Cisco imizila: imodeli kulungiselelwa. imishini Network

Cisco imizila isikhathi eside futhi kube kufanele, wathandwa trust abasebenzisi eziningi. Ngokwethembeka iminyaka eminingi, bedlula traffic kumadivayisi ahlukahlukene phakathi izinhlobo ezahlukene zokuxhumana. manje Igama elithi "Cisco" usuphenduke into efanayo lafana izinga kanye nokwethembeka. Zonke more njalo Cisco intengo njalo zazigcina ziphakathi eyamukelekayo.

Izimpawu Cisco imizila kanye wokushintsha

Njengamanje, kusetshenziswa kakhulu uchungechunge ukushintsha ehlukahlukene Cisco imizila. Uchungechunge kuhlanganisa onobuhle eziningana ukuthi kuhluke eziningi izici. Noma kunjalo, konke kubo zingahlukaniswa zibe amaqembu ezilandelayo:

• imizila ephathekayo. Ahloselwe inhlangano amanethiwekhi amancane naphakathi.

• Amadivayisi ne ISR Isiqalo --Ethernet ukushintsha zinezikhathi a izakhiwo nezimo kakhulu. Ngokufaka izinhlobo ezahlukene izicelo ukuthi kungaba cishe ngokungenamkhawulo ukwandisa amakhono abo.

• kudivayisi Modular. The kungenzeka kumadivayisi ezifana kungenziwa landiswa ngokuxhuma zonke izinhlobo amamojuli, ngakho ungakwazi kalula uphathe izakhiwo hardware. Kunconywa ukuthola isikali amancane naphakathi.

Zonke amadivaysi ukusebenza the ukuwudlulisa reception kolwazi nokhunye ezingeni wesithathu OSI. Ungawasebenzisa ukwakha amanethiwekhi bonke osayizi kanye nezinjongo. Cisco-VPN Imigudu amadivayisi ukusekela lokhu okulandelayo: L2TP, DMVPN, IPsec, GRE futhi PPTP. Ukubeka up-VPN kwi-router Cisco kuzovumela ukudlulisa idatha phezu isiteshi ebethelwe yangasese.

Cisco 2960 uchungechunge ukushintsha futhi benezingane eziningi onobuhle, kodwa izici ezivamile yilezi:

• ezingeni L2;
• inani nezimbobo asekelwe - 8, 24 noma 48;
• Poe ugesi, Poe +;
• usekelo ukuxhumana okuphephile;
• nezimbobo izinga zingase zihluke, kuye ngokuthi imodeli router - 100 megabit, 1 Gigabit;
• kungenzeka ukwakha izitaki kahle kwezinye onobuhle atholakalayo, kuyilapho abanye - cha.

Isici esivelele sesimiso imizila kusuka Cisco angabhekwa ukuthi ngokuvamile ezikhethekile kakhulu. Asihambisani kwabo kwezinye tinkhulumo jikelele okungase ngokulinganayo ukukhonza njengomdala efulethini kumiswa inethiwekhi ekhaya, futhi inkampani noma ehhovisi. Umugqa ngamunye unesibopho okuthile okuhlukile, futhi ngezinye izikhathi has a lunye iwumngcingo. Ngakho ngalesi sikhathi kudingeka ucabangele uma kukhethwa Cisco sika imishini inethiwekhi, ngisho router eqolo futhi eziphambili noma router kungenzeka isethi engenamsebenzi amabhodi kanye amakhebuli endaweni eyodwa futhi idivayisi ngokuphelele zibalulekile - in the kwamanye.

Iziqondiso Cisco izisetho ze-hardware

Ukusetha i-imishini ngokuvamile egobhoza migqa elandelayo:

