I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ingxenye yokuqala. isingeniso
Ingxenye yesibili. Ilungiselela i-Firewall kanye nemithetho ye-NAT
Ingxenye yesithathu. Ukusethwa kwe-DHCP

I-NSX Edge isekela umzila omile futhi onamandla (ospf, bgp).

Ukusetha kokuqala
Umzila ongashintshi
I-OSPF
I-BGP
Ukwabiwa kabusha komzila


Ukuze ulungiselele umzila, ku-vCloud Director, iya ku Administration bese uchofoza isikhungo sedatha esibonakalayo. Khetha ithebhu kumenyu evundlile Ama-Edge Gateways. Chofoza kwesokudla kunethiwekhi oyifunayo bese ukhetha inketho I-Edge Gateway Services.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Iya kumenyu yomzila.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ukusetha kokuqala (Ukucushwa Komzila)

Kulo mnikelo ungakwazi:
- yenza kusebenze ipharamitha ye-ECMP, ekuvumela ukuthi ufake imizila efinyelela ku-8 efanayo ku-RIB.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

— shintsha noma vala umzila omisiwe.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

— khetha I-ID yomzila. Ungakhetha ikheli lesixhumi esibonakalayo sangaphandle njenge-Router-ID. Ngaphandle kokucacisa i-ID Yomzila, i-OSPF noma izinqubo ze-BGP azikwazi ukuqaliswa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Noma engeza eyakho ngokuchofoza +.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kwenziwe.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha umzila omile

Yiya kuthebhu ye-Static routing bese uchofoza +.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ukwengeza umzila omile, gcwalisa izinkambu ezidingekayo ezilandelayo:
- Inethiwekhi-inethiwekhi yendawo;
- I-Next Hop - Amakheli e-IP womsingathi/irutha okuzodlula kuyo ithrafikhi iye kunethiwekhi yendawo;
- Isixhumi esibonakalayo - isixhumi esibonakalayo ngemuva kwe-Next Hop oyifunayo.
Chofoza Gcina.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kwenziwe.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha i-OSPF

Iya kuthebhu ye-OSPF. Nika amandla inqubo ye-OSPF.
Uma kudingeka, khubaza ukuqalisa kabusha kwe-Graceful, okunikwa amandla ngokuzenzakalela. Ukuqalisa kabusha okunomusa kuyiphrothokholi ekuvumela ukuthi uqhubeke udlulisela phambili ithrafikhi phakathi nenqubo yokulawula ukuhlangana kwendiza.
Lapha ungenza kusebenze isimemezelo somzila ozenzakalelayo, uma uku-RIB - inketho yokuqalisa ezenzakalelayo.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Okulandelayo sengeza Indawo. Indawo engu-0 yengezwa ngokuzenzakalelayo. I-NSX Edge isekela izinhlobo ezi-3 zendawo:
- Indawo yomgogodla (indawo engu-0+Ejwayelekile);
- Indawo ejwayelekile (Ejwayelekile);
- Indawo engekho-stubby (NSSA).

Chofoza + kunkambu Yencazelo Yendawo ukuze wengeze Indawo entsha.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ewindini elivelayo, bonisa izinkambu ezilandelayo ezidingekayo:
- I-ID yendawo;
- Uhlobo lwendawo.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Uma kudingeka, lungiselela ukufakazela ubuqiniso. I-NSX Edge isekela izinhlobo ezimbili zokuqinisekisa: umbhalo ocacile (iphasiwedi) kanye ne-MD5.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Chofoza Gcina.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Manje engeza ukuxhumana lapho kuzovuswa khona umakhelwane we-OSPF. Ukuze wenze lokhu, chofoza + kunkambu ye-Interface Mapping.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ewindini elivelayo, cacisa amapharamitha alandelayo:
- Isixhumi esibonakalayo - esibonakalayo esizosetshenziswa kunqubo ye-OSPF;
- I-ID yendawo;
- Isikhawu se-Sawubona/Dead - izikhathi zephrothokholi;
- Okubalulekile - okubalulekile okudingekayo ukuze ukhethe i-DR / BDR;
- Izindleko ziyimethrikhi edingekayo ukuze ubale indlela engcono kakhulu. Chofoza Gcina.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ake sengeze Indawo ye-NSSA kumzila wethu.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kusithombe-skrini esingezansi sibona:
1. izikhathi ezimisiwe;
2. imizila esunguliwe ku-RIB.

