GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions

Ulwazi Lomkhiqizo

• Ibhrendi: Okuningi ngo-Grandstream Networks, Inc.
• Uchungechunge Lomkhiqizo: Uchungechunge lwe-GCC6000
• Incazelo: Umhlahlandlela we-NAT othuthukisiwe

Imininingwane

• Isekela Umthombo we-NAT (SNAT) kanye Nendawo eyi-NAT (DNAT)
• Ivumela ukucushwa kokudlulisela imbobo nokubhala kabusha ikheli le-IP
• Idizayinelwe idivayisi yokuhlanganisa ye-GCC601x(W).

Imiyalo yokusetshenziswa komkhiqizo

Ukucushwa kwe-SNAT
I-SNAT ilawula ukuguqulwa kwekheli le-IP eliwumthombo kanye nenombolo yembobo lapho ixhumeka isuka kumsingathi wangaphakathi ukuya kumsingathi wangaphandle.

Ilungiselela i-WAN 1

1. Zulazulela ku-Firewall Module> Firewall Policy> Advanced NAT> SNAT.
2. Chofoza inkinobho ethi Engeza ukuze wengeze umthetho omusha we-SNAT.
3. Nika amandla isimo.
4. Setha iphrothokholi kokuthi Noma iyiphi.
5. Setha inethiwekhi yekheli le-IP yomthombo ku-subnet ye-LAN ye-VLAN ezenzakalelayo.
6. Setha ikheli le-IP eliwumthombo wokubhala kabusha ekhelini le-IP Lomphakathi elinikezwe i-ISP 1.
7. Khetha iqembu okuyiwa kulo lapho ikheli le-IP lomthombo wokubhala kabusha lingelalo (imbobo ye-WAN 1).

Ilungiselela i-WAN 2

1. Zulazulela ku-Firewall Module> Firewall Policy> Advanced NAT> SNAT.
2. Chofoza inkinobho ethi Engeza ukuze wengeze umthetho omusha we-SNAT.
3. Nika amandla isimo.
4. Setha iphrothokholi kokuthi Noma iyiphi.
5. Setha inethiwekhi yekheli le-IP yomthombo ku-subnet ye-LAN ye-Voice VLAN.
6. Setha ikheli le-IP eliwumthombo wokubhala kabusha ekhelini le-IP Lomphakathi elinikezwe i-ISP 2.
7. Khetha iqembu okuyiwa kulo lapho ikheli le-IP lomthombo wokubhala kabusha lingelalo (imbobo ye-WAN 2).

Ukucushwa kwe-DNAT
I-DNAT ilawula ukuguqulwa kwekheli le-IP yendawo okuyiwa kuyo kanye nenombolo yembobo lapho ithola ithrafikhi esuka kumsingathi wangaphandle ukuya kumsingathi oyimfihlo.

Ukulungiselelwa kwe-NAT okuyiwa kuyo
Ukwenza okwasendaweni web iseva efakwe ku-LAN yakho etholakala kumakhasimende angaphandle, landela lezi zinyathelo:

1. Zulazulela kuzilungiselelo ze-DNAT.
2. Setha i-DNAT ukuze udlulisele ithrafikhi esuka ku-inthanethi iye ku-LAN yakho usebenzisa ikheli le-IP lomphakathi.

GCC6000 Series – Advanced NAT Guide

Isingeniso

I-NAT (I-Network Address Translation) inqubo esetshenziswa umzila noma idivayisi efanayo ukuhumusha ikheli le-IP libe kwelinye. Lokhu kuhumusha kwenziwa kusuka ekhelini le-IP eliyimfihlo kuya ekhelini le-IP lomphakathi futhi ngokuphambene nalokho. Kulo mhlahlandlela, sizomisa izilungiselelo ezithuthukisiwe ze-NAT ukuze silawule inqubo ye-NAT yomthombo kanye nethrafikhi yendawo. Sizohlukanisa phakathi kwezinhlobo ezimbili ze

