I-L2TP/IPsec iyahluleka lapho isevisi ye-IKEEXT ivaliwe

I-laptop eyodwa ifinyelela isango le-IKEv2 kodwa iyahluleka kwisango le-L2TP/IPsec, futhi iphutha liza ngaphambi kokuba noma yiliphi igama lomsebenzisi lithunyelwe. Iphrofayela ivamise ukuba umsolwa wokuqala futhi ivamise ukuba yiyo engalungile. I-Windows isebenzisa ukushintshaniswa kokhiye kwe-IPsec kwisevisi, futhi uma leyo sevisi ivaliwe, iklayenti eyakhelwe ngaphakathi ayinaso isitaki engaxoxa ngaso. Hlola isevisi ngaphambi kokuthinta ngisho insimu eyodwa yephrofayela, bese uthola ukuthi yini eyivalile.

Isevisi engemuva kokuhluleka

I-IKE and AuthIP IPsec Keying Modules, ebonakala ngokuthi IKEEXT ohlwini lwezinsizakalo, yenza ukushintshaniswa kokhiye futhi ibamba amasokhethi e-UDP 500 no-4500 ku-Windows. Yivalo, futhi kokubili i-L2TP/IPsec ne-IKEv2 kuzolahlekelwa umxoxi wazo, kuyilapho i-PPTP ne-SSTP zingaqhubeka nokusebenza ngoba azithembele kuyo. Lokho kwehlukaniswa yikho okwenza umsebenzisi akwazi ukubika ukuthi uhlobo olulodwa lwe-VPN luyasebenza kanti olunye lufile emshinini ofanayo. Isevisi iyingxenye yesistimu yokusebenza, ngakho akukho silungiselelo sephrofayela esingayithatha indawo yayo.

Ukukhulula lezo zimbobo ezimbili kuwumphumela oseceleni okhiqiza izeluleko ezimbi. Ithuluzi noma okuthunyelwe kunkundla kuyabona ukuthi u-500 no-4500 basetshenziswa, kumisa isevisi ukuze kubakhululwe, futhi ngaleyo ndlela kususa i-IPsec kusibungazwa buthule. Imiphumela emibili iyisenzo esisodwa, ngakho noma yimuphi umhlahlandlela oncoma ukuhlanza izimbobo uchaza ukushintshana hhayi ukulungisa.

Buyisela isevisi ngaphandle kokuqagela

Buza umphathi wesevisi imibuzo emibili: uhlobo lokuqalisa luyini, futhi isimo samanje siyini. Owokuqala ukutshela ukuthi isevisi izobuya yini ngemva kokuqalisa kabusha; owesibili ukutshela ukuthi iyasebenza yini manje. Sebenzisa kokubili ukubuza kusuka kumthetho wokukhulisa ukuze lelo sheli likwazi ukushintsha isilungiselelo kamuva.

sc qc ikeext
sc query ikeext

Uhlobo lokuqalisa lwe-Disabled luchaza wonke umkhondo, futhi isixazululo ukubuyisela ku-Automatic nokuqalisa isevisi. Kukhonkolo ye-Services, okufakiwe kuvela ngaphansi kwegama layo lokubonisa, IKE and AuthIP IPsec Keying Modules, ngakho ukufuna i-IKEEXT kulolo hlu akutholi lutho. Qalisa kabusha uma isevisi yaqalwa ngemva kokuba ukuxhumana okuhlulekile sekuvele kwenzeka, ngoba isitaki esiqalwe ngalowo myalo singahluleka ngezindlela ezibonakala zingenabo ubudlelwano.

sc config ikeext start= auto
net start ikeext

Yini eyivala futhi

Amanye amasethi e-VPN ezinhlangano zangaphandle aletha ukusetshenziswa kwawo kwe-IPsec futhi avala i-IKEEXT ngesikhathi sokufakwa, ngemva kwalokho iklayenti le-Windows iyeka ukusebenza. Ukususa omunye umkhiqizo kubuyisele i-L2TP/IPsec emishinini lapho ukuhlelwa kwephrofayela kungazange kufinyelele lutho, futhi kanjalo nokufakwa kabusha ngaphandle kwengxenye engqubuzanayo. Isevisi yavalwa ngesikhathi sokufakwa, hhayi umsebenzisi oyishintshile.

