Kwindawo ekhawulezayo yothungelwano lwangoku, ukuvela kweeNethiwekhi zeNdawo yeNgingqi (LANs) kuvule indlela yezisombululo ezitsha zokuhlangabezana nobunzima obukhulayo beemfuno zentlangano. Esinye isisombululo esinjalo siSinethwekhi seNdawo yeNgingqi yeVirtual, okanye iVLAN. Eli nqaku ligocagoca kwizinto ezintsonkothileyo zeeVLANs, injongo yazo, izinto eziluncedo, imizekelo yokuphunyezwa, ezona ndlela zilungileyo, kunye nendima ebalulekileyo eziyidlalayo ekuziqhelaniseni neemfuno ezisoloko zivela zeziseko zonxibelelwano zothungelwano.
I. Ukuqonda iiVLANs kunye neNjongo yazo
Uthungelwano lweNdawo yeNgingqi yeVirtual, okanye iiVLAN, zichaza ngokutsha ingqikelelo yemveli yee-LAN ngokuzisa umaleko obonakalayo owenza ukuba imibutho ikwazi ukukala uthungelwano lwabo ngobungakanani obandisiweyo, ukuguquguquka, kunye nobunzima. Ii-VLAN ziyingqokelela yezixhobo okanye iindawo zenethiwekhi ezinxibelelana njengenxalenye ye-LAN enye, ngelixa eneneni, zikhona kwinxalenye enye okanye ezininzi zeLAN. La macandelo ahlukaniswe kuyo yonke i-LAN ngokusebenzisa iibhulorho, ii-routers, okanye utshintsho, okuvumela ukunyuka kwamanyathelo okhuseleko kunye nokunciphisa i-latency yenethiwekhi.
Inkcazo yobugcisa yamacandelo e-VLAN ibandakanya ukuhlukaniswa kwabo kwi-LAN ebanzi. Oku kwahlula kujongana nemiba eqhelekileyo efumaneka kwii-LAN zemveli, ezifana neengxaki zokusasaza kunye nokungqubana. Ii-VLANs zisebenza njenge "imimandla yokungqubana," ukunciphisa izehlo zokungqubana kunye nokuphucula izixhobo zenethiwekhi. Lo msebenzi uphuculweyo wee-VLAN unabela kukhuseleko lwedatha kunye nokwahlulahlula okunengqiqo, apho iiVLAN zinokudityaniswa ngokwamaqela, amaqela eprojekthi, okanye nawuphi na omnye umthetho-siseko onengqondo wombutho.
II. Kutheni Usebenzisa iiVLAN
Imibutho izuza kakhulu kwiingenelo zokusetyenziswa kweVLAN. Ii-VLAN zibonelela ngeendleko-zokusebenza, njengoko iindawo zokusebenza ngaphakathi kweVLAN zinxibelelana ngokutshintsha kweVLAN, ukunciphisa ukuthembela kwiirouters, ngakumbi kunxibelelwano lwangaphakathi ngaphakathi kweVLAN. Oku kuxhobisa ii-VLANs ukulawula ngokufanelekileyo imithwalo yedatha eyandisiweyo, ukunciphisa i-latency yenethiwekhi jikelele.
Ukonyuka kokuguquguquka kuqwalaselo lwenethiwekhi sesinye isizathu esinyanzelisayo sokusebenzisa iiVLAN. Zinokuqwalaselwa kwaye zabelwe ngokusekelwe kwizibuko, iprotocol, okanye inkqubo ye-subnet, evumela imibutho ukuba iguqule iiVLAN kwaye itshintshe uyilo lomnatha njengoko kufuneka. Ngaphezu koko, ii-VLANs zinciphisa iinzame zolawulo ngokunciphisa ngokuzenzekelayo ukufikelela kumaqela abasebenzisi abachaziweyo, ukwenza uqwalaselo lwenethiwekhi kunye nemilinganiselo yokhuseleko isebenze ngakumbi.
