:
- buyekeza isofthiwe yeswishi entsha enguqulweni yesofthiwe yesitaki (futhi lokhu kungenziwa ngokushesha lapho amaswishi efika kuphakheji yezingxenye ezisele)
- lungiselela imiyalo embalwa eyisisekelo yokunqwabelanisa (futhi kwezinye izinhlobo zokushintsha ngisho nalokhu kungase kungadingeki)
- khipha iswishi sesitaki esihlulekile bese uxhuma esisha
- xhuma ukunikezwa kwamandla kanye nezintambo zokuchibiyela
- ukuqina - Ngizicabangela njengenye yemingcele eyinhloko. Ngokuvamile, ukunwebeka kuyisici esiyinkimbinkimbi, okusho ukuthi impahla yento ezoshintsha ngaphansi kwethonya lomthwalo futhi ibuyele esimweni sayo sokuqala ngemva kokunyamalala kwayo. Okuxakayo ukuthi, ekuhlanganiseni kuzoba phezulu uma kucatshangelwa amaphuzu angu-4:3 ngokwezimpawu ezihambisana nokunqwabelanisa. Konke kumayelana nesici somuntu. Yebo, yebo, ungamangali - amandla amapharamitha wokupakisha njengokulawula okuhlanganisiwe, ukumiswa kwezilungiselelo nobunzima obungasindi nakho kusebuthakathakeni bokupakisha lapho isici somuntu siqala ukusebenza.
Ngesikhathi ngisebenza emkhakheni we-IT, ngiye ngabhekana nezimo izikhathi eziningi (futhi masikhulume iqiniso, nginyathele erekeni elifanayo nami, ikakhulukazi ekuqaleni) lapho, lapho ebeka isitaki, unjiniyela wenza iphutha ngokufaka umyalo othile noma ukunika amandla/ukukhubaza lokhu noma lokho kusebenza kusisetshenziswa, okuholele ekuhlulekeni kwaso sonke isitaki kanye nokuqalisa phansi kwaso okwenziwa ngesandla. Ukushiwo okukhethekile kwabalandeli bohlelo lokusebenza lwe-Putty lwe-Windows (oh, ukukopisha ngokuchofoza kwesokudla).
Eqinisweni, kokubili ubuchwepheshe buhle kakhulu (ikakhulukazi uma kuqhathaniswa nokungabi nalutho) futhi ngayinye inamandla nobuthakathaka bayo, kodwa ngezinga eliyinhloko kanye nesikhungo sedatha esiphezulu, ngisangathanda ukusebenzisa i-clustering.
Nakuba lokhu kuwumbono wami nje. Onjiniyela abaningi abangochwepheshe ababambe iqhaza ekusekelweni kwenethiwekhi iminyaka eminingi ezingeni lochwepheshe bangasebenzisa ngokulinganayo bobabili ubuchwepheshe - konke kuncike kokuhlangenwe nakho neziqu.
Ngokungeziwe kubuchwepheshe bokupakisha nokugcina amanodi enethiwekhi, kukhona nezimiso ezijwayelekile zokubeka izingxenye zenodi yenethiwekhi ngokwayo kanye nokuxhumana phakathi kwamanodi:
Ngokubhukha ngaphakathi kwenodi yenethiwekhi ngisho:
- ukungadingeki kwezinto zikagesi - ukufaka izinto ezisetshenziswa amandla ezi-2 eziphindaphindayo (futhi okungcono zixhunywe esigabeni soku-1 sokuphakelwa kwamandla) kungenza impilo yakho ibe lula kakhulu.
- ukuphindaphindeka kwamabhodi okulawula - ngokwezinga elikhulu lisebenza ekushintsheni kwe-modular, okuhlinzeka ngokuxhunywa kwamabhodi okulawula amaningana aphindaphindayo.
- ukungadingeki kwamakhadi esixhumi esibonakalayo - futhi kusebenza kakhulu ekushintsheni kwe-modular.
Ukubhukha kokuxhumana/izixhumanisi ngokuyisisekelo kusho ukuba khona kwemizila yamakhebula edlulanayo (noma izixhumanisi zomsakazo uma kunezikhala ezivulekile) ngale:
- ukusatshalaliswa phezu kwamashafu ekhebula ahlukene namashaneli ngaphakathi kwesakhiwo
- ukusatshalaliswa kwendawo endaweni ezingeni lamabhilidi angu-2 noma ngaphezulu, idolobha, isifunda noma izwe (okuthiwa izindandatho zevolumu)
Ngasikhathi sinye, lapho wakha izixhumanisi zokuxhumana eziyisipele, kubalulekile ukulandela izincomo eziningi zemishini:
- uma kwenzeka ukuphindwaphindwa kwamakhadi esixhumi esibonakalayo sokushintsha kwe-modular, noma lapho kukhona isitaki, kuyadingeka ukusabalalisa izixhumanisi phakathi kwamayunithi - amakhadi esixhumi esibonakalayo esimweni sokushintshwa kwe-modular kanye nokushintsha esimweni sesitaki.
- Kutuswa ukusebenzisa izivumelwano zokuhlanganisa ukuxhumana (i-LACP, i-MLT, i-PAgP, njll.) ukuze uhlanganise izixhumanisi zibe ngamaqembu futhi ulinganise umthwalo phakathi kwazo.
- sebenzisa amarutha asekela imigomo ye-ECMP (Equal-Cost-Multi-Path) - lapho, lapho amaphakethe amaningana elethwa ngomzila owodwa, lawa maphakethe awahambi ngendlela eyodwa engcono kakhulu (kanye nesixhumi esibonakalayo) kodwa asatshalaliswa ngezindlela ezimbalwa ezihamba phambili (futhi izindawo eziningana zokusebenzelana), ezinqunywa ngokulingana kwamamethrikhi ephrothokholi yomzila, yona enesibopho sokugcwalisa ithebula lokugcina lomzila.
