Vyatta Core – Giải Pháp UTM
Mã Nguồn Mở
!"#$%#
&'()&*(+#$,-
&'()&.*)#$/01
&'()&*+&2!345
&'()&6)*#$7
Mục lục
Danh sách hình vẽ
Danh sách bảng
2
1 GIỚI THIỆU
89:;1<#=>--##-?#@1A1B?-?C
1>#D1E101F-GD1H=1AHI-1J?KLM?N9O1O
1NHK>1<?PQ/;H?@8>@MRL@,--11
?NP>1AHI1:1-9AS1014RTR3RU1R1V
WR9:LXV?Y9RQZ
[\L#1J=NI[-9A?=?9O1O1:11A-#RF
N1#L1]?K1014D1E^9=1014?KI[
D19A?=?Q#19_H;[?KLM?N1 L9>
-?K,H=H:-RHD1L-HM1:11>#F-GQ3_ O1:1I[9A
101<`@1ab1J:,1RD11:1K9A?=?_1^9LM
%?`1<21@caR2b1dMe>ef?19_Q
%HJH=--#J??@gP?;-P-#=Vyatta Core – giải pháp UTM
mã nguồn mở11,91:1_4H[#I-?Y?N1J;#I1
1:1I[9A101# O#1:19A?=?B?N?51=Q
3#`-?KLH=-?NH^1XV# 8 8%a?K9V
9MhSiX,EIbH^11]H;1]11,91:1_4R [1O
?NQJ-9?jk?l1<3#em 1>#3#9:-
-H^11KHk1n9:;Q#--?$9_Re_11Uo
3#`1JHA#H<p10141AIH;H:9011:11AH
N1< L9"
• `:1_41B%7`R@1S #?1aRmRqbRR
@cTR1Si@ 3R11R ??RQZ
• `:1_4V1C^rRRTRsR#
ae 1RTScR%6R1@R3bRQZ
/^1IeIH;1N#,et=9A10X'r1u-e41j
FeIM%i16&9@vRBp1w1J;H^1MH;1N#1:1
=J32R`XxRxRy32W?11,91:1 [1O?N
-?Y11:1?:#-?>\HL:H:??V#R3#81@8?N@8
?=? z9n^9=#1A--11O;QJ--1J;l-
81UM11:1 L9F-G-#11:1E101aB
?N1J9_1<3#bQ
3
4
2 TỔNG QUAN VỀ VYATTA
3#HN?K@8lHI-1>L9?NW1:11
1,91:19:9?N-?Y 89A?=?eI^9L1Y O1:1
I1<JR=?:#1<H{-1:1?>PHL:H:??V#W?H:90
1:11AH N=NA`Q7--NAY|RJ-H:??V#1<
1:1e:1- L9FGHIe59IH^1eIM-Ll
3#10?1e4-@01?N?-3#1J;?NQ
9:91<3#-?K81UMH;#I11:1I[9A10HK1}#=
1<1:1j`@1R~9Q
%HV#-@@:pLH=-3#em-9A?=?`@1m
q6@:3#em-`@1m
2.1 Các sản phẩm chính
• Về phần mềm
/V#H=-1:19B?NR1J9_RHA#H<1:11014e:1-
98[9A101L1;e-YH^1@8C^F1_j
3#Q
3#em"H^11-HD1:1=9A10X'r1uQ
3#em321@"H^11-HD1:1=J`X
xR32RxR 7y32Q
• Về phần cứng
3#7 991"-1:1I[9A10HjH^1MR1J_B_1
1-1-HD@•9A?=?3#emQ
• Dành cho cộng đồng
5
3#`"-9?jk?lR--?$9_1<3#em -
11KHk1:1-9:;-\ nRE1011J1A10R;e
-,e>YH^11:1 [1O1#L9F3#Q
2.2 Các chức năng chính của Vyatta Network OS
• Kết nối mạng
N{1<LM3#-?K1B1IH[#I901N9RC^HA#H<1:101
H[#IHK=.-raqRmRbQ-1w C^1?N
e> V#1u'&)Q66R1:1I9-1:11 v1JM1HK6&9@Q
• Tường lửa
\€1<3#EKe4e;? #L11J.-rQ`:1
_411,9k?•@ S?@ TR)TQ
• Lọc nội dung và phòng chống xâm nhập
7LM3#11,9??K?01HKL1:11<HK11:1?MH
UKU1>?-1B1I9w1MXV?Y9Ia1JJ
[1O3#ihbQ
• Bảo vệ các kết nối từ xa
IY9 1:1eIM 3 -a@€ O 1b pD1=L
M3#D1,etI[1JC^13-Q/k\1w11,9e
4#1Y9?NFX-1\ n\_4i@ m93Q
• Quản lý lưu lượng
=1B1Ise:11J;H^1:9 O11:1^H-a b-H
a bH;X:1H[- :@8 11:1^-1:10 O}
U#HwGHK$,9Q
• Độ sẵn sàng cao
3#11,9e4 89wa 1#b-_@•@-1a#b
11:1?NM}U>}1:11u=1B1IHkK-1#;HE 8
9wacb
• Tương thích và hỗ trợ IPv6
`:19:9H[#I-?Y 89A?=?1<3#L1J@8B
_1M-C^HA#H<01rQ
• Quản trị và chứng thực
7LM3#1J;H^1}|>} L wL}K1}
[?NRD1 LD1>}LM}|-@€ O?
