Le ndatshana ingeyesibili ochungechungeni lwendatshana ethi “Ungalawula kanjani ingqalasizinda yakho yenethiwekhi.” Okuqukethwe kuzo zonke izihloko ochungechungeni nezixhumanisi zingatholakala .
Inhloso yethu kulesi sigaba ukuletha ukuhleleka kwemibhalo nokucushwa.
Ekupheleni kwale nqubo, kufanele ube nesethi edingekayo yamadokhumenti kanye nenethiwekhi elungiselelwe ngokuhambisana nawo.
Manje ngeke sikhulume ngokuhlolwa kwezokuphepha - lokhu kuzoba isihloko sengxenye yesithathu.
Ubunzima bokuqeda umsebenzi onikezwe kulesi sigaba, buyahlukahluka kakhulu enkampanini ngenkampani.
Isimo esikahle yilapho
- inethiwekhi yakho idalwe ngokuhambisana nephrojekthi futhi unesethi ephelele yamadokhumenti
- yenziwe enkampanini yakho okwenethiwekhi
- ngokuhambisana nale nqubo, unemibhalo (kuhlanganise nayo yonke imidwebo edingekayo) ehlinzeka ngolwazi oluphelele mayelana nesimo samanje sezindaba.
Kulokhu, umsebenzi wakho ulula. Kufanele ufunde imibhalo futhi ubuyekeze zonke izinguquko ezenziwe.
Esimweni esibi kakhulu, uzoba nakho
- inethiwekhi eyakhiwe ngaphandle kwephrojekthi, ngaphandle kohlelo, ngaphandle kwemvume, ngonjiniyela abangenalo izinga elanele leziqu,
- enesiphithiphithi, izinguquko ezingenazo izincwadi, “ezinodoti” omningi kanye nezixazululo ezingafaneleki
Kuyacaca ukuthi isimo sakho sisendaweni ethile phakathi, kodwa ngeshwa, kulesi sikali esingcono kakhulu - kubi nakakhulu, kunamathuba amaningi okuthi uzobe useduze nesiphetho esibi kakhulu.
Kulesi simo, uzodinga futhi ikhono lokufunda izingqondo, ngoba kuzodingeka ufunde ukuqonda ukuthi "abaklami" bafuna ukwenzani, ukubuyisela ingqondo yabo, uqedele lokho okungaphelile futhi ususe "udoti".
Futhi-ke, uzodinga ukulungisa amaphutha abo, ushintshe (kulesi sigaba kancane ngangokunokwenzeka) umklamo futhi ushintshe noma udale kabusha izikimu.
Lesi sihloko asisho neze ukuthi siphelele. Lapha ngizochaza izimiso ezivamile kuphela futhi ngigxile kwezinye izinkinga ezivamile okufanele zixazululwe.
Iqoqo lamadokhumenti
Ake siqale ngesibonelo.
Ngezansi kukhona amadokhumenti enziwe ngokwezifiso e-Cisco Systems ngesikhathi sokuklama.
CR - Izidingo zekhasimende, izidingo zeklayenti (imininingwane yobuchwepheshe).
Idalwe ngokuhlanganyela nekhasimende futhi inquma izidingo zenethiwekhi.HLD - Idizayini Yezinga Eliphezulu, idizayini yezinga eliphezulu esekelwe kuzidingo zenethiwekhi (CR). Umbhalo uchaza futhi uvumela izinqumo zezakhiwo ezithathiwe (i-topology, izivumelwano, ukukhethwa kwehadiwe,...). I-HLD ayiqukethe imininingwane yedizayini, efana nezindawo kanye namakheli e-IP asetshenzisiwe. Futhi, ukucushwa kwehadiwe okukhethekile akuxoxwa ngakho lapha. Kunalokho, lo mbhalo uhloselwe ukuchaza imiqondo yedizayini ebalulekile ekuphathweni kobuchwepheshe bekhasimende.
