Isikhethi esibanzi se-IPsec akusona imvume yazo zonke izinsizakalo

Izinhlangothi ezimbili ziyavumelana ukuvikela yonke inethiwekhi engaphansi, futhi othile ufunda leso sivumelwano njengemvume yokufinyelela yonke insizakalo engaphakathi kwayo. Lowo umbono oyiphutha: isikhethi sisho ukuthi yikuphi ukuxhumana umhubhe ozimisele ukukuthwala, futhi asisho lutho mayelana nokuthi iziphi izinsizakalo inhlangano ezivumelayo. Ipheya lamadivayisi ingaxoxisana ngokusemthethweni ngobubanzi obukhulu bamakheli ngenkathi inqubomgomo yokufinyelela ngaphakathi ivumela izingosi ezimbili, futhi zombili izitatimende zihlala ziyiqiniso ngasikhathi sinye.

Ukufakwa okukhuselwe akuyona igunya

Isikhethi sokuxhumana siyingxenye yesivumelwano somhubhe. Sinciphisa noma siqinisekisa lokho izinhlangothi ezizokubethela phakathi kwazo, futhi isikhethi esibanzi ngokuvamile siyinto elula kakhulu ukuyiphatha lapho izinhlangothi zombili zinemigudu eminingi okufanele iyithwale. Isihlungi sensizakalo singolunye ulawulo endaweni enye endleleni, futhi sinquma ukuthi yini engasetshenziswa ngempela ngemva kokuba iphakethe selixoshiwe. Ukususa isihlungi ukuze ukuhlolwa okukodwa kudlule kuguqula isinqumo senqubomgomo sibe ingozi.

Gcina amarekhodi womabili ehlukene embhalweni wokuklama, ngoba umfundi obona isikhethi kuphela uzocabanga ukuthi kunegunya elingakaze linikezwe. Imigqa emibili kurekhodi loshintsho ivimbela lokho, futhi ithatha isikhathi esincane kunengxabano elandelayo.

Chaza umgudu owodwa kusuka kuzinhlangothi zombili

Bhala umqalisi, ophendulayo, umthombo kanye nendawo eya kuyo njengoba kuvezwe, iphrothokholi kanye nazo zombili izingosi. Bese uphendula uhlamvu ngalunye lwalawo magama ngasohlangothini olunye, ngoba iposi lomthombo lesikhashana lekhasimende liba iposi lendawo okwaya kuyo yempendulo futhi inethiwekhi ekude iba ngeyendawo. Ukumiswa okukopishwe kusuka kolunye uhlangothi kuya kolunye ngaphandle kwalokho kuphenduka kuyisizathu sokuthi izihlungi zigcine zivumela ngqo isiqondiso esingalungile. Bhala ithebula kanye bese wakha zombili izihlungi kusuka kulo.

Vumelana ngemodeli yokukhetha ngaphambi kokukopisha noma yini, ngoba ukuklama okusekelwe kunqubomgomo nokuklama okusekelwe emizileni kuveza inhloso efanayo ngezinto ezihlukene. Bhala igama lemodeli eceleni komgudu, kungenjalo unjiniyela olandelayo uzochitha intambama ehambisa izinto ezingakaze ziqhathaniswe.

Thola isihlungi esisebenza ngempela

Ku-ASA, isihlungi se-VPN i-ACL exhunywe kunqubomgomo yeqembu futhi isetshenziswa ekuxhumaneni ngemva kokuxoshwa nangaphambi kokubethelwa. Idokhumenti ye-Cisco yenqubomgomo yeqembu iphinda ichaze ifa, kuhlanganise nenani lezinga lomsebenzisi elithatha isikhundla senani lenqubomgomo yeqembu. Ngakho i-ACL oyihlolile kungenzeka ukuthi akuyona i-ACL elawula isikhathi esiseduze nawe. Kuyafana ngento yomsebenzisi, engadlula iqembu ngaphandle kokushiya ubufakazi obuningi obonakalayo.

Hlola isikhathi esisebenza esikhundleni sento okhumbula ukuthi uyishintshile, futhi qaphela ukuthi iyiphi into yenqubomgomo eyinikezelayo. Leso sinyathelo esisodwa sixazulula inani elimangazayo lemibiko ethi „isihlungi silungile kodwa asisebenzi“.

Isiqondiso, izingosi kanye necala eliphambene

Umkhuba obhaliwe ubeka inethiwekhi ekude, noma amakheli ekhimbile ekude abelwe, endaweni yomthombo futhi inethiwekhi yendawo endaweni eya kuyo, izimpendulo zivezwa ngokushintsha izindawo zamakheli. Imithetho yamaposi ihla phezu kwalowo mkhuba futhi ifanele ukunakekelwa okungaphezu kwamakheli.

Imodeli ebhaliwe ingavumela umthetho weposi lendawo eya kuyo ukuthi uthinte ukuqalwa okuphambene okusebenzisa lelo posi lomthombo, okusho ukuthi isihlungi asisoze sibe umthetho wesicelo esiqondile esisodwa kuphela onemipendulo engenabungozi. Cabanga ngokucacile kuzo zombili iziqondiso zokuqalwa, futhi ufake necala ohlose ukuliphika.

Idokhumenti efanayo ikhawulela isihlungi ekuxhumaneni kokuqala, ngakho akusona ukuphoqelela okujwayelekile kwayo yonke imigudu yesibili evulwa uhlelo lokusebenza oluhloliwe. Lapho inqubomgomo ephelele idinga lokho kufakwa, kufanele kube emngceleni ohlukile hhayi ku-ACL enwetshiwe ngaphezu kwenhloso yayo.

Hlola amacala amathathu ngaphambi kokuthi kuphelile

Yamukela umgudu ohlosiwe, nqaba insizakalo enqubomgomo eyivimbelayo, futhi uzilolonge icala lesiqondiso esiphambene ocashengile. Zisebenzise ngaphansi kohlelo olugunyaziwe ngobunikazi obufanayo nezinto zokukhetha ozozisebenzisa. Ukuhlolwa okubonisa kuphela ukuthi insizakalo evunyelwe iyasebenza kubonisa umhubhe, hhayi inqubomgomo.

Gcina ukufakwa okuvunyelwene ngakho kanye nesinqumo sokufinyelela njengamarekhodi amabili, ngoba ukuchaza ukuthi i-VPN ivumela ini kudinga kokubili.