Ukuqinisekiswa kwekliyenti ye-Azure P2S: Entra, isitifiketi noma i-RADIUS
Ukungena nge-Entra, izitifiketi zekliyenti ne-RADIUS kudinga amakliyenti namaphrofayili e-Azure VPN ahlukene. Khetha indlela, bese ukhetha ikliyenti, bese kuba iphrofayili.
Isifaki siyasebenza, iphrofayili iyangeniswa, kodwa ukuxhumana kwehluleka esigabeni sokungena. Iningi lalawa mathikithi akulona iphutha kukliyenti: uhlelo oluhambisana ne-OpenVPN lungathwala umhubhe kodwa lungabi nalo ulwazi lokuthi ukungena kwe-Microsoft Entra kwenziwa kanjani. Ukulandelana okugwema umjikelezo yindlela, bese kuba ikliyenti, bese kuba iphrofayili. Khetha indlela yokuqinisekisa igeyithiwey ehlungiwe ngayo, khetha ikliyenti i-Microsoft eyibhalile yaleyo ndlela, bese kuthi ngemva kwalokho kuphela wakhe iphrofayili elindelwe yilelo kliyenti. Konke okungezansi kulandela lokho kulandelana.
Qala ngendlela, hhayi ngesifaki
Igeyithiwey ihlelwe ngohlobo olulodwa noma ngaphezulu lomhubhe nezindlela zokuqinisekisa. Yilolo khwele, hhayi isandiso sefayela kudeskithophu yakho, olunquma ukuthi imaphi amakliyenti asekelwayo.
Bhala phansi lolokhwele ngaphambi kokulanda noma yini, ngoba imethrikhi yokusekelwa incane futhi isiqalo esingalungile sidla intambama.
Naku ukuhlela engikugcina kumanothi okusatshalaliswa:
| Authentication | Tunnel type | Documented client |
|---|---|---|
| Microsoft Entra ID | OpenVPN | Azure VPN Client on Windows and macOS |
| Client certificate | OpenVPN or IKEv2 | Azure VPN Client, documented OpenVPN client, native IKEv2 client, strongSwan on Linux |
| RADIUS | IKEv2 or OpenVPN, per the current matrix | Native IKEv2 client, strongSwan, or the OpenVPN client the matrix names |
Funda lelo thebula njengomkhawulo, hhayi njengemenyu. Umugqa ngamunye uyinhlanganisela ebhaliwe, futhi ukuhlanganisa ikliyenti yomugqa owodwa nendlela yomunye umugqa yilona kanye iphutha leli phepha elikhona ukulivimbela.
I-Entra ID isho i-OpenVPN kanye ne-Azure VPN Client
Ekuxhumekeni kwephoyinti-kuya-kusayithi nge-Entra, ukuhlelwa okusekelwayo kusebenzisa uhlobo lomhubhe lwe-OpenVPN kanye ne-Azure VPN Client. Ibhokisi yengxoxo evamile yegama lomsebenzisi nephasiwedi ayithathi indawo yalokho kuhlanganiswa, futhi i-IKEv2 yemvelo ye-Windows ayiyona indlela eshintshwayo yokwenza ukungena okufanayo. Uma ikliyenti yenkampani yesithathu inikeza inketho ye-Entra noma ye-Azure AD, qinisekisa ngemibhalo yamanje ye-Microsoft hhayi ngelebula. Ilebula iwukukhangisa, kanti inhlanganisela ebhaliwe iyisivumelwano.
Ku-macOS nayo i-Azure VPN Client iyindlela ebhaliwe yale ndlela.
Izitifiketi zidinga ubufakazi bekliyenti, hhayi impande kuphela
Ukuqinisekiswa ngesitifiketi kuyimodeli esekelwayo ehlukile, futhi kusebenza namakliyenti e-OpenVPN abhalwe yi-Microsoft kanye ne-Azure VPN Client ezinkundleni ezisekelwayo. Ku-Windows i-Azure VPN Client ayiyona ye-Entra kuphela: inayo nendlela yokusebenza yesitifiketi ebhaliwe. Esikudingayo isitifiketi sekliyenti esihlosiwe esinokhiye oyimfihlo osebenzisekayo, okuthenjwa yigeyithiwey. Impande ethenjwayo yegeyithiwey ayilona ubufakazi bekliyenti, futhi ukhiye wokusayina womkhiphi awulona neze uhlobo lwephakethe lekliyenti.
