Cisco NFVIS 4.4.1 Enterprise Network Function Virtualization Infrastructure Software

Ulwazi lweMveliso

Imveliso yinkqubo ye-NFVIS exhasa i-BGP (i-Border Gateway Protocol) kumzila oguquguqukayo phakathi kweenkqubo ezizimeleyo ze-BGP. Ivumela inkqubo ye-NFVIS ukuba ifunde iindlela ezibhengezwe kubamelwane be-BGP abakude kwaye basebenzise kwinkqubo ye-NFVIS. Ukongeza, ikuvumela ukuba ubhengeze okanye urhoxise iindlela ze-NFVIS zasekhaya ukuya / ukusuka kubamelwane be-BGP ekude.

Imbali yoMbali

Igama lophawu	NONE	Inkcazo
Inkxaso BGP kwi Subnets Remote Over IPSec	I-NFVIS 4.4.1	Eli nqaku lenza inkqubo ye-NFVIS ifunde iindlela ezibhengeziweyo ngabamelwane BGP ekude phezu IPSec kwaye uzisebenzise kwi NFVIS inkqubo.
Inkxaso ye-BGP Ibhengeza iiSubnets zasekuhlaleni (Usasazo lweNdlela)	I-NFVIS 3.10.1	Eli nqaku likuvumela ukuba ubhengeze okanye urhoxise i-NFVIS yendawo iindlela ukuya/kusuka kude kubamelwane be-BGP usebenzisa ukuhanjiswa kwendlela.

Indlela NFVIS BGP Works

• Umsebenzi we-NFVIS BGP usebenza ngokudibeneyo ne-router ye-BGP ekude. Ifunda iindlela ezibhengezwe kummelwane we-BGP ekude kwaye uzisebenzise kwinkqubo ye-NFVIS.
• Ikwakuvumela ukuba ubhengeze okanye urhoxise iindlela ze-NFVIS zasekhaya ukuya/ukusuka kwindawo ekude ye-BGP ummelwane.
• Ukuqala kwi-NFVIS 4.4.1 ukhupho, i-NFVIS BGP inkalo inokufunda iindlela ukusuka kummelwane we-BGP ngaphezulu kwetonela ekhuselweyo eyalekayo.
• Ezi ndlela zifundiweyo/iisubnets zongezwa kwitheyibhile yeNFVIS yetonela ekhuselekileyo, izenza zifikeleleke phezu kwetonela.

Imiyalelo yokusetyenziswa kwemveliso

Qwalasela iBGP kwiNFVIS

Ukuqwalasela ummelwane we-BGP kwi-NFVIS, unokhetho ezimbini:

1. Ukusebenzisa idilesi ye-IP yommelwane
2. Ukusebenzisa umtya wegama

Ukusebenzisa idilesi ye-IP yommelwane

Ukuba ufuna ukuqwalasela ummelwane weBGP usebenzisa idilesi ye IP, landela la manyathelo:

1. Ukufikelela kwitheminali yoqwalaselo yerouter:

config terminal

1. Chaza inombolo ye-BGP AS kunye nedilesi ye-IP engummelwane:

router bgp [AS number] neighbor [neighbor IP address] remote-as [remote AS number]

1. Phuma kwitheminali yoqwalaselo:

exit

1. Yenza utshintsho:

commit

Ukusebenzisa umtya wegama

Ukuba ufuna ukuqwalasela ummelwane weBGP usebenzisa umtya wegama, landela la manyathelo:

1. Ukufikelela kwitheminali yoqwalaselo yerouter:

config terminal

1. Chaza inombolo ye-BGP AS kunye nomtya wegama lommelwane:

router bgp [AS number] neighbor [name string] remote-as [remote AS number]

1. Phuma kwitheminali yoqwalaselo:

exit

1. Yenza utshintsho:

commit

Kucinywa ulungelelwaniso lwe-BGP

Ukuba ufuna ukucima ulungelelwaniso lweBGP, landela la manyathelo:

