I-Framed-IP-Address ye-RADIUS yekheli leklayenti le-VPN elizinzile

I-RADIUS ingaphendula ngekheli lomsebenzisi othile; ukuthi ithunge liyithola ngempela kuncike esangweni. Kulesi sikhala phakathi kwalokho okubuyisiwe nalokho okusetshenzisiwe lapho iningi lezinhlelo zekheli elizinzile lihluleka khona. Isibaluli esimpendulweni yokuhlola sikhombisa ukuthi iseva ingayithumela, hhayi ukuthi insizakalo yokufinyelela kude iyisebenzisa. Ukulandelana okungezansi kuhlola izingxenye zombili ngaphambi kokuba ikheli lingene emithethweni ye-firewall.

Nquma ukuthi yiluphi ungqimba olungumnikazi wekheli

Amasango okufinyelela kude ngokuvamile anechibi lendawo, futhi amaningi angamukela ikheli elivela empendulweni yokuqinisekisa. Ukuthi yikuphi okunqobayo kuncike endaweni yokusebenza, iphrothokholi kanye nokuhlelwa kwensizakalo, ngakho funda umthetho wokubaluleka wenguqulo eqondile esetshenziswayo. Lapho ichibi lendawo linokubaluleka khona, isibaluli siwukuhlobisa nje futhi iklayenti lisagcina selikheli elingahleliwe. Bhala isinqumo phansi, kuhlanganise nokuthi ingabe inani elibuyisiwe kumele lihlale ngaphakathi kwebanga lechibi noma lingaphuma kulo.

I-RFC 2865 ichaza Framed-IP-Address njengekheli okufanele limiselwe umsebenzisi, futhi ayisho lutho mayelana nokuzimisela kwesango elithile ukuyihlonipha. Imibhalo yomkhiqizi iyigunya mayelana nokubaluleka, hhayi incazelo yesibaluli.

Thumela isicelo sokuhlola bese ufunda impendulo

Hlola iseva iyodwa kuqala, ukuze isibaluli esingekho singadidaniswa nenkinga yesango. radtest ithumela i-Access-Request eyodwa futhi ishicilela izibaluli ezibuyayo.

radtest alice 'S3cret' 127.0.0.1 0 testing123

Funa Framed-IP-Address ku-Access-Accept bese uqinisekisa ukuthi inani yilona elihlosiwe hhayi ikheli lechibi elivela kumthetho wokulondoloza. Uma isibaluli singekho, okokufaka komsebenzisi noma inqubomgomo yokugunyaza akuhambisani, futhi ukulungisa isango akukwazi ukunikeza lokho iseva engakaze ikuthumele. Phinda isicelo ngenkathi iseva isebenza kumodi yokulungisa uma impendulo inzima ukuyilandela emthethweni othile. Gcina imfihlo eyabiwe ngaphandle komlando we-shell namathikithi, ngoba isibambi sikhala esingenhla akusona isiqinisekiso sokungena.

Qinisekisa ukuthi isango lihloniphe inani

Impendulo efanele iyingxenye eyodwa kuphela yesivumelwano. Ikheli elivela kusixhumi sethunge yilona okubhekwayo okubalulekile, futhi lifundwa kuklayenti esikhundleni sokucatshangelwa kusukela ekuhlelweni kwesango.

ip -4 addr show tun0

Qhathanisa lelo kheli nesibaluli esivela ku-Access-Accept. Ukungafani kusho ukuthi isango lishaye indiva noma labhala kabusha inani, okuthi kuvule futhi umbuzo wokubaluleka ovela esigabeni sokuqala. Xhuma futhi kanye, ngoba ukubekelwa phansi okusebenza kuphela emzamweni wokuqala ngokuvamile kukhombisa isikhathi esidala noma ukuqashwa okusaphethwe uxhumano lwangaphambilini. Bhala inguqulo yesango nephrothokholi eceleni komphumela, ukuze umuntu olandelayo azi ukuthi ukuziphatha kuncike enguqulweni yini.

Hlela ukwenzeka kanyekanye nokuhoxiswa

Igama lomsebenzisi elilodwa kumadivayisi amabili alikwazi ukumelwa yikheli elilodwa ngaphandle uma isango lihlukanisa izikhathi ngento engeyona ukungena. Nquma ukuthi ukumelwa kungokomuntu, idivayisi ebhalisiwe noma ubunikazi besitifiketi, futhi wenze lokho kucace esitolo semigomo. Hlola iklayenti lesibili ngasikhathi sinye bese uqhathanisa womabili amakheli anikeziwe, ngoba ukungqubuzana lapha kubuye kamuva njengephutha lokuhambisa. Ukunakekela okufanayo kufanele kube isikhathi kuhlelo lokuhoxiswa, ngoba ikheli elabelwa kabusha ngenkathi imithetho emidala ye-firewall isayibhekisela iba yiphutha lokugunyaza.

Ukukhelela okuzinzile kwenza imithetho namalogi abe lula, kodwa akukaze kufakazele ukuthi ngubani owakha iphakethe. Ukuqinisekisa nokugunyazwa kwendawo okufunekayo kusabalulekile lapho lelo kheli lidlulela kwesinye isikhathi kamuva.