I-OpenVPN noma i-IKEv2: izindlela ezine zokuhlola ngaphambi kokukhetha iphrothokholi

Ukukhetha phakathi kwe-OpenVPN ne-IKEv2 ngokuvamile kuxoxwa ngakho njengombuzo wephrothokholi, futhi lolu hlaka lumosha isinqumo. Okunqumayo ukuthi iseva yakho namadivayisi akho asekela iphrofayela eliphelele elifanayo yini, nokuthi leyo phrofayela ibekezelela indlela ohamba ngayo phakathi kwamanethiwekhi. Lezi zingqimba ezimbili aziguqulelwani: ifayela le-OVPN akulona iphrofayela le-IKEv2 eline-syntax ehlukile. Izindlela ezine zokuhlola, ezenziwa ngokulandelana, ziphendula umbuzo ngokushesha kunanoma yiliphi ithebula lezici.

Iklayenti elingekho liqeda ingxoxo

I-Windows ne-macOS ziza neklayenti le-IKEv2, ngakho iphrofayela le-IKEv2 alibizi lutho olwengeziwe ukulisebenzisa lapho futhi lithola njengefa izinketho zokuhlinzeka osekuvele zikhona kusistimu yokusebenza. OpenVPN kuleyo mishini efanayo kusho iklayenti lenkampani yangaphandle okufanele lifakwe, libuyekezwe futhi lisekelwe, futhi lelo klayenti kufanele lamukele yonke inketho esetshenziswa yiphrofayela. Bala izinkundla okufanele uzihlanganise ngaphambi kokuqhathanisa noma yini enye, ngoba inkundla engenayo iklayenti elisebenzayo ayiyona ngisho indawo yokuqhathanisa.

Ku-Windows, umyalo owodwa ubala amaphrofayela asevele ekhona futhi ubonisa ukuthi iliphi uhlobo ngalinye. Igama eliliphrinta yilo igama elisetshenziswa izindlela zokuhlola ezilandelayo.

Get-VpnConnection -AllUserConnection
Get-VpnConnection -Name <profile-name> | Select-Object Name, ServerAddress, TunnelType

Isicelo sokufaka iklayenti yimpendulo yangempela yekholomu le-OpenVPN kulezo zinkundla, futhi lokho kuwumsebenzi wokuthunyelwa hhayi umkhawulo wephrothokholi. Akukho hlaka olususa ukuhlolwa kokuthembela, ukuqinisekiswa kobuqiniso noma ukunakekelwa. Buza ukuthi amaphrofayela asatshalaliswa kanjani, izifakazelo zivuselelwa kanjani futhi idivayisi elahlekile isuswa kanjani ngaphambi kokuzibophezela. Ukufakwa okulula kusengafihla inqubo yokubuyisela okungekho muntu ofuna ukuyisebenzisa ngempelasonto.

Ukuhamba kuwukuhlelwa okuhlanganyelwe, hhayi isethembiso sephrothokholi

I-IKEv2 ingasebenzisa i-MOBIKE lapho zombili iziphetho ziyisekela futhi ziyivula, lokho okuvumela iklayenti ukuthi ligcine umhubhe walo ngenkathi ikheli lalo lishintsha. RFC 4555 ichaza lesi sandiso, futhi amagama anemibandela abalulekile: iseva engayinaki leli khono ixoxisana kabusha esikhundleni salokho. Umphumela ungabonakala ufana ekudlulisweni kwefayela futhi uhluke kakhulu ocingweni oluqondile.

Hlola ushintsho olunendaba ngempela kuwe, ngokuthile okusebenzayo ongakubuka. Vumela ping -t <internal-host> iqhubeke isebenza ku-Windows, noma ping ejwayelekile kwenye indawo, bese usuka ku-Wi-Fi uye kwinethiwekhi yeselula futhi ubuke izikhala. Ukwehluleka kwe-MOBIKE kubonakala njengokuqinisekiswa kabusha okuphelele kulogi yeklayenti, hhayi njengokubuyekezwa kwekheli okuthule. Olukulinganisayo ukuthi umhubhe uyalibekezelela ushintsho yini, hhayi ukuthi iphrothokholi ikhuluma ngokwesekwa yini.

Amaklayenti e-OpenVPN axhuma kabusha ngokokuziphatha kwenkundla yawo kanye nezikhathi zephrofayela, ngakho ukuhlolwa okufanayo kungaveza uhlobo oluhlukile lokuphazamiseka. Qhathanisa isigameko esibalulekile kubasebenzisi bakho, hhayi ilebula elisekuphrothokholi.

