Khetha indawo efanele yokubheka yokuhlola i-VPN ocingweni
Isilaleli se-VPN socingo, isevisi ocingweni kanye nomphathi we-LAN ohamba ngomzila kuyizindawo ezintathu. Landela lezi zinyathelo ezinhlanu futhi ume lapho ububanzi buphela khona.
Ukuhlolwa okugunyaziwe kwe-VPN ephethwe ocingweni kuyahluleka ngokuthula lapho isihloli sihlezi ohlangothini olungalungile lomhubhe. Uthola imiphumela, ibonakala ikholakala, futhi iphendula umbuzo ongazange ubuzwe muntu. Landela izivivinyo ezinhlanu ezingezansi ngokulandelana. Ngayinye inombandela wokuma, futhi ukuma kusenesikhathi kushibhe kakhulu kunokuphinda uhlole kusukela ekuqaleni ngemva kokuba umbiko usubhaliwe.
Isinyathelo 1: shono igama lendawo ohlela ukuyifinyelela
Izindawo ezintathu zivame ukudidaniswa ngoba idivayisi eyodwa iyazixhumanisa. Zisebenzisa ikhodi nenqubomgomo ehlukile, ngakho bhala ukuthi iyiphi esemkhakheni ngaphambi kokuba kuqale noma ini.
| Assessment target | What the path exercises |
|---|---|
| Public VPN listener on the handset | Reachability before login, plus the exposed VPN daemon |
| A service on the handset, by its tunnel address | Access after admission to something hosted locally |
| A LAN host behind the handset gateway | Forwarding, the return path and downstream access policy |
Uma ububanzi obugunyaziwe bungasho ukuthi iyiphi kwezintathu, ma futhi ubuze. Ukwenza i-root ocingweni akuphenduli lo mbuzo, futhi kushintsha into ehlolwayo, hhayi indawo yokubheka.
Bhala phansi izinhloso, amakheli omthombo avunyelwe, iwindi lesikhathi kanye nomkhawulo wamandla ngasikhathi sinye. Umhubhe ukuholela kulobo bubanzi; awukunikezi ilayisense yokuhlola konke ongakuhambisa ngomzila.
Isinyathelo 2: khetha umthombo ongabona leyo ndawo
Isihloli esihlezi ngaphakathi kwe-VPN asikwazi ukuphinda sidale umbheki we-inthanethi ongaqinisekisiwe. Sesivele sinemizila, ubufakazi nemvume umbheki wangaphandle angenakho, ngakho imiphumela yaso ichaza umbono wangemva kokwamukelwa ngisho uma indawo eqondiwe iyafana. Iphutha elihlukile ngakolunye uhlangothi livamile ngokufanayo. Ukuhlolwa komphakathi kwembobo ye-VPN akusho cishe lutho mayelana nesevisi eyimfihlo engemva kokungena, futhi ukuyethula ngokungathi isho lokho kwandisa ukuchayeka kolunye uhlangothi futhi kukwehlise kolunye.
Ma uma umthombo ongawuthola ungahambisani nendawo. Ukuhlolwa okwenziwe komunye osebenza naye ngaphakathi komhubhe akufanele kwethulwe njengomphumela wangaphambi kokuqinisekisa, futhi isivivinyo esidinga umthombo wangaphandle ogunyaziwe akufanele sithuthelwe ngaphakathi ngokuthula ukuze kugwenywe umsebenzi wamaphepha.
Isinyathelo 3: qinisekisa umzila kanye nendlela yempendulo edlula ocingweni
Lapho idivayisi idlulisela kwelinye inethiwekhi encane, isihloli sidinga umzila ovunyelwe futhi into eqondiwe idinga indlela yokubuya esebenzayo. Qinisekisa kokubili esikhundleni sokucabanga ukuthi impendulo ye-ping isho ukuthi indlela iphelele.
ip route get 10.20.0.8
tcpdump -ni any host 10.20.0.8I-NAT yomthombo ishintsha lokho isevisi engaphansi ekubonayo. Uma ucingo luhumusha ikheli lesihloli, imithetho yokufinyelela kanye namarekhodi endaweni eqondiwe kusebenza ekhelini elihumushiwe, ngakho isevisi ebonakala ikwamukela ingase yamukele ucingo hhayi isihloli.