1. Ukufikelela kwitheminali yoqwalaselo yerouter:

config terminal

1. Cima ulungelelwaniso lweBGP:

no router bgp [AS number]

1. Yenza utshintsho:

commit

Iinkcukacha

Ipropati	Uhlobo	Inkcazo	Isinyanzelo
as	Uint32	BGP yendawo AS inombolo	Ewe
umzila-id	IPv4	IPv4 idilesi yesixokelelwano sasekhaya	Hayi
ummelwane	Uluhlu	Uluhlu lwabamelwane	Ewe
kude-IP	Umtya	IPv4 idilesi okanye Khusela Ukwaleka BGP igama lommelwane ye BGP inkqubo yommelwane	Ewe
ekude-njenge	Uint32	Ukude BGP AS inombolo	Ewe
inkcazelo	Umtya	Inkcazo	Hayi

FAQ

Umbuzo: Yintoni iBGP?

• A: I-BGP imele iProtocol yeBorder Gateway, eyiprotocol yomzila oguquguqukayo esetyenziselwa ukutshintshiselana ngolwazi lwendlela phakathi kweenkqubo ezizimeleyo zeBGP.

Q: Wenza ntoni umsebenzi weNFVIS BGP?

• A: Umsebenzi we-NFVIS BGP uvumela inkqubo ye-NFVIS ukuba ifunde iindlela ezibhengezwe ngabamelwane be-BGP ekude kwaye uzisebenzise kwinkqubo ye-NFVIS. Ikwakuvumela ukuba ubhengeze okanye urhoxise iindlela ze-NFVIS zasekhaya ukuya/ukusuka kubamelwane be-BGP ekude.

Q: Ingaba i-NFVIS BGP ifaka umsebenzi njani kunye nokwaleka okukhuselekileyo?

• A: Ukuqala kwi-NFVIS 4.4.1 ukukhululwa, i-NFVIS BGP inkalo inokufunda iindlela ukusuka kummelwane we-BGP phezu kwetonela ekhuselweyo eyalekayo. Ezi ndlela zifundiweyo/iisubnets zongezwa kwitheyibhile yeNFVIS yomzila wetonela ekhuselekileyo, izenza zifikeleleke phezu kwetonela.

Q: Ndingenza njani ukuqwalasela ummelwane we-BGP kwi-NFVIS?

• A: Ungaqwalasela ummelwane we-BGP kwi-NFVIS nokuba usebenzisa idilesi ye-IP engummelwane okanye umtya wegama. Jonga kwi "Qwalasela i-BGP kwi-NFVIS" icandelo lemiyalelo eneenkcukacha.

Q: Ndingalucima njani ulungelelwaniso lweBGP kwiNFVIS?

• A: Ukucima ulungelelwaniso lwe-BGP kwi-NFVIS, landela la manyathelo akhankanywe kwicandelo "Ukucima Uqwalaselo lwe-BGP".

Inkxaso ye-BGP kwi-NFVIS

Itheyibhile 1: Imbali yoMbali

Uphawu Igama	NONE	Inkcazo
Inkxaso BGP kwi Subnets Remote Over IPSec.	I-NFVIS 4.4.1	Eli nqaku livumela inkqubo ye-NFVIS ukuba ifunde iindlela ezibhengezwe kwi-BGP ekude kwaye isebenzise iindlela ezifundiweyo kwinkqubo ye-NFVIS.
Inkxaso ye-BGP Ibhengeza iiSubnets zasekuhlaleni (Usasazo lweNdlela)	I-NFVIS 3.10.1	Eli nqaku likuvumela ukuba ubhengeze okanye urhoxise iindlela ze-NFVIS zendawo ukuya kwindawo ekude ye-BGP engummelwane usebenzisa ukuhanjiswa kwendlela.