III. Imizekelo yokuPhunyezwa kweVLAN
Kwiimeko zehlabathi lokwenyani, amashishini aneendawo ezininzi zeeofisi kunye namaqela amakhulu afumana inzuzo enkulu ekudityanisweni kweeVLAN. Ubulula obunxulunyaniswa noqwalaselo lweVLAN lukhuthaza ukwenziwa ngokungenamthungo kweeprojekthi ezisebenza ngokudibeneyo kwaye kukhuthaza intsebenziswano phakathi kwamasebe ahlukeneyo. Umzekelo, amaqela agxile ekuthengiseni, ekuthengiseni, kwi-IT, kunye nohlalutyo lweshishini anokusebenzisana ngokufanelekileyo xa abelwe i-VLAN enye, nokuba iindawo zabo ezibonakalayo zinemigangatho eyahlukeneyo okanye izakhiwo ezahlukeneyo. Nangona kukho izisombululo ezinamandla ezibonelelwa ziiVLANs, kubalulekile ukuqaphela imiceli mngeni enokubakho, efana nokungahambelani kweVLAN, ukuqinisekisa ukuphunyezwa ngempumelelo kolu thungelwano kwiimeko ezahlukeneyo zombutho.
IV. IiNdlela zokusebenza eziBalaseleyo kunye noLondolozo
Ubumbeko olululo lweVLAN lubaluleke kakhulu ekusebenziseni amandla abo apheleleyo. Ukusetyenziswa kweenzuzo zokwahlulahlula kweVLAN kuqinisekisa uthungelwano olukhawulezayo nolukhuseleke ngakumbi, lujongana nesidingo sokuziqhelanisa neemfuneko zenethiwekhi eziphuhlayo. Ababoneleli beNkonzo abaLawulwayo (ii-MSPs) badlala indima ebalulekileyo ekuqhubeni ulondolozo lweVLAN, ukubeka esweni ukuhanjiswa kwesixhobo, kunye nokuqinisekisa ukusebenza okuqhubekayo kothungelwano.
| Iindlela ezili-10 ezizezona zilungileyo | Intsingiselo |
| Sebenzisa iiVLAN ukwahlula iTrafikhi | Ngokuzenzekelayo, izixhobo zenethiwekhi zinxibelelana ngokukhululekileyo, zibeka umngcipheko wokhuseleko. Ii-VLANs zilungisa oku ngokwahlulahlula i-traffic, ukuvala unxibelelwano kwizixhobo ngaphakathi kweVLAN enye. |
| Yenza iVLAN yoLawulo olwahlukileyo | Ukuseka ulawulo oluzinikeleyo lweVLAN lulungelelanisa ukhuseleko lwenethiwekhi. Ukwahlukaniswa kuqinisekisa ukuba imiba ngaphakathi kulawulo lweVLAN ayichaphazeli inethiwekhi ebanzi. |
| Nika iidilesi ze-IP ezizinzileyo zoLawulo lweVLAN | Iidilesi ze-IP ezingatshintshiyo zidlala indima ebalulekileyo ekuchongeni isixhobo nakulawulo lwenethiwekhi. Ukuphepha i-DHCP kulawulo lwe-VLAN iqinisekisa ukujongana nokuhambelana, ukwenza lula ulawulo lwenethiwekhi. Ukusetyenziswa kwee-subnets ezihlukeneyo kwi-VLAN nganye kwandisa ukuhlukaniswa kwe-traffic, ukunciphisa umngcipheko wokufikelela okungagunyaziswanga. |
| Sebenzisa iNdawo yeedilesi ze-IP yaBucala kuLawulo lweVLAN | Ukuphucula ukhuseleko, ulawulo lwe-VLAN luzuza kwindawo yangasese yedilesi ye-IP, ukuthintela abahlaseli. Ukuqesha iiVLAN zolawulo ezahlukeneyo kwiindidi zesixhobo ezahlukeneyo kuqinisekisa indlela ecwangcisiweyo nelungelelanisiweyo yolawulo lwenethiwekhi. |
