[AipuWaton] Ukuqonda Isidingo sama-VLAN

Zenzani izintambo ezingu-8 kukhebula ye-Ethernet

I-VLAN (i-Virtual Local Area Network) ubuchwepheshe bezokuxhumana obuhlukanisa ngokunengqondo i-LAN ebonakalayo ibe izizinda zokusakaza eziningi. I-VLAN ngayinye iyisizinda sokusakaza lapho ababungazi bengakwazi ukuxhumana ngokuqondile, kuyilapho ukuxhumana phakathi kwama-VLAN ahlukene kukhawulelwe. Ngenxa yalokho, imilayezo esakazwayo ikhawulelwe ku-VLAN eyodwa.

Okuqukethwe

· Kungani Kudingeka ama-VLAN
·I-VLAN vs. Subnet
·I-VLAN Tag ne-VLAN ID
·Izinhlobo ze-VLAN Interfaces kanye ne-VLAN Tag Handling Mechanisms
·Ukusetshenziswa Kwezimo ze-VLAN
·Izinkinga ezinama-VLAN ku-Cloud Environments

Kungani Kudingeka ama-VLAN

Amanethiwekhi asekuqaleni e-Ethernet ayewubuchwepheshe benethiwekhi yedatha obusekelwe ku-CSMA/CD (Carrier Sense Multiple Access/Collision Detection) obusebenzisa izindlela zokuxhumana ezabiwe. Lapho inani labasingathi likhula, liholele ekushayisaneni okubi kakhulu, iziphepho zokusakaza, ukonakala okuphawulekayo kokusebenza, kanye nokucisha kwenethiwekhi. Nakuba ukuxhuma ama-LAN kusetshenziswa amadivayisi we-Layer 2 kungase kuxazulule izinkinga zokushayisana, kuhlulekile ukuhlukanisa imilayezo yokusakaza nokuthuthukisa ikhwalithi yenethiwekhi. Lokhu kwaholela ekuthuthukisweni kobuchwepheshe be-VLAN, obuhlukanisa i-LAN ibe ama-VLAN amaningana anengqondo; I-VLAN ngayinye imele isizinda sokusakaza, esivumela ukuxhumana ngaphakathi kwe-VLAN njengokungathi i-LAN ngenkathi kuvimbela ukuxhumana phakathi kwe-VLAN nokuvala imilayezo yokusakaza ngaphakathi kwe-VLAN.

配图1(為什么需要VLAN)-1

Umfanekiso 1: Iqhaza lama-VLAN

Ngakho-ke, ama-VLAN anezinzuzo ezilandelayo:

· Ukunciphisa Izizinda Zokusakaza: Izizinda zokusakaza zivalelwe ngaphakathi kwe-VLAN, ilondoloza umkhawulokudonsa futhi ithuthukisa amandla okucubungula inethiwekhi.
· Ukuthuthukisa Ukuvikeleka Kwe-LAN: Imilayezo evela kuma-VLAN ahlukene ihlukaniswa ngesikhathi sokuthunyelwa, okusho ukuthi abasebenzisi abangaphakathi kwe-VLAN eyodwa abakwazi ukuxhumana ngokuqondile nabasebenzisi kwenye i-VLAN.
· Ukuqina Kwenethiwekhi Okukhulisiwe: Amaphutha akhawulelwe ku-VLAN eyodwa, ngakho-ke izinkinga ezingaphakathi kwe-VLAN eyodwa akuthinti ukusebenza okuvamile kwamanye ama-VLAN.
· I-Flexible Virtual Workgroup Construction: Ama-VLAN angahlukanisa abasebenzisi emaqenjini okusebenza ahlukene, avumele amalungu eqembu lokusebenza elifanayo ukuthi asebenze ngaphandle kokuvinjelwa endaweni ethile ebonakalayo, okwenza ukwakhiwa nokugcinwa kwenethiwekhi kube lula futhi kube lula.

I-VLAN vs. Subnet

Ngokuqhubeka nokuhlukanisa ingxenye yenethiwekhi yamakheli e-IP abe ama-subnet ambalwa, izinga eliphansi lokusetshenziswa kwendawo yekheli le-IP kanye nokuqina kwamakheli e-IP anamazinga amabili kungabhekwana nawo. Ngokufana nama-VLAN, ama-subnets angaphinda ahlukanise ukuxhumana phakathi kwabasingathi. Abasingathi bama-VLAN ahlukene abakwazi ukuxhumana ngokuqondile, njengoba nje abasingathi kuma-subnet ahlukene bengakwazi. Nokho, akukho ukuxhumana okuqondile phakathi kwalokhu okubili.

