Indlela ucingo lwe-GXP21xx olwakha ngayo umhubhe walo we-OpenVPN

Ucingo lwasetawuleni oluxhuma ku-VPN yasehhovisi luyindawo yokugcina elawulwayo ene-firmware yayo, ubunikazi bayo kanye nendlela yayo yokubuyisela. Iklayenti elifakiwe akuyona ukufakwa kwe- OpenVPN kwedeskithophu enesikrini esincane, futhi ukuyiphatha kanjalo yikho okwenza ucingo lugcine luphethe ukhiye owabiwe kanye nenqubomgomo okungekho muntu oyigunyazile. Nakhu okwenzeka ngempela phakathi kocingo nesango.

Ucingo lukulayisha ini ngesikhathi sokuqalisa

Funda Ulwazi Lwesistimu kudivayisi ngaphambi kokulungiselela noma yini. Umhlahlandlela wokuphatha we-GXP21xx ukhomba inguqulo yohlelo njengokukhishwa okuyisisekelo kwe-firmware futhi uveza inkambu yesimo sokusekelwa kwe-OpenVPN, ekutshela ukuthi ukwakhiwa onakho kuyayifuna yini le ntwenyehlo.

Ngemva kwalokho umhlahlandlela uchaza izindlela ezimbili zokucubungula. Indlela elula ikunika izinkambu ezihlukene: ikheli leseva, imbobo, ukuthutha kanye nempahla yesitifiketi elayishiwe. Indlela yochwepheshe ithatha i-ZIP yokucubungula. Lezi ziyizindlela ezimbili ezihlukene zokulayisha kuklayenti elilodwa, futhi ifomethi yephakethe ibalulekile njengokuqukethwe.

Ukuphonsa noma iyiphi ifayela .ovpn yedeskithophu engahleliwe ku-ZIP akudali ukuhambisana. Ucingo luhlaziya lokho okulindelwe yi-firmware yalo, futhi ifayela elisebenza kukhompyutha ephathwayo lingashaywa indiva buthule lapha.

Iklayenti kufanele liveze ini

Qala ngokuthola izidingo zephrofayili kumsebenzisi wesango: indawo yokugcina, ukuthutha, ukuqinisekiswa kontanga, ukuqinisekiswa kobunikazi, ama-algorithm adingekayo kanye nezinsiza eziyimfihlo ucingo olungafinyelela kuzo. Bese uhlola ukuthi ukusetshenziswa okufakiwe kungayiveza yini leyo nkontileka.

Lokhu kuhleleka kubalulekile ngoba enye indlela ukushintsha isango elabiwe ngenxa yocingo olulodwa. Noma yikuphi ukukhululeka okwenzela ucingo kusebenza kuyo yonke enye iklayenti kuleyo ndawo yokugcina, futhi lokho kuwukuhweba okubi kudivayisi eyenza izingcingo.

Uma impendulo iwukuthi ukwakhiwa akukwazi ukuhlangabezana nenqubomgomo, izinketho eziqotho i-firmware noma idivayisi esekelwayo, noma ilungiselelo lesango eligunyaziwe lezindawo zokugcina zomsindo. Ukwenza umhubhe ube buthaka akusikho okukodwa kwazo.

Ukucindezela kanye namarisiphu amadala

Amarisiphu amadala ezinto ezincane avame ukunika amandla ukucindezela ukuze konganekwe umkhawulo wokudlulisela. I-OpenVPN 2.6 imemezela ukucindezela njengokuphelelwe yisikhathi futhi ngokuvamile ayikukhuthazi, ngakho ukucubungula okukopishwe kumarisiphu anjalo akusona isigunyazo sokuphepha samanje, noma ngabe umbhalo weforum wabhalwa ngamuphi unyaka.

Kunjalo nasekuhlolweni kobunikazi. Uma iphrofayili ixhumanisa kuphela lapho ukuqinisekiswa kontanga kungavaliwe, iphrofayili inkinga, hhayi ukuqinisekiswa. Lungisa impahla yokwethemba esikhundleni sokufundisa idivayisi ukweqa ukuhlolwa.