I-LLD - Idizayini Yezinga Eliphansi, idizayini yezinga eliphansi esekelwe kumklamo wezinga eliphezulu (HLD).
Kufanele iqukathe yonke imininingwane edingekayo ukuze kuqaliswe iphrojekthi, njengolwazi lwendlela yokuxhuma nokulungisa okokusebenza. Lona umhlahlandlela ophelele wokusebenzisa umklamo. Lo mbhalo kufanele unikeze ulwazi olwanele ukuze usetshenziswe ngisho nayizisebenzi eziqeqeshwe kancane.Okuthile, isibonelo, amakheli e-IP, izinombolo ze-AS, isikimu sokushintsha ngokomzimba (ikhebula), "angacinywa" kumadokhumenti ahlukene, njengokuthi I-NIP (Uhlelo Lokusebenza Kwenethiwekhi).
Ukwakhiwa kwenethiwekhi kuqala ngemuva kokudalwa kwale mibhalo futhi kwenzeka ngokuhambisana nabo futhi bese ihlolwe yikhasimende (ukuhlolwa) ukuhambisana nomklamo.
Yebo, abahlanganisi abahlukene, amaklayenti ahlukene, namazwe ahlukene angase abe nezidingo ezihlukene zokubhalwa kwephrojekthi. Kodwa ngithanda ukugwema imicikilisho futhi ngicabangele udaba ngokufaneleka kwalo. Lesi sigaba asikho mayelana nokuklama, kodwa mayelana nokubeka izinto ngokuhlelekile, futhi sidinga isethi eyanele yamadokhumenti (imidwebo, amatafula, izincazelo...) ukuze siqedele imisebenzi yethu.
Futhi ngombono wami, kukhona ubuncane obuncane obuphelele, ngaphandle kwalokho akunakwenzeka ukulawula ngokuphumelelayo inethiwekhi.
Lawa amadokhumenti alandelayo:
- umdwebo (log) wokushintsha ngokomzimba (ikhebula)
- umdwebo wenethiwekhi noma imidwebo enolwazi olubalulekile lwe-L2/L3
Umdwebo wokushintsha ngokomzimba
Kwezinye izinkampani ezincane, umsebenzi ohlobene nokufakwa kwemishini kanye nokushintshwa komzimba (ikhebula) kuwumthwalo wonjiniyela benethiwekhi.
Kulokhu, inkinga ixazululwa ngokwengxenye ngale ndlela elandelayo.
- sebenzisa incazelo kusixhumi esibonakalayo ukuze uchaze ukuthi yini exhunywe kuso
- vala ngokulawula zonke izimbobo zempahla yenethiwekhi engaxhumekile
Lokhu kuzokunika ithuba, ngisho nalapho kunenkinga ngesixhumanisi (lapho i-cdp noma i-lldp ingasebenzi kulesi sikhombimsebenzisi), ukucacisa ngokushesha ukuthi yini exhunywe kule chweba.
Ungabona kalula ukuthi yimaphi amachweba ahlala kuwo nokuthi yimaphi amahhala, okudingekayo ukuhlela ukuxhumeka kwemishini emisha yenethiwekhi, amaseva noma izindawo zokusebenza.
Kodwa kuyacaca ukuthi uma ulahlekelwa ukufinyelela kumishini, uzophinde ulahlekelwe ukufinyelela kulolu lwazi. Ngaphezu kwalokho, ngale ndlela ngeke ukwazi ukurekhoda ulwazi olubalulekile njengokuthi hlobo luni lwemishini, yimaphi amandla asetshenziswayo, mangaki amachweba, iyiphi i-rack ekuyo, yimaphi ama-patch panel akhona futhi kuphi (kuyiphi i-rack / patch panel. ) baxhumene . Ngakho-ke, imibhalo eyengeziwe (hhayi nje izincazelo zemishini) isawusizo kakhulu.