1. Ukusetha i-Wi-Fi uyakaleka. It kamuva amanethiwekhi kukalwa khona okokuvumela ukuphendula izinguquko ezidingekayo futhi ukuphatha izindleko ongaphakeme kanye kabusha inethiwekhi.
2. Sebenza up an telephony Inthanethi esekelwe Cisco. Ngu leli lungiselelo kungase kuqondwe njengoba inethiwekhi yendawo ngaphakathi ehhovisi elilodwa noma ibhizinisi, nokuningi global - ngokuhlanganisa amanethiwekhi zendawo eziningi kuphume esisodwa. Kunezinhlobo nobudlelwane zabantu 350 no-30 000 kanye kwezixuku.
3. Uxhumano ukubeka firewall kanye IPS. Lokhu isethaphu nokuvikeleka inethiwekhi - into ebaluleke kakhulu emsebenzini ukulungisa amaphutha, okungase banganakwa kunoma isiphi isimo.
4. Ilungiselela inethiwekhi zokuqapha amathuluzi. Kunconywa ukusebenzisa isofthiwe ezikhethekile ezivela Cisco. Ngenxa yalesi kuyoba awunankinga ukuhambisana hardware ne-software izingxenye, kanye nomlawuli uzokwazi ngasiphi isikhathi ukuthola ulwazi umgomo mayelana umsebenzi inethiwekhi kanye nesikhathi okufanele sisabele ngayo lapho izinkinga ezingaba khona.
5. Ilungiselela Cisco-VPN. Ngalokhu ehloselwe inyunyana amanethiwekhi endaweni ezimbalwa zendawo zibe munye, kuhlanganise ngokwendawo ahlukaniswe amabanga ngokwanele ezinkulu. Futhi, kungase kudingeke ukuba uxhume workstations abasebenzi ngabanye izinsiza jikelele ibhizinisi.

Indlela ukuxhuma router kwikhompyutha yakho

Yiqiniso, imishini inethiwekhi iqala ukuxhuma kukhompyutha yakho. I-router uxhuma PC usebenzisa console ikhebula ekhethekile. Khona-ke inohlelo Emulator esigungwini. Naye kanye nesidingo ukufaka wonke amaqembu esikhathini esizayo.

imizila eminingi futhi imizila zisebenzisa namanje COM-port uxhumano ngokuzenzakalela kukhompyutha. Nokho, akubona bonke izimoto zanamuhla port ezifana iyatholakala. Kulokhu, ukusiza adapters esikhethekile-USB COM. Kuye ukumisa, bangakwazi noma kungenziwa izikhwebu nge imishini inethiwekhi, awufikanga. Kodwa kungcono ukhetha umuntu oyisibonelo esesivele natively iyayisekela indlela yokuxhuma nge-USB.

Njengoba itheku icaciswe: 9600/8-N-1. Uma udinga ulayishe ukucushwa womzila ukuze indlu engenamuntu, udinga akhipha umyalo othi: unike amandla. Ngaleyo ndlela ukulayishwa imodi Exec. Ukuze uqale nge ishidi ohlanzekile, thayipha umyalo olandelayo: ukusula uqalisa-wokumisa. Futhi kabusha umyalo imishini: ulayishe. Kusistimu yokusebenza umbuzo ukuthi ukungena iwindi izilungiselelo kufanele iphendvulwe okungekuhle.

Noma kunjalo, konke okungenhla, awukwazi ukwenza uma asikho isidingo ukuthola i wokumisa awunalutho.

ulwazi olujwayelekile mayelana syntax console imiyalo ku imizila ne-Cisco imizila

Njengoba imishini Cisco, Windows ayinikezi ajwayelekile kubasebenzisi eziningi windowing. Zonke imiyalo efakiwe nge esibulalayo console. Futhi ngakho-ke kuyadingeka ukuba banamathele le mithetho elandelayo:

• uma ufaka uphawu lombuzo ke Cisco izoveza uhlu imiyalo etholakalayo futhi operands;
• igama noma igama elisemqoka wena Kunconywa ukunciphisa umkhawulo ubuncane;
• umugqa wemiyalo ukuhlela akuvumelekile console esibulalayo, njengoba kwenziwa e-Linux noma Unix izinhlelo;
• uma opharetha yaguquka ukwenza umyalo, kungaba uphazamisa abulawe yayo ngokuthayipha izwi CHA;
• ukuya ukufinyelela ezingeni 0 (saqala) kuya ku-15 (umlawuli), udinga ukufaka umyalo: vumela Nomer_urovnya_dostupa.

