Kungani i-point-to-site idinga i-Azure VPN gateway esekelwe emizileni

I-gateway esekelwe kumgomo yakha ithumbu le-IPsec elikhethwa izikhethi zethrafikhi, futhi ayinayo i-interface yokunikeza imizila yamaklayenti. I-point-to-site iyisici sokuhlela imizila: i-gateway ineqoqo lamakheli amaklayenti futhi ifaka imizila yalawa maklayenti kunethiwekhi ebonakalayo. Lokho kungafani yikona okwenza iphothali ingabonisi nhlobo inketho yokuyengeza. Akukho lutho kugateway ekhona olungashintshwa ukuze kwakhiwe i-interface, ngakho ushintsho wukushintsha hhayi ukuhlela ukulungiselelwa.

Ukulandelana kubaluleke kakhulu kunalezi zinyathelo ngazinye. Uma ukulandelana kungalungile, ukuphazamiseka phakathi kwezindawo kuzodlula iwindi lokulungisa.

Yini i-gateway esekelwe kumgomo eyenza ngempela

I-gateway esekelwe kumgomo iqhathanisa amaphakethe nezikhethi zethrafikhi ezilungiselelwe kuxhumano futhi ithumelela okuhambisanayo ethumbini elilodwa. Awekho amakheli e-interface yethumbu, futhi akukho mzila womklayenti ngamunye ovelayo noma kuphi kunethiwekhi ebonakalayo. Ithebula lemizila lithola kuphela iziqalo zasendaweni ezikhomba kugateway. Leyo modeli yanele ukuxhumana phakathi kwezindawo phakathi kwezikhala zamakheli ezimbili ezingashintshi.

I-gateway esekelwe emizileni isebenza ngokuhlukile: yethula i-interface yethumbu, futhi imizila yiyo enquma okungena kuyo. I-point-to-site, kanye nanoma yikuphi ukwakheka okushintsha iqoqo lozakwabo, kuncike ekubeni ikhona kwaleyo interface.

Kungani iqoqo lamaklayenti lidinga leyo interface

Uma ikhompyutha ephathwayo ixhuma, i-gateway iyinikeza ikheli elisuka eqoqweni le-point-to-site. Ngemuva kwalokho inethiwekhi ebonakalayo idinga umzila othi leli kheli liyafinyeleleka nge-gateway. Ngaphandle kwe-interface yethumbu akukho okungabophezelwa lowo mzila kukho.

Iqoqo livela kububanzi obubekayo, futhi i-gateway yabela kulo. Uma lobo bubanzi buhlangana nanethiwekhi yasendaweni noma inethiwekhi ebonakalayo exhunyiwe, ukungqubuzana kubonakala kuphela ngemuva kokuxhuma kweklayenti, okuyisikhathi esibi sokukuthola. Beka iqoqo eceleni ngaphambi kokuqala kokufuduka.

Nohlobo alusona isilungiselelo somxhumano ngamunye. I-gateway eyodwa inohlobo olulodwa, futhi wonke umxhumano ewugcinayo uziphethe ngokufanele, ngakho ukwakheka okuxubile kudinga i-gateway yesibili hhayi umxhumano wesibili.

Uhlobo lubekwa ngesikhathi sokwakha

I-Microsoft ithi i-gateway yenethiwekhi ebonakalayo ayikwazi ukushintshwa phakathi kwaleyo esekelwe kumgomo naleyo esekelwe emizileni ngemuva kokusetshenziswa. Awukho umyalo wokuguqula futhi asikho iswishi kuphothali. Ukwakha i-gateway yesibili kulelo subnet elilodwa nakho akusona isisombululo, ngoba i-Azure ivumela i-gateway eyodwa kunethiwekhi ebonakalayo ngayinye. Ngakho ukufuduka wukususa, ukwakha kabusha nokuxhuma kabusha.

Lokho futhi kufaka isinqumo se-SKU ekwakheni okufanayo. Ukufudukela ku-SKU enkulu kamuva wukushintshwa kwesinye isikhathi kwe-gateway nokuphazamiseka okunye.

I-gateway eyodwa, i-GatewaySubnet eyodwa

I-gateway ihlala kusubnet ebizwa nge-GatewaySubnet, futhi i-gateway eyodwa kuphela eyihlalayo. Ukulinganisa usayizi waleso subnet kuyingxenye yokulungiselela, ngoba i-SKU enkulu idinga amakheli amaningi futhi isubnet ayikwazi ukuncishiswa ngemuva kwalokho. Bhala phansi izilungiselelo zamanje phakathi kwezindawo, ukhiye owabiwe, i-gateway yenethiwekhi yasendaweni kanye nemizila esebenzayo ngaphambi kokuthinta noma yini. Bese uthatha iwindi njengokuphazamiseka, ngoba ithumbu phakathi kwezindawo lihlala liphansi kuze kulungiselelwe ukuxhumana okusha.

Ukulandelana kokwakha kabusha okugcina ukuphazamiseka kukhawulelwe: yakha i-gateway esekelwe emizileni, yakha kabusha ukuxhumana phakathi kwezindawo kuyo leyo gateway yenethiwekhi yasendaweni, qinisekisa ithumbu kanye nesicelo esisodwa sokusuka kusibungu kuya kwesinye, bese kuthi ngemuva kwalokho kuphela ufaka i-point-to-site futhi ukhiqize iphakethe elisha leklayenti.

Yini ukushintshwa okungayilungisi

Umkhawulo wesibili ngowozakwabo hhayi owe-Azure. Idivayisi yasendaweni esekelwe kumgomo ingafinyelela kuphela inethiwekhi ebonakalayo exhuma nayo, futhi ayikwazi ukwedlula iye kwezinye izinethiwekhi zasendaweni noma kwezinye izinethiwekhi ezibonakalayo ngaleyo gateway. Ukushintsha uhlangothi lwe-Azure akukushintshi lokho ozakwabo angakukhetha.

Uma isidingo ngempela kuwukudlula phakathi kwezindawo, impendulo iyidivayisi yozakwabo esekelwe emizileni noma itopology lapho indawo ngayinye iphelela khona ngokwahlukile. Nquma lokho ngaphambi kokuthembisa usuku, ngoba ukushintshwa kwe-gateway kuphela ngeke kukulethe lokho.

Ukulandelana kwemisebenzi nokuhlola

Qinisekisa ikhono ngalinye ngokwahlukile. Okokuqala isimo sethumbu phakathi kwezindawo kanye nesicelo esisodwa sokusuka kusibungu kuya kwesinye, bese kuba ukuxhumana kwe-point-to-site kanye nesisetshenziswa esisodwa esiyimfihlo, bese kuba noma yimuphi umzila wokudlula okushiwo ukwakheka. Isimo se-gateway esiluhlaza sifakazela kuphela ukuthi inhlangano yezokuphepha inyukile, futhi akukho okunye. Gcina ukuhlola ngokulandelana kwalokho ukuze ukwehluleka kukhombe isigaba esikulethile.

Khiqiza kabusha amaphakethe eklayenti ngemuva kwanoma yiluphi ushintsho lwetopology, futhi gcina iqoqo kude nanoma yibuphi ububanzi basendaweni nobuxhunyiwe. Imikhawulo kanye nokwehluka kwe-SKU kuqoqwe ku-reference yezilungiselelo ze-Azure VPN Gateway.