Izinhlobo ezinhlanu zamakheli kuphrofayela ye-IPsec, nokuthi iyiphi engalungile
Iphedi yokugcina, ubunikazi, inethiwekhi encane evikelwe, umthombo wegesi kanye negxathu elilandelayo ngakunye kuphendula umbuzo ohlukile. Qala ngokufanisa uphawu nesigaba.
Imisebenzi emihlanu ehlukene ithola ikheli encazelweni evamile yokuxhumana, futhi akudingeki ukuthi zivumelane. Abaphathi bayagxeka ngoba umuzwa onengqondo, wokukhomba zonke izigaba kubungcweti obufanayo, awulungile kwemithathu yazo okungenani. Indlela yokuphuma iwukuthi qala uqambe uphawu bese ubheka isigaba esisodwa noma ezimbili ezingase sibangele.
Imisebenzi emihlanu, ngokulandelana kokubaluleka
Iphedi yokugcina yezokuthutha yilapho ukushintshana kwe-IKE kulethwa khona. Ubunikazi obuqinisekisiwe yigama eliqinisekiswa wuhlangothi ngalunye, futhi luhlolwa ngokumelene nenqubomgomo, hhayi ngokumelene nethebula yomzila. Amanethiwekhi amancane avikelwe yizikhethi ezinquma ukuthi yikuphi ukuhamba kwangaphakathi okungokwethumbu. Bese kuba ngumthombo osetshenziswa lapho igesi ngokwayo iqala ingxoxo, futhi ekugcineni igxathu elilandelayo lesendlalelo esingaphansi ukufinyelela umlingani.
Amalebula ababambiqhaza afana no-left no-right ayizivumelwano zezinhlangothi ezimbili zokuxhumana, hhayi amagama afanayo asendaweni nawakude. Funda incwadi yokuqondisa yokusetshenziswa okufakiwe ngempela ngaphambi kokucabanga ukuthi ukhiye usho lokho okwakushiwo omunye umkhiqizo.
| Job | Typical key | What fails when it is wrong |
|---|---|---|
| Transport endpoint | left, right | No IKE exchange at all |
| Authenticated identity | leftid, rightid | Exchange starts, peer rejects it |
| Protected subnets | leftsubnet, rightsubnet | Tunnel up, traffic not selected |
| Gateway source | leftsourceip, rightsourceip | Only gateway-originated flows fail |
| Underlay next hop | leftnexthop, rightnexthop | Peer unreachable from this host only |
Isinqumo sokuqala: akukho okusungulwayo
Lapho kungekho kushintshana okubonakalayo kumarekhodi nhlobo, iphedi yokugcina iyisola sokuqala: ikheli elingalungile, indlela ehlungiwe, noma isixhumanisi lapho idemoni ingalaleli khona. Dluhela emagxabeni obunikazi kuphela ngemuva kokuba ukuxhawulana kubonakala, ngoba ubunikazi buhlolwa ngaphakathi kokushintshana, hhayi ngaphambi kwako. Indlela ehlungiwe nekheli elingalungile kubonakala kufana kusuka kuklayenti, ngakho hlola uhlangothi olalelayo ngaphambi kokuhlela noma yini. Qinisekisa ukuthi idemoni iboshelwe kusixhumanisi osilindele, ngoba isevisi elalela ekhelini elilodwa ibonakala ifana ncamashi nendlela evinjiwe.
Ikheli lomphakathi elibonwa ngokuhumusha aliyona into efanayo nobunikazi obuqinisekiswa umlingani. Ukushintsha ikheli ukuze lifane nalokho okuboniswa ukubanjwa kwamaphakethe ekugcineni okukude kuwukulungisa okuvamile nokungalungile.
Isinqumo sesibili: ithumbu liphezulu futhi ukuhamba kuyafa
Izikhethi zinquma ukuthi yini engena ethumbini, futhi ukungavumelani lapha kukhiqiza ukuxhumana okuxoxisana ngempumelelo kuyilapho uhlelo lokusebenza lusahluleka. Uhlangothi olukude kufanele lubize ibanga lakho elivikelwe njengebanga lalo elikude, futhi yilapho khona amanani aphendukile angena khona.
Funda zombili izilungiselelo ngazimbili ngaphambi kokuhlela. Ibanga lendawo kusibungcweti esisodwa iyibanga elikude kwesinye, futhi ipheya elilodwa elishintshiwe lichaza ithumbu elingathwali lutho. Nciphisa ipheya ngaphambi kokuthinta okhiye: inethiwekhi encane eyodwa ngaphakathi kwethumbu neyodwa ngaphandle ikutshela ukuthi ingabe isikhethi noma umzila oyisono.
Isinqumo sesithathu: kuhluleka kuphela ukuhamba kwegesi ngokwayo
Ukuhamba okudluliselwa amaklayenti kungasebenza kahle kuyilapho isicelo esiqalwa igesi ngokwayo sihluleka, ngoba lowo mfudlana awunawo umthombo weklayenti ongawudla ifa. Isilungiselelo somthombo okhethwayo sikhona ngqo kulesi simo, futhi akusikho ukuhumusha komthombo: sikhetha ikheli lomthombo esikhundleni sokubhala kabusha elilodwa.
Uhlelo lokusebenza olubopha ngokusobala elinye ikheli lungadlula ukukhethwa, ngakho qinisekisa umthombo wangempela wephakethe ngaphambi kokuphetha ngokuthi isilungiselelo sishaywa indiva. Bhaja kusixhumanisi segesi ngokwayo esikhundleni sokuthemba inhloso yesilungiselelo.
Igxathu elilandelayo umyalo wasendaweni
Igxathu elilandelayo lesendlalelo esingaphansi litshela lesi sibungcweti ukuthi sifinyelela kanjani kumlingani, futhi uhlangothi olukude aludingi inani elifanayo. Ukukubheka njengesilungiselelo esabiwe, noma ukubhala ngekhodi igesi ezenzakalelayo, kuyaphuka ngesikhathi umzila ushintsha noma kuvela indlela yesibili.
Okunye ukusetshenziswa kunikeza amanani akhethekile lapha. Lokho incwadi yokuqondisa ekubalayo okokuhlobo okufakiwe iyimpendulo ephephile kuphela, futhi ithebula yomzila yasendaweni iwubufakazi bokuthi kwasebenza. Lapho umlingani efinyeleleka ngokwegama kodwa hhayi ngekheli, lokho kungavumelani kuyinto etholakele, hhayi imininingwane okufanele kugwenywe.
Funda iphrofayela kuzo zombili iziphetho
Ukuphendula izindima ephepheni iwukubuyekezwa okusheshayo okukhona: shintsha amabanga avikelwe, gcina igxathu elilandelayo lohlangothi ngalunye kanye nobunikazi buhlangothi ngalunye. Noma yini engasindi ekushintsheni kungenzeka yabelwa umsebenzi ongalungile.
Bese uhlola umfudlana owodwa ngendima ngayinye: ukufinyeleleka phakathi kwabalingani, umfudlana weklayenti wangaphakathi kanye nesicelo esivela egesi. Izivivinyo ezintathu zikutshela ukuthi yimuphi umsebenzi owabelwe ngokungalungile ngaphandle kokuvula isilungiselelo futhi. Engeza umphumela kuthikithi eceleni kwesigaba osishintshile, ngoba unjiniyela olandelayo uzohlangabezana nephrofayela efanayo.