- Ukuhlukaniswa kwe-VLAN kukuvumela ukuthi uhlukanise inethiwekhi ebonakalayo ibe amanethiwekhi amaningi azimele anengqondo ukuze uthuthukise ukuphepha nokusebenza.
- Kubalulekile ukuhlukanisa phakathi kwama-access port (angenamathegi) amadivayisi okugcina kanye nama-trunk port (anamathegi) okuxhumana phakathi kwemishini yenethiwekhi.
- Ukusetshenziswa okuqinile kudinga ukucushwa kwamabanga e-DHCP azimele kanye nemithetho yomlilo elawula ukuhamba kwethrafikhi phakathi kwezingxenye ezahlukene.
Uma uke wazizwa sengathi inethiwekhi yakho yasekhaya iyisiphazamiso esikhulu, ngakho konke kusukela kukhompyutha yakho yomsebenzi kuya kubhalubhu ehlakaniphile ongazi ukuthi ubani olawulayo, awuwedwa. Iningi lethu lixhuma konke ku-router efanayo bese likhohlwa ngakho, kodwa leyo yindlela ephelele yokuthola iphutha elincane kudivayisi eshibhile ukuze libe yindawo yokuphepha yayo yonke imininingwane yakho yomuntu siqu.
Yilapho ama-VLAN angena khona, ithuluzi elingase libonakale njengento esetshenziswa onjiniyela kuphela, kodwa noma yimuphi umthandi wezobuchwepheshe angalisebenzisa ngempela ukuletha ukuhleleka ezinhlelweni zabo. Ngokuyisisekelo, kumayelana nokuhlukanisa ithrafikhi ukuze amadivayisi akho angaxubeki ndawonye, ngaleyo ndlela kuthuthukiswe ukusebenza kahle futhi, ngaphezu kwakho konke, kuvimbele umuntu ohlaselayo ukuthi angagxumi esuka kukhamera ye-IP esengozini aye ku-NAS yakho lapho ugcina khona izithombe zomndeni.
Iyini i-VLAN emhlabeni futhi isetshenziselwani ngempela?
Kalula nje, i-VLAN (Virtual Local Area Network) iyinethiwekhi yendawo ebonakalayo . Cabanga ukuthi uneswishi noma i-router ebonakalayo; ngokuvamile, konke okuxhuma kukho kuyingxenye yenethiwekhi efanayo. I-VLAN ikuvumela ukuthi udwebe imigqa engabonakali ukuze uhlukanise leyo nethiwekhi ebonakalayo ibe amanethiwekhi amaningana azimele anengqondo. Kunjengokungathi, ngaphandle kokusebenzisa ikhebula elilodwa elisha, ubunama -router amaningana abonakalayo asebenza kukhompyutha efanayo.
Inzuzo enkulu ukuhlukaniswa kwethrafikhi . Ngokuhlukanisa amadivayisi, uvimbela umsindo wenethiwekhi kusuka kudivayisi eyodwa ethinta enye futhi udale izithiyo zokuphepha. Isibonelo, ungavumela izivakashi ukuthi ziphequlule i-inthanethi kodwa uzivimbele ekufinyeleleni iphrinta noma amaseva akho. Ngaphezu kwalokho, lokhu kwenza kube lula ukusetshenziswa kwezinqubomgomo ze- Quality of Service (QoS) , ukubeka phambili, isibonelo, ukuqinisekisa ukuthi izingcingo ze-VoIP aziphazanyiswa ngisho noma othile elanda umdlalo omkhulu kunethiwekhi eyabiwe.
Imiqondo eyinhloko: Izimbobo zokufinyelela, ama-Trunks, kanye nokuThega
Ukuze ugweme ukuzenza isiwula ngenkathi ulungiselela i-firmware ye-router yakho, kunemibono emithathu okudingeka uyikhumbule: okokuqala, kukhona ukumaka , okuvame ukusekelwe ku-standard 802.1Q. Le nqubo ihilela ukwengeza "ilebula" (i-VLAN ID) kuma-data packets ukuze amadivayisi azi ukuthi angowayiphi inethiwekhi.
