Shan door oo cinwaan ah oo ku jira borofayl IPsec, iyo kee baa khaldan
Barta dhammaadka, aqoonsiga, shabakadda hoose ee la ilaaliyay, isha laga soo galo iyo tallaabada xigta mid kastaa waxay ka jawaabaan su'aal kale. Marka hore calaamadda ku habee goobta.
Shan shaqo oo kala duwan ayaa cinwaan ka hela qeexitaanka isku xirka caadiga ah, mana qasban inay isku raacaan. Maamulayaashu way xannibmaan sababtoo ah dareen macquul ah, in goobaha oo dhan loo jeediyo isla hal marti, waa khalad ugu yaraan saddex ka mid ah. Bixitaanku waa in marka hore calaamadda la magacaabo ka dibna la eego hal ama laba goobood oo sababi kara.
Shanta shaqo, sida ay muhiimka u yihiin
Barta dhammaadka gaadiidka waa meesha isdhaafsiga IKE la gaarsiiyo. Aqoonsiga la xaqiijiyay waa magaca ay dhinac kastaa caddeeyo, waxaana lagu hubiyaa siyaasadda, ma aha shaxda waddooyinka. Shabakadaha hoose ee la ilaaliyay waa doorashooyinka go'aamiya taraafikada gudaha ee ku jirta tunnel-ka. Kadib waxaa jira isha la isticmaalo marka gateway-ga laftiisu bilaabo wada hadal, ugu dambayntiina tallaabada xigta ee lakabka hoose si loo gaaro saaxiibka.
Calaamadaha ka-qaybgalayaasha sida left iyo right waa heshiisyo labada dhinac ee isku xirka, ma aha isku macne ah gudaha iyo fog. Akhri buugga hagaha hirgelinta dhab ahaan la rakibay ka hor intaadan u malaynayn in fure macneheedu yahay wixii ay alaab kale ula jeedday.
| Job | Typical key | What fails when it is wrong |
|---|---|---|
| Transport endpoint | left, right | No IKE exchange at all |
| Authenticated identity | leftid, rightid | Exchange starts, peer rejects it |
| Protected subnets | leftsubnet, rightsubnet | Tunnel up, traffic not selected |
| Gateway source | leftsourceip, rightsourceip | Only gateway-originated flows fail |
| Underlay next hop | leftnexthop, rightnexthop | Peer unreachable from this host only |
Go'aanka koowaad: waxba ma dhismo
Marka aan wax isdhaafsi ah ka muuqan diiwaannada gabi ahaanba, barta dhammaadka waa tuhmanaha koowaad: cinwaan khaldan, waddo la sifeeyay, ama interface uusan daemon-ku ka dhagaysan. U gudub goobaha aqoonsiga kaliya marka gacan-qaadid muuqato, sababtoo ah aqoonsiga waxaa lagu qiimeeyaa isdhaafsiga gudihiisa, ma aha ka hor. Waddo la sifeeyay iyo cinwaan khaldan ayaa ka muuqda macmiilka si isku mid ah, sidaas darteed hubi dhinaca dhagaysanaya ka hor intaadan wax tafatirin. Xaqiiji in daemon-ku ku xiran yahay interface-ka aad filayso, sababtoo ah adeeg ku dhagaysanaya hal cinwaan wuxuu u eg yahay si sax ah waddo la xannibay.
Cinwaan dadweyne oo lagu arkay tarjumaad ma aha isla waxa aqoonsiga uu saaxiibku caddeeyo. Beddelka cinwaan si uu u waafajiyo waxa qabashada baakadaha ay ku tusayso darafka fog waa sixid caadi ah oo khaldan.
Go'aanka labaad: tunnel-ku wuu sarreeyaa oo taraafikadu way dhimataa
Doorashooyinku waxay go'aamiyaan waxa tunnel-ka soo gala, iyo isku-dhac halkan wuxuu abuuraa isku xir si guul leh u gorgortama halka barnaamijku weli guuldareysto. Dhinaca fog waa inuu ku magacaabo xadkaaga la ilaaliyay xadkiisa fog, oo halkaas ayaa qiyamka rogan soo galaan.
Ka hor intaadan tafatirin akhri labada qaabaynta oo barbar ah. Xadka gudaha ee hal marti waa xadka fog ee kan kale, iyo hal lammaane la beddelay ayaa sharraxaya tunnel aan waxba qaadin. Cidhiidhi lammaanaha ka hor intaadan taaban furayaasha: hal shabakad hoose oo tunnel-ka gudihiisa ah iyo mid dibadda ah ayaa kuu sheegaya in doorashada ama waddooyinku qaladka leeyihiin.
Go'aanka saddexaad: kaliya taraafikada gateway-ga laftiisa ayaa guuldareysta
Taraafikada loo gudbiyo macaamiisha way si fiican u shaqayn kartaa halka codsiga gateway-ga laftiisu bilaabo uu guuldareysto, sababtoo ah qulqulkaas ma laha isha macmiilka ee la dhaxlo. Dejinta isha la doorbiday waxay u jirtaa si sax ah kiiskan, mana aha tarjumaad isha: waxay doorataa cinwaan isha halkii ay dib u qori lahayd.
Barnaamij si cad u xira cinwaan kale wuxuu ka gudbi karaa doorbidka, sidaas darteed xaqiiji isha dhabta ah ee baakadda ka hor intaadan go'aansanin in dejinta la iska indhatiray. Ku qabo interface-ka gateway-ga laftiisa halkii aad ku kalsoonaan lahayd ujeeddada qaabaynta.
Tallaabada xigta waa tilmaan gudaha ah
Tallaabada xigta ee lakabka hoose waxay martidan u sheegtaa sida loo gaaro saaxiibka, dhinaca fogna uma baahna isla qiimahaas. In loola dhaqmo sidii dejinta la wadaago, ama in si adag loo qoro gateway caadi ah, way jabtaa isla marka waddadu beddelato ama waddo labaad soo baxdo.
Hirgelinno qaar waxay halkan bixiyaan qiyam gaar ah. Waxa buugga hagaha u taxay nooca la rakibay waa jawaabta kaliya ee ammaan ah, shaxda waddooyinka gudahana waa caddaynta inuu shaqeeyay. Marka saaxiibka lagu gaari karo magac laakiin aan lagu gaari karin cinwaan, isku-dhacaas ayaa ah natiijada, ma aha faahfaahin la dhaafi lahaa.
Borofaylka ka akhri labada daraf
Doonnada ku rogroganaanta warqadda waa dib-u-eegista ugu dhaqso badan ee jirta: beddel xadadka la ilaaliyay, hay tallaabada xigta ee dhinac kasta iyo aqoonsiga dhinac kasta. Wax kasta oo aan ka badbaadin beddelka waxay u badan tahay in loo qoondeeyay shaqo qaldan.
Kadib tijaabi hal qulqul door kasta: gaaritaanka saaxiibka-saaxiibka, qulqulka macmiilka gudaha iyo codsi ka soo baxa gateway-ga. Saddex tijaabo ayaa kuu sheegaya shaqo kee si khaldan loo qoondeeyay iyada oo aan qaabaynta dib loo furin. Natiijada ku dar tikit-ka goobta aad beddeshay agteeda, sababtoo ah injineerka xiga wuxuu la kulmi doonaa isla borofaylkaas.