Mu buryo bwihuse bwihuse bwibikorwa bigezweho, ubwihindurize bwibibanza byaho (LANs) byafunguye inzira ibisubizo bishya kugirango bikemure ibibazo bikenerwa mubuyobozi. Bumwe muri ubwo buryo bugaragara ni Virtual Local Area Network, cyangwa VLAN. Iyi ngingo iracengera muburyo bukomeye bwa VLANs, intego zabo, ibyiza, ingero zishyirwa mubikorwa, imikorere myiza, nuruhare rukomeye bafite muguhuza nibisabwa bigenda byiyongera kubikorwa remezo byurusobe.
I. Gusobanukirwa VLAN n'intego zabo
Virtual Local Area Networks, cyangwa VLANs, ongera usobanure imyumvire gakondo ya LAN mugutangiza urwego rusanzwe rutuma amashyirahamwe apima imiyoboro yabyo hamwe nubunini, ubworoherane, nibigoye. VLANs ni ikusanyirizo ryibikoresho cyangwa imiyoboro y'urusobekerane rusa nkaho igice cya LAN imwe, mugihe mubyukuri, kibaho mugice kimwe cyangwa byinshi bya LAN. Ibi bice bitandukanijwe n’ibindi bisigaye bya LAN binyuze mu biraro, mu muyoboro, cyangwa kuri switch, bigatuma ingamba z'umutekano ziyongera kandi bikagabanya ubukererwe bw’urusobe.
Ibisobanuro bya tekinike kubice bya VLAN birimo kwitandukanya na LAN yagutse. Uku kwigunga gukemura ibibazo bisanzwe biboneka muri LAN gakondo, nkibibazo byo gutangaza no kugongana. VLANs ikora nka "domaine yo kugongana," igabanya impanuka zo kugongana no gukoresha ibikoresho byurusobe. Iyi mikorere yongerewe imbaraga ya VLANs igera kumutekano wamakuru no kugabana byumvikana, aho VLANs ishobora guhurizwa hamwe hashingiwe kumashami, amatsinda yimishinga, cyangwa andi mahame yumuteguro yumvikana.
II. Kuki Koresha VLAN
Amashyirahamwe yunguka cyane ibyiza byo gukoresha VLAN. VLANs itanga ikiguzi-cyiza, nkuko aho bakorera muri VLANs bavugana binyuze muri VLAN, bikagabanya gushingira kuri router, cyane cyane kubitumanaho imbere muri VLAN. Ibi biha VLANs gucunga neza amakuru yimitwaro yiyongereye, kugabanya ubukererwe bwurusobe muri rusange.
Ubwiyongere bwiyongera muburyo bwurusobe nindi mpamvu ikomeye yo gukoresha VLANs. Bashobora gushyirwaho no kugenwa hashingiwe ku cyambu, protocole, cyangwa sisitemu ya sisitemu, kwemerera amashyirahamwe guhindura VLANs no guhindura ibishushanyo mbonera bikenewe. Byongeye kandi, VLANs igabanya imbaraga zubuyobozi muguhita igabanya uburyo bwo kugera kumatsinda yihariye y'abakoresha, bigatuma iboneza ry'urusobe n'ingamba z'umutekano birushaho gukora neza.
III. Ingero zo Gushyira mu bikorwa VLAN
Mubihe byukuri-isi, ibigo bifite umwanya munini wibiro hamwe namakipe manini bikura inyungu zifatika muguhuza VLANs. Ubworoherane bujyanye no gushiraho VLANs buteza imbere ishyirwa mu bikorwa ryimishinga ikora kandi iteza imbere ubufatanye hagati yinzego zitandukanye. Kurugero, amatsinda azobereye mu kwamamaza, kugurisha, IT, no gusesengura ubucuruzi arashobora gukorana neza mugihe yahawe VLAN imwe, kabone niyo ibibanza byabo bifatika bigorofa cyangwa inyubako zitandukanye. Nubwo ibisubizo bikomeye bitangwa na VLANs, ni ngombwa kuzirikana ibibazo bishobora kuvuka, nk’ibidahuye na VLAN, kugira ngo iyi miyoboro ishyirwe mu bikorwa mu buryo butandukanye.