Futhi manje, njengoba ngithenjisiwe, ngizochaza icala langempela kusuka ekusebenzeni kwami kanye nomgomo wokulondoloza lapho ugcina ama-node abalulekile, okwenzeka eminyakeni embalwa edlule:
- Inkampani eyodwa, ngizoyibiza ngo-X, yayinemodeli yenethiwekhi ye-3-tier ejwayelekile:
- nama-cores amaningi
- inqwaba aggregations eziningana
- izinkulungwane ezimbalwa zokushintshwa kokufinyelela
- amashumi ezinkulungwane zabasebenzisi
- inethiwekhi yakhiwe ngendlela eyinkimbinkimbi:
- ngenqwaba yemithethonqubo eguquguqukayo yomzila nezivumelwano - i-OSPF, i-MP-BGP, i-MPLS, i-PIM, i-IGMP, i-IPv6, njll.
- inqwaba yezinsizakalo - Ukufinyelela ku-inthanethi, i-L2 ne-L3 VPN, i-VoIP, i-IPTV, imigqa eqashiwe, njll.
- kodwa bekunebhodlela elilodwa kunethiwekhi - irutha yasemngceleni ehlanganisa imisebenzi yomngcele we-BGP futhi yanqamula izinsiza ezithile zomsebenzisi.
- yebo, ibiza imali elingana nephiko lendiza (ama-ruble ayizigidi ezimbalwa)
- yebo, ngaleso sikhathi kwakungenye yamadivayisi aphezulu emgqeni womthengisi wenethiwekhi owaziwa kakhulu
- yebo, bekufanele ithembeke kakhulu - ngesilinganiso esihle kakhulu se-MTBF
- yebo, ibinamandla angu-4, ahlanganiswe ngokohlelo lwe-2x2 futhi axhunywe ku-UEPS ehlukene nokokufaka.
Kodwa konke lokhu akuzange kushintshe iqiniso lokuthi kwakuyiphuzu elilodwa lokwehluleka kwenethiwekhi.
Futhi ngolunye usuku, kude nokumangalisa kimina nozakwethu, le router yafa isikhathi eside (kamuva sathola ukuthi kwakukhona uhlobo oluthile lokwehluleka kulayini kagesi nge-UEPS, okuholele ekukhishweni kwamandla kagesi angu-2 ngesikhathi esifanayo nalapho Kulokhu, enye yamabhulokhi yashisa imodyuli ye-RP router kanye nekhadi le-interface, elixhunywe kwibhasi yedatha evamile yedivayisi).
Besingenawo amabhodi asekelayo - i-RP kanye nekhadi lesixhumi esibonakalayo, kodwa bekunenkontileka yokushintshwa kwemishini noma izingxenye zayo ngomunye wozakwethu ngaphansi kohlelo lwe-NBD.
Ngeshwa, ngaleso sikhathi ozakwethu babenekhadi le-interface kuphela esitokweni, kodwa bengenalo ibhodi le-RP; lafika ezinsukwini ezimbalwa kamuva (ngemuva kwezinsuku ezi-3).
Ngenxa yalokho, ukuba khona kwephuzu elilodwa lokwehluleka kunethiwekhi (ngisho nenkontileka yokusekela nokushintshwa kwemishini) kubangele izindleko zezimali ezilandelayo:
- isabelo sezinsizakalo zenkampani esidalwe noma esihlobene nalo mngcele sasicishe sibe ngama-60-70%
- njengoba kwabalwa kamuva, inzuzo yansuku zonke yayingama-ruble ayizinkulungwane ezingu-900 (cishe) ngaleso sikhathi.
- Ngakho-ke, ezinsukwini ezi-3 zokuphumula, ngokweqiniso, inzuzo yalahleka ngenani lama-ruble ayizinkulungwane eziyi-1 620 kuya kuma-ruble ayizinkulungwane eziyi-1 890.
Vele, ukulahlekelwa okuphelele bekukuncane, njengoba isinxephezelo sabasebenzisi abaningi asizange sibuyiswe ngendlela yemali, kodwa ngendlela yezinsizakalo, kodwa zazisekhona:
- ingxenye yesinxephezelo sabasebenzisi bezinkampani
- ukwanda kwezindleko zabasebenzi benkampani abasebenza zonke lezi zinsuku ze-3-4 ngamandla aphelele - isikhathi esengeziwe, amashifu ebusuku, amashifu anda, njll.
- ukulahlekelwa isithunzi, nakho okubalulekile
- futhi okubaluleke kakhulu - izinzwa kokubili abaphathi nabasebenzi, kanye namakhasimende
Ngenxa yalokho, inqubomgomo yenkampani yabuyekezwa:
- wenqabile inkontileka yokushintsha ngaphansi kwemibandela ye-NBD
- ushiye inkontileka yesevisi evamile
- uthenge umzila oyisipele obiza cishe ama-ruble ayizigidi ezingu-1 - 1.3 ukuze ugcine u-90% wokusebenza kweyokuqala.
Kamuva, ukuthengwa kwemishini eyengeziwe kanye nokubhuka okuyinhloko kwenza kwaba nokwenzeka ukulinganisa umthwalo ezixhumanisini zangaphandle, ithrafikhi nabasebenzisi phakathi kwazo, futhi kwanikeza umkhawulo wokuphepha wenkampani kwezinye izingozi.
Isibonelo se-Enterprise Network Design
Kule ngxenye ye-athikili ngizozama ukuchaza amaphuzu asemqoka lapho ngibala inethiwekhi ye-backbone yebhizinisi. Ngeke ngikulayishe ngokweqile ngayo yonke inqubo ye-PPDIOO (Prepare-Planning-Design-Implement-Operate-Optimize), kodwa ngizoveza amaphuzu ayo abalulekile kuphela:
- Lungiselela/Ukulungiselela - udinga ukunquma nabaphathi bakho mayelana nezinjongo zokwenza inethiwekhi yesimanje ofuna ukuyifinyelela - ukwandisa ukubekezelela amaphutha, ukwethula izinsizakalo ezintsha noma ubuchwepheshe. Ngizokweqa incazelo yemikhawulo - yezobuchwepheshe nenhlangano - lapha, njengoba ngicabanga ukuthi uyisisebenzi senhlangano futhi unesikhathi esiningi sokuyinqoba. Ngizobuyela esihlokweni sokwenza isabelomali esingezansi.