Ukunika amandla ssh

Ukufaka router ungaqala neqiniso lokuthi ssh bayonikezwa ngokuzenzakalela kuwo wonke ukuxhumana. Lapho usebenzisa i-SSH, ungadlulisa noma iyiphi idatha kusuka kwenye ikhompuyutha ngemigudu ngekhodi. Ukunika amandla ssh e Cisco, udinga:

• Nika amandla imodi ethuthukisiwe unike amandla umyalo nge amalungelo.
• Khombisa ngqo esikhathini samanje.
• Ukuze uqale ngqo ukumisa uhlelo, kubalulekile ukunikeza umyalo: router # ukumisa esigungwini.
• Ngaphezu kwalokho, kufanele bakhombise igama lesizinda, futhi lokhu kwenziwa lo myalo: router (Uhlel) # ip igama lesizinda mydomain.ru.
• isihlonzi sobhalomfihlo is eyenziwe umyalo: router (Uhlel) ukhiye # mfihlo ukukhiqiza rsa.
• Ukuqala umsebenzisi omusha, umyalo ku-console: router (Uhlel) # igama lomsebenzisi Igama lomsebenzisi ilungelo 11 iphasiwedi 7 my_passwd. Lapha, kucatshangwa ngokuba Cisco idivayisi ukumisa nge ezingeni umsebenzisi 11, okuyinto ayitholakali ngokuphelele yonke amaqembu. Kodwa ungakha umsebenzisi nelungelo ngokugcwele, kudingeka ucacise ukufinyelela ezingeni akuyona 11, futhi esiphezulu - 15.
• Sebenzisa imiyalo: router (Uhlel) # aaa entsha imodeli umzila (Uhlel) # umugqa vty 0 4 iphelela AAA protocol ukucushwa ifakiwe emigqeni esigungwini. Endabeni lapha - 0 kuya 4.
• Ukusebenzisa imiyalo: router (Uhlel yomugqa) ssh # ezokuthutha okokufaka router (Uhlel yomugqa) # egawula zokuvumelanisa inikezwa njengoba ssh ezenzakalelayo ku.
• It uhlala kuphela baphume kuzo zonke izindlela, bese ulondoloza ushintsho. Lokhu kwenziwa ngokusebenzisa imiyalo ezilandelayo: router (Uhlel yomugqa) #exit router (Uhlel) # ophumayo router # bhala.

Indlela ulungiselele Cisco nezimbobo

Ukufaka global amasethingi okumisela modi amatheku e Cisco, udinga ukuthayipha i umyalo kanje:

conf t

esibonakalayo fa0 / 2.

Ungalungisa Cisco nezimbobo ezilandelayo:

• Finyelela Port. Lokhu port ukuphela uboniswa ngqo kudivayisi yekhasimende - eye-, umzila noma ngqo PC, okuyinto Siyonikwa traffic Akumakiwe. Uma uthayipha console switchport Imodi ukufinyelela, ichweba akhethiwe ihunyushwa ukufinyelela imodi, futhi konke okuhamba ayozithola ku vlan 1. Kodwa uma efundiswa switchport ukufinyelela vlan 310, idatha ngeke idluliselwe vlan 310.
• Wendlovu port. Lokhu yephothi kufanele zisetshenziselwe uma ngakolunye uhlangothi imele idivayisi inethiwekhi --Ethernet ukushintshwa, imizila, njll Ukuze usebenzise lesi port, udinga ukubhalisa ku-console: .. Switchport imodi isiqu - abasebenza umfuziselo 2950. Kodwa 2960, lo myalo kancane ezahlukene:

switchport imodi isiqu

switchport isiqu encapsulation dot1q.

Uma ufuna ukusebenzisa kuphela abanye vlan, console kufanele ifakwe: isiqu switchport alloved vlan 310, 555 - ezingu vlan kuhlukaniswe ukhefane;

• Hybrid port. Nokho, Izimbobo Cisco ukucushwa akubandakanyi umsebenzi port hybrid, angakhetha esinye nesinye port njengendlela hybrid kungaba, uma ukhetha isiqu port nativ siqu vlan. Ungabona lokhu isibonelo syntax imiyalo elandelayo ku-console:

switchport imodi isiqu (isiqu port kudalwa)

switchport isiqu alloved vlan 310,555 (izimbobo ezinjalo zisetshenziswa njengoba vlan 310 kanye 555)

switchport isiqu vlan bomdabu 310 (zonke Akumakiwe vlan traffic usabalala 310, kanti bonke abanye - 555).

Port ukucushwa nqubo iye zicatshangelwa isibonelo Cisco 2960 - omunye ezivame kakhulu namuhla. Nokho, ezinye izinhlelo uchungechunge amayunithi isinyathelo zifana.

