Isitendi ongayithinta elebhu yethu uma ufuna.
I-SD-WAN kanye ne-SD-Access izindlela ezimbili ezihlukene zokuphathelene zokwakha amanethiwekhi. Ngokuzayo, kufanele ahlangane abe yinethiwekhi eyodwa eyimbondela, kodwa okwamanje asanda kusondela. Umqondo uthi: sithatha inethiwekhi kusukela ngeminyaka yawo-1990s bese sikhipha zonke izici ezidingekayo nezici kuyo, ngaphandle kokulinda ukuthi ibe yindinganiso entsha evulekile kweminye iminyaka eyi-10.
I-SD-WAN iyisiqephu se-SDN samanethiwekhi amabhizinisi asabalalisiwe. Ezokuthutha zihlukene, ukulawula kuhlukene, ngakho ukulawula kwenziwa lula.
Okuhle - zonke iziteshi zokuxhumana zisetshenziswa ngenkuthalo, okuhlanganisa neyokugcina ikhophi. Kukhona ukuthuthwa kwamaphakethe kuzinhlelo zokusebenza: ini, ngasiphi isiteshi futhi ngakuphi okubalulekile. Inqubo eyenziwe lula yokukhipha amaphuzu amasha: esikhundleni sokukhipha ukulungiselelwa, vele ucacise ikheli leseva ye-Cisco ku-inthanethi enkulu, isikhungo sedatha ye-CROC noma ikhasimende, lapho ukulungiselelwa okuqondene ngqo nenethiwekhi yakho kuthathwa khona.
I-SD-Access (DNA) iwukuzenzakalela kokuphathwa kwenethiwekhi yendawo: ukucushwa kusuka endaweni eyodwa, abathakathi, i-interfaces elula. Eqinisweni, enye inethiwekhi yakhiwe ngezokuthutha ezihlukile ezingeni lephrothokholi phezulu kweyakho, futhi ukuhambisana namanethiwekhi amadala kuqinisekiswa emingceleni ye-perimeter.
Sizophinde sibhekane nalokhu ngezansi.
Manje eminye imibukiso emabhentshini okuhlola elebhu yethu, ukuthi ibukeka kanjani futhi isebenza kanjani.
Ake siqale nge-SD-WAN. Izici eziyinhloko:
- Ukwenza lula ukuthunyelwa kwamaphoyinti amasha (i-ZTP) - kucatshangwa ukuthi ngandlela thile uphakela iphuzu ngekheli leseva ngezilungiselelo. Iphuzu liyangqongqoza kulo, lithola i-config, liyigoqe futhi lifakwe kuphaneli yakho yokulawula. Lokhu kuqinisekisa i-Zero-Touch Provisioning (ZTP). Ukuze usebenzise iphoyinti lokugcina, unjiniyela wenethiwekhi akadingi ukuya kusayithi. Into eyinhloko ukuvula idivayisi ngendlela efanele esizeni bese uxhuma zonke izintambo kuyo, khona-ke imishini izoxhuma ngokuzenzakalelayo ohlelweni. Ungalanda okulungiselelwe ngemibuzo ye-DNS efwini lomthengisi kusuka kudrayivu ye-USB exhunyiwe, noma ungavula isixhumanisi kusuka kukhompuyutha ephathekayo exhunywe kudivayisi nge-Wi-Fi noma i-Ethernet.
- Ukwenza lula ukulawulwa kwenethiwekhi - lungiselela kusuka kuzifanekiso, izinqubomgomo zomhlaba wonke, ezilungiselelwe indawo eyodwa okungenani amagatsha amahlanu, okungenani angu-5. Yonke into isuka endaweni eyodwa. Ukuze ugweme uhambo olude, kunenketho elula kakhulu yokubuyela ngokuzenzakalelayo ekucushweni kwangaphambilini.
