I-Access Server ilahlekelwe ukubopha kwayo ngemuva kokushintshwa kwegama lesixhumanisi senethiweki: lungisa okhiye

Ushintshe igama lesixhumanisi senethiweki, noma ubuyise umshini omenzeli wawo owabuya ngenye igama, futhi manje i-daemon ye-OpenVPN Access Server ayiqali. Isixhumanisi sewebhu kungenzeka sisaphendula noma cha, kuncike ekutheni yiluphi ingxenye eyayiboshelwe egameni elidala. Isevisi ayiphukile futhi ukulungiselela akukalahleki; isilungiselelo esisodwa sisakhomba esixhumanisini umsingathi angenaso manje.

Impendulo ejwayelekile ukufaka kabusha, ukuqala kabusha noma ukuhlela isizindalwazi kuze kunyamalale iphutha. Ngakunye kwalokho kuyinguquko enkulu kunephutha, futhi okokugcina kungasusa abasebenzisi, izimvume kanye nokuncika okwenza iseva ifanele ukusindiswa. Lena inkinga yokubopha, futhi inesisombululo esishiwo.

Yini uphawu olusho ngempela

I-daemon engakwazi ukubopha ivamise ukusho lokho kumbhalo wayo: ikheli alitholakali noma isixhumanisi asikho. Umlayezo uqondile: usho ikheli i-daemon eyazama ngalo; qhathanisa ne-ip -br addr kumsingathi ukuze wazi ukuthi isixhumanisi sashintshwa igama, sasuswa noma saphakanyiswa ngaphandle kwekheli laso elidala.

Gcina ikhonsoli yokubuyisela egunyaziwe ivuliwe ngaso sonke isikhathi. Uma ukubopha ozokushintsha kuthwala isikhathi sakho sokugcina sokuphatha, uzisikele indlela yokubuya. Ikhonsoli yasendaweni, ikheli lesibili lokuphatha noma indlela yangaphandle ebhaliwe kwenza ushintsho lubuyiseke.

Buza ukulungiselela ngaphambi kokukuhlela

I-Access Server iveza ukulungiselela kwayo nge-CLI yayo. Umbono obhaliwe yilo:

sacli ConfigQuery

Yisebenzise endaweni yokuphatha ebhaliwe yenguqulo yakho, hhayi kusuka ku-shell engahlobene kwenye umsingathi. Gcina amanani amanje endaweni evikelwe ngaphambi kokushintsha noma yini, futhi ungakunamathiseli okukhiphayo okugcwele emucu wokusekela womphakathi.

Lokho okukhiphayo umbono wokulungiselela kweseva, hhayi ikhophi egcwele. Izakhiwo zabasebenzisi namaqembu zibuzwa ngokwahlukana, ngakho ukubopha okuhlanzekile akubuyiseli ubunikazi, futhi ubunikazi obubuyisiwe abulungisi isilaleli. Bhala kokubili njengamadokhumenti amabili ahlukene.

Thola ukuthi yisiphi isilaleli esiphukile

I-Access Server igcina isilaleli esingaphezu kwesisodwa. Ama-daemon e-OpenVPN athwala ithrafikhi yomhubhe, isevisi yewebhu ithwala ingosi yokuphatha neyamaklayenti, futhi ezinye izingxenye zingaba namachweba azo. Isicelo sesiphequluli esihlulekile asisho ukuthi yisiphi esihlulekile, futhi inombolo yechweba emlayezweni wephutha ayisho.

Okhiye bokubopha be-daemon babhaliwe nge-daemon ngayinye, futhi kusifundo esisemthethweni inani liyisihlonzi sesixhumanisi nakuba amagama okhiye ephela nge-ip_address. Funda lowo musho kabili. Isifundo siphinde silindele ukuthi ama-daemon e-UDP ne-TCP abelane isixhumanisi esisodwa, ngakho ukulungisa ukhiye oyedwa kuphela ukulungisa okungaphelele.

Shintsha isilungiselelo esishiwo, hhayi imigqa efanayo

Isifundo sibhala i-ConfigPut kokhiye abathile, njenge-vpn.daemon.0.server.ip_address ne-vpn.daemon.0.listen.ip_address. Sebenzisa indlela yomkhiqizo ngokwayo ngegama lokhiye nenani elisha, ngendlela ebhaliwe yenguqulo yakho, futhi shintsha kuphela okhiye besilaleli osobona.

Ongakufanele ukwenze ukusesha isizindalwazi imigqa yonke enenani elilingana negama lesixhumanisi esidala bese ushintsha yonke. Lokho kucabanga ukuthi igama elidala lavela kuphela ezilungiselelweni zesilaleli, into isakhiwo esingayithembisi. Kwenza futhi ushintsho lungabuyekezi.

Amanye amathuba amabili kufanele enqatshwe. Ukubuyisela okujwayelekile okulalela kuzo zonke izixhumanisi kuyisinqumo sokuveza, hhayi ukulungisa upelo; ukubopha kwasendaweni okuhlosiwe, indlela eshicilelwe kanye nokuhlunga okungaphambili kufanele kuvumelane nalokho kukhetha. Ukuqala kabusha ukulungiselela kushintsha igama lenkinga esikhundleni sokuyixazulula, ngoba ukufakwa okusha kulahla abasebenzisi nezimvume ezazisebenza ngaphambi kokushintshwa kwegama.

Kusebenzise, bese ufakazela ukuthi indlela iyasebenza

Ngemuva kokulungiswa kwenani, kusebenzise ngomjikelezo wempilo obhaliwe womkhiqizo ( umjikelezo wempilo ). Isifundo sisebenzisa i-sacli start ngemuva kokubeka okhiye; lokho akukona ukuqalisa kabusha umsingathi ogcwele noma ukusetha kabusha isizindalwazi.

ss -lntup | grep -E '1194|443'
sacli ConfigQuery | grep -i ip_address

Hlola isilaleli, bese wenza uxhumano lwe-VPN olugunyaziwe olulodwa, ufinyelele insiza yangasese eyodwa futhi uvule ikhasi lokuphatha ngendlela elindelekile. Gcina izimvume zabasebenzisi nokuhoxiswa okukhona; ukubuyisela okuzisetha kabusha kulungisile ukubopha futhi kwalahlekelwa ukusetshenziswa. Umsebenzi uqedwa lapho isevisi efanayo isebenza esixhumanisini esihlosiwe.