Arotautanga Whatunga IP
Ko te arotautanga whatunga IP he raupapa o ngā mahi hangarau me ngā mahi rautaki hei whakapai ake i te mahi, te pono, te whai huatanga, me te haumarutanga o ngā whatunga e hangai ana ki te Kawa Ipurangi (IP). I te ao o ngā ratonga matihiko—mai i ngā tono pakihi me ngā pūnaha ako ipurangi ki ngā ratonga rerema me ngā whakawhitiwhiti kōrero wā-tūturu—ko ngā whatunga IP te pou tuarā o ngā mahi. Mena he puhoi, he kore pumau, he ngāwari rānei te whatunga ki te whakararuraru, ka nui te pānga: te hekenga o te hua, te hekenga o te wheako kaiwhakamahi, tae atu ki ngā mate pūtea. Nō reira, ehara i te mea ko te "whakateretere i te ipurangi" anake te arotautanga whatunga IP, engari ko te whakarite kia mahi te pūnaha whatunga katoa i runga i ngā hiahia o te whakahaere.
1. Te Mārama ki ngā Tawhā Mahi Whatunga IP
I mua i te whakahaere i te arotautanga, he mea nui kia mārama ki ngā inenga matua e whakatau ana i te kounga o te whatunga. Ko ngā tawhā e aro turukihia ana ko:
– Whānuitanga Ipurangi: te kaha mōrahi o tētahi hongere whakawhitiwhiti kōrero ki te tuku raraunga. Kāore te whānuitanga ipurangi nui e kī taurangi i te tere o te whatunga mena he taupatupatu, he ngoikore rānei te whirihoranga.
– Te whakaroa (whakaroa): te wā e haere ai te mōkihi mai i te pūtake ki te ūnga. He tino tairongo ngā tono wā-tūturu pēnei i te VoIP me te hui ataata ki te whakaroa.
– Te wiri: te rerekētanga o te whakaroa i waenga i ngā mōkihi. Ka taea e te wiri nui te whakaputa i te tangi pōturi me te ataata e pōturi ana.
– Te ngaronga o ngā mōkihi: te ōrau o ngā mōkihi i ngaro i te wā e tukuna ana. Ahakoa he iti noa ngā ngaronga mōkihi, ka pā nui ki te kounga o te ratonga.
– Te tere o te tuku raraunga: te tere whai hua o te tuku raraunga e whiwhihia ana e te kaiwhakamahi.
Ko te arotautanga pai ka tīmata i te ine (te tūāpapa), kātahi ka whakapai ake, kātahi ka arotake anō kia kitea ai te pānga tuturu o ngā huringa.
2. Te Whakamahere Wāhitau IP me te Whakatakotoranga Ipurangi Whai Hua
Mā te hoahoa wāhitau ma, ka māmā ake te whakahaere i te whatunga, ā, ka whakaitihia hoki te tūponotanga o ngā pakanga. Mā te whatunga iti ka taea te wehewehe i te whatunga ki ngā wāhanga iti ake i runga i te mahi, pērā i ngā whatunga iti mō ngā kaimahi, ngā manuhiri, ngā taputapu IoT, ngā tūmau, me ngā kaiwhakahaere. Ko ngā painga ko:
– Ka whakaiti i ngā rohe pāho, ka pai ake te whai huatanga o te whatunga.
– Ka whakapai ake i te haumarutanga, nā te mea ka māmā ake te whakatinana i ngā kaupapa here urunga mā te wehewehenga.
– Ka māmā ake te rapu raruraru, nā te mea ka tere ake te tautuhi i te pūtake o te raruraru.
I roto i ngā whatunga hou, he maha ngā whakahaere e whakamahi ana i te IPv6 hei whakatika i ngā herenga wāhitau IPv4 me te whakahaere i ngā hanganga whatunga mō te wā roa. He maha ngā wā he taahiraa whakawhiti haumaru ngā whakatinanatanga takirua-pūranga (IPv4 me te IPv6).
