Lecture 116: Direct Connect network requirements
- 课程：[NEW] AWS Certified Advanced Networking Specialty 2026
- 视频时长：06:44
- 来源：Udemy Lecture 27890056
- Slide 数量：7
- 画面切换：01:17、01:41、03:52、04:43、05:09、05:48
扫描说明
逐条检查了 Udemy 页面中的 121 条 Transcript cue，并以每条 cue 对应画面为时间轴扫描了全长约 6:44 的视频。依据总体要求、单模光纤、802.1Q VLAN、端口自动协商、BGP、BFD 与要求回顾七组独立幻灯片，共划分为 7 个小节。正式截图均按播放中视频的真实边界截取为 1364×770，并逐张复核。
Transcript 来自 Udemy 页面自带的英文自动字幕，没有使用 ASR。下面保留页面原文，包括其中的语法或识别错误。
1. Direct Connect 技术要求总览
时间范围：00:00–01:17
总结 / Summary
中文
Direct Connect 的基础要求覆盖多层网络：物理层需要单模光纤（single-mode fiber），二层需要 802.1Q VLAN 封装，特定高速端口必须关闭自动协商（auto-negotiation），客户路由器需要支持带 MD5 认证的 BGP；还可选用双向转发检测（Bidirectional Forwarding Detection, BFD）加快故障发现。
English
Direct Connect requirements span several layers: single-mode fiber at the physical layer, 802.1Q VLAN encapsulation at Layer 2, disabled auto-negotiation on applicable high-speed ports, and BGP with MD5 authentication on the customer router. Optional BFD provides faster failure detection.
Transcript
00:00 Hi.
00:01 Now let's quickly look at the
00:03 technical requirement for DirectConnect connection.
00:06 So first we'll see at very high level, what are those..
00:09 And then we will have some more explanation regarding those.
00:12 So very first thing is a single mode fiber.
00:14 This is required for the physical connectivity between
00:17 your data center and AWS direct connect location.
00:21 And depending on the port speed of the DirectConnect,
00:24 this type of the cable will differ.
00:27 So there are right now three kind of Dedicated connections supported. In the future.
00:32 if AWS
00:33 has the higher bandwidth, then you might see
00:36 different type of the cable there.
00:38 Second, at Layer2, you need to have 802.1Q VLAN
00:43 encapsulation protocol enabled and we'll talk about that
00:47 third, auto negotiation of the ports must be disabled.
00:51 DX supports the BGP protocol and
00:54 your side of the router should also support
00:57 the BGP protocol with MD5 authentication.
01:01 And there is one optional setting which is BFD,
01:04 which is used to detect the failures in the connection.
01:08 And you can also enable BFD at your end. But this is an optional setting.
01:13 Now let's quickly look at all these things in a little more detail.
2. Single-Mode Fiber 物理连接
时间范围：01:17–01:41
总结 / Summary
中文
企业数据中心到 Direct Connect 位置（Direct Connect location）的物理连接使用单模光纤（single-mode fiber）。光模块和线缆规格会随 1、10 或 100 Gbps 等端口速率变化，实际铺设通常由网络服务提供商（network service provider）完成。
English
The physical connection from the corporate data center to the Direct Connect location uses single-mode fiber. Optics and cabling vary with port speeds such as 1, 10, or 100 Gbps, and a network service provider normally installs the circuit.
Transcript
01:17 So very first thing is single, more fiber which looks something like this.
01:22 And as I said,
01:23 you have to set up this physical optical fiber
01:27 between your data center and your direct connect location.
01:30 Now typically it will be your network service provider who lays down this cabling
01:35 and you have to work with that partner for this connection.
3. 802.1Q VLAN、Tagging 与 Trunk
时间范围：01:41–03:52
总结 / Summary
中文
802.1Q VLAN 封装（VLAN encapsulation）在以太网帧中加入 VLAN ID，使跨不同物理网段的主机仍可属于同一虚拟局域网（Virtual LAN, VLAN）。多个带标签的 VLAN 共享同一链路称为中继（trunk）；Direct Connect 正是用 VLAN 标签把一条物理连接划分为多个虚拟接口（Virtual Interface, VIF）。
English
802.1Q adds a VLAN ID to Ethernet frames so hosts across separate physical segments can belong to the same Virtual LAN. Carrying several tagged VLANs over one link is trunking. Direct Connect uses these VLAN tags to divide one physical connection into multiple VIFs.
