Abin da dole ya daidaita kafin MX ya iya kammala IPsec
Commit da ya karɓi saitin yana tabbatar da parser ne, ba hanya ba. Sassan biyar na tuple ɗin dandali suna yanke shawarar ko sabis ɗin yana aiki da gaske.
Ana commit ɗin saitin a tsaftace, muƙamai suna ɗagawa, tunnel ɗin kuma har yanzu ya ƙi kafawa. Babu wani layi a cikin log ɗin da ya ce dandalin ba zai iya yin wannan ba; kawai ba ya yin sa. A Junos, IPsec sabis ne da kawai wani haɗi na musamman na chassis, kayan aikin sabis ko hanyar software, da fitarwa zai iya yi, kuma shafin fasali yana bayanin ƙarfin software ɗin, ba na'urarka ba. Dole a duba tuple ɗin sashe-sashe, domin sakamakon commit yana tabbatar da parser ne kawai.
Inda fakiti ɗin yake tafiya da gaske
Dole zirga-zirgar da aka zaɓa don IPsec ta isa ɓangaren da yake ɓoye ta. A dandamali masu module na sabis, ana tura kwararar da aka zaɓa zuwa wannan module sannan ta koma hanyar turawa. Idan module ɗin babu, ba shi da isasshen ƙarfi ko ba a ɗaure shi da muƙamin ba, saitin yana nan kuma ba a sarrafa ko ɗaya fakiti. Babu wani abu a fitar da commit da ke bambanta wannan yanayin da lafiyayyen yanayi.
Aiwatar da aka shirya a cikin software suna barin aikin a kan injin turawa ko a cikin kayan aiki na ciki, da iyakoki daban-daban na albarkatu. Tunnel da ake gani a cikin saitin ba ya gaya maka wace hanya ce ke ɗauke da shi da gaske.
Sassan biyar na tuple ɗin
Rubuta haɗin kafin ka karanta kowace shawara, domin sashe ɗaya na iya ɓata sauran. Lambar sashe da ta tallafa wa sabis shekaru uku da suka wuce ba ta ce komai ba game da katin da fitarwa a wannan chassis. Karanta layukan da ke ƙasa a matsayin jerin dubawa, sannan cika ƙimar da saitin ba zai iya nuna maka ba.
| Part | What to record | Where it fails quietly |
|---|---|---|
| Chassis and service hardware | Model plus the installed PIC, MPC or MIC | Card absent or not bound to the interface |
| Implementation | Services card, inline or software path | Configuration accepted, no processing |
| Release | Exact Junos version | The feature arrives in a later build |
| Address families and mode | Outer and inner family, tunnel mode, peer authentication | Half the traffic silently unprotected |
| Entitlement and capacity | Licence state and the workload profile | Ceiling reached only under load |
Iyalan adireshi da nauyin aiki su ne layuka biyu da mutane suke tsallakawa, kuma duka biyu mai sauƙi a duba kuma mai tsada a gano daga baya. Karanta tuple ɗin daga na'urar, ba daga spreadsheet ba, domin saitin yana bayar da rahoton abin da ka nema, ba abin da aka girka ba. Umarni biyu ne ke ɗaukar mafi yawa: show chassis hardware yana ambaton katin da aka saka da gaske, show version kuma yana ba da ainihin fitarwa. Babu ɗaya daga cikinsu da ya dogara da ko saitin daidai ne, kuma wannan ne ainihin maganar.
show chassis hardware
show versionƘofofin fitarwa na gaske ne
Bayanin fitarwa ba tsari ba ne. Bayanin IPsec na Juniper ya sanya goyon bayan AES-GCM ga katuna masu sabis da yawa a Junos 17.3R1, tare da yanayin FIPS yana farawa a 17.4R1. Don haka fasalin ɗaya yana da ƙofa biyu dangane da yadda ake gudanar da dandalin, yanayin da kake gudanarwa ne kuma ke yanke shawarar wacce za ta yi aiki. Duba yanayin kafin ka duba jerin fasali.
Karanta bayanan fitarwa don ainihin sigar da aka girka, ba sabuwar da aka rubuta ba. Ba za a iya ɗauka cewa ƙarfin da ya zo a build na baya yana cikin na farko ba, kuma maganar da aka rubuta don kati ɗaya ba ta wuce zuwa wani ba. Kwafi layin bayanan fitarwa a cikin rikodin ƙira domin ikirarin ya ɗauki tushensa, domin sanarwar goyon baya da aka rubuta don dangin dandali ba magana ce game da yanayin da kake gudanarwa ko katin da kake da shi ba.
Ƙarfi nauyin aiki ne, ba kanun labari ba
Lambar wucewar da ke kanun labari ba tare da sharuɗɗan aunawa ba lambar kasuwanci ce. Ƙananan fakiti suna tsada sosai a kowane bit fiye da manya, haɗin gwiwa na lokaci ɗaya suna cinye ƙwaƙwalwa, kuma kowane sabis da ke raba katin yana rage abin da ya rage.
Yi hasashe daga zirga-zirgar da kake tsammani: girman fakiti na yau da kullum da mafi muni, adadin abokan hulɗa, da ko wannan katin yana kammala NAT ko wani sabis. Sannan ka bar wuri don ranar da hanya ɗaya za ta ɗauki nauyi fiye da yadda ƙira ta ɗauka. Shirin ƙarfin da ya ɗauka cewa kayan aiki ba sa aiki buri ne, ba shiri ba. Idan lambar tana da muhimmanci ga hujjar kasuwanci, auna ta sau ɗaya a kan na'urar a ƙarƙashin nauyi mai wakilci, ka kuma ajiye wannan aunawar tare da ƙira.
Rubuta rikodin kafin ƙira
Ga kowace iyawa da ƙira ke buƙata, riƙe nuni na dandali, takardun da suka dace da fitarwa, da kowane takurawar da ba a warware ba a wuri ɗaya. Inda layin tuple ɗin ya kasa, kwatanta wata ƙofa da aka amince da ita maimakon sake gina ƙira a kewayen jerin sayayya da ya tsufa. Rikodin ya kamata ya faɗi wace ce ainihin tsarin da ke yin aikin da kuma a ƙarƙashin wace iyaka.
Bayan haka ne kawai ka duba abokin hulɗa, domin dacewar protocol da ƙarshen nesa ita ce tambaya ta gaba kuma ba ta taɓa zama madadin tallafi na gida ba. Abokin hulɗa da ya yarda da shawarwarin ba zai iya taimaka wa chassis da ba ya ɓoye ko ɗaya fakiti ba.