Bayanan VPN na Mac da ake sarrafawa ba sa gogewa? Duba waɗannan matakai biyar
Kafin ka goge bayanan VPN na Mac da ake sarrafawa, tabbatar da wane ne ya mallake shi, abin da lodin ke tilastawa da kuma dalilin da ake hana cirewa, ta hanyar dubawa biyar a jere.
Mac ɗinka yana riƙe da bayanan VPN da ya ƙi gogewa, ko kuma ya goge sannan ya dawo bayan sake taya. Wannan tambaya ce ta sarrafawa, ba lalataccen abokin ciniki ba. Dubawa da ke ƙasa suna tafiya daga mallaka zuwa lodi zuwa ƙa'idojin sake haɗawa, kuma kowace na iya tsayar da kai kafin ka yi rana a cikin faifan da ba daidai ba. Yi su a jere; matakin da amsar ta canza shi ne inda naka ya ƙare.
Tabbatar cewa ana sarrafa bayanan, ba a ajiye su kawai ba
Buɗe Saitunan Tsarin ka nemi Profayiloli ko Sarrafa Na'ura. Dangane da sigar macOS, jerin yana ƙarƙashin Sirri da Tsaro (Profayiloli) ko Gama-gari (Sarrafa Na'ura). Bayanan da ke nuna sunan ƙungiya, ɗan gajeren bayani kuma babu maɓallin cirewa, ƙungiyar ce ta shigar da shi ba kai ba.
Dubawa biyu a tashar umarni suna warware mallaka da sauri. Na farko yana ba da rahoton rajista, na biyu yana lissafa bayanan na'urar:
sudo profiles status -type enrollment
sudo profiles -PIdan rajista ya ce i, kuma jerin bayanan ba komai, kada ka yanke shawarar cewa babu abin da aka shigar. A Mac ɗin da ake sarrafawa wasu lodin da MDM ke bayarwa suna kasancewa a ɓoye daga kayan aikin profiles yayin da suke aiki. Faifan Sarrafa Na'ura shi ne tabbataccen hangen abin da ƙungiyar ta tura, kuma jerin layin umarni mara komai a Mac ɗin da aka yi rajista saɓani ne da bai kamata ka warware ta hanyar zato ba.
Karanta lodin, ba sunan da ake nunawa ba
Bayanan VPN kwandon ajiya ne, kuma sunan da ake gani ba ya faɗi da yawa game da abin da ke ciki. Lodi ɗaya na iya ɗaukar adireshin uwar garken IKEv2, mai gano na nesa, hanyar tabbatarwa da takardar shaida mai UUID nata. Wani lodi na biyu a cikin bayanan guda ɗaya na iya ba da takardar shaidar asali da ramin ke buƙata, wanda shine dalilin da takardar shaidar da ta yi kama da ta ɓace a Keychain tana iya zuwa ta wannan bayanan.
Fitar da lodin ka karanta maɓallan da suka fi muhimmanci:
sudo profiles show -type configuration | grep -A3 -E "VPNType|ServerAddress|RemoteAddress|AuthenticationMethod|PayloadUUID"Rubuta UUID na lodin kafin ka canza wani abu. Su ne ganoɗin da mai gudanarwa ke buƙata don gano ainihin abin, kuma suna gaya maka ko ramin da takardar shaidar sun fito daga tushe ɗaya ko daga turawa biyu daban-daban.
Lura da abin da ke dawo da ramin
Idan ramin ya sake tashi da kansa, bayanan suna ɗauke da kusan tabbas ƙa'idar nema. Ƙa'idar da ta dace da kowane fuska da aikin Connect tana fara ramin lokacin da Wi-Fi ya haɗu, lokacin da Mac ya farka daga bacci, ko lokacin da gwajin DNS ya kasa. Abokin ciniki ba ya bayar da maɓalli da ke wuce lodin.
