Iyini i-Bypass?
I-Network Security Equipment ivamise ukusetshenziswa phakathi kwamanethiwekhi amabili noma ngaphezulu, njengaphakathi kwenethiwekhi yangaphakathi nenethiwekhi yangaphandle. I-Network Security Equipment ngokuhlaziywa kwephakethe lenethiwekhi yayo, ukuthola ukuthi ingabe lukhona yini usongo, ngemva kokucutshungulwa ngokwemithetho ethile yomzila ukuze idlulisele iphakethe ukuze liphume, futhi uma imishini yokuphepha yenethiwekhi ingasebenzi kahle, Ngokwesibonelo, ngemva kokuhluleka kwamandla noma ukuphahlazeka. , amasegimenti enethiwekhi axhunywe kudivayisi anqanyuliwe ukusuka kwenye. Kulokhu, uma inethiwekhi ngayinye idinga ukuxhumeka komunye nomunye, khona-ke i-Bypass kufanele ivele.
Umsebenzi we-Bypass, njengoba negama lisho, wenza amanethiwekhi amabili axhumeke ngokomzimba ngaphandle kokudlula ohlelweni lwedivayisi yokuphepha yenethiwekhi ngesimo esithile sokucupha (ukwehluleka kwamandla noma ukuphahlazeka). Ngakho-ke, uma idivayisi yezokuphepha yenethiwekhi yehluleka, inethiwekhi exhunywe kudivayisi ye-Bypass ingaxhumana yodwa. Yiqiniso, idivayisi yenethiwekhi ayicubunguli amaphakethe kunethiwekhi.
Uyihlukanisa kanjani i-Bypass Application Mode?
I-Bypass ihlukaniswe yaba izindlela zokulawula noma zokucupha, ezimi kanje
1. Icushwe ukunikezwa kwamandla. Kule modi, umsebenzi we-Bypass unika amandla lapho idivayisi icishiwe. Uma idivayisi ivuliwe, umsebenzi we-Bypass uzokhutshazwa ngokushesha.
2. Ilawulwa yi-GPIO. Ngemva kokungena ku-OS, ungasebenzisa i-GPIO ukusebenzisa amachweba athile ukuze ulawule ukushintshwa kwe-Bypass.
3. Ukulawulwa yi-Watchdog. Lesi isandiso semodi yesi-2. Ungasebenzisa i-Watchdog ukulawula ukuvumela nokukhubaza uhlelo lwe-GPIO Bypass ukuze ulawule isimo se-Bypass. Ngale ndlela, uma ipulatifomu iphahlazeka, i-Bypass ingavulwa yi-Watchdog.
Kuzinhlelo zokusebenza ezingokoqobo, lezi zifunda ezintathu zivame ukuba khona ngesikhathi esisodwa, ikakhulukazi izindlela ezimbili 1 no-2. Indlela yokufaka evamile ithi: uma idivayisi ivaliwe, i-Bypass inikwe amandla. Ngemuva kokuthi idivayisi ivuliwe, i-Bypass inikwa amandla yi-BIOS. Ngemuva kokuthi i-BIOS ithathe idivayisi, i-Bypass isasebenza. Vala i-Bypass ukuze uhlelo lokusebenza lusebenze. Phakathi nayo yonke inqubo yokuqalisa, cishe akukho ukunqanyulwa kwenethiwekhi.
Uyini umgomo wokusebenzisa i-Bypass?
1. Izinga le-Hardware
Ezingeni lehadiwe, ama-relay asetshenziswa kakhulu ukufeza i-Bypass. Lokhu kudluliselwa kuxhunywe kuzintambo zesignali zamachweba amabili enethiwekhi ye-Bypass. Umfanekiso olandelayo ubonisa imodi yokusebenza ye-relay usebenzisa ikhebula lesignali eyodwa.
Thatha i-trigger yamandla njengesibonelo. Endabeni yokwehluleka kwamandla, inkinobho ku-relay izogxumela kusimo esingu-1, okungukuthi, i-Rx ku-interface ye-RJ45 ye-LAN1 izoxhuma ngokuqondile ku-RJ45 Tx ye-LAN2, futhi uma idivayisi ivuliwe, inkinobho izoxhuma. xhuma ku-2. Ngale ndlela, uma ukuxhumana kwenethiwekhi phakathi kwe-LAN1 ne-LAN2 kuyadingeka, Udinga ukwenza lokho ngohlelo lokusebenza kudivayisi.
