Inqubomgomo yeqembu ye-NPS ayikona ukuphoqelela kwezinsiza ze-VPN

Amaqembu amabili, amaphrofayili amabili okufinyelela, igethiweyi eyodwa ye-VPN, futhi womabili amaqembu agcina efinyelela amaseva afanayo. Isizathu esivamile akusona inqubomgomo ephukile kodwa ingxenye yesibili yedizayini engekho: i-NPS inquma ukuthi ubani angasungula iseshini, kanti okunye kufanele kunqume ukuthi leyo seshini ingafinyelela kuphi. Uma ingxenye yokuqala kuphela ikhona, imvume iphumelela kubo bonke abaqinisekisa ubunikazi. Inqubomgomo yenza umsebenzi wayo futhi idizayini ayikapheleli.

Inqubomgomo yenethiwekhi ehambisana neqembu iwubufakazi mayelana nokwamukelwa. Akusona ubufakazi mayelana namaphakethe, futhi iningi lalo msebenzi lenzeka egeheni phakathi kwalezi zitatimende ezimbili.

Thola inqubomgomo eyamukele iseshini ngempela

I-NPS ihlola izinqubomgomo zenethiwekhi ezihleliwe, futhi umthetho wokuqala osebenzayo onemibandela ehambisanayo uyahlula. Imibandela ingafaka ubulungu beqembu lomsebenzisi noma lekhompyutha, uhlobo lokuxhumana, isikhathi kanye nesimo sedivayisi. Ngakho inqubomgomo ebanzi ebekwe phambili ohlwini yamukela uxhumano ngaphambi kokuba umthetho omncane ongezansi ucutshungulwe. Ukuhleleka akusona imininingwane ye-interface; kuwuyo inqubomgomo ngokwayo.

Funda uhlu ngokuhleleka futhi ukhombe lowo ohambisanayo, bese ubhala ukuthi yiziphi izilungiselelo ezibuyisiwe. Igama leqembu kuhlelo lokuhlela alisona umphumela; umphumela imvume etholwe yiseva. Gcina imvume yomsebenzisi kanye nemvume yedivayisi zehlukene lapho ukusetshenziswa kusebenzisa kokubili, ngoba i-akhawunti engavula ithaneli akuyona ngokuzenzakalelayo i-akhawunti okufanele ifinyelele zonke izinsiza zangaphakathi.

Impendulo ye-RADIUS iyisiyalelo, akusona isihlungi

Isibaluli Filter-Id sithwala igama lohlu lwezihlungi. Asithumeli iqoqo lemikhawulo yokuhlunga amaphakethe eliqondakalayo kuyo yonke into eyamukelayo, futhi ukuthumela igama igethiweyi engakaze ilichaze akukuphoqeleli lutho nhlobo. Isixwayiso esifanayo sisebenza kuzibaluli ze-VLAN: ukwabela iseshini yethaneli ku-VLAN ngokwako akusona umthetho wokufinyelela ohleliwe walowo msebenzisi.

Yilapha lapho idizayini ebonakala iphelele ohlangothini lwe-NPS ingenzikho lutho buthule. Kunokucabanga ukuthi igama lesibaluli elijwayelekile lisho ukuziphatha okujwayelekile, qinisekisa emibhalweni yomhlinzeki wegethiweyi ukuthi yiziphi izibaluli zemvume ezisekelwayo nokuthi umamukeli wenzani ngesinye ngasinye.

Beka ukuphoqelela lapho kudlula khona ithrafikhi

Igedhiweyi ecubungula amaphakethe omsebenzisi ingafaka isihlungi seseshini ngayinye, ixhumanise iqembu nenqubomgomo yegethiweyi, noma inikeze iseshini ikheli elivela echibini elihlukile i-firewall eliphatha ngendlela ehlukile. Noma yikuphi kwalokho kungasebenza, futhi kwehluleka ngezindlela ezihlukile. Thola ukuthi iyiphi indlela igethiweyi yakho eyisekelayo ngaphambi kokubhala inqubomgomo eyibizayo. Bese ubhala ukuthi kwenzekani eseshini uma leyo ndlela ingekho, ngoba ukuthula yikho okuzenzakalelayo.

Chaza imvume ehlosiwe ngezingxenye ezine: ubunikazi bomthombo noma iqembu, indawo okusiya kuyo, iphrothokholi kanye nombobo. Faka izinto ezincikile umsebenzisi azidinga ngempela, njenge-DNS noma insiza yokuqinisekisa ubunikazi, kungenjalo umkhawulo uzophula izinqubo zokungena umuntu oyedwa angazange acabange ukuzihlola. Bhala umthetho kubhekiswe ku-interface ehlunga ngempela, hhayi ku-interface evele ivuliwe kuhlelo lokuhlela.

Cabanga nokuhunyushwa kwamakheli. Uma i-firewall engaphansi ibona ikheli lomthombo elilodwa elihunyushiwe kumsebenzisi ngamunye wethaneli, ayikwazi ukuhlukanisa abantu ngalelo kheli lodwa, futhi umthetho obhalwe sengathi kungenzeka uzoba ongenamsebenzi noma ubanzi ngokweqile.

Amaphrofayili eklayenti asohlangothini olungathenjwa

Iphrofayili ye-VPN elawulwayo ingathumela imizila, imithetho yethaneli ehlukanisiwe noma izihlungi zohlelo lokusebenza, futhi lezo zilolonga indlela idivayisi eziphethe kahle eziziphatha ngayo. Azizona izivikelo zensiza, ngoba iklayenti iyona nhlangothi ohlose ukulibopha. Ukususa umzila kupurofayili nakho akusona imvume, ngoba iklayenti ingaba nenye indlela eya kuyo leyo ndawo.

Thatha izilungiselelo zeklayenti njengokulungele ukuphatha, kanti izilungiselelo zegethiweyi njengokulawula. Uma zombili zingavumelani, igethiweyi iqinisile ngoba iyona ebona amaphakethe.

Amukela ngama-akhawunti amabili, bese ulandelela ngokuhleleka

Dala ama-akhawunti amabili ajwayelekile okuhlola anezimvume ezihlosiwe ezihlukene, sungula amaseshini amasha, bese uhlola inqubomgomo yegethiweyi esebenzayo kwelinye nelinye. Bese uhlola isenzo esisodwa esingenabungozi esivunyelwe kanye nensiza eyodwa enqatshiwe ngqo. I-ping ehlulekile ngokwayo ifakaza okuncane kakhulu, ngoba i-ICMP ingase ihlungwe kuyilapho insiza ye-TCP engemuva kwayo iphendula kahle.

Uma womabili ama-akhawunti esathola ukufinyelela okubanzi, landelela ngokuhleleka okungaguquki: iyiphi inqubomgomo eyahambisana, yikuphi imvume impendulo eyayinayo, nokuthi igethiweyi yenzani ngayo. Ukwengeza ezinye izibaluli ze-NPS ngaphambi kokuqinisekisa ukuthi umamukeli uyazisebenza yikho okwenza inkinga encane yemvume iphenduke isikhathi soshintsho esingenamphumela.