ike-scan baya samun amsa daga ƙofar IPsec mai aiki

Ƙofar tana hidimar wayoyi da kwamfutocin tafi-da-gida kowace rana, amma duk da haka ike-scan ya ba da rahoton cewa babu mai masauki da ya amsa. Wannan fitarwar tana kama da hujja cewa IPsec ba ya cikin na'urar. Yawanci yana nufin na'urar ta watsar da kowace shawara a cikin binciken kuma ta zaɓi kada ta amsa komai. Shiru amsa ne, kuma shi ne mafi ƙarancin bayani da kayan aikin zai iya ba ku.

Yi aiki da tambayoyi uku daban-daban: shin fakitin ya iso, shin wata shawara ta dace, kuma shin wani abu ne ya ƙi abokin?

Mataki 1: karanta shawarar da kayan aikin ke aikawa

Babban yanayi yana farawa da kayan SA wanda ke lissafa sauye-sauyen da mai farawa zai karɓa, kuma ike-scan yana cika lissafin daga tsoho da aka haɗa. Saitin tsoho da gangan tsoho ne: DES da 3DES don ɓoyewa, MD5 da SHA1 don hashing, rukuni 1 da 2 don musayar maɓalli, maɓallan da aka riga aka raba don tabbatarwa. Babu AES, babu SHA-2, babu rukuni 14. Ƙofar da aka saita don AES-256 tare da SHA-256 da modp2048 ba ta raba komai da shi.

Wasu aiwatarwa suna amsa binciken da bai dace ba da sanarwar NO-PROPOSAL-CHOSEN. Wasu kawai suna jefar da shi, wanda ya zama ruwan dare a cikin na'urorin da ke ɗaukar abokan da ba a sani ba a matsayin hayaniya. Ko ta yaya binciken ba ya buga komai, kuma wannan babu komai daidai yake da yadda UDP 500 da aka tace yake kama daga waje, kamar yadda takardun aikin ike-scan ya bayyana game da saitin tsoho.

Mataki 2: bayar da shawara ɗaya ta zamani

Maye gurbin saitin tsoho da --trans. Sigar sifa tana ɗaukar lambobin sifar IKE kai tsaye: 1 don ɓoyewa, 2 don hash, 3 don tabbatarwa, 4 don rukuni, da 14 don tsawon maɓalli lokacin da algorithm ɗin ya karɓi ɗaya. Abin da ke fitowa layi ne da za ku iya karantawa da ƙarfi a cikin bitar canji.

Sigar matsayi tana ɗaukar ƙimar guda ɗaya a jere kuma tana guje wa baka, wanda ke da mahimmanci da zarar umarnin ya ratsa ta harsashi.

ike-scan --trans="(1=7,14=256,2=5,3=1,4=14)" 203.0.113.10

Shawara ɗaya a kowane fakiti tana jinkiri yayin ƙididdigewa, don haka yi maimaita kan ƙimar da za a iya tsammani: ɓoyewa 5, 7/128, 7/192, 7/256; hash 1, 2, 5, 6, 7; rukuni 1, 2, 5, 14, 15, 19, 20, 21; tabbatarwa 1 don maɓallin da aka riga aka raba da 3 don sa hannun RSA. Buga kowace umarni kafin gudanar da ita domin rubutun ya nuna abin da aka bayar da kuma a wane tsari.

Mataki 3: fassara amsa

Amsa tana tabbatar da abubuwa biyu daidai: ana iya isa ga mai amsa IKE a wannan adireshin, kuma shawara ɗaya da aka bayar ta kasance abin karɓa. Ba ta faɗi komai game da maɓallin da aka riga aka raba, Layer L2TP, ko akwai asusun mai amfani. Bincike mai nasara ya dace sosai da gazawar kowane mataki na gaba.

A kan ƙofar da kuke gudanarwa, wannan shine sashin da ke da amfani da gaske. Binciken yana gaya muku waɗanne shawarwari na'urar har yanzu tana karɓa, kuma sakamakon da ya takaita ga tsoffin sauye-sauye bincike ne game da manufofin na'urar, ba dalilin raunana abokin ciniki ba.

Mataki 4: fassara shiru

Shiru shaida ce mafi rauni fiye da yadda yake kama. Wataƙila an ƙi kowace shawara, ana iya tace UDP 500 da 4500, ana iya iyakance tushen ta fuskar sauri bayan fashewa, ko kuma sabis ɗin yana saurara a wani adireshi daban da wanda kuka bincika. Kwatanta log ɗin IKE na ƙofar da abokin ciniki wanda ya riga ya haɗa da ingantattun shaidu kafin ku yanke shawara game da akwatin.

Halin fashewa yana cikin wannan jerin saboda ƙididdigewa yana haifar da fakiti da yawa a cikin ɗan gajeren taga. Ƙofar da ke amsa yunƙurin farko sannan ta yi shiru tana bayyana manufar ta ta anti-DoS maimakon saitin shawarwarinta.

Mataki 5: rubuta abin da kuka tabbatar

Rubuta haɗin da aka karɓa kusa da sigar firmware, sannan kwatanta shi da sauye-sauyen da abokan cinikin da kuke damu da su ke bayarwa ta tsohuwa. Tazarar da ke tsakanin waɗannan jerin biyu ita ce matsalar daidaitawa, kuma binciken ya kawai sanya ta bayyana. Idan shawarwarin da aka karɓa kawai su ne waɗanda ba za ku zaɓa ba, gyaran yana cikin manufofin ƙofar ko cikin bayanin abokin ciniki, ba a cikin binciken ba.

Binciken da bai taɓa amsawa ba ya riga ya amsa wani abu: yana nuna waɗanne shawarwari wannan na'urar ta yarda a tattauna, da waɗanne da ta fi so ta jefa a ƙasa.