EN
Inkambo Ebalulekile Yokulungiselela Inethiwekhi Yomphakathi Wempilo
Ukuphatha umphakathi wempilo wenethiwekhi kudinga ukuqonda okugcwele kwe Cisco switch ukusebenza nokulungiselela izindlela. Abakonakazi benethiwekhi baphakama ngezinkinga ezahlukene ngemini, kusukela ekungeneni kakhulu kokuqhubeka kuya kuziphazanyiso zokuhlelwa. Leli guida elijwayelekile libheka izinkinga ezihlanjwayo eziphakamiswa ngokusebenzisa i-Cisco switch futhi linikeza izisusa ezithile ukuze kugcinwe iqiniso elihle lokusebenza kwenethiwekhi.
Imininingwane yesemondlo ihlala isebenzisa umlando wokushunta ukuze uphinde ube ngcono kakhulu. Uma kuhlangene ngezinkinga ngosithili sika-Cisco, kungasebenza ngendlela ephakeme emininingwaneni, kubangela izinkinga ekugcineni imininingwane nezimali zomsebenzi. Ukuziqonda lezi zinkinga nokuba nenkonyo eqashelwe kakhulu ekulungiseni kuyo kubaluleke kakhulu ekugcineni ubunzima bemininingwane.
Ukufumana Umkhopha Izinkinga Zokusebenza
Ukusebenzisa kwe-CPU kanye Nezimali
Ukusebenzisa okuphezulu kwe-CPU ku-Switch ka-Cisco kahle kubonisa izinkinga ezilandelayo ezidinga ukuzwa ngokushesha. Iziphi na izizathu njenge-traffic enkulu yokuthunyelwa, ukulungiswa okungafanelekile kwe-routing protocol, noma izimfuno zempilo njenge-denial-of-service attacks. Ukubeka oko kuchazwe ngamagama athi 'show processes cpu' kusiza ekuboneni izimo ezisebenzisa izimpahla ezininzi.
Izinkinga ezihlotshanisa kumbono zingakhiwa njengokuchasha kweswitch noma umsebenzi obulungile. Izinhlelo zezikhathi ezintsha ze-Cisco zilandelayo nezimali eziphakeme, kodwa izimiselo engahle noma ukusula kwememori kungasivikela. Ukukhokha okuqhubekayo kwebala lememori nokuphatha memori ngendlela efanelekile kusiza ekukhokheni lezi zinkinga.
Izinkinga Zeportu Ne-Interface
Izimposiso ze-interface nezinkinga zokuxhumeka kwesiphoti zibonakala njengamanye amakhulu akho kuzo wonke izinkinga abagcwalisa benethiwekhi bafana nazo. Lezi zinkinga zingahluka kusukela kumongo wokugcina njengamanzi ahlelwe kuya kuzindlela zokumiswa phakathi kwezixhumanisi ezihlanganisiwe. Ukuqonda izilimi ze-interface nezinkomba zemposiso zibaluleke kakhulu ekuboneni umbono wesimo.
Ukungafani komsindo nesidaluthi kuyasingatha kakhulu umsebenzi wenethiwekhi. Ngenkathi ukuvavanywa ngokuzenzekalela kuyaphatha lezi zindlela, izimiselo ezwenzeke ngokwesandla kungasivikela ukunciphisa kokuthutha kanye nokongena kwezinkinga. Umbhalo ofanelekile nezimiselo ezihlawa ngokufanele kusiza ekukhokheni lezi zinkinga.
Ukungahlelekwa kwe-VLAN kanye ne-Spanning Tree
Ukulawula Ukumisela kwe-VLAN
Izimistiko zokusebenza kwe-Virtual LAN zingasebenzi kakhulu kuhlukaniswa kwenethiwekhi kanye nesicelo. Iziphroblemu ezihlukene zifakazwa kwi-VLAN ziquka izimistiko zezinhlangothi zomqoka, ukungafani kwe-VLAN yomzali, kanye nokunikezelwa okungahle kwe-VLAN. Ukubheka kancane ngokuqhubekayo kwezimiso ze-VLAN kunciphisa ubunzima bethuliwekhi kanye nobulungiswa nokungavunyelwa kokufinyelela phakathi kwezinhlanganisela.