Transcript
01:41 OK. Next is 802.1 Q VLAN.
01:45 This is a protocol which works at Layer2.
01:48 And
01:49 for DirectConnect, you must support this protocol.
01:53 Now,
01:53 you know the LAN -local area network in which all
01:56 the hosts within the LAN can communicate with each other.
01:59 But in this case,
02:00 even if the hosts are sitting across the different networks,
02:04 they can still be part of the same LAN and that is called virtual LAN (VLAN).
02:09 So if you see here, this host here on the left side is a part of the VLAN10 group
02:14 and there are hosts on the other network as well. Similarly for other hosts.
02:19 Now,
02:19 how is it possible because when the traffic flows from
02:23 host A here to host B on the right side,
02:27 the traffic goes through the same network. But still
02:31 when the packet arrives at this router on the right side,
02:35 it knows that the destination is this LAN and within that LAN there is that host.
02:40 Now, typically if you see the IP packet, it has a source and destination IP address.
02:45 But in this case,
02:45 different LAN could have the same IP addresses.
02:50 And in order to resolve that problem,
02:53 you additionally add something called a VLAN ID into the Ethernet frame.
02:58 Now, in this case,
02:59 all these packets would have corresponding VLAN tags.
03:03 And then the same network here between this two routers
03:06 will carry all these packets with additional VLAN tags.
03:10 So now multiple VLAN tags can go through the same channel.
03:15 And then at the router end, it exactly knows where to route that traffic.
03:19 Now, this is called VLAN tagging.
03:21 And when you send multiple VLANs through the same point to point network,
03:26 it is called trunk.
03:27 And that's what is shown here. So for DirectConnect, it's a one big fat connection
03:34 and
03:34 you then segregate this one connection into a logical connection in the form
03:38 of virtual interfaces with which we will see in the next lecture.
03:44 And every VIF will come with the VLAN tag.
03:47 And thus we are on the same connection.
03:49 You could have multiple logical connections in DX, Okay?
4. 端口 Auto-Negotiation 设置
时间范围：03:52–04:43
总结 / Summary
中文
端口自动协商（auto-negotiation）会自动确定速率和双工模式（duplex mode）。对于速率高于 1 Gbps 的 DX 端口，应关闭自动协商并手工配置；1 Gbps 及以下连接则取决于路由器厂商要求，应查阅设备文档。
English
Port auto-negotiation automatically selects speed and duplex mode. DX ports above 1 Gbps should have it disabled and be configured manually. For 1 Gbps or slower connections, the correct setting depends on the router vendor.
Transcript
03:52 Next is auto negotiation of the ports.
03:55 So for DX connections which are greater than 1 Gbps port speed,
04:01 this setting should be disabled.
04:03 But what this setting means is that, when two
04:06 networking devices wants to communicate with each other,
04:09 they will negotiate few settings like what should be the port speed,
04:13 what should be the duplex mode, whether it should be half duplex or full duplex.
04:18 So these settings can be negotiated automatically or
04:21 you disable it and manually configure these settings.
04:25 So for DX connection, you are advised to set these settings manually.
04:29 OK.
04:30 And for the connections which are 1 Gbps or less, it depends on the router vendor,
04:36 whether this setting should be enabled or disabled.
04:40 So you would have to read the documentation.
5. BGP 路由协议要求
时间范围：04:43–05:09
总结 / Summary
中文
AWS 端与客户边界路由器必须通过边界网关协议（Border Gateway Protocol, BGP）建立邻居关系并交换路由。BGP 使用 TCP 179 端口，支持 iBGP/eBGP、AS 路径（AS_PATH）、Local Preference 和 MED 等选路属性；本课程后续会进一步讲解。
English
AWS and the customer edge router must establish a Border Gateway Protocol session and exchange routes. BGP uses TCP port 179 and considers attributes such as AS_PATH, Local Preference, and MED across iBGP or eBGP relationships.
