I-VPN phakathi kwezindawo isebenza ngendlela eyodwa: amaphutha amabili ahlukene
Impendulo engabuyi neze nokuxhumana okwenqatshiwe kungamaphutha amabili ahlukene. Qhathanisa inqubomgomo, umzila kanye nekheli lomthombo iseva elikubona ngempela.
Indawo A ifinyelela ku-B, u-B akakwazi ukufinyelela ku-A, futhi umhubhe ubonakala ulungile kuzo zombili izinhlangothi. Ngaphambi kokuthinta umhubhe, nciza ukuthi iyiphi iphutha olinayo ngempela. Ukuxhumana okusha okuqalwe ku-B futhi okwenqatshiwe kanye nempendulo yokuxhumana okuqalwe ku-A engafiki neze kukhiqiza izikhalo ezifanayo nezincazelo ezihluke ngokuphelele. Okunye inkinga yenqubomgomo noma yomzila endleleni; okunye inkinga yendlela yokubuyela noma yesimo yethrafikhi eyayivele ivunyelwe.
Lowo mehluko unquma ukuthi imiphi imiyalo okufanele isetshenziswe.
Amaphutha amabili abonakala efana
Esimeni sokuqala umhambi we-B uthumela i-SYN ku-A, futhi akukho okubuyayo. Kwesesibili umhambi we-A uvula isikhathi ngempumelelo futhi impendulo inyamalala endleleni yokubuyela. Bobabili abasebenzisi bathi ukuxhumana kunohlangothi olulodwa, futhi bobabili bachaza iphakethe elanyamalala, ngakho incazelo yodwa ayikwazi ukwehlukanisa.
Buza ukuthi yiluphi uhlangothi oluqale umzamo ohlulekile. Lelo qiniso elilodwa lisusa uhhafu wezizathu ezingaba khona.
Bese uqinisekisa ukuthi ukuhlolwa kwasebenzisa amahhambi afanayo kanye nensizakalo efanayo isikhathi sonke. I-ping evela kolunye uhlangothi nokuxhumana kokwabelana ngefayela okuvela kolunye kuhlola izinto ezimbili ezihlukene, futhi ukuxilongwa okuvela esangweni kungase kukhethe ikheli lomhubhe elingasetshenziswa yinoma yiluphi ugendo lomsebenzisi.
Isimo sokuqala: indlela yokubuyela ayikho
Iseva ekude ephendula ngesango elihlukile elijwayelekile ingase yamukele isicelo futhi iqondise impendulo kwenye indawo. Khona-ke izindonga zomlilo ezilandelela isimo ziyayilahla impendulo engalingani, ngoba ayihambisani nokugeleza okusunguliwe, okubonakala njengohlangothi olungakaze lusebenze. Ukuhumusha kwengeza enye indlela: indawo ekuyiwa kuyo ibona umthombo ohunyushiwe futhi iphendula kuwo, ngakho umthetho obhalelwe ikheli lokuqala awuhambisani nakancane.
Hlola ikheli indawo ekuyiwa kuyo elibona ngempela ngemva kokuhumusha, nendlela yokubuyela yalelo kheli hhayi yesethi encane yokuqala.
Isimo sesibili: inqubomgomo ayizange ivume
Isimo esiphambene silula futhi sivamile kunalokho okubonakala, ihhovisi elilodwa kufanele lisebenzise insizakalo emaphakathi futhi lingaqali ukuxhumana okuya phakathi neze. Lokho kungalingani yisinqumo sokufinyelela esenziwe ngamabomu, futhi umhubhe usebenza njengoba wakhiwe. Funda inqubomgomo yokufinyelela ngaphambi kokushintsha noma isiphi isilungiselelo somhubhe. Idokhumenti, hhayi ukubanjwa kwamaphakethe, isho ukuthi yiluphi uhlangothi olwaluhlosiwe. Ukubanjwa kungabonisa kuphela okwenzekile, hhayi okuvunyelwe.
Uma ukuqalwa kwezinhlangothi zombili kudingeka ngempela, engeza imvume yensizakalo ethile ngesethi yemithetho esekelwayo yephulatifomu. Ukwenza yonke isethi encane ithembane ukuze kulungiswe uhlelo lokusebenza olulodwa kuguqula isidingo esincane sibe imvume ebanzi, futhi lokho kushintshana akuvamisile ukubuyekezwa kamuva.
Qhathanisa ngaphambi nangemva kumahhambi afanayo
Bheka zombili iziphetho zomzamo owodwa, hhayi imizamo emibili ehlukene. Bhanga esangweni lomhambi oqalayo nasedatsheni, bese uqhathanisa okungene, okuphumile kanye nekheli elibonwe uhlangothi olukude.
tcpdump -ni any host 10.20.30.40 and port 445 conntrack -L | grep 10.20.30.40 ip route get 10.20.30.40 swanctl --list-sas
Uma ukubanjwa endaweni ekuyiwa kuyo kukhombisa isicelo ngekheli lomthombo elingalindelekile, impendulo isekuhumusheni noma ekuxhumaniseni imizila, hhayi enqubomgomeni yokuphepha yomhubhe. Uma indawo ekuyiwa kuyo ingabonisi sicelo nhlobo, iphakethe alizange liwele indlela evikelwe.
Ngemva kokulungiswa, phinda ukuhlolwa okufanayo kusuka kumhambi ofanayo futhi uqinisekise ukuthi ukufinyelela okungahlobene kusanqatshwa. Isimo somhubhe esithi “established” asisekeli noma yisiphi isiphetho kulezi ezimbili ngokwaso.