Waxa ay tahay in la isku waafajiyo ka hor inta MX uu dhammeeyo IPsec
Commit-ka aqbala qaabeynta wuxuu caddeeyaa parser-ka, ma aha wadada. Shan qaybood oo tuple-ka platform-ka ah ayaa go'aamiya haddii adeeggu runtii shaqeeyo.
Qaabeynta si nadiif ah ayaa loo commit-gareeyaa, interface-yadu way soo baxaan, haddana tunnel-ku wuu diidaa inuu dhismayo. Ma jiro sadar ku qoran log-ka oo sheegaya in platform-ku tani ma karo; kaliya ma sameeyo. Junos, IPsec waa adeeg ay kaliya isku-dar gaar ah oo chassis, hardware adeeg ama waddada software, iyo sii-deyn ah ay fulin karaan, bogga feature-kuna wuxuu qeexayaa awoodda software-ka, ma aha qalabkaaga. Tuple-ka waa in qayb qayb loo hubiyaa, sababtoo ah natiijada commit-ku waxay caddeyneysaa parser-ka oo keliya.
Xaggee baakaddu runtii tagtaa
Taraafikada loo doortay IPsec waa in ay gaadhaan qaybta sirteeda. Platform-yada leh module adeeg, qulqulka la doortay waxaa loo leexiyaa module-kaas ka dibna wuxuu ku soo noqdaa waddada gudbinta. Haddii module-ku maqan yahay, awooddiisu yar tahay ama interface-ka lama xidhin, qaabeyntu way jirtaa mana jiro baakad la processing-gareeyo. Waxba ku jira soo-saarka commit-ka ma kala soocaan xaaladdaas mid caafimaad qabta.
Hirgelinta software-ka lagu martigeliyo waxay shaqada ku hayaan routing engine ama hardware inline, xaddidaadda kheyraadka aad bay u kala duwan yihiin. Tunnel-ka qaabeynta ka muuqda kuma sheegayo waddo noocee ah ayaa runtii qaadaysa.
Shanta qaybood ee tuple-ka
Qor isku-darka ka hor inta aadan akhrin talo kasta, sababtoo ah qayb kaliya waxay burin kartaa kuwa kale. Lambarka qaybta oo saddex sano ka hor taageertay adeeg waxba kama sheegayo kaadhka iyo sii-deynta chassis-kan. Akhri safafka hoose sida liiska hubinta, ka dib buuxi qiyamka qaabeyntu ku tusin karin.
| Part | What to record | Where it fails quietly |
|---|---|---|
| Chassis and service hardware | Model plus the installed PIC, MPC or MIC | Card absent or not bound to the interface |
| Implementation | Services card, inline or software path | Configuration accepted, no processing |
| Release | Exact Junos version | The feature arrives in a later build |
| Address families and mode | Outer and inner family, tunnel mode, peer authentication | Half the traffic silently unprotected |
| Entitlement and capacity | Licence state and the workload profile | Ceiling reached only under load |
Qoysaska cinwaanka iyo culayska shaqada waa labada saf ee dadku dhaafaan, labaduba way yar yihiin hubinta wayna qaali yihiin haddii dambe la ogaado. Akhri tuple-ka qalabka, ma aha spreadsheet, sababtoo ah qaabeyntu waxay soo sheegtaa wixii aad codsatay, ma aha wixii la rakibay. Laba amar ayaa qaada inta badan: show chassis hardware wuxuu magacaabaa kaadhka runtii la geliyay, show version wuxuu bixiyaa sii-deynta saxda ah. Midkoodna kama xirna haddii qaabeyntu sax tahay, taasi waa qodobka.
show chassis hardware
show versionIrmaanada sii-deynta waa irmaano dhab ah
Faahfaahinta sii-deynta ma aha mid rasmi ah. Guudmarka IPsec ee Juniper waxay taariikhaysaa taageerada AES-GCM ee kaadhadhka adeegga badan Junos 17.3R1, iyada oo qaabka FIPS uu ka bilaabmo 17.4R1. Sidaas darteed isla feature-ku wuxuu leeyahay laba xad oo ku xiran sida platform-ka loo shaqeeyo, qaabka aad ku shaqeysaana wuxuu go'aamiyaa midka khuseeya. Hubi qaabka ka hor inta aadan hubin liiska feature-yada.
Akhri qoraallada sii-deynta ee si sax ah loo rakibay version-ka, ma aha kan ugu cusub ee la diiwaangeliyay. Awood ku timid build dambe lama malayn karo in ay ku jirto mid hore, hadalna loo qoray hal kaadh kama gudbo mid kale. Koobi sadarka qoraalka sii-deynta geli diiwaanka naqshadeynta si sheegashadu ay la timaado ishaheeda, sababtoo ah bayaanka taageerada ee loo qoray qoys platform ma aha bayaan ku saabsan qaabka aad ku shaqeysa ama kaadhka aad haysato.
Awooddu waa culays shaqo, ma aha cinwaan
Tirada dhex-marista ee cinwaanka oo aan lahayn shuruudaha cabbirkeeda waa tiro suuq-geyn. Baakadaha yaryar aad bay uga qaalisan yihiin bit kasta marka loo eego kuwa waaweyn, isku-xirnaanta isku mar ah waxay cunaa xusuusta, adeeg kasta oo kale oo kaadhka la wadaagana wuxuu dhimaa inta hadhay.
Qiyaas taraafikada aad filanayso: cabbirrada baakadaha caadiga ah iyo kuwa ugu xun, tirada asaagga, iyo haddii kaadhkaas uu sidoo kale dhammeeyo NAT ama adeeg kale. Ka dib u dhaaf meel bannaan maalinta waddo ay qaadan doonto culays ka badan intii naqshadeyntu malaynaysay. Qorshaha awoodda ee u malaynaya hardware madhan waa hamu, ma aha qorshe. Haddii tiradaasi muhiim u tahay kiiska ganacsi, hal mar ku cabbir qalabka iyada oo culays matala ah ku jiro oo cabbirkaas la kaydi naqshadeynta.
Qor diiwaanka ka hor naqshadeynta
Awood kasta oo naqshadeyntu u baahan tahay, hayso tixraaca platform-ka, dukumeentiga u dhigma sii-deynta iyo xaddidaad kasta oo aan la xallin hal meel. Meesha saf tuple-ka ah ku guuldareysto, isbarbardhig irmaan kale oo la ansixiyay halkii aad ka dib u dhisi lahayd naqshadeynta liis iib ah oo duugoobay. Diiwaanku waa in uu sheegaa nidaamka saxda ah ee shaqada qabta iyo xadka uu ku dhex jiro.
Markaas oo keliya hubi asaagga, sababtoo ah iswaafajinta borotokoolka ee cidhka fog waa su'aasha xigta oo waligeed ma beddelo taageerada maxalliga ah. Asaagga ku heshiiya soo-jeedinta weli ma caawin karo chassis aan waligiis sirteyn baakad.