- Amachweba okufinyelela (Awafakwanga i-tag): Lezi yizimbobo esizisebenzisayo ukuxhuma umsebenzisi wokugcina. Ikhompyutha noma ikhamera ye-IP ayiqondi amalebula; ngakho-ke, imbobo yokushintsha ilungiselelwe "njengengafakwanga ilebula" ukuze idivayisi ithole ithrafikhi engafakwanga amathegi. Imbobo yokufinyelela ingaba ngeye-VLAN eyodwa kuphela.
- Amachweba Esiqu (Isiqu/Amathegi): Lezi "izindlela ezinkulu" zenethiwekhi. Zisetshenziselwa ukuxhuma i-router kuma-switch noma phakathi kwama-switch. I-trunk port ithutha ama-VLAN amaningi ngasikhathi sinye, gcina amalebula evuliwe ukuze ithimba elimukelayo lazi ukuthi lizothumela kuphi iphakethe ngalinye.
- I-PVID (I-Port VLAN ID): Kuyipharamitha ebalulekile echaza ukuthi iyiphi ithrafikhi ye-VLAN engafakwanga amathegi efika echwebeni eyabelwe yona. Uma ukhohlwa ukumisa i-PVID, amadivayisi akho cishe azogcina eseku- I-VLAN 1 ngokuzenzakalelayo hhayi lapho ubufuna khona.
Ukuklama ingqalasizinda ehlukanisiwe: Uhlelo oluyinhloko
Ungadali ama-VLAN ngokungahleliwe, ngoba uzogcina uzivimbile. Okungcono kakhulu, kufanele ubhale phansi yonke imishini yakho bese uyihlanganisa ngokwezinga lobungozi noma umsebenzi. Umklamo ohlakaniphile wekhaya elihlakaniphile noma ihhovisi elincane ungase ubukeke kanje:
- I-VLAN Yokuphatha: Kugcinelwe kuphela ukuphathwa kwamaswishi abalulekile, ama-router, izindawo zokufinyelela, kanye namaseva. Yilapho usebenzisa khona ukulawula okuqinile.
- Ikhaya le-VLAN/I-Personal: Ngamadivayisi akho athembekile (ama-laptop, amaselula). Ukuhlunga kwe-DNS ngamathuluzi afana ne-AdGuard okuhlanza izikhangiso kusukela empandeni.
- Ama-VLAN e-IoT kanye ne-Multimedia: Nanka amabhalbhu okukhanya, amathelevishini, kanye nama-consoles emidlalo. Njengoba la madivayisi enokuphepha okulinganiselwe, kumele... zihlukaniswe ngokuphelele yenethiwekhi yomuntu siqu.
- I-VLAN Yesivakashi: Ukufinyelela i-inthanethi ngqo kodwa nge ukuhlukaniswa kwamakhasimendekangangokuthi izivakashi azikwazi nokubonana.
- I-VLAN Yomsebenzi noma Yelebhu: Amanethiwekhi azimele okusebenza ngocingo noma ukuhlolwa kwesofthiwe, okuvimbela igciwane endaweni yokuhlola ukuthi lingangeni endlini yonke.
Umhlahlandlela wokulungiselela i-firmware ye-router kanye ne-switch
Nakuba uhlobo ngalunye lune-interface yalo, inqubo ivame ukulandela iphethini efanayo. Kuma-router afana nalawo avela ku-ASUS noma ku-QNAP, okokuqala udinga ukufinyelela i-web GUI bese uthola isigaba se-LAN noma se-VLAN . Ukuhamba komsebenzi okuvamile kungokulandelayo:
Okokuqala, udala iphrofayela ye-VLAN ngokuyinika i-ID ehlukile (isibonelo, i-VLAN 10 ye-IoT). Uma iphrofayela isidaliwe, udinga ukumisa amachweba angokoqobo. Uma uxhuma i-PC, ukhetha ichweba kwimodi yokufinyelela bese uyinika iphrofayela ehambisanayo. Uma uxhuma i-router kuswishi ephethwe, umisa leyo chweba kwimodi ye-trunk ukuvumela wonke amathegi ukuthi adlule.
