Mac mar kasta wuxuu weydiistaa furaha sirta VPN: silsiladda furaha mise akoon?
Mac wuxuu codsan karaa furaha sirta silsiladda gelitaanka, furaha maamulka ama akoonka VPN laftiisa. Akhri milkiilaha wada-hadalka, kadib hagaaji kaydka saxda ah.
Waad furaysaa Mac-ka, waxaad furtaa macmiilka VPN, oo xaashida furaha sirta ah waxay soo baxdaa tunnel-ka uusan wali bilaaban. Waxaad qortaa furaha sirta gateway-ga, oo ama waa la diidayaa ama xaashidu daqiiqad kadib soo noqotaa. Kadib mar kale ayuu weydiistaa ka dib hurdada, ka bixista, ama cusboonaysiinta macmiilka. Xaashidaas ayaa dhif ah inay tahay serverka VPN oo codsanaya aqoonsi; badanaa macOS ayaa codsanaya fasax si uu u akhriyo, u furo ama u beddelo diiwaan maxalli ah, furaha sirta ahna waxaa iska leh milkiilaha diiwaankaas, ma aha akoonkaaga VPN.
Xaashida ku habee aqoonsiga ka dambeeya
Afar codsi ayaa isku eg, oo mid keliya ayaa ku saabsan gateway-ga. Erayada, habka codsanaya gelitaanka, iyo shayga hoosta lagu magacaabay ayaa kuu sheegaya midka aad la kulanto.
| What the sheet says | Whose password it wants | What it does not do |
|---|---|---|
| Enter the password for the login keychain | The local keychain password, normally your Mac login password | It does not authenticate you to the VPN server |
| An app wants to use confidential information stored in your keychain | Approval for that app to retrieve one item | It does not grant privileges at the gateway |
| macOS wants to make changes, and asks for administrator authorization | An admin account on this Mac, for the named setting | It does not change the VPN account password |
| The client itself asks for a username and password to connect | The remote account, certificate or profile credential | It does not unlock anything local |
Wada-hadal ku saabsan gelitaan maxalli ah waxba kama caddeeyo serverka. Diidmada gateway-ga waxay ku muuqataa macmiilka dhexdiisa iyada oo wadata qoraalka khaladka iibiyaha, ma aha sida xaashi nidaam oo soo jeedinaysa in la furo silsilad furaha. Taa lidkeedna waa caadi: qorista furaha gateway-ga xaashida silsilad furaha waxay diiwaanka u reebtaa xiran oo waxay ku daraysaa isku day guuldareystay.
Wada-hadalku wuxuu magacaabaa milkiile, kayd iyo fal
Codsiyada silsilad furaha waxay ku saabsan yihiin soo saarista, ma aha aqoonsiga wax fog. Sharaxaadda Apple ee wada-hadalka codsiga waa cidhiidhi: Oggolow hal mar, Had iyo jeer oggolow iyo Diid waxay xakameeyaan in appkaasi akhriyi karo shayga kaydsan. Mid ka mid ah saddexda ma bixiso mudnaan gateway-ga mana beddelo waxa serverku ka fikiro furahaaga sirta.
Marka codsadaha uu yahay macmiil hadda cusboonaysiiyay, dib-u-ogolaansho ayaa la filayaa: dhismaha cusubi dib uma socdo liiska xakameynta gelitaanka shayga, sidaas darteed macOS mar kale ayuu weydiistaa. Inta lagu jiro baaritaanka ka jawaab Oggolow hal mar. Had iyo jeer oggolow waa fasax joogto ah appkaas oo jawaabta khaldan tahay hab caawiye ah oo aadan filayn; diid oo hubi iibiyaha haddii binary-ga uusan ahayn macmiilka aad rakibtay.
Codsi codsanaya fasaxa maamulka waa xayawaan saddexaad. Wuxuu magacaabaa dejinta nidaam ama kayd la ilaaliyo oo la beddelayo, aqoonsiga uu codsanayana waa akoon maamule Mac-kan. Ma aha shay kasta oo silsilad furaha shaqsi ah inuu u baahan yahay taas; kuwa ka dambeeya habaynta shabakadda badanaa way u baahan yihiin, sababtoo ah habayntu waxaa iska leh nidaamka, ma aha kulankaaga gelitaanka.
Xaggee furaha sirta VPN ee Mac ku noolaan karaa
Silsilad furaha waa mid ka mid ah kaydka suurtagal ah, ma aha qeexidda kayd. Habaynta VPN oo dhex-dhisan oo laga sameeyay Dejinta Nidaamka waxay hayaan aqoonsigeeda habaynta shabakadda, sida dejin nidaam oo la maareeyo. Macmiil saddexaad badanaa wuxuu shay ku hayaa silsilad furaha gelitaanka: fura sir ah oo caadi ah oo lagu xiro magaca adeeg, ama fura sir internet ah oo lagu xiro server, borotokool iyo akoon. Apps badan oo cusub ayaa beddelkeeda isticmaala silsilad furaha ilaalinta xogta, oo shayadeeda aan waligood ka muuqan Gelitaanka Silsilad Furaha.
Dadku waxay magaca VPN ka raadiyaan Gelitaanka Silsilad Furaha, waxba ma helaan, oo waxay soo gabagabeeyaan in furaha aan la kaydin. Qoraalka Apple TN3137 wuxuu sheegaya in ka badan hal hirgelin silsilad furaha ay jirto; ka maqnaanshaha liiskaas waa caadi, ma aha caddaynta shay qasan.
