Network-ga

Waxa guddiyadu raadiyaan

• Hab lakab-lakab ah oo cilad-baadhis ah: marka hore fiilada iyo nalalka link-ga, kadib IP address-ka, gateway-ga iyo DNS-ka, kadibna application-ka.
• Subnetting aad warqad ku samayn karto: immisa qalab ayaa ku filan, cinwaannada la isticmaali karo, iyo in laba qalab ay isku network yihiin iyo in kale.
• Khibrad gacan ah oo ku saabsan qalabka aad dhab ahaan taaban doonto: router-yada MikroTik ama Cisco, switch-yada la maamulo (managed) iyo access point-yada.
• Caadooyinka diiwaangelinta iyo isbeddelka: sawir network-ga ah, liiska IP address-yada, fiilooyin calaamadaysan, iyo config la kaydiyey ka hor isbeddel kasta.
• Dareen amni: Wi-Fi martida oo gooni ah, password default ah oo aan qalabna ku harin, iyo firmware si joogto ah loo cusboonaysiiyo.
• Hadal deggan marka network-gu go'o: warbixinno gaagaaban oo fudud oo maareeyayaasha loo diro oo sheegaya waxa saameeyey iyo goorta la filayo inuu soo laabto.

Su'aalaha ay weydiiyaan

1. 1“Sharax OSI model-ka, iyo sida aad u isticmaasho marka aad cillad baadhayso.”

   Sababta ay u weydiiyaan: Ma rabaan in toddobada lakab laga akhriyo. Waxay rabaan inay arkaan inaad lakabyada u isticmaasho liis hubin ah si aad u hesho meesha cilladdu ku jirto.

   Sida looga jawaabo

   • Magacaw lakabyada aad inta badan isticmaasho: physical, data link, network, transport iyo application.
   • Sharax inaad hoos ka bilowdo oo kor u socoto, si aadan weligaa u qiyaasin.
   • Sheeg hal cillad oo dhab ah iyo lakabka aad ka heshay.

   I use the layers as a checklist, from the bottom. Once a finance laptop could not reach the accounting server. Layer 1: the link light on the switch port was on. Layers 2 and 3: the laptop had a correct IP address but could not ping the gateway, so I checked the switch and found the port had been moved to the guest VLAN. I put it back in the staff VLAN, the ping worked, and the application opened. Working upwards stops me from guessing.

2. 2“Waxaad haysataa 192.168.10.0/24. Shaqaaluhu waa 60 isticmaale, waxaadna sidoo kale u baahan tahay martida iyo daabacayaasha. Sidee u qaybin lahayd?”

   Sababta ay u weydiiyaan: Waa subnetting nolosha dhabta ah: tirinta qalabka, doorashada mask-ka, meel u reebidda kororka, iyo qorid qorshe cad.

   Sida looga jawaabo

   • Tiri qalabka koox kasta oo ku dar meel koror ah ka hor intaadan dooran mask.
   • Koox kasta sii subnet iyo VLAN u gaar ah, gateway-guna ha ahaado cinwaanka ugu horreeya ee la isticmaali karo.
   • Qorshaha ku qor jadwal oo hal qayb kayd ahaan u reeb.

   First I count and add room to grow. Staff are 60 now, so I give them a /25: 192.168.10.0 to .127, which is 126 usable addresses. Guests get a /26, 192.168.10.128 to .191. Printers and servers get a /27, .192 to .223, with fixed addresses. That leaves .224/27 spare. Each subnet is its own VLAN, the gateway is the first usable address, and I write the plan in a table before I configure anything.

3. 3“Maxay ku kala duwan yihiin switch iyo router?”

   Sababta ay u weydiiyaan: Waa hubin aasaasi ah oo ah inaad taqaanno qalab kasta waxa uu qabto, iyo meesha uu kaga jiro network xafiis dhab ah.