Isinyathelo esibalulekile ukulungisa iseva ye-DHCP . I-VLAN ngayinye idinga ububanzi bayo bekheli le-IP (isibonelo, i-192.168.10.0/24 ye-IoT kanye ne-192.168.20.0/24 yezivakashi). Uma i-router ingenayo i-interface ebonakalayo kanye ne-DHCP elungiselelwe leyo VLAN, amadivayisi axhunyiwe ngeke athole amakheli e-IP , futhi ngeke kube nokuxhumana.
Ukwengeza izendlalelo zokuphepha: I-Firewall kanye ne-mDNS
Ukudala ama-VLAN kuyingxenye yomsebenzi kuphela. Ngokuzenzakalelayo, ama-router amaningi avumela ama-VLAN ukuthi axhumane. Ukuze kube nokuhlukaniswa okuphumelelayo, udinga ukumisa imithetho ye-firewall . Umthetho ovame kakhulu ukuvimbela i-IoT VLAN ukuthi iqalise ukuxhumana nenethiwekhi yokuphatha noma yomuntu siqu, okuvumela kuphela ithrafikhi oyigunyazayo ngokusobala.
Ukuze kuxazululwe inkinga yokuthi amanye amadivayisi (njenge-Chromecast noma amaphrinta) awakwazi ukubonana kumanethiwekhi, kusetshenziswa i- mDNS reflector . Leli thuluzi livumela imibuzo yokuthola isevisi ukuthi yeqe izithiyo ze-VLAN ngendlela elawulwayo, okwenza idivayisi yakho yeselula kunethiwekhi "yasekhaya" ithumele okuqukethwe ku-TV yakho kunethiwekhi "ye-IoT" ngaphandle kokuvula yonke i-firewall.
Amaphutha ajwayelekile okufanele uwagweme
Kuvamile kakhulu ukuthi ithrafikhi ihluleke ngoba i-trunk port ayinamaki awo wonke ama-VLAN adingekayo. Uma iswishi ingazi ukuthumela ithegi ku-router, ukuxhumana kuyaphazamiseka. Elinye iphutha elivamile ukuzama ukuxhuma amadivayisi okugcina ngqo kuma-router port ahlelwe njengama-trunk port; khumbula ukuthi amadivayisi okugcina kufanele axhunywe kuma- untagged ports.
Okokugcina, ungayinaki i-firmware. Izici ze-VLAN zivame ukuba ezokugcina ukuzinza kuma-router asekhaya, ngakho-ke kubalulekile ukugcina isofthiwe ibuyekeziwe ukuze ugweme ukuqondisa amaphutha noma ubuthakathaka obungavimbela ukuhlukaniswa kwakho.
Ukusebenzisa isu lenethiwekhi ebonakalayo kuguqula ukuxhumana okuyisisekelo kube yingqalasizinda yobungcweti nephephile. Ngokuhlanganisa i-router ehambisana ne-802.1Q, amaswishi aphethwe, kanye nemithetho eqinile ye-firewall, ungagcina ithrafikhi yezivakashi, amadivayisi ahlakaniphile, kanye nedatha ebucayi kuhadiwe efanayo kodwa ezindaweni ezihlukile ezinengqondo, uthuthukise i-bandwidth nge-QoS futhi uvikele ubumfihlo bekhaya ekungeneni okungenzeka.
Umbhali oshisekayo ngomhlaba wamabhayithi nobuchwepheshe ngokujwayelekile. Ngiyathanda ukwabelana ngolwazi lwami ngokubhala, futhi yilokho engizokwenza kule bhulogi, ngikubonise zonke izinto ezithakazelisayo kakhulu ngamagajethi, isofthiwe, ihadiwe, izitayela zobuchwepheshe, nokuningi. Inhloso yami ukukusiza ukuthi uzulazule emhlabeni wedijithali ngendlela elula nejabulisayo.