Isihlungi somgudu we-VPN noma umthetho we-IPsec: i-Windows iphoqa imbobo kuphi

Umzila ubona indawo ekuyiwa kuyo, hhayi insizakalo. Nquma ukuthi udinga isihlungi sokufinyelela kuphrofayela ye-VPN noma umthetho we-IPsec odinga ukuvikelwa komgudu.

Umsebenzisi oyedwa we-VPN ku-Windows kufanele afinyelele i-HTTPS kuseva futhi angafinyeleli i-SMB kuleyo seva, futhi umzila awukwazi ukusho lokho. Zombili izicelo zithwala ikheli elifanayo lendawo ekuyiwa kuyo, ngakho isiqalo esithumela umgudu emhubeni sithwala nomgudu obuwufuna ukawukhipha. Ukuhlukanisa kufuna umthetho ohlola okuthile okucole kakhulu kunendawo ekuyiwa kuyo.

Izinhloso ezimbili ezihlukene zakhiwa ngezindlela ezimbili ezihlukene ze-Windows. Ukuzixuba kukhiqiza inqubomgomo ebukeka iphelele kodwa eqhuba ingxenye kuphela yalokho obukade ukusho.

Umzila awukwazi ukuhlukanisa izinsizakalo ezimbili ekhelini elilodwa

Ukuhlelwa komzila we-VPN kwemvelo kusekelwe eziqalweni: kunquma ukuthi yiziphi izindawo ekuyiwa kuzo ezihamba emhubeni futhi yiziphi ezihlala ngaphandle. Iyithuluzi elifanele lokugcina isethi encane ngaphakathi kanti enye ingaphandle, futhi ngokwakhiwa kwayo ayiboni izimbobo. Isihlungi somgudu kuphrofayela ye-VPN sengeza isilinganiso sesibili: sihambisa iphrothokholi, ikheli elikude kanye nembobo ekude kulokho okungawela leso sixhumi. Umthetho we-IPsec usebenza endaweni yesithathu futhi uveza ukuthi yimiphi imigudu edinga ukuvikelwa nokuthi iqinisekiswa nabani. Zontathu ziphendula imibuzo ehlukene futhi akukho eyodwa ethatha indawo yezinye.

Qala ngokubhala umusho obuwuhlosile. Vumela i-HTTPS kuphela uwumusho wokufinyelela, kanti funa i-IPsec ye-HTTPS uwumusho wokuvikela, futhi kokubili kuholela ekuhlelweni okuhlukene.

Umkhawulo wokufinyelela nemfuno yokuvikela kuyahlukana

Umkhawulo wokufinyelela usho ukuthi yini engasebenzisa isixhumi, futhi uqhubeka ngokuvumela iqoqo bese wenqaba konke okunye. Imfuno yokuvikela isho ukuthi yimiphi imigudu okufanele ibe shifriwe futhi iqinisekiswe, futhi iqhubeka ngokuxoxisana ngezinhlangano zokuphepha ezihambisana nayo. Eyokuqala ikhiqiza isicelo esivinjiwe lapho into ingekho ohlwini, kanti eyesibili ikhiqiza uxhumano oluthwala ukuvikelwa okudingekayo noma olungasungulwa. Ukuthatha okunye njengokunye kuyindlela inqubomgomo egcina ngayo ingavimbi lutho noma ingavikeli lutho.

Umphumela ongokoqobo ukuthi uhlu lwezihlungi luyiqoqo elivaliwe. Uma uhlu lukhona kuphrofayela, umgudu kuleso sixhumi ongahambisani nanoma yisiphi isingeniso uyenqatshwa, ngakho i-DNS, ukushintshana kokuqinisekisa kanye nanoma yikuphi ukuncika okudingwa uhlelo kudinga izingeniso zako. Ukwengeza umthetho owodwa obanzi ukuthulisa ukwenqatshwa kuvula kabusha isixhumi sonke futhi kususa umkhawulo ngokuthula. Uhlu kufanele lube lufushane ngangokuvunyelwa yimfuno futhi luphelele ngangokudingwa uhlelo.