- Ukuphathwa kwethrafikhi yezinga lohlelo lokusebenzaβukuqinisekisa ikhwalithi nezibuyekezo zesiginesha eziqhubekayo zohlelo lokusebenza. Izinqubomgomo ziyalungiswa futhi zikhishwe phakathi nendawo (asikho isidingo sokubhala nokuvuselela amamephu wemizila kumzila ngamunye, njengangaphambili). Ungabona ukuthi ubani othumela ini, kuphi futhi ini.
- Ukuhlukaniswa kwenethiwekhi. Ama-VPN azimele ahlukanisiwe phezu kwayo yonke ingqalasizinda - ngayinye inomzila wayo. Ngokuzenzakalelayo, ithrafikhi phakathi kwabo ivaliwe; ungakwazi ukuvula ukufinyelela kuphela ezinhlotsheni eziqondakalayo zethrafikhi kumanodi enethiwekhi aqondakalayo, isibonelo, ukudlulisa yonke into ngodonga olukhulu lokuvikela noma ummeleli.
- Ukubonakala komlando wekhwalithi yenethiwekhi - ukuthi izinhlelo zokusebenza namashaneli asebenze kanjani. Iwusizo kakhulu ekuhlaziyeni nasekulungiseni isimo nangaphambi kokuba abasebenzisi baqale ukuthola izikhalazo mayelana nokusebenza okungazinzile kwezinhlelo zokusebenza.
- Ukubonakala kuzo zonke iziteshi - ingabe ziyifanele imali, ama-opharetha amabili ahlukene abeza ngempela kusayithi lakho, noma empeleni adlula kunethiwekhi efanayo futhi ehlisa isithunzi/ewa ngesikhathi esisodwa.
- Ukubonakala kwezinhlelo zokusebenza zamafu kanye nethrafikhi yokuqondisa eziteshini ezithile ezisuselwe kuyo (Cloud Onramp).
- Ucezu olulodwa lwehadiwe luqukethe irutha kanye ne-firewall (ngokunembile, i-NGFW). Izingcezu ezimbalwa zehadiwe kusho ukuthi ishibhile ukuvula igatsha elisha.
Izingxenye kanye nezakhiwo zezixazululo ze-SD-WAN
Amadivayisi wokugcina amarutha e-WAN, angaba ihadiwe noma i-virtual.
Ama-orchestrators ayithuluzi lokuphatha inethiwekhi. Alungiselelwe ngamapharamitha wedivayisi yokugcina, izinqubomgomo zomzila wethrafikhi, nokusebenza kokuphepha. Izilungiselelo eziwumphumela zithunyelwa ngokuzenzakalelayo ngenethiwekhi yokulawula kumanodi. Ngokuhambisanayo, i-orchestrator ilalela inethiwekhi futhi iqaphe ukutholakala kwamadivayisi, izimbobo, iziteshi zokuxhumana, nokulayisha isixhumi esibonakalayo.
Amathuluzi ezibalo. Benza imibiko ngokusekelwe kudatha eqoqwe kumadivayisi wokugcina: umlando wekhwalithi yamashaneli, izinhlelo zokusebenza zenethiwekhi, ukutholakala kwamanodi, njll.
Abalawuli banesibopho sokusebenzisa izinqubomgomo zomzila wethrafikhi kunethiwekhi. I-analogue yabo eseduze kakhulu kumanethiwekhi endabuko ingabhekwa njenge-BGP Route Reflector. Izinqubomgomo zomhlaba wonke umlawuli azilungiselelayo ku-orchestrator zenza izilawuli ziguqule ukwakheka kwamathebula azo omzila futhi zithumele ulwazi olubuyekeziwe kumadivayisi wokugcina.
Itholani isevisi ye-IT ku-SD-WAN:
- Ishaneli eyisipele sihlala sisetshenziswa (ayisebenzi). Kuvele kushibhile ngoba ukwazi ukuthenga iziteshi ezimbili ezingawugqinsi kakhulu.
- Ukushintsha okuzenzakalelayo kwethrafikhi yohlelo lokusebenza phakathi kwamashaneli.
- Isikhathi somlawuli: ungathuthukisa inethiwekhi emhlabeni jikelele, kunokuba ugaqe ucezu ngalunye lwehadiwe enezilungiseleli.