- Ukuhlela - lapha kuzodingeka wakhe incazelo ephelele yenethiwekhi yakho yamanje (uma ungayazi), i.e. chaza inethiwekhi njengoba injalo manje:
- ubuningi kanye nohlobo lwemishini
- inombolo kanye nezinhlobo zamachweba
- imizila yamakhebula ekhona kanye nezinhlelo zokushintsha ngaphakathi naphakathi kwezakhiwo
- amasekhethi okuphakela amandla
- I-L2 kanye ne-L3 yokukhuluma
- yakha amamephu amanethiwekhi e-Wi-Fi akhombisa izindawo zokufinyelela nezilawuli
- chaza ipulazi lakho leseva
- Kuyancomeka ukuchaza zonke izinsiza zakho kanye nokuxhumana phakathi kwazo
- uma usuvele usebenzise inqubomgomo yokuphepha yenethiwekhi kanye nenqubomgomo yokulawula ukufinyelela kwenethiwekhi ngendlela eyodwa noma enye, qiniseka ukuthi uyayicabangela lapho uklama.
- Ngizoqaphela ngokushesha ukuthi isinyathelo sesibili empeleni siwuhlu oluphelele lwenethiwekhi, kusukela kungqalasizinda yekhebula namasekhethi okuphakelwa kwamandla kagesi, futhi kuphele ngamasevisi (izinhlelo zokusebenza namachweba azo). Lesi sinyathelo sithatha isikhathi esiningi futhi siyakhathaza ngezinye izikhathi. Uma wena noma owandulelayo ningazange nigcine imibhalo noma ngisho nesistimu yokuqapha eyisisekelo, sekuyisikhathi sokucabanga ngakho. Inethiwekhi ijwayele ukushintsha ngokuhamba kwesikhathi ngesivinini esihlukile, futhi ukugcina kuphela imibhalo yakamuva noma isistimu yokuqapha ingakusiza ukuthi ulandelele isimo sayo futhi wenze lula ukuphathwa kwayo. Kodwa lokhu sekuvele kusebenza esinyathelweni sokusebenza.
- Idizayini - Uhlome ngolwazi olugcwele lwenethiwekhi yakho olutholwe esinyathelweni sangaphambilini, ekugcineni uhlala phansi ucabange ukuthi ungayenza kanjani inethiwekhi yakho ibe yesimanje. Ngezansi ngizozama ukukhombisa isibonelo esincane sokubala kwenethiwekhi.
Ngokwami, ngizihlanganisele uhlu oluncane olunedatha yokuqala ezongihola lapho ngibala futhi ngiklama inethiwekhi ewumongo.
Ake sicabange ngesinyathelo sokuLungiselela njengohlu lwalokho esinakho nesihlela ukukwenza:
- kunebhizinisi elikhulu impela elinenani elilinganiselwe lemisebenzi, cishe 700-800 (lapha ngiqonde lezo zisebenzi ezidinga ukufinyelela kunethiwekhi yebhizinisi)
- Kunezakhiwo eziningana ezihlukene ngaphakathi kwendawo yebhizinisi:
- Izakhiwo eziyinhloko:
- inombolo yezakhiwo - ama-2 ama-pcs.
- inombolo yezitezi esakhiweni - ama-7 ama-pcs.
- inombolo yamakhabethe okuxhumana ngocingo esitezi ngasinye esakhiweni esisodwa - izingcezu ezi-3 (inani ezingama-21).
- inani labasebenzi esakhiweni =~ 250 abantu
- Izivalo ezengeziwe:
- inombolo yezakhiwo - ama-10 ama-pcs.
- inombolo yephansi esakhiweni/workshop - 2 pcs.
- inombolo yamakhabhinethi okuxhumana ngocingo esakhiweni - ama-3 ama-pcs.
- inani labasebenzi esakhiweni =~ 20 abantu
- Ileveli eyinhloko yenethiwekhi yamanje (ngendlela, uhlelo oluvame kakhulu engihlangabezane nalo izikhathi ezingaphezu kwesisodwa ngendlela eyodwa noma enye kanye nokwakhiwa kwamachweba) luyavezwa:
- 2 L2 ukushintsha:
- Izimbobo ze-1Gb RJ-45 - ama-24 ama-pcs.
- Izimbobo ze-1Gb SFP - ama-4 ama-pcs.
- Ukushintsha kwe-1st L2:
- Izimbobo ze-1Gb SFP - ama-24 ama-pcs.
