Ukubhalisa umsebenzisi we-VPN: qala ngokuthola umnikazi wobuwena
Ukufaka umsebenzisi we-VPN kuqala ohlelweni lobuwena, hhayi ku-shell. Thola ukuthi iyiphi i-backend eqinisekisa i-akhawunti, nikeza ilungelo futhi uhlele ukuhoxiswa.
Othile ucela ukufinyelela kwe-VPN, futhi umcabango wokuqala ukusebenzisa adduser kuseva. Lowo mcabango ulungile kuphela eqeqebeni elincane lokusetshenziswa. Ngaphambi kokudala noma yini, vula ukucushwa kweseva futhi uthole ukuthi iyiphi imikhiqizo esebenza lapho nokuthi iqinisekisa kuphi ubufakazi, ngoba i-akhawunti ingaba kusizindalwazi somkhiqizo, kumhlinzeki wobuwena noma kusitaki sokuqinisekisa sasekhoja uqobo. Ukudala uhlobo olungalungile lwe-akhawunti kushiya umuntu enokungena okusebenzayo futhi engenawo umhubhe.
Iphrofayela yeklayenti ethi OpenVPN ichaza iphrothokholi, hhayi uhlelo lobuwena olungemuva kwayo.
Qala ngeseva, hhayi nge-adduser
Qala ngokukhomba umkhiqizo. I-Community OpenVPN iyidaemon kanye nanoma yikuphi ukuqinisekisa okukuxhumise kuyo, kuyilapho i-Access Server iwumkhiqizo onesendlalelo sakho sabasebenzisi. Cela ukucushwa, igama leyunithi kanye nohlu lwamaphakheji, futhi uhlole ukuthi ikhona yini i-interface yewebhu yokuphatha abasebenzisi. Bese ubheka ukuthi iphrofayela esetshenzisiwe ilindele ukuthi amaklayenti afakaze kanjani ukuthi angobani: isitifiketi, igama lomsebenzisi nephasiwedi, noma kokubili. Impendulo leyo isho uhlelo olungumnikazi we-akhawunti.
Kungemva kwalokho kuphela lapho ibinzana lokudala umsebenzisi linencazelo. Ekufakweni okunezitifiketi kuphela, kusho ukukhipha ubuwena bedivayisi ngenqubo evunyiwe, futhi ukungena kwe-Unix akushintshi lutho. Ekufakweni okunephasiwedi, kusho i-backend eqinisekisa ngempela iphasiwedi.
Ama-backend amane, izindawo ezine zokudala i-akhawunti
Ukuqinisekisa kwasendaweni kwe-Access Server kugcina ama-akhawunti kusizindalwazi sayo, ngakho i-interface yokuwadala ingeyomkhiqizo, hhayi eyesekhoja. I-PAM idlulisela ukuqinisekisa kusitaki sohlelo lokusebenza, yingakho i-akhawunti ye-Unix yasendaweni ingaba yingxenye yokubhalisa lapho insiza ikhethe leso sitaki. I-LDAP, i-RADIUS ne-SAML zihambisa ukuqinisekisa kusiza sangaphandle, lapho kuhlala khona ukuhlinzeka, inqubomgomo yephasiwedi kanye ne-MFA. I-Access Server isengagcina izitifiketi nezimvume kumsebenzisi ngamunye kuzo zozine izimo, futhi yikho okwenza ukwehlukanisa kudide.
Hlola indlela esebenzayo yalo msebenzisi othile, hhayi okuzenzakalelayo komhlaba wonke. I-Access Server 2.10 nangaphezulu ingasebenzisa izindlela zokuqinisekisa ezihlukene ngeqembu noma ngomsebenzisi, ngakho okokuzenzakalelayo kwasendaweni akufakazi ukuthi i-akhawunti ephambi kwakho iqinisekiswa kwasendaweni.
Ilungelo yisinqumo esihlukile
Ukuqinisekisa kuphendula ukuthi umuntu ungubani; ilungelo liphendula ukuthi angafinyelela kuphi. Zigcine njengezinyathelo ezimbili, ngoba ukungena okuphumelelayo akukhona ukunikeza. Nika ngamabomu imizila ehlosiwe, izimvume zezinsiza kanye namalungelo okuphatha, futhi uqinisekise ukuthi ukufinyelela okungahlobene kuhlala kunqatshiwe. Lapho ukufakwa kusekela ubuwena bomuntu ngamunye, khipha eyodwa kumuntu ngamunye esikhundleni sokudlulisela iphrofayela yomunye, ngoba iphrofayela eyabiwe ayikwazi ukuhoxiswa kumuntu oyedwa.
Izinto zeklayenti nazo zibalulekile. Iphrofayela yokungena okuzenzakalelayo nokungena komsebenzisi okusebenzisanayo kumelela ubudlelwano bokuqinisekisa obuhlukene, futhi ukushintsha okukodwa ngenye kushintsha lokho iseva ekuhlola ngempela.
Ukuhoxisa ukufinyelela kuyingxenye yokubhalisa
Bhala abanikazi abathathu ngesikhathi kwakhiwa umsebenzisi: ubani oqinisekisa i-akhawunti, ubani ogunyaza ukufinyelela kwe-VPN, nokuthi iyiphi idivayisi noma iphrofayela emelela ukuxhumana. Laba bangaba yizinhlelo ezintathu ezihlukene, futhi uhlelo lokuhoxisa olusho olulodwa kuphela lushiya indlela ivulekile. Lapho umuntu ehamba, susa ilungelo kumnikazi walo futhi uhoxise yonke imininingwane yokufakazela eyakhishwa kumnikazi wayo. Ukususa ifayela elilandiwe akukhona ukuhoxisa, futhi nokususa umbhalo wasendaweni akukhona uma ubuwena bangaphandle busaqinisekiswa.
Bese uhlola ukubhalisa njengoba umhlaseli engenza: xhuma kanye ngobuwena obusha, qinisekisa ukufinyelela kusinsiza esihlosiwe, futhi uqinisekise ukuthi insiza engahlobene isenqaba. Ukuxhumana kokuqala okusebenzayo kanye nokuhlolwa okungalungile kuwukubhalisa okuqediwe.
Gcina irekhodi kanye nephrofayela eliyeyayo. Umcwaningi olandelayo uzobuza ukuthi ubani owayengaxhuma phakathi nenyanga ethile, futhi impendulo isekhona kulabo banikazi abathathu.