   Sida looga jawaabo

   • Switch-ku wuxuu isku xidhaa qalabka ku jira hal network, wuxuuna gudbiyaa frame-yada isagoo adeegsanaya MAC address (layer 2).
   • Router-ku wuxuu isku xidhaa network-yo kala duwan isagoo adeegsanaya IP address (layer 3), tusaale xafiiska iyo internet-ka, badanaana wuxuu qabtaa NAT iyo DHCP.
   • Tusaale ku dhig: switch-yo dabaq kasta, router-kuna cidhifka u dhow shirkadda internet-ka.

4. 4“Kombiyuutarka isticmaale ayaa muujinaya IP address ku bilaabma 169.254. Maxay ka dhigan tahay, maxaadse hubinaysaa?”

   Sababta ay u weydiiyaan: Waxay tijaabinaysaa inaad fahantay DHCP oo aad cilladda soo koobi karto: hal qalab, hal port oo switch ah, mise server-ka DHCP laftiisa.

   Sida looga jawaabo

   • Sheeg inay ka dhigan tahay in kombiyuutarku jawaab ka waayey server DHCP, oo uu isagu cinwaan is siiyey.
   • Hal isticmaale: hubi fiilada, port-ka switch-ka iyo VLAN-kiisa.
   • Isticmaalayaal badan: hubi in server-ka DHCP shaqaynayo iyo in pool-ka cinwaannadu aanu buuxsamin.

   An address starting with 169.254 means the computer asked for an address and no DHCP server answered, so it gave itself one. First I check whether it is one user or many. If it is one, I look at the cable and the switch port, including which VLAN the port is in. If it is many, I check the DHCP server: is it running, and is the pool full? At one office the guest pool was full of old leases from visitors' phones, so I shortened the lease time on that network.

5. 5“VLAN waa maxay, maxaase xafiis u isticmaali lahaa?”

   Sababta ay u weydiiyaan: VLAN-yadu waa shaqo maalinle ah xafiisyada badankood. Waxay hubinayaan inaad fahantay fikradda iyo farqiga u dhexeeya access port iyo trunk port.

   Sida looga jawaabo

   • VLAN wuxuu hal switch oo muuqda u kala qaybiyaa network-yo gooni ah, sida shaqaalaha, martida iyo kamarooyinka.
   • Faa'iidooyinka: amni, taraafik broadcast oo yar, iyo xeerar fudud oo koox kasta u gaar ah.
   • Access port wuxuu qalab u qaadaa hal VLAN; trunk port-na wuxuu VLAN-yo calaamadaysan (tagged) u qaadaa switch-yada dhexdooda iyo router-ka.

6. 6“Nooga sheekee network aad dhistay ama aad maamulaysay. Maxaad hadda si kale u samayn lahayd?”

   Sababta ay u weydiiyaan: Waxay hubinayaan khibradda dhabta ah: baaxaddeeda, qaybtaada saxda ah, dhibaato dhab ah, iyo inaad wax ka baratay.

   Sida looga jawaabo

   • Sheeg baaxadda iyo qalabka: isticmaalayaasha, dhismayaasha, noocyada router-ka iyo switch-ka.
   • Si sax ah u sheeg waxaad adigu samaysay iyo waxa qof kale sameeyey.
   • Ku dhammee hal cashar, sida diiwaangelinta ama backup-yada.

   At a private university in Hargeisa I supported the IT officer on a network of about 120 computers in two buildings joined by fibre. My part was the switches and the MikroTik router: I set up separate VLANs for staff, students and the labs, and a guest Wi-Fi with a speed limit. The main problem was students getting the staff Wi-Fi password, so we changed it every term. Now I would document from day one; we drew the network diagram only after the first outage.

7. 7“Sidee isbeddel ugu samaysaa router shaqaynaya adigoon xafiiska ka goyn internet-ka?”

   Sababta ay u weydiiyaan: Hal amar oo khaldan ayaa laan bangi oo dhan goyn kara. Waxay rabaan inay maqlaan backup, waqti ku habboon, jid dib loogu laabto iyo tijaabin.