- core topology - indandatho
- izixhumanisi zontanga phakathi kwamaswishi zinikwe amandla kusetshenziswa imicu yokubona
- amaswishi atholakala emakamelweni amaseva amancane anamakhabethe
- 2 L2 ukushintsha:
- Ileveli yokusabalalisa yamanje:
- kuhlanganiswe nezinga eliyinhloko lenethiwekhi ngokwemibandela yokuhlanganiswa kwezixhumanisi ezivela kumaswishi okufinyelela
- Ikheli le-L3 libekwe kumzila womngcele kanye/noma ku-firewall
- Ileveli yokufinyelela yamanje:
- I-L2 iyashintsha enamachweba okufinyelela angu-16 x 100 Mb RJ-45 kanye namachweba we-combo angu-2 Gigabit uplink RJ-45/SFP
- amaswishi atholakala emakhabetheni phansi
- finyelela i-topology yokushintsha:
- inkanyezi (ihabhu ne-spoke - ihabhu nezipika) eneswishi ewumgogodla/yokusabalalisa phakathi
- i-beam/spoke igatsha lokushintshwa phansi - izingcezu ezi-3 kuketango
- kukhona amaswishi okufinyelela angaphethwe
- amaswishi kumakesi engeziwe angu-9 axhunywe ngeziguquli zemidiya (iziguquli zesignali ye-optical kuya kugesi)
- Ingqalasizinda yekhebula yamanje:
- Isistimu yekhebula phakathi kwezakhiwo:
- kukhona ikhebula le-optical phakathi kwezakhiwo eziyinhloko ezingu-2 ezinomthamo wezintambo ezingu-8
- kunekhebula le-optical elingu-1 phakathi kwesinye sezakhiwo ezengeziwe (lapho kufakwa khona isishicileli esiyinhloko) kanye nesakhiwo ngasinye esikhulu esinomthamo wemicu engu-8 lilinye.
- Kukhona ikhebuli yokubona engu-1 phakathi kokungeza. amakesi namakesi anamaswishi angumongo afakiwe anomthamo wamafayili angu-4 (ukusabalalisa kwawo kuboniswe esithombeni esingezansi)
- uhlobo lwefiber kuzo zonke izintambo - imodi eyodwa/SMF
- Kusetshenziswa ama-transceivers e-SFP emodi eyodwa ye-2-fiber
- Amanye amakhebuli anqanyulwa ekuxhumekeni kwe-optical cross-connections (ODF) emakamelweni ahlukene (amahholo ahlukene/ama-server amagumbi), kanti amanye amakhebuli anqanyulwa kuma-SHTO asezingeni eliphansi.
- Isistimu yekhebula ngaphakathi kwezakhiwo:
- kukhona isakhiwo sekhebula esixubile phakathi kwamagumbi eseva namakhabethe okuqala phansi:
- Izintambo zethusi ze-Cat5e - ama-pcs angu-10 (noma izintambo ezingaba ngu-100)
- intambo ye-fiber optic multimode/MMF yezintambo ezi-4 noma ezingu-8 - 1 pc.
- ikhebula le-fiber optic multimode/MMF lemicu emi-4 phakathi kwamakhabethe aphansi
- izintambo zethusi ze-Cat5e phakathi kwamakhabethe aphansi nezisekelo zokufinyelela
- isikhungo sedatha samanje:
- kukhona amaseva amaningana, isibonelo 6 izingcezu
- ifake izimbobo ze-1Gb kusishintshi esiyinhloko esakhiweni sokuqala esiyinhloko
- zonke izinhlelo zokusebenza zebhizinisi ziphethwe kumaseva
- L2, L3 ikheli kanye nomzila:
- inethiwekhi inama-VLAN amaningana - 2,3 ngesakhiwo ngasinye
- amaseva abelwe inethiwekhi ehlukile /24
- Ngezidingo zangaphakathi, kusetshenziswa amanethiwekhi ekilasi B elimpunga, afakwe ebangeni - 172.16.0.0/16
- Amakheli e-L3 ayanqanyulwa kumzila womngcele kanye/noma ku-firewall
- kusetshenziswa umzila omile
- Ulwazi Olwengeziwe:
- ucingo:
- Emabhilidini nakwamanye amabhilidi, ucingo lwendabuko lusetshenziswa kusetshenziswa ama-PBX edijithali esitayela sakudala (hhayi i-IP-PBX)
- kuyadingeka ukufaka izingcingo ezakhiweni ezintsha, ngaphandle kwezindleko zokubeka izintambo zezintambo zethusi ezibizayo zomthamo othile nokwakha i-SCS eyimpinda yocingo ngaphakathi kwezakhiwo.
- Ngokuhamba kwesikhathi, kuhlelwa ukwethula ucingo lwe-IP kulo lonke ibhizinisi, luhlanganise nezinhlelo ze-CRM futhi ludlulisele bonke abasebenzi kuyo.
- umthamo wembobo:
- kuyadingeka ukuhlaziya umthamo wamanje wamachweba amakhulu kanye namachweba okufinyelela, futhi ubeke okungenani ama-25-30% ngezidingo zesikhathi esizayo.
- hlaziya ukwanela kokuphuma kwamanje kwamachweba okufinyelela kanye nezixhumanisi ze-trunk
- hlinzeka ngezimbobo zokufinyelela ze-PoE/PoE+ zamadivayisi avela ezinhlelweni ezihlobene - ukubhekwa kwevidiyo nocingo
- I-CCTV:
- kuhlelwe ukusebenzisa inethiwekhi yebhizinisi njengendlela yokuthutha inethiwekhi yokubhekwa kwevidiyo
- kuyadingeka ukuhlinzeka ngezimbobo ze-PoE zamakhamera e-CCTV
- amasistimu angenantambo:
- Ngokuzayo, kuhlelwe ukwethula ingqalasizinda engenazintambo ukuze abasebenzi bahambe
- kuyadingeka ukuhlinzeka ngamachweba we-PoE ukuze uthole izindawo zokufinyelela
- isabelomali, isikhathi kanye nezidingo zempahla:
- zisebenzise ngokugcwele izinto ezitholakalayo
- lapho uklama inethiwekhi, cabangela amathuba okwandisa umthamo wenethiwekhi eminyakeni engu-N kusengaphambili
- lapho uklama inethiwekhi, cabangela ukusekelwa kwazo zonke izinhlobo zemisebenzi yezokuphepha - nalu uhlu lwemisebenzi, eqala kusukela ekuvikelekeni kwechweba futhi iphethe ngokugunyazwa nokugunyazwa kwabasebenzisi abasebenzisa i-802.1x.
