Indlela yokususa ukulungiselelwa kwe-VPN ku-Mac nokusalayo

Ukususa i-VPN ku-macOS kubonakala kuyisenzo esisodwa kodwa empeleni kunezine okungenani. Inkinobho ekuthiwa i-System Settings isusa isevisi eyodwa yenethiwekhi esitolo sokulungiselelwa kohlelo. Ayisusi uhlelo lokusebenza lweklayenti, isandiso senethiwekhi esifakwe yilolo hlelo, ubufakazi obuse-keychain yakho, noma iphrofayela eshayelwe ngokuphathwa kwamadivayisi. Ukwazi ukuthi iyiphi into engumnikazi wayo yiphi uphawu yikho okuvimbela i-VPN esusiwe ukuba ibuye ngokuthula.

Inkinobho ethi Susa Ukulungiselelwa isusa ini ngempela

Yonke i-VPN oyengezayo iba yisevisi yenethiwekhi, uhlobo olufanayo lwento njenge-Wi-Fi noma i-Thunderbolt Bridge. I-macOS izigcina zonke lapha: /Library/Preferences/SystemConfiguration/preferences.plist, ngayinye inesikhombisi sesevisi, igama elibonakalayo nesichazamazwi sokulungiselelwa esichaza uhlobo lwethuneli, ikheli leseva nokuthi ithuneli iqala kanjani.

Uma uvula i-System Settings ne-VPN, ucindezela inkinobho yolwazi eduze kwesevisi, ukhetha Susa Ukulungiselelwa bese uqinisekisa, i-macOS imisa ithuneli, isusa leyo nto yesevisi futhi ibhala kabusha isitolo. Ukuhlakazwa kuphelele kulokho okungokohlelo: isevisi isiphumile ohlwini futhi akukho okusayiqalayo lapho kungena.

Lokho inkinobho engakufinyeleli yikho konke okungokwesinye isimiso esincane. Iphakethe lohlelo lokusebenza likhona lapha: /Applications. Iklayenti le-NetworkExtension lisebenza njengesandiso sohlelo esibhaliswe ngokwehlukana nokulungiselelwa kwalo. Ubufakazi yizinto ze-keychain ezinezilawuli zokufinyelela zale keychain ezizigcinayo. Iphrofayela yokulungiselelwa ingeyohlelo lwamaphrofayela. Susa isevisi futhi zonke ezine zihlala khona kahle lapho zazikhona.

Bhala phansi lokho i-Mac esakucabanga ukuthi kufakiwe

Yenza uhlu lwezinto ngaphambi kokususa noma yini. Imiyalo emithathu ihlanganisa izingqimba ezintathu ezikhiqiza ukwehluleka okubonakalayo okufanayo:

scutil --nc list
networksetup -listallnetworkservices
profiles -P

scutil --nc list iwumbono oqinisekisiwe wokulungiselelwa kwe-VPN, onesimo sokuxhumeka, igama lesevisi nesikhombisi sesevisi. Ivamise ukukhombisa okufakiwe okungaveli ohlwini lwezilungiselelo: amasevisi asele weklayenti owayikhipha ezinyangeni ezedlule, nokulungiselelwa okufunwa ngokufunwayo okuqala ngokuthula. networksetup -listallnetworkservices ikhombisa amasevisi enethiwekhi ngamagama alindelwe amathuluzi omlayini womyalo, futhi yikho okudingayo ukuze ususe ngokwegama. profiles -P ibala amaphrofayela okulungiselelwa afakiwe; ku-Mac ephethwe, i-VPN kungenzeka ingeyona isevisi oyengeze ngokwakho, kodwa umthwalo ongaphakathi kwelinye lalawa maphrofayela.

Funda izinhlu ndawonye esikhundleni sokuthemba eyokuqala. scutil kodwa engekho kuzilungiselelo ngokuvamile kusho ukuthi iklayenti lenkampani yangaphandle lingumnikazi wethuneli futhi lilibonisa ewincwini yalo siqu. Isevisi kuzo zombili izimo kodwa empunga kuzilungiselelo isho inqubomgomo. Igama eliphinde livele ngemva kokususa lisho ukuthi kukhona okulakha kabusha, futhi lokho kukhona yikho okuyimpokophelo yangempela.

Susa isevisi ngomnini wayo

Ngesevisi oyengeze ngokwakho, hlala emgqeni obhalisiwe: i-System Settings, i-VPN, inkinobho yolwazi, Susa Ukulungiselelwa. I-Apple ibhalisa lowo mgqa, futhi ugcina isitolo sokulungiselelwa silingana. Ukuhlela ngesandla preferences.plist ngesikhathi isitaki senethiwekhi sisebenza yikho okukuholela emasevisini aphindwe kabili noma ama-zombie okungekho sikhombisi esiwasusayo.

