Iphutha le-L2TP/IPsec 789, 720 noma 691: lungisa isigaba esifanele kuqala

I-Windows 11 ibika inombolo ehlukile esigabeni ngasinye se-L2TP/IPsec, futhi leyo nombolo ikhombisa isigaba esikhundleni sokulinganisa ukwehluleka. U-789 wehluleka ngaphambi kokuba isixhumanisi se-PPP sibe khona, u-720 wehluleka ngesikhathi isixhumanisi siphakanyiswa, kanti u-691 wehluleka ngemva kokuba isixhumanisi sesiphezulu futhi izifakazelo zenyusiwe. Isinqumo esiwusizo akusona ukuthi yikuphi ukulungisa okudume kakhulu; yikho ukuthi ikhodi ifakazela ukuthi ufinyelele isigaba esiphi. Funda lokho kuqala, bese ushintsha isendlalelo esisodwa esivivinyweni ngasinye ukuze ikhodi elandelayo isakutshele okuthile.

Funda ikhodi njengesigaba, hhayi njengohlu lwezinkinga

Uxhumano lwe-L2TP luwela imingcele emithathu ngokulandelana okumisiwe. I-IKE ixoxisana ngamasoshelini okuphepha nge-UDP 500, ukuwela kwe-NAT kuhambisa leyo traffic ku-UDP 4500, futhi ngemva kwalokho kuphela umhubhe we-L2TP uthwala isikhathi se-PPP esiqinisekisa umsebenzisi futhi sinikeza ikheli.

Yilokho kulandelana okwenza ikhodi yephutha eshintshayo ibe ubufakazi obuwusizo. Ukusuka ku-789 ukuya ku-720 kusho ukuthi i-IPsec isixoxisana futhi ukwehluleka sekudlulele ekusungulweni kwesixhumanisi. Ukusuka ku-720 ukuya ku-691 kusho ukuthi isixhumanisi senyukile futhi isango lenqabile ubunikazi. Uma usebenzisa izilungiso ezinhlanu ngesikhathi esisodwa, ulahlekelwa yilowo mkhondo futhi awukwazi ukusho ukuthi yikuphi ukushintsha okusebenzile.

789: khetha phakathi kwendlela nenqubomgomo yasendaweni

Ikhodi u-789 iyiphutha lokucubungula phakathi nokuxoxisana kokuqala kokuphepha. I-IPsec ayikaze yakha isoshelini elisebenzisekayo, ngakho i-akhawunti ayikahlolwa. Qala ngendlela nangokhiye owabiwe, hhayi nge-akhawunti.

Qinisekisa ukuthi i-UDP 500 ne-UDP 4500 zifinyelela iseva nokuthi ukhiye owabiwe ngaphambili uyahambisana nge-byte nge-byte, kuhlanganise nobukhulu bezinhlamvu nezikhala zokugcina. Uma iseva ingemuva kwe-NAT, i-Windows ingase futhi idinge inani lerejista elibhaliwe. Sebenzisa u-1 uma iseva ingemuva kwe-NAT no-2 uma zombili izinhlangothi zinjalo, bese uqala kabusha ngoba i-ejenti yenqubomgomo ifunda inani lapho iqala:

reg add "HKLM\SYSTEM\CurrentControlSet\Services\PolicyAgent" /v AssumeUDPEncapsulationContextOnSendRule /t REG_DWORD /d 1 /f

Ukulungiswa okunzima kwe-adaptha kungokwegatsha elinye. Ukususa idivayisi ye-Wi-Fi namachweba amancane e-WAN bese uskena kabusha i-hardware kuyafaneleka uma isitaki se-IPsec sasendaweni ngokwaso sonakele futhi ezinye izinhlobo ze-VPN zehluleka ngendlela efanayo. Kungumzamo oyize uma kuhluleka iseva eyodwa kuphela ye-L2TP kuyilapho zonke ezinye izindlela zenethiwekhi zisebenza.

720: khetha phakathi kwale adaptha neqembu lamaseva

Iphutha u-720 libika ukuthi ukuxhumana nekhompyutha ekude akukwazekanga ukusungulwa, futhi kuvela ngemva kokuba i-IPsec iphumelele. Umhubhe ufinyelele iphuzu lokukhweza isixhumi noma lokuthola ikheli, bese uma. Lokho kukwenza kube umbuzo we-adaptha yasendaweni noma umbuzo womthamo weserva.