IV. Imyitozo myiza no kuyitaho
Ibikoresho byiza bya VLAN nibyingenzi mugukoresha ubushobozi bwabo bwuzuye. Gukoresha inyungu zicyiciro cya VLAN zitanga imiyoboro yihuse kandi itekanye, bikemura ikibazo cyo guhuza nibisabwa nurusobe. Abatanga Serivisi ziyobowe (MSPs) bafite uruhare runini mugukora neza VLAN, kugenzura ikwirakwizwa ryibikoresho, no kugenzura imikorere ikomeza.
| Imyitozo 10 myiza | Ibisobanuro |
| Koresha VLANs kuri traffic traffic | Mubusanzwe, ibikoresho byurusobe bivugana mubwisanzure, bitera umutekano. VLANs ikemura iki kibazo mugutandukanya traffic, kugarukira itumanaho kubikoresho muri VLAN imwe. |
| Kora imiyoborere itandukanye VLAN | Gushiraho ubuyobozi bwabigenewe VLAN yerekana umutekano wurusobe. Kwigunga byemeza ko ibibazo biri mubuyobozi VLAN bitagira ingaruka kumurongo mugari. |
| Kugena Aderesi ya IP ihagaze kubuyobozi VLAN | Aderesi ya IP ihagaze ifite uruhare runini mukumenyekanisha ibikoresho no gucunga imiyoboro. Kwirinda DHCP kubuyobozi VLAN itanga ibisubizo bihoraho, byoroshya ubuyobozi bwurusobe. Gukoresha subnets zitandukanye kuri buri VLAN byongera ubwigunge bwumuhanda, bigabanya ingaruka zo kwinjira utabifitiye uburenganzira. |
| Koresha IP Aderesi Yumwanya Umwanya wo kuyobora VLAN | Gutezimbere umutekano, ubuyobozi VLAN bwungukira kumwanya wihariye wa aderesi ya IP, gukumira abateye. Gukoresha imiyoborere itandukanye VLANs kubwoko butandukanye bwibikoresho byemeza uburyo bunoze kandi butunganijwe muburyo bwo gucunga imiyoboro. |
| Ntukoreshe DHCP kubuyobozi bwa VLAN | Kuyobora neza DHCP kubuyobozi VLAN ningirakamaro kumutekano. Kwishingikiriza gusa kuri aderesi ya IP ihamye birinda kwinjira bitemewe, bigatuma bigora abateye kwinjira murusobe. |
| Kurinda ibyambu bidakoreshwa no guhagarika serivisi zidakenewe | Ibyambu bidakoreshwa byerekana ingaruka z'umutekano, zitumira kwinjira bitemewe. Guhagarika ibyambu bidakoreshwa na serivisi zidakenewe bigabanya ibice byibitero, bishimangira umutekano wurusobe. Uburyo bukora burimo gukurikirana no gusuzuma serivisi zikora. |
| Shyira mubikorwa 802.1X Kwemeza kubuyobozi bwa VLAN | 802.1X kwemeza byongeweho urwego rwumutekano mukwemerera gusa ibikoresho byemewe kugera kubuyobozi VLAN. Iki gipimo kirinda ibikoresho bikomeye byurusobe, birinda guhungabana biterwa no kwinjira utabifitiye uburenganzira. |
| Gushoboza umutekano wicyambu kubuyobozi VLAN | Nkurwego rwohejuru rwo kugera, ibikoresho mubuyobozi VLAN bisaba umutekano uhamye. Umutekano wicyambu, washyizweho kugirango wemererwe gusa aderesi ya MAC yemewe, nuburyo bwiza. Ibi, bifatanije ningamba zumutekano ziyongera nka Lisiti yo kugenzura (ACLs) na firewall, byongera umutekano murusobe. |
| Hagarika CDP kuri Management VLAN | Mugihe Cisco Discovery Protocol (CDP) ifasha gucunga imiyoboro, itangiza ingaruka z'umutekano. Guhagarika CDP kubuyobozi VLAN igabanya izi ngaruka, ikabuza kwinjira utabifitiye uburenganzira hamwe nibishobora kugaragara kumakuru yamakuru yihariye. |
| Shiraho ACL kuri Management VLAN SVI | Urutonde rwo Kugenzura (ACLs) kubuyobozi VLAN Hindura Virtual Interface (SVI) ibuza kugera kubakoresha na sisitemu byemewe. Mugusobanura aderesi ya IP yemewe na subnets, iyi myitozo ishimangira umutekano wurusobe, ikumira uburyo butemewe bwo kugera kubikorwa bikomeye byubuyobozi. |
Mu gusoza, VLANs yagaragaye nkigisubizo gikomeye, irenga imipaka ya LAN gakondo. Ubushobozi bwabo bwo guhuza n'imiterere y'urusobe rugenda rwiyongera, hamwe ninyungu zo kongera imikorere, guhinduka, no kugabanya imbaraga zubuyobozi, bituma VLANs ari ntangarugero mumiyoboro igezweho. Mugihe amashyirahamwe akomeje gutera imbere, VLANs itanga uburyo bunini kandi bunoze bwo gukemura ibibazo bikomeye byibikorwa remezo byiki gihe.
Igihe cyo kohereza: Ukuboza-14-2023
