Ukuhlela ukufinyelela okuyimfihlo kwe-IKEv2 eneziteki ezimbili nge-strongSwan

Ithuneli elineziteki ezimbili akusona isinqumo esisodwa kodwa kuthathu, futhi kungaphendulwa ngazo ngendlela ehlukene. Ukuthi iyiphi imindeni ithuneli yangaphandle ehamba kuyo, ukuthi iyiphi imindeni iklayenti eliyithola ngaphakathi, nokuthi iyiphi imindeni izinsizakalo ezivikelwe eziphendula kuyo ngempela. Idizayini ebathatha njengokukhetha okukodwa noma ithwala i-IPv6 engakaze idingeke, noma isabalalisa amakheli okungekho lutho olungawabuyisela emuva. Hlukanisa lezo zintathu futhi konke okunye ukulungiselela kuba cishe kwemishini.

Izinhlobo ezintathu zamakheli, kunqunywe ngokwehlukana

Ikheli langaphandle yindlela amasango amabili afinyelelana ngayo, futhi lingaba i-IPv4 kuyilapho ukuthutha kwangaphakathi kuthwala imindeni yomibili. Ikheli lengqondo langaphakathi wubuwena beklayenti ngaphakathi kwethuneli, futhi umndeni ngamunye udinga ichibi lawo. Iziqalo ezivikelwe yilokho iklayenti elingakufinyelela, futhi kungokwezinsizakalo hhayi okwethuneli. Ukuhlanganisa okwesithathu nokwesibili kubangela iningi lamaphutha okuhlela, ngoba kokubili kubonakala njengezikhawu eziyimfihlo.

Ukuthutha kwangaphandle kwe-IPv4 kuphela nokuthutha kwangaphakathi kweziteki ezimbili kuwuhlelo olujwayelekile nolusekelwa kahle.

Nquma ngakunye ngokucacile futhi ubhale izinqumo phansi. Uma indlela yangaphandle iyi-IPv4 kuphela, shono lokho futhi uyeke ukukhathazeka ngokufinyeleleka kwamaphoyinti okugcina e-IPv6. Uma umndeni wabelwa ngaphakathi kodwa akukho lutho oluphendula kuwo, khipha esimweni noma wenze lezo zinsizakalo zibe neziteki ezimbili ngempela.

Yabela ikheli lengqondo kumndeni ngamunye

Kusilungiselelo se-swanctl iklayenti licela amakheli engqondo, futhi uphawu lokungaziwa kumndeni ngamunye lucela umphenduli ukuba abele elilodwa kulo ngamunye. Umphenduli uwathatha emachibini, futhi amachibi ayizinto ezihlukile kumanethiwekhi angemuva kwesango. Bagcine behlukene esimweni futhi, ngoba ichibi elihlangana nesiqalo sensizakalo likhiqiza umzila obonakala ulungile kuze kube umzuzu lapho ukuthutha kuhla endaweni engadingekile.

Cela imindeni yomibili uma udinga yomibili, futhi eyodwa uma ungayidingi, ngoba ikheli elingasetshenziswanga liyindawo yomgomo engenanzuzo. Isicelo esithile yisicelo hhayi ukubhuka, futhi umphenduli angabuyisela elinye inani ngaphansi komgomo wakhe. Leyo ncazelo ibalulekile noma kuphi lapho ikheli lifakwe ngokuqinile kumthetho we-firewall noma ekuhlolweni kokuqapha. Bika kumachibi ngegama ekuxhumaneni futhi ugcine amanethiwekhi ezinsizakalo ngaphandle kwawo.

vips = 0.0.0.0, ::

Khiqiza eyakho isiqalo sasendaweni esiyingqayizivele sechibi le-IPv6 esikhundleni sokuthatha inani lesibonelo elifushane. Isibonelo sikhombisa ukuma kwesilungiselelo, hhayi inani elizenzakalelayo okufanele lizuzwe njengefa.

Chaza izindawo zokuyisa ngokuhlukile kumachibi

Izinketho zokuthutha zichaza lokho uhlangothi ngalunye olulindele ukukushintshana, ngakho izinketho zasekhaya zesango kufanele zibize iziqalo zezinsizakalo ezivikelwe hhayi amachibi amaklayenti. Izinketho ezikude zeklayenti zibonisa leyo nhloso. Uma izinhlu zombili zichaza izinto ezihlukene, ithuneli ingakhuphuka futhi ingathwali lutho olusizo.

Lezo ziqalo ezifanayo zidinga imizila yokubuya nokudluliswa okuvunyelwe ngaphakathi kwenethiwekhi yesango, kumndeni ngamunye oyivulayo.

Yilapho uhlelo lwe-IPv6 oluyimfihlo luyeka ukwanela. Ukwazisa kwasendaweni okuyingqayizivele kuthenga ukufinyeleleka okuyimfihlo futhi akukhiqizi ukuphuma kwe-IPv6 komphakathi, ngakho idizayini ecabanga ukuthi umndeni ongenazinombolo uzolandela imithetho yokufihla ye-IPv4 izodumaza abasebenzisi bayo. Uma ukufinyelela kwe-IPv6 komphakathi kuyingxenye yesidingo, kudinga uhlelo olunomzila kanye nomthombo ophezulu ovumelanayo. Uma kungenjalo shono ngokucacile ukuthi uhlangothi lwe-IPv6 luyimfihlo kuphela, okuwumngcele othembekile hhayi umkhawulo okufanele ufihlwe.

Yenza i-DNS nemizila yokubuya ibe ngenhloso

Ukuxazululwa kwamagama akulandeli ukuthutha. Isixazululi singabuyisela amarekhodi e-A ne-AAAA ngethuneli le-IPv4 kuphela, futhi iklayenti lizobe lizama umndeni ongakaze uwuhlele. Nquma ukuthi yimaphi amagama ezinsizakalo okufanele athwale izimpendulo zeziteki ezimbili ezisebenzisekayo futhi wenze zombili lezo zindlela zibe ngenhloso. Igama elixazulula emndenini ongenandlela esebenzayo likhiqiza ukuma esikhundleni sephutha elihlanzekile, futhi ukuma kunzima kakhulu ukukuxilonga.

Bhala ukufinyeleleka kwephoyinti lokugcina langaphandle ngokwehlukana, kuhlanganise nokuthi kukhona yini ukuwela kwe-NAT futhi kusebenzisa umndeni uphi.

Bese ubhala uhlelo ngemigqa eyisithupha: iphoyinti lokugcina langaphandle, ichibi le-IPv4, ichibi le-IPv6, isiqalo sensizakalo se-IPv4, isiqalo sensizakalo se-IPv6, kanye nomzila onazo izimpendulo zakho ngakunye. Uhlelo oluleso simo luphendula imibuzo umqhubi ayibuza ngempela ngo-thathu ekuseni. Noma yini emfushane kakhulu ishiya iziteki ezimbili njengekheli lesibili eliboshelwe kumgomo we-IPv4 kuphela, futhi yileyo ndlela evamise ukuphuma isebenza kancane.