Kungani umhubhe wakho we-IPsec usebenza kuze kube ukushintshwa kokhiye kokuqala kwe-CHILD SA

Umhubhe wehla, i-ping yaphendula, futhi wonke umuntu wasayina. Ngemva kwamahora amane isikhathi siyawa, izinhlangothi zombili zirekhoda iphutha lesiphakamiso noma lokushintshaniswa kokhiye, futhi umqondo wokuqala ukuthi kukhona okushintshile kunethiwekhi. Akukho okushintshile. Umhubhe othwala ithrafikhi wafakazela ukuthi izinhlangothi ezimbili ziyavumelana ngendlela yokuqinisekisa nangendlela yokuvikela inhlangano yengane yokuqala, futhi awufakazelanga lutho mayelana nokushintshaniswa kokhiye abazokukufuna lapho kwenzeka kabusha. Ukungafani kuhlezi esikhaleni phakathi kwalezi zigameko ezimbili.

Ukuxhumeka akusho ukuthi izilungiselelo ze-PFS ziyafana

Nge-IKEv2, inhlangano yengane yokuqala idalwa phakathi nokushintshaniswa kokuqinisekisa, futhi okhiye bayo bathathwa ezintweni esezenziwe inhlangano ye-IKE. Akukho kushintshaniswa okwehlukile kwe-Diffie-Hellman okwenzeka kuleyo ngane, ngakho inqubomgomo efuna okunjalo lapho kwenzeka kabusha ayihlolwa lapho kukhushulwa.

Ukwenzeka kabusha ukushintshaniswa okwehlukile. Lapho ukhiye wenhlangano yengane ushintshwa, izinhlangothi zingenza ukushintshaniswa okusha kokhiye neqembu elishiwo eziphakamisweni zazo, futhi leso yisikhathi sokuqala lapho izilungiselelo zeqembu ziqhathaniswa. Ngakho izinhlangothi ezimbili ezingavumelani zingaqinisekisa, zifake inhlangano yengane futhi zidlulise ithrafikhi, bese zehluleka ekwenziweni kabusha.

Ukungafani kucashile kuphi kuchungechunge lwesiphakamiso

Ku-strongSwan iqembu lengezwa esiphakamisweni sengane, yingakho uchungechunge olufana aes256gcm16-prfsha256-ecp256 lubonakala njengokukhethwa kokubethela kodwa luphethe nesidingo sokushintshaniswa kokhiye. Uhlangothi olunikeza kuphela aes256gcm16-prfsha256 alunaso leso sidingo, futhi izinhlu ezimbili ziyahlangana ekubetheni kodwa zehluke ekushintshanisweni.

Funda isiphakamiso sengane nesiphakamiso se-IKE njengezinhlu ezihlukene. Iqembu elivela ohlwini lwe-IKE alisho lutho ngohlu lwengane, futhi ukuhlela olunye ngenkathi ufunda olunye iyona ndlela evamile yokweqa lokhu.

Funda ukwehluleka, hhayi ifayela olilungisile

Thola i-notify eyaqeda ukushintshaniswa. Ukushintshwa kokhiye kwengane okubuyisela «asikho isiphakamiso esamukelekayo» kukhombisa izinhlu zeziphakamiso; isicelo sokwenza kabusha esingalokothi sithole impendulo sikhombisa indlela noma uhlangothi oluyeke ukulalela. Lezi ezimbili zidinga ukulungiswa okuhlukene, futhi amazwi ohlwini lwelogi ayahlukanisa.

Qinisekisa ukucushwa okusebenzayo, hhayi lokho okusediskeni. Ifayela eligciniwe kodwa elingalayishiwe, noma ukuxhumana okufundwe kabusha kusuka kwenye i-include, kuzokhiqiza ukungafani okungeke kulungiswe yinoma yikuphi ukuhlela kwefayela elibonakalayo.

Izigameko ezintathu ezibizwa ngukushintshwa kokhiye

Ukushintshwa kokhiye kwenhlangano ye-IKE, ukuqinisekisa kabusha kwe-IKE nokushintshwa kokhiye kwenhlangano yengane kuyimisebenzi ehlukene enemithetho yeziphakamiso ehlukene. Ukwehluleka okubikwe komunye wazo akusho lutho ngqo mayelana nezinye, futhi ilogi ehlanganisa zonke ibonakala njengephutha elilodwa eliphindayo ngenkathi kungamathathu.

Qaphela ukuthi uhlangothi lusho muphi umcimbi, bese uhlola iziphakamiso zalowo mcimbi kuphela. Shintsha uhlu olulodwa, layisha kabusha futhi uphoqelele umcimbi ofanayo futhi. Uma ilogi isho ukuqinisekisa kabusha, isiphakamiso se-IKE yisona okufanele sifundwe. Uma isho ukushintshwa kokhiye kwengane, isiphakamiso sengane siphethe iqembu elibalulekile.

Ukucisha ukwenza kabusha akusona isixazululo

Ukubeka isikhathi sokushintshwa kokhiye kuziro kucindezela ukushintshaniswa okwehlulwayo, futhi umhubhe uyaphila kuze kube uyahlakazwa noma uhlangothi luqale kabusha. Okukuthengile ukhiye ohlala isikhathi eside nokungafani ozokuhlangana nakho futhi phakathi kokufuduka, ukucwaningwa noma ukubuyekezwa komthengisi. Kuyafana nasezikhathini zokuphila ezeluliwe kude nangale kwenqubomgomo elindelwe olunye uhlangothi.

Esikhundleni salokho qondanisa iziphakamiso. Khetha iqembu elisetshenziswa yizinhlangothi zombili, lifake esiphakamisweni sengane kuzo zombili izingqimba, futhi gcina inqubomgomo yokwenza kabusha ngaphakathi kwebanga inhlangano elidinga ngempela.

Kufakazele ngokushintshaniswa okwehlulekile

Finyeza isikhathi sokushintshwa kokhiye kwengane esikhathini sokulungisa ukuze umcimbi ufike ngemizuzu hhayi ngamahora, noma uqalise ukushintshwa kokhiye kwengane ngesandla. Bese ubheka ukwenza kabusha okuphumelelayo futhi uqinisekise ukuthi ithrafikhi iyaqhubeka idlula kukho, ngoba ukuxhawulana okusha okufaka inhlangano yengane kodwa okudonsela phansi ukugeleza kohlelo lokusebenza kunye nesinye isici esingalungile.

Ngemva kwalokho buyisela isikhathi sokuphila esijwayelekile futhi gcina zombili izirekhodi zezigameko, esihlulekile nesiphumelele. Ubufakazi obukufunayo ukuthi ukuxhumana kudlula esikhathini sako sokuphila, hhayi ukuthi kudlule kwi-ping.