App ɗin iPhone ba ya samun na'urorin gida yayin da VPN ke kunne
Ƙofofi biyu ne ke yanke shawarar ko app ɗin iPhone zai iya isa na'urar buga takarda ko talabijin ta VPN: izinin Cibiyar Sadarwar Gida da hanyoyin ramin kansa. Duba su a jere.
App ɗin buga takarda naka yana nuna fanko jeri, app ɗin kyamara yana ba da rahoton cewa ba a sami na'ura ba, kuma maɓallin watsawa a cikin app ɗin bidiyo yana jujjuyawa har ya karaya. Alamar VPN tana cikin sandar matsayi, wayar tana da cikakken sigina kuma Safari yana loda shafuka ba matsala, don haka babu abin da ya karye a haɗin. Sannan ka buɗe saitunan app ɗin kansa kuma ba ka sami abin da za a juya ba.
Na ci karo da wannan bango daidai da na'ura mai buga lakabi a cibiyar sadarwar gida: ba a taɓa ba app ɗin izinin shiga cibiyar sadarwar gida ba, kuma bayanin da nake gwadawa cikakken rami ne da ya haɗiye kowane fakitin da aka aika zuwa 192.168.1.0/24. Ƙofofi biyu masu zaman kansu a rufe suke, kuma buɗe ɗaya ba zai kawar da alamar ba.
Ƙofofi biyu tsakanin app ɗaya da na'ura mai buga takarda ɗaya
Ƙofar farko shawara ce ta sirri da ta keɓance ga tsarin aiki ba ga app ɗin ba. iOS yana yanke shawarar ko app na iya aika zirga-zirga zuwa adireshi a cibiyar sadarwar gida, kuma yana tambayar mai amfani a karon farko da app ɗin ya gwada. Ƙofar biyu ita ce teburin tafiyar da hanya. Fakitin da aka nufa zuwa 192.168.1.50 ko yana fita ta Wi-Fi zuwa ga na'urar bugawa, ko kuma yana shiga cikin rami, kuma wannan zaɓi an rubuta shi a cikin bayanin VPN.
Ƙofofin biyu suna kasawa a cikin sifofi daban-daban, kuma wannan shine ainihin abin da ke sa ganewar asali ya yiwu. Izini da aka ƙi yana kashe kiran socket na app ɗin kansa, don haka app ɗin ba shi da abin da zai bayar da rahoto kuma yana faɗo cikin yanayi mara komai na gama gari. Matsalar hanya tana kama da ƙarewar lokaci, domin fakitin sun bar wayar kuma sun mutu wani wuri a wancan gefen. Iri ɗaya fanko allo, daban gyara.
Karanta yanayin izini kafin ka taɓa VPN
Buɗe Saituna, sannan Sirri da Tsaro, sannan Cibiyar Sadarwar Gida. Kowane app da ya nemi izini yana bayyana a can da maɓalli. Apple ya motsa kuma ya sake suna wasu sassan wannan allon tsakanin iOS 14 da iOS 18, don haka idan shigarwar ba ta inda kake tsammani, rubuta Cibiyar Sadarwar Gida a filin bincike na Saituna maimakon yawo cikin bishiyar.
Abin da ya fi kama mutane shine tambaya ta lokaci ɗaya. iOS yana tambaya lokacin da app ya taɓa cibiyar sadarwar gida a karon farko, kuma kawai a lokacin. Taɓa Kada ka yarda kuma tambayar ba za ta dawo a buɗewa ta gaba ba; maɓallin shine hanya ɗaya tilo ta dawowa, kuma yana farawa a kashe. Sake shigar da app ɗin yana sake saita shawarar, wanda shine dalilin da ya sa wasu zance na magance matsala suke cewa sake shigarwa ya gyara ganowa. Ya gyara, ta hanyar share kin amincewa.
A kan iPhone da ake kulawa ko sarrafawa, maɓallin wani lokacin yana da launin toka. Kayan da ake turawa ta MDM na zaɓin sirri na iya saita ko kulle damar shiga cibiyar sadarwar gida, kuma kulle maɓalli da ke kashe yana nufin gyaran canjin manufa ne ba canjin wayar ba. Apple yana rubuta tambayar da maɓallin kowane app anan: support.apple.com/en-us/102229.
Duba abin da rami yake tafiyar da shi da gaske
Cikakken rami yana ɗaukar 0.0.0.0/0 tare da kowane yanki na sirri. Fakitin 10.x, 172.16.0.0/12 da 192.168.x.x suna tafiya zuwa uwar garke, wanda yawanci yana jefar da su ko yana fassara su zuwa nasa subnet, don haka na'urar bugawa ta kasance ba za a iya isa ba ko da bayan ka ba da izini. Rami da aka raba yana yin akasin haka, amma kawai ga yankunan da bayanin ya lissafa.