I-VLAN I-Subnet
Umehluko Isetshenziselwa ukuhlukanisa amanethiwekhi Esendlalelo sesi-2.
  Ngemva kokumisa ukuxhumana kwe-VLAN, abasebenzisi kuma-VLAN ahlukene bangaxhumana kuphela uma umzila ususunguliwe.
  Kuze kufike ku-4094 VLANs kungachazwa; inani lamadivayisi ngaphakathi kwe-VLAN alikhawulelwe.
Ubudlelwano Ngaphakathi kwe-VLAN efanayo, i-subnet eyodwa noma ngaphezulu ingachazwa.

I-VLAN Tag ne-VLAN ID

Ukuze unike amandla amaswishi ukuze ahlukanise imilayezo evela kuma-VLAN ahlukene, inkambu ehlonza ulwazi lwe-VLAN kufanele yengezwe emilayezweni. Iphrothokholi ye-IEEE 802.1Q icacisa ukuthi umaka we-VLAN we-4-byte (owaziwa ngokuthi i-VLAN Tag) wengezwe kumafreyimu wedatha we-Ethernet ukuze kukhonjwe ulwazi lwe-VLAN.

配图2(I-VLAN Tag ne-VLAN ID)-2

Inkambu ye-VID kuhlaka lwedatha ikhomba i-VLAN uhlaka lwedatha oluyingxenye yayo; ifremu yedatha ingadluliselwa kuphela ngaphakathi kwe-VLAN yayo eqokiwe. Inkambu ye-VID imele i-VLAN ID, engasukela ku-0 kuye ku-4095. Njengoba u-0 no-4095 agcinwe umthetho olandelwayo, ububanzi obuvumelekile bama-VLAN ID bungu-1 kuye ku-4094. Wonke amafreyimu edatha acutshungulwa ngaphakathi ngeswishi aphatha amathegi e-VLAN, kuyilapho amanye amadivayisi (njengabasingathi babasebenzisi namaseva) axhumeke ekushintsheni athumela futhi amukele ozimele bendabuko be-Ethernet ngaphandle komaka be-VLAN.

配图3(VLAN间用户的二层隔离)-3

Ngakho-ke, ukuze uhlanganyele nalawa madivayisi, shintsha izixhumi ezibonakalayo kufanele zibone ozimele bendabuko be-Ethernet futhi wengeze noma ukhumule omaka be-VLAN ngesikhathi sokudlulisa. Ithegi ye-VLAN engeziwe ihambisana ne-VLAN yokuzenzakalelayo yesixhumi esibonakalayo (I-Port Default VLAN ID, PVID).

配图4-4
配图5 通过VLANIF实现VLAN间用户的三层互访-5
微信图片_20240614024031.jpg1

Izinhlobo ze-VLAN Interfaces kanye ne-VLAN Tag Handling Mechanisms

Kumanethiwekhi amanje, abasebenzisi be-VLAN efanayo bangase baxhunywe kumaswishi ahlukene, futhi kungase kube nama-VLAN amaningi asuka kuwo wonke amaswishi. Uma ukuxhumana komsebenzisi kudingekile, ukuxhumana phakathi kwamaswishi kufanele kukwazi ukubona nokuthumela amafreyimu edatha esuka kuma-VLAN amaningi ngesikhathi esisodwa. Ngokuya ngezinto ezixhunyiwe nokuthi amafreyimu acutshungulwa kanjani, kunezinhlobo ezahlukene ze-VLAN interfaces ukuze kufakwe ukuxhumana okuhlukile nokuxhumana.

Thola Isixazululo sekhebula le-ELV

Control Cables

Okwe-BMS, BUS, Industrial, Instrumentation Cable.

Uhlelo Lwekhebula Oluhlelekile

Inethiwekhi&Idatha, Ikhebula Le-Fiber-Optic, Intambo Yesiphesheli, Amamojula, I-Faceplate

2024 Ukubuyekezwa Kwemibukiso Nemicimbi

Apr.16th-18th, 2024 Middle-East-Energy e-Dubai

Ephreli 16-18, 2024 Securika e-Moscow

May.9th, 2024 UMCIMBI EMISHA NOBUCHWEPHESHE WETHULA UMCIMBI e-Shanghai

Oct.22nd-25th, 2024 SECURITY CHINA e-Beijing

Nov.19-20, 2024 CONNECTED WORLD KSA


Isikhathi sokuthumela: Nov-27-2024