Iyiphi iphrothokholi engemuva kwaleyo Mac VPN iphrofayela egciniwe?

Othile ubiza ukuxhumana kwe-Mac ngokuthi „i-VPN yasehhovisi“, ilebula iyasinda ekufudukeni kweseva kabili, futhi wonke umuntu usayibiza nge-VPN yasehhovisi isikhathi eside ngemva kokuba iphrothokholi isishintshile. Igama liyisiteketiso esigcinwe eceleni kwesethaphu; akubona ubufakazi balokho i-Mac exoxisana ngakho. Ukufunda uhlobo olushiwo kudinga inkambu eyodwa, futhi ukuhlukanisa lolo hlobo olugciniwe nesikhathi esiphilayo kudinga isinyathelo esisodwa. Nakhu ukulandelana okugwema ukuqagela.

Ilebula iyisiteketiso, i-payload isho uhlobo

Isevisi ye-VPN ye-macOS iyingxenye yesethaphu yesistimu enegama elibonisiwe, iklayenti elingumnikazi kanye neqoqo lezilungiselelo ezinohlobo. Igama elibonisiwe ingumbhalo okhululekile, ongalungiseka yinoma ubani owakha leyo ngxenye, futhi iyona ngxenye abasebenzisi abayibona kubha yemenyu. Izilungiselelo zithwala amaqiniso: uhlobo lwalokuxhumana, i-gateway, nendlela yokuqinisekisa. Akukho okugcina lezi zinto ezimbili zihambisana, yingakho iphrofayela ebizwa ngokuthi „ihhovisi L2TP“ ingaba isevisi ye-IKEv2.

Kokuxhumana okwakhiwe mathupha, uhlelo lokusebenza olungumnikazi noma iphaneli ye-VPN yesistimu uqobo kubonisa lezo zilungiselelo. Ku-Mac elawulwayo, iphrofayela ingeyomphathi, futhi isinyathelo esifanele ukucela isifingqo esingeyona imfihlo esikhundleni sokuhlela i-payload elawulwayo. Zombili lezi zimo zibukeka zifana kubha yemenyu kodwa ziphatha ngokuhluke ngokuphelele ngaphansi. Enye ingeyakho ukuyihlola nokuyishintsha; enye isetshenzisiwe futhi izobuyiselwa ekuhlolweni okulandelayo.

Lo mehluko ubalulekile ngoba isethaphu elawulwayo nelomuntu siqu zilawulwa ngezindlela ezihlukene. Iphrofayela efakwe ngabaphathi izoshintshwa noma isetshenziswe futhi, ngakho ukuhlela kwasekhaya kuyahluleka noma kubuyele emuva buthule. Cela umnikazi uhlobo, ubunikazi be-gateway nendlela yokuqinisekisa esikhundleni sokwenza ubunjiniyela obuhlanekezelwe befayela ongekho ngaphansi kwakho.

Funda i-VPNType ngaphambi kwanoma yini enye ku-payload

Isikimu se-payload ye-VPN elawulwayo se-Apple sisho uhlobo lokuxhumana kukhiye VPNType, ngaphakathi kwesichazamazwi esine-PayloadType engu-com.apple.vpn.managed. Inani liwuphawu olufushane olufana ne-IKEv2, IPsec, L2TP noma VPN, futhi konke okunye ku-payload kuchazwa ngokwalolo phawu.

<key>PayloadType</key>
<string>com.apple.vpn.managed</string>
<key>VPNType</key>
<string>IKEv2</string>
<key>IKEv2</key>
<dict>
  <key>RemoteAddress</key>
  <string>vpn.head-office.example</string>
  <key>RemoteIdentifier</key>
  <string>ikev2.head-office.example</string>
</dict>

Le ngxenye iyisibonelo, ayifakwa: iyingxenye eyodwa yohlu lwe-payload, isuswe kuyo imethadatha yephrofayela nezitifiketi ezidingwa ukusetshenziswa kwangempela. Yifunde ngokuma kwayo, hhayi ngokuqukethwe. Qaphela futhi ukuthi i-RemoteAddress ne-RemoteIdentifier ziyizinkambu ezihlukene ezinemisebenzi ehlukene, ngisho noma ukusetshenziswa kuzinikeza uchungechunge olufanayo.

Inani elidala njenge-PPTP lingase lisabonakale efayeleni elidala ngaphandle kokuba ukukhetha okunikezwa yi-macOS yamanje kokuhlela okusha. Ukuthola uphawu kuphrofayela egciniwe kufakaza ukuthi kwakubhalwe ini, hhayi ukuthi uhlelo lokusebenza lusazokwamukela ini.