• I-NAT:
  I-SNAT ne-DNAT. Lezi zinqubo zisivumela ukuthi siguqule umthombo nendawo okuyiwa kuyo izinombolo ze-IP kanye nembobo, okuvumela abasebenzisi ukuthi bafinyelele i-inthanethi
• I-SNAT:
  Umthombo we-NAT ulawula ukushintshwa kwekheli le-IP eliwumthombo kanye nesendlalelo senombolo yembobo engu-4 lapho kuxhunywa kusuka kumsingathi oyimfihlo wangaphakathi kuya kumsingathi wangaphandle (i-LAN ukuya ku-inthanethi).
• I-DNAT:
  Indawo okuyiwa kuyo i-NAT ilawula ukushintshwa kwekheli le-IP lendawo kanye nenombolo yembobo Yesendlalelo 4 lapho ithola ithrafikhi kusuka kumsingathi wangaphandle ukuya kubasingathi oyimfihlo (i-inthanethi ukuya ku-LAN).

Zombili izinhlobo zisebenza ngokufana kakhulu kodwa ngokuvamile ziyehluka ngendlela uxhumo olusungulwa ngayo.

Kulo mhlahlandlela sizohamba ekulungiseni kokubili i-DNAT ne-SNAT kudivayisi yokuhlanganisa ye-GCC601x(W).

Ukucushwa kwe-SNAT

Sizocubungula lesi simo esilandelayo: cabanga ukuthi idivayisi ye-GCC ixhunywe kubahlinzeki besevisi be-inthanethi ababili abahlukene ukuze kudaleke ukuphinda kusetshenziswe isixhumanisi kanye nesixazululo sokuhluleka. Imbobo ngayinye ye-WAN ixhunywe ku-ISP ehlukile. Manje, ake sithi sifuna ukuphoqelela ithrafikhi eqaliswe ku-VLAN ezenzakalelayo ukuze kusetshenziswe imbobo 1 (ISP 1) kanye nethrafikhi esuka ku-VLAN yezwi (VLAN 20) ukuze kusetshenziswe imbobo 2 (ISP 2). Lokhu kungafezwa ngokudala umthetho we-NAT womthombo.

Sicela ulandele izinyathelo ezingezansi:

Ilungiselela i-WAN 1

1. Zulazulela kokuthi “Firewall Module → Firewall Policy → Advanced NAT → SNAT“, bese uchofoza inkinobho ethi “Engeza” ukuze wengeze iSNAT entsha.
2. Nika amandla isimo
3. Setha iphrothokholi ukuthi ithi “Noma yikuphi”, lokhu kusho ukuthi umthetho we-NAT womthombo uzosebenza kuwo wonke amathrafikhi avela kuzivumelwano zezokuthutha ezahlukene (UDP, TCP,..)
4. Setha inethiwekhi yekheli le-IP yomthombo, lena kuzoba i-LAN subnet ye-VLAN ezenzakalelayo: 192.168.80.0/24
5. Setha ikheli le-IP eliwumthombo wokubhala kabusha, leli kuzoba ikheli le-IP Lomphakathi elinikezwe i-ISP 1, esizolisebenzisa ukuze sifinyelele ku-inthanethi, lokhu kuzoba: 192.168.6.225
6. Ngaphansi kweqembu okuyiwa kulo, khetha iqembu lendawo lapho ikheli le-IP lomthombo wokubhala kabusha lingelakho. esimweni sethu, ichweba le-WAN 1 lisebenzisa i-ISP 1.

