Kungani ingosi yokungena ivimba i-VPN yakho, nokuthi ungaphinda ungena kanjani
I-Wi-Fi yomphakathi igunyaza idivayisi yakho ngaphambi kokuba nephakethe elilodwa liphume kuyo. Ingosi ilahla ini, kungani i-VPN yakho ikubika kabi, nokulandelana okukuxhuma futhi.
Kunethiwekhi evulekile, iphoyinti lakho lokufinyelela alikhiphi amaphakethe ku-inthanethi nje. Iphoyinti lenqubomgomo elingenhla lihlola ukuthi idivayisi yakho isigunyaziwe yini, futhi kuze kube yilapho, cishe konke kuyalahlwa. Iklayenti lakho le-VPN lifunda lokho kuthula njengesiphakeli esifile. Akuvamisile ukusho lokho: i-WireGuard iphinda ukuxhawulana kungena emoyeni, OpenVPN ibika ukuphela kwesikhathi sokuxhumana, futhi i-IKEv2 ibuya njengephutha 809 mayelana nesiphakeli esikude esingaphenduli.
Ingosi ilawula ini ngempela
Ingosi yokungena yizinto ezimbili ezixhunyiwe: iphoyinti lesinqumo senqubomgomo nesiphambukisi. Lapho idivayisi yakho ixhuma futhi ithola ukuqashwa kwe-DHCP, inethiwekhi ikubeka esimweni esingaphambi kokugunyazwa.
Leso simo siqoqo lemithetho yodonga lomlilo. Ngokuvamile ivumela i-DNS futhi ivumele i-HTTP noma i-HTTPS ohlwini olufushane lwabasingathi bengosi, futhi ilahle konke okunye. Uhlu oluvunyelwe iyinsimu ebiyelwe ngodonga, futhi cishe ayikaze ihlanganise iphoyinti lokugcina le-VPN.
Akukho kulokhu kulahla okuhloniphekile. Amaphakethe aqondiswe kusiphakeli se-VPN ayalahlwa esikhundleni sokunqatshwa, ngakho iklayenti alitholi i-ICMP unreachable noma i-TCP reset, lithola ukungabikho kwempendulo kuphela. Kuye ngomkhiqizi, isiphambukisi singaphendula kumbombo 80 ngokuphambukisa ekhasini lokungena kuyilapho umbombo 443 ulahlwa noma ubanjwa. Ukuphambukisa kulula ukukubona ngoba kuthwala impendulo evamile ye-HTTP; ukubamba ku-443 kudinga isitifiketi isiphequluli sakho esizokwenqaba ukusithemba.
Ukuvunywa ngokwako ngokuvamile kuxhunywe nekheli le-MAC ledivayisi, ngezinye izikhathi ne-IP eqashiwe, futhi kuhlala kuthebula lamaseshini elinesibali sikhathi. Ukungena kudala umugqa. Umthetho wodonga lomlilo ovumela ukuhamba kwakho ukhona kuphela ngesikhathi umugqa lowo ukhona, futhi yingakho yonke inkinga ibuya kamuva ngaphandle kokuthi kushintshe lutho ohlangothini lwakho.
Kungani ukuxhawulana kwe-VPN kufa ngaphambi kokuba kuqale
Iphrothokholi ngayinye inokuhamba kwayo, futhi udonga lomlilo olungaphambi kokugunyazwa luhlakaza ngalunye ngendlela ehlukile. I-IKEv2 ku-Windows naku-iOS ihamba phezu kwe-UDP 500 ne-UDP 4500; ukulahla kuleyo mibombo kuvela njenge-809, noma njengokwehluleka okufana nokuxazululwa kwamagama kumaklayenti abika izigaba ngokwehlukana. I-OpenVPN phezu kwe-UDP 1194 ihlala isesimweni sokuxhuma kuze kuphele isikhathi sayo. I-OpenVPN phezu kwe-TCP 443 iyicala elithakazelisayo, ngoba ingosi ingaqeda ukuxhawulana kwe-TCP bese iphendula ngekhasi layo lokuphambukisa, ngakho ubona iphutha le-TLS esikhundleni sokuphela kwesikhathi.