Inketho ekahle ukusebenzisa izinhlelo zokusebenza eziklanyelwe ukusebenza nalolu hlobo lolwazi. Kodwa ungazikhawulela kumathebula alula (isibonelo, ku-Excel) noma ubonise ulwazi olubona lubalulekile emidwebeni ye-L1/L2.
Kubalulekile!
Unjiniyela wenethiwekhi, vele, angakwazi kahle ukuxaka nezindinganiso ze-SCS, izinhlobo zama-rack, izinhlobo zamandla angenakuphazamiseka, ukuthi iyini indawo ebandayo neshisayo, indlela yokwenza isisekelo esifanele ... njengoba nje angakwazi yazi i-physics yezinhlayiya eziyisisekelo noma i-C ++. Kodwa umuntu kusafanele aqonde ukuthi konke lokhu akuyona indawo yakhe yolwazi.
Ngakho-ke, kuwumkhuba omuhle ukuba neminyango ezinikele noma abantu abazinikele ukuxazulula izinkinga ezihlobene nokufakwa, ukuxhuma, ukugcinwa kwemishini, kanye nokushintsha ngokomzimba. Ngokuvamile ezikhungweni zedatha laba onjiniyela besikhungo sedatha, futhi ehhovisi yideski losizo.
Uma ukwehlukana okunjalo kunikezwa enkampanini yakho, khona-ke izindaba zokungena ngokushintsha ngokomzimba akuwona umsebenzi wakho, futhi ungazikhawulela encazelweni yesixhumi esibonakalayo kanye nokuvalwa kokuphatha kwamachweba angasetshenzisiwe.
Imidwebo yenethiwekhi
Ayikho indlela yendawo yonke yokudweba imidwebo.
Okubaluleke kakhulu ukuthi imidwebo kufanele inikeze ukuqonda ukuthi ithrafikhi izogeleza kanjani, yiziphi izici ezinengqondo nezingokwenyama zenethiwekhi yakho.
Ngezakhi zomzimba sisho
- imishini esebenzayo
- ukuxhumana/izimbobo zemishini esebenzayo
Ngaphansi kokunengqondo -
- amadivayisi anengqondo (N7K VDC, Palo Alto VSYS, ...)
- I-VRF
- AmaVilan
- ama-subinterfaces
- imigudu
- izindawo
- ...
Futhi, uma inethiwekhi yakho ingeyona eyesisekelo ngokuphelele, izoqukatha amasegimenti ahlukene.
Isibonelo
- isikhungo sedatha
- internet
- I-WAN
- ukufinyelela kude
- ihhovisi LAN
- DMZ
- ...
Kuwukuhlakanipha ukuba nemidwebo eminingana enikeza kokubili isithombe esikhulu (indlela ithrafikhi egeleza ngayo phakathi kwazo zonke lezi zingxenye) kanye nencazelo enemininingwane yengxenye ngayinye.
Njengoba kumanethiwekhi anamuhla kungase kube nezingqimba eziningi ezinengqondo, mhlawumbe kuyindlela enhle (kodwa engadingekile) yokwenza amasekhethi ahlukene ezendlalelo ezahlukene, isibonelo, esimweni sendlela yokumbondela lokhu kungaba yiziyingi ezilandelayo:
- ukuguqa
- I-L1/L2 engaphansi
- L3 ngaphansi
Yiqiniso, umdwebo obaluleke kakhulu, ngaphandle kwalokho okungenakwenzeka ukuqonda umqondo womklamo wakho, umdwebo womzila.
Isikimu somzila
Okungenani, lo mdwebo kufanele ubonise
- iziphi izinqubo zomzila ezisetshenziswayo nokuthi kuphi
- ulwazi oluyisisekelo mayelana nezilungiselelo zephrothokholi yomzila (indawo/inombolo ye-AS/ubunikazi berutha/...)
- Ukusabalaliswa kabusha kwenzeka kumaphi amadivayisi?