3. Te Wehewehenga me te Whakatinanatanga o te VLAN
Ko tētahi o ngā huarahi tino whai hua ki te arotau i tētahi whatunga IP ko te wehewehe mā te whakamahi i ngā VLAN (Ngā LAN Mariko). Mā ngā VLAN, ka taea te wehewehe i ngā whatunga i runga i te arorau ahakoa kei runga ngā taputapu i te pana tinana kotahi. Ko ngā pānga pai ko:
– Whakaitihia te noho pukumahi nā ngā whakapaohotanga koretake.
– Whakapai ake i te mahi nā te mea kua pai ake te whakarite o ngā waka.
– Whakapakari i te haumarutanga mā te wehewehe i te urunga i waenga i ngā rōpū.
Kia whakatinanahia ngā VLAN, me hoahoa pai te ara whakawhiti i waenga i ngā VLAN, mā te whakamahi i ngā pouara tuku iho, i ngā pana Layer-3 rānei, kia tere ai, kia pumau ai hoki.
4. Te Kounga o te Ratonga (QoS) mō te Kaupapa Matua o te Waka
Kāore i te rite te hiranga o ngā waka katoa. Ka taea e ngā tango nui, ngā tukutahitanga kapua rānei te kai i te whānui o te whatunga me te whakararuraru i ngā hui ataata. Nō reira, he mea nui te whakatinana i te QoS (Kounga Ratonga), inā koa mō:
– VoIP (waea IP)
– Hui ataata
– Ngā tono pakihi nui
– Ngā whakawhitiwhitinga wā-tūturu
Ka taea te whakatutuki i te QoS mā te whakarōpūtanga mōkihi (hei tauira, i runga i te DSCP), te tohu, te rarangi, me te whakaritenga matua. Mā tēnei ka noho tonu te whatunga ki te aro atu ahakoa te nui haere o te kawenga.
5. Te Arotautanga o te Ara me te Kōwhiringa Kawa Tika
Mō ngā whatunga tauine waenga ki te rahi, mā te whakamahi i te ara whakatere hihiri pēnei i te OSPF, EIGRP (i roto i ētahi taiao), te BGP rānei mō ngā hononga i waenga i ngā ISP ka taea te whakapai ake i te whai huatanga me te manawanui. Ko ngā arotau ara whakatere ko:
– Hoahoahia te āhua o te papaaho kia poto ake, kia pumau ake hoki te ara o te pākete.
– Āta karohia ngā takahuri ara me te whirihoranga tika.
– Whakatakotoria te utu/inenga mō te ara kia whiriwhiria ai e te hunga haere te ara pai rawa atu.
– Whakatinanahia te mahi tauutuutu (hononga maha) hei whakaiti i te wā kore mahi.
I roto i ngā whatunga hinonga, ka whakamahia he hoahoa hierarki (matua-tohatoha-urunga) hei whakangāwari ake i te pupuri i te mahi, hei whakawhanui ake hoki i te hanganga.
6. Te Whakahaere i te Whānuitanga o te Ara me te Whakahaere i te Pūngao
Ka puta te whakakīkī i te ipurangi nā te nui rawa o te whakamahinga ipurangi, ngā tono kāore i te whakahaerehia, ngā whakaekenga rānei. Nō reira, ko ngā rautaki whakahaere whānui ko:
– Te hanga i ngā waka: te whakahaere i ngā tauira tuku hei ārai i ngā pikinga o ngā waka.
– Te whakawhāiti i te tere: te whakawhāiti i te whakamahinga whānui mō ētahi ratonga.
– Te ara e hangai ana ki ngā kaupapa here: te ārahi i ētahi waka mā roto i tētahi ara motuhake (hei tauira, he hononga tārua, he hononga rānei he iti ake te utu).
Mā te whakahaere pai o te whānui o te hononga ka āwhina i te pupuri i te mahi a ngā tono nui me te kore e hiahia ki te whakanui tonu i te kaha hononga, he mea nui te utu.
7. Te Aroturukitanga Matatau, te Tātaritanga, me te Whakatau Rapanga
Kāore e roa te arotautanga me te kore he aroturuki tonu. Mā te aroturuki whatunga ka taea e ngā tīma IT te kite i ngā take i mua i te huri hei whakararuraru nui. Ko ngā mahi noa ko:
– Te whakamahi i te SNMP hei aroturuki i te atanga, te CPU, te mahara, me te tūnga o te pūrere.
