Ukungafani kwe-MAC ku-IKE kusho ukuthi ukuhlolwa kokhiye owabiwe kwehlulekile
Kulogi ye-IKEv2 enokhiye owabiwe ngaphambili, i-MAC iyikhodi yokuqinisekisa umlayezo. Ukuhlolwa kuqhathanisa ini, kanye namaphutha amabili okulungiselela abangela lokho ngempela.
Ilogi yakho ye-Cloud VPN ikhombisa umzamo wokhiye owabiwe, kulandele umlayezo wokuthi i-MAC ayifani, futhi umcabango wokuqala uvame ukuba wukufuna inkinga yekheli. Kuleli gatsha i-MAC iyikhodi yokuqinisekisa umlayezo: inani elibalwa phezu kokushintshana ngokhiye okuvunyelwene ngawo. Uzakwabo waqhathanisa ukubala kwakhe nenalani ayitholile, futhi zahluka. Akukho khadi lenethiwekhi elihilelekile, futhi asikho isilungiselelo se-interface esishintsha lokho kuqhathanisa.
Ngokwenzayo, izimo ezimbili zikukhiqiza: izimfihlo ezinhlangothini ezimbili azisona inani elilodwa, noma ubunikazi obusetshenziselwa ukukhetha imfihlo abuhambisani. Nquma ukuthi yikuphi ngokufunda izinhlangothi zombili, hhayi umhubhe owodwa.
Lesi sigaba sifakazelani
Ukuhlolwa kwenzeka ngemva kokuba izinhlangothi zombili zishintshisane amapharamitha okuqala futhi zazisa. Ikhetha okhiye abangaba khona bobunikazi basendaweni nabakude futhi izama ukuqinisekisa idatha yokuqinisekisa etholiwe; uma kungekho okweqayo, ukuxilongwa kukhishwa. Lokho kuyisitatimende esiqinile ngokuqinisekisa nesibuthakathaka ngembangela, ngoba asisho ukuthi yiluphi uhlangothi olungalungile.
Impumelelo yangaphambilini ayidluli kulolu hlolo. I-IKE_SA_INIT eqediwe, noma umthwalo wokuthola i-NAT owabuyisela amanani alindelekile, kufakazela ukuthi ozakwabo bangakhuluma. Akufakazeli lutho mayelana nokuthi babelana ngemfihlo yini.
Amaphutha amabili okulungiselela, umlayezo owodwa
Owokuqala ukungafani kwangempela kwemfihlo, futhi ngokuvamile kuyingozi yokulungiselela: inani elikhiqiziwe elifakwe kukhonsole eyodwa futhi laphindwa labhalwa kwelinye, uhlamvu lokugcina olwasala ohlangothini olulodwa, noma uphawu lwezicaphuno olwafika nokunamathisela. Owesibili ukungafani kobunikazi, lapho imfihlo ilungile kodwa ubunikazi obethulwa uzakwabo bukhetha enye ingeno, ngakho imfihlo efanele ayizange izanywe. Kokubili kukhiqiza umugqa ofanayo, yingakho ukuqagela kubiza intambama.
Qhathanisa izinhlangothi zombili ngaphambi kokuthinta noma iyiphi imfihlo. Qondanisa umhubhe, indawo yokugcina yozakwabo, iwindi lesikhathi nokulungiselela kwakude, ngoba imihubhe emibili eyengeziwe ingaba nezimfihlo ezihlukene futhi isikrini esiphambi kwakho kungenzeka akusona esahlulekile.
Ukuthola i-NAT kuyisigaba esihlukile
Ukuthola i-NAT kubuza ukuthi amaphakethe abhalwa kabusha kanjani, hhayi ukuthi uzakwabo ungubani. Isango lekhasimende elingemuva kwe-NAT lisabonisa ngokufanele lapho ubunikazi obulungisiwe buyilokho okulindelwe uzakwabo, futhi inkinga ye-NAT ivela njengokungafani kwesiphakamiso noma kwembobo, hhayi njengokuqhathanisa kokuqinisekisa okuhlulekile.
Ungayithwali isitatimende esidala mayelana nokukhishwa kukamthengisi eyodwa ekusetshenzisweni kwamanje. Okudingwa ukudlula kwe-NAT kukukhishwa kwakho kungokwemibhalo yako uqobo, futhi ibinzana lokungafani kwe-MAC akusona ubufakazi obuvuna noma obuphikisa.
Nquma ngezinhlangothi zombili, hhayi ngesikrini
Funda kokubili ukulungiselela kanye kanye ngesikhathi imfihlo ifihliwe, bese ubuza imibuzo emithathu. Ingabe ubunikazi ohlangothini ngalunye yilokho okulindelwe olunye ngqo, uhlamvu ngohlamvu? Ingabe izinhlangothi zombili zisebenzisa inguqulo efanayo ye-IKE nendlela efanayo yokuqinisekisa? Ingabe umhubhe ohlulekayo uhambisana nokulungiselela okukufundayo? Ukuthi cha kunoma yikuphi kulokhu kunquma ukulungiswa ngaphandle kokuthinta imfihlo.
Uma kukuthathu kuhlanzekile, shintsha imfihlo ngohlelo olugunyaziwe esikhundleni sokuyizungeza ngokuhlela.
Ngemva kokuba uzakwabo eqinisekisile
Lapho ukuqinisekisa kuphumelela, indawo elandelayo yokwehluleka inhlangano yezokuphepha yengane: iziphakamiso nezinto zokukhetha ithrafikhi. Ukuzungezisa imfihlo eseyamukelwe akukwazi ukulungisa ukwehluleka kwengane futhi kwandisa isikhathi sokuphazamiseka. Funda isimo sengane, bese ufunda izinto zokukhetha nezindawo ezivikelwe ezinhlangothini zombili, futhi uhlobanise isiqondiso sokuxazulula izinkinga ze-Cloud VPN nesigaba esahluleka ngempela.
Hlobanisa amalogi amasha avela ezinhlangothini zombili ngababili abafanayo newindi elifanayo. Uhlangothi olulodwa lunikeza isinqumo ngaphandle kokufaka kolunye uhlangothi, futhi yilokho kungacaci okwakhiqiza umlayezo ekuqaleni.
Okungamelwe ukuphetha
Ungawufundi umlayezo njengesicelo sokushintsha amakheli e-MAC, futhi ungashicileli imfihlo eyabiwe lapho ucela usizo; isiqeshana esiqukethe ukhiye sidinga ukuthi ukhiye ususwe, hhayi ukuthi ilogi igcinwe. Ungacabangi nephutha lokuhamba kwendlela, ngoba ozakwabo abangakwazi ukufinyelelana abakhiqizi nhlobo ukuqhathanisa kokuqinisekisa. Futhi ungenzi umkhawulo obhaliwe womndeni womkhiqizo owodwa ube yinto ejwayelekile kukho konke ukuqaliswa kwe-IPsec.
Bhala phansi izinhlangothi ezahlulekile, isimo somhubhe ngaphambi nangemva, nokuthi yisiphi sezimo ezimbili osishintshile. Lokho kubhala kushintsha ukwenzeka okulandelayo kube ukuhlolwa kwemizuzu emihlanu.