- lapho ukuhlunga kanye nokuhlanganisa umzila kwenzeka
- ulwazi lomzila oluzenzakalelayo
Futhi, uhlelo lwe-L2 (OSI) luvame ukusebenziseka.
Isikimu se-L2 (OSI)
Lo mdwebo ungabonisa ulwazi olulandelayo:
- yini VLANs
- yiziphi izimbobo ezingamachweba amakhulu
- yiziphi izimbobo ezihlanganiswe ku-ether-channel (isiteshi sembobo), isiteshi sembobo esibonakalayo
- yiziphi izivumelwano ze-STP ezisetshenziswayo nokuthi yiziphi izisetshenziswa
- izilungiselelo eziyisisekelo ze-STP: isipele sezimpande/izimpande, izindleko ze-STP, okubalulekile echwebeni
- izilungiselelo ezengeziwe ze-STP: Unogada/isihlungi se-BPDU, unogada wezimpande…
Amaphutha omklamo ajwayelekile
Isibonelo sendlela embi yokwakha inethiwekhi.
Ake sithathe isibonelo esilula sokwakha i-LAN yehhovisi elilula.
Njengoba nginolwazi lokufundisa i-telecom kubafundi, ngingasho ukuthi cishe noma yimuphi umfundi phakathi nesemester yesibili unolwazi oludingekayo (njengengxenye yesifundo engisifundisile) ukuze amise i-LAN yehhovisi elula.
Yini enzima kangaka ngokuxhuma amaswishi komunye nomunye, ukusetha ama-VLAN, i-SVI interfaces (esimeni sokushintshwa kwe-L3) nokumisa umzila omile?
Konke kuzosebenza.
Kodwa ngesikhathi esifanayo, imibuzo ehlobene
- ukuphepha
- ukubhuka
- ukukala kwenethiwekhi
- ukukhiqiza
- umphumela
- ukwethembeka
- ...
Ngezikhathi ezithile ngizwa isitatimende sokuthi i-LAN yehhovisi iyinto elula kakhulu futhi ngivame ukuzwa lokhu kusuka konjiniyela (kanye nabaphathi) abenza konke ngaphandle kwamanethiwekhi, futhi bakusho lokhu ngokuzethemba kangangokuthi ungamangali uma i-LAN izoba. eyenziwe ngabantu abangenalo umkhuba nolwazi olunganele futhi izokwenziwa cishe ngamaphutha afanayo engizowachaza ngezansi.
I-Common L1 (OSI) Amaphutha Womklamo
- Uma, nokho, ubophezelekile nge-SCS, kusho ukuthi elinye lamafa angajabulisi ongawathola wukushintshashintsha ngokunganaki nokucatshangelwe kahle.
Ngingaphinda ngihlukanise njengohlobo lwamaphutha we-L1 ahlobene nezinsiza zemishini esetshenzisiwe, isibonelo,
- umkhawulokudonsa onganele
- I-TCAM enganele kumishini (noma ukusetshenziswa kwayo okungenampumelelo)
- ukusebenza okunganele (ngokuvamile okuhlobene nama-firewall)
I-Common L2 (OSI) Amaphutha Womklamo
Ngokuvamile, lapho kungekho ukuqonda okuhle kokuthi i-STP isebenza kanjani nokuthi yiziphi izinkinga ezingaba khona eza nayo, amaswishi axhunywa ngesiphithiphithi, ngezilungiselelo ezizenzakalelayo, ngaphandle kokushuna okwengeziwe kwe-STP.
