Yimaphi amaphrothokholi e-VPN uhlelo lwakho lokusebenza olukwaziyo kakade?
I-Windows, i-macOS ne-ChromeOS ngakunye kuza nohlu olufushane lwamashubhu. Buza isango mayelana nephrothokholi yalo nendlela yokuqinisekisa ngaphambi kokwengeza enye idrayiva.
Ngaphambi kokulanda elinye iklayenti, bheka ukuthi uhlelo lokusebenza selukwenzile ini kakade, ngoba impendulo ivamise ukwanela ukweqa isifaki ngokuphelele. I-Windows, i-macOS ne-ChromeOS ngakunye kuza nohlu oluqinile nolufushane lwamaphrothokholi amashubhu, futhi isango elikhuluma elilodwa lawo alidingi idrayiva eyengeziwe, isevisi noma indlela yokubuyekeza. Lokhu akunqunywa igama lomthengisi eliphepheni. Kunqunywa iphrothokholi, indlela iphoyinti lokugcina eliziqinisekisa ngayo, kanye nekheli elilindele lona.
Buza iphrothokholi, hhayi igama lomkhiqizo
Igama lomkhiqizo lisho okuncane kakhulu mayelana nalokho okudlula ocingweni. Amasango amabili adayiswa ngaphansi kwelebula elilodwa angadinga amashubhu ahluke ngokuphelele, futhi elilodwa lingamukela iklayenti elakhelwe ngaphakathi ngenkathi elinye lenqaba konke ngaphandle kwengosi yalo siqu. Abaphathi ababili abachaza ibhokisi elifanayo bangase bangavumelani futhi bobabili babe neqiniso, ngoba bachaza izigaba ezehlukene. Ishubhu elingezansi yilo elinquma ukuthi isifaki siyadingeka yini.
Buza imibuzo emithathu kumuntu ophethe isango: iyiphi iphrothokholi yeshubhu, iyiphi indlela yokuqinisekisa, futhi iyiphi ikheli kanye nesijobelelo se-DNS okufanele iklayenti likwamukele. Cela iphrothokholi ngegama, futhi uma impendulo ibuya njengegama lomkhiqizo, chaza ukuthi kungani udinga iphrothokholi. Lezo zimpendulo ezintathu zixazulula umbuzo weklayenti ngaphambi kokulandwa kwanoma yisiphi isofthiwe.
Kunesizathu sokuthi igama lomkhiqizo liphile emathikithini amaningi kangaka. I-URL yengosi yilokho abasebenzisi abakubonayo, futhi ishubhu alibonakali ngenkathi lisebenza. Ukubhala iphrothokholi kunothi lokudlulisa kuthatha umugqa owodwa futhi kususa ukungacaci kubo bonke abeza ngemuva.
Lapho uhlu olwakhelwe ngaphakathi luphela khona
Uhlu lwendabuko lufushane, futhi imiphetho yalo ibalulekile ukwedlula okuqukethwe. L2TP phezu kwe-IPsec ngokhiye owabiwe ngaphambili ngeke likhulume i-SSTP, futhi lowo mehluko unquma iklayenti. Ithebula lihlelwe ngeshubhu hhayi ngomthengisi, ngakho ungasesha iphrothokholi eshiwo isango.
| Tunnel | Windows | macOS | ChromeOS | Linux |
|---|---|---|---|---|
| PPTP | built in | removed in 10.12 | no | package |
| L2TP over IPsec, pre-shared key | built in | built in | built in | package |
| L2TP over IPsec, certificate | built in | built in | built in | package |
| SSTP | built in | no | no | package |
| IKEv2 | built in | built in | no | package |
| Cisco IPsec with XAuth | no | built in | no | package |
| OpenVPN | no | no | built in | package |
Funda ithebula ngokuqhathanisa nezidingo zesango hhayi nephepha. Uma impendulo iyi-L2TP over IPsec ngokhiye owabiwe ngaphambili, izingxenyekazi ezintathu zokuqala zixhuma ngaphandle kokufaka okunye okwengeziwe. Uma impendulo iyi-OpenVPN, i-ChromeOS kuphela emboziwe ngaphambi kokufaka noma yini. Iphrothokholi engabonakali kunoma yiluphi ukholamu olwakhelwe ngaphakathi iyisibonakaliso esithembekile sokuthi isifaki siyeza.
I-Linux iyikholamu emelana nokwenziwa kube ngokujwayelekile. Ukwesekwa kwayo kwephrothokholi kuhlala kumadimoni nasezithasiselweni okukhetha ukuzifaka kusigaba ukusabalalisa, ngakho isithombe esincane kungenzeka singakhulumi nelilodwa lazo kuze kube yilapho uzifaka khona, futhi ukusabalalisa okubili okunedesikithophu efanayo kungahluka.
