Iphothi kunkambu wekheli le-VPN ye-Windows isebenza kuphela nge-SSTP

Iseva ye-VPN iphendula ku-TCP 10443, iklayenti elakhelwe ngaphakathi le-Windows linobufakazi bokungena obulungile, futhi uxhumano lusafa ngemuva kokuma okubonakala njengesikhathi se-DNS esiphelile. Imbangela ngokuvamile inkambu yekheli: ukuthayipha i-vpn.example.com:10443 ku-Igama leseva noma ikheli kwenza i-Windows ifunde yonke intambo njengegama lomsingathi, ngoba lelo bhokisi akuwona umbhalo ojwayelekile we-host:port. Ukuthi iphothi ingavezwa yini lapho nhlobo kuncike ohlotsheni lomhubhe olusetshenziswa iphrofayela, futhi lulodwa kuphela kwezinhlobo ezine oluthatha inani njengento ekwazi ukuyihlaziya.

Kungani inkambu yekheli ingewona umbhokisi we-host:port

Isici sephrofayela esingemuva kwaleyo nkambu i-ServerAddress, futhi uhlobo ngalunye lomhubhe lunquma ukuthi lwenzani ngentambo. Ezintathu zazo azinayo ipharamitha yephothi okumele igcwaliswe, ngakho ikholoni nenombolo kumane kuyizinhlamvu egameni elingeke laxazululwa. Eyesine isebenza nge-HTTPS, lapho iphothi iyingxenye ye-URL, ngakho inani kumele libhalwe ngendlela ehlaziywa njenge-URL.

Yingakho ukwehluleka kubonakala njengokuxazululwa kwamagama hhayi njengoxhumano olwenqatshiwe. Ayikho iphothi embi okufanele ibikwe, kukhona kuphela igama lomsingathi elingekho, futhi iphutha lifika ngemuva kokuba isixazululi sinikele. Ngaphambi kokuthinta iseva, hlola ukuthi iphrofayela ithi isebenzisa uhlobo luni lomhubhe.

Izinhlobo ezintathu ezinephothi eliqinile

I-PPTP ixhuma ku-TCP 1723 bese ithwala umhubhe ku-GRE, iphrothokholi ye-IP 47. I-L2TP/IPsec isebenzisa i-UDP 1701 kumhubhe kanye ne-UDP 500 kanye no-4500 kwe-IPsec, kanti u-4500 iyiphothi yokudlula kwe-NAT. I-IKEv2 nayo isebenzisa i-UDP 500 no-4500. Ayikho kulezi phrofayela ekhombisa inkambu yephothi noma kuphi kusixhumi, futhi ayikho ezoxoxisana ngephothi elingajwayelekile.

Iseva elalela kuphothi ngokwezifiso ngakho ayifinyeleleki kulezo phrofayela, kungakhathaliseki ukuthi ikheli libhalwe kanjani. Izimpendulo ezingokoqobo zincane: shicilela iphothi ejwayelekile kuseva, noma humusha iphothi ejwayelekile iye kweyokwezifiso kusiphathi esingaphambi kwayo. Zombili zishiya iphrofayela yeklayenti ingathintwanga, okuyinto eyigugu lapho iphrofayela isatshalaliswa ngenqubomgomo hhayi ngokubhalwa ngesandla.

I-SSTP idinga i-URL, hhayi igama

I-SSTP iyisihlengelo ngoba isebenza ngaphakathi kwesikhathi se-TLS. Inkambu kumele ihlaziywe njenge-URL: kuqala uhlelo lwe-https://, bese umsingathi, bese ikholoni nephothi. Ngaphandle kohlelo, i-Windows iqhubeka nokuthatha inani njengegama elijwayelekile futhi uxhumano luyahluleka ngaphambi kokuba kwenzeke noma yikuphi ukushintshana kwe-TLS.

Isizathu sokuthi lokhu kumangaze abantu ukuthi iphothi elizenzakalelayo lamukela igama lomsingathi elinqunu. Iphrofayela engakaze idinge iphothi ngokwezifiso ayikaze ifundise umthetho, futhi umuntu wokuqala oengeza elilodwa uyithola ngokwehluleka. Ngemuva kokugcina, funda inani eligciniwe emuva esikhundleni sokuthemba ibhokisi lengxoxo:

Get-VpnConnection -Name "Corporate SSTP" | Select-Object Name, ServerAddress, TunnelType

I-ServerAddress ikhombisa ngokunembile lokho okugciniwe. Uma ifundwa njengegama lomsingathi elinqunu elinekholoni, iphrofayela ayikaze ithole i-URL futhi akukho nenani lokuzama kabusha elizoyilungisa.

Isintaksi somkhiqizi enanyatheliswa kulelo bhokisi

Amanye amasango abhala imithetho eyengeziwe yaleyo nkambu, njenge-realm engezwe ngemuva kwephothi noma amapharamitha wemibuzo ashintsha ukuphathwa kwezitifiketi. Ziqondwa iseva yalowo mkhiqizi futhi, kwabanye abakhiwe, yiklayenti yayo. Aziyona ingxenye yefomethi yephrofayela ye-Windows, futhi ukuzinamathisela kuphrofayela eyakhelwe ngaphakathi ngokuvamile kukhiqiza ukwehluleka kwegama okuthule okufanayo.

Thatha ipharamitha evala ukuqinisekiswa kwezitifiketi njengesexwayiso hhayi njengokulungisa. Uma iphrofayela ixhumanisa kuphela ngaleyo pharamitha, isitifiketi asihambisani negama elisetshenziswayo, futhi ukulungisa okulungile kusesangweni, hhayi kuklayenti. I-realm ngemuva kwephothi inesici esifanayo: yenza okuthile kuphela uma iseva engakolunye uhlangothi iyilindele.

Fakazela iphothi, bese ufunda isigaba esihlulekayo

Qinisekisa ukuthi kukhona okwamukela i-TCP kulelo phothi kusuka kunethiwekhi yeklayenti ngaphambi kokusola iphrofayela:

Test-NetConnection vpn.example.com -Port 10443

Impumelelo ifakazela umlaleli, hhayi i-SSTP. Iseva yewebhu, i-proxy ephambene noma isilinganisi somthwalo kungaqedela ukuxhawula kwe-TCP futhi kungakhulumi i-SSTP, ngakho ukuhlolwa okuluhlaza okotshani ne-VPN ebomvu kuyinhlanganisela yangempela. Qhathanisa isihloko sesitifiketi negama elisephrofayela, futhi uhlole ilogi ye-RasClient kumakhiwo ayilethayo, ngoba ibhala isigaba esihlulekile esikhundleni sesikhathi esiphelile esijwayelekile.

Bese ucabangela inketho esusa inkinga esikhundleni sokuyibhala: dlulisa i-TCP 443 kusuka ngaphandle iye ku-10443 kuseva ye-VPN. Iklayenti bese isebenzisa iphrofayela ezenzakalelayo ngaphandle kwephothi, okuyinto evamise ukuba ukuhlelwa okuhlanzekile kakhulu kweqembu elilawulwayo futhi ishiya iphothi ngokwezifiso njengemininingwane yangaphakathi.