Imfihlo yeqembu le-vpnc noma ukungena kwakho: yiluphi uhlaka oluthatha ini?
Iphrofayela ye-vpnc icela i-ID yeqembu, imfihlo yeqembu nokungena kwe-XAuth, futhi abantu bafaka iphasiwedi ye-akhawunti ebhokisini elingalungile. Hlobanisa uhlaka ngalunye nomsebenzi walo.
Ngesikhathi sokuqala lapho othile ekunikeza iphrofayela ye-vpnc, ibhokisi lengxoxo lemininingwane yokufinyelela libuza izinto ezine futhi lifundeka sengathi lifuna iphasiwedi eyodwa. Akunjalo: imfihlo yeqembu eyabiwe ngaphambili nokungena kwe-XAuth komuntu ngamunye kungamavelu ahlukene anabanikazi abahlukene, futhi ukufaka iphasiwedi ye-akhawunti kuhlaka lweqembu kuveza ukwehluleka okubonakala njengephasiwedi embi hhayi njengebhokisi elingalungile. Ukuhlela lolu hlelo ngendlela efanele kuwumsebenzi wonke lapha. Iphrothokholi engaphansi iwumsebenzi wokufuduka womunye umuntu, ngakho-ke akukho kulokhu okuyimpikiswano yokwakha imigudu emisha ye-IKEv1.
Izimfihlo ezimbili, abanikazi ababili, ibhokisi elilodwa
Imfihlo yeqembu ingeyephrofayela yesango. Wonke umuntu oxhuma ngale phrofayela usebenzisa inani elifanayo, futhi yingakho ingakwazi ukuhlonza umuntu futhi ayikwazi ukuhoxiswa kukhompyutha ephathwayo eyodwa ngaphandle kokushintshwa kubo bonke abanye abasebenzisi bephrofayela. Igama lomsebenzisi nephasiwedi ye-XAuth kungokomuntu, futhi isango liyazihlola esigabeni sesibili ngemva kokuba uxhumano lwe-IPsec selumi ve.
Abantu bashiya ukwakheka kwezigaba ezimbili yikho. Ukwakhiwa komgudu nokuqinisekiswa komsebenzisi kungukushintshana okuhlukene okunokokufaka okuhlukene, ngakho-ke iklayenti elingafiki kunxusa lwemininingwane yokufinyelela alihlulekanga nhlobo ekungeneni. Funda ibhokisi njengezinsika ezimbili hhayi eyodwa: amanani ephrofayela yonke kwesobunxele, amanani omuntu siqu kwesokudla. Uma uxhumano luhluleka, isinsika osigcwalise ngemuva kwakho konke akuyona isinsika enecala ngokuzenzakalela.
Hlobanisa izinkundla nomsebenzi, hhayi nelebula
I-vpnc ibiza imiyalelo yayo ngegama emibhalweni yephrojekthi, futhi yonke ingxenye yobuso begrafu iyayiqamba kabusha. Humusha umsebenzi wenani ngalinye, khona-ke amalebula awasabalulekile:
| Directive | What it carries | Who owns it |
|---|---|---|
| IPSec gateway | Address or hostname of the remote VPN endpoint | Operator |
| IPSec ID | Group identifier selecting the profile on that gateway | Operator |
| IPSec secret | Group preshared secret, not an account password | Profile, shared |
| Xauth username and password | Credentials for the per-user stage after the tunnel | Person |
Ingxenye yobuso ebonisa «Igama lomsebenzisi» kanye «Nephasiwedi» eduze kwenkundla yeqembu ayilungile — lawa mazinga amathathu afanayo ngamagama ahlukene. Okwephukayo ukugcwalisa ibhokisi ngoba inani liyalingana khona. Imfihlo yeqembu enamathiselwe njengephasiwedi yomsebenzisi iqinisekisa iphrofayela bese ihluleka esigabeni somsebenzisi; iphasiwedi ye-akhawunti enamathiselwe njengemfihlo yeqembu ihluleka ngaphambili, ngaphambi kwanoma yisiphi isicelo, futhi ithumela abantu ukuba bayofuna izindonga zomlilo inkinga ehlala enkundleni yombhalo.
