Ama-LAN amaningi emhubheni owodwa we-AWS VPN: kusho ukuthini umkhawulo we-SA
I-AWS ivumela ipheya elilodwa le-IPsec SA ngomhubhe ngamunye, futhi lokho akulona umkhawulo we-subnet eyodwa. Hlukanisa kuqala ububanzi bokuvikela ekuhambiseni nasekufinyeleleni.
Ukungeza i-LAN yesibili yegatsha ku-AWS Site-to-Site VPN akudingi ukuhlangana kwesibili okuzimele kwe-IPsec ngaphakathi kwalowo mhubhe. Umkhawulo abantu abakhubeka kuwo ungokoqobo kodwa mncane kunalokho okuzwakala: i-AWS ibhala phansi ipheya elilodwa le-IPsec SA eliyingqayizivele ngomhubhe ngamunye, elilodwa elingena nelilodwa eliphuma, futhi imihubhe emibili ekuxhumaneni okukodwa ithola ipheya yayo ngayinye. Lokho kuyisici sesevisi, hhayi umthetho wokuthi i-IPsec ivikela i-subnet eyodwa ngesikhathi. Umehluko ubaluleka kakhulu lapho isango lekhasimende elisekelwe kunqubomgomo liguqula ingeniselo ngayinye yomgomo ibe ukuhlangana kwayo.
Qala ngokuxhumana, hhayi ngohlu lwama-LAN
Vula ukuxhumana kukhonsoli futhi uqaphele ukuthi kuhambiswa kanjani. Ukuxhumana okungaguquki kuthwala amaprefix akude owakumemezelayo. Ukuxhumana kwe-BGP kuwafunda esangweni lekhasimende.
Noma kungakanani, umhubhe usekelwe emizileni. Okungena kuwo kunqunywa izikhethi ezixoxisana nazo idivayisi yakho, hhayi inani lama-subnet ongalibhala efomini.
Buka ukuthi isango lekhasimende lixoxisana ngani
Idivayisi esekelwe kunqubomgomo ingaguqula ingeniselo ngayinye yomgomo ibe yi-SA yayo. Ama-LAN amabili asho amangenelo amabili, okusho ama-SA amabili, futhi yilapho umkhawulo ngomhubhe ngamunye uqala ukubaluleka. Izidingo zesango lekhasimende zixwayisa ngqo ngalokhu kuziphatha futhi ziphakamisa imithetho ehlanganisiwe kulezo zinto. Hlola izikhethi okuxoxiswane ngazo esikhundleni sokubala ama-ACL kudivayisi.
Idivayisi kufanele ilungiselelwe ukwethula kokubili amaprefix ngaphansi komgomo owodwa, ngaphandle kwalokho uhlangothi olukude angeke ikwazi ukubamba umphumela.
Amabhuku amathathu, agcinwe ehlukene
Hlanganisa lezi zinhlu ezintathu futhi noma yiluphi ushintsho luba ukuqagela. Zibeke njengezikholomu ezihlukene futhi ugcwalise ngayinye kwinethiwekhi yakho.
| Inventory | What belongs there |
|---|---|
| Required networks | 10.20.10.0/24 and 10.20.30.0/24, as presented after any deliberate translation |
| Protection agreement | the selectors the tunnel actually negotiated for those prefixes |
| Delivery and permission | VPC routes, return routes, security groups and any filtering |
Yikholomu eliphakathi kuphela elikhawulelwe umkhawulo we-SA. Ikholomu yokuqala iqiniso lebhizinisi, futhi eyesithathu iyona eyenza uhlelo lusebenze. Funda izikhethi ezamukelwe kudivayisi esikhundleni sokucabanga ububanzi kusuka enanini lemigqa ye-ACL oyibhalile.
Hlanganisa ngaphandle kokwandisa imvume
Umzila ofingqiwe uyindlela ecacile yokuthola ingeniselo eyodwa yomgomo, futhi futhi iyindlela iqoqo elivikelwe elikhula ngokuthula ngayo. I-/20 ehlanganisa kokubili /24 ihlanganisa namakheli okungekho gatsha eliwasebenzisayo, futhi umhubhe uzowathwala ngokuzimisela. Uma kufanele ufingqe, kuhle ukuhlonza nokuhlunga ohlangothini olwamukelayo ukuze isikhala esengeziwe senqatshwe esikhundleni sokungamenyezelwa. Iphakethe elinqatshiwe liwubufakazi. Ikheli elingamenyezelwanga liwukuntuleka kobufakazi kuphela.
Ukuhlanganisa inqubomgomo yokuvikela ushintsho kulokho okungabhalwa ngemfihlo. Akusikho ukunikezwa kokufinyelela futhi akufanele kuphathwe kanjalo.
Hlola womabili ama-LAN, bese ugcina yomibili imihubhe
Ngemva koshintsho oludidiyelwe, hlola ububanzi bokuvikela obusebenzayo bese usebenzisa uhlelo lwangempela kusuka ku-LAN ngayinye. Ukusebenza kwe-subnet eyodwa akufakazi lutho mayelana nokuhlanganiswa kwezikhethi zesibili, futhi nakancane mayelana nomzila walo wokuphendula.
Gcina yomibili imihubhe kumklamo. Ukuhlanganisa inqubomgomo akusona imvume yokulahla ukungabi nakusilela, futhi umhubhe owodwa othwala yonke i-LAN yegatsha wenza iwindi lokunakekela elilandelayo libe ukuphazamiseka.
Bhala izikhethi okuxoxiswane ngazo, womabili amaprefix kanye nabanikazi bemizila encwadini efanayo yoshintsho. Uma kufika i-LAN yesithathu, leyo ncwadi izokutshela ukuthi wengeza isikhethi noma uqala kabusha.