11@@1<3#Q,11:19-?L1H=H^1H?-@€ O1:1
9B011081}7)R%hD1``‚Q
• Giám sát và lập báo cáo:
6
`:1>=PNNHK1<LM3#H=H^1Y-11,9
HA#H<-1J;H^1 {W1:11>1OS019EI2RTR
#@@eRQZ
7P62>P10141<3#em
%HV#-1I1:110141<3#em9rQ*
7
q)%@:11I10141<3#emrQ*
2.3 Các giải pháp triển khai
/;;e9:91<3#1J;1U?KJ?9:9@"
8
Vyaa Soluons
Vyaa Soluons
Private & Public Cloud
Private & Public Cloud
Vyaa for The Cloud
Vyaa for The Cloud
Vyaa for the Amazon Cloud
Vyaa for the Amazon Cloud
Virtual Datacenter
Virtual Datacenter
Vyaa for Virtualizaon
Vyaa for Virtualizaon
Vyaa for Riverbed RSP
Vyaa for Riverbed RSP
Physical Network Edge
Physical Network Edge
Vyaa Appliances
Vyaa Appliances
Vyaa Network OS
Vyaa Network OS
7P)`:19:9;e3#
L1I=1:1J?9:91d-1:1-L=1:1?>P;
e?!RX?e?lH[1]@"
9"SSQ#Q1?S@@
`:19AI91<:1:-#@gY9-L10 O9:93#`
-?K?>P;e1:1#1A1O;-AM81Il1:1
L9Q`:111-HD-1,P1:1-9A1014H=H^181L
?>\JQ
9
3 TẢI VÀ CÀI ĐẶT VYATTA CORE
A-#@g?>1:1n#1U;e-1:111-HD??KLM3#
`Q
3.1 Yêu cầu phần cứng tối thiểu
2KH=1A|-L9A?=?3#H^1IeI1]H;1N#1:19A10
X'r1uQ%Y#?-1:1=e:12R2R`R`RZH=e>
H^1C^Qn#K1-1:1-9A1014?-LM3#@gH?:1
?-1J1:1#1A=9A10a`hR2RI[pbe:1Q%HV#-
1] !1BH;1U1,P9A109n^9F#1AIeIQ
q*ƒ1A9A10M;H;1-HD3#`
3.2 Các tùy chọn triển khai
7LM3#C^1:1n#1U;e,HK@"
• Chạy từ LiveCD"3#1J;NHK81I9FH„`%aH^1FT
m1J;elHK1<3#bRLMH^1N9-1N##K
2?-e>-?X:K pL##HELH=-L1J?:#
_Q-RN?Ki`%1d-1}#IHAH;1-3#
I[pE10Q
• Cài đặt trên thiết bị lưu trữ dài lâu: @eelHKF?Ki`%R3#1J
;H^11-E7%%R%Rhq-1:1NI[p -Va9@@
1be:1zQ
• Cài đặt trong môi trường ảo hóa hoặc đám mây (cloud)"3#11,91:1
991-LM3#H^11-HD-M@• -1=
1
0
J32vx-xQ-R1d1J;1-HD3#E
101<?:#D11N#i`%?:#Q
2C81UH=1Jp^1H;?-9n^91:11Ae:1
Q
3.3 Các bước cài đặt
%HV#-1:111-HD3#`i`%E10?:#32Q
3.3.1 N-elHKFi`%
=Tmi`%1<3#`F"9"SS#QS @
?,N\H;?-#-rQ*Rr.?HlHN€L?
