3. Isimo Esijwayelekile Sokwenziwa Kwephoyinti Lokuhlola I-Maestro

Ezihlokweni ezimbili zokugcina (kuqala, okwesibili) sibheke isimiso sokusebenza Hlola i-Point Maestro, kanye nezinzuzo zezobuchwepheshe nezomnotho zalesi sixazululo. Manje ngithanda ukudlulela esibonelweni esithile futhi ngichaze isimo esingaba khona sokuqalisa i-Check Point Maestro. Ngizobonisa ukucaciswa okujwayelekile kanye ne-topology yenethiwekhi (imidwebo ye-L1, L2 ne-L3) ngisebenzisa i-Maestro. Empeleni, uzobona iphrojekthi ejwayelekile eyenziwe ngomumo.

Ake sithi sinquma ukuthi sizosebenzisa inkundla ye-Check Point Maestro eyingozi. Ukuze senze lokhu, ake sithathe inqwaba yamasango amathathu angu-6500 nama-orchestrators amabili (ukuze abekezelele amaphutha ngokuphelele) - I-CPAP-MHS-6503-TURBO + CPAP-MHO-140. Umdwebo wokuxhumana ngokomzimba (L1) uzobukeka kanje:



Sicela uqaphele ukuthi kuyisibopho ukuxhuma izimbobo Zokuphatha zama-orchestrators, atholakala kuphaneli engemuva.

Ngisola ukuthi izinto eziningi zingase zingacaci kahle kulesi sithombe, ngakho-ke ngokushesha ngizonikeza umdwebo ojwayelekile wezinga lesibili lemodeli ye-OSI:

Amaphuzu ambalwa abalulekile mayelana nesikimu:

• Ama-orchestrator amabili ngokuvamile afakwa phakathi kokushintsha okuyinhloko kanye nokushintsha kwangaphandle. Labo. ukuhlukaniswa ngokomzimba kwengxenye ye-inthanethi.
• Kucatshangwa ukuthi "umgogodla" uyisitaki (noma i-VSS) samaswishi amabili lapho i-PortChannel yamachweba angu-4 ihlelwa khona. Ukuze uthole i-HA Egcwele, i-orchestrator ngayinye ixhunywe kuswishi ngayinye. Nakuba ungasebenzisa isixhumanisi esisodwa ngesikhathi, njengoba kwenziwa nge-VLAN 5 - inethiwekhi yokuphatha (izixhumanisi ezibomvu).
• Izixhumanisi ezinomthwalo wemfanelo wokudlulisa ithrafikhi ekhiqizayo (ephuzi) zixhunywe kumachweba angama-gigabit angu-10. Amamojula e-SFP asetshenziselwa lokhu - I-CPAC-TR-10SR-B
• Ngendlela efanayo (Egcwele i-HA), ama-orchestrator axhuma ekushintsheni kwangaphandle (izixhumanisi eziluhlaza okwesibhakabhaka), kodwa esebenzisa amachweba we-gigabit namamojula ahambisanayo e-SFP - I-CPAC-TR-1T-B.

Amasango ngokwawo axhunywe ku-orchestrator ngayinye esebenzisa izintambo ezikhethekile ze-DAC eziza zifakiwe (I-Direct Namathisela Ikhebula (DAC), 1m - CPAC-DAC-10G-1M):

Njengoba kubonakala kumdwebo, kufanele kube nokuxhumana kokuvumelanisa phakathi kwama-oda (izixhumanisi ezipinki). Ikhebula elidingekayo liphinde lifakwe kukhithi. Ukucaciswa kokugcina kubukeka kanje:

Ngeshwa, angikwazi ukushicilela izintengo esidlangalaleni. Kodwa ungakwazi njalo bacele ngephrojekthi yakho.

Ngokuqondene nesekhethi ye-L3, ibukeka ilula kakhulu:

Njengoba ubona, wonke amasango asezingeni lesithathu abukeka njengedivayisi eyodwa. Ukufinyelela kuma-orchestrators kungenzeka kuphela ngenethiwekhi Yokuphatha.

Lokhu kuphetha isihloko sethu esifushane. Uma unemibuzo mayelana nemidwebo noma udinga imithombo, bese ushiya amazwana noma pishite na pochtu.

Esihlokweni esilandelayo sizozama ukukhombisa ukuthi i-Check Point Maestro ibhekana kanjani nokulinganisa nokwenza ukuhlolwa komthwalo. Ngakho hlala ubukele (yocingo, Facebook, VK, I-TS Solution Blog)!

PS Ngizwakalisa ukubonga kwami ​​ku-Anatoly Masover no-Ilya Anokhin (inkampani ye-Check Point) ngosizo lwabo ekulungiseleleni le midwebo!

Source: www.habr.com