Ubunikazi be-IKE noma Ikheli Lokuphela: Ungazihlanganisi
Ubunikazi be-IKE bohlobo lwe-FQDN inani lokuqinisekisa elingokwezwi, hhayi ukusesha kwe-DNS ehlanekezelwe. Gcina ihlukanisiwe ikheli lokuphela, ubunikazi basendaweni kanye ne-peer elindelekile.
Funda inkambu ebhalwe ngokuthi ubunikazi be-FQDN njengochungechunge lwangempela, hhayi njengesicelo segama le-DNS ehlanekezelwe lekheli lakho lomphakathi. Kumhlaziyi we-strongSwan yilokho ngempela, uchungechunge, futhi ukulufunda akulokothi kuluxazulule libe yindawo yokuphela. Lelo qiniso lodwa lisusa ukuphazamiseka okuvame kakhulu lapho ukhetha izihlonzi ze-peer. Izihlolo ezingezansi zivimbela lawo manani amathathu ahlobene ukuthi ahlangane abe munye.
Ilebuli akulona ukusesha
Izixhumi zezinkampani zisebenzisa amagama afana ne-FQDN ne-hostname ngokukhululekile, futhi ilebuli ebhokisini ayisho lutho mayelana nokubhalwa kwekhodi okungemuva kwayo. Idivayisi ebiza inkambu ngokuthi Client FQDN ingathumela i-FQDN, uchungechunge olusesimweni se-imeyili noma ikheli elingenalutho. Phatha umbhalo nohlobo njengezinqumo ezimbili ezihlukene, futhi ubhale kokubili.
Akukho lutho kubunikazi obungokwezwi okudinga i-DNS. Kuyisimangalo esihlolwa uhlangothi olunye, hhayi igama okufanele inethiwekhi ilixazulule.
Amanani amathathu ahlukene, abhalwe ngokwahlukana
Imisebenzi emithathu ingemuva kwesikrini esisodwa sokulungiselela, futhi ukuyihlanganisa iyiphutha elibizayo. Inani elilodwa ikheli lokuphela, elinquma ukuthi amaphakethe aya kuphi. Elinye ubunikazi basendaweni obuveza le peer, futhi elesithathu ubunikazi obulindele kusukela ohlangothini olukude ngaphambi kokuba uluqinisekise. Zibhale njengemigqa emithathu kuthikithi yoshintsho, ngoba noma yini engaphansi kwalokho ichaza i-VPN hhayi ubudlelwano.
| Job | Example | What it decides |
|---|---|---|
| Where the packets go | 198.51.100.7 | The endpoint address |
| What this peer claims | gw.branch.internal | The local IKE identity |
| Who should answer | ike.hub.internal | The expected remote identity |
Ubunikazi bezibonelo kufanele zikhethwe futhi zigunyazwe njengengxenye yokufakwa. Ziyizimangalo eziqinisekiswa ukuqinisekisa, hhayi izifakazelo ezenza noma yiluphi peer lithembeke, ngakho uchungechunge olubonakala lukholakala alugunyazi lutho.
Uhlobo luyingxenye yenani
isithenjwa sobunikazi se-strongSwan sihlukanisa i-FQDN, amanani asesimweni se-imeyili, amakheli e-IP nokunye ukubhalwa kwekhodi, ngakho ukubhalwa kwekhodi kubalulekile njengezinhlamvu. Amadivayisi amabili angamukela umbhalo ofanayo ngaphansi kwezinhlobo ezahlukene futhi asalane. Inothi elibhala inani ngaphandle kohlobo lwalo liyingxenye yokulungiselela.
Buza umthengisi ukuthi idivayisi ithumela luphi uhlobo ngempela, futhi kuqinisekise ngokuhumusha kwekhodi hhayi ngelebuli yesixhumi. Uhlobo oluqagelwe ukungafani okulindele ushintsho olulandelayo.
Uhlangothi ngalunye kufanele lwanelise olunye
Ubunikazi basendaweni bohlangothi ngalunye kufanele ludlule inqubomgomo yokuqinisekisa yohlangothi olunye. Lokhu akufani nokunamathisela uchungechunge olulodwa kuwo wonke amabhokisi obunikazi kuwo womabili amadivayisi, okuyisinqamuleli esikhiqiza ukulungiselela okungekho muntu ongakwazi ukukususa iphutha.
Ukuqinisekisa ngesitifiketi kunezidingo zako, ngoba ubunikazi besitifiketi kanye nemibandela yokwethemba kumi eceleni kobunikazi be-IKE obukutayiphile. Ukufana kobunikazi be-IKE kuphela akugunyazi peer enesitifiketi.
I-DNS ibalulekile kuphi, futhi inguqulo yakho iphoqa ini
I-hostname yesango esetshenziswa ekutholakaleni idinga i-DNS esebenzayo ngempela, futhi leso sidingo singesokuthola ikheli lokuphela hhayi sokunoma yikuphi ukusesha okuhlanekezelwe kobunikazi obutayiphile. Gcina kokubili kuhlukene kuthikithi, ngoba ukuhluleka kokuthola kanye nokungafani kobunikazi kufundwa ngendlela efanayo kulogi yeklayenti futhi kulungiswa ezindaweni ezahlukene.
Funda umhlaziyi womkhiqizo kanye nenguqulo oyisebenzisayo ngempela ngaphambi kokukopisha isintaksi ebeka uhlobo, ngoba izinguqulo ezindala ze-strongSwan zaziphatha ngendlela ehlukile futhi abanye abathengisi banezela imikhawulo yabo. Uma uqhathanisa iziphetho ezimbili, bamba izinto ezine ndawonye: ubunikazi obulindelekile, ubunikazi obuveziwe, uhlobo kanye nephutha lokuqinisekisa. Lelo sethi liguqula ukungafani kube ubufakazi hhayi umbono.