   Sida looga jawaabo

   • Marka hore kaydi ama export garee config-ga hadda jira, oo isbeddelka u qorshee waqti aan mashquul ahayn.
   • Isticmaal jid dib loogu laabto: Safe Mode-ka MikroTik, ama reload waqti leh oo Cisco ah ka hor kaydinta.
   • Tijaabi, kadib kaydi oo isbeddelka ku qor diiwaanka si kooxdu u ogaato.

Tusaalooyinka jawaabaha waa English, luqadda guddiyada badankoodu isticmaalaan. Adigu erayadaada ku sheeg.

Mawduucyada dib u eeg

• OSI and TCP/IP modelsToddobada lakab ee OSI: physical, data link, network, transport, session, presentation, application. TCP/IP wuxuu u ururiyaa afar. Lakab kasta oo muhiim ah ogow hal tusaale: fiilo (1), switch iyo MAC address (2), router iyo IP (3), port-yada TCP iyo UDP (4), HTTP iyo DNS (7).
• Subnetting (/24, /25, /26, /27, /30)Lambarka ka dambeeya xarriiqda (slash) waa inta bit ee network-ka ah. Qalabka la isticmaali karo = 2 oo loo qaaday (32 laga jaray prefix-ka), laga jaray 2. Sidaas darteed /24 = 254, /25 = 126, /26 = 62, /27 = 30, /30 = 2 oo loogu talagalay xidhiidh laba router ah. Su'aal caan ah: 192.168.1.70/26, network-gu waa .64, broadcast-kuna waa .127.
• Switch, router and access pointSwitch-ku wuxuu isku xidhaa qalabka ku jira hal network isagoo adeegsanaya MAC address. Router-ku wuxuu isku xidhaa network-yo isagoo adeegsanaya IP address, wuxuuna taraafikada u diraa internet-ka. Access point-ku wuxuu qalabka siiyaa Wi-Fi oo ku xidhaa network-ga fiilada leh. Layer 3 switch-na wuxuu isku xidhi karaa VLAN-yada.
• DHCPDHCP wuxuu si toos ah u bixiyaa IP address-ka, mask-ka, gateway-ga iyo DNS-ka. Afarta tallaabo waa Discover, Offer, Request, Acknowledge (DORA). Ogow lease time, reservation-ka daabacayaasha iyo server-yada, iyo in cinwaan ku bilaabma 169.254 uu ka dhigan yahay in DHCP-gu jawaabin.
• DNSDNS wuxuu magacyada sida example.com u beddelaa IP address-yo. Si aad u kala saarto cilad DNS iyo cilad xidhiidh: haddii ping 8.8.8.8 shaqeeyo laakiin website magaciisa ku furmi waayo, waa DNS. Ku tijaabi nslookup. Waxay ku weydiin karaan server-ka DNS ee xafiiskaagu isticmaalayo iyo sababta.
• VLANs, access ports and trunk portsVLAN waa network gooni ah oo ku jira switch-yo la wadaago. Access port-ku wuxuu ka tirsan yahay hal VLAN, wuxuuna ku xidhaa kombiyuutar ama daabace. Trunk port-ku wuxuu qaadaa VLAN-yo badan, mid kastaa leeyahay calaamad 802.1Q, switch-yada dhexdooda ama router-ka. Taraafikada u dhexaysa VLAN-yada waxay u baahan tahay router ama layer 3 switch.
• Private IP ranges and NATQaybaha gaarka ah (private) waa 10.0.0.0/8, 172.16.0.0/12 iyo 192.168.0.0/16; internet-ka lagama gaadho. NAT wuxuu u oggolaadaa qalab badan oo gaar ah inay wadaagaan hal IP dadweyne (public). Port forwarding wuxuu hal adeeg, sida qalabka duubista kamarooyinka, u furaa dibadda, waana in si taxaddar leh loo sameeyo.
• TCP vs UDP and common portsTCP wuxuu hubiyaa in xogtu u timaaddo si habaysan (web, email, dirid fayl). UDP waa ka degdeg badan laakiin damaanad ma leh (wicitaannada codka, fiidiyowga, DNS-ka badankiisa). Port-yada la yaqaan: 22 SSH, 53 DNS, 80 HTTP, 443 HTTPS, 3389 Remote Desktop, 8291 MikroTik Winbox.
• Troubleshooting commandsipconfig /all wuxuu Windows-ka ku muujiyaa cinwaanka, gateway-ga iyo DNS-ka. ping wuxuu tijaabiyaa in qalab jawaabo. tracert (traceroute) wuxuu muujiyaa meesha jidka taraafikadu ku istaagto. nslookup wuxuu tijaabiyaa DNS. arp -a wuxuu muujiyaa MAC address-ka ka dambeeya IP. MikroTik-ka, Torch wuxuu muujiyaa taraafikada tooska ah ee interface.
• Wi-Fi: 2.4 GHz vs 5 GHz, channels, WPA2/WPA32.4 GHz wuxuu gaadhaa meel ka fog oo derbiyada dhex mara laakiin waa gaabis oo waa buuxaa; isticmaal channel 1, 6 ama 11 si deriskaagu kuugu soo dhici waayo. 5 GHz waa ka degdeg badan laakiin gaadhistiisu waa gaaban tahay. Isticmaal WPA2 ama WPA3, network martida oo gooni ah, oo access point-yada dhig meesha dadku dhab ahaan fadhiyaan.
• MikroTik and Cisco basicsMikroTik: Winbox ama WebFig, IP address-yada, DHCP server, xeerka NAT masquerade ee internet-ka, Queues oo xawaaraha lagu xaddido, /export oo config-ga lagu kaydiyo, iyo Safe Mode isbeddellada khatarta leh. Cisco IOS: enable, configure terminal, show ip interface brief, show running-config, iyo copy running-config startup-config si loo kaydiyo.

