Kungani i-vpnc inqamuka ngemizuzu engama-24 nokuthi yini okufanele kushintshwe

Umhubhe wakho uyafa ngesikhathi esiphindayo, futhi lokhu kuyisibali sikhathi esizibika ngokwaso, hhayi ikhebula elibi. Amaminithi angamashumi amabili nane angamasekhondi angu-1440, inani eliyindilinga elithwalwa yiphrofayela noma inqubomgomo yesihloko. Bese lokho kulungiselelwa kwehluleka ku-concentrator efanayo isikhathi ngasinye ngenkathi zonke ezinye izixhumanisi zisebenza, futhi akukho ukuhlolwa koxhumano okushintsha lokho.

Izimo ezintathu zinquma ukuthi isiphi isibali sikhathi esakho: ukuthi iklayenti liyayeka yini iseshini engasebenzi, ukuthi ukushintshana kokuvuselela ukhiye kuyenqatshwa yini, nokuthi ingabe i-gateway yokuhumusha ibhale kabusha ukufakwa.

Yisiphi isibali sikhathi esiphethe ukunqamuka

Linganisa isikhathi phakathi kokuxhuma kabusha okungenani okuthathu ngaphambi kokuthinta isilungiselelo. Ukusabalala kwemizuzwana kusikisela ukulahleka koxhumano noma ukuzulazula okungenawaya; inani eliwela njalo phakathi kwemizuzwana embalwa ukusuka kophawu olufanayo likhomba inani lenqubomgomo. Ubude beseshini futhi busho ukuthi ubani oyiphethile, ngoba isikhathi sokuphelelwa kolayini kanye nokususwa ohlangothini lweseva kushiya imigqa yokugcina ehlukene kokuphuma kokulungisa amaphutha. Ukuxhuma kabusha okuthathu futhi kuveza ukuthi isikhathi siyashintsha yini, into okungeke kuyibonise isilinganiso esisodwa.

Bhala inombolo eceleni kwesihloko obukhuluma naso. Uma isikhathi sesizinzile, umsebenzi osele ukukhetha phakathi kwezizathu ezintathu, futhi ukushintsha isilungiselelo esisodwa ekuxhumaneni ngakunye yikho okugcina kuhlukaniseka.

Icala lokuqala: iklayenti liyayeka iseshini engasebenzi

I-vpnc isebenzisa ukuhlolwa kwayo kosihlobo ofile, futhi lokho kuhlolwa kungabulala iseshini i-concentrator esayibona njengesaphila, ikakhulukazi uma i-gateway yokuhumusha ihlezi phakathi kwakho kokubili. Ikhambi ohlangothini lweklayenti encwadini ukucisha isibali sikhathi endaweni bese uvumela isihloko sinqume ukuthi usihlobo usuhambile nini. Yomibili imigqa engezansi ingeyephrofayela ye-vpnc noma ingeyomugqa womyalo, futhi yomibili ayihlangene nezilungiselelo zokubethela.

DPD idle timeout (our side) 0
NAT Traversal Mode cisco-udp

Ukukhubaza i-DPD yeklayenti kususa isexwayiso esingelona iqiniso futhi kususa nokutholwa kwakho okuwukuphela kwasendaweni, ngakho kusebenzise wedwa bese ubheka ukuthi isikhathi siyashintsha ngempela yini.

Icala lesibili: ukuvuselela ukhiye kuyenqatshwa

Uma isikhathi siphila ngemuva koshintsho lwe-DPD, ukuvuselela ukhiye kwesigaba soku-1 kuba ngumfakeli. Izakhiwo zakudala ze-vpnc zaziphatha ukuvuselela ngokunganaki kunezamanje, futhi ukungavumelani okuvamile iqembu le-Diffie-Hellman. Ukuphoqelela iqembu isihloko esivele silamukela kuthatha umugqa owodwa nokuxhuma kabusha okukodwa, okukwenza kube ukuhlola okushibhile hhayi ushintsho lwenqubomgomo.

IKE DH Group dh5

Amagama eqembu avumelekile yi-dh1, dh2 ne-dh5. Iqembu elinqatshwa i-concentrator lidala ukwehluleka ngokushesha, futhi nalokho kusewulwazi: kukutshela ukuthi isihloko sinokukhetha futhi iqembu lokuqala cishe lalilungile.

Icala lesithathu: ukuhumusha kubhala kabusha ukufakwa

Ngemuva kwe-gateway yokuhumusha, ukufakwa kwe-UDP kwe-Cisco kanye nemodi esekelwe ezimisweni akukwazi ukushintshana. Ukukhetha okungalungile kuvame ukukhiqiza umhubhe osungulwayo, odlulisa ithrafikhi bese uphelelwa yisikhathi ngaphansi komthwalo, okufundwa njengenkinga yobubanzi bomgudu futhi akusiyo. Shintsha imodi kuphela, bese uxhuma kabusha futhi ulinganise ukunqamuka. Zama enye imodi ngemuva kokukhipha izimo ezimbili zokuqala.

Izingaphambili zineza ukudideka kwazo lapha. I-NetworkManager ngeke inikeze uhlobo lokuxhumana lwe-vpnc kuze kufakwe iphakethe le-plugin, futhi i-plugin engekho ibonakala njengenkinobho Engiza ephuzi hhayi njengephutha. Ingaphambili le-KDE ligcina amanani afanayo kuphrofayela yalo, ngakho qinisekisa ukuthi i-daemon ifunda lokho okukuhlehlile.

Iphrofayela exhumanisa kahle kusuka kumugqa womyalo kodwa engaxhumanisi kusuka kudesktop iyinkinga yengaphambili, hhayi inkinga yesibali sikhathi.

Qinisekisa ukushintshana okwehlulwayo ngaphambi koshintsho lwesithathu

Qalisa iklayenti ngokuphuma kokulungisa amaphutha futhi ufunde ukushintshana kokugcina ngaphambi kokunqamuka. Ukususwa kwesigaba soku-1 ngokuqondile ngaphambi kokunqamuka kusho ukuthi iklayenti livuselele ukhiye futhi lenqatshwa. Ukususwa kwesigaba sesi-2 endaweni efanayo kusho ukuthi umhubhe wadilizwa kusuka kolunye uhlangothi, futhi izilungiselelo zeklayenti lakho akuzona imbangela.

vpnc --debug 3 office

Futhi hlola i-daemon yesibili yenethiwekhi uma umhubhe usaphila kodwa ithrafikhi ima. Abaphathi ababili ababhala ithebula lokuhlela imizila bakhiqiza uphawu olufanayo kusuka kudesktop kanye nelogi ehluke ngokuphelele.