Profile VPN Mac oo la maareeyo ma tirtirmo? Hubi shantan tallaabo
Ka hor inta aanad tirtirin profile VPN Mac oo la maareeyo, hubi yaa leh, waxa ay payload-ku ku qasbo iyo sababta ka saarista loo xannibay, shan hubin oo isku xigta.
Mac-kaagu wuxuu hayaa profile VPN oo diida in la tirtiro, ama la tirtiro oo soo noqda dib u kicinta ka dib. Tani badanaa waa su'aal maamul, ma aha macmiil xumaaday. Hubinta hoose waxay ka socotaa lahaanshaha ilaa payload ka dibna xeerarka dib u xidhka, mid kastaa wuu kaa joojin karaa ka hor inta aanad galab ku qaadanin guddiga khaldan. U samee si isku xigta; tallaabada jawaabtu ku beddelato waa halka qaybtaadu ku dhammaato.
Xaqiiji in profile-ku la maareeyo, ma aha oo kaliya la kaydiyay
Fur Settings-ka Nidaamka oo raadi Profile ama Maareynta Qalabka. Iyadoo ku xiran nooca macOS, liistadu waxay ku taal Xogta Gaarka ah iyo Amniga (Profile) ama Guud (Maareynta Qalabka). Profile-ka muujiya magaca hay'ad, sharraxaad gaaban oo aan lahayn badhanka laga jarayo, hay'addu way rakibtay ee ma aha adiga.
Laba hubin oo terminal-ka ah ayaa lahaanshaha si degdeg ah u xalliya. Midda koowaad waxay soo sheegtaa diiwaangelinta, midda labaad waxay taxdaa profile-yada qalabka:
sudo profiles status -type enrollment
sudo profiles -PHaddii diiwaangelintu ay tahay haa oo liiska profile-yadu madhan yahay, ha soo gabagabeyn in wax aan la rakibin. Mac-yada la maareeyo qaar ka mid ah payload-yada MDM ay soo diraan waxay ku sii jiraan qarsoon profiles qalabka iyagoo weli firfircoon. Guddiga Maareynta Qalabka waa aragtida awoodda leh ee waxa hay'addu soo dirtay, liis madhan oo khadka amarka ah oo ku yaal Mac diiwaangashan waa khilaaf aanad ku xallin karin mala-awaal.
Akhri payload-ka, ma aha magaca la muujiyay
Profile VPN waa weel, iyo magaca muuqda wax yar ayuu ka sheegaa waxa gudaha ku jira. Hal payload wuxuu qaadi karaa cinwaanka server-ka IKEv2, aqoonsiga fog, habka xaqiijinta iyo shahaado leh UUID u gaar ah. Payload labaad oo isla profile-ka ku jira wuxuu bixin karaa shahaadada aqoonsiga ee tunnel-ku u baahan yahay, taasina waa sababta shahaado u muuqata mid ka maqan Keychain ay weli ku iman karto isla profile-ka.
Soo saar payload-yada oo akhri furayaasha muhiimka ah:
sudo profiles show -type configuration | grep -A3 -E "VPNType|ServerAddress|RemoteAddress|AuthenticationMethod|PayloadUUID"Qor UUID-yada payload-yada ka hor inta aanad wax beddelin. Kuwani waa aqoonsiyada maamuluhu u baahan yahay si uu u helo shayga saxda ah, waxayna sidoo kale kuu sheegaan in tunnel-ka iyo shahaadadu ay ka yimaadaan isla il ama laba geyn oo kala duwan.
Fiiri waxa tunnel-ka dib u soo celiya
Haddii tunnel-ku iskiis dib u bilaabmo, profile-ku wuxuu ku qasban yahay xeerka codsiga. Xeerka ku habboon interface kasta iyo ficilka Connect wuxuu bilaabaa tunnel-ka marka Wi-Fi uu xirmaan, marka Mac uu hurdada ka tooso ama marka baaritaanka DNS uu fashilmo. Macmiilku ma bixiyo shidde aan payload-ka ka sarreeya.
