I-MSCHAPv2 akusiwona isivumelwano se-VPN: buza ngomhubhe kuqala
Iphasiwedi kanye negama elithi MSCHAPv2 akwenzi uxhumano. Buza ukuthi imuphi umhubhe othwala lokho kushintshana, bese ulinganisa iphrofayela yeklayenti nawo.
Amagama abasebenzisi namaphasiwedi ahamba ngaphakathi kwesithwali, futhi i-MSCHAPv2 ibiza kuphela indlela ehambayo. Buza ukuthi imuphi umhubhe owuthwalayo ngaphambi kokukhetha iphrofayela yeklayenti, ngoba intambo efanayo ye-akhawunti ivela nakwezinye izinhlelo ezingabelani ngisho umugqa owodwa wekhodi. Iphrofayela ngayinye oyinikezwayo ibhala zombili izinqumo, ngisho noma iphepha lemiyalo liphrinta eyodwa yazo. Ukulandelana okungezansi yikho umsebenzi angakuphendula ngaphandle kokuqagela nokho wena ongakuhlola ngaphandle kokubamba amaphakethe.
Ukuqinisekiswa kuhamba ngaphakathi komhubhe
I-VPN ithatha izinqumo ezimbili ezibonakala njengesisodwa: ukuthi izinhlangothi zakha kanjani umzila ovikelwe, nokuthi umuntu ubonisa kanjani ubunikazi bakhe ngaphakathi kuwo. Eyesibili iphrintwa ephepheni lemiyalo ngoba yiyo umuntu ayithayiphayo. Eyokuqala inquma ukuthi ngabe iklayenti noma yiliphi lizosebenza nhlobo, futhi yiyo abantu abayeqayo. Cela umsebenzi ukuthi aqale abize isithwali bese ebiza indlela, ngokulandelana kwalokho. Ukuxhumana okubili kungadinga igama le-akhawunti elifanayo nephasiwedi efanayo ngaphandle kokwabelana nganoma yikuphi ukuqaliswa ngaphansi kwebhokisi lokungena.
Yingakho izilungiselelo ezikopishwe ocingweni olusebenzayo lozakwenu zingahluleka kwelakho, ngisho noma iseva yamukela zombili izifakazelo. Isifakazelo akuzange kube umehluko; iphrofayela eyayizungezile yiyo eyayiwumehluko. izinhlangothi zombili zilungile futhi akukho okuxhumayo imvamisa yilo kudideka uqobo, futhi kuyacaca ngokushesha lapho isithwali sibizwa.
Izindawo ezintathu lapho indlela efanayo ivela khona
Ku-PPP isinyathelo sokuqinisekisa silinda kuze kube khona isixhumanisi, futhi RFC 2759 ichaza i-MS-CHAPv2 njengaleso sinyathelo, yingakho le ndlela ivela ku- L2TP nakusetshenzisweni kwakudala kwe-PPTP. Umhubhe uphela kuqala futhi izingxoxo ze-PPP zenzeka ngaphakathi kuwo, ngakho isigaba se-PPP esihlulekile singashiya umhubhe ubonakala usumisiwe kumbhalo wesisekelo wesiva. Funda lezo zigaba ezimbili ngokwahlukana ngaphambi kokuphetha ngokuthi izifakazelo zenqatshiwe. Ngakho iklayenti elilungiselelwe i-L2TP lingase libe lilungile ngokuphelele futhi lihlale liyiklayenti elingalungile legethiweyithi ekhuluma kuphela i-IKEv2.
I-IKEv2 yona ibeka i-EAP-MSCHAPv2 ngaphakathi kokushintshana kokhiye, ngakho isifakazelo esifanayo sihluleka ngesinye isikhathi futhi sivele njengephutha lokuqinisekisa hhayi njengephutha lesikhathi sokusebenza. Iphrofayela ye-IKEv2 yeplathifomu ye-Android iyisibonelo samihla yonke, futhi icela isitifiketi noma isihlonzi sesiva esikhundleni sezinketho ze-PPP. Igama le-akhawunti liyafana kuzo zombili izinhlelo, ngakho alikwazi ukukutshela ukuthi uneliphi. Uhlu lwamaphrothokholi asekelwayo omsebenzi yilo kuphela olunqumayo.
I-VPN esekelwe ku-TLS yengeza uhlelo lwesithathu, nemikhakha yayo yegama lomsebenzisi nephasiwedi futhi ngaphandle kwe-MS-CHAPv2 noma kuphi ekushintsheni. Ngakho ukubona ibhokisi lephasiwedi akusona ubufakazi mayelana nephrothokholi engemuva kwalo, ngoba ifomu lakhiwe ukuthi libukeke lijwayelekile. Qinisekisa iphrothokholi emigqeni yesiva, hhayi esimweni sewindi leklayenti.
