Indlela yokuhlola ukuthi iklayenti le-VPN lisekela ngempela i-SSTP

Ukubiza umkhiqizo ngokuthi iklayenti le-VPN akusho lutho mayelana nokuthi ukhuluma SSTP yini, futhi i-port 443 ekhelini ikufakazela okuncane nakakhulu. I-SSTP isebenzisa i-TLS phezu kwe-TCP 443, bese kuba ukushintshana kokulawula kwe-SSTP, bese kuba i-PPP yoxhumo uqobo, phezulu kube nokuqinisekiswa kwesitifiketi kanye nendlela yokuqinisekisa ye-PPP. Iklayenti lisekela umthetho wokuxhumana kuphela lapho ukuqaliswa okushiwo, kunguqulo efakiwe, kuqeda ngayinye yalezo zendlalelo ngokwezimfuneko zeseva yakho. Yenza izivivinyo ezingezansi ngokulandelana futhi ume kwelokuqala ehlulekayo, ngoba yiloyo efanele ukuxazululwa.

Qondanisa ukuqaliswa, inguqulo kanye nenkundla

Qala ngenkundla, uhlelo lokusebenza kanye nokwakhiwe okufakiwe, ngoba igama elilodwa lomkhiqizi lingaba phezu kokuqaliswa okubili okuhluke ngokuphelele. Izinhlobo ze-VPN ezakhelwe ngaphakathi namaklayenti ezinkampani zangaphandle akuzona into eyodwa, futhi isengezo singakhombisa ilebula le-adaptha engayichazi imithetho yokuxhumana engaphansi kwayo. Imibhalo yenguqulo yamanje ayichazi ukwakhiwe okusebenzayo kumshini ophambi kwakho. Funda ikhasi eliqondene nenguqulo, bese uqhathanisa nalokho iklayenti elikubika ngokwalo.

Ku-Windows uhlobo lwethaneli luvela enkundleni hhayi ku-GUI, ngakho buza inkundla. I-Get-VpnConnection -Name 'Work' | Select-Object TunnelType, ServerAddress ikhombisa i-Sstp lapho iklayenti lomdabu lizozama umthetho wokuxhumana, futhi i-incwadi yezinhlobo zoxhumo iyibala phakathi kwezinhlobo zamathaneli ezakhelwe ngaphakathi. Ku-Linux akikho neze iklayenti le-SSTP lomdabu, ngakho umbuzo uba ukuthi ukuqaliswa okwehlukile okufana ne-sstpc okuvela kuphakethe le-sstp-client kufakiwe futhi kusesikhathi yini.

Funda ifomethi yephrofayela ngaphambi kwelebula

Amaphrofayela awakwazi ukushintshwa, futhi ifayela olunikeziwe livamise ukuqeda umbuzo ngokushesha kunawo wonke uhlu lwezici. Imiyalelo ye-OpenVPN, okhiye be-WireGuard kanye nezilungiselelo zoxhumo lwe-SSTP zichaza imithetho emithathu engahlobene, futhi asikho isikhulumi sokungenisa esiguqula enye ibe ngenye. Ukwabelana nge-port ye-TCP 443 akuhumushi lutho, ngoba i-SSTP, i-OpenVPN phezu kwe-TLS kanye nensiza evamile ye-HTTPS kungasekuthatha i-port efanayo futhi akukho okufanayo phezu kwayo.

Uma ifayela kuyi-.ovpn noma ukucushwa kwe-WireGuard, impendulo isivele icacile: lelo klayenti alicelwa ukuthi likhulume i-SSTP. Ukulingenisa eklayentini elenza i-SSTP kuphela kwehluleka esigabeni sephrofayela, kude ngaphambi kokuba noma yikuphi ukuxoxisana ngomthetho wokuxhumana kuqale.

