I-SSTP ku-Linux iyahluleka ngaphambi kokungena? Hlola izingxenye zokugijima

Ufaka isengezo se-SSTP, inkinobho yerediyo ivela kumhleli wenethiwekhi, ugcwalisa i-gateway negama lomsebenzisi, futhi iphrofayili yehluleka ngephutha elijwayelekile ngaphambi kokuthi icele iphasiwedi. Akukho lutho olungajwayelekile kulolo hlelo, futhi akukho lutho kulo olufakazela ukuthi isoftware yethumela ifakiwe. Ukuxhumana kwe-SSTP kuhlanganiswa izingxenye ezithunyelwa ngokwehlukana: isengezo se-VPN i-NetworkManager engayiqalisa, uhlelo lweklayenti le-SSTP eliphethe isikhathi se-TLS ne-PPP, i-daemon ye-PPP ngaphansi kwalo, kanye nendawo yokugcina izimfihlo okufanele ukuxhumana ikwazi ukuyifunda.

Isici somsuka sengeza ini futhi asengezi ini

Isengezo sinikela ngencazelo yesevisi elitshela i-NetworkManager indlela yokuyiqalisa, futhi ezinsukwini eziningi zokusabalalisa umhleli omncane odweba ifomu. Yilokho kuphela ububanzi besici somsuka. Uhlelo lweklayenti luza kwelinye iphakethe lomthombo, futhi i-README yesengezo uqobo isho lokho kwehlukana ngokuqondile: isengezo siyisengezo, hhayi iklayenti.

Ngemva kwalokho iklayenti lidinga i-PPP, ngoba i-SSTP ithwala isikhathi se-PPP ngaphakathi kokuxhumana kwe-TLS. Ngaphandle kwe-pppd ithumela lingaqeda ukubambana kwezandla kwe-TLS futhi liphele lifa kufreyimu yokuqala yokulawula, okubonakala njengenkinga yezinkulumo zokungena kodwa akunjalo. Ku-Debian ne-Ubuntu izingxenye ziza njenge-network-manager-sstp, i-sstp-client ne-ppp, futhi ukufaka eyokuqala kuphela yisizathu esivame kakhulu sokuthi ifomu lamukele zonke izinkambu kodwa ukuxhumana kungaqedi.

Ukukhetha ideskithophu kwengeza okunye ukwehlukana. I-Plasma ihlela amaphrofayili nge-plasma-nm, edinga ingxenye yayo ye-SSTP futhi efunda leyo ncazelo yesevisi, ngakho umhleli ongenaso isici se-SSTP kanye ne-CLI eyakha amaphrofayili kahle kusho ingxenye yomhleli engekho, hhayi indawo yokugijima ephukile.

Funda isigaba sokuqala esihlulekayo ngaphambi kokufaka kabusha noma yini

Umzamo we-SSTP ohlulekile udlula ezigabeni ngokulandelana okungaguquki, futhi isigaba esihlulekile sikutshela ukuthi yiphi ingxenye okufanele uyibheke.

Ukuqalisa isengezo yisigaba sokuqala, futhi ukwehluleka lapho kukhiqiza umlayezo mayelana nesevisi ye-VPN, hhayi ngeseva. Ngemva kwalokho kuza ukuxhumana kwe-TCP kupottho 443; ukwenqatshwa noma ukuphela kwesikhathi lapha kuyinkinga yokufinyeleleka, hhayi ye-TLS. Bese kuba ukubambana kwezandla kwe-TLS nokuhlolwa kobunikazi baseseva, bese kuba izingxoxo ze-PPP nokuqinisekiswa kwe-akhawunti, futhi ekugcineni ukwabiwa kwekheli nemizila. Qaphela i-journalctl -f -u NetworkManager ngenkathi wenza iphrofayili isebenze kanye, futhi funda umugqa wokuqala oqondile esikhundleni somugqa wokugcina ojwayelekile.

Lokho kulandelana kuchaza ukufundwa okungalungile okuvamile. Isikhalo sesitifiketi sibikwa ngaphambi kokuthi kuthunyelwe noma yiziphi izinkulumo zokungena, ngakho ukushintsha iphasiwedi akukwazi ukusiza; ukwenqatshwa kokuqinisekiswa kwe-PPP kuza ngemva kokubambana kwezandla okuphumelelayo, ngakho ukushintsha isitifiketi nakho akusizi. Gcina iphutha lokuqala nesigaba salo, futhi unokuxilongwa, hhayi uphawu.

