Kala amaseshini e-VPN ngendima, bese uhlola indawo yokwehluleka

Ufaka igesi yesibili, ikhonsoli ibonisa amalungu amabili anempilo, futhi uphahla lwamaseshini alushukumi ngalutho, ngoba akukho okwatshela amaklayenti ukuthi angafinyelela kanjani ibhokisi elisha. Ukukala isevisi ye-VPN yizinqumo ezimbili ngokulandelana: iyiphi indlela esabalalisa amaklayenti alolu hlobo lokuxhumana, nokuthi kusele umthamo ongakanani ngemva kokulahlekelwa okukodwa okubi kakhulu. Uma uzithatha ngendlela ephambene, uthola umklamo obonakala uwedlulele futhi ohluleka khona lapho udingeka khona. Qala kukhonsoli, bese wenza izibalo.

Hlanganisa indlela nohlobo lweseshini

Abasebenzisi bakude, ozakwabo phakathi kwezindawo kanye namathuleli emishini ahlale evuliwe akuzona izeshini ezingashintshana. Isici sokusabalalisa esakhelwe omunye wabo ngokuvamile siqondisa iklayenti ngesikhathi sezingxoxo, okuyinto engasho lutho kumlingani osevele enekheli eliqinile nokumiswa okumile.

Umhlahlandlela wokutholakala okuphezulu kwe-ASA we-Cisco uhlukanisa amakhono amathathu: ukulinganisa umthwalo we-VPN wokufinyelela kude, ukudlulela kokunye okunesimo kanye nokuhlanganisa amaqoqo phakathi kwezindawo. Owokuqala kuphela ohambisa iklayenti elifanele lisuka ekufakweni kweqembu liye elilungwini, futhi ukuxhumana kwe-LAN-kuya-LAN kuhlala ngaphandle kwalokho kusabalalisa. Isilinganisi se-TCP esijwayelekile asikwazi ukuthatha indawo yesinyathelo sokuqondisa sephrothokholi uqobo, ngoba i-handshake yethuleli ayiyona i-HTTP elula i-proxy engayibhala kabusha. Umphumela wangempela yisilinganisi esamukela ukuxhumana kodwa sisishiye iklayenti lingakwazi ukwakha ithuleli.

Funda uhlu lwezici uma uqhathanisa nohlobo lwakho lweseshini ngaphambi kokuyalela idivayisi yesibili. Umugqa welayisensi nomugqa wendlela kuyizinto ezihlukene, futhi okukodwa akusho okunye.

Sebenzisa isibonelo esikhundleni sokuqagela

Ake sithi amagesi amathathu ngamunye aqinisekiswe kumathuleli angu-800 ngesikhathi esisodwa ngaphansi komthwalo owuvumile, okungu-2,400 esewonke. Ithagethi engu-1,650 ngehora elimatasatasa ibonakala ikhululekile kuze kulahleke iyunithi eyodwa, bese kuthi ibhangqa elisala kufanele libambe u-1,650 ngokumelene no-1,600 oqinile. Umklamo usuvele wehlulekile, futhi akukho kulungiswa kokudlulela kokunye okulungisa izibalo.

Setha ithagethi ukuze isethi esalayo isayifeze, okusho ukuthi eqenjini lamalungu amathathu kufanele ihlale ngaphansi kwezingxenye ezimbili kwezintathu zesonke. Leso silinganiso isici sezibalo hhayi sanoma yimuphi umkhiqizo, ngakho siphinde sibalwe uma inombolo eqinisekisiwe yelungu ishintsha. Gcina inani elilayisensiwe, ubuningi obubhaliwe kanye nenombolo yakho owilinganisile emigqeni emithathu, ngoba akuvamisile ukuvumelana futhi encane iyona elawulayo. Ikholomu yesine yomvuthwandaba wehora elimatasatasa obonwe igcina uhlelo luthembekile ngemva kwenyanga yokuqala.

Beka isabelomali sokuqhuma kokuxhuma kabusha, hhayi isimo esizinzile kuphela

Amaseshini elungwini elihlulekile awaveli ngokuthula kwenye indawo. Kuye ngendlela, adlulela kwenye enesimo, axoxisane kabusha kusukela ekuqaleni, noma alinde ukuthi uhlelo lwezinhlelo luzame futhi ngohlelo lwalo.

Amaklayenti ayizinkulungwane ambalwa azama futhi phakathi komzuzu ahlukile kunesimo esizinzile esingu-1,650, futhi amaseva okuqinisekisa awazwa kuqala. Hlola futhi isikhala sechibi, ngoba ukuqondisa akucubunguli lona: ilungu elingakwazi ukwaba ikheli lisamukela iklayenti bese lilahla ithrafikhi yalo.

Qinisekisa umthamo ngokuba nechibi nomzila

Ukuqinisekisa kuwumsebenzi wokufunda kuphela obamba iningi lamaphutha omklamo ngaphambi kokuvulwa kwewindi lokulungisa. Qoqa ichibi ngelungu ngalinye, inani lamaseshini asebenzayo kanye nomzila obuyela ku-subnet yeklayenti, bese uqhathanisa ngakunye nohlelo. Ukuqedwa kwechibi nomzila wokubuya ongekho kokubili kubonakala njengeklayenti eliqinisekisa bese lilahlekelwa ithrafikhi.

show vpn-sessiondb summary
show running-config ip local pool
show vpn load-balancing
show route 10.40.12.0 255.255.255.0

Gijima leyo mifundo kwilungu ngalinye ngehora elimatasatasa elivamile hhayi ngehora elithule. Ilungu elibika amaseshini kodwa elingenazo izindala ezikhululekile selivele lisemkhawulweni walo ongokoqobo, kungakhathaliseki ukuthi ilayisensi ithini. Bhala inguqulo ye-firmware eceleni kwakho konke okukhishiwe, ngoba amagama emiyalo ashintsha phakathi kwezinguqulo.

Zijwayeze ukulahlekelwa kanye ngamabomu, ngaphandle kwesikhathi somsebenzi, futhi uqophe okubikwa amalungu asalayo ngesikhathi kwenzeka. Ilungu elamukela ukuqondisa kodwa elingenasikhala sechibi livela njengokwabiwa okuhlulekile, okuyinto i-bandwidth eyengeziwe engalungisi neze. Gcina izinombolo eziqinisekisiwe kanye nosuku eceleni kohlelo, ukuze ukubuyekezwa komthamo okulandelayo kuqale ngobufakazi hhayi ngespredishithi yelayisensi. Engeza umphumela walowo msebenzi ekhasini elifanayo, ngisho noma izinombolo zihambisana nohlelo.