IKEv2 ukuthola uzakwethu ofile akuhloli uhlelo lwakho

Ukuhlola ukuphila kwe-IKEv2 kubuza umbuzo owodwa: ingabe omunye uzakwethu usaphendula kubudlelwano bokulawula obuvikelwe. Akukali ukuthi uhlelo lwangaphakathi lunempilo yini, ukuthi ukhona umzila ngemuva kwengemuva, noma ukuthi ukuphequlula kuzwakala kushesha. Ukuhlola kungaphumelela ngenkathi konke okuwusizo ngemuva komhubhe kwehluleka.

Funda izinhlobo ezimbili zobufakazi ngokwehlukana ngaphambi kokushintsha isibali sikhathi.

Ukuhlola ukuphila kubuza ini ngempela

Ukushintshana kokuphila kuthunyelwa ngaphakathi kwesivumelwano sokuphepha se-IKE esisunguliwe futhi kulindele impendulo phakathi kwewindi elilungisiwe. Ukuphumelela kusho ukuthi ukusetshenziswa kwe-IKE kukazakwethu kusekhona futhi kusakulungele ukukhuluma. Akusho lutho ngezivumelwano zokuphepha zezingane ezithwala ithrafikhi, akusho lutho ngomzila ongaphambili kwengemuva, futhi akusho lutho ngensizakalo oyivulele umhubhe. Lezi zimbuzo ezintathu ezihlukene ezinezindlela ezintathu ezihlukene zokwehluleka.

Lowo mehluko unquma ukuthi ubheka kuphi lapho isikhathi sokuxhumana sithula. Uzakwethu oqhubeka ephendula ngenkathi umzila wedatha uphukile ukhomba kunqubomgomo, umzila noma insizakalo engaphansi. Uzakwethu oyeka ukuphendula ukhomba ekufinyelelekeni noma esimweni sakhe sokugcina esikude.

Funda izivumelwano zokuphepha ngaphambi kwesiphequluli

Isimo sokulawula nesimo sedatha kubalwa ngokwehlukana lapho ubuza idaemon, futhi izibali zitshela ukuthi kukhona yini okwazanywa. Isivumelwano sengane esingakaze sifakwe asifani neze nesafakwa sabe sesiyeka ukudlulisa amaphakethe, nakuba zombili zikhiqiza isikhalo esifanayo somsebenzisi.

ipsec statusall | head -n 40
swanctl --list-sas
ip xfrm state | grep -E 'proto|mode'

Bhala amagama ezimo njengoba enjalo kutikithi, kanye nezibali ngaleso sikhathi sesikhalo. Incazelo efana nomhubhe wehle ifihla ukuthi yisiphi kulezi zivumelwano ezimbili esiphelile, futhi lokho ngokuvamile iyiqiniso okuwukuphela kwalo okufanele ugcinwe.

Ukwehluleka komzila kubonakala kufana ncamashi nozakwethu ofile

Ingemuva lingaphendula ekushintshaneni kokulawula ngenkathi iseva yangasese ingaxhunyiwe, umzila odlulisiwe ungekho, noma ukuxazululwa kwamagama kwangaphakathi kwehluleka ngokuphelele. Ngokombono weklayenti, konke lokhu kubonakala njengesikhathi sokuxhumana esisebenza nendawo yokufika engasebenzi. Hlola umzila wokubuya ngokucophelela njengomzila wokuya, ngoba umzila ongalingani ohlangothini olukude udala ukuthula ohlangothini olulodwa kuphela.

Hlola uhlelo oluhlosiwe ngqo futhi usho ikheli elizamile, esikhundleni sokuhlola ukuthi umhubhe uyasebenza. I-ping eya engemuva ifakazela ukuthi ingemuva liyaphendula; ayikaze ifakazele ukuthi uhlelo luphendule. Rekhoda ikheli eliqondile elizanywe uhlelo. Leyo yunithi yombhalo inciphisa usesho kamuva, futhi yilona qiniso okuwukuphela kwalo itikithi evamise ukulishiya.

Gcina izibali sikhathi ngaphandle kokuxilonga

Ukufinyeza isikhawu sokuthola akulona ushintsho lomsebenzi futhi akwengezi umthamo. Ngaphansi kokulahleka kwamaphakethe kushintsha ukuthi ukwehluleka kubonakala ngokushesha kangakanani, okungase kwenza uphawu lubonakale luhlukile ngaphandle kokwenza noma yini ibe ngcono. Rekhoda kuqala isikhathi sangempela sokwehluleka, bese unquma ukuthi ukubekezelela akulungile yini esixhumanisini osinakho ngempela.

Ukuvuselelwa kokubonisa kwe-NAT kungaphansi kwesigaba esifanayo. Kugcina umzila ohunyushiwe ukhona, futhi akubona ubufakazi bokuthi uhlelo olukude luyasebenza.

Inqubomgomo yokululama ephelele ithi iklayenti kufanele lenzeni lapho uzakwethu kumenyezelwa ukuthi ufile: qala kabusha, vala noma bamba, nokuthi ithrafikhi enye ingenzani ngesikhathi lokho kwenzeka. Ngaphandle kwalokho, isigameko esifanayo sixilongwa kabusha kusukela ekuqaleni njalo ngekota.