I-L2TP iyaxhuma kodwa ukuxoxisana kwe-PPP kuyahluleka: isiphi isigaba?

Umhubhe we-IPsec ukhona futhi uxhumano lusafa. Funda i-LCP, ukuqinisekisa kanye ne-IPCP ngokulandelana ngaphambi kokuthinta imfihlo ehlanganyelwe noma i-akhawunti.

Umhubhe we-IPsec uyakhiwa, iklayenti likhombisa umlingani ovikelwe, bese uxhumano lufa ngaphambi kokuba kufike okuthile kunethiwekhi engaphansi eyimfihlo. Lese sikhala yi-PPP eyenza umsebenzi wayo: izinketho zokuxhuma, ukuqinisekiswa komsebenzisi kanye nokwabiwa kwekheli konke kwenzeka ngemuva kokuba umhubhe oshifriwe ukhona. Akukho lutho ekushintshiswaneni okuphumelelayo kwesigaba sokuqala okunikeza iphasiwedi noma ikheli langaphakathi. Funda izigaba ngokulandelana futhi ukwehluleka ngokuvamile kuzibiza ngokwako.

Umhubhe uyisendlalelo sokuqala kuphela

L2TP ithwala amafreyimu e-PPP ngaphakathi komhubhe ovikelwe yi-IPsec, okusho ukuthi izingxoxo ezimbili ezizimele kufanele ziphumelele ngaphambi kokuba iphakethe likwazi ukuhlelwa. Okwangaphandle kufakazela ukuthi iziphetho zombili ziyavumelana ngezinkinobho nobunikazi. Okwangaphakathi kunquma amapharamitha okuxhuma, ukuthi umsebenzisi uyaqinisekiswa noma cha kanye nokuthi iklayenti lithola likuphi ikheli.

Ukwehluleka ngaphakathi kwe-PPP kubonakala njengomhubhe ophukile kuwo wonke iklayenti elibonisa isibani sesimo esisodwa. Uma kuthathwa njengenkinga yomhubhe, kuholela ekukhiqizweni kabusha kwezinkinobho, ekuqaliseni kabusha izinsizakalo futhi ekugcineni ekushintsheni imfihlo ehlanganyelwe eyayingakaze ibe nephutha. Umehluko owusizo ushibhile: uma ukushintshisana nomlingani kuqedile futhi iklayenti ladlulela ekuceleni igama lomsebenzisi noma esigabeni sokuqinisekisa, umhubhe ulungile. Konke ngemuva kwalelo phuzu kungokwe-PPP.

Funda isigaba sokugcina esaphumelela

Hamba phambili kulo mbhalo bese uma esigabeni sokuqala esingaqedwanga. Kuza i-LCP kuqala, bese ukuqinisekisa, bese i-IPCP yamapharamitha e-IPv4.

sudo journalctl -u xl2tpd -b --no-pager | tail -n 40
sudo journalctl -b --no-pager | grep -i -E 'pppd|lcp|chap|ipcp'
ip -4 address show ppp0

Isikhathi se-LCP ukuphela kusho ukuthi iziphetho ezimbili azizange zivumelane ngezinketho eziyisisekelo zokuxhuma, lokho kuwukungafani kwephrofayela noma iphrothokholi yangaphakathi evinjiwe, hhayi iphasiwedi embi. Ukwenqatshwa okuqondile kokuqinisekisa kuyisimo esiphambene: uxhumano lwakhuphuka futhi uhlangothi olulodwa lwenqaba imininingwane yokungena. Isikhathi se-IPCP sokuphela ngemuva kokuqinisekisa okuphumelelayo sikhomba emachibini ekheli noma kunqubomgomo yeseva. Ngakunye kwazo kunomnini ohlukile nokulungiswa okuhlukile, yingakho isigaba sibaluleke ukudlula umbhalo wokugcina wephutha.

Gcina isiqephu sombhalo kanye negama lesigaba kwithikithi. Umsila onanyathiselwe ngaphandle komngcele wesigaba umema umfundi olandelayo ukuthi aqagele, futhi ukuqagela lapha kuthatha ihora.

Ukuvumelana phakathi kweklayenti neseva

Iziphetho zombili kufanele zamukele indlela efanayo yokuqinisekisa, futhi iphrofayela egciniwe ingacela leyo iseva eyayeka ukuyisebenzisa ngekota edlule. Ukusatshalaliswa okuphathwayo nakho kufihla uhlangothi lweseva, lapho isizathu sokwenqaba ngokuvamile sibhalwa kumsebenzisi hhayi kudivayisi.

Nika amandla indlela eyodwa esekelwayo esikhundleni sayo yonke inketho endala, ngoba iklayenti elinikeza izindlela ezinhlanu lifihla ukuthi iyiphi ehlulekile. Cela umphathi inqubomgomo yohlangothi lweseva kanye nokwenqaba okuqondile, lokhu akudingi ukuthi noma ubani ashicilele iphasiwedi. Indlela endala enikwe amandla ukuze kusindiswe iklayenti elilodwa ijwayele ukusabalala kuyo yonke iphrofayela ekopisha ifayela.

Qinisekisa ikheli, hhayi ukungena

Ukungena okuqediwe akusona isikhathi esingasetshenziswa. I-IPCP ixoxisana ngekheli langaphakathi, futhi ichibi eliphelile noma inqubomgomo enqaba iklayenti kusengashiya umhubhe oxhunyiwe ngaphandle kwanoma yini yokuhlela.

ip -4 address show ppp0
ip route get 10.52.9.1
ping -c 2 10.52.9.1

Hlola ikheli langaphakathi kuqala, bese umzila nesixazululi sensiza oyidingayo ngempela. Ikheli langaphakathi akulona iphuma lomphakathi elibikwa yiwebhusayithi, futhi ukuhlanganisa kokubili kuthumela abantu ukuzingela ukuvuza okungekho. Hlola insiza eyimfihlo ngekheli ngaphambi kokuyihlola ngegama, ukuze ukwehluleka kwe-DNS kungathathwa njengokwehluleka kokuhlela.

Bhala isigaba, indlela nekheli emfanekisweni owodwa bese ufaka usuku. Uma i-akhawunti efanayo yehluleka futhi ngemuva kwenyanga, lowo mfanekiso uwumehluko phakathi kokuhlola kwemizuzu emihlanu nophenyo olusha. Ukwehluleka ezigabeni ezihlukile yizigameko ezihlukile, ngisho noma iklayenti likhombisa ingxoxo eyodwa.

Izihloko ezihlobene