Isicoco Esabiwe noma Ukungena Komsebenzisi: Iyiphi Inkambu ye-L2TP/IPsec Ehlulekile?
Ukhiye owabiwe ngaphambili ufakazela uzakwethu, kanti igama lomsebenzisi ne-password ye-PPP kufakazela umuntu. Ikhodi yephutha isho ukuthi yiluphi ugqoko olubili oluphukile.
Ihhovisi elilodwa linganikeza yonke i-laptop imfihlo efanayo ye-IPsec kuyilapho umuntu ngamunye engene nge-akhawunti yakhe, yingakho «ukhiye ulungile» kanye «ne-password ilungile» kungaba yiqiniso kokubili kodwa ukungena kuhluleke. L2TP ne-IPsec kuqinisekisa izinhlangothi ezahlukene ezigabeni ezahlukene. Ukuqhathanisa izendlalelo ezimbili, kanye nekhodi yephutha ehlukanisa phakathi kwazo, kuvala iningi lamathikithi la ngokushesha kunokushintsha futhi zombie ezimbili zamanani. Izigaba azikwazi ukushintshana, futhi umlayezo ophambi kwakho usuvele usho ukuthi yikuphi okusebenzayo.
Izingqimba ezimbili, ubunikazi obubili obuhlukene
Kuqala kusebenza ukuqinisekiswa kozakwethu kwe-IPsec. Iklayenti kanye nesango kufakazela zodwa ukuthi bangobani, ngokhiye owabiwe ngaphambili noma ngesitifiketi, ngaphambi kokuthi noma yimuphi umthwalo weshubhu uvikeleke. Ukushintshana kwe-PPP ngaphakathi kweseshini ye-L2TP kuza ngemva kwalokho, futhi yilapho igama lakho lomsebenzisi ne-password kuqinisekiswa khona kusilondolozo lwama-akhawunti esiphakeli.
Izigaba zizimele, ngakho i-akhawunti yomsebenzisi esemthethweni ayikwazi ukusindisa ukhiye we-IPsec ongakalungi, futhi ukhiye olungile awukwazi ukusindisa i-password ephelelwe yisikhathi. Bhala kokubili ngokwehlukana ethikithini futhi ukuxilongwa ngokuvamile kuphuma emugqeni wokuqala wommongo osho isigaba.
| Observed failure | Stage that rejected it | Field to touch |
|---|---|---|
| Security layer error 789 during initial negotiation | IKE and IPsec peer authentication | The pre-shared key or the certificate |
| Error 691, credentials not recognised | PPP user authentication | User name, password, or account policy |
| Tunnel forms, then drops on the first packet | Neither, usually routing or MTU | Address pool and interface configuration |
| Prompt repeats with no error text | Often the client type selection | The connection profile, not the secret |
Imfihlo eyabiwe ifakazela uzakwethu
Ukhiye owabiwe ngaphambili uyisitifiketi seqembu esiphethwe isango nayo yonke iklayenti exhumanayo nalo. Kusungula ukuthi uzakwethu uyawazi ukhiye, futhi kusuka kuwo i-IKE ithola okhiye abavikela ukuxhumana. Akukho lutho kulokho kushintshana okukhomba umuntu oseceleni kwekhibhodi. Yisona sizathu esigcwele sokuba khona kokungena kwesibili, ezingeni lomsebenzisi, kulo mhubhe.
Labo baklami banomphumela osebenzayo ekuhoxisweni. Ukulahlekelwa i-laptop eyodwa kusho ukuzungezisa imfihlo kuyo yonke idivayisi eyisebenzisayo, ngaphandle uma ukusetshenziswa kudlulela kumasitifiketi, lapho idivayisi eyodwa ingasuswa ngaphandle kokuthinta ezinye. Ukushintshana kungumzamo wokuphatha ngokumelene nobubanzi bomonakalo.
Ukhiye obhalwe kuphrofayela futhi uyisitifiketi esilula kakhulu ukuthi singavuzwa ngezithombe zesikrini nangengxoxo. Kuwuphathe njengezinto zengqalasizinda ezabiwe hhayi njenge-password yomuntu siqu, ngoba yikho kanye lokho.
Ukungena kungokwe-PPP
Ngaphakathi kweseshini ye-L2TP, i-PPP ixoxisana ngokuqinisekiswa futhi icela isiphakeli ukuthi siqinisekise amanani amabili owabhalayo. Ku-Windows yiwo kanye igama lomsebenzisi ne-password elicelwa iphrofayela, kanti kumzila wezinkundla yilokho okubhekiselwa kukho iphrofayela ye-PPP. Kuqinisekiswa kusilondolozo lwama-akhawunti, hhayi kukhiye. Abantu ababili bangabelana nge-laptop nangokhiye futhi basahlukaniswa kulesi sigaba.
Njengoba kuwukuqinisekiswa komsebenzisi, zonke izinqubomgomo ezijwayelekile ze-akhawunti ziyasebenza: i-password ephelelwe yisikhathi, i-akhawunti evaliwe, imvume yokushaya ucingo, noma igama okufanele libe nesizinda. Iphutha 691 libika leyo nhlanganisela njengenqatshiwe, ngakho funda irekhodi lokubalwa kwesiphakeli ngaphambi kokubhala kabusha noma yini.
Vumela iphutha likhethe inkambu
Iphutha 789 lisho ugqoko lokuphepha futhi likhomba esigabeni se-IPsec. Qinisekisa ukuthi ukhiye owabiwe ngaphambili kuzinhlangothi zombili ufanisana ngqo, ukuthi ubunikazi bozakwethu obulindelwe isango buhambisana nalokho okuthunyelwa yiklayenti, nokuthi iklayenti lilungiselelwe i-L2TP/IPsec hhayi olunye uhlobo.
Iphutha 691 lisho izitifiketi futhi likhomba ku-PPP. Hlola isimo se-akhawunti kanye nefomethi yegama eqondile ngaphambi kokushintsha imfihlo, ngoba ukushintsha kokubili ngesikhathi esisodwa kubhubhisa ubufakazi obukade ubufunda.
Uma umhubhe ukhuphuka kodwa ithrafikhi isama, yeka ngokuphelele ukuhlela izinkambu zokuqinisekiswa. Bheka ichibi lamakheli, umzila obuyela esizindeni esincane seklayenti, ne-MTU: ukuqhathanisa izingqimba ezimbili kusiza kuphela uma ukwehluleka kusengaphakathi kwazo.