Check Point VSX VPN: ukukhetha isixhumanisi noma ukungafani kozakwethu?
Bhala ikheli langaphandle, ubunikazi be-IKE, ukuhumusha kanye nesethi yezici ezisekelwayo ngaphambi kokuthinta ukukhethwa kwesixhumanisi kugesi ye-Check Point VSX.
Izinguquko ezimbili ezihlukene zikhiqiza uphawu olufanayo lapho umhubhe we-Check Point wendawo-kuya-endaweni uyeka ukuphakama: uzakwethu ubona ikheli langaphandle elihlukile, noma wenqaba ubunikazi be-IKE abuthola manje. Ekubanjweni okuthathwe ohlangothini olulodwa kokubili kubukeka kufana. Ukunquma ukuthi yisiphi isimo osinakho kudinga izivivinyo ezintathu, futhi akukho nesisodwa sazo okuyiphaneli yokukhetha isixhumanisi.
Uma wehlula ukulandelana, ulungisa ukukhethwa komthombo ukuze ulungise ukungafani kobunikazi. Yileyo ndlela umhubhe ofanayo olungiswa kabili futhi uhlakazeke futhi ngemva koshintsho lomzila olulandela.
Imibandela emithathu ehlukanisa izimo ezimbili
Umbundu wokuqala: ingabe iphuzu lokugcina elilungiselelwe likazakwethu lihambisana nekheli elifikayo ngempela? Uma amaphakethe efika egesi ekude evela ekhelini engalihlanganisi nento yakho kazakwethu, izingxoxo ziyehluleka ngaphambi kokuba noma yibuphi ubunikazi bushintshwe. Umbundu wesibili: ingabe ubunikazi be-IKE esiphakamisweni buhambisana nenani elilindelwe uzakwethu? Lokho ukuqinisekisa, hhayi ukuthutha. Umbundu wesithathu: ingabe inketho ofuna ukuyishintsha iyasekelwa yilesi simiso esibonakalayo kule ntulelo? Akukho kulungiselelwa okubonakalayo okuphendula le mibuzo.
Uma umbandela wokuqala wehluleka, unenkinga yomzila noma yokuhumusha. Uma owesibili wehluleka, unenkinga yesivumelwano kuzakwethu. Uma owesithathu ungaziwa, yeka ukuhlela.
Qala ngokwakha irekhodi likazakwethu wangaphandle
Bhala isimiso esibonakalayo, intulelo yesofthiwe kanye nezinga lokubuyekeza elifakiwe ngaphambi kokuthinta noma yini. Bese ubhala amaphuzu okuxhumana angaphandle, umzila obheke kuzakwethu okude, amakheli omthombo alindelekile ngaphambi nangemva kwe-NAT, kanye nephuzu lokugcina elilungiselelwe likazakwethu okude.
Gcina iziqalo ezivikelwe zangaphakathi engxenyeni ehlukile yalelo rekhodi. Ukushintsha umthombo wangaphandle nokushintsha ikheli le-LAN elivikelwe kuyimisebenzi emibili ehlukene ehlala ngengozi kumgomo owodwa.
Engeza isiqondiso kukho konke ukubanjwa okugcina. Izingxoxo eziqaliswe endaweni kanye nempendulo kuzakwethu okude zingakhetha ngendlela ehlukile, ngakho ukubanjwa okungenalo ilebula ubufakazi obubuthakathaka. Lebula ifayela ngesimiso esibonakalayo nangomqalisi.
Funda ukuthi ukukhethwa kwesixhumanisi kuhlukanisa ini ngempela
Umhlahlandlela we-Check Point wokukhethwa kwesixhumanisi ku-R81.20 uhlukanisa izinto ezintathu abantu abazihlanganisa zibe yinye: indlela uzakwethu okude axazulula ngayo ikheli legesi, ukuthi imuphi umzila othwala ithrafikhi ephumayo, nokuthi iyiphi i-IP yomthombo esetshenziswayo. Ngayinye iphendula umbuzo ohlukile. Akukho nesisodwa sazo esishintsha ubunikazi obuqinisekiswa uzakwethu.
Lokho kuhlukanisa kuchaza ukuthi kungani ushintsho lomzila lungashintsha ikheli langaphandle elibonakalayo ngaphandle kokuthinta ubunikazi be-IKE, nokuthi kungani ushintsho lobunikazi lungaphula umhubhe ozindlela zawo ziphelele.
I-RFC 7296 idweba umkhawulo ofanayo kuyo i-IKE uqobo: umthwalo wokukhombisa awuyona ikheli lokuthutha. Abakhiqizi basebenzisa lokho kuhlukanisa, abakuchazi kabusha.
Nquma ngobufakazi, hhayi ngephaneli yezilungiselelo
Uma uzakwethu ebika ubunikazi obungaziwa noma obungahambisani, lungisa into kazakwethu noma ukulungiselelwa kobunikazi, hhayi ukukhethwa komthombo. Uma uzakwethu engabiki lutho futhi ukubanjwa kwakho kubonisa amaphakethe ephuma ekhelini elingalindelekile, qala ngokulungisa umzila noma ukuhumusha. Uma kokubili kubukeka kulungile kodwa umhubhe uhluleka, bamba ohlangothini olukude bese uqhathanisa lokho okwamukelayo. Kuphela lapho ikheli nobunikazi kuvumelana khona kanti indlela iseyiphutha lapho inketho yokukhetha isixhumanisi iba umgadli.
Ngaphambi kokuhlela leyo nketho ku-VSX, thola umhlahlandlela wezici ezisekelwayo zentulelo efanele noma isitatimende esicacile somkhiqizi mayelana nomongo wesimiso esibonakalayo. Umbiko wakudala wokuthi isici besingatholakali uwumlando, hhayi ukuvinjelwa kwamanje, futhi iphaneli yezilungiselelo ayisositatimende sokusekelwa.
Vumelanisa zombili iziphetho futhi gcina irekhodi
Uma usunesakhiwo esisekelwayo, buyekeza ndawonye ukufinyeleleka kwangaphandle, ukulungiselelwa kwephuzu lokugcina likazakwethu kanye nesivumelwano sobunikazi, njengesivumelwano esisodwa. Bese uhlela ukwamukelwa kwezimo ezintathu: ukuxhumana kokuqala, ukuxhumana okuqalwa uhlangothi olukude, kanye nokwehluleka okulindele uma indlela iphuka.
Gcina amakheli angaphandle abonwayo eduze nomongo wesimiso esibonakalayo esisebenzayo. Khona-ke ushintsho lomzila olulandela luzoqathanisa nesivumelwano esibhaliwe esikhundleni senkumbulo yothile ngenani elizenzakalelayo.