- gcina amanodi enethiwekhi abalulekile abaluleke kakhulu ngangokunokwenzeka - indikimba nesikhungo sedatha, futhi unikeze ithuba lokugcinwa kwamanodi okubaluleka kwesibili - izindawo zokusabalalisa
- isabelomali sephrojekthi kumele sihlinzekele ukuxhasa ngezimali okungaguquki ezigabeni ezimbalwa
- inani lesabelomali - lapha ibhizinisi ngalinye liyazinqumela lona, liqondiswa izinkomba zalo zezezimali
- umnqamulajuqu - esimweni esihle kakhulu, ngeke kube khona umnqamulajuqu osobala, ngoba lena iphrojekthi yenkampani yangaphakathi eyenziwa ngabasebenzi bayo, noma bazobe benethezekile - ngokwesibonelo, unyaka ongu-1 (noma ngaphezulu). Esimeni esibi kakhulu, kungaba kusuka ezinyangeni ezi-3 kuye ezinyangeni eziyisithupha.
- xazulula izinkinga zenethiwekhi zamanje:
- ukulahlekelwa kwephakethe
- izinkinga nge-DHCP kumaswishi okufinyelela ahlakaniphe kakhulu ahlotshaniswa nokusetshenziswa komndeni we-STP wamaphrothokholi ukuze kuliwe namaluphu kuzimbobo zokufinyelela.
- susa ukuba khona kwesixhumi esibonakalayo seseva ye-DHCP ku-VLAN ngayinye yabasebenzi
- ukwenzeka kokushintsha amalophu okuhambisana nokuvula okungagunyaziwe kwamaswishi aphethwe/angaphethwe emahhovisi kanye nokuxhumeka kwemishini ehlukahlukene kuwo
- uhlu luyaqhubeka...
Ukuhlela Isinyathelo - ukubonakaliswa kwesimo senethiwekhi yakho yamanje, njengoba ngike ngabhala, kuncike ebukhoneni besistimu yokuqapha ephezulu kanye nezinga lemibhalo yalo. Kulesi sinyathelo kuzodingeka ukuthi:
- okungenani, dweba inethiwekhi ekhona ukuze uthole ukuhlaziya okwengeziwe
- qoqa idatha kumishini:
- traffic kuma trunk port
- amaphutha ezimbobeni
- Ukulayisha kwe-CPU nokusetshenziswa kwenkumbulo kumaswishi namarutha
- chaza izikimu ze-L2-L3 ngama-VLAN namakheli e-IP
- phakamisa imidwebo yomzila wekhebula:
- ama-fiber circuits kanye nemidwebo yezintambo zokuxhumanisa okubonakalayo
- imidwebo yokusatshalaliswa kwekhebula lethusi phakathi kwamakamelo eseva naphansi
- imidwebo yokusatshalaliswa kwekhebula lethusi phakathi kwaphansi namakamelo
- hlola ubukhona be-optical cross-connects kanye nama-patch panel emakamelweni amaseva namakhabethe
- hlola ama-circuits okuphakelwa kwamandla kumaseva namakhabethe aphansi
- hlola ubukhona be-UPS nebhethri ezindaweni ezibalulekile
- hlaziya yonke idatha
Ngokusekelwe kudatha evela esigabeni sokulungiselela, ngiqhamuke nomdwebo onengqondo:

Okulandelayo, ngokulandela indlela ye-modular, kuyadingeka ukugqamisa amazinga namamojula ebhizinisi:
Kulesi sihloko ngeke ngithinte i-Edge, kodwa ngizokhumbula kafushane imibono eyisisekelo yemojula ngayinye ye-Campus:- Ukufinyelela - kuleli zinga kufanele kuhlinzeke:
- inombolo edingekayo yezimbobo zokufinyelela komsebenzisi kunethiwekhi
- ukwenziwa kwezinqubomgomo zokuphepha - ukuhlunga ithrafikhi nemithethonqubo
- ukucindezela kwesizinda sokusakaza nokuhlukaniswa kwenethiwekhi kusetshenziswa ama-VLAN
- ukuqaliswa kwe-VLAN ehlukene yethrafikhi yezwi
- Ukusekelwa kwe-QoS
- ukwesekwa kwamachweba okufinyelela e-PoE
- Usekelo lwe-IP multicast
- ukubekezelela iphutha kwezixhumanisi zokuxhumana ezikhuphukayo kanye nezinga lokusabalalisa (elifiselekayo)
- Ukusabalalisa - kuleli zinga okulandelayo kufanele kuqinisekiswe:
- inombolo edingekayo yezimbobo ukuxhuma amaswishi okufinyelela
- ukuhlanganisa nokungadingeki kwezixhumanisi zokushintsha ukufinyelela
- Umzila we-IP
- ukuhlunga iphakethe
- Ukusekelwa kwe-QoS
- ukubekezelelana kwamaphutha ezingeni lezixhumanisi, okokusebenza kanye nokunikezwa kwamandla (okufiseleka kakhulu)
- Umgogodla kufanele unikeze:
- ukushintsha ngesivinini esiphezulu kanye nomzila wephakethe
- inombolo edingekayo yezimbobo ukuxhuma amaswishi okusabalalisa
- ukusekela umzila we-IP namaphrothokholi omzila aguqukayo ngokuhlangana kwenethiwekhi okusheshayo
- Ukusekelwa kwe-QoS
- ukusebenza kwezokuphepha ukuze kuvikelwe ukufinyelela kumishini kanye nendiza yokulawula
- ukubekezelela iphutha ezingeni lehadiwe neleveli yokuphakelwa kwamandla (kuyadingeka)
- Isikhungo sedatha - isendlalelo senethiwekhi sale mojula kufanele sihlinzeke:
- izixhumanisi zokuxhumana ezinesivinini esikhulu
- inombolo edingekayo yezimbobo zokuxhuma amaseva
- ukungadingeki kwezixhumanisi zokuxhumana kokubili phakathi kwamaseva namaswishi esikhungo sedatha, naphakathi kokushintsha kwesikhungo sedatha kanye nomongo wenethiwekhi (kuyadingeka)
- ukungadingeki kwezinto zokusebenza kanye nokuphakelwa kukagesi (kuyadingeka)
- Ukusekelwa kwe-QoS
Okulandelayo, sidinga ukubala amachweba ethu nezixhumanisi zokuxhumana futhi sinqume izidingo.