Qaphela
Ikheli lasesizindeni se-inthanethi lendawo lingasetshenziswa ukucacisa idivayisi lapho ithrafikhi izohanjiswa khona ngaphakathi

Ilungiselela i-WAN 2

1. Zulazulela kokuthi “Firewall Module → Firewall Policy → Advanced NAT → SNAT“, bese uchofoza inkinobho ethi “Engeza” ukuze wengeze iSNAT entsha.
2. Nika amandla isimo
3. Setha iphrothokholi ukuthi ithi “Noma yikuphi”, lokhu kusho ukuthi umthetho we-NAT womthombo uzosebenza kuwo wonke amathrafikhi avela kuzivumelwano zezokuthutha ezahlukene (UDP, TCP,..)
4. Setha inethiwekhi yekheli le-IP yomthombo, lokhu kuzoba i-LAN engaphansi ye-Voice VLAN: 192.168.20.0/24
5. Setha ikheli le-IP eliwumthombo wokubhala kabusha, leli kuzoba ikheli le-IP Lomphakathi elinikezwe i-ISP 2, esizolisebenzisa ukuze sifinyelele ku-inthanethi. lokhu kuzoba 192.168.6.229
6. Ngaphansi kweqembu okuyiwa kulo, khetha iqembu lendawo lapho ikheli le-IP lomthombo wokubhala kabusha lingelakho. kithi, ichweba le-WAN 2 lisebenzisa i-ISP 2.

Amakheli asesidlangalaleni e-IP awo womabili ama-WAN angatholakala kumojula yenethiwekhi yedivayisi ye-GCC, ngaphansi kwendlela Inethiwekhi.
Izilungiselelo => WAN:

Ukucushwa kwe-DNAT

I-DNAT ingafana kakhulu nokumisa ukudluliselwa kwechweba, umehluko kuphela, ukuthi ku-DNAT, awuphoqelekile ukucacisa ichweba ozolidlulisela kulo, kungaphezu kokwenza ukudluliselwa kwe-IP, kusukela ku-intanethi, kuya ku-LAN, sizobheka. kulesi exampngezansi ukucacisa:

Cabanga ukuthi sifuna ukwenza indawo yethu web iseva efakwe ku-LAN yethu, etholakala kumakhasimende ethu angaphandle kwe-LAN, kodwa asifuni ukuthi azi ikheli le-IP eliyimfihlo lendawo yethu. web iseva, kunalokho, sifuna basebenzise ikheli le-IP lomphakathi ukuze bafinyelele web iseva, singafinyelela lokho sisebenzisa i-DNAT, futhi ngokulandela lezi zinyathelo ezingezansi:

1. Zulazulela kokuthi “Firewall Module → Firewall Policy → Advanced NAT → DNAT“, bese uchofoza inkinobho ethi “Engeza” ukuze wengeze i-DNAT entsha.
2. Nika amandla umthetho we-DNAT
3. Setha uhlobo lwephrothokholi kokuthi “Noma yikuphi”, lokhu kuzofaka noma yiluphi uhlobo lwephrothokholi yezokuthutha ezifika ku-LAN yethu.
4. Setha iqembu Lomthombo libe yi-WAN1, lena i-WAN yethu ezenzakalelayo
5. iqembu okuyiwa kulo lizoba i-VLAN ezenzakalelayo lapho okwasendaweni Web iseva ixhunyiwe
6. Bhala Kabusha Ikheli Le-IP lendawo kuzoba yikheli le-IP eliyimfihlo le- web iseva.

Imiphumela izoba, ukuthi lapho abasebenzisi bafuna ukufinyelela endaweni yethu web iseva, bangasebenzisa ikheli le-IP lomphakathi elichaziwe, ngaphandle kokwazi ikheli le-IP eliyimfihlo leseva yethu.