Inqubomgomo yeqembu nayo ingabophela uhlobo lokuqalisa; uma kunjalo ushintsho lwendawo lubuyiselwa emuva ekugqameni okulandelayo futhi umlawuli ongumnikazi wenqubomgomo kumele akushintshe. Rekhoda uhlobo lokuqalisa ngaphambi kokuqalisa kabusha, ngemva kwakho nangemva kokuthuthukiswa komunye umkhiqizo, njalo ngosuku. Inani elihlala libuyela ku-Disabled liveza umnikazi walo ngephethini, hhayi ngokuqagela.

Funda isigaba kuqala, bese umbhalo

Uma isevisi isebenza, isigaba sokuhluleka sinquma ukuthi uzoqhubeka ubheke kuphi. Ukuma ngesikhathi se-IKE ngokuvamile kusho ukuthi i-UDP 500 noma 4500 ayizange ifinyelele iseva, noma iseva ingemva kwe-NAT ngaphandle kwesilungiselelo sokufaka esihambisanayo. Ukufinyelela isicelo semininingwane yokungena nokuhluleka lapho kuyinkinga yokuqinisekisa ye-PPP, hhayi ye-IPsec. Ithuwela eliphuma lingafinyeleli ndawo yiphutha lokuhlela noma ithuwela elihlukanisiwe, futhi ngelokuqala kuphela kulezi zintathu elisephrofayeleni ye-VPN.

Amaphrofayela anesitifiketi anezela isigaba sawo. Iklayenti kumele ithembe isiphathimandla esikhiphayo futhi isitifiketi kumele sisho iseva eqinisekiswayo; uma kwephulwa noma yisiphi salezi zimo ezimbili, ibhokisi lengxoxo lisabika iphutha lokuxoxisana kokuqala, ngakho umbhalo wezehlakalo yiwo indawo lapho isizathu sangempela sibonakala khona. Funda okufakiwe embhalweni ngaphambi kokuhlela iphrofayela, ngoba ibhokisi lengxoxo licindezela amaphutha amaningi ahlukene emshweni owodwa. Isitifiketi esiphelelwe yisikhathi sikhiqiza ibhokisi lengxoxo elifanayo nesevisi evaliwe, yingakho okufakiwe embhalweni kubalulekile.

Rekhoda isigaba esihlulekile, umbhalo wephutha nesigxivizo sesikhathi somzamo ngamunye. Lezo zinkambu ezintathu zihlukanisa inkinga yokufinyeleleka kusuka enkingeni yokuqinisekisa nakwinkinga yokuhlela, futhi zenza ushintsho olulandelayo lube isinqumo hhayi ukuqagela.

Okungeke kulungiswa kwendawo kukuqinisekise

Ukubuyisela isevisi kulungisa ingxenye yendlela esekulaptop. Isevisi esebenzayo ifakazela ingxenye yendawo kuphela: umkhawulo okude kusamele wamukele isiphakamiso esikhethiwe, imininingwane yokungena enikeziwe nekheli lomthombo okufika kulo iphakethe. Akukho okwenziwa kulaptop okungasinxephezela isibonakude esilahla i-UDP 500 ngaphambi kokuba sifinyelele kumlingani. Isimo sesevisi esiphumelelayo siyisimo esisemqoka, hhayi ubufakazi bokuthi ithuwela lizophuma.

Ukuvala i-IKEEXT ukuze kukhululwe izimbobo kuvikelwe kuphela uma wamukela ukuthi ama-VPN e-IPsec e-Windows ayoyeka ukusebenza. Kuxazulula ukungqubuzana kwezimbobo ngokususa isici esasidinga imbobo, futhi lokho akuvamisile ukuba ukushintshana umsebenzisi ayekuhlosile. Ngaphambi kokushintsha noma yini, qinisekisa ukuthi isevisi ikhona, isethelwe ku-Automatic futhi iyasebenza, akukho sitaki sesibili se-IPsec esifakiwe, futhi ukhiye owabiwe ngaphambili noma uchungechunge lwesitifiketi luyahambisana nesango.

• I-IKEEXT ikhona, isethelwe ku-Automatic futhi iyasebenza ngaphambi kokuba iklayenti ixhumane.
• Akukho okunye okubamba i-UDP 500 noma 4500.
• Akukho sitaki sesibili se-IPsec esisele esivela kuklayenti endala.
• Ukhiye noma uchungechunge lwesitifiketi luyahambisana nokumiswa kwesango.
• Isigaba esihlulekile sarekhodwa ngaphambi kokuhlelwa kwephrofayela.