Ngakho-ke, sithole idatha mayelana nokusatshalaliswa kwezimbobo zokufinyelela kuzo zonke izakhiwo. Manje udinga ukuhlaziya izimfuneko zezinga lokufinyelela namazwana kanye nezinketho zezixazululo zohlaka.
Okulandelayo, sizobala amachweba nezixhumanisi zokuxhumana kulawa alandelayo:
Lapho sibala, sithole okulandelayo:
- izinga lokufinyelela - Kudingeka amaswishi okufinyelela echwebeni angama-24- kanye nama-48, okungcono ngamachweba okufinyelela e-1Gb namachweba we-SFP axhumeke phezulu anokwesekwa kwe-PoE nokusebenza okubanzi:
- sebebonke bazohlinzeka ngamachweba okufinyelela angama-504, okuthi, ngokomthetho, azofaka izidingo zamachweba ayisipele uma kwenziwa isinqumo sokusebenzisa izimbobo ezi-2 endaweni ngayinye yokusebenza - ifoni ye-IP kanye nembobo yedatha.
- Kungenzeka ukusebenzisa iswishi eyodwa yamachweba angama-48 ngokusebenza kwe-PoE esitezi ngasinye, unikeze izimbobo zokufinyelela ezidingweni:
- indawo yokugcina - cishe amachweba angama-102 (22%) ezakhiweni ezinkulu. Ukuze izakhiwo ezengeziwe kancane ngaphezulu - 25%.
- I-CCTV
- inethiwekhi engenantambo
- izinga lokusabalalisa - amaswishi ayadingeka ngesethi yezimbobo ze-SFP ukusuka ezimbobeni eziyi-12 kuye kwezingu-48 okungenani ezinezimbobo ze-SFP+ ezi-2, ezinekhono lokupakisha nokusebenza okunwetshiwe, kanye nokuba khona kwamandla angasebenzi.
- izinga le-kernel - amaswishi anesivinini esikhulu ukusuka ku-12 kuya ku-24 SFP/SFP+ emachwebeni asekelwa kokubili ukupakisha nokuhlanganisa ngokusekelwa kwe-MC-LAG kuyadingeka. Kufanele ngiqaphele ukuthi kungenzeka futhi ukusebenzisa amathuluzi omzila ukulinganisa ithrafikhi. Izizukulwane zakamuva zokushintsha kwe-L3 namarutha asekela i-ECMP ngokulinganisa kwethrafikhi emizileni emi-4 noma ngaphezulu enemethrikhi efanayo.
- izinga lesikhungo sedatha - amaswishi anamachweba angu-8 kuya kwangu-24 e-SFP/SFP+ asekelwa kokubili ukunqwabelanisa nokuhlanganisa ngokusekelwa kwe-MC-LAG ayadingeka.
Idayagramu yenethiwekhi eqondiwe igcine ingu
Ukukhetha ukushintsha Okudlulele kokuqaliswa kwephrojekthi
Hhayi-ke, manje sesifike entweni esemqoka - umzuzu wokukhetha amaswishi ukuze kusetshenziswe iphrojekthi yethu. Amaswishi Alandelayo Okudlulele afanele umjikelezo owumphumela wethagethi:
Ileveli
Imodeli
Amaports
Incazeloi-nucleus
x620-16x-Base *x670-G2-48x-4q-Base*
16 x 10GE SFP+
48x10GE SFP+ kanye ne-4x40GE QSFP+
Ngezidingo eziyisisekelo ze-kernel:- izixhumanisi zejubane eliphezulu
- umzila othuthukisiwe nokusebenza kokuphepha
- isipele sokuhlinzekwa kwamandla okwengeziwe izimpahla zamandla
- ukusekela ukunqwabelanisa nokuhlanganisa
Ngezidingo ezincane, ukushintshwa kochungechunge lwe-x620 kuzokwenza.
Uma unezidingo ezinwetshiwe zenani lezimbobo nokusebenza okubanzi, kufanele ucabangele ukushintshwa kochungechunge lwe-x670-G2.Isikhungo sedatha
x620-16x-Base*
x590-24x-1q-2c*
x670-G2-48x-4q-Base*
16 x 10GE SFP+
24x10GE SFP, 1xQSFP+, 2xQSFP28
48x10GE SFP+ kanye ne-4x40GE QSFP+Ngezidingo eziyisisekelo zesikhungo sedatha:
- izixhumanisi zejubane eliphezulu
- isipele sokuhlinzekwa kwamandla okwengeziwe izimpahla zamandla
- ukusekela ukunqwabelanisa nokuhlanganisa
Ngezidingo ezincane, ukushintshwa kochungechunge lwe-x620 kuzokwenza.