Kungenzeka kanjani ukuthi ngibe kabusha

Uma amasethingi kabusha, ifayela ukumisa kususwa, zonke izinguquko ezinhle uphindwe, futhi ngenxa yalokho nokulahlwa ngokuvamile ubonakala njengesixazululo sokugcina.

Kulula ukwenza. Ukuze wenze lokhu, kudingeka nje uxhuma ikhebula ku-console router bese ufaka umyalo ku-console ukuphathwa: router # sula uqalisa-wokumisa. Bese: Layisha kabusha. I-router is kabusha emva kwakho kabusha ukulungiselelwa kuyoba ngokuphelele ahlanzekile.

Kuyaphawuleka ukuthi Cisco yokusetha kabusha kuyadingeka akuvamile. Nokho, ngenxa yezizathu ezithile kwenye kusadingeka ukwenza. Siphinde kumelwe singakhohlwa emva izilungiselelo yokutakula ubuyele ukubaluleka irejista umyalo: Amaset Bhalisa 0x2102.

Njengoba ukulondoloza ukucushwa

Uma unanoma yimiphi imishini inethiwekhi, kuhlanganise Cisco, ngokumiswa - lokhu akukona konke. Kufanele futhi ukwazi ukulondoloza lokho usubekwe, okungukuthi, ukulondoloza izinguquko.

I imizila kusuka Cisco, kunezinhlobo ezimbili zama-ukulondolozwa:

• idivayisi inkumbulo;
• e-non-oluyingozi inkumbulo eliyisiqalo.

Uhlobo lokuqala kulotshiwe zonke ekhiqizwa ngokuhamba ushintsho, kodwa uma uqala kabusha imishini balahlekile, futhi uzobe ngebhuzu nge izilungiselelo kwimemori kokuqala. Nokho, imishini Cisco yakhelwe ngendlela yokuthi ngqo nokwenza izinguquko ekucushweni uqalisa akunakwenzeka. Ukuze asindise bonke izinguquko inkumbulo non-oluyingozi, kubalulekile ukwenza okulandelayo:

1. Kopisha izilungiselelo zamanje in the team sokuqala: #copy ukugijima-wokumisa uqalisa-wokumisa.
2. Kopisha izilungiselelo zamanje FTP-iseva umyalo: #copy egijima-wokumisa tftp: // igama leseva.

Third-party Uhlelo ukumisa Cisco

Ukuze Cisco imishini ukulungiswa kungathatha indawo kulula kakhulu futhi ngokushesha uma usebenzisa le njongo izinhlelo ezikhethekile. Nokho, kuyinto kunalokho indaba ukunambitheka: ayoliswe sysadmins ebambelela ngokuqinile ukuba console yayo esibonakalayo, futhi akukho amandla ngokwemvelo zokudonsa zisuke kuwo.

Ezinye izindaba zika-efanayo, ikakhulukazi Wabasaqalayo, kungenziwa Kunconywa ukulanda ezinye izinhlelo zokusebenza ukuthi kungaba lula umsebenzi lokumiswa imishini Cisco:

1. Esokuqala njalo Windows amathuluzi - Uhlelo Hyper Terminal. Nokho, izinguqulo zamuva we-Windows, it is hhayi enikeziwe njengoba standard. Ukuze ufake Hyper Terminal, khetha u- "i-Windows zoHlelo" bese uthole into "Accessories kanye Izinsiza zokusebenza" bese uchofoza inkinobho kwesikrini "Ukwakheka". Okulandelayo, udinga ukuthola into "Ukuxhumana" bese uchofoza ku- "Ukwakheka" bese umaka ebhokisini lokumaka Uhlelo Hyper Terminal.
2. Putty - kuyinto isicelo freeware-Windows ne-Linux, esibulalayo Emulator kuhle. Yena eyayithandwa abaphathi eziningi ohlelweni.
3. Cisco Connections Kudivayisi Uhlelo - uhlelo olukhethekile zokumisa kanye kumiswa amanethiwekhi Cisco, izici zalo umxhwele. Ngakho, it has a egcwele ngamaphesenti ayikhulu kwedivayisi nazo zonke izimpahla Cisco. Eyokuqala Cisco Connections Kudivayisi Uhlelo ibekwe njengoba isicelo aguqulelwe umsebenzisi imfundamakhwela odinga ukwakha inethiwekhi osayizi amancane ngaphakathi ibhizinisi noma ekhaya abancane.
4. Uhlelo ezinhle - Analogue Putty - ku-Linux Minicom kubhekwe njengento iphakheji.