• Iprotocol yeBorder Gateway (BGP) yiprotocol yendlela eguqukayo yokutshintshiselana ngolwazi lwendlela phakathi kwe BGP ezizimeleyo.
• Inqaku le-NFVIS BGP lisebenza kunye ne-router ye-BGP ekude. Eli nqaku livumela inkqubo ye-NFVIS ukuba ifunde iindlela ezibhengezwe kwi-BGP ekude kwaye isebenzise iindlela ezifundiweyo kwinkqubo ye-NFVIS. Eli nqaku likuvumela ukuba ubhengeze okanye urhoxise iindlela ze-NFVIS zasekhaya ukusuka kummelwane we-BGP ekude.
• Ukuqala kukhupho lwe-NFVIS 4.4.1, i-NFVIS BGP isici sisebenza kunye nefitsha yokwaleka ekhuselekileyo yokufunda iindlela ukusuka kummelwane we-BGP ngaphaya kwetonela yolwaleka ekhuselekileyo. Ezi ndlela zifundiweyo okanye ii-subnets zongezwa kwitheyibhile ye-NFVIS yomzila wetonela ekhuselekileyo, eyenza iindlela zifikeleleke phezu kwetonela.
• Qwalasela iBGP kwiNFVIS, kwiphepha loku-1
• Ukuhanjiswa kweNdlela, kwiphepha lesi-4
• BGP Route Isibhengezo phezu MPLS okanye IPSec, kwiphepha 5

Qwalasela iBGP kwiNFVIS

• Ummelwane we-BGP unokuqwalasela usebenzisa idilesi ye-IP engummelwane okanye umtya wegama.
• Ukuba ummelwane we-BGP ukhankanyiwe kusetyenziswa umtya wegama, kufuneka isetyenziswe ngokudityaniswa nokhuseleko lwalekayo lwe-bgp-neibhor-indawo yegama. Iseshoni ye-BGP isekiwe phezu kwetonela ekhuselweyo yokwaleka. Ukuba igama lommelwane lihambelana ne-BGP-ummelwane-igama lomhlaba eliqwalaselwe kuqwalaselo olukhuselweyo-ukwaleka, ngoko i-NFVIS izakugqiba idilesi esebenzayo yendlela ekude ye IP esetyenziselwa uxhulumaniso lwe IPSec kwaye endaweni yegama lommelwane ngaloo IP.
• Oku kuya kuseka iseshoni yommelwane we-BGP ngaloo dilesi ye-IP. Ukufumana ulwazi oluthe kratya malunga nendlela yokuqwalasela umaleko okhuselekileyo kunye negama le-BGP, bona Ulwaleka oluKhuselekileyo kunye noqwalaselo oluNye IP.
• Ukuba ummelwane we-BGP ukhankanyiwe usebenzisa idilesi ye-IP eyi-headend VPN idilesi ye-IP yetonela yomphenduli, efana nedilesi ye-IP ye-aa headend VPN umphenduli wetonela, iseshoni ye-BGP isekiwe phezu kwetonela ekhuselweyo eyogqunyiweyo.
• Le example ibonisa indlela yokuyila okanye ukuhlaziya uqwalaselo lweBGP lommelwane onoluhlu lwegama elikhankanyiweyo:
• Le example ibonisa indlela yokuyila okanye ukuhlaziya uqwalaselo lwe-BGP ngedilesi ekhankanyiweyo ye-IP engummelwane:
• Le example ibonisa indlela yokucima ulungelelwaniso lweBGP:
• Le theyibhile ilandelayo ibonelela ngenkcazelo yesivakalisi kwipharamitha nganye kwimiyalelo ekhankanywe kwi-examples ngasentla:

Ipropati	Uhlobo	Inkcazo	Isinyanzelo
as	Uint32	BGP yendawo AS inombolo	Ewe
umzila-id	IPv4	HHHH: IPv4 idilesi yesixokelelwano sasekhaya	Hayi
ummelwane	uluhlu	Uluhlu lwabamelwane	Ewe
kude-ip	Umtya	IPv4 idilesi okanye Secure Ukwaleka BGP igama lommelwane ye BGP inkqubo ummelwane	Ewe
ekude-njenge	Uint32	Ukude BGP AS inombolo	Ewe
inkcazelo	Umtya	Inkcazelo yommelwane	Hayi

Le ex ilandelayoample ibonisa iinkcukacha zeseshoni ye-BGP:

Le ex ilandelayoample ubonisa iindlela BGP ezifundwe nge BGP:

Phawula I-NFVIS inokufunda ukuya kutsho kwi-15 izimaphambili.

