Ikhonsentreytha noma isango? Lapho kuphela khona i-VPN endleleni yakho

Abathengisi ababili bangabiza idivayisi efanayo ngekhonsentreytha nesango, futhi alikho igama kula mabili elizokutshela ukuthi ithrafikhi ihunyushwa kuphi. Amalebula achaza izindima zokusatshalaliswa hhayi amaphrothokholi, futhi izindima ziyahlangana kuzo zonke izinhlangothi. Okubalulekile ekubuyekezweni komklamo idivayisi eqeda umhubhe, izilawuli ezizungezile kanye nendlela isicelo esihunyushiwe esihamba ngayo. Nquma ngalezintathu, futhi ibizo elikushejuli yedatha lizoyeka ukuba impikiswano.

Amalebula amabili, isinqumo esisodwa

Ikhonsentreytha ngokuvamile isho uhlelo olumaphakathi olwamukela futhi luphathe izixhumanisi eziningi ngesikhathi esisodwa, futhi igama lihambisa uphawu lobukhulu. Isango yigama elibanzi kakhulu lesiphetho esixhumanisa umhubhe namaxhumano angemuva kwawo, futhi singachaza isihambisi, udonga lomlilo noma isevisi elawulwayo. Alikho igama elisho iphrothokholi, futhi alikho elithembisa isethi ethile yezici. Idivayisi efanayo ingathengiswa ngamagama womabili ngabathengisi ababili, futhi yingakho impikiswano yamagama ingapheli.

Thatha ilebula njengophawu lokusetshenziswa okuhlosiwe hhayi okunye. Isinqumo singesemisebenzi ongayiqinisekisa ekucushweni, hhayi amagama asencwadini yokusakaza.

Thola idivayisi eqeda umhubhe ngempela

Landela ukuxhumana kwekhasimende kusuka ngaphandle kuye ngaphakathi. Okuthile kwamukela ukuthutha, okuthile kuqinisekisa umlingani, okuthile kunikeza ikhasimende ikheli, okuthile kugunyaza indawo ekuyiwa kuyo, futhi okuthile kunikeza indlela yokubuya. Le misebenzi emihlanu ingaba kudivayisi eyodwa noma kwezihlanu, futhi umbuzo owodwa onenzuzo ukuthi iyiphi idivayisi eyenza ini. Isihambisi esingaphezulu singathwala amaphakethe angaphandle ngaphandle kokuwasusa, futhi yiso leso simo lapho umdwebo wokuhlelwa ukhohlisa umbuyekezi ukuba asho ibhokisi elingalungile.

Qinisekisa ukuphela kukholudayisi uqobohhayi kusuka kumdwebo. Isokhethi elalelayo embobeni elindelekile kanye nokufakwa kwesimo okusunguliwe kuwubufakazi obuqinile kunomdwebo wenethiwekhi, futhi ukungabikho kwakho kokubili kuqine nakakhulu.

sudo ss -lunp | grep -E ":500|:4500"
sudo ip xfrm state
sudo traceroute -n -U -p 4500 vpn.example.com

Nquma ngezici ezinhlanu, hhayi ngegama lomkhiqizo

Izici ezinhlanu zihlukanisa abakholudayisi, futhi ngayinye ingaphendulwa kusuka emibhalweni hhayi ekukhangiseni. Lolu kukhishwa lusekela iziphi izindima ze-VPN, imiphi imithombo yobunikazi engayisebenzisa, bubuphi ububanzi bokudlulisela obuvumelayo, ingakanani umthamo ewubekezelayo, futhi iziphatha kanjani lapho yehluleka. Cela lezo zinhlanu ngokubhaliwe futhi ilebula lizoba elingabalulekile esinqumweni.

