Munzvimbo inomhanya-mhanya yekudyidzana kwemazuva ano, shanduko yeLocal Area Networks (LANs) yakagadzira nzira yezvigadziriso zvitsva kusangana nekuoma kuri kukura kwezvinodiwa nesangano. Imwe mhinduro yakadai inomira pachena ndeye Virtual Local Area Network, kana VLAN. Ichi chinyorwa chinotarisa mukuomesesa kweVLANs, chinangwa chavo, zvakanakira, mienzaniso yekushandisa, maitiro epamusoro, uye basa rakakosha ravanoita mukuenderana nezvinodiwa zvinogara zvichiitika zvetiweki network.
I. Kunzwisisa VLAN uye Chinangwa Chavo
Virtual Local Area Networks, kana maVLAN, tsanangura patsva pfungwa yechinyakare yeLANs nekuunza iyo virtualized layer inogonesa masangano kuyera network yavo nekuwedzera saizi, kuchinjika, uye kuoma. VLANs anonyanya kuunganidzwa emidziyo kana network node dzinotaurirana senge chikamu cheLAN imwechete, asi muchokwadi, dziripo mune imwechete kana akati wandei LAN zvikamu. Izvi zvikamu zvakapatsanurwa kubva kune yakasara yeLAN kuburikidza nemabhiriji, marouters, kana switch, zvichibvumira kuwedzera kwekuchengetedza matanho uye kuderera kwetiweki latency.
Tsananguro yehunyanzvi yezvikamu zveVLAN inosanganisira kuparadzaniswa kwavo kubva kune yakakura LAN. Kuzviparadzanisa nevamwe kunogadzirisa nyaya dzakajairika dzinowanikwa mumaLAN echinyakare, akadai sekutepfenyura uye matambudziko ekudhumhana. MaVLAN anoita se "kudhumhana madomasi," achidzikisa kuitika kwekudhumhana uye optimize network zviwanikwa. Uku kukwidziridzwa kushanda kweVLAN kunosvika kune chengetedzo yedata uye kugovanisa zvine musoro, uko maVLAN anogona kuiswa mumapoka zvichienderana nemadhipatimendi, zvikwata zvepurojekiti, kana chero imwe inonzwisisika yesangano musimboti.
II. Sei Uchishandisa VLANs
Masangano anobatsirwa zvakanyanya kubva kune zvakanakira kushandiswa kweVLAN. VLANs inopa mari-inoshanda, sezvo nzvimbo dzekushanda mukati meVLAN dzinotaurirana kuburikidza neVLAN switch, kuderedza kuvimba nema routers, kunyanya kutaurirana kwemukati mukati meVLAN. Izvi zvinopa maVLAN simba kuti akwanise kubata yakawedzera mitoro yedata, ichidzikisa yakazara network latency.
Iko kuwedzera kushanduka mukugadziriswa kwetiweki ndechimwe chikonzero chinomanikidza chekushandisa maVLAN. Zvinogona kugadzirwa uye kugoverwa zvichienderana nechiteshi, protocol, kana subnet maitiro, zvichibvumira masangano kuchinja maVLAN uye kuchinja network dhizaini sezvinodiwa. Zvakare, maVLAN anodzikisira mabasa ekutonga nekudzikisira otomatiki kupinda kune akatarwa evashandisi mapoka, zvichiita kuti network kumisikidza uye chengetedzo matanho ashande.
III. Mienzaniso yeVLAN Implementation
Mumamiriro ezvinhu epasirese, mabhizinesi ane nzvimbo dzakakura dzehofisi uye zvikwata zvakakura zvinowana mabhenefiti akakura kubva mukubatanidzwa kweVLAN. Kureruka kwakabatana nekugadzirisa maVLAN kunosimudzira kuitwa zvisina musono kwemapurojekiti e-cross-functional uye kukurudzira kubatana pakati pemadhipatimendi akasiyana. Semuyenzaniso, zvikwata zvinonyanya kushambadzira, kutengesa, IT, uye ongororo yebhizinesi zvinogona kushanda zvakanaka kana zvapihwa kuVLAN imwe chete, kunyangwe nzvimbo dzavo dzemuviri dzichitora uriri hwakasiyana kana zvivakwa zvakasiyana. Zvisinei nemhinduro dzakasimba dzinopihwa nemaVLAN, zvakakosha kuti tifunge nezvezvinetso zvingangoitika, senge VLAN mismatches, kuve nechokwadi chekuitwa kunoshanda kwemanetiweki aya mumamiriro akasiyana esangano.