- Isivinini sokukhulisa amagatsha amasha. Mude kakhulu.
- Isikhathi esincane sokuphumula ngenkathi ushintsha imishini efile.
- Lungiselela kabusha inethiwekhi ngokushesha ukuze uthole amasevisi amasha.
Litholani ibhizinisi ku-SD-WAN:
- Ukusebenza okuqinisekisiwe kwezicelo zebhizinisi kunethiwekhi esabalalisiwe, okuhlanganisa namashaneli e-inthanethi avulekile. Imayelana nokubikezelwa kwebhizinisi.
- Usekelo olusheshayo lwezinhlelo zokusebenza zebhizinisi ezintsha kuyo yonke inethiwekhi esabalalisiwe, kungakhathaliseki inani lamagatsha. Imayelana nesivinini sebhizinisi.
- Ukuxhumeka okusheshayo nokuvikelekile kwamagatsha kunoma yiziphi izindawo ezikude kusetshenziswa noma ibuphi ubuchwepheshe bokuxhuma (i-inthanethi ikhona yonke indawo, kodwa imigqa eqashiwe ne-VPN ayikho). Lokhu kumayelana nokuvumelana nezimo kwebhizinisi ekukhetheni indawo.
- Lokhu kungaba iphrojekthi enokulethwa nokuthunywa, noma kungaba isevisi
ngezinkokhelo zanyanga zonke ezivela enkampanini ye-IT, u-opharetha we-telecom noma u-opharetha wamafu. Noma yikuphi okulungele wena.
Izinzuzo zebhizinisi ezivela ku-SD-WAN zingahluka ngokuphelele, isibonelo, ikhasimende elilodwa lisitshele ukuthi umphathi ophezulu uthole isicelo solayini oqondile nabo bonke abasebenzi benkampani yezinkulungwane eziningi kanye nekhono lokuletha okuqukethwe.
Kithina βkwakuwumsebenzi wezempi.β Ngaleso sikhathi, sase sixazulula inkinga yokwenza i-CSPD ibe yesimanjemanje. Futhi uma siqonda ukuthi thina, ngokomthetho, sidinga ukuhlanganyela ekulungiseni izinto zokusebenza, futhi isitaki sobuchwepheshe siqhubekele phambili, kungani kufanele sizibandakanye ekulungiseni ubuchwepheshe namasevisi afanayo uma singathatha isinyathelo esiqhubekayo.
I-SD-WAN ifakwe kusayithi ngu-Enikey. Lokhu kubalulekile emagatsheni akude, lapho kungase kungabi khona umlawuli ovamile. Thumela ngeposi, uthi: βXhuma ikhebula 1 ebhokisini 1, ikhebula 2 ebhokisini 2, futhi ungayihlanganisi! Ungadideki, #@$@%!β Futhi uma bengayixubi, idivayisi ngokwayo ixhumana neseva ephakathi, ithatha futhi isebenzise izilungiselelo zayo, futhi leli hhovisi liba yingxenye yenethiwekhi evikelekile yenkampani. Kuhle uma ungadingi ukuhamba futhi kulula ukuthethelela kubhajethi yakho.
Nawu umdwebo wesitendi:
Ezinye izibonelo zokucushwa:
Inqubomgomo - imithetho yomhlaba wonke yokuphatha ithrafikhi. Ukuhlela inqubomgomo.
Yenza kusebenze inqubomgomo yokulawulwa kwethrafikhi.
Ukucushwa okuningi kwemingcele yedivayisi eyisisekelo (amakheli e-IP, amachibi e-DHCP).
Izithombe-skrini zokuqapha ukusebenza kohlelo lokusebenza
Okwezinhlelo zokusebenza zamafu.
Imininingwane ye-Office365.
Okwezinhlelo zokusebenza ze-on-prem. Ngeshwa, asikwazanga ukuthola izinhlelo zokusebenza ezinamaphutha endaweni yethu (Isilinganiso sokutholwa kwe-FEC inguziro yonke indawo).
