OpenConnect vpnc-script: iyiphi ifayela elisebenza?

I-OpenConnect ingaqeda ukuxhawula kwethumbu futhi ikushiye ngaphandle komzila oya kunethiwekhi engaphansi eyimfihlo, ngoba iklayenti nomsizi oshintsha isimo senethiwekhi yasendaweni yizinhlelo ezimbili ezihlukene. Ukuqinisekisa kubonisa ukuthi isango lamukele isikhathi; akubonisi lutho mayelana nokuthi yiluphi uxhoxho, yimiphi imizila noma yiziphi izilungiselelo zesixazululi ezafakwa ngemva kwalokho. Imibiko eminingi edidayo ivela ekushintsheni umsizi ngekhophi evela empendulweni endala, okushintsha ukuziphatha kwakho konke ukuxhumana emshinini. Thola umsizi okhiqizwa yiklayenti elisebenzayo ngempela ngaphambi kokushintsha noma iyiphi ingxenye yawo.

Izinhlelo ezimbili, imithwalo yemfanelo emibili

Iklayenti liphethe ukuthutha, ukuqinisekisa kanye nedivayisi yethumbu. Umsizi ohlukile uphethe okwenzeka ohlelweni lwasendaweni lapho ithumbu selikhona: ukunikeza amakheli kuxhoxho, imizila eya kunethiwekhi engaphansi eyamenyezelwa isango, kanye nokucushwa kwesixazululi. imibhalo yomsizi we-OpenConnect ichaza lokho kwehlukanisa kanye nemvelo umsizi ayitholayo. Umehluko ubalulekile ngesikhathi sokwehluleka, ngoba iphasiwedi enqatshiwe kanye nomzila ongekho akusona isigameko esisodwa, ngisho noma ideskithophu ibonisa ingxoxo eyodwa yakho kokubili.

Ukugcina lokhu kwehlukanisa engqondweni kuchaza futhi ukuthi kungani ukuxhumana kungabika impumelelo kuyilapho amagama ayimfihlo engakaxazululeki. Ithumbu likhona kuzo zombili izimo, futhi kuhluke kuphela isigaba sokuhlanganisa sasendaweni.

Thola umsizi osetshenziswa yiklayenti elisebenzayo

Indlela inqunywa lapho kwakhiwa iphakethe futhi ingashintshwa kukho konke ukubiza, ngakho ifayela olikhumbulayo elivela kwenye isatshalaliso lingase lingabi nokuxhumana nakho nalokhu kuxhumana. Buza inqubo esebenzayo, hhayi imibhalo evulekile ngengozi.

openconnect --version
ps -o args= -C openconnect
dpkg -L openconnect | grep -i script
ls -l /etc/vpnc/ 2>/dev/null

Uma umugqa wenqubo uphethe --script impikiswano, lelo fayela liyawina inani elizenzakalelayo elihlanganisiwe. Izindlela ezindala ezifana /etc/vpnc/vpnc-script zingaba khona futhi zihlale zingasetshenziswa, yingakho ukuzisusa noma ukuzihlela kungashintshi lutho ekwakhiweni okusha. Bheka futhi usuku lokushintsha, ngoba umsizi okungekho muntu okuthinte iminyaka eminingi uphawu oluqinile lokuthi inani elizenzakalelayo elisephaketheni liwenza umsebenzi.

Ukuhlanganiswa kwe-NetworkManager kungumnikazi wesithathu, ngomsizi walo kanye nezilungiselelo zephrofayela yalo. Ukubeka umbhalo wesibili womzila noma wesixazululi phezu kwalokho kuhlanganiswa kuphinda kabili imizila futhi kushiye isixazululi izinhlelo ezimbili ezithi ziyasilawula. Khetha umnikazi oyedwa kukho konke ukuxhumana futhi ucime omunye ngaphambi kokuhlola.

Funda umsebenzi wokuqala ohlulekile, hhayi isexwayiso sokugcina

Ukucushwa koxhoxho, ukufakwa kwemizila, ukukhethwa kwesixazululi kanye nokuhlanjululwa kwesimo esidala kuyizinyathelo ezihlukene, futhi isexwayiso esiphrintwa ekugcineni ngokuvamile siyisikhalazo sokuhlanjululwa hhayi ukwehluleka okwephule ukuxhumana. Funda uye phezulu kuze kufike umsebenzi wokuqala othile ohlulekile. Iphutha lomsizi elisho ifayela noma ikheli libaluleke ngaphezu kwemigqa eyishumi yomsindo wokuqaqa.

Qhathanisa umphumela wasendaweni obekiwe nowobonakele: idivayisi yethumbu ikhona, umzila oya ekhelini eliyimfihlo elaziwayo uyadlula kuyo, futhi isixazululi siphendula igama eliyimfihlo. Umsizi ophumelelayo kwezimbili zokuqala futhi ohluleka kwesithathu ukhomba inqubomgomo yesixazululi hhayi ukuhamba kwemizila. Umsizi ongakucushi ngisho nedivayisi cishe awukaze wenziwe, futhi lowo umbuzo wezimvume hhayi wenethiwekhi. Qinisekisa ibhithi yokwenza kanye ne-akhawunti yesevisi ngaphambi kokubhala kabusha noma ikuphi ukucabanga.

Qinisekisa ukuxhuma, ukuxhuma kabusha nokunqamuka

Ukusethwa kuyingxenye yesivumelwano, ngoba umsizi ofanayo kufanele abuyisele noma asuse isimo asiphethe lapho ithumbu livalwa. Umsizi owengeza imizila futhi ongayisusi neze ushiya umshini unomzila omdala ohlala isikhathi eside kuneyeseshini.

ip -brief address show tun0
ip route get 10.24.8.15
resolvectl status tun0
journalctl -u NetworkManager -b --no-pager | grep -i -E 'vpnc|script'

Gcwalisa imigqa emithathu yokuqala ngenkathi uxhunyiwe, nqamula, bese uyayigcwalisa futhi futhi uqinisekise ukuthi umzila kanye nokufakwa kwesixazululi akusekho. Umugqa wesine ukhombisa ukuthi umsizi wabizwa yini nhlobo nokuthi isevisi yasebenzisa yiphi indlela yokwenza. Gcina lelo pheya lokuphuma kuthikithi, ngoba ukuqhathaniswa kwangaphambi nangemva kukho okwenza iphutha lokuhlanjululwa libonakale.

Gcina umsizi esephaketheni futhi engenziwa yi-akhawunti yesevisi, ngoba umbhalo osebenza ku-shell yakho usengase unqatshwe ngaphansi kwenqubomgomo yesevisi ebekiwe. Lapho ukwezwa kudingeka ngempela, bhala inhloso yako kanye nomnikazi wayo bese uyiqhathanisa nenguqulo esephaketheni ekuthuthukisweni ngakunye. Igatsha lomsizi elingachazwanga ngenye yezinto ezimbalwa ezingenza ukuxhumana okusebenzayo kwehluleke ngemva konyaka.