# SOME DESCRIPTIVE TITLE.
# Copyright (C)
# This file is distributed under the same license as the Apache CloudStack Administration Documentation package.
# 
# Translators:
msgid ""
msgstr ""
"Project-Id-Version: Apache CloudStack Administration RTD\n"
"Report-Msgid-Bugs-To: \n"
"POT-Creation-Date: 2014-06-30 12:52+0200\n"
"PO-Revision-Date: 2014-06-30 12:06+0000\n"
"Last-Translator: FULL NAME <EMAIL@ADDRESS>\n"
"Language-Team: Chinese (China) (http://www.transifex.com/projects/p/apache-cloudstack-administration-rtd/language/zh_CN/)\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
"Content-Transfer-Encoding: 8bit\n"
"Language: zh_CN\n"
"Plural-Forms: nplurals=1; plural=0;\n"

# 2ce5e59640934ab387652df180ce1583
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:18
msgid "Isolation in Advanced Zone Using Private VLAN"
msgstr "使用Private VLAN隔离高级Zone中的网络"

# 813ada1771994469abac6b243cbc4ed6
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:20
msgid ""
"Isolation of guest traffic in shared networks can be achieved by using "
"Private VLANs (PVLAN). PVLANs provide Layer 2 isolation between ports within"
" the same VLAN. In a PVLAN-enabled shared network, a user VM cannot reach "
"other user VM though they can reach the DHCP server and gateway, this would "
"in turn allow users to control traffic within a network and help them deploy"
" multiple applications without communication between application as well as "
"prevent communication with other users' VMs."
msgstr "在共享网络中的隔离来宾流量能被Private VLAN（PVLAN）获取。PVLANs提供同一个VLAN里端口间的2层网络隔离。在启用了PVLAN的共享网络，一个用户VM不能到达其他用户VM，但是他们能与DHCP服务器和网关通讯，反过来这样能允许用户去控制网络内部的流量，并且帮助他们像阻止与其他用户VMs通讯一样的去部署无需通讯的多个应用程序。"

# 1f6fb3f08ede4dbcbd7c9017afd047dd
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:29
msgid "Isolate VMs in a shared networks by using Private VLANs."
msgstr "使用PVLAN在共享网络中隔离VMs。"

# c578b86e668046b18652e81289fd1811
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:31
msgid "Supported on KVM, XenServer, and VMware hypervisors"
msgstr "在KVM，XenServer和VMware hypervisors中支持"

# f410d2d58c4b4e91b95fec05d57cf0b8
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:33
msgid ""
"PVLAN-enabled shared network can be a part of multiple networks of a guest "
"VM."
msgstr "启用了PVLAN的共享网络可以是来宾VM的多个网络的一部分。"

# 23d9d81e853644d8a8e311853c02a801
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:38
msgid "About Private VLAN"
msgstr "关于Private VLAN"

# a83e1c8b0ee2433b8776507d78fdd2b4
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:40
msgid ""
"In an Ethernet switch, a VLAN is a broadcast domain where hosts can "
"establish direct communication with each another at Layer 2. Private VLAN is"
" designed as an extension of VLAN standard to add further segmentation of "
"the logical broadcast domain. A regular VLAN is a single broadcast domain, "
"whereas a private VLAN partitions a larger VLAN broadcast domain into "
"smaller sub-domains. A sub-domain is represented by a pair of VLANs: a "
"Primary VLAN and a Secondary VLAN. The original VLAN that is being divided "
"into smaller groups is called Primary, which implies that all VLAN pairs in "
"a private VLAN share the same Primary VLAN. All the secondary VLANs exist "
"only inside the Primary. Each Secondary VLAN has a specific VLAN ID "
"associated to it, which differentiates one sub-domain from another."
msgstr "在以太网交换机中，VLAN是二层网络中的一个主机之间主机能建立直接通讯的广播域 。Private VLAN被设计成一个标准的VLAN的延伸，为了进一步细分逻辑广播域。一个规则的VLAN是单一广播域，但是一个 private VLAN将一个较大的VLAN广播域划分为较小的多个子域。子域表现为一对VLANs：一个主VLAN和一个辅助VLAN。被划分为较小组的原始VLAN叫主，这意味着所有的在private VLAN中的VLAN对共享着同一个主VLAN。所有的辅助VLANs存在与主VLAN中。每个辅助VLAN有一个特定的区别于其他子域VLAN ID。"

