Imojuli ye-ASA FirePOWER ayinayo indlela yokuphatha eya ku-FMC

I-FMC ikhombisa imojuli njengengafinyeleleki, ukubhalisa kuhlala kulindile, kanti i-ping evela ngaphakathi kwe-ASA isebenza ngokuphelele. Ekusetshenzisweni okukhona kwe-ASA FirePOWER leyo nhlanganisela ijwayelekile. Imojuli inekheli layo lokuphatha, isango layo elizenzakalelayo kanye nezinqumo zayo zomzila, futhi ukwabelana ngoxhumano lokuphatha olubonakalayo ne-ASA kwezinye izinkundla akukuhlanganisi lokho kube yisitaki esisodwa senethiwekhi. Amadivayisi amabili aphendula ngemibono emibili ehlukile ocingweni olulodwa.

Okulandelayo kusebenza kumamojuli asevele esemsebenzini. Khomba imodeli ye-chassis, uhlobo lwemojuli kanye nenguqulo yesofthiwe esekelwayo ngaphambi kokusebenzisa noma yimuphi umdwebo wezimbobo ovela kumhlahlandlela.

Dweba imojuli njengesibungu esihlukile

Qala umdwebo nge-IP yokuphatha yemojuli, imaski kanye nesango elizenzakalelayo, i-VLAN eqhuba ngempela lolo xhumano, kanye nekheli le-FMC okufanele kufinyelelwe kulo. Bese kuthi kubhokisi elihlukile, bhala amakheli e-interface ye-ASA kanye nethebula layo egcwele yomzila. Uma amabhokisi amabili egcina ngokwabelana ngesubnet enamakheli anabanikazi abahlukile, uthole ingxenye ethakazelisayo yenkinga.

Umhlahlandlela wemojuli ye-ASA FirePOWER ukhombisa ukuthi izakhiwo zezimbobo ziyahluka kanjani phakathi kwezinkundla, kuhlanganise nezintambo zokuphatha ezabiwe lapho i-ASA nemojuli zineamakheli ahlukile esigabeni esisodwa. Lowo mdwebo wehadiwe uyisifakelo somklamo, hhayi umbhalo waphansi.

Thola lapho indlela yokubuya igqashuka khona

Thatha isakhiwo esihambiswa ngomzila ngokusebenzisa umongo. Imojuli ithumela ithrafikhi eqonde ku-FMC kumongo we-Layer 3, umongo udlulisela indawo yokuphatha ekude iye ku-interface engaphakathi ye-ASA, futhi i-VPN yesayithi iyisa ngaphesheya. Isayithi elikude bese lidinga umzila wokubuya oya kusubnet yokuphatha yemojuli. Isinyathelo ngasinye kulolo chungechunge singaba silungile kuyilapho lowo mzila wokugcina ungekho, yingakho ukwehluleka kuvame ukubonakala njengethuneli eliphukile.

Funda umbono we-ASA uqobo ngaphambi kokushintsha noma yini:

show interface ip brief
show route
show running-config interface

Umyalo wesithathu ubalulekile ngoba ikheli le-interface olikhohliwe yilona elenza indlela yokubuya ihlale kudivayisi engalungile.

Hlola ukuthi i-ASA ibona ini njengokuxhunyiwe

Uma i-ASA inekheli kusubnet yokuphatha yemojuli, umzila wayo oxhunyiwe unomnikazi waleso siqalo. Umzila oqinile obheke emongweni awususi ubunikazi bomzila oxhunyiwe, ngakho iphakethe libuyela ku-ASA futhi lima lapho. Ukubhalisa bese kwehluleka endaweni engenaso isihlobo nokufakazela ubuqiniso.

Ungaphethi ngokuthi ukuhlolwa okuthile kokulwa nomkhohlisi kuwisile iphakethe ngaphandle uma unezibonelo zedivayisi uqobo phambi kwakho. Kunalokho qhathanisa i-interface yokungena, umzila wendawo ekhethiwe kanye nomngcele wokudlulisa osekelwayo phakathi kokuphatha nedatha kuleyo nkundla. Lezi zinto ezintathu zivame ukudalula ukungqubuzana kwesakhiwo ngaphambi kokuba othile aqale ukusetha kabusha izikhiye zokubhalisa.

Khetha ukulungiswa okugcina imojuli ixhunyiwe

Ukususa ikheli le-ASA kuleso sigaba nokukhubaza ngokomzimba imbobo eyabiwe akuyona izenzo ezilinganayo. Ezinkundleni lapho imojuli ihamba ngoxhumano olufanayo lokuphatha olubonakalayo, ukukhubaza imbobo kususa isixhumanisi esisodwa semojuli — uzobe uguqule inkinga yomzila yaba idivayisi efile. Khetha ushintsho olwaba kabusha ubunikazi bomzila wokuphatha, futhi lulungiselele kukhona umnikazi wenethiwekhi.

Enye indlela esekelwayo ukunikeza indlela yokuphatha ye-ASA isigaba sayo ukuze isubnet yokuphatha yemojuli ibe nomnikazi oyedwa. Lokho kubiza ikheli elilodwa kanye nencwadi encane, futhi kususa ukungaqondakali unomphela. Noma yimuphi umzila owukhethayo, ngemva kwalokho qinisekisa ukuthi imojuli isengafinyelela kokubili i-FMC kanye nemithombo yayo ye-DNS noma i-NTP.

Bhalisa kuphela uma indlela isivumelana

Uma indlela yokubuya isihlanzekile, hlela ukuxhumana kokuphatha kanye nezinga lokubhalisa kusukela kumhlahlandlela wenguqulo efanele we-FMC nemojuli. Gcina izimfihlo zokubhalisa ngaphandle kwamanothi namathikithi abiwe, futhi melana nesilingo sokubhalisa kabusha njengesinyathelo sokuxilonga: isikhiye esisha endleleni ephukile siveza kuphela ukwehluleka okufanayo ngesitembu sesikhathi esisha.

Yamukela indlela evela esitakini sokuphatha semojuli uqobo hhayi kusuka ku-ping eqalwa yi-ASA, ngoba umthombo wokuhlolwa yikho kanye okusolwayo. Rekhoda isinyathelo esilandelayo semojuli, ukukhetha kwe-VPN kwe-ASA kanye nomzila wempendulo we-FMC, futhi gcina indlela ezimele yokubuyisela kuzo zombili izindima zokuphatha. Lowo mbhalo yiwo ohlukanisa ukuthutha okulungisiwe nokubhalisa okuphumelelayo.

Uma imojuli ivele ekugcineni ku-FMC, phinda usebenzise imiyalo emithathu efanayo futhi gcina okukhiphayo eduze komdwebo. Umuntu olandelayo ozothinta leso sigaba sokuphatha uzodinga ngqo lokho kuqhathanisa.