Transcript
04:43 Next is BGP Border-Gateway-Protocol.
04:45 So DX supports BGP and at your side of the router should also support the BGP
04:52 protocol.
04:52 And we have already seen BGP in detail in the "Hybrid networking Basics" section.
04:57 So please revisit if required.
05:00 So all these things we have already seen.
05:03 And in the following lecture, we are going to deep dive into
05:06 everything that you see on this slide.
6. 可选的 BFD 快速故障检测
时间范围：05:09–05:48
总结 / Summary
中文
双向转发检测（Bidirectional Forwarding Detection, BFD）是轻量的 Hello 协议，可在相邻设备间快速发现链路失效。启用后检测时间可低于 1 秒，相比依赖普通路由协议定时器的 60–90 秒大幅缩短，因此虽为可选项但适合高可用 DX 设计。
English
Bidirectional Forwarding Detection is a lightweight hello protocol for detecting failures between neighboring devices. It can reduce detection to under one second instead of waiting 60–90 seconds for normal routing timers, making it optional but valuable for highly available DX designs.
Transcript
05:09 And finally, as I said, there is something called BFD
05:13 which is
05:14 Bidirectional Forwarding Detection.
05:15 This is used to detect the failures early in the link.
05:19 So if anything goes wrong in the network connection,
05:23 then if you enable the BFD, which is a simple hello
05:26 network
05:26 protocol, you can detect that failure really, really quick.
05:30 That is, in less than one second.
05:32 Otherwise, typically it will take maybe 60 seconds or 90 seconds for
05:36 detecting the failure and then you would have
05:39 to failover to the redundant connection.
05:41 So again, this is an optional setting but recommended one for DX connections.
7. 网络要求回顾
时间范围：05:48–06:44
总结 / Summary
中文
最终检查清单是：匹配端口速率的单模光纤（single-mode fiber）、802.1Q VLAN 封装、按端口速率正确设置自动协商（auto-negotiation）、客户路由器支持带 MD5 认证的 BGP，以及按需启用 BFD。任一必需项不满足，都可能导致物理链路、二层封装或路由会话无法建立。
English
The final checklist is single-mode fiber matched to port speed, 802.1Q VLAN encapsulation, correct auto-negotiation behavior, BGP with MD5 authentication on the customer router, and optional BFD. Missing any required item can prevent the physical link, Layer-2 framing, or routing session from coming up.
Transcript
05:48 OK. So those are the technical requirements for DX connection
05:52 just to reiterate again,
05:55 you should have single mode fiber.
05:57 And depending on the port speed, the type of the fiber will change.
06:01 You should have Layer2
06:02 protocol that is 802.1 Q VLAN encapsulation.
06:06 The auto negotiation for the ports must be disabled
06:09 for the connection greater than 1 Gbps.
06:12 And then most important is that your router should support the Border Gateway Protocol (BGP)
06:17 with MD5 authentication.
06:20 MD5 is message
06:22 digest hashing algorithm.
06:24 And then there is an optional
06:25 setting that is BFD, which you can enable for fast failure detection.
06:31 So that's it for this lecture. Now, in the next lecture, we will see more about the BGP
06:35 and we will start with the autonomous systems and later get into the more details.
06:41 So thanks for watching and stay tuned.
整讲总结 / Overall Summary
中文
Direct Connect 连接要求从物理层延伸到控制平面：单模光纤（single-mode fiber）承载专线，802.1Q VLAN 为多个 VIF 提供逻辑隔离，端口速率与双工设置必须匹配，BGP 负责路由交换并使用 MD5 认证，BFD 则可把故障检测压缩到亚秒级。
English
Direct Connect requirements extend from the physical layer to the control plane: single-mode fiber carries the circuit, 802.1Q VLANs isolate VIFs, port speed and duplex settings must match, BGP exchanges routes with MD5 authentication, and BFD can reduce failure detection to sub-second timing.
返回顶部 ↑