# 4b8abf8fe1534c228333ad081037a150
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:53
msgid ""
"Three types of ports exist in a private VLAN domain, which essentially "
"determine the behaviour of the participating hosts. Each ports will have its"
" own unique set of rules, which regulate a connected host's ability to "
"communicate with other connected host within the same private VLAN domain. "
"Configure each host that is part of a PVLAN pair can be by using one of "
"these three port designation:"
msgstr "在private VLAN中有三种端口类型，它们实质上决定了所包含的主机的流量走势。每组端口都有自己唯一的策略，它能控制配置同一个private VLAN域中连接到端口的主机与其他已连接主机的通讯。使用下面三种端口定义中的一种来配置每个PVLAN对中的主机："

# d369217099d04739b0c778e20ac02897
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:60
msgid ""
"**Promiscuous**: A promiscuous port can communicate with all the interfaces,"
" including the community and isolated host ports that belong to the "
"secondary VLANs. In Promiscuous mode, hosts are connected to promiscuous "
"ports and are able to communicate directly with resources on both primary "
"and secondary VLAN. Routers, DHCP servers, and other trusted devices are "
"typically attached to promiscuous ports."
msgstr "**混杂模式（Promiscuous）**：混杂模式的端口能与所有的接口通讯，包括可通讯与隔离属于辅助VLANs的主机端口。在混杂模式中，主机被连接到混在模式端口并且能够直接与主VLAN和辅助VLAN中的资源。典型的连接到混杂模式端口的是路由器，DHCP服务器和其他受信任的设备。"

# 1e0c762b123d404eaedebd33003ad75b
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:68
msgid ""
"**Isolated VLANs**: The ports within an isolated VLAN cannot communicate "
"with each other at the layer-2 level. The hosts that are connected to "
"Isolated ports can directly communicate only with the Promiscuous resources."
" If your customer device needs to have access only to a gateway router, "
"attach it to an isolated port."
msgstr "**隔离(Isolated)VLANs**: 隔离模式VLAN中的端口不能与其他二层网络中的端口通讯。连接隔离模式端口上的主机只能直接与混杂模式下的资源通讯。如果你的客户设备只访问网关路由器，请将其附加至隔离端口。"

# 15e3128ebacd47afb6aa943d0f2a5df1
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:74
msgid ""
"**Community VLANs**: The ports within a community VLAN can communicate with "
"each other and with the promiscuous ports, but they cannot communicate with "
"the ports in other communities at the layer-2 level. In a Community mode, "
"direct communication is permitted only with the hosts in the same community "
"and those that are connected to the Primary PVLAN in promiscuous mode. If "
"your customer has two devices that need to be isolated from other customers'"
" devices, but to be able to communicate among themselves, deploy them in "
"community ports."
msgstr "**Community VLANs**：中的端口能与其他端口和混杂模式下的端口通讯，但是他们不能与二层网络中的其他community VLAN中的端口通讯。在Community模式下，主机能与同一community中的主机和连接到混杂模式中的主VLAN的主机可以通讯。如果你的客户有两个设备需要与其他客户的设备隔离，但是他们之间又要通讯，请将他们部署至 community 端口。"

# 6a977183f6864375ada79a287e63bab3
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:84
msgid "For further reading:"
msgstr "延伸阅读："

# ca791914bab54854b0b9c5cfdbb20be8
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:86
msgid ""
"`Understanding Private VLANs "
"<http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_see/configuration/guide/swpvlan.html#wp1038379>`_"
msgstr "`理解 Private VLANs <http://www.cisco.com/en/US/docs/switches/lan/catalyst3750/software/release/12.2_25_see/configuration/guide/swpvlan.html#wp1038379>`_"

# e676f05feb9a46d6974a4ed7048edad2
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:89
msgid ""
"`Cisco Systems' Private VLANs: Scalable Security in a Multi-Client "
"Environment <http://tools.ietf.org/html/rfc5517>`_"
msgstr "`Cisco Systems' Private VLANs: Scalable Security in a Multi-Client Environment <http://tools.ietf.org/html/rfc5517>`_"

# d5429c82db8a47aa82c6bf7602605f93
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:92
msgid ""
"`Private VLAN (PVLAN) on vNetwork Distributed Switch - Concept Overview "
"(1010691) <http://kb.vmware.com>`_"
msgstr "`Private VLAN (PVLAN) on vNetwork Distributed Switch - Concept Overview (1010691) <http://kb.vmware.com>`_"

# ad67b66852ee445b847bec89936c0d02
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:97
msgid "Prerequisites"
msgstr "先决条件"

# 1f2367cd590b456b9590a9b2616c8ad5
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:99
msgid "Use a PVLAN supported switch."
msgstr "在支持的交换机上使用PVLAN。"

