vpnc, OpenConnect noma isigaxa se-AnyConnect: iyiphi okufanele uyikhethe?
Ukungena kumenyu akulona ukuhambisana. Qondanisa iphrothokholi nokugeleza kokuqinisekisa okuvunyiwe ngaphambi kokufaka enye ipulagi ehambisana ne-Cisco.
Ukufaka ipulagi ngemva kwelinye kuze kuxhumane okuthile kungamosha intambama yonke, ngoba i-«Cisco VPN» ichaza okungenani izinhlelo ezintathu ezihlukene. Iphrofayela endala enesimfihlo seqembu ne-XAuth akuyona inkonzo efanayo negesi elihambisana ne-AnyConnect, ngisho noma inhlangano efanayo isebenzisa zombili. Ipulagi kufanele ihambisane nephrothokholi nokugeleza kokuqinisekisa, hhayi uphawu lomhlinzeki. Ukungena kumenyu kusho kuphela ukuthi yikuphi ukuhlanganiswa okukhona, akusho neze ukuthi iyiphi igesi ezoyamukela.
Buza umphathi wegesi izinto ezimbili: iyiphi iphrothokholi, nokuthi iyiphi iklayenti evunyiwe yayo.
Ukuhlanganiswa okuthathu, imigomo emithathu ehlukene
I-NetworkManager izibala njengokuhlanganiswa okuhlukene. I-NetworkManager-vpnc ihlanganisa i-IPsec endala ehambisana ne-Cisco. I-NetworkManager-openconnect inikeza ingaphambili elisekelwe ku-OpenConnect kumaphrothokholi asekelwayo, kuhlanganise ne-AnyConnect. Isigaxa se-AnyConnect esibalwe ngokwahlukile sincike ekutheni iklayenti eliyimfihlo lifakwe futhi lilungiselelwe kuqala.
Lokhu akuzona izipelingi ezahlukene zefayela elilodwa elisebenzayo. Ukufaka okukodwa akwenzi ezinye zisebenze, futhi ukungena okubonakala kumenyu kuyiqiniso lesixhumanisi, hhayi isiqinisekiso sokuhambisana.
Ukuqinisekisa kunquma okungaphezu kokuthutha
Ukuthutha okuhambisanayo kuyisiqalo kuphela. Ukungena kungase kudinge isitifiketi, ukudlulisela kusiphequluli, isici sesibili, noma ukuhlola isimo sendawo yokugcina okungakwenzi ingaphambili lenhlangano yesithathu. I-OpenConnect ibhala izindlela ezimbalwa zokuqinisekisa, kodwa uhlu lwezici akusona isethembiso sokuthi yonke igesi iyamukela yonke ingaphambili. Imfihlo yeqembu evela kuphrofayela endala akumele neze inamatheliswe emkhakheni wokuqinisekisa ongahlobene nawo ngoba nje ibhokisi lemfihlo lalibukeka lifana.
Thola iphrofayela nokudluliselwa kwezimpawu zokufinyelela kweklayenti evunyiwe. Ukuhumusha ngokwesimo sokubuka yiyo indlela izimpawu zokufinyelela ezigcina zisendaweni engalungile.
Ukunakekela kuyingxenye yokukhetha
Idokhumenti ye-NetworkManager uqobo imaka ipulagi ye-vpnc njengenganyathelwanga futhi iphakamisa i-NetworkManager-libreswan njengenye yezinto ezingase zithathe indawo yomndeni ofanayo wephrothokholi i-IKEv1. Iphinda ixwayise ukuthi amaphrofayela kufanele akhiwe kabusha nokuthi ukulingana kwesici ngasinye akukahlolwa. Lokho kuwukuqondisa, hhayi ithuluzi lokuguqula.
I-IKEv1 uqobo isiphelelwe yisikhathi. Okokuxhumana okudala okuvunyiwe, hlukanisa umbuzo wesikhathi esifushane wokuthi iyiphi iklayenti okufanele isetshenziswe nombuzo wesikhathi eside wokuthi igesi izoshintsha nini iphrothokholi.
Amaphakethe ahlukanisa inkonzo nomhleli
Ipulagi ye-NetworkManager ngokuvamile ifika ngezingxenye ezimbili: ingxenye yohlangothi lwensiza eyakha umhubhe kanye nokuhlanganiswa komhleli okwenza ideskithophu ikwazi ukuyilungiselela. Izisekelo zihlukanisa futhi ziqambe la maphakethe ngendlela ehlukile, futhi ukufaka iklayenti yomugqa womyalo kuphela kungase kushiye umhleli ngaphandle kwesimo. Hlola izingxenye zombili ohlwini lwamaphakethe okusatshalaliswa kwakho, futhi gcina inguqulo yesikhathi sokusebenza ihambisana nenguqulo ye-NetworkManager ehlangana nayo.
Iklayenti ezimele esebenzayo ifakazela ukuthi iphrothokholi iyasebenza. Ayifakazeli ukuthi ukuhlanganiswa kwedeskithophu kufakiwe.
Bhala isivumelwano phansi
Impendulo yomphathi kufanele inikeze imigqa emihlanu: iphrothokholi, iklayenti noma ipulagi evunyiwe, ukugeleza kokungena, amaphakethe adingekayo, kanye nomnikazi ogcina igesi. Uma lokhu sekubhaliwe, ukwehluleka okulandelayo kunendawo yokuqala esikhundleni sohlu lwamapulagi okuzanywa.
Uma impendulo ithi «noma yini exhuma», indawo inenkinga yedokhumenti ezohlala isikhathi eside kunaleli thikithi. Buza futhi unokungena okuthile kumenyu phambi kwakho.