1U*)1EH[Q
HJTmH„`%-elHK?:#_Fi`%FNQ
I,# ,51Lvyatta login:P„-LM3#Hjel1N#-
1>Q
/4Y9-e-?YeuH=-#Q
7P*/4Y9-LM3#
i|"HM\^91-HD3#`?>\JP1]1A5T
m=l-E`%kelHK?:#FE`%HJ-81L1:11
I9HV#Q
3.3.2 `-HDFi`%
e-H^1?>\i`%R1Je;1-HDLM3#I[
p -V-"
• Image-based install:1:1-#R1J;1-HD=91<3#
1n?K?:#1<R?C9@g-?KTa?bQyY
?:#R19f91U?K?H;elHK-L11#;HEp1:1?H;
@€ O1dHBQ
• Disk-based install:e:11- N?lR1:1-#@g@€ Oe;XI9
HD1:1T#=Ma01-@g1J9Vn101:1c "
SRS RS?RS@RSRS1RS?9RQQQbQ`:1?-1:19e:11<
3#1J;H^1?-@eLMH^11-e; @e@ -#Q
1
1
%HV#@g?U1-e; @e@ a1dAB81e;?@ b
1 N ,51L@eH4Y9R{L @@#@? aD1 @?
I1U1-e;?@ bQ
2 i-?1:1 !?-PH;-,}:P1-HDa|1:1
11U9Vn1-3#R?Yeu1-eR[_1-hqbQ
3 …i`%-H?-qmHjH^1IY9H;elHKFE1010
LM3#FH^11-Q
4 {LH;elHKN?:#Q
3.3.3 y;?1-HD
e1-HD-elHK-1>3#`R81L1:11@H;e;?
1:1>1B-eIM?N1<LMQ
• N ,51#1AH4Y9LR{--e-?Yeu?D1
H[H=-#Q
• /;X?9-e;1<LMH1N#R{L@@ReI}1J
NP@"
7P.iL@@
- %wVersion: 1I91<LM3#H1N#
- %wBoot via:1Ie;1<LMH1N#-i`%R @eaI1-
e; @e@ bD1?aI1-e;?@ bQ
- %wHypervisor:1I3#H^11-=J-alHV#
-32bQ
• /;X:1YLM1J;H^1#1Y9?N1O1KRlHV#R€eIM
?:#3#?:#YRHD11…1n@-e;?eIM
?NWL9P@"
1
2
7P(y;?eIM?N1O1K
- 2:#3#1J-6†)Q6r'Q6Q6&S).R?:#Y1J-6†)Q6r'Q6Q.S).
- ‡„1<1:11VLe:1@gH^1H=1Y91:19A@Q
1
3
4 TÌM HIỂU MỘT SỐ CẤU HÌNH CƠ BẢN
4.1 Giao diện CLI
`dM1,P11:1I[?Ne:1R L wL1<3#1d
1J)? 1B-m9? -`T? Q
7Pr`:11IHK`i
y-- L m9RH;1#;}1IHK1,PN nL
1TQ/;:eG1IHK1,P nLXQ1IHK1,P1J)L
H:1…|-@-@QiL@H;IY91,P-L@H;X?1:1>@MQ
y1,PXWL@j#>L1??H;1,P1JL81Q
qN1J n9_?H;-,L1wIR n ,ˆH;X? !1<LQ
Ghi chú"3L1@€ O L`ie>}:eJHM\HjF-?L1
I[?NQ%HJ-I-#e>H=1Y91IQ
4.2 Quản trị hệ thống
--#N81-1,P>1B1@RH^1?>@BHk
?N@HV#Q
1
4
7P+`,P1:1>1@
Thực hành 1. `,P>@
%nL @@#@?@‐?6 H;HD@?1I[QHJ6
1_-@?1AHDQ
%nL@@#@? ?‐??# ?Q1?H;HD ??1I
[-#QHJ?# ?Q1?1_- ?1AHDQ
%n L @@#@?@1‐@‐?99@‐?66&Q&Q&Qr( H;