BGP Ummelwane woqwalaselo Example

Ukusasazwa kwendlela

Indawo yoSabelo lweNdlela isebenza kunye nerouter ye-BGP ekude. Ikuvumela ukuba ubhengeze okanye urhoxise iindlela ezichaziweyo kwi-router ye-BGP ekude.
Ungasebenzisa olu phawu ukubhengeza indlela ye-int-mgmt-net subnet ukuya kwirutha ekude ye-BGP. Umsebenzisi okude, unokufikelela kwii-VM ezincanyathiselwe kwi-int-mgmt-net ngedilesi ye-IP ye-VMs kwi-int-mgmt-net-br nge-router ye-BGP, xa iindlela zifakwe ngempumelelo kwi-router ye-BGP ekude.

Ukumisela okanye ukuhlaziya ukuhanjiswa kwendlela:

Uluhlu 2: Inkcazelo yePropati

Ipropati	Uhlobo	Inkcazo	Isinyanzelo
ummelwane-idilesi	IPv4	BGP ummelwane IPv4 idilesi. Sisitshixo soluhlu lokuhanjiswa kwendlela.	Ewe
idilesi yendawo	IPv4	Idilesi ye-IPv4 yendawo. Le dilesi kufuneka ibe iqwalaselwe njengedilesi ye-IP yommelwane kwindawo ekude ye-BGP. Ukuba akukho njalo iqwalaselwe, idilesi yendawo-imiselwe kwidilesi ye IP yendawo-yebhulorho.	Hayi
yendawo-njenge		Inombolo yenkqubo yokuzimela yendawo. Inokuba kwi iifomati ezimbini zilandelayo:	Ewe
lendawo-ibhulorho		Igama lebhulorho yendawo yeendlela zentengiso (ehlala ikho i-wan-br).	Hayi
ekude-njenge		Inombolo yenkqubo yokuzimela ekude. Inokuba kwiifomathi ezimbini ezilandelayo:	Ewe
umzila-id	IPv4	Isazisi somzila wendawo	Hayi

Ipropati	Uhlobo	Inkcazo	Isinyanzelo
inethiwekhi-subnet		Uluhlu lwe-subnet yenethiwekhi luya kubhengezwa.	Ewe
i-subnet	IPv4 isimaphambili	I-subnet yothungelwano izakwaziswa HHHH/N	Ewe
elandelayo-hop	IPv4	IPv4 idilesi ye hop elandelayo. Ukuhlala kukho idilesi yendawo okanye idilesi yeIP yebhulorho yendawo.	Hayi

• Sebenzisa umyalelo we-no router bgp ukucima ukuhanjiswa kwendlela. Ukuqinisekisa ubume bokuphazamiseka kwendlela sebenzisa umboniso we-router bgp umyalelo.
• Ukude kwi-BGP Router Configuration Example
• Indlela yokuhanjiswa kwe-NFVIS isebenza kunye ne-router ye-BGP ekude. Uqwalaselo kwi-NFVIS nakwindlela ekude ye-BGP kufuneka ihambelane.
• Le example ibonisa uqwalaselo kwi-router ye-BGP ekude.

BGP Route Isibhengezo phezu MPLS okanye IPSec

Itheyibhile 3: Imbali yoMbali

Uphawu Igama	NONE	Inkcazo
BGP Route Isibhengezo phezu MPLS okanye IPSec	I-NFVIS 4.5.1	Eli nqaku likuvumela ukuba wenze qwalasela i-NFVIS ukwazisa iindlela nge-BGP ngaphezulu kweMPLS. NFVIS ivumela iindlela ezifundwe nge BGP ekhoyo phezu IPSec tonela phezu uqhagamshelwano MPLS.