– Whakahohehia a NetFlow/sFlow/IPFIX kia kite i ngā tauira o te haere me ngā "tino kōrero".
– Kohia ngā rangitaki mā te syslog ka tātarihia i waenganui.
– Whakahaerehia ngā whakamātautau kounga mā te whakamahi i ngā taputapu aroturuki ping, traceroute, me te latency/jitter.
Mā te huarahi matatau, ka taea e ngā whakahaere te karo i te wā roa e kore ai e mahi, ā, ka taea hoki e rātou te whakamahere tika mō te whakapiki i te kaha.
8. Te Haumarutanga hei Wāhanga o te Arotautanga
He nui tonu te mōrearea o tētahi whatunga tere engari kāore i te haumaru. Ka taea e ngā whakaekenga pēnei i ngā whakaeke DDoS, ngā pūmanawa kino, ngā urunga kore rānei te whakaroa i te whatunga, te whakakore rānei i ngā ratonga. Ko ngā mahi haumarutanga e pā ana ki te mahi ko:
– Te whakatinanatanga o ngā pareārai ahi me ngā kaupapa here urunga tika.
– Te wehewehenga whatunga hei whakawhāiti i te nekehanga o te kaiwhakaeke.
– Te whakamahinga o te IDS/IPS hei kimi me te ārai i ngā āhuatanga rerekē.
– Whakahōu i te pūmanawa o te taputapu whatunga i ia wā.
– Te whakatinanatanga VPN whai hua, haumaru hoki mō te urunga mamao.
Mā te haumarutanga kua whakaritea ka āwhina i te pupuri i te wātea, he āhuatanga matua tēnei o te kounga ratonga whatunga.
9. Te Taumahatanga me te Wātea Nui
Ko te tikanga o te arotautanga ko te whakarite kia haere tonu te mahi a te whatunga ina rahua tētahi wāhanga. Ko ngā rautaki e whakamahia whānuitia ana ko:
– Hononga tāpiri (hononga rua-ake) me ngā taputapu matua takirua.
– Ngā kawa pēnei i te HSRP/VRRP mō te taurite o te kuwaha.
– Kua whirihorahia tika te Spanning Tree hei ārai i ngā koropiko me te tuku tonu i te tere o te hinganga.
– He maha ngā ISP hei pupuri i te hononga ipurangi kia wātea tonu mēnā he raruraru kei tētahi kaiwhakarato.
Nā te nui o te wāteatanga, ka pai ake te kounga o te ratonga nā te mea ka tino whakaitihia te wā e kore e mahi ana.
10. Te Tuhituhi me te Whakapūmautanga
He maha ngā wā ka warewarehia te tuhi tuhinga, engari he nui tōna pānga ki te angitu o te arotautanga. Kei roto i te tuhi tuhinga pai ko te āhua o te pūnaha, ngā kaupapa IP, ngā whirihoranga taputapu, ngā rārangi VLAN, ngā kaupapa here QoS, me ngā tikanga tārua me te whakaora. Mā te whakapūmautanga ka taea e ngā tīma te whakatinana ngāwari i ngā huringa me te kore e hanga i ngā taupatupatu e pā ana ki te mahi.
Whakamutunga
He tukanga tonu te arotautanga whatunga IP e whakakotahi ana i te whakamahere hoahoa, te whirihoranga hangarau, te aroturuki, me te haumarutanga. Mai i te wehewehenga VLAN me te whakatinanatanga QoS, te whakahaere whānui, te arotautanga ara, me te aroturukitanga matatau, ka honoa katoatia ngā mea hei hanga i tētahi whatunga tere, pumau hoki, e rite ana ki te tautoko i ngā hiahia tono hou. I te mea kei te piki haere ngā tono pakihi wā-tūturu me te kapua, ko te haumi ki te arotautanga whatunga IP he taahiraa rautaki hei pupuri i te hua, hei whakarei ake i te wheako kaiwhakamahi, me te whakarite kia pai te haere o ngā ratonga matihiko.