?99?KH[1]9-@?QiL1J„@6@gH^1?9„
H[1]9-6&Q&Q&Qr( a1I-#ML1NH[„T@
@b
%nL@@#@??‐@6&Q6&Q.&Q*.H;1]H[ @@HJw
9V ?I[-#QHJ6&Q6&Q.&Q*.1_- @@_ OQ
%nL@@#@?#‐ @@6+)Q6rQ&Q)(.H;1]H[H[1]#
1I[Q
`M1nN1J; n1:1L@B0H;X?N1,PlQ
4.3 Quản trị user
/;1081e-1,P3#E^,11:1011081"
• `0811W@S9@@H^11O1KI[Q
• `081}%h@Q
• `081}``‚
• € O7H;NeJ1>ee1081Q
q--#1] !N10811RP1:1N1wNe>1J9
`??#Q
1
5
7P'>-e\ n
Cấu hình user login trên Vyatta
N@?-9@@ H4Y9I[>?>PQ
%nL @@#@?@‰c‐?Š~?‹ H;N@-
‰-c?-~?Q
%nL@ @#@? @ ‰ 1 9X‐9@@
?#9@@ H;IY9?Yeu1@‰-?#9@@ Q
%nL@@#@?H;X?N>1,PQ
%nL @#@?9@‐Œ• H;1,Pe
RHJ9HD ,:#ef9Q
4.4 Giám sát hệ thống
`014-#19f9NX?NYe|1#;J}H\?NQ>}
L1IY919f9 {c1N1J;MeH^1N:R
^#=1<I[Q
Thực hành 2. `,PT11
/;19f9 {?NN nL1,P @ @#@? T‐11
c1&Q
1
6
HJ:eG1IHK1,PR- nL@T‐11c1&
H;X?N:#=?NQ
-L1X?> LR1w1J;€>-#HI1
@Q%nL @ @#@? T‐11 T @ 6†)Q6r'Q6Q)&
HJH[1]91_-91<@Q
4.5 SSH
/;1J;1,P13#RN9I[RH=HJY,LQqN1J;
n017H;1,PFXQ
Thực hành 3. `,P01@@
/;Y01@@N nL@@1@@
%nL@@1@@H;e;?NQ
%n?K1BP@@-HJH;€eIM-I[}@@R9))Q
1
7
5 TÍNH NĂNG NỔI BẬT
5.1 Giải pháp Định Tuyến
/[#I-Pˆ`9f91…>e>_11IlHV#Q9A-#R1…
@g;e1:19:9H[#I?-3#E^Q51HIH[#IR1…
1J;9VN?>P@"
7P†`:101H[#IH^1C^
/[#IK?=1J;e;HI1:101RvRmRQ/[#IN
?=P1JqQ9A-#1…@g;e*01Rm-qQ
1
8
5.1.1 01
1.1.1.1 2>P
7P6&2>P;e
;e?>P?NQ2C-?K?:#H^11-HD3#R1J
1 ?NQHJ@€ O1 91eH;-?1?Cn?NQ
1.1.1.2 `,P
/;1,PH[#IR?CR-1IHK1TQ
Thực hành 4. `,PH[#I
#Ž6•@91@9e6&Q&Q.&Q&S).
#Ž6•@91@9 @11
#Ž6•1??
#Ž6•@91@
9•
e6&Q&Q.&Q&S).
@•
11 •
‘
‘
‘
#Ž)•@91@9e6&Q&Q.&Q&S).
#Ž)•@91@9e6&Q&Q(&Q&S).
#Ž)•@91@9 @11
#Ž)•1??
#Ž*•@91@9e6&Q&Q(&Q&S).
#Ž*•@91@9 @11
1
9
#Ž*•1??
1.1.1.3 y;?
%nL@91@H;X?N1:11,PF81LQ
Thực hành 5. %nL@9H;X?H[#I
#Ž*"’“@9
` @"y‐eR`‐11 R‐@1R‐Rm‐mR
‐Rq‐qR•‐@1 R”‐q
•”6&Q&Q)&Q&S).•6)&S*–6&Q&Q(&Q)R(R&&")&"6r
•”6&Q&Q*&Q&S).•6)&S*–6&Q&Q(&Q)R(R&&"*."&.