Jerin sabis da tsarin kowane sabis suna zuwa daga scutil:
scutil --nc list
scutil --nc show "Corporate VPN"A cikin fitarwar show, nemo OnDemandRules ka karanta darajar Action na kowace shiga. Connect yana ɗaga ramin, Disconnect yana rushe shi, kuma Ignore yana barin halin yanzu yadda yake. Ƙa'idar farko da ta dace da komai tare da Connect ita ce dalilin da ya saba sa ramin ba ya zama a ƙasa bayan ka cire haɗin.
Idan haɗin ba ya cikin scutil --nc list, ba a shigar da shi azaman sabis ɗin VPN na tsarin ba. Wannan yana nuni ga ƙarin hanyar sadarwa mallakar manhajar abokin ciniki, inda bayanan za su iya ba da tsarin manhajar kawai kuma manhajar da kanta ke yanke shawarar lokacin haɗawa.
Yanke shawara ko cirewar aikinka ne
Hanyoyi biyu suna hana gogewa. Lodi na iya saita PayloadRemovalDisallowed, wanda ke sa bayanan ba za a iya cirewa a cikin fuska ba, kuma Mac na iya kasancewa ƙarƙashin kulawa har a ƙi cire bayanan sarrafawa gaba ɗaya. Babu ɗaya daga cikinsu da ya zama kuskure, kuma goge takardun shaida marasa alaƙa ko bayanan sarrafawa don tilasta al'amarin zai bar ka da babbar matsala fiye da wadda ka fara da ita.
| What you see | Likely owner | Next action |
|---|---|---|
| Profile shows an organization name and no minus button | MDM enrollment | Ask the administrator to remove it or change its scope |
| Profile removable, personal IKEv2 settings | You | Remove it from VPN settings and re-add it if you still need it |
| Profile removed, returns after a reboot or check-in | MDM re-push | Request a scope change; deleting it again will not hold |
| Profile removed, tunnel still starts | On Demand rule or app login item | Remove the rule or the login item, then retry |
Ga Mac ɗin aiki, hanyar tallafi ko ficewa ta mai gudanarwa ita ce daidai. Ɗauki ganoɗin bayanan tare da kai. Tikiti da ya ce kawai „bayanan VPN” ba ya isa kowa ya nemo abin da kake nufi.
Tattara shaida kafin ka nemi taimako
Rubuta abubuwa biyar: ganoɗin bayanan, UUID na lodin, sigar macOS da ginawa daga sw_vers, nau'in VPN, da ainihin rubutun gazawa tare da tambarin lokaci. Ƙara ko ramin cikakke ne ko rabuwa kuma ko yana gazawa a lokacin haɗawa ko a farkon shiga wata hanya ta ciki, domin waɗannan gazawa biyu suna da masu mallaka daban-daban.
Ga gazawar ƙarin hanyar sadarwa, bincike ɗaya mai ƙunci a log yawanci ya isa:
log show --last 5m --predicate 'process == "nesessionmanager"'Ɗauki layukan kewayen yunƙurin maimakon dukan taga, ka ɓoye sunayen uwar garke da batutuwan takardar shaida kafin ka buga sakamakon a ko'ina. Jagorar turawa ta Apple tana bayanin abin da aka yi lodin VPN da ake sarrafawa da ƙa'idojin nema dominsa, kuma wannan hujja ce mafi kyau fiye da hoton allo: Bayyani na VPN.
Idan an yi duba biyar ɗin, daidai ɗaya daga cikin abubuwa uku gaskiya ne. Ba naka ba ne bayanan da za a cire, lodin yana sake haɗa ramin bisa ƙira, ko abokin ciniki yana riƙe da tsarin da bayanan ba su taɓa sarrafa shi ba. Kai ganoɗi da layin lokaci ga wanda ya mallaki rajista; wannan tikiti ne da wani zai iya ɗaukar mataki a kansa. Sake danna goge ba haka ba ne.