Graphic ukucushwa esibonakalayo

Yiqiniso, lo msebenzi imiyalo kusukela ukuphela - anomsebenzi eziyokhanga hhayi wonke umsebenzisi. A isofthiwe third-party kufanele ilandelwe, ngezinye izikhathi ngeke khulula. Nokho, kukhona ithuba ukufaka isikhombimsebenzisi sokuqhafaza ngqo isiphequluli sewebhu. Ukuze wenze lokhu, kufanele uqale ufake ekhethekile Java module, okuyinto ingalandwa kusukela ezikhulwini zikahulumeni kuya Java iwebhusayithi. I module libizwa Jre. Ngaphezu kwalokho, kudingeka SDM isicelo - ke ingafakwa kokubili router uqobo, futhi uhlelo lokusebenza.

Okulandelayo, udinga ukusetha izimvume isiphequluli ukubonisa izigelekeqe futhi ukusebenzisa okuqukethwe okusebenzayo.

Lapho nje SDM isiqalo, uzodinga ukushayela pre-ezikhethiwe IP-ikheli vlan1 port. It is ibuye Kunconywa ukususa ibhokisi lokuhlola eduze inketho HTTP.

Ngemva ngokucindezela inkinobho isiqalo izovela ibhokisi lengxoxo, okuzokwenza Udinga ukufaka kweqembu iphasiwedi ngemvume. Uma konke ifakwe kahle - sizosebenzisana Uhlelo iwindi SDM egijima ngqo kusiphequluli.

Ukusetha i-imodeli umugqa Linksys

Uma umsebenzisi eseke router kusukela Linksys imodeli line, umsebenzi lokumiswa imvelo sokuqhafaza lula kakhulu. Ngemva uxhumano kwanele uthayiphe yekheli isiphequluli: 192.168.1.1. Futhi yalayisha window izilungiselelo kwimodi sokuqhafaza.

Okokuqala udinga ngokushesha ushintshe iphasiwedi yakho bese ngemvume okukhishwayo okuzenzakalelayo njengoba: admin - admin. Lokhu kwenziwa emva shintsho ithebhu Administration. Kule thebhu, ungenza izilungiselelo reserve eyisipele.

Okulandelayo udinga ukuya Wireless - Basic Wireless Isethaphu, kule thebhu ukusetha izilungiselelo manual (Manual). Njengoba ukhiye secret livamise ukusetjenziselwa nenombolo ye-serial idivayisi.

It uhlala kuphela ukukhetha uhlobo lwe-inthanethi in amakholomu okuhambisanayo ukushayela kulungiselelwa enikeza umhlinzeki.

Iphasiwedi ubuhlakani

Ekuphetheni, kuyafaneleka ukuthi abaphathi eziningi ohlelweni azisebenzi ekusithekeni amaphasiwedi wakho ngenhlonipho efanele. Futhi yize, ngoba uma alinganiselwe eyodwa kuphela uhlaka "iphasiwedi" uma udala nephasiwedi, bese kungaba ngempumelelo "uhlangane" ka snmp ilimaze ukuphepha lonke uhlelo. Yingakho kunconywa ukusebenza nge amalungelo ukusetshenziswa ipharamitha «imfihlo». Iphuzu liwukuthi uma sisebenzisa ipharamitha «iphasiwedi», iphasiwedi izogcinwa nakusolwa kufayela wokumisa, futhi uma inzuzo ipharamitha «imfihlo», iphasiwedi ngeke ibethelwe.

Kulo mBhalo, umyalo ukusetha ukubethela iphasiwedi kumele izobukeka okulandelayo: router (Uhlel) imfihlo #enable PASS , lapho PASS kucacisiwe iphasiwedi. Lokhu kumisa iphasiwedi enwetshiwe imodi amalungelo.

Kuye imodeli ethile imishini Cisco, Tuning hardware ne-software ziyahlukahluka, kodwa ngokuvamile, isithombe ibukeka ncamashi njengoba kuchaziwe ngenhla.