# f2c1161babac465c93d8ff531d97174d
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:101
msgid ""
"See `Private VLAN Catalyst Switch Support Matrix "
"<http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml>`_"
" for more information."
msgstr "更多信息，请参考 `Private VLAN Catalyst Switch Support Matrix <http://www.cisco.com/en/US/products/hw/switches/ps708/products_tech_note09186a0080094830.shtml>`_ "

# d6805374b5244b3da5f5a39bbb521739
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:105
msgid ""
"All the layer 2 switches, which are PVLAN-aware, are connected to each "
"other, and one of them is connected to a router. All the ports connected to "
"the host would be configured in trunk mode. Open Management VLAN, Primary "
"VLAN (public) and Secondary Isolated VLAN ports. Configure the switch port "
"connected to the router in PVLAN promiscuous trunk mode, which would "
"translate an isolated VLAN to primary VLAN for the PVLAN-unaware router."
msgstr "将所有能识别PVLAN的二层交换机之间互连，并且其中一个要连至一个路由器。主机连接到的所有端口需配置为trunk模式。打开VLAN管理，主VLAN（公共网络）和隔离的辅助VLAN端口。配置交换机连接到路由器的端口为PVLAN混杂trunk，这样可以为不识别PVLAN的路由器转换一个隔离的VLAN到主VLAN。"

# 3afd52bf2fa3442b8f0721d8bca53715
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:113
msgid ""
"Note that only Cisco Catalyst 4500 has the PVLAN promiscuous trunk mode to "
"connect both normal VLAN and PVLAN to a PVLAN-unaware switch. For the other "
"Catalyst PVLAN support switch, connect the switch to upper switch by using "
"cables, one each for a PVLAN pair."
msgstr "注意只有Cisco Catalyst 4500有PVLAN混杂trunk模式，可以连接所有普通VLAN和PVLAN到不能识别PVLAN的交换机。其他支持PVLAN的Catalyst交换机，在PVALN对中的每个交换机上使用级联线连接到上联交换机。"

# 5ce2b463414844099564cd171152b994
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:118
msgid "Configure private VLAN on your physical switches out-of-band."
msgstr "在你的物理交换机上使用带外管理配置private VLAN。"

# 2cd1aebdb79742a3ab786e439ef69d89
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:120
msgid "Before you use PVLAN on XenServer and KVM, enable Open vSwitch (OVS)."
msgstr "在XenServer和KVM上使用PVALN之前，请启用Open vSwitch (OVS)。"

# 23029ff5d87847c3b9a551d1755aae1a
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:123
msgid ""
"OVS on XenServer and KVM does not support PVLAN natively. Therefore, "
"CloudStack managed to simulate PVLAN on OVS for XenServer and KVM by "
"modifying the flow table."
msgstr "XenServer和KVM中的OVS不支持原生的PVLAN。因此，靠修改flow table，CloudStack为XenServer和KVM模拟OVS中的PVLAN。"

# 1ab529fe7a53485da31a8085c5fc8181
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:129
msgid "Creating a PVLAN-Enabled Guest Network"
msgstr "配置一个启用了PVLAN的来宾网络"

# 73811e0470e04b63a31d32549a8c882b
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:131
msgid "Log in to the CloudStack UI as administrator."
msgstr "作为管理员登录到CloudStack用户界面。"

# f987d4525be34ae986962e374a48197f
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:133
msgid "In the left navigation, choose Infrastructure."
msgstr "在左边的导航，选择基础架构。"

# 81a7cad61d0c43e3989e9742e6efb902
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:135
msgid "On Zones, click View More."
msgstr "在区域页面，点击查看全部。"

# 62eb1c2209d34440987b38dc999dad75
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:137
msgid "Click the zone to which you want to add a guest network."
msgstr "选择要添加客户网络的那个区域。"

# aeaece1bb557450383b2b0c0930b8d39
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:139
msgid "Click the Physical Network tab."
msgstr "点击物理网络标签卡。"

# bdccf5bb73ce4a58b074c7db9f09db19
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:141
msgid "Click the physical network you want to work with."
msgstr "选择您要操作的物理网络。"

# d325d3d79e0e41fd9ce93131ae2ea76a
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:143
msgid "On the Guest node of the diagram, click Configure."
msgstr "在客户节点界面，点击配置。"

# 3254ff32eecc4e9b9ac57fc4f2219acd
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:145
msgid "Click the Network tab."
msgstr "点击网络选项卡。"

# fdd056f25bee447e98028c9301071fd7
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:147
msgid "Click Add guest network."
msgstr "点击 添加来宾网络。"

# f58f17bd25284897abbe7df71fc2c3fb
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:149
msgid "The Add guest network window is displayed."
msgstr "现实添加客户网络窗口。"