•”6&Q&Q.&Q&S).•6)&S)–6&Q&Q(&Q)R(R&)"6(")r
`•”6&Q&Q(&Q&S).@ 1#11 R(
`•”6&Q&Qr&Q&S).@ 1#11 Rr
`•”6)+Q&Q&Q&S'@ 1#11 R
#Ž*"’“
Thực hành 6. %nL@99H;X?1I=019
#Ž*"’“@99
` @"‐R`‐11 R‐1Rm‐mRq‐q
‐1 @"
ab‐?Ra@b‐@1Ra b‐ cRab‐ @R
ab‐c1
eX7921??
ab6&Q&Q)&Q&S).6&Q&Q(&Q)*6&Q&Q(&Q)&&&")*
ab6&Q&Q*&Q&S).6&Q&Q(&Q)*6&Q&Q(&Q)&&&")*
ab6&Q&Q.&Q&S).6&Q&Q(&Q))6&Q&Q(&Q)&&&")*
`ab6&Q&Q(&Q&S).&Q&Q&Q&6@c&
`ab6&Q&Qr&Q&S).&Q&Q&Q&6@ca11 "6b&
#Ž*"’“
6N?K1 91e1JH[1]6&Q&Q)&Q6S).R@HJe;?WL
9F*
#Ž*"’“96&Q&Q)&Q6
2
0
6&Q&Q)&Q6a6&Q&Q)&Q6b(ra'.b#@c Q
r.#@c?6&Q&Q)&Q6"1?9—@}˜6˜r*?˜+Q*†?@
r.#@c?6&Q&Q)&Q6"1?9—@}˜)˜r*?˜6Q(r?@
r.#@c?6&Q&Q)&Q6"1?9—@}˜*˜r*?˜6Q.†?@
™`
‐‐‐6&Q&Q)&Q69@@1@‐‐‐
*91e@@? R*1 R&š91e@@R?)&&)?@
?SS?XS? ˜6Q.†+S*Q.')S+Q*†&S)Q+r*?@
#Ž*"’“
5.1.2 Giao thức OSPF
1.1.1.4 2>P
;e?>P?N@HV#R?>P-#M-1a01bQ
Hình 11 – Mô hình triển khai OSPF
1.1.1.5 `,P
/;1,P01mN1AN1 91e-? R81IN
1J;@€ O?Kc1YH;-? Q#RN nc1
91eH; ; -H=1]-n#I01Q
Thực hành 7. `,P01m
#Ž6•@91@@9c9?@‐ 6&Q&Q&Q6
#Ž6•@91@@9c&Q&Q&Q&e6&Q&Q.&Q&S).
#Ž6•@91@@9c @11
#Ž6•1??
#Ž6•@91@
@9c•
&Q&Q&Q&•
2
1
e6&Q&Q.&Q&S).
‘
9?@•
‐ 6&Q&Q&Q6
‘
@•
11 •
‘
‘
‘
#Ž)•@91@@9c9?@‐ 6&Q&Q&Q)
#Ž)•@91@@9c&Q&Q&Q&e6&Q&Q.&Q&S).
#Ž)•@91@@9c&Q&Q&Q&e6&Q&Q(&Q&S).
#Ž)•@91@@9c @11
#Ž)•1??
#Ž*•@91@@9c9?@‐ 6&Q&Q&Q*
#Ž*•@91@@9c&Q&Q&Q&e6&Q&Q(&Q&S).
#Ž*•@91@@9c @11
#Ž*•1??
1.1.1.6 y;?
B8R nL@9H;e;?01mHjNHKQ
5.1.3 Giao thức BGP
q-?K01H[#IN?=Q`I=01-#@ge>H^1
YlHV#Q51HIq1…1Je:L?
• q"2C9A€q?K1n
• q"2C9AFq1Je:1Q
--#@g;eNH[#IqQ
1.1.1.7 ;eq
Mô hình mạng
;e?>P?N@"
2
2
`:16R)R*R.H^1NF?:#R1nM-?K1 ?N #,QqM
-#N-6&&Q7l)&&-*&&1]-^RNe>
1AN-#Qe1-HDRNHD1:1>1Bk?@?R-H[1]
911:1Q
Hình 12 – Mô hình triển khai iBGP
Cấu hình iBGP
`:1H^1:j6R)R*R.HJw-qQ
Thực hành 8. `,Pq6R-6&&R01H[#Im
#Ž6•@91@@9c&Q&Q&Q&e6&Q&Q&Q66S*)
#Ž6•@91@@9c&Q&Q&Q&e6+)Q6rQ&Q&S).
