I-ESP ihlakaza kahle futhi iphakethe langaphakathi aliyi ndawo
Izibali ze-ESP ziyakhuphuka kuyilapho uhlelo lungaboni lutho. Isihloko esilandelayo ku-trailer kufanele sihambisane nephakethe langaphakathi, iphutha elihlukile kunokungephutha kwesikhethi.
Isibali sokwamukela se-ESP siyakhula, umhubhe uhlala umile, futhi uhlelo alilokothi liyibone iphakethe. Ukuhlakazwa kwenziwe, ukuhlolwa kobuqotho kudlule, kwase kufanele umamukeli anqume ukuthi umthwalo ovikelwe uyini ngempela. Kulelo sigaba sokugcina yilapho kuvela khona ukungafani kwesimo, futhi uma ubuka ngaphandle akufani neze nenkinga ye-firewall.
Okubonayo lapho ilebula iqamba amanga
Akukho lutho kuringi lweklayenti olwehlukanisa lokhu nomgodi omnyama womgudu. Kokubili kudala ukuphela kwesikhathi kohlelo eceleni komhubhe ophilile, yingakho izibali zisoleka kuqala.
Isibali sokwamukela esikhulayo siyizindaba ezinhle ngempela: amaphakethe ayafika futhi aqinisekiswa. Kodwa akubona ubufakazi bokuthi iphakethe langaphakathi lalinengqondo kunoma yini engaphezu kwengqimba yokubethela.
Uhlobo luhlala ku-trailer
Kwindlela evamile yomhubhe we-IPsec, umthwalo ovikelwe yi-ESP uqukethe iphakethe le-IP langaphakathi eliphelele. Inkambu yesihloko esilandelayo ku-trailer ikhombisa ukuthi lo mthwalo uyini, futhi akuyona imbobo ye-TCP, akusona inombolo yephrothokholi esihlokweni sangaphandle, futhi akusiyo ingxenye yenkambu yokuqala ye-SPI nenombolo yokulandelana. RFC 4303 isigaba 2.6 ichaza njengenkambu yohlobo lomthwalo, okuyigama eliqondile lomsebenzi oqondile.
Amavelu ozohlangana nawo mancane futhi kufanele uwakhumbule: i-IPv4 ingu 4 (0x04) kanti i-IPv6 ingu 41 (0x29).
Lezo zinombolo zivela ekwabiweni kwezinombolo zephrothokholi ze-IANA hhayi emkhubeni wendawo. Umthumeli omenyezela i-IPv4 ngesikhathi egoqa iphakethe le-IPv6 udale ukungafani kwesimo, futhi akukho mthetho we-firewall olungisa amabhayithi aphikisana nelebula yawo.
Indlela yokuhlukanisa lokhu kwabasolwa abajwayelekile
Iningi lamaphakethe alahlekile awasona isici sokufaka ikhodi. Hlola izikhethi kuqala, ngoba isikhethi sethrafikhi esikhipha isiqalo se-IPv6 siphonsa ithrafikhi ngaphambi kokuthi kufakwe noma yini. Bese uhlola umgudu, bese uhlola ukuhlunga kwendawo kusibungu esamukelayo. Kuphela ngemuva kokuthi lokho kukhishiwe lapho ukungafani kwesimo somthwalo kuba yincazelo ekholekayo.
Ukubamba okubethelwe ngeke kukuxazulule, ngoba isihloko esilandelayo esivikelwe sikhona ngaphakathi komthwalo obethelwe. Udinga ukutholwa kokusetshenziswa noma indawo yokubuka ehlakazwe esekelwayo, futhi kokubili kudinga imvume ngaphambi kokusetshenziswa.
Uma kungekho noyedwa ongakwazi ukuletha lobo bufakazi, awunalo iphutha lesimo. Unombono nje, futhi izikhethi zisewukubheja okungcono.
Ukulungisa akuyikho lokhu
Ungavali ukuhlolwa kobuqotho ukuze ithrafikhi idlule. Ungabhaleli phezu amaphakethe abethelwe kumgudu ophakathi nendawo, ngoba lokho ngeke kusebenze futhi kuzolimaza ukugeleza ngesikhathi kubonakala kusiza ekubambeni. Ungavuli umthetho we-firewall wohlobo olubanzi ngombono wokuthi imbobo ivaliwe. Akukho kulokho okuthinta ukungafani kwelebula.
Uma ukungafani okuqinisekisiwe kuvela ekusetshenzisweni kozakwethu, gcina ukukhiqizwa okuncane okuhlanjululwe bese ukusa esiteshini esisekelwayo salokho kusetshenziswa.
Qinisekisa ukugeleza, hhayi isibali
Ngemuva kokulungisa, hlola ukugeleza kwangempela kwe-IPv6 kusukela ekuqaleni kuze kube sekupheleni: isicelo sohlelo ngomhubhe, impendulo yaso, kanye nombhangqwana wamakheli obonwa uhlangothi ngalunye. Isibali se-ESP esikhulayo sifakazela kuphela ukuthi amaphakethe ayamukelwa futhi aqinisekiswa. Asisho lutho mayelana nokuthi iphakethe langaphakathi lalisebenziseka yini.
Rekhoda yomibili imiphumela kuthikithi. Ukunyakaza kwesibali kanye nokugeleza okusebenzayo wukulungisa; ukunyakaza kwesibali kuphela yikho kanye obekade unakho ngaphambi kokuthi uqale.