Umthamo yisici ilebula lekhonsentreytha elisikisela ngamandla amakhulu, futhi yiso esivame ukushiywa singacacile. Imikhawulo yokwenza ngesikhathi esisodwa, umfutho wokudlulisela kumhubhe ngamunye kanye nomfutho wokudlulisela uwonke kuyizinombolo ezintathu ezihlukene, futhi idivayisi ingaba nesandla esivulekile kwesinye futhi ingabazondi kwesinye. Ukutholakala okuphezulu yisici sombhangqwana hhayi sayiphi idivayisi, futhi kungaphansi kombuzo wokubuyisela. Ilebula elisikisela ubukhulu akusona isicaciso sobukhulu.

Ukubuyisela kungaphansi kwengxoxo efanayo. Buza ukuthi umphathi ufinyelela kanjani idivayisi lapho umhubhe uqobo uyingxenye ephukile, ngoba indlela engaphandle kwebhendi isinqumo somklamo hhayi isengezo.

Hlola ubufakazi ngaphambi kwelebula

Isevisi yamanje kufanele ihlolwe ngezindima ezisekelwayo, inqubomgomo yobunikazi, ububanzi bokudlulisela, umthamo kanye nokuziphatha kokubuyisela, futhi izimpendulo kufanele ziqondene nenguqulo ozoyisebenzisa. Ukubuyekeza komlando kungachaza ukuthi kungani igama elithi ikhonsentreytha likhona, kodwa angeke likutshele ukuthi inguqulo yamanje isekela ini.Ukubuyekeza kwe-Cisco VPNkuyisimo samagama esiwusizo ngenxa yaleyondaba, futhi ukukuthatha njengohlu lwezici lwamanje yiyo indlela ukubuyekeza komklamo okuhamba ngayo kabi.

Bese uqinisekisa isimangalo esisodwa kusuka ekuqaleni kuze kube sekupheleni. Khetha isici esibaluleke kakhulu, njengomfutho wokudlulisela kumhubhe ngamunye noma isikhathi sokushintsha, futhi cela indlela yokulinganisa hhayi inombolo. Ukuhlola kwasendaweni okusheshayo kwalokho idivayisi ekubonisayo ngempela kuyisiqalo esifanele.

sudo ip xfrm state | grep -c '^src '
sudo swanctl --list-sas

Ku-Linux umugqa wokuqala ubala izinhlangano zokuphepha, futhi umhubhe ngokuvamile unezimbili zazo, eyodwa ngayinye inhlangothi, ngakho hlukanisa inombolo ngambili ngaphambi kokuyiqhathanisa nesimangalo somhubhe. Kumgcini we-strongSwan umugqa wesibili usho imihubhe ngqo. Ukubala amasokhethi akusona esikhala salokho: i-IPsec NAT-T igcina isokhethi eyodwa ye-UDP 4500 eyabiwe yiwo wonke umhubhe, ngakho ukubala amasokhethi kuleyondobo kubuyisela uziro noma okukodwa, noma mingaki imihubhe ekhona. Awukho umugqa okuwukulinganisa komfutho wokudlulisela, futhi awukho obikezela ukuziphatha ngaphansi komthwalo. Bakunikeza iyunithi okufanele ubuze ngayo, futhi umthengisi ongachaza indlela unesicaciso lapho ongakwazi khona enencwadi yokusakaza.

Bhala indlela phansi futhi amalebula ayobe engabalulekile

Chaza ukwakheka njengohlu lwemisebenzi enabanikazi: ukuphela, ukuqinisekisa, ukwabiwa kwamakheli, ukugunyaza, ukuhambisa okokubuya, ukuloga kanye nokubuyisela. Leyoncazelo isinda ekushintsheni kwegama lomkhiqizo, ekushintsheni komthengisi nasekuthengweni, futhi akukho kulokho okuzobuyekeza umdwebo wakho.

Buyekeza ngokuqhathanisa neseshini yekhasimende yangempela kanye ngekota, ngoba umsebenzi ungahamba ngaphandle kokuthi othile ahlele umdwebo. Amalebula azoqhubeka eshintsha, futhi uhlu lwabanikazi luzoqhubeka luyinto echaza ngempela inethiwekhi.