I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha i-BGP

Iya kuthebhu ye-BGP.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Nika amandla inqubo ye-BGP.
Uma kudingeka, khubaza Ukuqalisa Kabusha Okunomusa, okunikwa amandla ngokuzenzakalela. Lapha ungenza kusebenze isimemezelo somzila ozenzakalelayo, ngisho noma ungekho ku-RIB - inketho ethi Okuzenzakalelayo Originate.
Sikhombisa i-AS ye-NSX Edge yethu. Ukusekelwa kwe-4-byte AS kutholakala kuphela ku-NSX 6.3
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ukwengeza untanga Womakhelwane, chofoza +.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ewindini elivelayo, cacisa amapharamitha alandelayo:
— Ikheli le-IP—ikheli lontanga le-BGP;
- Ukude AS—AS inombolo yontanga ye-BGP;
- Isisindo - imethrikhi ongalawula ngayo ithrafikhi ephumayo;
- Gcina Uphila / Ubambe Isikhathi - izibali sikhathi zephrothokholi.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Okulandelayo, ake silungiselele Izihlungi ze-BGP. Ngeseshini ye-eBGP, ngokuzenzakalelayo, zonke iziqalo ezikhangisiwe nezamukelwe kulo mzila ziyahlungwa, ngaphandle komzila ozenzakalelayo. Ikhangiswa kusetshenziswa inketho yokuqalisa ezenzakalelayo.
Chofoza + ukuze wengeze Isihlungi se-BGP.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha isihlungi sezibuyekezo eziphumayo.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha isihlungi sezibuyekezo ezingenayo.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Chofoza u-Keep ukuze uqedele ukusetha.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kwenziwe.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kusithombe-skrini esingezansi sibona:
1. iseshini esunguliwe.
2. zithole iziqalo (4 iziqalo /24) ezivela kontanga ye-BGP.
3. isimemezelo somzila ozenzakalelayo. Isiqalo esithi 172.20.0.0/24 asikhangiswa ngoba asingezwe ku-BGP.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isetha Ukusabalalisa Kabusha Komzila

Hamba kuthebhu yokwabiwa kabusha komzila.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Nika amandla ukungeniswa kwemizila yephrothokholi (i-BGP noma i-OSPF).
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Ukwengeza isiqalo se-IP, chofoza +.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Cacisa igama lesiqalo se-IP kanye nesiqalo ngokwaso.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Masilungise Ithebula Lokusabalalisa Umzila. Chofoza +.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

— Igama lesiqalo — khetha isiqalo esizongeniswa esivumelwaneni esihambisanayo.
- I-Learner Protocol - umthetho olandelwayo lapho sizongenisa khona isiqalo;
- Vumela ukufunda - umthetho olandelwayo esikhipha kuwo isiqalo;
- Isenzo - isenzo esizosetshenziswa kulesi siqalo.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Londoloza ukucushwa.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Kwenziwe.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Isithombe-skrini esingezansi sibonisa ukuthi isimemezelo esihambisanayo sivele ku-BGP.
I-VMware NSX yabancane. Ingxenye 4. Isetha umzila

Yilokho kuphela kimi mayelana nokusebenzisa umzila usebenzisa i-NSX Edge. Buza ukuthi kukhona yini okuhlala kungacacile. Ngokuzayo sizobhekana ne-balancer.

Source: www.habr.com

Engeza amazwana