Xa ususa iziphroblemu ze-VLAN, qinisekisa ngendlela ethile izimiso zezinhlangothi zomqoka, ubungcwalisi bezinhloso ze-VLAN, kanye nokunikezwa kwemvelaphi kwezinhlangothi. Izixhobo ezifana 'show vlan brief' kanye 'show interfaces trunk' zinika imininingwane engcono yokuthola iziphroblemu ezigxilile kwe-VLAN.
Ukusabalalisa Kwe-Protocol ye-Spanning Tree
Umthetho we-Spanning Tree (STP) ucinca inqanawa epheleleyo yesithili senethiwekhi kodwa ungenza ubungako bukuhlukahluka ekususeni iziphroblemu. Iziphroblemu ezihlukene ziquka izinguquko zenqanawa, izinhlangothi ezivalelwe, kanye neziphroblemu zokhetho kwebhridji eyisiseko. Ukuqonda isebenza se-STP kanye nokugcina indawo efanele yebhridji eyisiseko kuyinzuzo ekubalulekileyo ekulawuleni ubunzima bethuliwekhi.
Izimpiyanti ezintsha zomnxeba we-Cisco zafakelisa izinhloso ezikuphakanyisiweyo njenge-Rapid PVST+ ne-MST, zinikeza ukubuyisana okusheshayo kanye nokusetshenziswa okuhle kwezindleko. Ukubheka kahle isimo se-STP nokuguquka kwe-thopo kunciphisa amandla kanye nokwehluleka kwekhasi.
Imithetho yesiqiniseko nokuwephetshwa kwemvume
Ukusebenzisa Kungcoliswa Kwepoti
Izinto ezihlalsayo zokumema imvume emnxabeni wamaphrojekthi e-Cisco zinika uqobo olubalulekile kulemnyama futhi kuziphishiniwe kwe-MAC address. Ukulungiselela kahle kwe-port security kudinga ukukhathazeka ekukhuliseni ukuqonda phakade phakade kwezimali nasekugcineni inhlaka yemisebenzi. Izinkinga ezifanayo zingaba ngokuthi izixhobo ezivumelekile zibanjelwe ngokuthi imithetho engcono ingcono.
Ukusebenzisa i-dynamic port security ngendlela efanele yokuvikela izindleko zokuvikela izindleko ngaphansi kwezidingo zokuphatha. Ukubheka kahle kanye nokulungiselela kwezimiso zesiqiniseko kunciphisa ukuvikela kakhulu ngaphandle kokuthintana nokusebenza kwesikhashana esivumelekile.
Ukuphatha Kwamathiselo Wokungena
Ukumisela kwe-ACL kuzintambo ze-Cisco kudinga ukuqaphela okuhle kwezinhloso zomoya nokuthembekile. Lokho akungcono kwe-ACL noma ukumisela kungahle kube yindlela yokufinyelela engavumelekile noma ukulahlekelwa komoya othembekile. Ukuhlolwa kanye nokulungiswa okuqhubekayo kwezinhlaka ze-ACL kusiza ekugcineni ububi ngaphandle kokuphazanyiswa kokuqhubeka.
Izinhlobeko ezintsha zezintambo ze-Cisco zivikela izinhloso ezahlukene ze-ACL, kubandakanya i-standard, extended, kanye ne-named ACLs. Ukuziqonda indlela ephindwa ngayo i-ACL kanye nokulimitshela kwemithombo kusiza ekudaleni izinqumo ezihlakaniphileyo zokungena ngaphandle kokuphazanyiswa kokuqhubeka kwenethiwekhi.
