Izikhathi zokuphila ze-SA ku-IKEv2: ukuvuselelwa kokhiye okuthambile, ukuphela okuqinile, ukuqinisekiswa kabusha okuhlukile

Izibali-mhla zinquma ukuthi ukhiye womhubhe ufakwa esikhundleni nini, futhi imikhawulo emibili ethintekayo ivamise ukufundwa njengomunye. Akunjalo. Isikhathi sokuphila esithambile sicela umlingani ukuthi akhe okunye esikhundleni ngesikhathi inhlangano yezokuphepha yamanje isahambisa ithrafikhi, futhi isikhathi sokuphila esiqinile yisikhathi lapho inhlangano endala inyamalala khona, kungakhathaliseki ukuthi okunye esikhundleni kusebenzile noma cha. Phakathi kwazo kunewindi lokuhlangana elikhona ukuze amaphakethe angaweli emgodini.

Isikhathi sokuphila sikhawulela ini ngempela

Inhlangano yezokuphepha ye-IPsec iyinqwaba yesimo sokubhala ngemfihlo: okhiye bomkhakha owodwa, inkomba yemingcele yezokuphepha, isethi ye-algorithm nesikhethi. Isikhathi sokuphila sikhawulela ukuthi leso simo singasetshenziswa isikhathi esingakanani, okukhawulela ukuthi ukhiye owodwa uvikela ithrafikhi engakanani. Lesi yisinyathelo sokuvimbela sokhiye, hhayi isitatimende sokuthi isikhathi somsebenzisi kufanele sihlale isikhathi esingakanani.

Izinyunyana zokulawula ze-IKE zinezingodo zazo kanye nezikhathi zazo zokuphila, ezihlukile ezinhlanganweni zezingane ezithwala idatha. Nakhu lapho abantu bexuba khona izinhlelo ezimbili.

Okuthambile kuqala ukufakwa esikhundleni, okuqinile kuphelisa isimo esidala

Lapho umkhawulo othambile usondela, umlingani uqala ukufakwa esikhundleni. Ukusetshenziswa kuvamise ukuqala kusenesikhathi futhi kwenze isikhathi sibe ngesingahleliwe ukuze ikhanda elinemihubhe engamakhulu lingavuseleli wonke okhiye ngesikhathi esisodwa. Ku-IKEv2 ukufakwa esikhundleni ukushintshana kwe-CREATE_CHILD_SA okuthwala ama-nonce amasha, kanye nokushintshana kwe-Diffie-Hellman lapho ukufihla okuphelele kwangaphambili kusethiwe. Umphumela iyipheya elisha lezinyunyana ezinokhiye abasha.

Ukuhlangana kubalulekile. Isikhathi esifushane umlingani angabamba inhlangano endala neyentsha, futhi ukuthwebula kungabonisa amasethi amabili ezihlonzi. Lokhu ukusebenza komshini, hhayi iphutha.

Umkhawulo oqinile awuxoleli. Uma ukufakwa esikhundleni kungakaqedi ngaleso sikhathi, inhlangano endala kufanele ikhishwe futhi ithrafikhi evikelwe yiyo kuphela iyama. Ukuvuselelwa kokhiye okwehlulekayo okuphindaphindiwe okufika ekupheleni okuqinile kuwuphawu lokusebenza okufanele kuphenywe, ngoba umhubhe ugecinwa ngomkhawulo wosuku kumjikelezo ngamunye.

Imikhawulo yokusetshenziswa ingase iqale ngaphambi kwanoma yisiphi isibali

Isikhathi akuwona umkhawulo wodwa. Ukusetshenziswa kungakhawulela amabhayithi noma amaphakethe avikelwe ukhiye owodwa, futhi umhubhe ogcwele uzofinyelela umkhawulo wokusetshenziswa kusenesikhathi kakhulu kunesibali samahora amaningi. I-strongSwan inikeza izilungiselelo ezihlukile zesikhathi sokuphila nemajini yesikhathi, amabhayithi namaphakethe, okusho ukuthi iphuzu lokuvuselela elisebenzayo ingumkhawulo ofika kuqala, kususwe imajini esethiwe.

Lapho umhubhe uvuselelwa kaningi kakhulu kunalokho okushiwo amahora awo asethiwe, hlola imikhawulo yamabhayithi namaphakethe ngaphambi kokusola isibali. Isixhumanisi esigcwele nesixhumanisi esingenzi lutho esinezilungiselelo zefike ezifanayo zizoba namazinga ahlukene ngokubonakalayo okuvuselelwa kokhiye, futhi kukodwa kuphela kuzo okulandela isibali.

Umlingani ngamunye uphoqelela inqubomgomo yakhe

I-IKEv2 ayixoxisani ngesikhathi esisodwa sokuphila okufanele bobabili abalingani basibonise ngendlela efanayo. Uhlangothi ngalunye lusebenzisa inqubomgomo yalo yasendaweni futhi lungaqala ukufakwa esikhundleni lapho umkhawulo walo usondela, njengoba kuchaziwe ku-RFC 7296 isigaba 2.8. Ngakho ukungezwani phakathi kwamahora asethiwe wabalingani ababili akusona iphutha ngokuzenzakalelayo, nakuba amanani ahluke kakhulu angadala isiphithiphithi uma uhlangothi olulodwa luqhubeka lufaka esikhundleni isimo esisanda kufakwa kolunye.

Ukuxhumanisa kusho ukuziphatha okuhambisanayo: amawindi okuhlangana made ngokwanele ukushintshana, amamajini ashiya isikhala sokuzama futhi, nokuqapha okubonisa ukuthi luphi uhlangothi olwaqala ukuvuselela ngakunye.

Ukuvuselelwa kokhiye akusiko ukuqinisekiswa kabusha

Ukuvuselelwa kokhiye kwenza okhiye bashise kabusha ngaphansi kobudlelwano obuqinisekisiwe obukhona. Ukuqinisekiswa kabusha kuphinda ukuhlolwa kobunikazi, kungaba ukushintshana kwezitifiketi noma ingxoxo ye-EAP. Kokubili kuhamba ngezinhlelo ezihlukile futhi ukuvuselela okuphumelelayo akusho lutho mayelana nokuthi i-akhawunti kufanele isanokufinyelela yini.

Lowo mehluko ubalulekile ekuhoxisweni. Ukukhubaza i-akhawunti, ukuhoxisa isitifiketi noma ukuqeda isikhathi kuyizinqumo zokufinyelela ezidinga inqubomgomo ecacile ekusetshenzisweni; aziveli kusibali se-SA, futhi ukuvuselelwa kokhiye kungaqhubeka ngokuthula kubunikazi osekuphucwe amalungelo.

Yini okufanele irekhodwe ngomhubhe ngamunye

Rekhoda ukuthi yiluphi uhlangano olwaqala ukuvuselela, izihlonzi ezindala nezintsha, umuphi umkhawulo owasebenza nokuthi ukufakwa esikhundleni kwaqedwa yini ngaphakathi kokuhlangana. Lezo zinkambu ezine zenza inkinga yokuvuselela ibonakale ngaphambi kokuba ibe ukuphazamiseka, futhi zihlukanisa inqubomgomo enolaka kuleyo ehlulekayo.

Gcina uhlelo lokususa ukufinyelela eceleni kwalelo rekhodi hhayi ngaphakathi kwalo. Inhlanzeko yokubhala ngemfihlo nenqubomgomo yobunikazi kuyizilawuli ezihlukile, futhi umhubhe ojikelezisa okhiye ngesikhathi usengagcina isikhathi umuntu othile ayengakuhlose ukusigcina.