Ukwengeza - ukusebenza kweziteshi zokudlulisa idatha.
Iyiphi ihadiwe esekelwa ku-SD-WAN
1. Izingxenyekazi zezingxenyekazi zekhompuyutha:
- Amarutha e-Cisco vEdge (owayekade eyi-Viptela vEdge) asebenzisa i-Viptela OS.
- 1 kanye ne-000 yochungechunge lwe-Integrated Services Routers (ISRs) esebenzisa i-IOS XE SD-WAN.
- I-Aggregation Services Router (ASR) 1 uchungechunge olusebenzisa i-IOS XE SD-WAN.
2. Izinkundla ezibonakalayo:
- I-Cloud Services Router (CSR) 1v esebenzisa i-IOS XE SD-WAN.
- I-vEdge Cloud Router esebenzisa i-Viptela OS.
Izinkundla ezibonakalayo zingasetshenziswa ezinkundleni zokuxhumana ze-Cisco x86, ezifana nochungechunge lwe-Enterprise Network Compute System (ENCS) 5, i-Unified Computing System (UCS), kanye nochungechunge lwe-Cloud Services Platform (CSP) 000. Izinkundla ezibonakalayo zingaphinda zisebenze kunoma iyiphi idivayisi ye-x5 usebenzisa i-hypervisor efana ne-KVM noma i-VMware ESi.
Isebenza kanjani idivayisi entsha
Uhlu lwamadivayisi anelayisense okusetshenziswa alandwa kusuka ku-akhawunti ehlakaniphile ye-Cisco noma alayishwe njengefayela le-CSV. Ngizozama ukuthola izithombe-skrini eziningi kamuva, okwamanje asinawo amadivayisi amasha esingawasebenzisa.
Ukulandelana kwezinyathelo idivayisi ehamba kuzo lapho kusetshenziswa.
Ikhishwa kanjani indlela entsha yokulethwa kwedivayisi/yokulungiselela
Sengeza amadivayisi ku-Akhawunti Ehlakaniphile.
Ungalanda ifayela le-CSV, noma ungalanda elilodwa ngesikhathi:
Gcwalisa amapharamitha wedivayisi:
Okulandelayo, ku-vManage sivumelanisa idatha ne-Akhawunti Ehlakaniphile. Idivayisi ivela ohlwini:
Kumenyu yokudonsela phansi ebhekene nedivayisi, chofoza okuthi Khiqiza Ukucushwa kwe-Bootstrap
bese uthola ukucushwa kokuqala:
Lokhu kulungiselelwa kufanele kunikezwe idivayisi. Indlela elula ukuxhuma i-flash drive ngefayela eligciniwe eliqanjwe ngokuthi yi-ciscosd-wan.cfg kudivayisi. Lapho iqalisa, idivayisi izobheka leli fayela.
Ngemva kokuthola ukucushwa kokuqala, idivayisi izokwazi ukufinyelela ku-orchestrator futhi ithole ukucushwa okugcwele kusukela lapho.
Sibheka i-SD-Access (DNA)
I-SD-Access yenza kube lula ukulungisa izimbobo namalungelo okufinyelela okuxhumanisa abasebenzisi. Lokhu kwenziwa ngokusebenzisa ama-wizards. Imingcele yembobo isethwe ngokuhlobene namaqembu "Abaphathi", "Accounting", "Printers", hhayi kuma-VLAN nama-subnets e-IP. Lokhu kunciphisa amaphutha abantu. Uma, isibonelo, inkampani inamagatsha amaningi kulo lonke elaseRussia, kodwa ihhovisi eliphakathi ligcwele ngokweqile, i-SD-Access ikuvumela ukuthi uxazulule izinkinga eziningi endaweni. Isibonelo, izinkinga ezifanayo mayelana nokuxazulula inkinga.
