Umuphi umthetho we-ASA obona ithrafikhi ngemuva kokuba i-VPN iyikhiphile ukubethela

Isiphakamiso sokuqala okufanele usilahle ukuthi i-ACL yokubethela iyinqubomgomo yokufinyelela. Akunjalo. Ku-Cisco ASA, lolo hlu lwaphendula umbuzo owodwa omncane: yimaphi amaphakethe afanele ukuvikelwa, futhi leyo mpendulo ayisho lutho mayelana nokuthi iphakethe elikhiphiwe ukubethela lingafinyelela iseva engemuva kwesivikelo somlilo. Ukufinyelela kunqunywa kamuva, ngenqubomgomo yesixhumi, ngesihlungi senqubomgomo yeqembu, noma ngakho kokubili, kuye ngokuthi umhubhe wakhiwe kanjani.

I-ACL yokubethela iphendula umbuzo ohlukile

I-ACL yokubethela uhlu lokufanisa. Itshela umhubhe ukuthi yini okufanele ibethelwe phakathi kwezigaba ezimbili; iphakethe elingafanisi nalo alivikelwa nje. Ukulwandisa kushintsha ububanzi bokuvikelwa futhi akukho okunye.

Yingakho ukwengeza isubneti lapho kungase kukhuphule umhubhe kuyilapho uhlelo lokusebenza lwangempela lusahluleka. Umhubhe uphakeme ngoba manje kunokufana. Uhlelo lusahluleka ngoba akukho lutho kulolo hlu oluvumela noma yini. Imibuzo emibili ehlukene, amahlu amabili ahlukene.

Yini okushiwo ukulungiselelwa kokudlula empeleni kuyidlulayo

sysopt connection permit-vpn ivumela ithrafikhi evikelwe ukuthi idlule ukuhlolwa kwe-ACL yesixhumi obekuzosebenza ohlangothini olungenayo. Kuwukusiza ekusetshenzisweni kwe-VPN, futhi kungokomhlaba wonke. Akuthinti inqubomgomo yeqembu futhi akuthinti isihlungi sokugunyaza somsebenzisi ngamunye.

Funda inani langempela esikhundleni sokucabanga: i-show running-config all sysopt iphrinta ukulungiselelwa ngisho nalapho kungakaze kulungiselelwe ngokusobala, futhi ukudideka okuningi kuqala khona.

Njengoba ukulungiselelwa kungokomhlaba wonke, ukukuhlola njengokuhlola okusheshayo kusubneti eyodwa ehlulekayo kuwukuhwebelana okubi. Wonke umhubhe osele kuleso sivikelo somlilo wabelana ngomphumela. Kugcine ekushintsheni okunomqondo okunohlelo lokuhlehla.

Funda isihlungi endleleni yokukhipha ukubethela

I-vpn-filter ye-LAN-to-LAN ibhalwa ngokombono womhubhe, hhayi owesixhumi. Inethiwekhi ekude iba sendaweni yomthombo kanti inethiwekhi yasendaweni iba sendaweni yendawo okuyiwa kuyo, ngoba yileyo indlela iphakethe elibonakala ngayo ngemuva kokukhipha ukubethela. Leso sihlungi sibuye sihlolwe futhi endleleni ephambene ngaphambi kokubethela, izindima zamakheli zihlanekezelwe.

Imibandela yezimbobo zokungena ifanele ukunakekelwa okukhulu kune-ACL yesixhumi eyakopishiwe ngenxa yaleso sizathu. Umthetho ovumela imbobo eyodwa yendawo okuyiwa kuyo ungaba nomthelela ongahlosiwe endleleni ephambene, lapho ukuxhumana okusha kusebenzisa leyo mbobo njengomthombo wakho. Bhala ukuthi yiluphi uhlangothi olungaqala, yiluphi usizo lwangempela, noluphi uhlangothi olumelene nalo okufanele luhlale luvaliwe ngaphambi kokuba wakhe uhlu.

Qinisekisa ukuthi yisiphi isihlungi esixhunywe ngempela: i-show running-config group-policy ne-show vpn-sessiondb detail l2l ndawonye zikutshela ukuthi isikhathi sizuze ini njengefa. Ukuhlela i-ACL okungekho nqubomgomo ebhekisela kuyo akushintshi lutho.

Ungasebenzisi into eyodwa ye-ACL emisebenzini emibili

I-access-group yesixhumi ne-vpn-filter zibonakala ziyinto efanayo futhi zihlolwa ezindaweni ezihlukene ngokuma kwamakheli okuhlukile. Ukwabela uhlu olulodwa kukho kokubili kumema ushintsho olulungisa umhubhe futhi luxege isixhumi somzimba ngokuthula.

Zigcine zehlukene, ziqambe ngokomsebenzi wazo, futhi uvumele umehluko wendlela ubonakale emagameni.

Qinisekisa ngezixhumo ezintsha, kuzo zombili izinhlangothi

Ngemuva koshintsho oluhleliwe, vula ukuxhumana okusha okufanele kuvunyelwe nokuxhumana okusha okufanele kunqatshwe, bese ubhala amakheli, indlela nokufaniswa kwenqubomgomo kanye nomphumela. Isikhathi esivele sikhona asifakazeli lutho mayelana nokuhlungwa kwezixhumo ezintsha, ngoba sase sivunyelwe ngaphansi kwemithetho emidala.

Cabangela nokuhlola. Imibhalo yomthengisi iphawula ukuthi isihlungi se-VPN sihlola ukuxhumana kokuqala hhayi ukuxhumana ngakunye kwesibili okuvulwa yinjini yokuhlola, ngakho itshaneli yokulawula nokugeleza kwayo kwemidiya kungathola ukuphathwa okuhlukile. Uma uhlelo lwazi iphrothokholi, hlola ukugeleza kwangempela esikhundleni sokuhlolwa kwembobo eyodwa.

Umhubhe okwenza kube nokusebenziseka ngemuva kokudlula okubanzi usho ukuthi umkhawulo wasuswa, hhayi ukuthi wagcwaliseka. Umphumela ofanele ugcinwe iyindawo yokuphoqelela enegama ongakhomba kuyo ekubuyekezweni okulandelayo.