Kungani i-VPN ingabonakala ixhunyiwe kuyilapho kungasebenzi lutho

Iklayenti lakho libika ukuthi lixhunyiwe ngesikhathi isixhumanisi sikhona futhi isiphequluli siphelelwa isikhathi, futhi asikho isitatimende kulezi ezintathu esingamanga. Ixhunyiwe ichaza isendlalelo esingenaso ukuxhumana nekhasi olilindile. Ukuze unqume ukuthi yisiphi isendlalelo esibikayo kudingeka isicelo esisodwa esisha kanye nokubheka okukodwa kwisibali esingafakazela ukuthi ithrafikhi inyakazile. Ukuqala kabusha kuyalahla lobo bufakazi bese kwakha kabusha izimo obuzama ukuzibona.

Izinto ezintathu ezahlukene ezibizwa ngokuthi ixhunyiwe

Phansi kakhulu, ixhunyiwe kungase kusho ukuthi inqubo yeklayenti iyasebenza futhi ibambe isokhethi ibheke kumlingani. Phezulu kwalokho, kungase kusho ukuthi kukhona isixhumanisi esinekhwalo, esingadalwa idivayisi ehlala njalo noma inqubo yokubuyisela ngaphandle kwesesheni ephilayo ngemuva kwaso. Ezingeni lokulawula, kungase kusho ukuthi ukuxhumana kuxoxiwe, okungasho lutho mayelana nokuthi iphakethe elilodwa lidlule ngaphansi kwaso. Ngakunye kwalokho kubekezelela ukwehluleka okungabekezelelwa ezinye, futhi iklayenti ngokuvamile likhombisa okunamandla kakhulu elingakubanga.

Ngakho-ke isithonjana esiluhlaza kanye nomhubhe ofile kuyavumelana hhayi ukuphikisana; zibika ngezinto ezahlukene. Yisona sizathu sonke sokuthi lokhu kwehluleka kuqhubeke kuhlonzwa ngokungalungile njengebhagi yeklayenti.

Thumela isicelo esisodwa esingenabungozi endaweni oyidinga ngempela ngaphambi kokuthinta i-daemon, futhi ugcine ibhlokhi yethrafikhi eqondile edingekayo endaweni yayo ngenkathi usebenza. Ukuqala kabusha kususa ukulandelana kwezigameko bese kukwakha kabusha ngokusondelana ngokwanele ukuze kufihle imbangela, yingakho ithikithi elifanayo libuya ngemuva kweviki lingenalo lutho olusha. Isicelo esisodwa, ukufundwa kwesibali okukodwa kanye nesiqalo esidale ukwehluleka kuwubufakazi obuncane.

Yisiphi isibali esifakazela ukuthi amaphakethe anyakazile

Ku-IPsec, ukuxhumana kwe-IKE nokuxhumana kwe-CHILD kuyizinto ezihlukene, futhi yi-child kuphela ephethe izibali eziphendula lo mbuzo. Bhala i-child, bheka ukuthi amaphakethe ayanda kuzo zombili izinhlangothi, futhi uqhathanise nalokho uhlelo lokusebenza oluzama ukukwenza. Ukuxhumana okufakiwe kusifuri kungukutholakala okuhlukile kunalokho okwanda ngenkathi uhlelo lokusebenza lusahluleka; okokuqala kusho ukuthi ithrafikhi ayikhethwa, okwesibili kusho ukuthi iyanyakaza futhi iphutha lisekudeni. Funda izibali kabili, ngokuhlukana kwemizuzwana embalwa, ngoba isampula eyodwa ayikwazi ukukhombisa umkhuba.

swanctl --list-sas
ip xfrm state list
ip -s link show dev tun0

Izibali ezinguziro zikhomba ekukhetheni: umzila, inqubomgomo, indawo yamagama iphakethe eliphume kuyo, noma isixhumanisi iklayenti elingakaze lizibophe kuso. Izibali ezikhulayo zikhomba kude nomhubhe, ngakho-ke qhubeka nokudlulisela ekupheleni okude, ukuxazulula amagama, indlela yokubuya kanye nensizakalo yendawo ekuyiwa kuyo, ngalolo hlelo. Iphrothokholi engenayo into ye-child ehlukile iveza ubufakazi obufanayo ngemigomo yayo, ngakho-ke sebenzisa lokho ekubikayo mayelana nesimo somlingani kanye nenani lamaphakethe esikhundleni sokuboleka isilulumagama se-IPsec. Isimo sokufunda sibaluleke kakhulu kunethuluzi elikukhiqizile.

Iphutha lihlala kuphi ngemva kokuba izibali zinyakazile

Isango eliphendula ekhelini lalo lokuphatha lifakazela ukuthi isango liyasebenza, hhayi ukuthi kukhona okungemuva kwalo okusebenzela isicelo sakho, ngakho-ke hlola uhlangothi olude hhayi ibhokisi eliphakathi. Ukuxazulula amagama kufihla ukwehluleka kakhulu, ngoba isixazululi esingafinyeleleki ngomhubhe siphelelwa isikhathi njengokuxhumana okufile. Ukusesha okubili kuhlukanisa lezo zimo, futhi kokubili kushibhile. Buza isixazululi esiphoqwa umhubhe kuqala, bese ubuza isixazululi somphakathi ngegama elifanayo.

dig +short host.example
dig +short @10.20.0.1 host.example
ping -c 2 10.20.0.25

Igama elixazululwa ngesixazululi somphakathi kodwa hhayi ngesixazululi somhubhe lisho ukuthi umzila we-DNS uphukile, kuyilapho igama elixazululwa ngakho kokubili futhi lisaphelelwa isikhathi kusiphequluli likhomba emzileni wokubuya noma ensizakalweni. Uma i-ping ngekheli iphumelela futhi uhlelo lokusebenza lusenqaba, inethiwekhi yaletha isicelo futhi insizakalo yasinqaba, okuyisigaba sakamuva impela.

Bhala isiqalo, bese ushintsha into eyodwa

Bhala okwandulela ukwehluleka: isikhathi sokungenzi lutho, ukushintsha kwenethiwekhi, ukuvuselelwa kokhiye, ikhompyutha ephathekayo evusiwe, noma uhlelo olubuyiselwe. Lokhu kukhiqiza izindlela ezihlukene, futhi ngokuvamile uhlelo olubuyiselwe kuphela oluzilungisa, okuyisona simo esingakufundisi lutho. Ukuqala kabusha kususa ukulandelana kwezigameko bese kwakha izimo ezisondelene ngokwanele ukuze kufihle imbangela. Bhala isiqalo ngenkathi sisakwazi ukuphindwa.

Bese wenza ukulungiswa okukodwa okusekelwe futhi uphinde isicelo sokuqala kanye nesiqalo esidale ukwehluleka. Ukungenzi lutho yisiqalo esilula kakhulu ukuphinda, ngakho-ke kuwukuqinisekisa okusheshayo ukuthi ukulungiswa kwabhekana nendlela hhayi uphawu.

Lokho ofuna ukukubika ubufakazi bokuthi ithrafikhi obuzimisele ukuyithumela ifinyelele insizakalo obuzimisele ukuyifinyelela. Isithonjana esiphenduka siluhlaza, ikhasi eligciniwe elilayishayo kanye nesibali esinyakazayo konke kufakazela okungaphansi kwesicelo esisodwa esiqediwe esiya endaweni ehlosiwe. Gcina ndawonye isicelo, ukufundwa kwesibali kanye nesiqalo, ukuze umuntu olandelayo akwazi ukuhlukanisa ukulungiswa nengozi.