Kungani ukungena ku-openfortivpn kwehluleka lapho unamathisela i-URL yepothali

Ukwehluleka kubonakala njengenkinga yezifakazelo: i-openfortivpn icela iphasiwedi, iyithumele, futhi i-gateway iphendula ngokwenqaba noma ngokuqondisa kabusha emuva ekhasini lokungena. Bese abasebenzisi baphinda bathayipha iphasiwedi, bazame igama le-akhawunti eline-domain, futhi ekugcineni banamathisela i-URL yepothali yesiphequluli emkhakheni we-host. Yilesi sinyathelo sokugcina esiguqula iphutha elincane lokumisa libe yinto edidayo.

Ikheli lepothali le-Fortinet elifana ne-https://vpn.example.com/ext lithwala izingcezu ezimbalwa zolwazi ngasikhathi sinye, futhi ezinye kuphela zazo eziyingxenye yeklayenti le-VPN.

I-endpoint ne-realm kuyizinto zokufaka ezihlukene

I-openfortivpn ilindele i-endpoint ngesimo se-host noma se-host:port, kanye ne-akhawunti futhi, lapho ukusetshenziswa kusebenzisa eyodwa, inani le-realm. Irealm itshela i-gateway ukuthi iyiphi inqubomgomo yokuqinisekisa okufanele isetshenziswe ngaphambi kokuhlola i-akhawunti. Kuyinkambu ehlukile, hhayi isijobelelo iklayenti elisikhipha ku-URL.

Kokusetshenziswa okugunyazwa umqhubi waso ukuthi i-realm yi-ext, ukubiza okungeyona imfihlo kubonakala kanje: openfortivpn vpn.example.com:443 --username=alice --realm=ext. Lawa manani afanayo angena efayeleni lokumisa njengamagama host, port, username kanye ne-realm. Shiya iphasiwedi ngaphandle kwezimo zombili futhi vumela iklayenti ukuthi iliyibuze, ukuze lingangeni emlandweni we-shell noma efayeleni elingafundwa yiwo wonke umuntu. Umzamo wesibili ngesikhathi iklayenti lokuqala lisabambe ithuneli uzohluleka ngesizathu esingahlobene ne-realm.

incwadi ye-openfortivpn ibala zombili izinketho, ngakho ukupela okunembile kulula ukukuqinisekisa ngaphambi kokushayela ucingo kosekelo. Nokho ayikwazi ukukutshela ukuthi iyiphi i-realm emisiwe ku-gateway yakho.

Ingxenye yendlela ayiyona i-realm ngokuzenzakalela

Ama-URL epothali aqoqa zonke izinhlobo zezinto ngemva kwegama le-host: uhlelo lokungena, isikhethi solimi, umgomo wokuqondisa kabusha, isihlonzi seseshini. Ukusika ingxenye yendlela yokugcina nokuyibiza nge-realm kusebenza kaningi ngokwanele ukuba kube yingozi. Buza umqhubi ngenani elimisiwe, noma lifunde kuphrofayela esatshalaliswa yinhlangano yakho.

I-realm futhi ayiyona into efanayo nesijobelelo se-domain egameni lomsebenzisi noma isifunda i-gateway ekuso. Okunye ukusetshenziswa kufuna i-alice, okunye kufuna i-alice@corp, futhi i-realm inquma ukuthi iyiphi i-gateway ezoyamukela. Ukushintsha isimo se-akhawunti ukuze kunxephezele i-realm engalungile ngokuvamile kuveza ukwenqaba kwesibili, okunolwazi oluncane.

Ungalungisi iphutha le-realm ngokushintsha i-host

Ukushintsha igama le-host ngekheli le-IP kuzwakala njengokususa ungqimba, futhi kwephula okuningi kunalokho okulungisayo. Ukuqinisekiswa kwegama le-TLS kuqhathanisa isitifiketi negama elisetshenziswe yiklayenti, futhi ikheli le-IP alivamisile ukuvela emagameni ayizindlela zokuhlanganyela zesihloko sesitifiketi. Isikhombi segama leseva siyashintsha nekheli, ngakho i-gateway ephethe amapothali amaningi ekhelini elilodwa ingaphendula ngeyona engalungile. Gcina igama le-host nokumisa kokwethemba kungashintshiwe ngesikhathi ulungisa ipharamitha yokuqinisekisa.

Uma isitifiketi singathenjwa endaweni yakho, lungisa isitolo sokwethemba noma unamathisele isitifiketi esilindelekile ngamabomu. Ukucisha ukuqinisekisa ukuze udlule iphutha le-realm kushintsha inkinga yokungena nengozi yokubanjwa buthule.

Ihlukanise ukungena okwenqatshiwe nethuneli elihlulekile

Ukwehluleka kokuqinisekisa nokwehluleka kwethuneli kufika ngezikhathi ezihlukene, futhi imilayezo iyahluka. Iphutha lokuxazulula igama lenzeka ngaphambi kwanoma yikuphi ukuxhawulana kwe-TLS. Ukwenqaba kwe-TLS kwenzeka ngaphambi kokuthunyelwa kwezifakazelo. Ukwenqaba kwe-realm noma kwe-akhawunti kubuya njengempendulo esezingeni le-HTTP evela kupothali. Kuphela ngemva kwalezo zigaba lapho izingxoxo ze-PPP ziqala khona, futhi yilapho kuphela izinkinga zomzila ne-DNS ezivela khona.

I-realm efanele ayidali umzila ongekho, futhi ayenzi indlela yokungena engasekelwe isebenze. Uma ipothali ligcizelela ukuhamba okusekelwe esipheqululini, sebenzisa indlela esekelwe yiklayenti yalokho kuhamba esikhundleni sokuphinda ukushintshana kwephasiwedi nokuthemba ukuthi iseshini izofana.

Gcina amanani lapho ukuqalisa okulandelayo kuzowathola khona

Lapho ukuxhumana kuphumelela, bhala i-gateway, i-port, i-akhawunti ne-realm kuphrofayela elawulwayo esikhundleni segama lesiteketeke le-shell. Amaphrofayela agcinwa endaweni yokugcina noma ohlelweni lokulawula ukumisa avimbela ukuqalisa okulandelayo ekuthatheni buthule i-realm yephrofayela enye.

Phinda uhlole ukuxhumana okukodwa kusukela ekuqaleni kuze kube sekugcineni futhi uqinisekise kokubili inqubomgomo esetshenzisiwe nokufinyelela kwinsiza oyidinga ngempela. Ukuphumelela kokuqinisekisa kuwukuqala kwalokho kuhlola, hhayi ukuphela kwakho.