2. Izinga Lesofthiwe
Ekuhlukanisweni kwe-Bypass, i-GPIO kanye ne-Watchdog kukhulunywa ngayo ukulawula nokucupha i-Bypass. Eqinisweni, zombili lezi zindlela ezimbili zisebenzisa i-GPIO, bese i-GPIO ilawula ukudluliswa kwehadiwe ukwenza ukugxuma okuhambisanayo. Ngokuqondile, uma i-GPIO ehambisanayo isethelwe ezingeni eliphezulu, i-relay izogxumela endaweni engu-1 ngokuhambisanayo, kanti uma indebe ye-GPIO isethelwe ezingeni eliphansi, i-relay izogxumela endaweni yesi-2 ngokuhambisanayo.
Ku-Watchdog Bypass, empeleni yengezwe i-Watchdog control Bypass ngesisekelo sokulawula kwe-GPIO ngenhla. Ngemuva kokuthi i-watchdog iqale ukusebenza, setha isenzo sokudlula ku-BIOS. Uhlelo luvula umsebenzi we-watchdog. Ngemuva kokuthi i-watchdog iqale ukusebenza, i-bypass yembobo yenethiwekhi ehambisanayo inikwe amandla futhi idivayisi ingena esimweni sokudlula. Eqinisweni, i-Bypass nayo ilawulwa yi-GPIO, kodwa kulokhu, ukubhalwa kwamazinga aphansi ku-GPIO kwenziwa yi-Watchdog, futhi akukho zinhlelo ezengeziwe ezidingekayo ukuze kubhalwe i-GPIO.
Umsebenzi we-Hardware Bypass uwumsebenzi oyimpoqo wemikhiqizo yokuphepha yenethiwekhi. Uma idivayisi ivaliwe noma iphahlazeka, izimbobo zangaphakathi nezangaphandle zixhunywa ngokoqobo ukwenza ikhebuli yenethiwekhi. Ngale ndlela, ithrafikhi yedatha ingadlula ngokuqondile kudivayisi ngaphandle kokuthintwa isimo samanje sedivayisi.
Ukutholakala Okuphezulu (HA) Isicelo:
I-Mylinking™ inikeza izixazululo ezimbili zokutholakala okuphezulu (HA), I-Active/Standby kanye ne-Active/Iyasebenza. Ukuthunyelwa kwe-Active Standby (noma okusebenzayo/okungenzi lutho) kumathuluzi asizayo ukuze kuhlinzekwe i-failover kusukela kumadivayisi ayinhloko kuya kusekelayo. Futhi Okusebenzayo/Okusebenzayo Kufakwe kuzixhumanisi ezingasasebenzi ukuze kuhlinzekwe ukuhluleka uma noma iyiphi idivayisi esebenzayo yehluleka.
I-Mylinking™ Bypass TAP isekela amathuluzi amabili angaphakathi emgqeni angasasebenzi, angase asetshenziswe kusixazululo Esisebenzayo/Sokulinda. Eyodwa isebenza njengedivayisi eyinhloko noma "Esebenzayo". I-Standby noma idivayisi ethi "Passive" isathola ithrafikhi yesikhathi sangempela ngochungechunge lwe-Bypass kodwa ayithathwa njengedivayisi esemgqeni. Lokhu kunikeza "I-Hot Standby" ukungafuneki. Uma idivayisi esebenzayo ihluleka futhi i-Bypass TAP iyeka ukuthola ukushaya kwenhliziyo, idivayisi yokulinda ithatha ngokuzenzakalelayo izintambo njengocingo oluyinhloko futhi iza ku-inthanethi ngokushesha.
Yiziphi Izinzuzo ongazithola ngokusekelwe ku-Bypass yethu?
1-Yabela ithrafikhi ngaphambi nangemuva kwethuluzi elingaphakathi komugqa (njenge-WAF, NGFW, noma i-IPS) ethuluzini elingaphandle kwebhendi
2-Ukuphatha amathuluzi amaningi asemgqeni ngesikhathi esisodwa kwenza isitaki sokuvikeleka sibe lula futhi kunciphisa ubunkimbinkimbi benethiwekhi
3-Ihlinzeka ngokuhlunga, ukuhlanganisa, nokulinganisa ukulayisha kwezixhumanisi ezisemgqeni
4-Yehlisa ubungozi bokuphelelwa yisikhathi okungahleliwe
5-Ukwehluleka, ukutholakala okuphezulu [HA]
Isikhathi sokuthumela: Dec-23-2021