| Musa ukusebenzisa i-DHCP kwiVLAN yoLawulo | Ukulawula i-DHCP kwi-VLAN yolawulo kubalulekile kukhuseleko. Ukuxhomekeka kuphela kwiidilesi ze-IP ezimileyo kuthintela ukufikelela okungagunyaziswanga, okwenza kube nzima kubahlaseli ukuba bangene kwinethiwekhi. |
| Khusela amazibuko angasetyenziswanga kwaye ukhubaze iiNkonzo ezingeyomfuneko | Amazibuko angasetyenziswanga abonisa umngcipheko wokhuseleko olunokwenzeka, olumema ukufikelela okungagunyaziswanga. Ukukhubaza amachweba angasetyenziswanga kunye neenkonzo ezingeyomfuneko kunciphisa ii-vectors zokuhlasela, ukuqinisa ukhuseleko lwenethiwekhi. Indlela esebenzayo ibandakanya ukubeka iliso rhoqo kunye novavanyo lweenkonzo ezisebenzayo. |
| Phumeza i-802.1X yoQinisekiso kwiVLAN yoLawulo | 802.1X uqinisekiso longeza umaleko owongezelelweyo wokhuseleko ngokuvumela kuphela izixhobo eziqinisekisiweyo ukufikelela kulawulo lweVLAN. Lo mlinganiselo ukhusela izixhobo zenethiwekhi ezibalulekileyo, ukuthintela ukuphazamiseka okunokubakho okubangelwa kukufikelela okungagunyaziswanga. |
| Yenza uKhuseleko lwePort kwi-VLAN yoLawulo | Njengamanqaku aphezulu okufikelela, izixhobo kulawulo lweVLAN zifuna ukhuseleko olungqongqo. Ukhuseleko lwezibuko, olulungiselelwe ukuvumela kuphela iidilesi ezigunyazisiweyo ze-MAC, yindlela esebenzayo. Oku, kudityaniswe namanyathelo okhuseleko olongezelelweyo afana noLuhlu loLawulo lokuFikelela (ACLs) kunye ne-firewall, kwandisa ukhuseleko lwenethiwekhi ngokubanzi. |
| Khubaza i-CDP kwiVLAN yoLawulo | Ngoxa i-Cisco Discovery Protocol (CDP) inceda ulawulo lwenethiwekhi, izisa iingozi zokhuseleko. Ukukhubaza i-CDP kulawulo lweVLAN kunciphisa le mingcipheko, kuthintela ukufikelela okungagunyaziswanga kunye nokuvezwa okunokwenzeka kolwazi olunovakalelo lwenethiwekhi. |
| Qwalasela i-ACL kuLawulo lweVLAN SVI | ULuhlu loLawulo lokuFikelela (ACLs) kulawulo lweVLAN Tshintshela isiNxulumano esibonakalayo (SVI) sithintela ukufikelela kubasebenzisi abagunyazisiweyo kunye neenkqubo. Ngokucacisa iidilesi ze-IP ezivumelekileyo kunye nee-subnets, lo mkhuba uqinisa ukhuseleko lwenethiwekhi, ukuthintela ukufikelela okungagunyaziswanga kwimisebenzi ebalulekileyo yolawulo. |
Ukuqukumbela, iiVLAN ziye zavela njengesisombululo esinamandla, ukoyisa imida yeeLAN zemveli. Ukukwazi kwabo ukuziqhelanisa nokuvela komhlaba womnatha, kunye neenzuzo zokunyuka kokusebenza, ukuguquguquka, kunye neenzame ezincitshisiweyo zolawulo, kwenza iiVLAN zibe yimfuneko kuthungelwano lwangoku. Njengoko imibutho iqhubeka nokukhula, ii-VLANs zibonelela ngeendlela ezikhawulezayo nezisebenzayo zokuhlangabezana nemingeni eguquguqukayo yeziseko zonxibelelwano zangoku.
Ixesha lokuposa: Dec-14-2023
