Kungani i-Android ixhuma ku-IPsec VPN yasekhaya kanti i-Windows ayinaki

Ucingo lujoyina i-VPN yeruwutha ngaphandle kwesikhalazo kuyilapho ikhompyutha ephathwayo ekwi-Wi-Fi efanayo ingakwazi. Imininingwane efanayo yokungena, iseva efanayo, umzuzu ofanayo. Umehluko ukusekelwa kwephrothokholi hhayi iphasiwedi: iruwutha iveza iphrofayili esetshenziswa uhlelo lokusebenza olulodwa futhi olunye olungakaze luyisebenzise.

Qala ukuhlonza iphrofayili, bese uyiqhathanisa nalokho okuqondile okukhulunywa yiklayenti ngayinye.

Imenyu eyodwa, amaphrothokholi amathathu

Ngaphansi kwesihloko esisodwa se-IPsec, i-firmware yabathengi ingafihla imigudu emithathu ehluke kakhulu. Eyokuqala i-IKEv1 ene-XAUTH: imfihlo yeqembu eyabiwe, bese kuba igama lomsebenzisi nephasiwedi phezu kwayo. Eyesibili i-L2TP/IPsec, lapho i-PPP isebenza ngaphakathi kokuthuthwa kwe-IPsec okuvikelwe ngukhiye owabiwe. Eyesithathu i-IKEv2, eqinisekiswa ngamatifiketi noma nge-EAP.

Funda izinkambu, hhayi ilebula. Imfihlo yeqembu kanye nohlu lwabasebenzisi kusho i-IKEv1 XAUTH. Ukhiye owabiwe kanye ne-akhawunti ye-PPP kusho i-L2TP/IPsec. Itifiketi leseva elingenayo imfihlo yeqembu lisho i-IKEv2.

Igebe lokusekelwa phakathi kocingo nekhompyutha ephathwayo

I-Android iphethe iklayenti le-IKEv1 XAUTH PSK ngaphakathi, yikho kanye okwenza ucingo luphumelele kuruwutha enganikeli okunye. I-Windows ayinjalo: iklayenti yayo yemvelo isebenza nge-L2TP/IPsec ne-IKEv2, futhi akukho nketho ye-IKEv1 XAUTH engavulwa. Ukufaka imfihlo futhi ngeke kusize, ngoba ingxenye engekho iphrothokholi hhayi imininingwane yokungena.

Uhlangothi lwe-Apple luwumgomo onyakazayo. Izinguqulo ezintsha ze-macOS ne-iOS zibhekisa ku-IKEv2, amaphrofayili endlela yakudala ye-Cisco ayaqhubeka kwezinye izinguqulo, futhi ukuthuthukiswa kungasusa noma kuqinise lokho okwakusebenza ngenyanga edlule. I-Mac eyayixhuma izolo namuhla ingaxhumi, ngaphandle koshintsho lweruwutha, ngokuvamile yilokhu.

Izilungiselelo ezimbili ezibhidliza amaphrofayili avamile

Ikhasi le-Synology le-L2TP/IPsec linikeza ibhokisi lokumaka elibizwa Enable SHA2-256 compatible mode (96 bit). Amaklayenti e-Apple kusukela ku-iOS 14 ne-macOS Big Sur kuya phambili ayayenqaba leyo modi enqunyiwe, ngakho ibhokisi kufanele likhishwe kubo. Uma lishiywe livuliwe, umgudu uyaqinisekisa bese uwela, okubonakala njengemininingwane yokungena embi kodwa akunjalo. Umkhiqizi ubhala ngalokhu kushintsha, futhi isikhathi esivamile lapho lokhu kuqala ukubaluleka ukuthuthukiswa kohlelo lokusebenza.

I-Windows igcina amatifiketi ezindaweni ezimbili ezihlukene, futhi i-IKEv2 ifunda eyomshini kuphela. Ngenisa itifiketi leklayenti nokhiye walo wangasese ku-akhawunti yekhompyutha; itifiketi eligcinwe ngaphansi kwe-akhawunti yakho yomsebenzisi livela kukhonsoli yokuphatha futhi alikaze lifinyelele isevisi ye-IKEv2. I-EAP-TLS iyisimo esisodwa lapho itifiketi lomsebenzisi lisebenziseka khona, futhi i-CA esayinayo kusamele ithenjwe umshini. Ukwenza iphutha lapha kubonakala njengokuhluleka kokuqinisekisa, hhayi njengesicelo setifiketi elingekho.

Lapho iruwutha ihlala injalo

Iruwutha ekhuluma i-XAUTH PSK kuphela ishiya izindlela ezintathu phambili: iklayenti yomkhiqizi, iklayenti yenkampani yesithathu esasebenzisa iphrofayili, noma ukuhambisa umkhawulo womgudu entweni ekhuluma i-IKEv2. Isibonelo, i-AVM ishicilela isofthiwe yeklayenti ye-Windows nefayela lokucwangciswa elikhiqiziwe lwamaruwutha ayo. Leyo ndlela iyasekelwa, futhi isho ukufaka ithuluzi lomkhiqizi kukhompyutha ephathwayo ngayinye.

Ukusekelwa kubaluleke ngaphezu kobuhle lapho izikhompyutha eziphathwayo kungezona ezakho ukuthi uzakhe kabusha.

Kala nezindleko zokuphepha. Imfihlo eyodwa yeqembu ihlanganisa wonke umsebenzisi, ngakho noma ubani oyiphethe angama esikhundleni seserva futhi abambe igama lomsebenzisi nephasiwedi okunikezwa yiklayenti. Lapho i-IKEv2 namatifiketi itholakala khona, lokho kufuduka kubaluleke ngaphezu kwanoma isiphi isixazululo seklayenti.

Hlola kusuka ngaphandle kuye ngaphakathi

Thola isikhathi sokusebenza esisodwa esisebenzayo kusuka ocingweni kuqala, ukuze uhlangothi lweserva luqinisekiswe ngaphambi kokuba ikhompyutha ephathwayo ingene. Bese ungenisa iphrofayili ekhiqizwe yeruwutha ingashintshiwe futhi ufunde ilogi yeklayenti esikhundleni sekhasi lesimo seruwutha. Uma ilogi ingakhombisi isiphakamiso siphuma, ikhompyutha ephathwayo ayikaze ifinyelele ophendulayo. Uma iziphakamiso zishintshana bese zehluleka, ukungavumelani kumayelana nama-algorithm, ubunikazi noma imininingwane yokungena.

Gcina iphrofayili yocingo esebenzayo njengokulawula. Uma kugqashuka kuphela ikhompyutha ephathwayo ngemuva kokuthuthukiswa kwefirmware, uhlangothi lweserva lusebenza njengakuqala. Uma kokubili kugqashuka, bheka itifiketi noma umnyango olalelayo ngaphambi kokuthinta noma iyiphi iklayenti.