Hlola uchungechunge ngaphambi kokulungisa iphrofayili. Isitifiketi esikhishwe yimpande engathenjwa yigeyithiwey sidala ukwehluleka okubonakala njengephrofayili embi kodwa empeleni kuyinkinga yokuthembana.
Gcina ukhiye oyimfihlo ungathunyelwa ngaphandle lapho inkundla ivumela khona, futhi hlola ngesitifiketi esifakwe ngempela kumsebenzisi wamanje.
I-RADIUS iyisinqumo se-backend esinezinhlanganisela zayo
I-RADIUS ihambisa isinqumo sobufakazi kuseva oyisebenzelayo, futhi ibhaliwe ngezinhlobo ezithile zomhubhe namakliyenti. Akuyona impendulo efanele ngokuzenzakalela nje ngoba indawo inezinhlelo zokusebenza eziningi. Thola ukuthi ikliyenti yangempela ingaveza ini ngaphambi kokushintsha inqubomgomo yokuqinisekisa yegeyithiwey, ngoba ukushintshela igeyithiwey ku-RADIUS akulungisi yonke iphrofayili ekhona. Ikliyenti kusafanele ikwazi ukucela noma ukunikeza lobo bufakazi.
Uma indawo exubile iyimbangela, xazulula ngokwengxenye yekundla ngayinye esikhundleni sokwenza inqubomgomo yegeyithiwey ibe buthaka kubo bonke.
I-Linux ngemva kokuhoxiswa kombukiso wango-2026
Umhlahlandlela we-Microsoft wokuhoxiswa kwe-Linux uthi u-31 Agasti 2026 uwusuku lokuhoxiswa kombukiso we-Azure VPN Client we-Linux, ngakho kusukela ngoNovemba 2026 lowo mbukiso usungemuva kwakho. Ukufakwa okukhona kungaqhubeka kusebenza, kodwa akusatholi ukwesekwa, izibuyekezo noma izilungiso zokuphepha. Ungasabalalisi isifaki se-Linux esidala njengokusatshalaliswa okusha okusekelwayo. Lokhu kuwukuhoxiswa kwekliyenti, hhayi kwe-Azure VPN Gateway noma kwamakliyenti e-Windows ne-macOS.
Izinye izindlela ze-Linux ezibhaliwe ikliyenti ye-OpenVPN enokuqinisekiswa ngesitifiketi, noma i-strongSwan ene-IKEv2 nokuqinisekiswa ngesitifiketi noma nge-RADIUS. Zombili ziyizilungiselelo ezihlukile ezidinga imvume yenhlangano, hhayi ukuguqulwa okutholakala ngokuqamba kabusha iphrofayili yakudala ye-Entra.
Uma ukungena nge-Entra kuyimpoqo ngenxa yezizathu zenqubomgomo, umnikazi kufanele akhethe inkundla esekelwayo noma idizayini ehlukile evunyelwe. Leso yisinqumo, hhayi indlela yokugwema.
Yakha iphrofayili bese wenza izihlolo ezine
Lapho inhlanganisela isinqunyiwe, yakha ukulungiselelwa kwekliyenti kusuka kugeyithiwey ehlosiwe bese ungenisa isethulo esibhaliwe salelo kliyenti naleyo ndlela. Ifolda evamile ye-OpenVPN nephrofayili ye-XML ye-Azure VPN Client azishintsheki. Uma igeyithiwey ivula ngamabomu izinhlobo eziningi zokuqinisekisa, khetha iphrofayili nendlela yobufakazi ezihambisanayo esikhundleni sokulindela ukuthi ukuxhumana okukodwa kwenelise konke. Bese wenza izihlolo ngalokhu kulandelana:
- Ikliyenti esekelwayo ingenisa iphrofayili eyakhiwe ngaphandle kokuyihlela.
- Ubunikazi obuhlosiwe buqinisekiswa ngendlela elindelwe yileyoprofayili.
- Inqubomgomo yomzila nesixazululi edingekayo ivela kukliyenti.
- Uhlelo oluvunyelwe lufinyelela kusisetshenziswa salo esiyimfihlo.
Ukungeniswa okuphumelelayo akufakazeli ukuhambisana kokuqinisekisa noma ukugunyazwa kwesisetshenziswa esiyimfihlo, yingakho lezo zihlolo ezine zihlala zihlukene.