I-VPN yasehhovisi elincane: yigcine kude nesilawuli sesizinda

Izimo ezintathu zinquma ukuthi iseva eyodwa ye-Windows yehhovisi kufanele futhi iqede i-VPN yini: ukuthi uzimisele ukusebenzisa ibe yini imisebenzi eminingi ebheke ku-inthanethi ku-directory, ukuthi ungakwazi yini ukuqinisekisa abasebenzisi abakude ngaphandle kwaleyo ndima, nokuthi kwenzeka nini ekufinyeleleni kwakho kokuphatha lapho i-host iqala kabusha. Uma kukhona okukodwa kwaba kuthathu okunempendulo embi, hlukanisa izindima. Ukuba yihhovisi elincane kushintsha isabelomali, hhayi ubungozi.

Yonke imishini esizindeni ithembela kusilawuli sesizinda; i-VPN gateway ingafinyelelwa yinoma ubani ku-inthanethi. Lokho kungalingani yikho konke ukuphikisana.

Imisebenzi emibili enamaphrofayili amabili ahlukene okuchayeka

Igateway yamukela ukuxhumana okuvela ngaphandle, ngakho umlaleli wayo, isitaki se-TLS nendawo yayo yokuqinisekisa konke kuyafinyeleleka kusuka kumanethiwekhi angathembekile. I-directory inegunya elitethembwa ezinye izimishini, yingakho imihlahlandlela yokuqinisa ye-Microsoft ibheka indima yesilawuli sesizinda nendawo yayo yokusingatha njengokubucayi ikakhulukazi. Yonke insizakalo engezwa kuleyo host izuza indawo yokuthembela ye-directory ngenkathi ingeza indawo yayo yokuhlasela. Ukuvuma ukufaka akusona umngcele wokuthembela.

Ukuhlukanisa izindima akususi ukuncika. Abasebenzisi abakude basadinga ukuqinisekiswa, imizila, i-DNS nemithetho yokufinyelela, futhi igateway eweqa lokho ayiphephile, incane nje inenzuzo.

Ukuqinisekisa ngaphandle kwendima ye-directory

Igateway ingaqinisekisa izifakazelo ngokuhlanganiswa kwangaphandle okusekelwayo ngaphandle kokusingatha i-directory uqobo. Noma yikuphi lokho kuhlanganiswa, yinike i-akhawunti enamalungelo ahambisana nenjongo: ukufunda izimiso ezidingekayo ukuze kuqinisekiswe, hhayi okuningi. Ukwamukela abasebenzisi be-VPN akukaze kudinga ukwenza ama-akhawunti abo avamile abe ngabaphathi besizinda, futhi akukaze kudinga ukuthi igateway igcine ikhophi ye-directory.

Bese unqamula imizila yamanethiwekhi edingwa ngempela yiklayenti elikude. Ukufinyelela insizakalo yefayela yangaphakathi eyodwa, kanye nezinsizakalo zokuxazulula amagama nobunikazi okuncika kuzo lowo msebenzi, kuyisethi echaziwe yemizila. Lokho akusona isizathu sokuvumela yonke imbobo yesilawuli sesizinda noma yonke indawo yokuphatha kusuka echibini le-VPN.

Ihost eyodwa iseyisizinda esisodwa sokwehluleka

Izivakashi ezimbili ku-hypervisor eyodwa zihlukanisa ukucushwa kwazo kwesistimu yokusebenza futhi azihlukanisi isiphetho sazo. Abaphathi be-hypervisor, ukushintshwa okungokoqobo, isitoreji namakhophi wokulondoloza kuseyingxenye yomklamo, futhi ukuqala kabusha kwehost kususa zombili izinsizakalo ngasikhathi sinye. Ukukubiza lokho ngokutholakala okuphezulu ngoba umdwebo ubonisa ama-VM amabili kuyiphutha elivamile futhi elibizayo. Uma indlela eyodwa yokubuyela ihamba nge-VPN kuleyo host, ukwehluleka kuthatha ukuxhumana okudingekayo ukuze kuyilungise.

Ngakho hlela indlela yokuphatha ezimele enganciki kuthaneli, futhi bhala lokho okuhlala kutholakala phakathi nokunakekelwa. Hlela izibuyekezo zegateway nokunakekelwa kwe-directory ngokwehlukana, uphawula ukuthi yibaphi abasebenzisi noma izinhlelo ezithintwa ukuphazamiseka ngakunye.

Iwindi lokunakekela elidinga ukuthi i-VPN isebenze ukuze kulungiswe i-VPN akuwona iwindi lokunakekela.

Yihambise ngaphandle kokuzivalela ngaphandle

Uma izindima sezivele zabelana ngokufakwa okukodwa, gwema ukufuduka kude okusheshayo. Bhala uhlu lwalokho igateway enakho namuhla: amakheli, imithetho yokudlulisela, i-NAT, izilungiselelo ze-DNS, ukucushwa kokuqinisekisa nanoma yiziphi izinsizakalo ezishicilelwe. Lungiselela kokubili okungena esikhundleni nendlela yokubuyela ngaphambi kokuhambisa umlaleli noma ukushintsha umzila ozenzakalelayo. Bese uhlola umsebenzi wangempela womsebenzisi ojwayelekile wakude ngokusebenzisa umngcele omusha, futhi uqinisekise ukuthi ukufinyelela kokuphatha okungadingekile kusahluleka.

Umgomo akusiwona umdwebo omuhle kakhulu. Yikhono lokulungisa noma lokwakha kabusha i-VPN ngaphandle kokuthinta ibhokisi elibophilela ukuthembela kwe-directory kuyo yonke ihhovisi. Leyo yimigomo ehlukene, futhi eyodwa kuphela yayo edinga iseva yesibili.

Bhala isinqumo noma ngabe kuyini, kufaka nezimo ezingasivula futhi. Ihhovisi elincane liyakhula, futhi impendulo eyayilungele iseva eyodwa ingase ingalufaneli olulandelayo.