Ngabe i-router phakathi kwama-peer amabili e-IPsec idinga i-IPsec?
I-router yokudlulisa idlulisa inhloko yangaphandle futhi ayikaze ikhiphe ukubethela. Ama-endpoint anokwenziwa kwe-IPsec, futhi isifanisi kungenzeka singalingisi noma yikuphi kukho njengoba ulindele.
Umsebenzi waselebhu othi “lungiselela i-IPsec phakathi kwezindawo ezimbili” ufihla imisebenzi emibili ehlukene. Ama-endpoint amabili aqeda ithumbu: ayaxoxisana, aqinisekisa, abethela futhi akhipha ukubethela. Noma iyiphi i-router ephakathi idlulisa amaphakethe anenhloko yangaphandle engokwama-endpoint, futhi yenza lokho ngaphandle kokwazi ukuthi ithumbu likhona.
Ukunquma ukuthi iyiphi imisebenzi ecelwa idivayisi yisinyathelo sokuqala somsebenzi. Iningi lokudideka emibikweni yaselebhu, kanye nengxenye enkulu yokudideka emidwebeni yokukhiqiza, livela ekuthatheni “isekela i-IPsec” njengesici esisodwa esikhundleni sezimbili.
Ukudlulisa akukona ukuqeda
Kumodi yethumbu, inhloko ye-IP yangaphandle ibhekiswe emadivayisini aqeda ithumbu. I-router ephakathi ibheka indawo ekuyiwa kuyo bese idlulisa, njengoba yenza kunoma yiphi enye iphakethe, futhi umthwalo ewuthwalayo awubonakali kuyo.
Lokho kungabonakali kwenziwe ngamabomu. I-router ayinayo imfihlo yozakwethu, ayenzi izingxoxo, futhi ayidingi isisekelo sedatha semigomo. Idinga umzila oya endaweni ekude kanye nemvume yokudlulisa iphakethe.
Ukuhlanganisa lezi zinto ezimbili kuholela emaphutheni angempela: ukucela i-firewall yokudlulisa ukuthi “ivumele i-IPsec” kuyilapho isidingo sangempela siwukuvumela iphrothokholi 50 phakathi kwamakheli athile, noma ukulindela ukuthi idivayisi ephakathi ikhiphe ukubethela ukuze ihlolwe kuyilapho ingenalo ukhiye.
Okufanele idivayisi ephakathi ikwenze kahle noma kunjalo
Ukudlulisa kunezidingo zako. Imizila kufanele ifinyelele zombili izindawo zangaphandle, futhi noma imuphi umgomo osendleleni kufanele uvumele ukuxhumana kwangempela kwangaphandle esikhundleni senombolo yechweba eqanjiwe. Umthetho obhalwe ngokumelene ne-TCP 443 ngoba othile wacabanga i-TLS ngeke uhambisane nephrothokholi 50.
I-ESP yemvelo iyiphrothokholi ye-IP 50. Akuyona i-TCP 50 futhi akuyona i-UDP 50, futhi umthetho ovimba ukuxhumana okungewona i-TCP uzoyilahla. Uma umklamo usebenzisa ukufakwa kwe-UDP, ezokuthutha ezibonakalayo zishintshela echwebeni lokufaka, futhi umgomo kufanele uhambisane nomklamo okhethiwe.
Usayizi wephakethe nawo ubalulekile. Umzila othwala uphenyo oluncane awufakazeli ukuthi ukushintshana okugcwele okufakiwe kuyangena. Indlela elahla amaphakethe amakhulu ingavumela izingxoxo ukuthi ziphumelele futhi umsebenzi wehluleke, okubonakala njengenkinga yohlelo lokusebenza. Hlola ngokuxhumana okulingana nosayizi womsebenzi wangempela ngaphambi kokusola ithumbu.
Kungani isifanisi sishintsha umbuzo
Isifanisi akusona i-router enohlu olufushane lwezici; iyimodeli eneqoqo elincane elibhaliwe kanye nemithetho yayo mayelana nokuthi idivayisi ethile ingalungiselelwa ukwenzani. Imibuzo Evamile ye-Packet Tracer yakwa-Cisco isho ngokusobala ukuthi amadivayisi namaphrothokholi amamodeli enziwe lula.
Ngakho umbuzo uba yimibuzo emithathu. Ingabe idivayisi efanisisiwe idlulisa amaphakethe adingwa yisimo? Ingabe leyo divayisi inikeza indawo yokulungiselela okucatshangwa yisifundo? Futhi ingabe umyalo owamukelwe usho ukuthi ukuziphatha kufaniswa ngempela, noma kuhlaziywa nje?
Umyalo ongekho ungaba umkhawulo wemodeli kunokuba kube iphutha ekulungiseleleni kwakho. Umyalo okhona ungamukela isintaksi ngaphandle kokukhiqiza zonke izimilo zokukhiqiza. Hlola usizo lwedivayisi lwenguqulo efakiwe ngaphambi kokuphetha noma yiluphi uhlangothi.
Ukubhala umbandela wokuphumelela welebhu
Esifundweni se-underlay, umbandela wokuphumelela ukufinyeleleka kwezindawo kanye namaphakethe angaphandle adlula idivayisi ephakathi. Kufakazele ngezibali zesifanisi ngokwaso noma ngokubuka amaphakethe, futhi usho iphrothokholi olindele ukuyibona.
Esifundweni se-IPsec, engeza isimo sezingxoxo kanye nokugeleza okukodwa okuvikelwe kusuka ku-LAN kuya ku-LAN. Uma isifanisi siveza izinhlangano zokuphepha, zirekhode. Uma singenzi, shono lokho embikweni esikhundleni sokusho ukuthi ithumbu liqinisekisiwe.
Gcina inguqulo yesifanisi, amadivayisi akhethiwe kanye nomgomo wokufunda kanye nefayela le-topology. Yilo rekhodi elivumela omunye umuntu ukuphinda umsebenzi futhi aqonde ukuthi yiziphi izingxenye ezifanisisiwe.
Ukulungiselela kokukhiqiza kudinga ubufakazi bayo beplathifomu. Iphakethe elifanisisiwe eliluhlaza kungumphumela wokufundisa, hhayi isitatimende sokuhambisana mayelana nehardware ozoyisebenzisa.