I-IKEv2 SA yakho isebenza kodwa ayikho i-SA yengane: funda ukushintshana

I-IKE ithi umhubhe uyasebenza, i-SA yengane ayikho, futhi zombili izitatimende zingaba yiqiniso ngasikhathi sinye. Ubudlelwano bokulawula obusunguliwe akubona ukuhlangana kwedatha, futhi izinto ezimbili zineminyaka yokuphila, izingxoxo kanye nezindlela zokwehluleka ezihlukene. Ukubika okokuqala njengokuxhumana iyona ndlela ithikithi eliphetha ngayo ngokuthi umhubhe uyasebenza kuyilapho kungasebenzi lutho. Funda uhlu lokuhlangana esikhundleni kwelebula yesifinyezo yoxhumano, ngoba lolo hlu yilona kuphela indawo lapho into engekho ibonakala khona. Okulandelayo ukuhleleka okwenza uhlu lube nengqondo.

Ukuhlangana okubili, imisebenzi emibili

I-SA ye-IKE ithwala itshaneli yokulawula: ubunikazi, okhiye kanye neziphakamiso zokushintshana kokulawula uqobo. I-SA yengane ithwala isivikelo se-ESP, ngama-algorithm ayo kanye nabakhethi bayo bomgwaqo. Ukuqinisekisa nokudalwa kwe-SA yengane kuvame ukuhamba ndawonye, ngoba i-SA yengane yokuqala ixoxwa ngaphakathi kwe-IKE_AUTH, futhi ukuhlangana kwalokho yikho okumangaza abantu ngokuhlukana.

Lokhu futhi kuchaza izinhlobo ezimbili zokwehluleka ozohlangana nazo. I-SA yengane enqatshwe ngesikhathi sokushintshana kokuqala ivamise ukwehlisa ne-IKE SA, ngakho awuboni itshaneli yokulawula esunguliwe. I-IKE SA eme yodwa ivamise ukusho ukuthi i-SA yengane yokuqala iphumelele futhi umzamo wakamuva wokudala i-SA yengane wehlulekile, isibonelo ngesikhathi sokuvuselela okhiye. Izimpawu zesikhathi zihlukanisa lezo zigameko ngokushesha kunanoma yikuphi ukubuyekezwa kokuhlelelwa.

Iluphi ugqoko olwenqaba

Uma i-SA yengane inqatshwa, isaziso sisho ugqoko. Ukwenqatshwa kwesiphakamiso kusho ukuthi izinhlangothi azikwazanga ukuvumelana ngama-algorithm, ngokuvamile ngoba olunye ludinga iqembu elihlukile lokusitheka okuphelele okuya phambili noma ukubhala amagama okungayamukeli enye. Ukwenqatshwa komkhethi kusho ukuthi isethi yomgwaqo yenqatshwa ngqo, futhi lokho kuyimpikiswano yokumboza, hhayi yokubhala ngemfihlo.

Ngesinye isikhathi ukungabikho kwe-SA yengane yikho ukuklama uqobo. I-IKE SA engena-SA yengane iyisandiso esichaziwe esisetshenziswa lapho ukuhlangana kwedatha kufanele kudalwe ngokucela, ngakho ukungabikho kulungile futhi i-SA yengane iyavela lapho kufika umgwaqo ofanele. Amanothi e-strongSwan nge-IKEv2 kuhlanganisa indlela yokucela kanye nezilungiselelo zesiphakamiso ezinquma icala lokuqala.

Hlola ukuthi kukhona ukuhlelelwa kokucela noma ugibe ngaphambi kokuhlola iphutha. Uma ama-SA engame kwenziwa ngobuvila, ukungabikho kwe-SA yengane ngesikhathi sokuthula yisimo esilindelekile, futhi ukuhlolwa kwangempela ukuthi umgwaqo uyayiphakamisa yini. Lokho kuhlolwa futhi kuhlukanisa ukuklama kobuvila nokwehluleka okuthule, ngoba ukudalwa okwehlulekile kushiya isicupho singenampendulo hhayi nje ukuthula.

Bese ubuza ngomzila wedatha

Uma i-SA yengane ikhona, izibali ziphendula umbuzo olandelayo. ip -s xfrm state ibika inani lamaphakethe namabhayithi ngokuhlangana ngakunye, futhi i-SA yengane engathwali lutho ngesikhathi udala umgwaqo ikhomba ekufaneni noma ekuhambeni komzila hhayi ekuhlangana okungekho. swanctl --list-sas iphrinta abakhethi be-SA yengane eduze kwalezo zibali, futhi yikho okuqinisekisa ukuthi iphakethe lingaphakathi kwesethi eyamukelwe.

Gcina ngokwehlukene embikweni ukuqinisekisa okuphumelele nokushintshana kwe-SA yengane okwehlulekile. Umbiko othi ukuqinisekisa kwehlulekile uthumela unjiniyela olandelayo esitolo sezitifiketi, futhi umusho onembile mfushane kakhulu: i-IKE SA yenyuka, futhi i-SA yengane yalokhu kugeleza ayikaze yamukelwe.

Hlanganisa iziphetho ezimbili

Ngesiphakeli ozisebenzelayo, thatha amarekhodi ekhasimende nesango okushintshana okufanayo esikhundleni sokuqhathanisa imizamo emibili yokuxhuma kabusha ehlukene ngehora. Izaziso kufanele zivumelane nhlangothi zombili, futhi lapho zingavumelani khona uthole uhlangothi oluhlelelwe kabi.

Lungisa izingxoxo ze-SA yengane, bese uphinda uhlole ngomgwaqo ongaphakathi komkhethi ohlosiwe. Lokhu ukuhlolwa okuwukuphela kwako okufakazela ukuthi into engekho manje isikhona, ngoba uhlu lokuhlangana oluvuselelwe ngesikhathi sokuthula lungabonakala lufana ngaphambi nangemva kokulungiswa.