Liiska adeegyada iyo qaabeynta adeeg kastaa waxay ka yimaadaan scutil:
scutil --nc list
scutil --nc show "Corporate VPN"Natiijada show, raadi OnDemandRules oo akhri qiimaha Action ee gelin kasta. Connect wuxuu kor u qaadaa tunnel-ka, Disconnect wuu dumiyaa, Ignore-na wuxuu ka tagaa xaaladda hadda sida ay tahay. Xeerka ugu horreeya ee ku habboon wax walba oo leh Connect waa sababta caadiga ah ee tunnel-ku hoos uusan u hadhin ka dib markaad gooyso.
Haddii xidhiidhka uu ka maqan yahay scutil --nc list, looma rakibin adeeg VPN nidaam. Tani waxay tilmaamaysaa ballaarinta shabakada oo uu leeyahay app macmiil, halkaas oo profile-ku uu kaliya gudbin karo qaabeynta app-ka oo app-ka laftiisu go'aansado goorta la xidhiidho.
Go'aanso in ka saariddu tahay shaqadaada
Labada hab ayaa xanniba tirtirka. Payload-ku wuxuu dejin karaa PayloadRemovalDisallowed, taas oo profile-ka ka dhigta mid aan laga saari karin interface-ka, Mac-na wuxuu noqon karaa mid la kormeero si ka saarista profile-ka maareynta si toos ah loo diido. Midkoodna khalad maaha, tirtirista shahaadooyin aan la xidhiidhin ama profile-ka maareynta si arrinta loo qasbo waxay kaa tagtaa dhibaato aad uga weyn tii aad ku bilowday.
| What you see | Likely owner | Next action |
|---|---|---|
| Profile shows an organization name and no minus button | MDM enrollment | Ask the administrator to remove it or change its scope |
| Profile removable, personal IKEv2 settings | You | Remove it from VPN settings and re-add it if you still need it |
| Profile removed, returns after a reboot or check-in | MDM re-push | Request a scope change; deleting it again will not hold |
| Profile removed, tunnel still starts | On Demand rule or app login item | Remove the rule or the login item, then retry |
Mac shaqo, wadada taageerada ama ka bixista maamulaha waa tan saxda ah. Qaado aqoonsiga profile-ka. Tikidhka kaliya ku qoran «profile VPN» kuma filna qofna inuu helo shayga aad ula jeedo.
Ururi caddaymo ka hor inta aanad caawimaad weydiisan
Qor shan wax: aqoonsiga profile-ka, UUID-yada payload-yada, nooca macOS iyo build-ka sw_vers, nooca hoose ee VPN, iyo qoraalka fashilka saxda ah oo leh shaabad waqti. Ku dar haddii tunnel-ku buuxa yahay ama qaybsan yahay iyo haddii uu ku fashilmo xidhiidhka ama marka ugu horreysa ee gelitaanka kheyraad gudaha, maxaa yeelay labadan fashil waxay leeyihiin milkiilayaal kala duwan.
Fashilka ballaarinta shabakada, badanaa hal weydiin log oo cidhiidhi ah ayaa ku filan:
log show --last 5m --predicate 'process == "nesessionmanager"'Qaado sadarrada ku xeeran isku dayga halkii daaqadda oo dhan, oo qari magacyada server-yada iyo mawduucyada shahaadada ka hor inta aanad natiijada meel ka dhigin. Hagaha geynta Apple wuxuu sharraxayaa waxa loogu talagalay payload-yada VPN la maareeyo iyo xeerarka codsiga, taasina waa dood ka wanaagsan sawirka shaashadda: Guudmar VPN.
Marka shanta hubin dhammaato, si sax ah mid ka mid ah saddexda ayaa run. Profile-ku maaha midkaaga inaad ka saarto, payload-ku wuxuu dib u xidhaa tunnel-ka sida naqshadda, ama macmiilku wuxuu hayaa qaabeyn uusan profile-ku waligiis maamulin. Geey aqoonsiyada iyo jadwalka waqtiga cidda leh diiwaangelinta; taas waa tikidh qofku wax ka qaban karo. Mar kale riixista tirtir maaha.