IV. Maitiro Akanakisisa uye Maintenance
Yakakodzera VLAN kumisikidzwa yakakosha pakushandisa kugona kwavo kuzere. Leveraging VLAN segmentation mabhenefiti inovimbisa kukurumidza uye yakachengeteka network, kugadzirisa kudiwa kwekuchinjika kune inoshanduka network zvinodiwa. Managed Service Providers (MSPs) vanoita basa rakakosha mukuita kugadzirisa kweVLAN, kutarisa kugoverwa kwemidziyo, uye kuona kuenderera mberi kwetiweki kushanda.
| 10 Maitiro Akanakisisa | Meaning |
| Shandisa VLANs kuSegment Traffic | Nekutadza, zvishandiso zvetiweki zvinotaurirana zvakasununguka, zvichiunza njodzi yekuchengetedza. MaVLAN anogadzirisa izvi nekupatsanura traffic, kuvharira kutaurirana kumidziyo mukati meVLAN imwechete. |
| Gadzira Yakasiyana Management VLAN | Kugadzira yakazvitsaurira manejimendi VLAN inokwenenzvera network chengetedzo. Kuzviparadzanisa nevamwe kunovimbisa kuti nyaya dziri mukati me manejimendi VLAN hadzina kukanganisa network yakakura. |
| Govera Static IP Kero yeManagement VLAN | Static IP kero inoita basa rakakosha mukuzivikanwa kwemudziyo uye manejimendi manejimendi. Kudzivisa DHCP kune manejimendi VLAN inova nechokwadi chekuenderana, kurerutsa network manejimendi. Kushandiswa kwema subnets akasiyana eVLAN yega yega kunosimudzira kuparadzaniswa kwetraffic, kuderedza njodzi yekuwana kusingatenderwe. |
| Shandisa Yakavanzika IP Kero Space yeManagement VLAN | Kuwedzera kuchengetedzeka, manejimendi VLAN inobatsira kubva kune yakavanzika IP kero nzvimbo, kudzivirira vanorwisa. Kushandisa yakaparadzana manejimendi maVLAN emhando dzakasiyana dzemidziyo inovimbisa yakarongeka uye yakarongeka nzira yekunetiweki manejimendi. |
| Usashandise DHCP pane Management VLAN | Kutungamira pachena kweDHCP pane manejimendi VLAN kwakakosha pakuchengetedza. Kuvimba chete neiyo static IP kero kunodzivirira kupinda kusingatenderwe, zvichiita kuti zviome kune vanorwisa kuti vapinde munetiweki. |
| Chengetedza maPorts Asina Kushandiswa uye Dzima Zvisina Kufanira Masevhisi | Zviteshi zvisina kushandiswa zvinopa njodzi inogona kuchengetedzwa, ichikoka kupinda kusina mvumo. Kudzima zviteshi zvisina kushandiswa uye masevhisi asina basa kunoderedza kurwisa mavector, kusimbisa kuchengetedzwa kwetiweki. A proactive maitiro anosanganisira kuenderera mberi kwekutarisa uye kuongororwa kweanoshanda masevhisi. |
| Shandisa 802.1X Kusimbisa pane Management VLAN | 802.1X kuvimbiswa kunowedzera imwezve chengetedzo nekubvumira chete michina yakatendeswa kuwana kune manejimendi VLAN. Ichi chiyero chinochengetedza zvakakosha network zvishandiso, kudzivirira kukanganisa kunokonzerwa nekupinda kusina mvumo. |
| Gonesa Port Security pane Management VLAN | Senzvimbo dzepamusoro-soro dzekuwana, zvishandiso muVLAN yekutonga zvinoda kuchengetedzwa kwakasimba. Chengetedzo yechiteshi, yakagadziridzwa kuti ingobvumira kero dzeMAC chete, inzira inoshanda. Izvi, zvakasanganiswa nemamwe matanho ekuchengetedza seAccess Control Lists (ACLs) uye firewall, inosimudzira kuchengetedzwa kwesetiweki. |
| Dzima CDP pane Management VLAN | Nepo Cisco Discovery Protocol (CDP) inobatsira manejimendi manejimendi, inounza njodzi dzekuchengetedza. Kudzima CDP pane manejimendi VLAN kunoderedza njodzi idzi, kudzivirira kupinda kusingatenderwe uye kuratidzwa kweruzivo rwakadzama network. |
| Gadzira ACL pane Management VLAN SVI | Access Control Lists (ACLs) pane manejimendi VLAN Switch Virtual Interface (SVI) inorambidza kupinda kune vane mvumo vashandisi nemasisitimu. Nekudoma kero dzeIP dzinobvumidzwa uye subnets, tsika iyi inosimbisa kuchengetedzwa kwetiweki, kudzivirira kupinda kusingatenderwe kumabasa akakosha ekutonga. |
Mukupedzisa, maVLAN akabuda semhinduro ine simba, kukunda zvipimo zvechinyakare maLAN. Kugona kwavo kuchinjika kune inoshanduka yetiweki mamiriro, pamwe chete nemabhenefiti ekuwedzera kuita, kuchinjika, uye kuderedzwa kwekuita kwekutonga, kunoita kuti VLANs ive yakakosha munetwork yazvino. Sezvo masangano ari kuramba achikura, maVLAN anopa nzira inoparadza uye inoshanda yekusangana nematambudziko ane simba ezvezvino network network.
Nguva yekutumira: Zvita-14-2023