• Ngolu phawu lophuculo, iindlela ezikhoyo ezifundiweyo nge-BGP ngaphezulu kwetonela ye-IPSec ngoku zivunyelwe kuqhagamshelo lweMPLS. Ukongeza, NFVIS ngoku ukubhengeza iindlela ngokusebenzisa BGP, usebenzisa umzila bgp umyalelo efanayo esetyenziselwa ukufunda iindlela phezu BGP. Ukuze ufumane inkcazelo engakumbi ngalo myalelo, bona i
• Cisco IOS XE umzila bgp umyalelo.
• Uyakwazi ukuhlanganisa uqwalaselo lwalekayo olukhuselekileyo ukubhengeza iindlela NFVIS phezu BGP ngokusebenzisa IPSec tonela.
• Ulungelelwaniso olukhoyo lwe-router bgp lunokuhlaziywa ukongeza into yokwazisa indlela. Qinisekisa ukuba ususa ulungelelwaniso olukhoyo lonikezelo lwendlela phambi kokuba uqwalasele umyalelo we-router bgp.
• Le ex ilandelayoample ibonisa indlela yokuqwalasela isibhengezo 10.20.0.0/24 subnet phezu BGP.
• Le ex ilandelayoample ibonisa indlela ukususa isibhengezo 10.20.0.0/24 subnet ukusuka BGP.
• Le ex ilandelayoample ibonisa indlela yokususa ummelwane kusapho lwedilesi ye-IPv4, kwaye ukhubaze izibhengezo zendlela kummelwane omnye.
• Ukuya view ubume bendawo BGP ye BGP phezu kwe MPLS sebenzisa umboniso bgp ipv4 umyalelo unicast.
• Ukuya view i BGP ubume lobumelwane for BGP phezu MPLS sebenzisa umboniso bgp ipv4 isishwankathelo umyalelo unicast.
• Ukuya view i BGP wafunda okanye wabhengeza iindlela BGP phezu MPLS sebenzisa umboniso bgp ipv4 umyalelo unicast umzila.
• Ukuya view ubume BGP yobulali ye BGP phezu IPSec itonela sebenzisa umboniso bgp vpnv4 umyalelo unicast.
• Ukubonisa BGP ubume ummelwane BGP phezu IPSec tonela:
• Ukubonisa BGP wafunda / iindlela esazisiweyo for BGP phezu IPSec tonela:
• Phawula Xa uqwalasela isibhengezo sendlela ye-BGP ngaphezulu kwetonela ye-IPSec, qinisekisa ukuba uqwalasela ukwaleka okukhuselekileyo ukusebenzisa idilesi ye-IP enenyani yedilesi ye-IP yetonela yobulali (akukho-nkqubo yasekuhlaleni-ip-addr iqwalaselwe).
• Xa uqwalasela isibhengezo sendlela ye-BGP, idilesi eqwalaselweyo kuphela-usapho okanye uthumelo lwendibaniselwano ipv4 unicast zombini IPSec kunye MPLS. Ukuya view ubume be-BGP, idilesi elungisekayo-usapho okanye uthumelo lwe-IPSec yi-vpnv4 unicast kunye ne-MPLS yi-ipv4 unicast.

Amaxwebhu / Izibonelelo

Cisco NFVIS 4.4.1 Enterprise Network Function Virtualization Infrastructure Software [pdf] Incwadi yokusebenzisa NFVIS 4.4.1, NFVIS 3.10.1, NFVIS 4.4.1 Enterprise Network Function Virtualization Infrastructure Software, NFVIS 4.4.1, Enterprise Network Function Virtualization Infrastructure Software, Network Function Virtualization Infrastructure Software, Virtualization Infrastructure Software, Infrastructure Software, Software

Iimbekiselo

• Incwadi yokusebenzisa