#Ž6•@91@@9c&Q&Q&Q&e''Q''Q''Q&S*&
#Ž6•@91@@9c9?@‐ 6&Q&Q&Q66
#Ž6•@91@@9c9@@‐c1&
#Ž6•@91@96&&6&Q&Q&Q))?‐@6&&
#Ž6•@91@96&&6&Q&Q&Q))9 ‐@16&Q&Q&Q66
#Ž6•@91@96&&6&Q&Q&Q**?‐@6&&
#Ž6•@91@96&&6&Q&Q&Q**9 ‐@16&Q&Q&Q66
#Ž6•@91@96&&6&Q&Q&Q ?‐@6&&
#Ž6•@91@96&&6&Q&Q&Q 9 ‐@16&Q&Q&Q66
#Ž6•@91@96&&9?@‐ 6&Q&Q&Q66
#Ž6•1??
2
3
Thực hành 9. `,Pq)
#Ž)•@91@@9c&Q&Q&Q&e6&Q&Q&Q))S*)
#Ž)•@91@@9c&Q&Q&Q&e6+)Q6rQ&Q&S).
#Ž)•@91@@9c9?@‐ 6&Q&Q&Q))
#Ž)•@91@96&&6&Q&Q&Q66?‐@6&&
#Ž)•@91@96&&6&Q&Q&Q669 ‐@16&Q&Q&Q))
#Ž)•@91@96&&6&Q&Q&Q**?‐@6&&
#Ž)•@91@96&&6&Q&Q&Q**9 ‐@16&Q&Q&Q))
#Ž)•@91@96&&6&Q&Q&Q ?‐@6&&
#Ž)•@91@96&&6&Q&Q&Q 9 ‐@16&Q&Q&Q))
#Ž)•@91@96&&9?@‐ 6&Q&Q&Q))
#Ž)•1??
Thực hành 10. `,Pq*
#Ž*•@91@@9c&Q&Q&Q&e6&Q&Q&Q**S*)
#Ž*•@91@@9c&Q&Q&Q&e6+)Q6rQ&Q&S).
#Ž*•@91@@9c9?@‐ 6&Q&Q&Q**
#Ž*•@91@96&&6&Q&Q&Q66?‐@6&&
#Ž*•@91@96&&6&Q&Q&Q669 ‐@16&Q&Q&Q**
#Ž*•@91@96&&6&Q&Q&Q))?‐@6&&
#Ž*•@91@96&&6&Q&Q&Q))9 ‐@16&Q&Q&Q**
#Ž*•@91@96&&6&Q&Q&Q ?‐@6&&
#Ž*•@91@96&&6&Q&Q&Q 9 ‐@16&Q&Q&Q**
#Ž*•@91@96&&9?@‐ 6&Q&Q&Q**
#Ž*•1??
Thực hành 11. `,Pq.
#Ž.•@91@@9c&Q&Q&Q&e6&Q&Q&Q S*)
#Ž.•@91@@9c&Q&Q&Q&e6+)Q6rQ&Q&S).
#Ž.•@91@@9c&Q&Q&Q&e††Q††Q††Q&S*&
#Ž.•@91@@9c9?@‐ 6&Q&Q&Q
#Ž.•@91@@9c9@@‐c1&
2
4
#Ž.•@91@96&&6&Q&Q&Q66?‐@6&&
#Ž.•@91@96&&6&Q&Q&Q669 ‐@16&Q&Q&Q
#Ž.•@91@96&&6&Q&Q&Q))?‐@6&&
#Ž.•@91@96&&6&Q&Q&Q))9 ‐@16&Q&Q&Q
#Ž.•@91@96&&6&Q&Q&Q**?‐@6&&
#Ž.•@91@96&&6&Q&Q&Q**9 ‐@16&Q&Q&Q
#Ž.•@91@96&&9?@‐ 6&Q&Q&Q
#Ž.•1??
Kiểm tra
%nL@99H;e;?1,P9
Thực hành 12. iL@99@??#
#Ž6"’“@99@??#
q T6&Q&Q&Q66R1?6&&
q@6R@r.#@c??#
@*R@+(r&#@c??#
32@1 2@3smsh9S%ScX
1
6&Q&Q&Q)).6&&r6&&&&&&"&."6'&
6&Q&Q&Q**.6&&r6&&&&&&"&."6.&
6&Q&Q&Q .6&&(r&&&&&"&)"((&
?c@*
#Ž6"’“
%nL@99 H;X?H[#I1<01qQ#LRL\
-#HMR 1…e>1J1,P}:101H[#IQ
1.1.1.8 ;eq
Mô hình
2
5