Ngenxa yalokho, sivame ukuba nalokhu okulandelayo
- ubukhulu benethiwekhi ye-STP, okungaholela ekusakazeni iziphepho
- Umsuka we-STP uzonqunywa ngokungahleliwe (ngokusekelwe ekhelini le-mac) futhi indlela yethrafikhi izoba yincane
- izimbobo ezixhunywe kubasingathi ngeke zimiswe njengonqenqema (portfast), okuzoholela ekubalweni kabusha kwe-STP lapho uvula/uvala iziteshi zokugcina
- inethiwekhi ngeke ihlukaniswe ezingeni le-L1/L2, ngenxa yalokho izinkinga nganoma iyiphi inkinobho (isibonelo, ukugcwala kwamandla) kuzoholela ekubalweni kabusha kwe-STP topology kanye nokumisa ithrafikhi kuwo wonke ama-VLAN kuwo wonke ama-switch (okuhlanganisa okukodwa okubalulekile ngokombono wengxenye yesevisi yokuqhubeka)
Izibonelo zamaphutha ekwakhiweni kwe-L3 (OSI).
Amaphutha ambalwa ajwayelekile amanethiwekhi ama-novice:
- Ukusetshenziswa njalo (noma ukusetshenziswa kuphela) komzila omile
- ukusetshenziswa kwamaphrothokholi omzila angaphansi komklamo othile
- ukuhlukaniswa kwenethiwekhi okunengqondo okunganele
- ukusetshenziswa okuncane kwesikhala sekheli, okungakuvumeli ukuhlanganisa umzila
- ayikho imizila eyisipele
- akukho ukubhuka kwesango elizenzakalelayo
- umzila ongalingani lapho kwakhiwa kabusha imizila (kungaba bucayi esimweni se-NAT/PAT, izindonga zomlilo eziqinile)
- izinkinga nge-MTU
- lapho imizila yakhiwe kabusha, ithrafikhi idlula kwezinye izindawo zokuphepha noma ezinye izinqamuleli zomlilo, okuholela ekutheni le thrafikhi yehliswe.
- ukwehla kwe-topology empofu
Imibandela yokuhlola ikhwalithi yokuklama
Uma sikhuluma ngokusebenza kahle/ukungabi bikho kokulunga, kufanele siqonde ngokombono wokuthi yiziphi izindlela esingakuhlola lokhu. Lapha, ngokombono wami, yizona zindlela ezibaluleke kakhulu (kodwa hhayi zonke) (kanye nencazelo maqondana nezinqubo zokwenza umzila):
- scalability
Isibonelo, unquma ukungeza esinye isikhungo sedatha. Kulula kangakanani ukukwenza? - ukusetshenziswa kalula (ukuphatha)
Zilula futhi zivikeleke kangakanani izinguquko zokusebenza, njengokumemezela igridi entsha noma imizila yokuhlunga? - ukutholakala
Ingakanani iphesenti lesikhathi lapho uhlelo lwakho luhlinzeka ngezinga elidingekayo lesevisi? - ezokuphepha
Iphephe kangakanani idatha edlulisiwe? - Intengo
Izinguquko
Umgomo oyisisekelo kulesi sigaba ungavezwa ngefomula ethi “ungalimazi.”
Ngakho-ke, ngisho noma ungavumelani ngokuphelele nomklamo kanye nokuqaliswa okukhethiwe (ukucushwa), akukhuthazwa ngaso sonke isikhathi ukwenza izinguquko. Indlela ephusile ukukala zonke izinkinga ezikhonjiwe ngokuya ngamapharamitha amabili:
- ingalungiswa kalula kanjani le nkinga
- bungakanani ubungozi abhekene nabo?
Okokuqala, kuyadingeka ukuqeda lokho okwamanje okunciphisa izinga lenkonzo ehlinzekwa ngaphansi kwezinga elamukelekayo, isibonelo, izinkinga eziholela ekulahlekelweni kwephakethe. Bese ulungisa lokho okulula nokuphephe kakhulu ukukulungisa ngohlelo olwehlayo lobunzima bengcuphe (kusuka kumklamo onobungozi obukhulu noma izinkinga zokulungisa kuye kwezingcuphe kancane).
Ukufuna ukuphelela kulesi sigaba kungaba yingozi. Letha umklamo esimweni esanelisayo futhi uvumelanise ukucushwa kwenethiwekhi ngokufanele.
Source: www.habr.com