Izifakazelo zezomsebenzi, hhayi zengqimba

Izitifiketi nezinye izinhlelo zokungena zezomsebenzi oqeda ukuxhumana. Isicelo sephasiwedi kuklayenti elilodwa asisho lutho mayelana nokuhambisana nelinye, futhi iphrofayela esebenza negeyithiweyisi ehlukile aisho lutho ngalena. Gcina imithetho yobuqiniso beseva injalo ngenkathi uqhathanisa izingqimba ezimbili. Ukushintsha amaphrothokholi ngaphambi kokuthola ukwehluleka ngokuvamile kukhiqiza iphrofayela lesibili elingahambisani.

Hlola isifakazelo iklayenti elizosethula ngaphambi kokusola noma yiphi iphrothokholi, ngoba isitifiketi esiphelelwe yisikhathi noma esikhishwe kabi sehluleka ngendlela efanayo kuzo zombili. Umphumela ongezansi ubonisa isihloko, umkhiphi nezinsuku zokusebenza ngaphandle kokufunda ukhiye oyimfihlo.

openssl x509 -in client.crt -noout -subject -issuer -dates

Okuxhumo lwenkampani, sebenzisa indlela eshicilelwa yinkampani futhi uyeke ukuthatha ukuqhathanisa njengokuhlola. Uma wena uqhathanisa kokubili, qala uhlole ukuthi zombili izinketho ziphetha kugeyithiweyisi eyodwa yini, ngoba lolo dethali olulodwa lunquma ukuthi ingakanani imiphumela yakho ekhuluma ngephrothokholi. Ukwenqatshwa okubiza isifakazelo kuyinkinga yesifakazelo, futhi akukho nani lokushintsha iphrothokholi okungalungisa lokho.

Hlola ukuthi umhubhe uhambisa ini ngempela

Ngemva kokuxhuma, qinisekisa ukuthi indlela oyidingayo ikhona nokuthi amagama ayaxazululwa. Iphrofayela ekhona yezinsiza zangaphakathi ingase ishiye ukuphequlula okuvamile endleleni yendawo ngamabomu, futhi lokho kuyisinqumo senqubomgomo hhayi iphutha. Okubalulekile ukuthi izindawo ezisetshenziswa yiqembu lakho zifinyeleleka ngomhubhe yini.

Ku-Windows imiyalo emibili ihlanganisa indlela nokuseshwa kwegama. Okulingana e-Linux yi-ip route show default ne-resolvectl query <internal-host>.

Get-NetRoute -DestinationPrefix 0.0.0.0/0
Resolve-DnsName <internal-host>

Umhubhe ophakama kodwa ungahambisi lutho olusizo umphumela ojwayelekile lapho iphrofayela ikopishwe phakathi kwezinsiza, futhi ukuhlolwa kokuxhumana okuvamile ngeke kukukhombise lokho ngoba i-interface iphakeme. Hlola insiza abasebenzisi bakho abayivula kuqala, hhayi ikheli lomphakathi elingafinyelelwa yinoma yiphi indlela. Uma igama lixazululeka libe ikheli lomphakathi ngenkathi indlela ikhomba ngaphakathi komhubhe, impendulo ye-DNS nendlela ziyizingxenye zezinqumo ezihlukile futhi zombili zidinga ukulungiswa.

Ngemva kokuhlola linganisa ukunakekelwa

Awekho amaphrothokholi alula ukunakekelwa ngendlela engacacile. Ukunakekelwa kuncike ekutheni ubani osebenzisa igeyithiweyisi, ukuthi amaphrofayela afinyelela kanjani kumadivayisi nokuthi idivayisi elahlekile ilahlekelwa ukufinyelela ngokushesha kangakanani. Iklayenti lesiphetho elilula lingema phambi kweseva enzima ukuyisebenzisa, futhi okuphambene nakho kuyenzeka. Buza ukuthi iziphi kulezi ezimbili iqembu lakho elingaqhubeka nokuzisebenzisa ngemva kokuhamba komsunguli wazo.

Khetha ukuxhumana okusekelwayo okuhlanganisa umsebenzi, bese ukuhlola ngokumelene nokufinyelela okudingayo ngempela, hhayi ngokumelene nohlu lwezici. Bhala ukuthi inketho ngayinye iphetha kuyiphi igeyithiweyisi, ngoba amageyithiweyisi amabili ahlukene enza ukuqhathanisa kube ngendlela efanayo mayelana nezindlela nangamaphrothokholi. Phinda izindlela ezine zokuhlola kudivayisi ozokuthwala ngempela, futhi gcina iphrofayela elidlulayo kulo.