Ukwethemba isitifiketi nokungena ku-akhawunti kuyizingqinamba ezimbili ezihlukene

Ukubambana kwezandla kuqinisekisa ukuthi iseva yiyo leyo obuzimisele ukuyifinyelela, kusetshenziswa umkhiphi negama olilungiselele. Kuphela ngemva kwalokho isigaba se-PPP sinikela igama lakho lomsebenzisi nephasiwedi endleleni yokuqinisekisa ye-gateway. Ngakho ukuhlolwa okubili okuzimele kuhlolwa ngokulandelana okungaguquki, ngamasethingi ahlukene kwelinye. Akukho okubhalwe enkambini yephasiwedi okungathinta okokuqala.

Iphrofayili ethemba umkhiphi ongafanele yehluleka esangweni lokuqala ngephutha lobunikazi. Iphrofayili eyithemba ngendlela efanele kodwa egcina iphasiwedi endala yehluleka kwesibili ngokwenqatshwa kokuqinisekiswa. Zombili zibonakala njenge-VPN engeke ixhumane, futhi akukho noyedwa olungiswa umuthi womunye.

Thola umkhiphi negama leseva elilindelekile kusuka kulowo ophethe i-gateway esikhundleni sokuqagela izingenelo zomhleli, futhi bhala indlela yokuqinisekisa abayidingayo. Uma inhlangano idinga indlela isengezo esingakwazi ukuyiveza, impendulo eqotho iklayenti eligunyaziwe elikwaziyo, hhayi iphrofayili evalwe ukuqinisekiswa ukuze iphutha linyamalale.

Vumela umnikazi oyedwa ukuthi aphethe iphrofayili nezimfihlo

Uma iphrofayili isikhona, yenze isebenze nge-NetworkManager futhi uvumele lowo mqedisi ukuthi abe ngumnikazi wemizila kanye nezinguquko zesixazululi ezivela kukho. Ukuqalisa iklayenti lesibili le-SSTP elizimele ngenkathi i-NetworkManager isivele iphethe ukuxhumana kukunika amasethi amabili emizila, izilungiselelo ezimbili ze-DNS kanye nesikhathi sokulungisa iphutha esingenayo umthombo owodwa weqiniso.

Izimfihlo nazo zinomnikezi. Ukuxhumana okumakwe ukusetshenziswa kulo lonke uhlelo kugcina izinkulumo zokungena ngendlela ehlukile kunalokho okukhawulelwe esikathini sakho somsebenzisi, futhi iphrofayili eyakhiwe ngesandla kufayela lokhiyi ingase ingafundeki kwi-ejenti yezimfihlo elindele ukunikeza iphasiwedi ngokuxhumana. Hlola ukuthi iphrofayili ilindele isimo sini ngaphambi kokuthi uphinde ubhale iphasiwedi eyayingeyona inkinga. Ukwenza iphrofayili efanayo isebenze kusuka kutheminali nge-nmcli ukuhlolwa okusheshisa kakhulu, ngoba isicelo esingasoze sivele sikutshela ukuthi i-ejenti yayingenakho okungakunikezwa.

Hlola ithumela, imizila nesixazululi ngokwehlukana

Isikhombi sokuxhumene sisho kuphela ukuthi isixhumanisi sikhuphukile. Hlola indawo oyidinga ngempela, umzila oyithwalayo kanye nesixazululi esisetshenziswayo, ngakunye; ngakunye kungaba nephutha ngenkathi ezinye ezimbili zilungile.

Ngokuzama okuhlulekile, rekhoda inguqulo yengxenye ngayinye kanye nombhalo wephutha ohlanjululwe. Yabelana ngalokho, hhayi iphrofayili ephelele, ngoba iphrofayili ingaqukatha imfihlo eyabiwe ngaphambili nezinkulumo zakho zokungena ezigciniwe.

Ekugcineni, nqamula futhi uxhume kabusha, bese uqalisa kabusha kanye. Uma iphrofayili isebenza kuphela emzamweni wokuqala, inkinga isekuphathweni kwezimfihlo noma ebunikazini bemizila, futhi zombili zishibhile ukuzilungisa manje kunaphakathi kosuku lokusebenza.