IKEv2 noma L2TP/IPsec: iyiphi iphrofayili esetshenziswa iseva yakho?
Ilebula elilodwa lifihla izitaki ezimbili, izinhlobo ezintathu zezimfihlo kanye nokuziphatha okuhlukile lapho ikheli lishintsha. Hlukanisa izingqimba ngaphambi kokuqhathanisa amamenyu.
Womabili amagama avela ndawonye kuhlu olulodwa olwehla, okukumema ukuba ukhethe phakathi kokubili okulinganayo. Akulingani. L2TP wuhlelo lokuhamba komhubhe olungenakho ukufihla kwalo, futhi ukuvikelwa kusevisi ye-L2TP/IPsec kuvela kungqimba ye-IPsec egoqwe yaluhlu. IKEv2 ixoxisana ngqo ngenhlangano ye-IPsec futhi ayinaso isinyathelo somhubhe ngaphakathi komhubhe. Ukwazi ukuthi iyiphi istaki iseva yakho eyinikezayo kunquma iphrofayili, izikhombisi kanye nokwenzekayo lapho ikhompyutha ephathekayo ishintsha inethiwekhi.
Izitaki ezimbili, ilebula elilodwa kuklayenti
I-L2TP ithwala isikhathi sephoyinti-kuya-kwephoyinti phezu kwe-UDP kuze kufike echwebeni 1701 futhi ishiya ukubethelwa kulowo oyigoqayo. Yihlanganise ne-IPsec bese uthola izingqimba ezimbili: inhlangano ye-IPsec evikela indlela, nesikhathi se-L2TP ngaphakathi esithwala ozimele bengqimba yokuxhumana yomsebenzisi kanye nokuqinisekiswa kwe-PPP.
IKEv2 idala inhlangano yokulawula bese idala eyodwa noma ngaphezulu izinhlangano ezingane ezivikela ithrafikhi, zonke emkhakheni owodwa wokushintshana ku-UDP 500 no-4500. Akukho hlelo lomhubhe lwangaphakathi futhi akukho ukuxoxisana kwe-PPP.
Imininingwane yokungena: izimfihlo ezintathu ezingqimbeni ezintathu
Yilapha lapho isikhathi esiningi sokusekela siphela khona. Iphrofayili ye-L2TP/IPsec ingacela ukhiye owabiwe ngaphambili wengqimba ye-IPsec kanye negama lomsebenzisi neliphasiwedi yesikhathi se-PPP sangaphakathi, futhi kokubili kuhlolwa izingxenye ezihlukene. Ukhiye owabiwe ungowesango lonke, ngakho-ke akahlonzi muntu; ufakazela kuphela ukuthi uhlangothi olunye lwazi imfihlo.
IKEv2 ngokuvamile isebenzisa izitifiketi, noma i-EAP enegama lomsebenzisi nephasiwedi, futhi ingasebenzisa nokhiye owabiwe ngaphambili. Lezo zinketho azikwazi ukushintshana nombhangqwana we-L2TP. Ukusetha kabusha iphasiwedi okulungisa ukungena kwe-EAP okunqatshiwe akusizi lutho esitifiketini sekhasimende esiphelelwe yisikhathi, futhi noma ungabhala iphasiwedi ye-akhawunti izikhathi ezingaki, ukhiye wesango ongafanele ngeke ugane. Uma kuvela isikhombisi obungalindele, buza umqhubi ukuthi ingqimba iphi ngaphambi kokuqagela.
| Question | L2TP/IPsec | IKEv2 |
|---|---|---|
| What encrypts the traffic | A wrapping IPsec association | The child association |
| Ports you must permit | UDP 500/4500 and UDP 1701 inside | UDP 500 and 4500 |
| Typical secrets | Gateway PSK plus PPP credentials | Certificate, EAP, or PSK |
| Address change | Tunnel breaks, reconnect needed | Can migrate with MOBIKE |
Yini i-MOBIKE eyishintshayo, nokuthi yini engayishintshi
IKEv2 ingahambisa inhlangano iye ekhelini elisha lapho zombili iziphetho zisekela i-MOBIKE, okuhlanganisa isimo lapho ikhompyutha ephathekayo ishiya i-Wi-Fi iya kuhotspot yocingo ngaphandle kokudabula inhlangano yezokuphepha.
Ayigcini yonke uhlelo lokusebenza iphila kuso sonke leso sinyakazo. Ukugeleza kokuthutha kusashintsha ikheli, amasokhethi aboshelwe ekhelini elidala kusawaphula, futhi inqubomgomo ebophela ithrafikhi kusixhumi ingayiwisa namanje. Hlola inguquko oyenzayo ngempela, kungaba ukushiya inethiwekhi, ukuvuka ebuthongweni noma ukubuya ngemuva kwesikhathi eside ungenzi lutho, futhi ubheke uhlelo lokusebenza esikhundleni selebula elithi Connected.
Izimo zokuhluleka ezihlukanisa lezi
Iphrofayili ye-L2TP/IPsec efinyelela isango bese ima ivamise ukuhluleka kwesinye sezikhombisi ezimbili: ukhiye owabiwe noma imininingwane ye-PPP. Ukhiye ongafanele ngokuvamile akubonisi lutho olusizayo kungqophamlando yeklayenti, kuyilapho iphasiwedi engafanele ikhiqiza ukunqatshwa kokuqinisekisa okucacile, futhi umehluko lowo ukutshela lapho ubheka khona.
Iphrofayili ye-IKEv2 ihluleka kusenesikhathi nangomsindo uma ubunikazi noma isitifiketi kungafanele, ngoba inhlangano yokulawula ayiqedi. Uma inhlangano iqedile kodwa ithrafikhi isahluleka, inkinga isidlulele enhlanganweni yengane, kuzikhethi zethrafikhi noma emzileni, futhi akukho shintsho lwemininingwane okuzosiza.
Kuphi ngakunye kusafaneleka
I-L2TP/IPsec iyaqhubeka ngoba itholakala cishe kuwo wonke amaklayenti futhi ayidingi isoftware eyengeziwe, okubalulekile kusokontilaki esisetshenziswa idivayisi ongayilawuliyo. Izindleko yiyingqimba eyengeziwe, imodeli yemfihlo eyabiwe kanye nokuxhumana kabusha ngemuva kwakho konke ukushintsha kwekheli.
I-IKEv2 ifaneleka kangcono amadivayisi alawulwayo: ubunikazi besitifiketi, ukuhamba okumsulwa, kanye nomkhakha owodwa wezinhlangano okucabanga ngawo. Ihluleka kanzima futhi uma iklayenti lidala, ngakho hlola indlela yokuqinisekisa esekelwayo yipulatifomu ngaphambi kokuklama ngayo.
Ukuhlola iphrofayili oyinikiwe
Qinisekisa imodi kusukela ohlangothini lwesefa kuqala, bese ukhetha iphrofayili yeklayenti ehambisana nayo. Hlola ngegama lomsingathi eliqondile nangemininingwane yokungena ekhishwe yaleyo phrofayili, futhi uqinisekise insiza yangasese esikhundleni sesayithi yomphakathi.
Uma ixhumana kodwa akukho okulayishwayo, umhubhe uyasebenza kanti umzila, i-DNS noma isikhethi sethrafiki akusebenzi. Ukushintsha uhlelo lokuxhumana ngaleso sikhathi kuqala kabusha ukuxilongwa esikhundleni sokuqhubekisela phambili.