I-VPN yasekhaya yabangane: yabelana ngomgudu wokuphuma, hhayi i-LAN

Ukuthi umngane angakwazi ukuphequlula ngoxhumano lwakho lwasekhaya akufani nokuthi angakwazi ukusebenzisa inethiwekhi yakho yasekhaya, futhi igebe phakathi kwale misho emibili liqukethe i-NAS, amaphrinta, ikhasi lokuphatha le-router kanye nayo yonke enye idivayisi ku-LAN. Isimo ngasinye sidinga imithetho yaso yokudlulisa. Izigameko eziningi ze-VPN eyabiwe engizwa ngazo akuzona ukuhlasela okuxakile; isivakashi esafinyelela kokuthile ngoba akekho owabhala ukuthi iyiphi imingcele eyayithengwa. Nquma ukuthi iyiphi inkontileka oyinikezayo, bese uyiveza kunqubomgomo yokudlulisa nokufinyelela, hhayi emlayezweni.

Izinkontileka ezimbili ezizwakala zifana

I-inthanethi kuphela isho ukuthi ithrafikhi yeklayenti emenyiwe iphuma ngoxhumano lwakho futhi akukho okunye. Ukufinyelela okugcwele kusho ukuthi leyo klayenti iyazihlanganisa nenethiwekhi yakho yasendaweni, futhi leyo nkontileka yesibili ihlanganisa ngokuthula eyokuqala, futhi yileyo ndlela abantu abashelela ngayo kuyo. Umehluko uhlehlela emthethweni embalwa yokudlulisa, futhi futhi umehluko phakathi kokwabelana ngomkhawulokudonsa nokwabelana ngendlu. Bhala inkontileka ngaphambi kokuthinta i-firewall, ngoba umthetho owengezwa kamuva ulula ukuwuthethelela kunokuwususa.

Khetha inkontileka ye-inthanethi kuphela ngaphandle uma othile edinga ngempela isevisi ku-LAN, ngoba umthetho ongakaze uqoshwe uyimvume ongakaze uyinikeze. Bese uhlola ukuthi iyiphi inkontileka isetshenziswa isofthiwe yeklayenti, ngoba okumisiwe kwe-tunnel ephelele kungase kunikeze ngokuthula okubanzi.

Umngcele wokuqala: inethiwekhi yasekhaya

Ithrafikhi yezivakashi ayinamsebenzi neze ezinethiwekhi zasekhaya. Isizinda esingaphansi se-VPN esihlukile noma ingxenye yokusingatha ezinikezelwe yenza leyo nqubomgomo kwesula ukuyiveza, kodwa igama elihlukile ngokwalo aliphoqeleli lutho. Shono idivayisi eshintsha amaphakethe ngempela futhi gcina imithetho yokuwela lapho, ngoba umthetho obhalwe kumshini ongadlulisi uwumhlobiso nje. Lapho i-VPN isebenza ku-router, leyo ndawo yokuphoqelela iwuchungechunge lokudlulisa lwe-router ngokwalo.

Inethiwekhi yezivakashi enokwehlukaniswa kweklayenti iyindlela ephusile, inqobo nje uma amaklayenti e-VPN ehlala kuyo ngempela. Zombili izakhiwo zidinga ukuhlolwa okufanayo kusukela kuklayenti hhayi ku-console.

Umngcele wesibili: umsingathi nezinye izivakashi

Amaklayenti adinga isevisi ye-VPN futhi akukho okunye kumshini oyisebenzisayo, ngakho ukufinyelela kokuphatha kuhlala kuyimvume ehlukile. Yiyo evame ukunikezwa ngephutha, ngoba isilaleli se-tunnel nesixhumi esibonakalayo sokuphatha kusebhokisini elilodwa. Uma i-VPN iphelela ku-router, imbobo ye-tunnel nesixhumi sewebhu noma se-SSH kuyizihloko ezihlukene futhi zifanele imithetho ehlukene. Umthetho ovikela ikhasi lokungena akumele neze ufundwe njengokuvinjwa kokudlulisa.

Ukufinyelela kwe-inthanethi futhi akudingi ukuvumela iklayenti elinye elimenyiwe ukuthi lifinyelele kwelinye. Amachibi okufinyelela kude avame ukuziphatha njengengxenye eyabiwe ngaphandle uma usho okunye, ngakho yenza isinqumo sibe sobala ekucushweni kwechibi. Kubangane abambalwa, ukwehlukaniswa yikho okumisiwe okufanele ukukhethwa.

Dweba imigwaqo ngaphambi kokubhala imithetho

Ithuluzi elizimele linamasethi amabili ahlukene amaphakethe okufanele aqashwe: lawo aphelela kulo nalawo eliwadlulisayo egameni leklayenti. Imihlahlandlela yenethiwekhi ye-CISA ibheka imigwaqo engenayo, ephumayo naphakathi kwezinethiwekhi njengokufinyelela okudinga izizathu, futhi yilowo mkhakha olungile lapha. Bhala iziqalo zasekhaya njengoba zinjalo ngempela, i-IPv4 ne-IPv6 zombili, ngoba ukuvimba kwe-IPv4 kuphela kushiya ikhaya eliphinde lihambise i-IPv6 livuleke ngokuphelele kumngcele ofanayo. Bese unquma ukuthi amaklayenti athola kanjani i-DNS nokuthi noma isiphi isikhala sesixazululi siveza kuphela isevisi ehlosiwe.

Lezi ziyizidingo hhayi iresiphi yomhlaba wonke, ngoba imithetho incike ekutheni i-VPN iphela kuphi nokuthi ukuhumusha kwenzeka kuphi. Gwema ukwengeza imvume ebanzi ukuze nje isicelo sokuqala sesiphequluli siphumelele.

Yini oyithathayo kanye nokuthi ungayihlola kanjani

Ukwabelana ngomgudu wokuphuma kudala indima yokusebenza. Mema abantu ngemodeli yobunikazi besevisi, yenza ukususa kube okusebenzayo, gcina umsingathi ne-router kunakekelwa, futhi unqume ukuthi ingakanani i-upload yakho isevisi engayisebenzisa. Izicelo ziphuma ekhelini lakho, ngakho izikhalazo nezinkinga zedumela zifika emnyango wakho ngisho lapho kungekho divayisi eyimfihlo ethintekile. Umklamo wokwehlukaniswa kobuchwepheshe awusho lutho mayelana nesimo somthetho, futhi ukukhawulela ithrafikhi kumachweba ajwayelekile ewebhu akwenzi yonke into evunyelwe ingabi yingozi.

Bese uhlola ukwenqatshwa ngeklayenti eligunyaziwe hhayi kusukela ku-console ye-router. Ngakunye kwalokhu kufanele kube yiqiniso:

• Ukufinyelela kwe-inthanethi kuyasebenza kusukela ku-tunnel yesivakashi.
• I-NAS namaphrinta kuyenqatshwa ngekheli nangegama.
• Ukuphathwa kwe-router kuyenqatshwa kusukela ekhelini le-tunnel.
• Iklayenti lesibili elimenyiwe alifinyeleleki.
• Ukususa ukugunyazwa kweklayenti kuqeda ngempela ukufinyelela.

Uma umnikazi engakwazi ukugcina leyo mingcele nemisebenzi yokusebenza, ukunikeza ifayela lokucushwa kwehlisa lokho okudingwa yilesi simiso kuye. Leyo incazelo eqotho yesevisi, futhi ingeyomlayezo ohamba nokucushwa.