Qaphela nokuhlangana kwenethiwekhi yesihloli uqobo. Uma ucingo luhambisa ngomzila i-192.168.1.0/24 futhi isihloli sihlezi ku-LAN enezinombolo ezifanayo, izivivinyo zishaya amadivayisi endawo futhi umbiko uwachaza njengendawo eqondiwe. Hlola umzila isihloli uqobo esizowusebenzisa ngaphambi kokuthumela ngisho iphakethe elilodwa.
Hlola ikheli langempela lendawo eqondiwe futhi gcina igama lomphathi elidingwa uhlelo lokusebenza ukuhlonza i-TLS kanye nokuphetha okungokoqobo. Ukufinyelela isango kufakazela ukuthi isango liyaphendula; akuhloli isevisi engemva kwaso.
Isinyathelo 4: thatha ukutholakala njengokuhlola okunezicabango
Ukutholakala komphathi yilapho imiphumela yokuhlolwa ivame ukuhamba kabi khona. Ukutholakala kwendawo nge-Ethernet akweqi i-VPN ehamba ngomzila, ngakho ukuhlola okusebenza ku-LAN eyisicaba akufiki nje. Ukuhlola kokutholakala okuvinjiwe bese kwenza isevisi efinyelelekayo futhi egunyaziwe ibonakale ingekho.
Yenza isinqumo ngokuqwashile sokuthi uyayeqa yini indlela yokutholakala futhi uhlole ngqo amakheli aziwayo, bese usho lokho embikweni. Imbobo ephendulayo ayibona ubufakazi bokuthi ukuqinisekisa kwe-VPN kuphumelele, futhi impendulo ehlungiwe ayibona ubufakazi bokuthi akukho okulalelayo. Ijubane liyingxenye yaloo nkinga. Ucingo olunciphisa noma olulahla amaphakethe ngaphansi kokuhlola okusheshayo lukhiqiza izimo ezihlungiwe ezingezocingo hhayi ezingesevisi, ngakho yehlisa ukusebenza ngasikhathi sinye futhi uhlole futhi ngaphambi kokubhala imbobo njengevaliwe.
Umbundela wokuma lapha ingukuhumusha, hhayi ubuchwepheshe: uma ungakwazi ukusho ukuthi isimo sisho ukuthini kulo mzila, umphumela ungowesengezo hhayi owezinto ezitholakele.
Isinyathelo 5: bambelela iwindi, bese ulivala
Ucingo luyiseva embi ngoba lwakhiwe ukuthi lulale. Ukuthuthukisa ibhethri, i-doze kanye nokuphathwa kwamandla e-Wi-Fi kungamisa uhlelo phakathi nokuhlolwa, futhi ukuxhuma kabusha umhubhe kungashintsha ikheli elisetshenziswa yinto eqondiwe. Ukugijima okweqa esinye salezi zigameko kunewindi lomphumela elingavumelekile.
Gcina indima yesango emkhakheni omncane kunayo yonke evunyelwe umsebenzi ogunyaziwe, qaphela umhubhe ngenkathi ukugijima kusaphila, futhi bhala ukuqala nokuphela kwewindi ngalinye olibikayo. Lapho ukuhlolwa kuphela, susa ukufinyelela kwesikhashana ngomnikazi waso, gcina irekhodi lomthombo nomzila, futhi uvikele okukhiphayo njenganoma iyiphi enye into yokuhlola.
Uma udinga indawo yokubheka ephindwayo esikhundleni sempumelelo eyodwa, yilowo umphumela okufanele uphikiswe ngawo.isithenjwa sokutholakala komphathi sichaza ukuthi yikuphi ukuhlola okucabanga ingxenye yendawo, futhi yileyo ncazelo eguqula umphumela ongenalutho ube isitatimende esivikelekile.