Lokho i-TLS engakufakazeli ngokusetshenziswa

Ukuxhawulisana kwe-TLS okuqediwe kufakazela ukuthi iseva inesitifiketi, futhi akufakazeli lutho mayelana nokuthi iklayenti lakho liyethemba yini uchungechunge lokukhishwa noma igama elingaphakathi kulo liyahambisana. Ukuqinisekisa kumele kuphumelele kuseva ehlosiwe, kubandakanya noma iyiphi i-CA yangasese ephethwe inhlangano, futhi iklayenti elinikezela ngokweqa amaphutha esitifiketi lisuse ukuhlola esikhundleni sokuthola ukusekelwa komthetho wokuxhumana. Ukuqinisekisa kochungechunge nokufanisa igama kuyizivivinyo ezimbili ezihlukene, futhi isitaki esidlula esisodwa singehluleka kwesinye. Kokubili kusezingeni lokwamukela, hhayi esithakazelweni sokuxazulula izinkinga.

Bese uqinisekisa indlela yokuqinisekisa ye-PPP, ngoba ukusetshenziswa okune-EAP-TLS kudinga iklayenti elikwazi ukwethula isitifiketi ngaphakathi kwe-PPP, kanti indlela esekelwe kugama lokuvuma idinga ukusekelwa kwalokho kushintshana. Ikheli leseva negama lokuvuma akuzichazi izimfuneko zangempela zenhlangano, ikakhulukazi lapho phambi kwazo kukhona isici sesibili noma ukuhlolwa kwedivayisi. Buza ukuthi iyiphi indlela iseva eyiphogayo ngaphambi kokucabanga ukuthi iklayenti lingayifeza.

Landelela iseshini ngezigaba ezine

Buka ukuxhumo kweqa imingcele emine: i-TCP ne-TLS kuya kuseva, ukushintshana kokulawula kwe-SSTP, ukuxoxisana kwe-PPP, bese kuba isisetshenziswa osidinga ngempela. Ilogi ema ngemuva kwe-TLS ichaza iphutha elihlukile kunalelo elima ngaphakathi kwe-PPP, futhi womabili aholela kubantu abehlukene abaphethe. Ukulayisha kwisiphequluli ikhasi lewebhu lomsingathi kufakazela kuphela ukuthi kukhona okuphendulile ku-443, okuyiyo impendulo engelona iqiniso evame kakhulu kulo mkhakha. Uma lelo khasi lilayisha kanti iklayenti lisahluleka, inkinga ingaphezu kwe-TLS futhi iseva yewebhu ayiyona esolwayo.

Qeda ngesisetshenziswa sangempela sangasese kanye nokusesha kwegama, ngoba iseshini esungulwayo engathwali lutho ibukeka ifana naleyo esebenzayo kumafasitela amaningi esimo. Isicelo esisodwa esiphumelelayo sokuya kwisisetshenziswa osidingayo sixazulula umbuzo isithonjana esingakwazi ukuwuphendula.

Uma ukusekelwa kungekho, shintsha uhlelo

Uma iklayenti lingakwazi ukukhuluma i-SSTP, thola enye indlela egunyaziwe noma cela umnikazi weseva umthetho wokuxhumana osekelwa yizinhlangothi zombili. Ukususa izinketho ezingaziwa kuze kuphumelele ukungenisa kwakha iphrofayela engaxhumani nalutho, okuyindlela eslowu kakhulu eya endaweni efanayo yokuphela. Isifaki esivela emthonjeni ongaziwa esikhangisa ukuhambisana komhlaba wonke sengeza indlela yokuthembela engagunyaziwe emshinini futhi ngokuvamile sithatha isikhundla seklayenti lenkundla ngento inhlangano engakwazi ukuyibuyekeza. Akukho kokubili lezi zinyathelo okuyisixazululo, futhi kokubili kunzima ukukuhoxisa kunenkinga yasekuqaleni.

Phatha umbuzo wokuhambisana ngokwehlukile ekusebenzeni nasekukhetheni indawo yokugcina, ngoba iseva eseduze ayilutho uma iklayenti lingakwazi ukukhuluma umthetho wayo wokuxhumana. Ukulungisa ukubambezeleka akulungisi isigaba esingaqedi neze.