Izimpendulo ozidinga ngempela
Thumela isicelo njengohlu, ngoba uhlu kunzima ukuluphendula ngengxenye. Cela iphrothokholi yomhubhe, indlela engaphakathi kuwo, kanye neklayenti umsebenzi alisekelayo kuplathifomu yakho. Bese ucela ubunikazi nezilungiselelo zokuthemba zegethiweyithi, ifomethi ye-akhawunti, kanye nalokho okufanele kufinyeleleke lapho uxhumano selumi.
Ezintathu zokuqala zinquma ukuthi ngabe uthola iphrofayela esebenzayo nhlobo. Ezintathu zokugcina zinquma ukuthi leyophrofayela yenza lokho umsebenzi okudingayo. Gcina impendulo inamathiselwe kuthikithi, ngoba umuntu olandelayo uzobuza imibuzo efanayo eyisithupha. Lapho impendulo ingekho, thatha leso sikhala njengesinqumo umsebenzi angakasithathi, hhayi njengento ongayicabanga wena.
| What you ask for | If it is wrong, the symptom shows up as |
|---|---|
| Tunnel protocol | No profile can be built at all |
| Method inside the tunnel | Credentials typed, then rejected |
| Gateway identity | The client refuses the server certificate |
| Account format | Authentication fails only for some staff |
| Routes and DNS | The tunnel is up and nothing resolves |
Ungayekethisi ukuqinisekiswa kwegethiweyithi
Isiva nayo ikhombisa ubunikazi bayo kuklayenti, futhi lolo hlangothi lokushintshana akusona umhlobiso. Ukucisha ukuqinisekiswa kwesitifiketi ukuze iphrofayela enenkani ixhumeke kwamukela noma iyiphi indawo yokugcina ephendulayo, kuhlanganise naleyo okungekho ongazimisele ukuyifinyelela. Kubuye kufihle ukungafani kwangempela esikhundleni kokukuxazulula, okuhudulela ukwehluleka esikhathini sakamuva nesingacaci. Iphrofayela edinga ukuthi isiqinisekiso sicishwe iyona ekhomba entweni engakwazi ukuyiqinisekisa.
Ukungafani imvamisa kuba igama, ngoba isitifiketi esikhishwe egameni elilodwa lomsingathi siyahluleka lapho iphrofayela ishayela ikheli. Shayela igama esikhundleni sokucisha ukuqinisekiswa. Isiphathimandla samasitifiketi esizimele siyahluleka lapho idivayisi ingakaze inikezwe impande, futhi isixazululo ukusabalalisa leyo mpande ngomzila ogunyaziwe. Izindawo ezilawulwayo zilindele ukuthi umsebenzi anikeze ubunikazi kanye nehange lokuthemba, futhi iphrofayela ibhekisele kukho kokubili. Lapho inkambu ingekho, cela into yobuciko esikhundleni sokuhoxa okuqinisekisweni.
Linganisa iphrofayela, bese ufakazela isigaba ngasinye
Lapho isithwali sesaziwa, landela inqubo ebhalwe phansi yalelo klayenti futhi ufake kuphela izinkambu ezizicelayo. Izinkambu ezengeziwe ezigcwaliswa ngoba zikhona zisaba amanani angalungile, futhi ziyahluleka kamuva kunezidingekayo. Gcina iphrofayela ingashintshiwe ngemuva koxhumano lokuqala oluphumelele, ukuze ukuhlela kwakamuva kuqhathaniswe nento eyaziwayo ukuthi iyasebenza.
Bese uqinisekisa ngezigaba: umhubhe uyamiswa, umsebenzisi uyaqinisekiswa, ikheli nemizila enikeziwe ziyavela, futhi insizakalo eyodwa evunyelwe iyaphendula. Isigaba ngasinye sishiya umugqa waso wombhalo kusiva, futhi ukuwafunda ngokulandelana kuguqula isikhalo esingacaci sibe ukutholakala okuqondile. Uma iphathifomu ingasayisekeli inhlelo echazwa umsebenzi, leyo ingxoxo yokufuduka hhayi isizathu sokuvula zonke izinketho zakudala kudivayisi. Isithwali, indlela kanye nephrofayela yizimpendulo ezintathu ezihlukene, futhi ekuxhumaneni okusebenzayo zontathu ziyavumelana.