Ukusuka ku-VPN esekelwe ku-PPP ngaphandle kokukopisha imibono yayo

Ukufuduka kwe-VPN kuphela lapho abasebenzisi, izindawo, ukuxazululwa kwamagama kanye nokuziphatha lapho kwehluleka kuselungile, hhayi lapho iklayenti elisha likhombisa uphawu oluluhlaza. Ukusetshenziswa kwakudala okusekelwe ku-PPP kuthwala imibono engakaze ibhalwe: imfihlo eyabiwe eyayiyisihlolo sokuhlola ubunikazi kuphela, ichibi lamakheli eliqinile i-firewall elinegina ohlwini oluvunyelwe, kanye nesijobelelo se-DNS esithunyelwa iseva. Ukushintsha iphrothokholi ngaphandle kokubala leyo mibono kuveza umhubhe oqeda i-handshake kanye nomngcele ongekho. Ukulandelana okungezansi yikho engikushintshayo, futhi isinyathelo sokugcina yiso esigwenywa amaqembu.

Isinyathelo 1: bala okuhlinzekwa ukuxhumana kwakudala

Uhlu luyabhalwa, alukhunjulwa. Bhala amaklayenti asekelwayo, izindima zokuqinisekisa, amachibi amakheli, amanethiwekhi avikelwe, izidingo ze-DNS kanye nezimvume zensizakalo ezidingwa yiqembu ngalinye labasebenzisi.

Ku-L2TP/IPsec, hlukanisa izingqimba ezimbili ngokusobala. Ubunikazi bozakwethu be-IPsec buqinisekisa imishini; i-PPP iqinisekisa umsebenzisi, ngokuvamile nge-CHAP noma i-MSCHAPv2.

Kulokho kuhlukanisa lapho ukusetshenziswa kwakudala kufihla khona imibono yako. Ukhiye owabiwe ngaphambili owabiwa yiklayenti ngalinye uqinisekisa iqembu hhayi idivayisi, futhi ngokuvamile yikho kuphela okwake kwashintshwa. Uma i-akhawunti ye-PPP iwukulawula kwangempela kumsebenzisi ngamunye, shono lokho, ngoba indawo yokushintsha kufanele iphinde ikhiqize lokho kulawula ngento engeyona intambo eyabiwe. Bhala futhi amakheli omsuka aqinile kanye nezihlukile zenethiwekhi yasendaweni, ngoba yilokho okuncike kumuntu ongakubhali kuze kube yilapho kugqashuka.

Isinyathelo 2: klama indawo yokushintsha ngamabomu

Ukukhetha indawo yokushintsha wukufanisa isidingo ngesidingo: iphrothokholi neklayenti elinakekelwayo elisekelwa inhlangano, kanti isidingo ngasinye sobunikazi nokufinyelela sihla kumshini wangempela. Imfihlo eyabiwe ayilingani ngokuzenzakalela nokhiye noma isitifiketi sedivayisi ngayinye, futhi i-akhawunti ye-PPP yomsebenzisi ngamunye ayilingani nesitifiketi sedivayisi.

Hlanganisa izikhawu zamakheli ngaphambi kwanoma yini enye, ngoba ichibi lokushintsha elihlangana ne-LAN yasekhaya noma yasehhovisi lidala ukwehluleka okungenasihlobo namandla ombhalo. Hlola ichibi ngohlu olufanayo olwakhela insizakalo endala, kanye nalokho iklayenti elisha elikucabangayo ngokuzenzakalela. Qinisekisa umzila wokubuya wamanethiwekhi avikelwe futhi uqinisekise ukuthi iklayenti elisha lingathumela noma libhale isijobelelo se-DNS esathunyelwa elidala. Lezi zinto ezimbili zidala amathikithi amaningi okufuduka kunokushintshwa kwephrothokholi uqobo.

Isinyathelo 3: sebenzisa ngezigaba futhi uqinisekise kokubili ukuvuma nokwenqaba

Sebenzisa ngomsebenzisi oyedwa omelela kanye nohlelo lokusebenza olulodwa olumelela. Faka ukuxazululwa kwe-DNS yangasese esivivinyweni, ngoba umhubhe ofinyelela ikheli kodwa ongakwazi ukuxazulula igama langaphakathi usufuduke nengxenye kuphela. Faka nesimo sokungatholakali esilindelekile: kufanele kwenzeke ini lapho umhubhe uwa, nokuthi iklayenti liyakuphoqelela yini lokho.

Bese uhlola indawo okufanele ihlale yenqatshwe. Umthetho obanzi wokuvuma kwesikhashana ungakwenza umhubhe omusha ubonakale uphilile kuyilapho ususa buthule umngcele wokugunyaza owawusetshenziswa insizakalo endala, futhi akekho oqaphelayo kuze kube wucwaningo. Qhathanisa imiphumela yokuvuma nokwenqaba eceleni, kusukela kuklayenti elifanayo, esikhathini esifanayo. Gcina insizakalo endala isebenza kuze kube yilapho amakholomu womabili evumelana nokuklanywa.

Ngaphambi kokuhambisa ukufinyelela komphathi, qinisekisa ukuthi unendlela egunyaziwe yokubuyisela engathembeli emhubheni oyishintshayo.

Isinyathelo 4: hoxisa ubunikazi obudala

Ukuhoxisa ubunikazi obudala ngendlela efanele kusho ukuhoxisa abasebenzisi namakhredenshali edivayisi asephelelwe yisikhathi ngensizakalo ewumnikazi wabo, bese ususa amaphrofayili nezilaleli ezindala lapho kungasekho okuncikile. Ukususa ifayela lasendaweni akukuhoxisi ikhophi kwenye indawo, futhi isilaleli esidala esisamukela imfihlo endala eyabiwe siwumnyango ongagadiwe.

Kuyafaneleka ukwehlisa ijubane kulelo phuzu. Iphrofayili yeklayenti ehoxisiwe kukhompyutha ephathwayo ayisona isiqinisekiso esihoxisiwe; isiqinisekiso sihlala kuseva futhi sihlala sisebenza kuze kube yilapho iseva iyeka ukusamukela. Sesha ezinye amakhophi wokuhlelwa kwakudala — amadivayisi okuhlola, ifoni ekhohliwe, isifaki esigcinwe umuntu — futhi thatha ukuvalwa kwesilaleli njengomzuzu lapho insizakalo endala iphela ngempela khona. Kuze kube yilapho, ukufuduka kuneminyango emibili yangaphambili.

Irekhodi lokwamukela wuhlu olusuka esinyathelweni sokuqala olunezinye ikholomu elengeziwe: okwenziwa ukuklanywa okusha kumugqa ngamunye, nokuthi wakuqinisekisa kanjani. Lokho kuphendula ukuthuthukiswa kwephrothokholi kube isidingo sensizakalo esinobufakazi.

Gcina umphumela uboshelwe kulokho okudingwa yinsizakalo hhayi egameni lephrothokholi, ngoba iphrothokholi yesimanje enemibono emidala ekopishwe kuyo iyingozi efanayo ngesakhiwo esingcono. RFC 3193 ichaza ukuthi i-L2TP ithwalwa kanjani phezu kwe-IPsec, okuyisikhumbuzo esiwusizo sokuthi lezo zingqimba ezimbili zazihlale ziyizinqumo ezihlukene. Uma uhlu lunomugqa ongakwazi ukuwuchaza, yima futhi uthole ukuthi yini encike kuwo. Ukufuduka kuphela lapho uhlu luyisicefe.