Idivayisi eyodwa, ubunikazi obubodwa

Izingcezu ezintathu zempahla zinendima ezintathu. Isitifiketi sokwethemba se-CA sivumela ucingo ukuqinisekisa umkhiphi. Isitifiketi socingo sikhomba le divayisi. Ukhiye oyimfihlo wocingo uyimpahla yedivayisi ebucayi futhi uhlala kudivayisi.

Ukhiye wokusayina we-CA awukaze ube ngowocingo. Futhi akusiyo iphrofayili yekhompyutha ephathwayo yomphathi ekopishwe kulo lonke iqembu, evumela ucingo oluntshontshiwe ukuba lube isiqinisekiso salo lonke ucingo.

Umhlahlandlela futhi uveza iphasiwedi yokhiye weklayenti kanye nezinkambu zokuzikhethela zegama lomsebenzisi neliphasiwedi le-VPN. Lezi akuzona ngokuzenzakalela iziqinisekiso zesandiso se-SIP. Nquma ilungiselelo lokuqinisekisa lale divayisi, kuhlanganise nendlela elithola ngayo okokufaka okudingekayo ngemva kokuqalisa kabusha ngaphandle kokuqapha.

Letha impahla ngohlelo lwakho lokuhlinzeka oluvikelwe, futhi rekhoda idivayisi, ubunikazi obukhishiwe kanye nomnikazi wokuhoxiswa. Lapho ucingo lushintshwa, leyo rekhodi iyimehluko phakathi kokushintshwa kwemizuzu emihlanu nentambama egcwele ukuqagela.

Gcina indlela yokuphatha

Ngaphambi kokunika amandla umhubhe, qinisekisa ukuthi usengafinyelela isikhombimsebenzisi sewebhu socingo noma indlela yokuhlinzeka. Idivayisi idinga ukufinyelela kwenethiwekhi okuvamile ukuze ifinyelele indawo yokugcina ye-VPN, futhi indlela yayo yokuphatha akufanele inyamele phakathi nokubhalisa.

Uma ushintsho lomzila ngesikhathi sokubhalisa lukukhiya ngaphandle, ukubuyisela ngokuvamile ukusetha kabusha kwefektri kanye nokuphinda inqubo yonke. Hlela ukuhleleka ukuze lokho kungaze kwenzeke: hlinzeka, qinisekisa ukufinyeleleka, bese unika umhubhe amandla.

Yamukela ucingo, hhayi umhubhe

I-akhawunti ye-SIP ihlala iwukucubungula okuhlukile. Umhlahlandlela we-GXP21xx uqondisa ukusetshenziswa kwe-OpenVPN esimisweni sokunqamula kwe-NAT se-VPN se-akhawunti, ngakho hlola lowo mhlahlandlela we-firmware efakiwe kanye nomklamo wakho we-PBX esikhundleni sokuhlanganisa izinguquko ze-STUN, ummeleli kanye ne-VPN ngaphandle kokwazi ukuthi yimuphi umnikazi ozidingayo.

Bese uqinisekisa igama le-PBX elihlosiwe kanye nendlela eyimfihlo, qinisekisa ukubhaliswa kwe-SIP, futhi wenze izingcingo ezingenayo neziphumayo ezigunyaziwe ngomsindo ohlolwe nhlangothi zombili. Hlola izici zocingo ezidingwa ngempela ukusetshenziswa, ngoba isibonisi sokubhalisa akulona ucingo olusebenzayo.

Ekugcineni, phinda kusukela ekuqaliseni okubandayo okulawulwayo nangemva kokuphazamiseka kwenethiwekhi. Bheka ukuthi ucingo luyabuyisela yini umhubhe, i-akhawunti kanye nezingcingo ezisebenzisekayo ngokulandelana okuhlosiwe, futhi uqinisekise ukuziphatha okumenyezelwe lapho umhubhe ungeke uxhume. Umhlahlandlela wokuphatha we-GXP21xx uyisithenjwa sezinkambu ezichazwe ngenhla.