Kusuka kutheminali, susa isevisi ngokwegama nge-networksetup -removenetworkservice "Service Name", bese uqinisekisa nge-scutil --nc list. Umyalo usebenza ohlwini olufanayo lwamasevisi njengesikhombisi, ngakho igama elingaveli ku-networksetup -listallnetworkservices ngeke lisuswe yiliphi ikhasi. Uma iklayenti lingumnikazi wethuneli, sebenzisa kuqala umgqa wokususa noma wokukhipha waleLo klayenti, ngoba iklayenti lakha kabusha isevisi lapho liqala ngokuzayo.

Uma i-VPN ivela ekuphathweni kwamadivayisi, awuwona umnikazi. Amaphrofayela afakwe yi-MDM angamakwa njengangasuseki, futhi ngisho alasusekayo lingase lishayelwe phansi futhi ekuhlolweni okuzayo. Qinisekisa nge-profiles -P, bese usebenzisa inqubo yokuphuma yenhlangano yakho. Ukususa umthwalo endaweni kuyehluleka noma kubangela ukufakwa kabusha.

Izinsalela ezixhuma kabusha ngaphandle kwesevisi

Umbiko ojwayelekile othi «kubuyile» akuwukubuya kwesevisi kodwa ukubuya kwesandiso esiyinikazi. Bhala phansi izandiso zohlelo ezibhalisiwe nezandiso zohlelo lokusebenza zohlobo lwesandiso senethiwekhi:

systemextensionsctl list
pluginkit -m -p com.apple.networkextension.packet-tunnel

Iklayenti le-NetworkExtension ligcina umhlinzeki wethuneli lakho efakiwe ngaphansi kwesikhombisi salo siqu, ngokwehlukana nanoma yikuphi ukulungiselelwa. Isandiso singahlala sisebenza ngemva kokuba ukulungiselelwa kunyamalele, futhi i-ejenti yomugqa wemenyu yeklayenti ingakha ukulungiselelwa okusha ekwenzekeni okuzayo, ngezinye izikhathi isebenzisa kabusha igama osanda kulisusa. Hlola izinto zokungena nosizo lomkhiqizi lapha: /Library/LaunchDaemons ngaphambi kokuphetha ngokuthi ukususa kuhlulekile.

Ubufakazi yinsalela yesibili. Iphasiwedi egciniwe noma isitifiketi seklayenti ku-keychain yokungena akususwa nesevisi, futhi imfihlo ehlanganyelwe ye-IPSec ngokomlando ihlala ku-keychain Yohlelo, yikho ukususa nokwengeza kabusha ngezinye izikhathi kudlula isicelo sephasiwedi. Uma i-Mac iphuma ngaphansi kokulawula kwakho, thola into ngokwegama lesevisi ku-Keychain Access futhi uhoxise i-akhawunti, isitifiketi noma ukhiye wozakwabo okumelelwa ubufakazi obugciniwe. A copied configuration file is a live credential even after local removal.

Qinisekisa ukususa, futhi ufunde kahle iphrofayela ebuyayo

Ukususa kuphelile lapho isevisi isiphumile kuzo zombili izimo futhi ihlala ingekho ngemva kokuqala kabusha. Hlola scutil --nc list ngesikhombisi sesevisi, qinisekisa ukuthi ukuxazululwa kwamagama kusebenzisa isixazululi osilindeleyo nge-scutil --dns, bese uqala kabusha kanye, ngoba imithetho yokufunwa ngokufunwayo nama-ejenti okungena yizinto ezimbili ezizibonakalisa kuphela ekuqalweni okuhlanzekile.

Uma isekhona, ungagcwalisi ezinye izinto. Thola ukuthi yisiphi isigaba esiyakhe kabusha: iphrofayela ye-MDM ishayela isevisi futhi, i-ejenti yeklayenti iyakha kabusha, noma isevisi ayizange isuswe ngoba igama alihambelani. Leyo mpendulo inquma ukuthi udinga isifaki sokususa somkhiqizi, ithimba lakho le-IT noma omunye umzoqo kuleyo ngxoxo yokususa. Umhlahlandlela wokususa we-Apple uhlanganisa umgqa osekelwayo wamasevisi owengezile; izinsalela ziyingxenye okufanele uyiqinisekise ngokwakho: remove a VPN configuration.