Hawlaha la sameeyo ee laga yaabo in lagu siiyo

1. 1Cilad-baadhis toos ah oo qalab dhab ah: laptop, switch iyo router oo hal cillad lagu dhex dhigay, sida gateway khaldan, port VLAN khaldan ku jira, DHCP oo la demiyey ama fiilo xun. Lakab kasta cod dheer ku sheeg marka aad hubinayso. Ku tababar adigoo jebinaya oo hagaajinaya shaybaadh yar oo gurigaaga ah.
2. 2Subnetting warqad lagu sameeyo 20 ilaa 30 daqiiqo: network iyo baaxadda waax kasta; adigaa qoraya subnet-yada, mask-yada, gateway-yada iyo qaybaha cinwaannada. Ku tababar ilaa aad /24 ilaa /30 samayn karto adigoon calculator isticmaalin.
3. 3Router eber ka dejin: IP address, DHCP server, NAT internet-ka loo maro, iyo network martida oo xawaare xaddidan leh, MikroTik ama Cisco. Ku tababar router duug ah ama simulator sida Cisco Packet Tracer.
4. 4Network-ga ku sawir sabuuradda: xafiis yar ama laba laamood, oo leh xidhiidhka shirkadda internet-ka, router, firewall, switch-yo, VLAN-yo, access point-yo iyo server. Ku tababar sawiridda hal network oo aad taqaanno, oo leh qaybaha IP-gooda.

Khaladaadka ka fogow

• Inaad akhriso toddobada lakab ee OSI laakiin aadan u isticmaali karin inaad cillad ku hesho.
• Inaad dhibaato kasta router-ka dib u bilowdo adigoon weligaa helin sababta.
• Inaad router shaqaynaya wax ka beddesho saacadaha shaqada adigoon config kaydin oo aan jid dib loogu laabto haysan.
• Inaad ku reebto password-yada admin ee default-ka ah router-yada, kamarooyinka iyo access point-yada.
• Inaad IP address-yada iyo password-yada madaxaaga oo keliya ku hayso, adigoo aan sawir iyo liis toona lahayn.
• Inaad maareeye erayo farsamo kula hadasho marka network-gu go'an yahay, halkii aad u sheegi lahayd waxa saameeyey iyo goorta uu soo laabanayo.

Hubin degdeg ah

5 su'aalood. Mid kasta ka jawaab si aad u aragto sharaxaadda.