Ukuhlola Kokuqhubekako Kuye Kulungisa
Izixhumanisi Zokuhlola Inethiwekhi
Ukulungiswa okuhle kuyalapha kakhulu kuzixhumanisi zokuhlola kanye zokuhlola. Izingubo ze-Cisco zinamathuba afakwe khona njenge-SPAN kanye ne-RSPAN lokuhlola umoya. Ukuziqonda indlela yokumisa kanye nokusebenzisa le zixhumanisi kuyakwenzeka kakhulu ukuqashisa kanye nokulungisa imiba yenethiwekhi ngokushesha.
Izinqinisekiso zokulandela kanye nezinsiza ezifakwe khona zihlanganisa izinkalo ezabanzi kanye nezinkalo zokubika. Ukuhlanganiswa kwezizathu lezi ngezemfundo ye-Cisco kudinga ukukhetho nokulungisa okuphumelelayo ukuze kutholakale imininingwane engavamile kanye nokuchazwa.
Ukusebenzisa Kwalithi Yesevisi
Ukulungiswa kwe-QoS kusenza indima eyakhiweka ekugcineni iqiniso lokusebenza kwesicelo phakathi kwenethiwekhi. Iziprojeli ezihlukene kufana nokuhlukaniswa okungahle kwegunyana, iziphoso zokunikezela i-queue, kanye neengxaki zokunikezela ibhande. Ukubaluleka okudala kwezepholisi ze-QoS kusinceda ukuthi izicelo eziphambili ziphinde ziphinde zithole inqubo efanelekileyo.
Izigaba ezintsha zeemfundo ze-Cisco zivikela izici ezibanzi ze-QoS kufana ne-Modular QoS CLI (MQC) kanye ne-AutoQoS. Ukuziqonda lezici kanye nokuba kuthatha yini kumsebenzi wenethiwekhi kusiza ekulungiseni ukuhamba kwegunyana kanye nokusetshenziswa kwemithombo.
Imibuzo Evame Ukubuzwa
Ngani angikwazi ngakho ukubona ukuthi umnxeba wami we-Cisco uyayiniqama ngamaxaka okusebenza?
Faka izikhombalo ezibalulekile kusukela ekusebenziseni i-CPU, ukusetshenziswa kweganda, amaphutha e-interfasi, nezilungu zomthombo. Ukuhlola kahle lezi ziphawu kusiza ekutholeni izinkinga ezingaba khona ngaphambi kokuqashelwa kumsebenzi wenethiwekhi. Sebenzisa amagama njenge 'show processes cpu history' ne 'show interfaces' ukuze ufakaze kakhulu.
Kufanele ngicabanga ntoni xa kuhlangene ngeziphazamiso zokuphepha kwepoti?
Okokuqala, qiniseka ukuthi ingabe isiphazamiso siyisempumelela noma kusakazwa ngendawo esivumelekileyo. Bheka imodi yesiphazamiso eyafakiwe futhi ushintshanise uma kudingeka. Hlola izilungu zokuphepha ukuze uqonde indlela yasakaza futhi ucabange ukusebenzisa isimahla esikhathazekile sokuphepha kweporti uma izimiselo ezikhulu zingaba nzima kakhulu.
Ngani angikwazi ukulungisa uhlelo lwesimahla se-spanning tree?
Qalisa ngokuhlaka kahle indawo yomntu ophatheleyo (root bridge) nomntu ophatheleyo wokugcina. Sebenzisa izici njenge-BPDU guard nase-root guard ukuze uphinde ubophephele umlando we-STP. Ukuhlola kahle kwezimo ze-STP nokubalala kabusha komlando kusiza ekulondolozeni ubunzima bwenethiwekhi futhi ukuvikela ukuzungezwa.
Ziziphi izimiso eziphambili ekulungiseni imvume ye-VLAN?
Qalisa ngokubonakala kwezinhlelo zomlando we-VLAN kuwo wonke amashini. Lingeke amandla e-trunk kanye nezinhlelo ze-VLAN yomzali. Sebenzisa izimvo ezifana 'show vlan', 'show interfaces trunk', kanye 'show spanning-tree' ukuze uthole izinkinga zezinhlelo. Bhalala konke okunikezwayo kwe-VLAN bese udonga kuphela ngekufa kwezinhlelo yenethiwekhi.