Amaphakethe e-IKE aphindayo: thola inguquko elahlekile
Isicelo se-IKE esiphindayo siyisigameko sesikhathi, hhayi ukuxilongwa. Yakha uchungechunge olulodwa lobufakazi kusukela kumqalisi kuya empendulweni, ngezikhombisi zenguqulo ezifanele.
Ilogi ikhombisa isicelo se-IKE esifanayo kabili, othile ukhomba kuxhumano lweselula, futhi ithikithi livalwa ngokuqagela. Lokho kuqagela yinkolelo-mbumbulu: iphakethe eliphindayo liwukubona mayelana nokushintshana okukodwa, hhayi ukuxilongwa koxhumano. Ukuthumela kabusha kuwukuziphatha okuvamile okunemithetho yako, futhi kubonakala ezindleleni ezinempilo noma nini lapho impendulo inensika. Landela impendulo ngaphambi kokusola isixhumanisi.
Inkolelo-mbumbulu: isicelo esiphindayo sifakazela ukulahleka kuxhumano olulodwa
Izinto ezimbili ezihlukene zenza ikhophi, futhi akukho neyodwa ekhomba umsoli. Umceli angaphinda isicelo ngoba akatholanga mpendulo, noma indawo yokubamba ingakhombisa iphakethe elifanayo kabili ngenxa yalapho lixhunywe khona kusitaki. Ithephu elibona okungena nokuphuma kusibungu esifanayo lizobhala iphakethe elilodwa njengamabili ngokujabula, futhi umqondisi ofunda lelo logi akanayo indlela yokuhlukanisa ngaphandle kwezikhombisi zokushintshana. Thatha ikhophi njengesigameko sesikhathi kuze kube yilapho ungasho ukuthi iyiphi kulezi ezimbili oyiphethe.
Izixhumanisi ezimbili zeselula zenza ukudideka kube kubi kakhulu esikhundleni sokuba kube ngcono. Umugqa owodwa welogi ubiza isixhumanisi esisodwa, kuyilapho impendulo ingase iphume ngenye, ngakho isixhumanisi esisemlayezweni sichaza lapho iphakethe labonakala khona hhayi ukuma kwengxoxo. Yikho futhi umbuzo wokuqala kungukuthi yikuphi ukushintshana okubhekile, hhayi ukuthi yimuphi uxhumano olonakele.
Ukuthumela kabusha kukutshela ini ngempela
Ku-IKEv2, ukuthumela kabusha kusebenza kanje: umceli uphinda isicelo lapho kungekho mpendulo efikile, futhi umphenduli angathumela kabusha impendulo yakhe egciniwe esikhundleni sokubala entsha. Izikhombisi zemilayezo zingezedwa yilokho kushintshana, futhi yikho okwenza isicelo esiphindayo esinezikhombisi ezifanayo sibonakale njengomsebenzi wephrothokholi hhayi umzamo omusha. Umzamo wokuqala uvame ukudinga okungaphezu kwekheli lomthombo noma i-SPI yomqalisi ukuze kuhlotshaniswe, ngakho irekhodi lokushintshana leplathifomu ngokwalo lingcono kunohlu lwamaphakethe. I-IKEv1 ilandela imithetho ehlukile ngezikhombisi ezihlukile, futhi isexwayiso somhlinzeki mayelana nekhophi yephakethe lokuqala asisho into efanayo kuzo zonke izinguqulo.
Ngakho isitembu sesikhathi sokuthumela kabusha sithi isikhathi siphelile. Asisho ukuthi yikuphi ukweqa okwakunensika, futhi asisho neze ukuthi umqondisi unecala. Lezi ziyizitatimende ezihlukene, futhi ngisho eyokugcina ewusizo ethikithini.
Umphumela ongokoqobo uwukuthi urekhode ukushintshana ngaphambi kokufinyelela esiphethweni. Bhala ikheli lokwamukela lendawo, umzila wempendulo okhethwe inqubomgomo, i-tuple yozakwethu kanye nezikhombisi zokushintshana endaweni eyodwa, ngoba ngayinye yazo iphendula umbuzo ohlukile lapho irekhodi lifundwa kamuva.