Yakha iphrofayela kusuka emugqeni womyalo
Konke okubhalwa yiphaneli yegrafu kugcinwa endaweni ongafinyelela kuyo, futhi yikho okwenza iphrofayela elakhelwe ngaphakathi lenzeke ngezikhathi ezithile. I-Windows igcina amafayela e-VPN kuma-.pbk amafayela ngaphansi kwephrofayela yomsebenzisi nangaphansi kwe-ProgramData, futhi i-rasphone ingabala futhi ihlele amanqenqema angaboniswa uhlu lwenethiwekhi. Lokho kubalulekile lapho umshini ulungiselelwa ngeskripthi futhi akekho ozocindezela isihambi semininingwane. Kuchaza futhi ukuthi iphrofayela ingaba khona kanjani ngaphandle kokuvela ethreyini.
rasdial
rasdial "VpnName" alice
rasdial "VpnName" /disconnectUkuhlela i-.pbk ifayela ngesandla kuyasebenza, futhi futhi iyona ndlela esheshayo yokulilimaza, ngakho vumela ithuluzi libe ngumnikazi wefomethi. I-macOS igcina izinsizakalo zayo ekulungiselelweni kwesistimu, futhi i-networksetup izibhekisa kuzo ngegama lesevisi; amafulegi amaningi afuna ikheli esikhundleni segama lomhambuli, ngakho qala uxazulule iphoyinti lokugcina bese ugcina inani iklayenti elizolisebenzisa ngempela. Lowo mehluko uyaluma ngesikhathi sokwenza okuzenzakalelayo, ngoba iskripthi esisebenza ngekheli singehluleka ngegama, futhi iphutha libonakala sengathi isango eliphukile hhayi impikiswano enqatshiwe.
networksetup -listallnetworkservices
networksetup -getinfo "ServiceName"
networksetup -setmanualwithdhcprouter "ServiceName" 198.51.100.20Amagama ezinsizakalo asetshenziswa kwasendaweni futhi angahlelwa umsebenzisi, ngakho iskripthi esibhala ngekhodi eqinile i-Wi-Fi siyaphuka kumshini wokuqala osethwe kolunye ulimi. Funda igama kumyalo wohlu bese ulidlulisa esikhundleni sokuqagela.
Izitifiketi ngaphandle kweklayenti elikhethekile
Okunye ukusetshenziswa kudinga isitifiketi seklayenti futhi akukho okunye okukhethekile, futhi lesi yisimo esiphakathi okufanele sihlolwe ngaphambi kokwamukela idrayiva. Ukubeka isitifiketi esitolo septilatifomu kuyasekelwa; akusona isenzo esifanayo nokuphonsa impande yomthengisi ngaphakathi bese uthemba ukuthi iklayenti izoyithola. Okokuqala ukubeka ngamabomu; okwesibili ukuqagela okunamathiselwe ithikithi losizo.
Imininingwane ebamba abantu iwukuthi iyiphi indawo yokugcina efundwa iklayenti. Isitifiketi esitolo somsebenzisi asibonakali kuklayenti elilungiselelwe isitolo somshini, futhi umyalezo owutholayo uthi isitifiketi asikho, hhayi ukuthi siseduze okungalungile. Hlola zombili izitolo ngaphambi kokuphetha ngokuthi isitifiketi asilungile. Bhala ukuthi yikuphi okusetshenziswa ukulungiselelwa okusebenzayo, ngoba lelo nothi liphila isikhathi eside kunesitifiketi lapho umshini wakhiwa kabusha.
I-Windows ihlukanisa izitolo ezimbili ngokusobala, futhi i-macOS ihlukanisa i-keychain yokungena kusuka ku-keychain yesistimu. Amagama ahlukile, kodwa indlela yokwehluleka iyafana: isitifiketi esivumelekile iklayenti elingakaze lisibheke.
Yini ephoqa isifaki
Amanye amasango abopha iklayenti esitolo esiyimfihlo sezitifiketi, kumenzeli wesimo, noma ekushintsheni kokungena uhlelo lokusebenza olungeke likwazi ukukwenza. Ukusetshenziswa phezu kwengxenyekazi ye-Check Point, i-Cisco noma i-Fortinet kuvamise ukugcina lapho, futhi kukho iklayenti elakhelwe ngaphakathi akulona indlela emfushane. Okunye okungeyona ingxenye yomuntu wesithathu kungaxhuma futhi kwehlule umgomo, okwenza lokhu kube isinqumo sokuphepha hhayi sokunethezeka. Faka lokho okudingwa umgomo bese ubhala isizathu eceleni kwenguqulo yesifaki.
Leyo rekhodi iyingxenye abantu abayeqayo kanye nengxenye eyonga iviki kumphathi olandelayo: iphrothokholi, indlela yokuqinisekisa, umndeni wekheli kanye nesijobelelo esidingekayo, nomugqa owodwa wokululungiselela kuyo yonke imininingo yebhinari okwakufanele yengezwe. Yibeke lapho kuhlala khona amanothi esifaki hhayi emucu wengxoxo. Imigqa emibili yemibhalo ivimbela uphenyo oluphindwayo.