Noocyada diiwaankuna isma beddeli karaan. Fura sir akoon, weedh sir ah fure gaar ah, shahaado macmiil iyo sir la wadaago IPsec siyaabo kala duwan ayay u guuldareystaan oo meelo kala duwan ayaa lagu hagaajiyaa; dib u qorista fura sir kaydsan waxba kama tarayso shahaado la diiday. Haddii Mac-ka lagu diiwaangeliyay maamul, profile-ku waa milkiile kale: xamuul VPN ah ayaa qaadi kara aqoonsi oo dib u dabaqi kara marka la cusboonaysiiyo, sidaas darteed tirtirista shay maxalli ah waa ku meel gaar ilaa maamule uu beddelo.
Marka furaha gelitaanka iyo furaha silsilad furaha kala fogaadaan
Silsilad furaha gelitaanku badanaa wuxuu isticmaalaa furahaaga gelitaanka Mac, taas darteed labadooda way kala fogaadaan. Maamule ka beddela furahaaga akoon kale, habka soo kabashada, ama isbeddel buug-gacmeed ayaa silsilad furaha ku reebi kara qiimaha hore xiran, macOS kadibna wuxuu codsadaa fura aadan hadda dejinin.
Gelitaanka waxaad arki kartaa digniin sheegaysa in nidaamku furi karin silsilad furaha. Cusboonaysiintiisu waxay u baahan tahay furaha hore, taas waa hagaag haddii aad xasuusato oo waxba tarin haddii aadan. Labada hagaajin oo daacad ah ayaa ah Gelitaanka Silsilad Furaha, Tafatir, Beddel Furaha Silsilad Furaha “login”, ama silsilad furaha gelitaan cusub oo aqoonsiga loo baahan yahay dib loo geliyay. Ikhtiyaarka labaad wuxuu baabi'iyaa shayada kaydsan.
Ha dib u dejinin dhammaan silsilad furaha sababtoo ah hal VPN ayaa diiday aqoonsi hore: taas waxay meesha ka saaraysaa akoonno aan xiriir lahayn welina ma aqoonsato shayga.
Hal amri ayaa xallisa su'aasha maxalli iyo fog. Silsilad furaha si toos ah u weydiiso shayga:
security find-internet-password -s vpn.example.com -a [email protected] -g
security find-generic-password -s "Client Name" -a [email protected] -gIsticmaal serverka iyo akoonka dejinta macmiilkaaga. Haddii isla xaashida ogolaanshaha ay soo baxdo markaad adigu silsilad furaha weydiisato, codsigu waa maxalli serverkuna waa daawade. Haddii shay aan jirin, macmiilku kama kaydiyo furaha meesha aad u malaynayso. Calaamadda -g waxay sirta ku daabacdaa terminal-ka, sidaas darteed ka fogow wadaagista shaashadda.
Cusboonaysii diiwaanka macmiilku dhab ahaan akhriyo
Haddii akoonka gateway-ga laga beddelay, marka hore halkaas ka beddel, kadib cusboonaysii diiwaanka kaydsan iyada oo loo marayo dejinta macmiilka. Gacan ku tafatirista shay silsilad furaha laguma kalsoonaan karo: macmiilku wuxuu akhriyi karaa lammaane adeeg-iyo-akoon kale, profile la maareeyana wuxuu dul qori doonaa tafatirkaaga.
Shay lagu tuhunsan yahay inuu duugoobay, isku habee adeeg, akoon iyo borotokool ka hor intaadan wax tirtirin:
security delete-generic-password -s "Client Name" -a [email protected]Tirtirista shay magac la mid ah oo ka yimid xiriir kale waa carqalad isku-sameysan oo caadi ah. Ka-saaristu waa maxalli oo keliya: ma burinayso kulan gateway-ga, ma furto shahaado qalab, mana beddesho furaha sirta akoonka.
Xaqiiji in hagaajintu ka badbaadato dib u bilow
Isku xidh, ka toos hurdada, ka bax oo dib u gal, kadib hal mar dib u bilow. Taxane nadiif ah oo aan xaashi lahayn iyo xaalad macmiil oo magacaabaysa akoonka la filayay ayaa ah caddaynta keliya ee la tiriyaa. Meesha codsigu ku soo laabto waxay kuu sheegtaa lakabka aad seegtay: cusboonaysiin kadib waa ogolaansho, isbeddel shabakad kadib waa codsiga macmiilka laftiisa, dib u bilow kadib waa profile xaaladda dib u dabaqaya.
Ka hubi macmiilka dejinta xasuusashada furaha ama had iyo jeer weydiinta ka hor intaadan mar kale taaban silsilad furaha. Habaynno qaar, gaar ahaan IKEv2 oo leh aqoonsi isticmaale kasta, waxay si naqshad ah u weydiiyaan xiriir kasta; hagaajinta silsilad furaha ma caawin doonto.
Qor shayga aad beddeshay, kaydka milkiilaha ahaa, iyo akoonka uu ka tirsanaa, si codsiga xiga ay ilbiriqsiyo u qaadato in la garto. Bogga Apple Codsiyada gelitaanka silsilad furaha ayaa ah tixraaca waxa saddexda badhan oggolaadaan.