Ukuze uthole ukuphepha kolwazi, kubalulekile ukuthi i-SD-Access ifake ukuhlukaniswa okucacile kwabasebenzisi namadivayisi abe amaqembu kanye nencazelo yezinqubomgomo zokusebenzisana phakathi kwabo, ukugunyazwa kwanoma yikuphi ukuxhumeka kweklayenti kunethiwekhi, nokuhlinzekwa "kwamalungelo okufinyelela" kuyo yonke inethiwekhi. Uma ulandela le ndlela, ukuphatha kuba lula kakhulu.
Inqubo yokuqalisa yamahhovisi amasha iphinde yenziwe lula ngenxa yabenzeli be-Plug-and-Play kumaswishi. Asikho isidingo sokugijima unqamule izwe ngekhonsoli, noma uye esizeni nhlobo.
Nazi izibonelo zokumisa:
Isimo esijwayelekile.
Izigameko umlawuli okufanele azibuyekeze.
Izincomo ezizenzakalelayo zokuthi yini okufanele uyishintshe kuzilungiselelo.
Hlela ukuhlanganisa i-SD-WAN ne-SD-Access
Ngezwa ukuthi i-Cisco inezinhlelo ezinjalo - i-SD-WAN ne-SD-Access. Lokhu kufanele kunciphise kakhulu ama-hemorrhoids lapho ulawula ama-CSPD asabalaliswe ngokwendawo kanye nawendawo.
I-vManage (i-orchestrator ye-SD-WAN) iphethwe nge-API evela ku-DNA Center (isilawuli se-SD-Access).
Izinqubomgomo zokuhlukanisa izingxenye ezincane nezinkulu zifakwe imephu kanje:
Ezingeni lephakheji, yonke into ibonakala kanje:
Ubani ocabanga ngalokhu futhi yini?
Besisebenza ku-SD-WAN kusukela ngo-2016 elabhorethri ehlukile, lapho sihlola khona izixazululo ezihlukene zezidingo zokuthengisa, amabhange, ezokuthutha kanye nezimboni.
Sixhumana kakhulu namakhasimende wangempela.
Ngingasho ukuthi ukuthengisa sekuvele kuhlola ngokuzethemba i-SD-WAN, futhi abanye benza lokhu nabathengisi (imvamisa ngeCisco), kodwa kukhona nalabo abazama ukuxazulula inkinga bebodwa: babhala inguqulo yabo ye isofthiwe efana nokusebenza kwe-SD-WAN.
Wonke umuntu, ngandlela thile, ufuna ukuzuza ukuphathwa okumaphakathi kwayo yonke i-zoo yemishini. Leli iphuzu elilodwa lokuphatha lokufakwa okungajwayelekile kanye nezijwayelekile kubathengisi abahlukene kanye nobuchwepheshe obuhlukahlukene. Kubalulekile ukunciphisa umsebenzi wezandla ngoba, okokuqala, kunciphisa ingozi yesici somuntu lapho usetha imishini, futhi okwesibili, ikhulula izinsiza zesevisi ye-IT ukuxazulula eminye imisebenzi. Ngokuvamile, ukuqashelwa kwesidingo kuvela emijikelezweni emide kakhulu yokuvuselela ezweni lonke. Futhi, isibonelo, uma umthengisi ethengisa utshwala, udinga ukuxhumana njalo ukuze athengise. Ukubuyekeza noma ukuphumula phakathi nosuku kuthinta ngokuqondile imali engenayo.
Manje ekuthengiseni kukhona ukuqonda okucacile kokuthi imisebenzi ye-IT izosebenzisa i-SD-WAN:
- Ukuthunyelwa okusheshayo (okuvame ukudingeka ku-LTE ngaphambi kokuba umhlinzeki wekhebula afike, ngokuvamile kuyadingeka ukuthi iphuzu elisha liphakanyiswe umlawuli edolobheni nge-GPC, bese isikhungo sivele sibukeke futhi silungiselele).
- Ukuphathwa okumaphakathi, ukuxhumana kwezinto zangaphandle.
- Ukunciphisa izindleko ze-telecom.