# 5e421fb492504766a709b728f4fc51e5
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:151
msgid "Specify the following:"
msgstr "指定以下信息："

# 606686347ca84fbc9a83c5f46c31d8ea
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:153
msgid "**Name**: The name of the network. This will be visible to the user."
msgstr "**Name**: 要建立的网络的名字。这个是用户可见的"

# 73bbe5e4075e43f39b388b8b267c5401
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:156
msgid ""
"**Description**: The short description of the network that can be displayed "
"to users."
msgstr "**描述**: 提供一个简短的方案描述。 "

# 17a0fe7f48cc4af3bbe7b8e52b6f6d1b
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:159
msgid "**VLAN ID**: The unique ID of the VLAN."
msgstr "**VLAN ID**: VLAN 的ID。"

# 1656d47de54d42a788bc34e0a0c5f2e4
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:161
msgid ""
"**Secondary Isolated VLAN ID**: The unique ID of the Secondary Isolated "
"VLAN."
msgstr "**辅助隔离VLAN ID**：辅助隔离VLAN的唯一ID。"

# 22e09670bce14054b1c11ce5ff049ba5
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:164
msgid ""
"For the description on Secondary Isolated VLAN, see `About Private VLAN\" "
"<#about-private-vlan>`_."
msgstr "更多关于辅助隔离VLAN的描述，请参考see `关于 Private VLAN\" <#about-private-vlan>`_."

# 38765c8ae24048dba72826d07d096afe
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:167
msgid "**Scope**: The available scopes are Domain, Account, Project, and All."
msgstr "**Scope**: 可用的范围，包括域，帐户，项目和其他所以。"

# 90706772c0084832b86742ce99f99d6e
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:170
msgid ""
"**Domain**: Selecting Domain limits the scope of this guest network to the "
"domain you specify. The network will not be available for other domains. If "
"you select Subdomain Access, the guest network is available to all the sub "
"domains within the selected domain."
msgstr "**Domain**: 域，指定客户网络范围的域。指定域中的网络相对其他域是隔离不可见的。如果指定子域访问，域中的客户网络将在所有的子域中可用。"

# 7e174e9b956f4f2784d5196f1a30439f
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:176
msgid ""
"**Account**: The account for which the guest network is being created for. "
"You must specify the domain the account belongs to."
msgstr "**Account**: 这里的帐户是为建立客户网络所指定的。必须指定域中所属的帐户。"

# d8216708afb2490c97e3cca13b2752dd
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:180
msgid ""
"**Project**: The project for which the guest network is being created for. "
"You must specify the domain the project belongs to."
msgstr "**Project**: 项目是客户网络所建立的项目。必须为这个项目指定域。"

# 3aa0f96be4f84d1bae1f1744b108dff8
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:184
msgid ""
"**All**: The guest network is available for all the domains, account, "
"projects within the selected zone."
msgstr "**All**:  选择它，会让客户网络对这个区域（Zone）中的所有域，帐户和项目都可用。"

# 339b47c6f0f94ca4a221c0f592e92d5b
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:187
msgid ""
"**Network Offering**: If the administrator has configured multiple network "
"offerings, select the one you want to use for this network."
msgstr "**网络提议**:  如果管理员已经配置了多个网络方案，可以选择你需要的那个。"

# ae2111debd664f179fe8eb3b251587ff
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:191
msgid "**Gateway**: The gateway that the guests should use."
msgstr "**Guest gateway**:  虚拟机需要使用的网关。"

# df6c332c5f7e427d867dcef1784c0731
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:193
msgid "**Netmask**: The netmask in use on the subnet the guests will use."
msgstr "**Netmask**:  虚拟机子网要使用的网络掩码。"

# 5331fd382d74450c957ad9e5fa46a095
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:195
msgid ""
"**IP Range**: A range of IP addresses that are accessible from the Internet "
"and are assigned to the guest VMs."
msgstr "**IP Range**:  定义公网IP范围，这些IP用来访问公网或是从公网访问客户虚拟机。"

# 6be7da6ede894331ad2082717f19c89d
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:198
msgid ""
"**Network Domain**: A custom DNS suffix at the level of a network. If you "
"want to assign a special domain name to the guest VM network, specify a DNS "
"suffix."
msgstr "**网络域**:  如果你想为客户虚机网络定义一个域名，在此处输入后缀名。"

# 0f106d1db97249348138b9cf76182524
#: ../../networking/isolation_in_advanced_zone_with_vlan.rst:202
msgid "Click OK to confirm."
msgstr "点击确定。"