Amaphuzu amane okubuka njengochungechunge olulodwa
Cabanga ngokushintshana njengezixhumanisi ezine zochungechunge hhayi izindawo ezine ezihlukene zokubuka. Isixhumanisi sigcina ubufakazi noma sihlale singaziwa, futhi uchungechunge lunolwazi olulingana nesixhumanisi salo esibuthakathaka kunazo zonke esirekhodiwe. Ithebula elingezansi liwuhlu: yini indawo ngayinye engayiqinisekisa nokuthi yini eyishiya ingathintwanga.
| Indawo | Ubufakazi engabunikeza | Okushiya kuvulekile |
|---|---|---|
| Umqalisi uyathumela | Isicelo sashiya lesi sibungu | Ngabe safika kuzakwethu |
| Umphenduli uyamukela | Isicelo safika | Ngabe kwenziwe impendulo |
| Umphenduli uyathumela | Impendulo yashiya isango | Ngabe yalandela umzila obekuhloswe wona |
| Umqalisi uyamukela | Ukushintshana kwaqedwa | Ngabe inqubomgomo yawamukela umphumela |
Gcwalisa uchungechunge kuphela lapho unokufinyelela khona, futhi umake okusele njengokungaziwa esikhundleni sokukuqagela. Ihuku elirekhoda amaphakethe kumshini owodwa alisho lutho mayelana nalokho okwatholwa umshini okude, futhi umugqa welogi othi isicelo sabonwa akabona ubufakazi bokuthi impendulo yake yaphuma. Izikhala eziqotho ziwusizo ukwedlula irekhodi elibonakala liphelele elakhiwe ngezinto eziqageliwe.
Thola inguquko yokuqala elahlekile
Hamba uchungechunge kusukela kumqalisi ukuya ngaphandle futhi ume esixhumanisini sokuqala esingenabo ubufakazi. Uma isango lingalokothi lilibhale isicelo, iphutha lisezindleni ezingaphambi kwaso. Lapho isango libhala isicelo esifanayo kaninginingi kuyilapho iklayenti lingalokothi libhale impendulo, uhlangothi lokubuya luyasolwa: ikheli lomthombo, ukuhumusha kanye nokuhlunga kumngcele ngamunye oyilawulayo. Uma impendulo ifika futhi iklayenti lingasaqhubeki, umbuzo usuwushiyile ukuthutha futhi usuwuyinqubomgomo noma isimo.
Gcina uzakwethu nephrothokholi kungaguquki ngenkathi uqhathanisa, futhi khumbula ukuthi ukubambezeleka, ukulahleka, inqubomgomo kanye nesimo ngakunye kukhiqiza umugqa wesikhathi ohlukile. Inethiwekhi yeselula ayisona ngokuzenzakalela imbangela, futhi ulayini ogxilile awuthembekile ngokuzenzakalela ngokwanele kuzo zonke izidingo. Thwebula izinhlangothi zombili ngenkathi ukushintshana kusaphila:
tcpdump -ni any -vv 'udp port 500 or udp port 4500'Lapho ukufinyelela kuphela ngaphambi komkhawulo okude, irekhodi lisasiza uma lisho lapho liphela khona. Ukuthwebula kumqalisi kuphela kungakhombisa isicelo esiphumayo kanye nempendulo engafiki, okunciphisa iphutha kukho konke okulandela lelo huku ngaphandle kokuzenza sengathi uyazi ukuthi yikuphi ukweqa okukwehlisile. Maka izixhumanisi ezikude njengezingaziwa futhi uvumele umuntu olandelayo onokufinyelela ukuba azigcwalise. Uma kubhalwe kanjalo, irekhodi lihlala liqotho futhi liselifushane.
Qhathanisa ngaphambi kokushintsha noma yini. Ukuphinda isicelo esifanayo kuya kuzakwethu ofanayo ngephrothokholi efanayo kugcina izinto eziguqukayo zibaleka, kuyilapho ukusetha kabusha, ukuvuselela ukhiye noma ukuhlela inqubomgomo phakathi kokuthwebula kucekela phansi ukuqhathanisa. Uma ushintsho lungagwemeki, thwebula futhi ngokushesha ngemva kwalo ukuze okwangaphambili nokwangemuva kusachaza ukushintshana okufanayo.
Umbiko owusizo uthini
Umbiko ofanele ukwenziwa uhlanganisa isicelo esisodwa nempendulo yaso futhi ukhombe isinyathelo sokuqala esingenabo ubufakazi ngemuva kwaso. Lowo musho uyaphila lapho ufundwa isonto elilodwa kamuva ngunjiniyela owayengekho, futhi unika umuntu olandelayo indawo yokuqala esikhundleni somsoli.
Ungalokothi wente buthakathaka izivivinyo zobuwena noma ukhulise isethi yephrothokholi evunyelwe ukuze uhlole umbono wokuthumela kabusha kuphela. Gcina amaphakethe okuqala kanye namarekhodi ezigameko ngaphambi kokusetha kabusha noma yikuphi, ngoba ukusetha kabusha kubhubhisa impela into obukade uzothola futhi kususa isikhathi esasikhombisa lapho ukushintshana kwakhona khona.
Inkolelo-mbumbulu ukuthi ikhophi eyodwa ifakazela ukuthi umqondisi unecala. Iqiniso ukuthi ikhophi eyodwa ifakazela ukuthi isikhathi siphelile, futhi impendulo ihlala emzileni wempendulo.