- Izinsiza ezihlukahlukene ezengeziwe (izici ze-DPI zenza kube nokwenzeka ukubeka phambili ukulethwa kwethrafikhi kusuka kuzinhlelo zokusebenza ezibalulekile ezifana namarejista emali).
- Sebenza ngeziteshi ngokuzenzakalela, hhayi ngokwenza.
Futhi kukhona nokuhlola ukuthobela imithetho - wonke umuntu ukhuluma ngakho kakhulu, kodwa akekho okubona njengenkinga. Ukugcina ukuthi konke kusebenza kahle nakho kusebenza kahle kule paradigm. Abaningi bakholelwa ukuthi yonke imakethe yobuchwepheshe benethiwekhi izohamba ngale ndlela.
Amabhange, i-IMHO, okwamanje ahlola i-SD-WAN njengesici esisha sobuchwepheshe. Balindele ukuphela kokusekelwa kwezizukulwane ezedlule zemishini futhi yilapho kuphela lapho bezoshintsha. Amabhange ngokuvamile anesimo sawo esikhethekile ngokusebenzisa imigudu yokuxhumana, ngakho isimo samanje semboni asiwakhathazi kakhulu. Izinkinga zilele kwezinye izindiza.
Ngokungafani nemakethe yaseRussia, i-SD-WAN isetshenziswa ngenkuthalo eYurophu. Iziteshi zabo zokuxhumana zibiza kakhulu, ngakho-ke izinkampani zaseYurophu ziletha isitaki sazo ezigabeni zaseRussia. E-Russia, kukhona ukuzinza okuthile, ngoba izindleko zeziteshi (ngisho nalapho isifunda sibiza izikhathi ezingu-25 kunesikhungo) sibukeka sijwayelekile futhi asiphakamisi imibuzo. Unyaka nonyaka, kuba nesabelomali esingenamibandela seziteshi zokuxhumana.
Nasi isibonelo sokwenza umhlaba, lapho inkampani yonga isikhathi nemali isebenzisa i-SD-WAN ku-Cisco.
Kukhona inkampani enjalo - National Instruments. Esikhathini esithile, baqala ukuqonda ukuthi inethiwekhi yomhlaba wonke yama-computer, βeyatholwaβ ngokuhlanganisa izingosi ezingu-88 emhlabeni wonke, yayingasebenzi. Ngaphezu kwalokho, inkampani ibingenawo amandla kanye nokusebenza kwamanzi ashisayo asekhaya. Kwakungekho bhalansi phakathi kokukhula okuqhubekayo kwenkampani kanye nesabelomali esilinganiselwe se-IT.
I-SD-WAN isize Izisetshenziswa Zikazwelonke zehlise izindleko ze-MPLS ngo-25% ($450 elondolozwe ngo-2018) kuyilapho inwetshwa umkhawulokudonsa ngo-3%.
Njengomphumela wokusetshenziswa kwe-SD-WAN, inkampani ithole inethiwekhi echazwe ngesoftware ehlakaniphile kanye nokuphathwa kwenqubomgomo okumaphakathi ukuze kuthuthukiswe ngokuzenzakalelayo ukusebenza kwethrafikhi nokusebenza kwesicelo. - Icala elinemininingwane.
icala elihlanya ngokuphelele lokuhambisa i-S7 kwelinye ihhovisi, lapho ekuqaleni konke kwaqala kanzima, kodwa kuyathakazelisa - kwakudingekile ukwenza kabusha amachweba ayizinkulungwane eziyi-1,5. Kodwa-ke kukhona okungahambanga kahle futhi ngenxa yalokho, abaphathi baphenduka abokugcina ngaphambi komnqamulajuqu, lapho konke ukubambezeleka okuqoqiwe kwehla khona.
Funda okwengeziwe ngesiNgisi:
- .
- .
- .
- .
- Kodwa kumathrendi enethiwekhi emhlabeni.
NgesiRashiya:
- .
- .
- .
- .
- I-imeyili yami, uma unemibuzo noma ufuna ukuhlola imisebenzi yakho endaweni yethu, - [i-imeyili ivikelwe].
Source: www.habr.com