Into engeyona isihlonzi seqembu
Igama elithi iqembu limema ukufundwa okungalungile. Isihlonzi seqembu lapha siyisikhethi esitshela isango ukuthi yikuphi ukuhlelwa kwephrofayela okufanele kusetshenziswe; asisho lutho mayelana nobulungu bukhathalogi, futhi igama elifanayo ezinhlangothini zombili liyingozi kuze kube yilapho umqhubi eqinisekisa. Ukugunyazwa kwenzeka ngemva kokuphumelela kwe-XAuth, kunqunywa yilokho isango elilungiselelwe ukukubonisana nakho, futhi akukho kulokhu okubonakalayo ebhokisini leklayenti.
Ukuqapha okufanayo kuyasebenza kumfihlo yeqembu. Ukuyazi akusiyo ubunikazi, futhi ukuhambisa imfihlo eyodwa eqenjini kuyisinqumo sokusebenza esinemiphumela iklayenti elingakwazi ukukubonisa yona.
Xazulula umyalo ongaqondakali ngaphambi kokuxhuma
Amanothi okudlulisa amafa avame ukuba nomugqa ofana nokuthi «sebenzisa i-IP yomphakathi ekhethiwe». Leyo mvama ingase isho ikheli okulindele uhlu lwezimvume ngakolunye uhlangothi ukuthi ithrafikhi yakho ifike isuka kulo, lokho kuyisici sokuphuma senethiwekhi yomqhubi futhi akuhlangene nakancane nendawo yokugcina oyiprintayo enkundleni yesango. Buza ukuthi ikuphi kwalokhu okubili okushiwo ngaphambi kokuba inani liye ndawo. Uma kugcwaliswe ngokuhlanekezela, kuthumela iphakethe ngalinye ekhelini elingaphenduli neze, futhi isikhathi sokulinda esivelayo sifundeka njengechweba elivaliwe.
Cela izinto ezine ngesiteshi esiqinisekisiwe senhlangano: iyiphi iklayenti nephrothokholi esekelwayo, iyiphi indawo yokugcina okufanele isetshenziswe, yibuphi ubunikazi isango elizokwethula, nokuthi imininingwane yokufinyelela inikezwa kanjani. Gcina izimfihlo zangempela ngaphandle kwezithombe zesikrini, amathikithi namanothi okuxazulula izinkinga abiwe. Ungayivali imikhondo yokuqinisekisa isitifiketi futhi ungamanamathiseli uhlu oludala lwezinsimbi ukuze isevisi ehlelwe ngendlela ehlukile ibonakale ihambisana, ngoba uxhumano olusebenza kuphela ngokwenza buthaka ukuqinisekisa akulona uxhumano obucelwe ukuba lwakhiwe.
Gcina iphrofayela endala ithembekile
I-IKEv1 ayisasetshenziswa, futhi i-RFC 9395 iyidokhumenti okufanele icashunwe lapho kuvela umbuzo wokufuduka. Ukuhlela izinkundla ngempumelelo akusiyo ubufakazi bokuthi iphrothokholi ingeyedizayini entsha; okukuthengayo uxhumano olusebenzayo ngesikhathi ukushintshwa kuhlelwa, kanye nobubanzi obubhaliwe kanye nomnikazi walokho kufuduka.
Bese uqinisekisa ngokumelene nesidingo hhayi ngokumelene nebhokisi. Ngemva kokuxhuma, qinisekisa ukuthi isixhumi sangaphakathi somgudu sinekheli elilindelekile nokuthi indawo yangaphakathi ihanjiswa ngayo; uma isidingo sokuqala sisho ikheli lokuphuma kuhlu lwezimvume, qinisekisa nalelo kheli, ngoba lokho kuyiqiniso elihlukile kunokuthi umgudu umile. Iphrofayela eqinisekisa ngendlela efanele futhi ingahanjisi lutho isehlulekile umsebenzi eyadalelwa wona.