Bayanan IKEv2 da aka gina da Apple Configurator ko aka rarraba a matsayin .mobileconfig suna bayyana wannan a matsayin saitin aika duk zirga-zirga tare da, idan an raba, cikakken jerin cibiyoyin sadarwar gida da za a ware. App ɗin abokin ciniki da aka gina a kan NEPacketTunnelProvider suna bayyana wannan shawara ta includedRoutes. Babu ɗayan da ake gani daga sandar matsayi, kuma duka biyu suna wuce abin da app ɗin yake tsammanin gani.
Wannan shine gwajin da nake amfani da shi. Da VPN a haɗe, buɗe shafin gudanarwa na na'urar sadarwa ta adireshin LAN ɗinsa a Safari. Idan shafukan jama'a suna lodawa yayin da wancan shafin ya ƙare lokaci, yankinka na sirri yana cikin rami. Idan shafin ya loda, zirga-zirgar gida har yanzu tana fita ta Wi-Fi kuma toshewar tana wani wuri.
Haɗa alamar da ƙofar
App biyu a waya ɗaya na iya rashin jituwa, domin izini ana bayar da shi ga kowace app yayin da ake bayar da hanyoyi ga kowane bayani. Kwatanta abin da ke kasawa kafin ka canza komai: yawanci tsarin yana ambaton ƙofar da kansa.
| What you see | Gate | Next step |
|---|---|---|
| Device list stays empty, Local Network switch is off | Permission | Enable the switch, force-quit the app, reopen it |
| Switch is on, router page times out, public sites load | Routing | Exclude the local range in the profile, or move to a split tunnel |
| Both pass, direct IP works, discovery stays empty | Link-local multicast | Enter the device address by hand, or check profile discovery support |
| Works by IP address, never by name such as printer.local | Name resolution | Fix mDNS reachability or use the numeric address |
| Everything fails with the VPN off, on hotel Wi-Fi | Client isolation | Change network, do not change permissions |
Layin mDNS ya cancanci rubutu. Zirga-zirgar ganowa ga Bonjour da yawancin ka'idojin watsawa suna tafiya a matsayin multicast zuwa 224.0.0.251 da ff02::fb tare da iyakar haɗin gida, kuma rami da aka tafiyar da shi ba ya ɗaukar sa. Wannan shine dalilin da ya sa na'ura za ta iya amsa haɗin kai tsaye ba tare da ta taɓa bayyana a jeri ba.
Gwada aikin, ba alamar ba
Bayan ka juya maɓallin Cibiyar Sadarwar Gida, tilasta app ɗin rufewa daga mai canza app sannan ka sake buɗe shi. Tsari da ke gudana na iya riƙe yanayin kin amincewa daga kafin canjin, kuma app ɗin da ke ci gaba da mayar da fanko jeri yana kama da ɗaya ko izinin ya yi aiki ko a'a. Sannan yi aiki ɗaya tabbatacce, kamar buga shafin gwaji ko fara bidiyo, maimakon jiran jerin na'urori ya cika.
Rike bayanin VPN a tsaye a duk lokacin kwatance. Idan ganowa ya fara aiki kawai bayan ka cire haɗin, ka koyi cewa ramin ne mai laifi ba izinin ba. Canza mai canzawa ɗaya a kowace ƙoƙari, in ba haka ba zagaye na gaba ba zai gaya maka komai ba.
Gyara shi a wannan jeri
Jerin da ke ƙasa shine wanda nake bi yanzu, domin bai taɓa barin waya a cikin rabin canji inda gwajin gaba ba zai iya karantawa ba.
- Tabbatar app ɗin yana cikin Sirri da Tsaro, Cibiyar Sadarwar Gida, kuma maɓallinsa a kunne.
- Tilasta rufewa, sake buɗe app ɗin, sannan sake gwada ainihin aikin sau ɗaya.
- Buɗe shafin na'urar sadarwa ta adireshin LAN yayin da kake haɗe, don tabbatar da ko yankin sirri yana cikin rami.
- Idan yana ciki, gyara bayanin don ware cibiyoyin sadarwar gida, ko ka nemi mai bayanin ya yi hakan.
- Idan maɓallin launin toka ne, ɗauki na'urar a matsayin wadda ake sarrafawa ka tura buƙatar ga mai gudanarwa.
Yawanci ɗaya ne kawai ya dace. Idan babu wanda ya canza sakamakon, waɗanda ake zargi da suka rage su ne cibiyar sadarwar kanta, kamar keɓewar wurin shiga ko jerin abokan ciniki da aka yarda da su dangane da adireshin Wi-Fi, kuma teburin daidaitawa da ke sama yana nuna wanne.