Izinhlobo ezenziwe ngesandla zidinga i-VPNSubType nohlelo olungumnikazi

Lapho i-VPNType iyi-VPN, i-payload kufanele iphinde ithwale i-VPNSubType, ekhomba isengezo noma umhlinzeki we-Network Extension osebenza ngokuxhumana. Yileso sikhombi esihambisa ukuxhumana kuyiklayenti elithile, ngakho uhlobo oluncane olungalungile lukhiqiza iphrofayela efakwayo bese yenqaba ukuqala.

Kubahlengikazi abasekelwe ekwandisweni kohlelo, isikhombi singesohlelo oluyiqukethe hhayi igama lokwandisa eliqageliwe, futhi yilo mininingwane abantu abavame ukuliphutha lapho behlela iphrofayela ngesandla. Ngisho nohlobo oluncane olulungile luchaza iklayenti, hhayi iphrothokholi yocingo, indlela yokuqinisekisa noma inqubomgomo yokufinyelela kude ezosetshenziswa yilelo klayenti.

Ngakho i-payload ebonakalayo ikutshela ukuthi iyiphi isofthiwe engumnikazi wokuxhumana nokuncane okunye. Ukuze wazi ukuthi ixoxisana ngani, funda imibhalo yalowo mhlinzeki kanye nezilungiselelo ezilungisiwe. Ukukopisha uhlobo oluncane kuphrofayela yenyé inhlangano akusiyo indlela yokuhlela; kuwukuqagela okwenzeka kuphela ekuhlaziyweni.

Bhala lokho i-Mac ekulungise ngempela

Ngaphambi kokufunda noma iyiphi ifayela, buza isistimu ukuthi yiziphi izinsizakalo ezikhona nokuthi zisesimweni sini. Ukubuka komugqa womyalo kushesha kunokuchofoza amaphaneli futhi kuphrinta uhlobo eduze kwengxenye ngayinye.

scutil --nc list
scutil --nc show "Office VPN"

Umyalo wokuqala ubhala izinsizakalo ze-VPN ezilungisiwe kanye nesimo sazo samanje, owesibili uprinta izilungiselelo zensizakalo ekhethiwe, kuhlanganise uhlobo nekheli leseva ezoxhumana nayo. Qhathanisa lelo kheli ne-gateway okwathiwa ulindele, ngoba ingxenye endala ekhomba kumsingathi osewuthathwe umhlalaphansi inkinga yefa evamile.

Le miyalo ibonisa isethaphu nesimo; ayifakazi ukuthi umhubhe uthwala ithrafikhi. Uma insizakalo inqanyuliwe, okukhishwayo kuchaza inhloso hhayi isikhathi esisebenzayo. Insizakalo exhunyiwe engenayo ithrafikhi ingenye inkinga futhi, ngokuvamile ukuhlela kwemizila noma i-DNS hhayi uhlobo lwephrothokholi. Gcina lokhu kubona okuthathu kuhlukene, kungenjalo ukuxilonga kuzobuyela ekuqageleni.

Gcina izilungiselelo ezigciniwe zihlukile kwisikhathi esiphilayo

Iphrofayela egciniwe isitatimende senhloso. Ayibonisi ukuthi i-gateway isanikeza leyo nsizakalo, ukuthi le phrofayela iyona esebenzayo, noma ukuthi isikhathi sixoxisane ngempumelelo. Lezo ziyimibuzo emithathu ehlukene futhi ngayinye inobufakazi bayo.

Sebenzisa ukubuka kwesimo komnikazi noma amathuluzi okuxilonga ukuze ukhombe ukuxhumana okusebenzayo nobunikazi obethulwe yi-gateway. Ukuskena kwemigudu noma isitifiketi esibonwe kusayithi engahlobene akuphenduli imibuzo yomibili, futhi igama elivamile lesitifiketi alilingani nesikhombi esikude esilindelekile.

Uma uhlobo olugciniwe lungasahambisani nalokho okusekelwa yi-gateway, thola iphrofayela yokushintsha kumnikazi wayo. Ukushintsha uchungechunge lohlobo akukuhumushi izitifiketi phakathi kwephrothokholi futhi akwenzi ukuhlela kokuqinisekisa okukodwa kube okunye. Yabelana ngesifingqo ngomzila wokusekela ogunyaziwe futhi, ngoba isethaphu esithunyelwe ngaphandle singathwala izitifiketi nezinkinobho zangasese ezingakaze zidingeke esicelweni sokusekela.