Akha uhlu lwezihlungi njengeqoqo eliphelele

Amaphrofayela e-VPNv2 athwala uhlu lwezihlungi ngokuhlukile kuhlu lwemizila, futhi izingeniso zalo ziyizici zephrofayela hhayi imiyalo. Esibonelweni se-HTTPS isingeniso sidinga iphrothokholi 6, ikheli elikude kanye nembobo ekude, okusetshenziswa ngesiteshi sokuphatha noma i-ProfileXML yohlobo lwephrofayela olusetshenziswayo. Incazelo yesihlungi somgudu we-VPNv2 yakwa-Microsoft ithi izimo ngaphakathi komthetho owodwa ziyahlangana kanti izihlonzi zemithetho ezihlukene zisebenza njengezinye izindlela.

TrafficFilterList/0/Protocol            = 6
TrafficFilterList/0/RemoteAddressRanges = 10.60.4.20/32
TrafficFilterList/0/RemotePortRanges    = 443
RouteList/0/Address                     = 10.60.4.0/24

Amanani ezimbobo kulolo hlu achaza imbobo yensizakalo ekugcineni okukude, futhi imbobo yasendaweni kufanele ihlale ingenamkhawulo ukuze imbobo yomthombo yesikhashana yeklayenti ingahlungwa. Ukwenza lokho ngokuphambene kukhiqiza umthetho ongahambisani nalutho kanye nendida ethatha intambama yonke.

Bhala umzila nesihlungi njengezinqumo ezimbili ezihlukene. Umzila unquma ukuthi le seva ifinyelelwa ngomhubo, futhi isihlungi sinquma ukuthi yiziphi izinsizakalo ezingasetshenzisa lowo mzila.

Fakazela yomibili imiphumela ngezicelo ezimbili

Hlola umgudu ovunyelwe nomgudu onqatshiwe ngokwahlukana, futhi funda ukwehluleka esikhundleni sekhasi elingekho. Ukwenqatshwa okufika ngokushesha kuyisinqumo senqubomgomo, kanti ukuphela kwesikhathi cishe kuwumzila ongekho noma insizakalo engalaleli. Imiyalo engezansi isebenzisa zombili izicelo futhi ikhombisa imithetho esebenzayo.

Test-NetConnection 10.60.4.20 -Port 443
Test-NetConnection 10.60.4.20 -Port 445
Get-NetIPsecRule -DisplayName *Vpn*
Get-VpnConnection -Name Corp

Ukwenqatshwa okusheshayo kuhlelo lwe-SMB kanye nokuphumelela kuhlelo lwe-HTTPS umphumela isihlungi obekufanele siwukhiqize. Ukwenqatshwa kuzo zombili izimbobo kusho ukuthi uhlu luntula into edingwa iseshini, futhi ukuphela kwesikhathi kuzo zombili kukhombisa ukuhlelwa komzila hhayi ukuhlunga. Uma imigudu evikelwe ikhombisa akukho nhlangano yokuphepha kokuphuma kwe-IPsec, imfuno yokuvikela ayigcwaliseki ngisho lapho uxhumano luphumelela. Funda konke ukuphuma okune ndawonye, ngoba ngakunye kukodwana kusekela indaba ehlukile.

Rekhoda iphrofayela esebenzayo, iqoqo lemithetho kanye nenqubomgomo yohlangothi olulandelayo kanye nemiphumela. Amanothi omlando okuhambisana mayelana namaklayenti amadala e-Windows awachazi ukuthi izici zephrofayela elawulwayo zanamuhla zisekela ini esangweni esithile. Ukuziphatha okuncike enguqulweni kungokokurekhodiwe, hhayi okokucabanga.

Izihloko ezihlobene