I-IOS SSL VPN yakudala: iphakethe, iphrofayili, isango, iseshini
Isifaki esiku-flash singenye yezingxenye ezine. Hlola iphakethe, iphrofayili yeklayenti, isilaleli se-TLS nenqubomgomo yomongo ngokulandelana, ume ekwehlulekeni kokuqala.
Uthola isifaki seklayenti ku-flash yerutha bese uphetha ngokuthi i-SSL VPN isilungisiwe. Leyo ingxenye eyodwa kwezine, kanti ezinye ezintathu zinquma ukuthi ukhona yini ongaxhuma. Ku-IOS SSL VPN yakudala izingxenye ziyizinto ezihlukene: iphakethe leklayenti lesihloko, iphrofayili yeklayenti engakhethwa, isango le-WebVPN eliqeda i-TLS, kanye nomongo kanye nenqubomgomo yeqembu ebamba ukuqinisekisa kanye nezilungiselelo zesehini. Uma kungekho eyodwa, ukwehluleka kubonakala kufana ngaphandle.
Isibonelo sokulungisa se-Cisco IOS SSL VPN, esakhiwe ku-IOS 15.3 ne-AnyConnect 3.1, siwusizo khona ngoba sihlukanisa lezo zinto. Sifunde njengencazelo yalokho kuqalwa kwakudala, hhayi njengesincomo sokuthumela lezo zinguqulo.
Okokuqala, iphakethe: kuyini futhi akuyona ini
Iphakethe lesihloko lihlinzeka ngesofthiwe yeklayenti yepulatifomu eyodwa. Aliyona iphrofayili futhi alisiyo isilaleli, futhi ifayela elilele ku-flash lifakazela kuphela ukuthi othile walayisha okuthile. Alifakazeli ukuthi iseshini yake yalisebenzisa, ukuthi ipulatifomu ihambisana nedivayisi yomsebenzisi, noma ukuthi isango liyibhekisela.
Qinisekisa igama elifanele lefayela, ipulatifomu eliqondiswe kuyo nendawo okukhonjiswa kuyo ukulungisa. Iphakethe le-Windows alisho lutho ngamafoni, futhi ifayela elilayishiwe okungekho nto yesango elikhuluma ngalo liyisitoreji, hhayi ukulungisa. Iphakethe elihambisana nepulatifomu kodwa elingakaze lixhunywwe kusevisi ngeke linikezwe msebenzisi. Kanjalo nelo igama lefayela lalo elihlukile kunenani okulindelekile ukulungisa.
Okwesibili, iphrofayili: izilungiselelo, hhayi isofthiwe
Iphrofayili yeklayenti engakhethwa ithwala izilungiselelo umlawuli azilungiselela ngokwahlukile, njengohlu lwamaseva noma izintandokazi zeklayenti. Ukuyihlanganisa nesifaki kuvamile ngoba zombili zifika njengamafayela anamagama afanayo. Uma ukuthunyelwa kulindele iphrofayili, ukungabikho kwayo kushintsha okwenziwa yiklayenti ngemva kokuxhuma, hhayi ukuthi iyaxhuma yini.
Bhala kokubili futhi uqophe ukuthi yikuphi isango elibhekisela kukho ngempela. Lowo mugqa owodwa uvimbela isigaba samathikithi okusekela lapho abantu ababili bekhuluma ngamafayela ahlukene.
Okwesithathu, isilaleli kanye nobuwena be-TLS
Into yesango ichaza ikheli nechweba elenziwa ngumhlaba wangaphandle kanye nesitifiketi esethulwa ngesikhathi sokuxhawula. Isiphequluli esifinyelela ikhasi lesango, iklayenti eliqeda ukuqinisekisa, nohlelo olufinyelela iseva eyimfihlo kuyimibono emithathu ehlukene, futhi eyokuqala kuphela inhlolo yokulalela. Uma ukuxhawula kwehluleka, akukho okulandela okusabalulekile, ngakho hlola iketanga lezitifiketi negama ngaphambi kokuhlela noma iyiphi inqubomgomo.
Bhala phansi ubuwena obulindelekile kwenye indawo. Isitifiketi esivuselelwe noma esishintshiwe siyisizathu esivame kakhulu sokuthi ukuthunyelwa obekusebenza ngenyanga edlule kuyeke ukusebenza kule nyanga.
Okwesine, umongo kanye nenqubomgomo enesifanekiso sayo esingokoqobo
Umongo nenqubomgomo yeqembu kuxhumanisa ukuqinisekisa nokuziphatha kwesehini: ichibi lamakheli, imizila ehlukanisiwe, i-DNS, kanye nokuthi imiphi iminethiwekhi yangaphakathi umsebenzisi angayifinyelela. Isibonelo esibhaliwe sixhumanisa umongo waso nesifanekiso esingokoqobo esihlinzeka ngokuziphatha kwesixhumi esibonakalayo seseshini ngayinye, futhi lezo zinto zohlangothi lweseva zikhona ngaphandle kwanoma yini elayishwa ngumsebenzisi.
Uma umsebenzisi eqinisekisa kodwa engafinyeleli lutho, iphutha livamise ukuba lapha, hhayi kuklayenti. Qhathanisa ichibi, imizila enikezwe iklayenti ne-ACL evumela ithrafikhi eqhubekayo, futhi uzihlole ngokusho komsebenzisi, hhayi ngokwakuhloswe ukuklanywa.
Hlola ngokulandelana futhi ume ekwehlulekeni kokuqala
Hamba ngezingxenye ezine ngokulandelana okuhlangana ngakho ukuxhumana: isilaleli, ukuqinisekisa, inqubomgomo, bese kuba ukuziphatha kweklayenti. Qinisekisa i-TLS ngobuwena obulindelekile, qinisekisa i-akhawunti eyaziwayo kahle, funda ikheli nemizila enikeziwe kusuka kuseshini, futhi ngemva kwalokho kuphela qhathanisa ipulatifomu yeklayenti nephakethe. Ukuma ekwehlulekeni kokuqala kugcina into eyodwa eguqukayo emdlalweni, futhi lowo ngumehluko phakathi kokulungisa nokuqagela.
Efoni noma kunoma iyiphi iklayenti engaphandle kwaleso sibonelo sedeskithophu sakudala, thola inkontileka yangempela esekelwayo yeklayenti nesango esikhundleni sokucabanga ukuthi ukugeleza kwe-Windows kuyajwayeleka. Ukushintsha iphrothokholi eceliwe ngeke kuguqule iphrofayili ye-IKEv2 ibe yile sevisi ye-SSL VPN, futhi ukufaka iphakethe ledeskithophu akufakazeli lutho ngokusekelwa kweselula.