I-NAT Reflection

Ukuboniswa kwe-NAT, okubuye kwaziwe ngokuthi yi-NAT loopback, kuvumela amaklayenti enethiwekhi yangaphakathi ukuthi afinyelele izinsiza ezisingathwa kunethiwekhi efanayo yendawo kodwa ezibhekiswe yi-IP yomphakathi. Ekucupheni kwethu, sisebenzisa i-DNAT (Indawo eyi-NAT) ukuze sivumele amaklayenti angaphandle kwe-LAN yakho ukuthi afinyelele indawo yangakini. web iseva ngokwenza imephu ye-IP yomphakathi iye kweyimfihlo. I-NAT reflection iqala ukusebenza lapho amadivayisi angaphakathi aku-LAN efanayo (njengamafoni akho e-IP noma amathuluzi okuskena) nawo kudingeka afinyelele lokhu. web iseva, kodwa ufuna ukuthi basebenzise ikheli le-IP lomphakathi elifanayo nabasebenzisi bangaphandle abalisebenzisayo.
Nansi indlela esebenza ngayo:

• Ngaphandle kwe-NAT reflection:
  Uma amadivaysi akho angaphakathi (isb, amafoni) ezama ukufinyelela ku- web iseva isebenzisa i-IP yayo yomphakathi, isicelo ngokuvamile singaphuma siye ku-inthanethi futhi sibuyele ku-LAN, engahluleka noma ibambezele izinto uma kusetshenziswa eminye imithetho ye-firewall.
• Ngokuzindla kwe-NAT:
  I-router ithola ukuthi isicelo sivela ku-LAN kodwa siqondiswe ku-IP yomphakathi. Esikhundleni sokuhambisa ithrafikhi ngaphandle, ikhombisa ithrafikhi ngaphakathi, yenza ukuxhumana kusheshe futhi kudlule izindonga zomlilo zangaphandle. I web iseva isabona ithrafikhi njengevela ku-LAN, nakuba yayiqondiswe ku-IP yomphakathi.

Amadivayisi Asekelwe

Imodeli Yedivayisi

I-Firmware Kudingeka

I-GCC6010W	1.0.1.7+
I-GCC6010	1.0.1.7+
I-GCC6011	1.0.1.7+

Udinga Usekelo?
Awuyitholi impendulo oyifunayo? Ungakhathazeki sikhona ukuze sikusize!
XHUMANA USEKELO

imibuzo ejwayelekile ukubuzwa

• Q: Uyini umehluko phakathi kwe-SNAT ne-DNAT?
  A: I-SNAT ilawula ukushintshwa kwekheli le-IP eliwumthombo kanye nenombolo yembobo lapho ixhumeka isuka kumsingathi wangaphakathi ukuya kumsingathi wangaphandle, kuyilapho i-DNAT ilawula ukuguqulwa kwekheli le-IP kanye nenombolo yembobo lapho ithola ithrafikhi esuka kumsingathi wangaphandle ukuya kumsingathi oyimfihlo.
• Q: Ngingayimisa kanjani i-SNAT yesevisi ye-inthanethi eminingi abahlinzeki?
  A: Ungakwazi ukumisa i-SNAT yama-ISP amaningi ngokusetha imithetho esekelwe kuma-VLAN noma ama-subnets athile e-LAN, unikeze ngayinye embobeni ehlukile ye-WAN exhunywe ekhelini le-IP lomphakathi le-ISP.

Amadokhumenti / Izinsiza

	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [pdf] Umhlahlandlela Womsebenzisi I-GCC601x W, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series, UC Plus Networking Convergence Solutions, Networking Convergence Solutions, Convergence Solutions, Solutions
	I-GRANDSTREAM GCC6000 Series UC Plus Networking Convergence [pdf] Umhlahlandlela Womsebenzisi I-GCC6000 Series UC Plus Networking Convergence, GCC6000 Series, UC Plus Networking Convergence, Networking, Convergence
	GRANDSTREAM GCC6000 Series UC Plus Networking Convergence Solutions [pdf] Umhlahlandlela Womsebenzisi I-GCC6000, GCC6000 Series UC Plus Networking Convergence Solutions, GCC6000 Series, UC Plus Networking Convergence Solutions, Networking Convergence Solutions, Convergence Solutions, Solutions

Izithenjwa

• Imaniwali yosebenzisayo