Ukubhala i-script yeklayenti le-VPN: khetha isendlalelo ngaphambi kwephasiwedi

I-CLI yomthengisi, i-rasdial, inhloso ye-app noma i-UI automation kwehluleka ngendlela ehlukile. Khetha isendlalelo, gcina imfihlo ngaphandle kwe-argv, futhi linda isimo, hhayi amakhodi okuphuma.

Ama-script aqala amaklayenti e-VPN esendlalelweni esikhethwe umbhali, futhi leso sendlalelo asivamisile ukuba yiso esasidingwa umsebenzi. Umugqa womyalo womthengisi, isishayeli sohlelo lokusebenza kanye nenhloso ye-app yeselula konke kubuyela emuva ezindaweni ezahlukene empilweni yoxhumano. Futhi ziphatha imfihlo ngendlela ehlukile, futhi lowo mehluko unquma ukuthi iphasiwedi iyabonakala yini kumsebenzisi ngamunye kumshini. Khetha isendlalelo ngaphambi kokubhala umugqa wokuqala we-script.

Isendlalelo 1: umugqa womyalo womthengisi

Iningi lamaklayenti e-desktop linikeza umugqa womyalo othatha igama lephrofayela futhi, kaningi kakhulu, iphasiwedi. Iklayenti elidala le-Cisco lamukela isenzo connect nemibono yomsebenzisi nephasiwedi; i-macOS iveza isevisi eyakhelwe ngaphakathi nge-networksetup; i-NetworkManager iphendula ku-nmcli. Lezi zingcingo zibuyela lapho umyalo uphela, okuwona umzuzu lapho ithaneli isebenzeka khona. Funda imibhalo yomthengisi yenguqulo oyisebenzisayo, ngoba lezi zixhumanisi ziyashintsha futhi ezinye zisuswa ngokuphelele.

nmcli connection up "Work VPN"
networksetup -connectpppoeservice "Work VPN"

Inzuzo iwukuthi umthengisi uyazi isitoreji sakhe sephrofayela, ngakho ucingo lusebenzisa ukucushwa okufanayo ne-GUI. Ububi buwukuthi umthengisi ngamunye usungula izenzo zakhe, futhi i-script ebhalelelwe iklayenti elilodwa ayidluliseli kwelinye. Thatha lesi sendlalelo njengendlela emfushane kakhulu lapho iklayenti lizingisiwe futhi inguqulo iboshiwe.

Isendlalelo 2: isevisi yohlelo lokusebenza uqobo

Ku-Windows isishayeli siyingxenye yohlelo lokusebenza futhi sisebenza ngokumelene nokufakwa encwadini yocingo esikhundleni sesitoreji sephrofayela yomthengisi. Lokho kuyenza ithwaleke kakhulu phakathi kwamaklayenti futhi kube lula ukuyibhala nge-script kusuka ku-akhawunti yesevisi. Kusho futhi ukuthi uxhumano lungaba khona endaweni eyodwa hhayi kwenye, okudida abantu ababheka ohlwini olungalungile.

rasdial "Work VPN" user pass
Get-VpnConnection -Name "Work VPN" | Select-Object ConnectionStatus

Sebenzisa indawo ye-PowerShell lapho udinga ukudala noma ukususa ukufakwa esikhundleni sokukushaya. Izendlalelo ze-WMI ne-cmdlet ziveza izinto ezifanayo ngamagama ahlukene, futhi ukususa kuwumsebenzi ohlukile ekunqamukeni. I-script eshaya kuphela izoshiya ukufakwa okudala ngemva kokufuduka. Hlola isitoreji i-automation yakho ebhala kuso ngaphambi kokuthembisa ukuthi ukuhlanza kuzokwenzeka.

Remove-VpnConnection -Name "Old VPN" -Force
Get-VpnConnection

Ku-macOS okulingana nakho uhlu lwamasevisi enethiwekhi, lapho isevisi ekhona ixhunywa ngegama esikhundleni sokudalwa ngokushesha.

Izifakazelo ziyavuza kuyo yonke indawo, ngakho khetha itshaneli

Noma yini oyidlulisa kumugqa womyalo ivela kuthebula lezinqubo kumsebenzisi wasekhaya ngamunye, futhi ngokuvamile iyasinda emlandweni we-shell futhi. Enye indlela esekwa yi-OpenVPN iwukuba funda imfihlo kufayela nge---askpass, futhi ifayela ngokwalo lidinga izimvume ezihambisana nokwethemba okubeka kulo. Ipayipi elinegama ligwema ukubhala imfihlo kudiski kodwa livumela noma iyiphi inqubo engayivula ukuthi ibhale lapho. Ku-Windows, gcina imfihlo kumphathi wezifakazelo, noma efayeleni elingafundwa kuphela i-akhawunti yesevisi, futhi ungayibeki njengombhalo oqondile efayeleni le-batch.

openvpn --config /etc/openvpn/work.conf --askpass /etc/openvpn/work.secret --auth-nocache --daemon
ls -l /etc/openvpn/work.secret

Umgomo ofanayo usebenza kuma-token namakhodi okusetshenziswa kanye: uma i-automation iwadinga, i-automation idinga itshaneli okungewona umbono womugqa womyalo. Shintsha imfihlo lapho ushintsha indlela, ngoba inani elidala lalilele endaweni yelogi. I-script esebenzayo futhi evuzayo ayiyona i-script esebenzayo.

Linda isimo, bese ugada umnikazi oyedwa

Ucingo ngalunye lwalezi lubuyela emuva ngaphambi kokuthi ithaneli lilungele, ngakho hlola isimo esivezwa yiklayenti noma uzame indawo ngaphakathi kulo ngesikhathi esinqunyiwe. Ukukopisha amafayela noma ukuvula uxhumano lwesizindalwazi ngokushesha ngemva kocingo lokuxhumanisa umjaho, futhi kwehluleka ngezikhathi ezithile ngendlela ebukeka njengephutha lenethiwekhi.

ip link show tun0
nmcli -t -f GENERAL.STATE connection show "Work VPN"
curl -sS --max-time 5 https://app.internal.example/health -o /dev/null

Ukunqamuka kunenkinga efanayo ngakolunye uhlangothi: inqubo ingaphuma ngaphambi kokuthi imizila inyamalale. Sebenzisa izingwegwe zeklayenti lapho zikhona, njengezincwadi ze-script ze-up ne-down ze- OpenVPN noma i-ExecStartPost yeyunithi ye-systemd, ngoba zisebenza endaweni oyikhathazayo ngempela. Izingwegwe zisebenza ngamalungelo alokho okuzibizile, ngakho ingwegwe eqala kabusha inethiwekhi idinga umthetho ocacile esikhundleni somcabango. Gcina umnikazi oyedwa ngqo kukho konke ukuphila koxhumano.

Lapho abaqaphi ababili beqala futhi bemisa iphrofayela elifanayo, umphumela uyiluphu yokuxhumana kabusha efundwa njengokuphazamiseka komhlinzeki. I-runbook iphela lapho isendlalelo sibhaliwe, imfihlo inetshaneli okungewona i-argv, isimo sokulinda siwukuhlola isimo nesikhathi esinqunyiwe, futhi inqubo eyodwa inombuso womjikelezo wokuphila.

Izihloko ezihlobene