Uma kunezidingo ezinwetshiwe zenani lamachweba nokusebenza okubanzi, kufanelekile ukucabangela ukushintshwa kochungechunge lwe-x670-G2 kanye ne-x590-24x-1q-2c.ukusatshalaliswa
X460-G2-24x-10GE4-Base*
X460-G2-48x-10GE4-Base*
24x1GE SFP, 8x1000 RJ-45, 4x10GE SFP+
48x1GE SFP, 4x10GE SFP+Ngezidingo eziyisisekelo zokusabalalisa:
- inombolo edingekayo yezimbobo ezibonakalayo
- isipele sokuhlinzekwa kwamandla okwengeziwe izimpahla zamandla
- ukusekela ukunqwabelanisa nokuhlanganisa
- umsebenzi odingekayo we-L3
Amaswishi ochungechunge lwe-x460-G2 alungile. Ukuba khona kwamandla angasebenzi anamandla okwandisa nokwengeza i-10G, i-CX (yokunqwabelanisa) kanye nezimbobo ze-QSFP+ kuwenza abe amaswishi afanele isendlalelo sokusabalalisa esinamachweba afika ku-1 Gb.
ukufinyelela
X440-G2-24p-10GE4*
X440-G2-24t-10GE4*
X440-G2-48t-10GE4*
X440-G2-48p-10GE4*
24x1000BASE-T(4 x SFP combo), 4x10GE SFP+ (isabelomali se-PoE 380 W)
24x1000BASE-T(4 x SFP combo), 4x10GE SFP+
24x1000BASE-T(4 x SFP combo), 4x10GE SFP+ combo port
48x1000BASE-T(4 x SFP combo),4x10GE SFP+ combo port (isabelomali se-PoE 740 W)Ngezidingo zokufinyelela:
- inombolo edingekayo yezimbobo zokufinyelela
- Ukusekelwa kwe-PoE/PoE+
- ukusebenza kanye nekhono lokukhulisa izimbobo
- ibhonasi eyengeziwe ngendlela yosekelo lokupakisha izimbobo ze-10Gb ngaphandle kwebhokisi
Ngincoma ukuthi unake lo mugqa ngenxa yokuguquguquka kwawo ngokuya ngamachweba, ukusebenza nokusebenza.
*Izincazelo zamaswishi akhethiwe zingatholakala esihlokweni sokuqala sochungechunge -
Ngingaqeda lesi sihloko lapha, kodwa ngingathanda ukugqamisa izici ezi-2 ezengeziwe noma yimuphi unjiniyela azohlangabezana nazo lapho ethuthukisa noma ethuthukisa inethiwekhi yakhe:
- sebenza ngemizila yekhebula - imicu nemigqa yethusi
- Ikheli le-IP
Ukusebenza nge-fibers
Ngenhla nginikeze isikimu esiqondiwe okufanele sifezwe. Ukuze uyisebenzise, inombolo elandelayo yokuxhumeka kwemishini iyadingeka:
Njengoba kungabonakala etafuleni, inani elincane lemicu edingekayo ukuze kuqinisekiswe ukubekezelelana kwephutha kwamazinga enethiwekhi (imoduli eyinhloko, izikhungo zedatha kanye nokusabalalisa ezakhiweni ezingu-2) yizicucu ezingu-10.
Esigabeni sokulinganiswa kwenethiwekhi, sithole ukuthi kunemicu engu-8 kuphela kukhebula phakathi kwezakhiwo. Yini okufanele uyenze esimweni esinjalo?
Ngizonikeza izixazululo ezimbalwa:
- Isinyathelo sokuqala esisobala siwukusebenzisa imicu yamahhala kukhebula phakathi kweSakhiwo 1 - Isakhiwo 1 neSakhiwo 1 - Isakhiwo sesi-2 (njengoba ungabona etafuleni - kusetshenziswa imicu emi-2 kuphela kweziyi-8 kukhebula ngayinye). Ukuze wenze lokhu, kwanele ukufaka i-optical cross-connects phakathi kwe-cross-connects uma kwenzeka 1 futhi, uma kunesidingo, sebenzisa amamojula we-SFP nge-reserve isabelomali se-optical.
- isinyathelo sesibili ukusetshenziswa kobuchwepheshe be-CWDM - ukuphindaphindeka kwamaza obude benkampani yenethiwekhi ngaphakathi kwefayibha eyodwa. Lobu buchwepheshe ishibhile kakhulu kune-DWDD futhi kulula kakhulu ukubusebenzisa. Ngokuyisisekelo, izidingo zingezekhwalithi ye-optical fibers kanye nama-transceivers e-SFP/SFP+ obude nesabelomali esithile. Njengoba ngishilo esihlokweni esandulele, ikhono lokushintshwa lokuqaphela ama-transceivers ezinkampani zangaphandle kungenza kakhulu ukuphila kwethu kube lula futhi kunciphise izindleko ezinkulu zokwakha izintambo ezengeziwe ze-optical.
- Isinyathelo sesithathu siwukucabangela amathuba okwandisa imicu ngokubeka izintambo zokukhanya ezengeziwe.
Okulandelayo sibheka inani lemicu phakathi kwezakhiwo ezinezishintshi zokusabalalisa ezifakiwe kanye nezinye ezengeziwe. izakhiwo 2-10. Nalapha futhi, akuyona yonke into ecace kanje:
- okokuqala, awekho amafayibha anele okusebenzisa isikimu sethu esiqondiwe - amafayili ama-2 iswishi ngayinye (njengoba sikhumbula, sinezintambo ezinama-OB angu-4 ikesi ngalinye)
- okwesibili, ngisho noma kukhona inani elanele lemicu phakathi kwezakhiwo, izintambo ze-MMF zisetshenziswa ngaphakathi kwezakhiwo, ezingeke zisivumele ukuthi sivele sixhume izintambo ze-SMF ne-MMF (ngikhuluma ngamabanga phakathi kwezakhiwo ezingaphezu kwamamitha angu-300-400)
Ezimweni ezinjalo, izinketho ezilandelayo zingacatshangelwa:
- ukuhlinzekwa kweswishi ngayinye ye-SMF enemicu:
- uma ibanga livuma, ungakwazi ukwelula izintambo ezengeziwe ezinde phakathi kokushintsha. Ngesinye isikhathi sasisebenzisa izintambo zokubopha ezingaba ngu-30-50 m ubude.
