Amaklayenti e-VPN aseyekiwe: qala ngokuhlonza iphrothokholi yesango

Izifaki zezinhlelo zamaklayenti e-VPN ezaphela ukuphila kwawo eminyakeni edlule zisasebenza, zisacela iphrofayela, bese ziqedela ukungena okungadlulisi ngisho iphakethe elilodwa. Umshini usesikhathini samanje futhi izifakazelo zilungile, kodwa isango liyilelo so lelo kithi elathengwa yinkampani eminyakeni eyishumi edlule. Ukushintsha iklayenti kuyisinyathelo esifanele, kodwa kuphela uma wazi ukuthi yiluphi uhlobo lwephrothokholi isango elilusakazayo. Amaklayenti amane aseyekiwe kuleli kona awakhulumi iphrothokholi eyodwa.

Kungani igama lomkhiqizo lingayisho iphrothokholi

Umndeni owodwa wemishini ungaphetha izinhlobo eziningi zephrothokholi yokufinyelela kude, futhi igama lokumaketha elisephaketheni alisho lutho mayelana nokuthi iyiphi i-akhawunti yakho eyisebenzisayo. Imishini ye-Cisco yathwala ngesikhathi esisodwa i-IPsec ene-XAuth kanye ne-SSL VPN nge-AnyConnect; amabhokisi e-SonicWall anikeza i-Global VPN Client phezu kwe-IPsec ne-NetExtender phezu kwe-SSL VPN; ukusetshenziswa kwe-Juniper kungadalula i-Network Connect noma iphrothokholi entsha ye-Pulse. Ukufaka umlandeli obukeka ungesikhathi samanje kakhulu wukucabanga. Ukucabanga okungalungile kungenzeka kungaxhumanisi noma kuqinisekise kuseshini engathwali thrafikhi.

Ukulayishwa kwekhasi lesango kusiphequluli kufakazela ukuthi isevisi yewebhu iyaphendula, hhayi ukuthi iklayenti elithile lizoxoxisana nayo. Thatha lokhu njengamaqiniso amabili ahlukene.

Buza isango ukuthi likhuluma ini

Indlela eshibhile yokunciphisa izinketho ukufunda ukuthi isiphetho sibuyisela ini, bese usho iphrothokholi ngokucacile uma uzama iklayenti. Azikho zombili lezi zinyathelo ezishintsha lutho kuseva.

curl -sS -I https://vpn.example.com/ | head -n 5
openconnect --protocol=anyconnect vpn.example.com

Izihloko zempendulo nendlela yokungena zikhombisa ukuthi kukhona yini isango le-SSL VPN kulelo kheli, lokhu okukhomba ku-AnyConnect, NetExtender noma Pulse esikhundleni seklayenti le-IPsec. I-openconnect ibeka ukukhethwa kwephrothokholi emgqeni womyalo, ngakho ukwehluleka kubiza iphrothokholi hhayi umkhiqizo; shintsha nge---protocol=npulse uma ukusetshenziswa kuyi-Juniper. Misa embuzweni wokuqala ocela izifakazelo ongazange uzithole, ngoba umhubhe osebenzayo usadinga i-akhawunti egunyaziwe. Bhala iphrothokholi nendlela kuthikithi yoshintsho yomshini olandelayo.

Linganisa abangeneleli abane bokushintsha

Izindlela ezine zihlanganisa cishe zonke izimo, futhi azishintshani. Umlandeli ovela kumthengisi uyindlela esekelwayo uma inhlangano ingumnikazi wesango futhi izolilayisensa. I-OpenConnect iyiklayenti elivulekile elisebenzayo, ngoba likhuluma i-AnyConnect, Network Connect ne-Pulse uma usho iphrothokholi esikhundleni sokuyeka icabange.

I-strongSwan ibhekana nesimo se-IPsec ne-XAuth ezinhlanganweni ezivumela amaklayenti ezinhlangano zangaphandle, futhi yeqa ngokuphelele ikhodi ye-Cisco IPsec elahliwe. Iklayenti le-Shrew Soft liyaqhubeka lifunda amafayela ephrofayela e-Cisco futhi lisebenza kwezinye izakhiwo ze-Windows, kodwa ukukhishwa kwalo kokugcina kwaba ngowezi-2013. Kuthatha njengesixazululo sesikhashana kuze kube yilapho indlela esekelwayo ihlelwa.

Nquma phakathi kokulungisa nokushintsha

Ezinye izinkinga zingezendawo: ilabhulali engekho, i-adaptha esetshenziswayo endala, noma isifaki esidinga inketho yokulungisa yomthengisi. Lezi zifanele umzamo owodwa ngesikhathi iklayenti lisasekelwa, ngoba zithatha imizuzu embalwa. Isibalo siyashintsha uma ibhinari ingekho ekusekelweni futhi ukugqashuka kufike nokuthuthukiswa kwesistimu yokusebenza, ngoba imithetho yokusayina abashayeli kanye nezandiso ze-kernel isishintshile kusukela kwabhalwa lawa maklayenti. Iklayenti elixhumayo ngesikhathi isibali somhubhe sikhombisa uziro wamaseshini asunguliwe ngokuvamile selidlule ukulungiswa, hhayi ukufakwa kabusha okukodwa kude.

Gcina iklayenti elidala lifakiwe isikhathi esanele sokuthumela ngaphandle iphrofayela yalo, bese ulisusa. Amaklayenti e-VPN amabili ancintisana ngemizila efanayo akhiqiza izimpawu ezingafani nakwelinye lawo.

Bhala ukulandelana kuthikithi: iphrothokholi neklayenti eligunyaziwe elivela kumnikazi, umlandeli osekelwayo uma efaka, iklayenti elivulekile elilodwa elihlolwe emshinini owodwa uma kungenjalo, nendlela yokufinyelela esekelwayo uma kungekho okusebenzayo. Lokho kulandelana kuvimbela umuntu olandelayo ukuthi alande enye ibhinari eseyekiwe.