Sir la wadaagay ama gelitaanka isticmaalaha: goobtee L2TP/IPsec ayaa guuldarraysatay?
Fure hore loo wadaagay wuxuu caddeeyaa lammaanaha, halka magaca isticmaalaha iyo furaha sirta ee PPP ay caddeeyaan qofka. Koodhka khaladku wuxuu sheegayaa labada lakab midkee jabay.
Hal xafiis ayaa siin kara isla sirta IPsec laptop kasta, halka qof kastaa uu ku galo akoonkiisa gaarka ah, taasina waa sababta «furaha waa sax» iyo «furaha sirta waa sax» ay labaduba run noqon karaan gelitaankuna haddana guuldarraysado. L2TP iyo IPsec waxay xaqiijiyaan dhinacyo kala duwan marxalado kala duwan. Isbarbardhigga labada lakab, iyo koodhka khaladka ee kala sooca, ayaa inta badan tiketadan ka xiraa si ka dhaqso badan beddelka labada qiime mar kale. Marxaladaha lama isweydaarsan karo, fariinta hortaada waxay hore u sheegtay midkee shaqeynaya.
Laba lakab, laba aqoonsi oo kala duwan
Marka hore waxaa shaqeeya xaqiijinta lammaanaha IPsec. Macmiilka iyo albaabku waxay isu caddeeyaan cidda ay yihiin, iyagoo isticmaalaya fure hore loo wadaagay ama shahaado, ka hor inta aan la ilaalin wax xamuul tunnel ah. Isweydaarsiga PPP ee gudaha fadhiga L2TP ayaa ka dib yimaada, halkaasna magacaaga isticmaalaha iyo furaha sirta lagu hubiyo kaydka akoonnada serverka.
Marxaladaha way madax banaan yihiin, sidaas darteed akoon isticmaale oo ansax ah ma badbaadin karo fure IPsec oo khaldan, fure saxnana ma badbaadin karo fure sir ah oo dhacay. Ku qor labadaba si gooni ah tiketka oo ogaanshaha wuxuu inta badan ka soo baxaa sadarka log ee ugu horreeya ee sheegaya marxalad.
| Observed failure | Stage that rejected it | Field to touch |
|---|---|---|
| Security layer error 789 during initial negotiation | IKE and IPsec peer authentication | The pre-shared key or the certificate |
| Error 691, credentials not recognised | PPP user authentication | User name, password, or account policy |
| Tunnel forms, then drops on the first packet | Neither, usually routing or MTU | Address pool and interface configuration |
| Prompt repeats with no error text | Often the client type selection | The connection profile, not the secret |
Sirta la wadaagay waxay caddeeysaa lammaanaha
Fure hore loo wadaagay waa aqoonsi kooxeed oo ay hayaan albaabka iyo macmiil kasta oo ku xirmaya. Wuxuu caddeeyaa in lammaanuhu yaqaan furaha, isna IKE wuxuu ka soo saaraa furayaasha ilaaliya xiriirka. Waxba isweydaarsigaas kama aqoonsadaan qofka kumbuyuutarka ag fadhiya. Taasi waa sababta oo dhan ee gelitaan labaad, heer isticmaale, uu ugu jiro isla tunnelka.
Naqshaddaas waxay leedahay natiijo wax ku ool ah dib u noqoshada. Lumin hal laptop macneheedu waa in sirta loo rogrogo qalab kasta oo isticmaala, haddii aan la geeynayn shahaadooyin, halkaas oo hal qalab laga saari karo iyada oo aan la taaban inta kale. Beddelku waa dadaal maamuleed iyo baaxadda waxyeellada.
Fure lagu qoray profile sidoo kale waa aqoonsiga ugu fudud ee ku daadanaya sawirrada shaashadda iyo sheekaysiga. Ula dhaqan sida qalabka kaabayaasha la wadaago ee aan ahayn fure sir ah oo shaqsi ah, sababtoo ah sidaas ayuu yahay.
Gelitaanku waa kan PPP
Gudaha fadhiga L2TP, PPP waxay ka wada hadashaa xaqiijinta waxayna ka codsataa serverka inuu xaqiijiyo labada qiime ee aad qortay. Windows dhexdiisa waa isla magaca isticmaalaha iyo furaha sirta ee profile-ku codsado, router-kana waa waxa profile-ka PPP tilmaamayo. Waxaa lagu hubiyaa kaydka akoonnada, ee ma aha furaha. Laba qof ayaa wadaagi kara laptop iyo fure oo haddana lagu kala gartaa marxaladan.
Maadaama ay tahay xaqiijinta isticmaalaha, dhammaan siyaasadaha akoonka ee caadiga ah way khusayaan: fure sir ah oo dhacay, akoon xiran, ogolaanshaha wicitaanka, ama magac ay tahay inuu qaato domain. Khaladka 691 wuxuu sheegayaa isku darkaas in la diiday, sidaas darteed akhri diiwaanka xisaabta serverka ka hor inta aanad wax dib u qorin.
U daa khaladka inuu doorto goobta
Khaladka 789 wuxuu magacaabaa lakabka amniga wuxuuna tilmaamayaa marxaladda IPsec. Hubi in furaha hore loo wadaagay labada dhinac uu si sax ah isku beegan yahay, in aqoonsiga lammaanaha ee albaabku filayo uu la mid yahay waxa macmiilku diro, iyo in macmiilku loo habeeyay L2TP/IPsec ee aan nooc kale ahayn.
Khaladka 691 wuxuu magacaabaa aqoonsiyada wuxuuna tilmaamayaa PPP. Hubi xaaladda akoonka iyo qaabka saxda ah ee magaca ka hor inta aanad beddelin sirta, sababtoo ah labadaba hal mar beddelidda waxay baabbi'isaa caddaynta aad akhriyeysey.
Marka tunnelku soo baxo oo gaadiidku wali istaago, gabi ahaanba jooji tafatirka goobaha xaqiijinta. Fiiri barkada cinwaannada, wadada ku noqota subnetka macmiilka iyo MTU: isbarbardhigga labada lakab wuxuu caawiyaa kaliya inta cilladdu ay weli ku dhex jirto iyaga.