Sebenzisa indawo yomthelela ukunquma. Ikhompyutha eyodwa ye-Windows ehlulekayo ikhomba ichweba elincane le-WAN elingalungile, insiza ye-Remote Access emisiwe noma iphrofayela yokuxhumana eyonakele. Amaklayenti amaningi ehluleka ngesikhathi esisodwa akhomba iseva: iqoqo lamakheli eliphelile, insiza ye-RRAS emisiwe noma iqoqo elingasahambisani nesubneti yeklayenti. Lungisa uhlangothi olukhonjwa yiphethini ngaphambi kokushintsha olunye.

Egatsheni leklayenti elilodwa, susa amachweba amancane e-WAN kanye bese uskena izinguquko ze-hardware, bese uqala kabusha futhi uzame futhi. Egatsheni leseva, hlola iqoqo nesimo sensiza esikhundleni seklayenti, ngoba ukufaka kabusha i-adaptha esebenzayo akukwazi ukudala ikheli iseva enginalo.

691: khetha phakathi kwesifakazelo nomsizi omisiwe

Ikhodi u-691 ukwenqatshwa kokuqinisekisa, futhi iyikhodi evame ukufundwa ngokungalungile njengephasiwedi engalungile. Umhubhe uphezulu, isango libone ubunikazi futhi lalinqaba. Isizathu sisengaba ngaphandle kwenkambu yephasiwedi.

Hlola inkambu yesizinda kuqala, bese izinhlamvu eziqondile kwiphasiwedi. Iphasiwedi equkethe isikhala, uphawu lokucaphuna noma uphawu olukhethekile lwe-shell ingase yonakale ngaphambi kokufinyelela iseva; ku-Linux, pppd ibika ukwenqatshwa okufanayo njenge-E=691 yanani elingenazo izicaphuno noma isizinda esingekho. Phinda uthayiphe imfihlo esikhundleni sokuyinamathisela, futhi usule noma yisiphi isifakazelo esigciniwe esingase sibe nenani elidala.

Igatsha abantu abaligeji insiza yomsizi emisiwe. Uma iklayenti lomhlinzeki lincike ensizeni yalo ukuze lidlulisele izifakazelo esangweni, insiza ekhutshaziwe noma eyonakele ikhiqiza u-691 ngisho noma iphasiwedi ilungile. Hlola isimo sensiza yomhlinzeki ngaphambi kokusetha kabusha i-akhawunti, ikakhulukazi ngemva kokuqala kabusha noma kokubuyekeza.

Ukuze uhlukanise amagatsha, zama igama lomsebenzisi elifanayo kuphefayela elinye le-VPN elisebenzayo noma i-akhawunti yokuhlola ye-RADIUS. Uma lokho kuphumelela, isifakazelo silungile futhi indlela yeklayenti yasendaweni iyasolisasola. Uma kwehluleka ngendlela efanayo, inkinga i-akhawunti noma inqubomgomo yesango.

Shintsha isendlalelo esisodwa esivivinyweni ngasinye

Sebenza usuka ngaphandle uya ngaphakathi: ukufinyeleleka nokuwebuka kwe-NAT, bese kuba ukhiye owabiwe ngaphambili, bese kuba isitaki se-adaptha sasendaweni, bese kuba isifakazelo, bese kuba iqembu lamaseva nezinsiza. Lokho kulandelana kulandela izigaba ezichazwa amakhodi futhi kugcina umphumela ngamunye ubalelwa ekushintsheni okukodwa.

Gcina ilogi emfushane yekhodi ngaphambi nangemva kokuvivinya ngakunye, yokwakhiwa kweklayenti, nokuthi iseva noma iklayenti lishintshiwe. Ukulandelana okufana no-789, bese u-720, bese u-691 kuyimephu yenqubekelaphambili; ikhodi efanayo kabili kusho ukuthi ukushintsha kokugcina akuzange kubhekane naleso sigaba. Ukufaka kabusha i-Windows kususa le mephu futhi akuvamisile ukulungisa ukwehluleka okuhlala esangweni.

Uma ikhodi iyeka ukushintsha, yeka ukushintsha izinto. Rekhoda ikhodi yamanje, ikheli leseva, indlela yokuqinisekisa kanye nesikhathi sokuvivinya, bese uqhathanisa lokho kurekhodiwe neklayenti elisebenzayo. Umehluko phakathi kokubili kurekhodiwe ngokuvamile mncane kunohlu lwezilungiso abantu abazama ngokungagqagqani.