- beka intambo ye-SMF ebonakalayo eshibhile esezingeni eliphansi phakathi kwamakhabethe
- njengendlela yokugcina, sebenzisa iziguquli ezihlukahlukene ze-SMF-MMF
- Ukuze unciphise inani le-fiber elisetshenziswa phakathi kwezakhiwo, unga:
- sebenzisa ukusebenza kokunqwabelanisa kwamaswishi okufinyelela e-x440-G2 - kuyilapho usebenzisa i-1 SMF fiber ekushintsheni ngakunye okuphansi, okuzokuvumela ukuthi usebenzise imicu engu-6 nezimbobo ohlangothini ngalunye esikhundleni semicu nezimbobo ezingu-3.
- sebenzisa imicu emi-2 ukuxhuma iswishi yokuqala egatsheni kanye neyokugcina. Hlanganisa izixhumanisi kumaswishi okufinyelela onqenqemeni futhi usebenzise izivumelwano ze-STP eringini engumphumela.
Ikheli le-IP
Lapha ngizonikeza isilinganiso samakheli sokubala sesekethe yethu.
Okwamanje sinamanethiwekhi amaningana ekilasi B - 172.16.0.0/16. Lapho ngibala indawo yekheli le-IP, ngizoqondiswa yizinto ezilandelayo:
- Izingcezu ezi-4 ze-octet yesibili zizobonisa izakhiwo - 172.16.0.0/12.
- U-Octet 3 uzokhombisa inombolo yesitezi esakhiweni.
- U-Octet 3 = 255 uzokwabelwa izixhumanisi zemishini yokukhomba-kuya-iphuzu kanye nenethiwekhi yokulawula.
- i-VLAN eyodwa yokuphatha phansi ukuze uphathe amaswishi.
- Umsebenzisi oyedwa i-VLAN ngokushintsha (isilinganiso samachweba angama-24).
- I-Voice VLAN eyodwa ngokushintsha ngakunye (isilinganiso samachweba angama-24).
- I-VLAN eyodwa yohlelo lokubhekwa kwevidiyo phansi.
- i-vlan eyodwa yamadivayisi e-Wi-Fi phansi.
Ngagcina ngamatafula anjengalawa:
Kuthebula elingenhla, nginikeze isilinganiso sokusatshalaliswa kwamanethiwekhi kuzo zonke izakhiwo nezitezi ngakolunye uhlangothi, namanethiwekhi (umsebenzisi, abaphathi kanye nesevisi) ngakolunye.
Eqinisweni, ukukhetha inethiwekhi empunga engu-172.16.0.0/12 akuyona into enhle kakhulu, ngoba isikhawulela enanini lamanethiwekhi (kusuka ku-16 kuye ku-31) wezakhiwo, futhi kukhona namahhovisi akude nawo adinga ukusika amabhlogo wenethiwekhi. , mhlawumbe okungcono kakhulu kuzoba nenketho kusetshenziswa amanethiwekhi angu-10.0.0.0/8, noma ukwabelana ngamanethiwekhi angu-172.16.0.0/12 (isibonelo, ngezidingo zesevisi namaseva) kanye ne-10.0.0.0/8 (kumanethiwekhi omsebenzisi).
Ngokuvamile, indlela yokwaba amanethiwekhi e-IP nayo iyi-modular futhi kuyatuseka ukunamathela emithethweni yokufingqa ama-subnets abe yinethiwekhi eyodwa yesifinyezo emazingeni okusabalalisa, kanye nakumarutha asemngceleni emagatsheni akude. Lokhu kwenziwa ngezizathu eziningana:
- ukunciphisa amatafula omzila kuma-routers
- ukuze unciphise ithrafikhi yesevisi yezivumelwano zomzila (zonke izinhlobo zemilayezo yokubuyekeza, lapho ama-subnet afakwe esidlekeni engatholakali)
- ukwenza lula ukuphatha kanye nokufundeka kangcono kwamanethiwekhi e-L3
Nakuba, mayelana namaphuzu angu-2 okuqala, kufanelekile ukuphawula ukuthi amandla ama-routers anamuhla aphezulu kakhulu kunalawo eminyaka engu-15-20 edlule futhi awavumele ukuba aqukathe amatafula amakhulu omzila ku-RAM yawo, kanye nenani lentengo kanye nomthamo wesiteshi sokuxhumana. kwehle uma kuqhathaniswa nezintengo kusukela ezikhathini zokusetshenziswa kabanzi kokusakaza kwe-E1/T1 (G.703).
isiphetho
Bangane, kulesi sihloko ngizamile ukukhuluma kafushane ngangokunokwenzeka mayelana nezimiso eziyisisekelo zokuklama amanethiwekhi ekhampasi. Yebo, bekunezinto eziningi, futhi lokhu naphezu kweqiniso lokuthi angizange ngithinte izihloko ezinjengokuthi:
- ukuhlelwa komngcele webhizinisi (futhi lena indaba ehlukile ngokushintsha kwayo, imingcele, i-firewall, izinhlelo ze-IPS/IDS, i-DMZ, i-VPN nezinye izinto)
- inhlangano yamanethiwekhi e-Wi-Fi
- inhlangano yamanethiwekhi e-VoIP
- inhlangano yezikhungo zedatha
- ukuphepha (futhi lokhu kuphinde kube yizwe lakhona elihlukile, ngokwevolumu nezidingo elingekho ngaphansi komklamo wengqalasizinda yenethiwekhi ehlanzekile, futhi ngezinye izikhathi lize lidlule)
- amandla
- uhlu luqhubeka njalo
Eqinisweni, ukuklama nokwakha inethiwekhi yebhizinisi kuwumsebenzi onzima odinga isikhathi esiningi nezinsiza.
Kodwa ngithemba ukuthi isihloko sami sizokusiza ukuthi uhlole futhi uqonde ezingeni lokuqala ukuthi ungabhekana kanjani nalo msebenzi.
Lesi akusona isiqephu sokugcina , ngakho hlala ubukele (, , , )!
- ucingo:
- Isistimu yekhebula phakathi kwezakhiwo:
- Inethiwekhi ye-3-tier ihlukaniswe yaba:
Source: www.habr.com