I-WireGuard ikhombisa indlela ngokucacile. Iyi-UDP kuphela ngokwakhiwa, ngaphandle kwesipele se-TCP, ngakho udonga lomlilo olulahla i-UDP engaziwa lususa ukuhamba ngokuphelele. Iklayenti liqhubeka lithumela ukuqala kokuxhawulana ngesikhala esikhulayo futhi libika ukuxhawulana okungapheli. Akukho lutho kulowo mlayezo okhuluma nge-Wi-Fi, futhi akukho lutho okusikisela ukuthi kufanele uvule isiphequluli.
Amapulatifomu azama ukubona isimo ngaphambi kwe-VPN yakho. I-Windows ithola i-URL eyaziwayo ukuze inqume ukuthi izokhombisa isaziso sokungena, i-Android icela iphoyinti lokugcina okufanele liphendule nge-204 No Content, futhi amadivayisi e-Apple avula iwindi elincane lenethiwekhi yokungena. Lezo zivivinyo ziyasebenza ngoba ingosi iphendula ngokuphambukisa esikhundleni somzimba olindelekile. Ukuziphatha okufanayo kuchaza ukuthi ingosi ingabonakala iphilile ngokuphelele kuyilapho umhubhe wakho ufile: isivivinyo nomhubhe kuhlolwa ngemithetho ehlukile.
Ukuqothuka kweseshini kusetha kabusha ini ngempela
Izindawo ziyeka amaseshini eqothuka ngezizathu ezingahlobene ne-akhawunti yakho ye-VPN: isikhathi sokungenzi lutho, ubude beseshini obukhulu, ukuqashwa okusha kwe-DHCP, noma ukuxhuma kabusha kwelinye iphoyinti lokufinyelela. Lapho isibali sikhathi sikhala, umugqa kuthebula lamaseshini unyamalala futhi iqoqo lemithetho engaphambi kokugunyazwa libuya lifana ncamashi nalokho okwakukhona ngesikhathi sokungena.
Umhubhe osuselwe kahle uvame ukuphila isikhathi esanele ukuze ubonakale uphilile. Imilayezo yokugcina uphila iqhubeka iphuma, futhi ukuthi iklayenti liyakubona yini kuncike endleleni eliphatha ngayo ukuhamba okungenampendulo, ngakho isibani sesimo singahlala siluhlaza isikhathi esithile ngemva kokunyamalala kwendlela. Bese umhubhe uwa futhi yonke imizamo yokuxhuma kabusha iyahluleka kuleyo mibombo evinjiwe.
Ngaleso sikhathi iphutha leklayenti likutshela ukuthi usesigabeni sini, uma ulifunda ngokucophelela:
| Symptom | What it means | Next check |
|---|---|---|
| Handshake times out with no reply | Pre-authorization drop on UDP | Load any HTTP page and see whether the portal appears |
| Immediate TLS error on 443 | The portal answered your TCP connection | Authorize, then retry the same profile |
| Authentication rejected | Your credentials reached the server | The network is fine, so treat this as an account problem |
| Connects, then drops repeatedly | Session or lease churn | Watch the portal timer and the lease time |
Isici esisodwa sidukisa abantu: lapho iseshini ixhunywe nekheli le-MAC, ukulayisha kabusha ikhasi lokungena kungase kungasizi. Kufanele wehlise ukuxhumana bese ujoyina futhi, ukuze ingosi ibone umzamo omusha wokugunyaza esikhundleni sowokugcina ophelelwe yisikhathi.
Ngena kuqala, bese uphakamisa umhubhe
Ukulandelana okusebenzayo yilokhu: gunyaza idivayisi, faka ubufakazi bendlela, qala i-VPN, faka ubufakazi bomhubhe, bese ubuyisela ukuvimba kwakho okuvamile. Leso sinyathelo sokugcina sibalulekile ngoba isimo sesikhashana osidingayo ukuze ufinyelele ingosi siyisona simo iswishi yokuqeda ekhona ukuze isivimbe.
Iklayenti ledeskithophu elinokukhetha ukuvimba ngaphandle komhubhe kufanele limiswe ukuze ikhasi lengosi lilayishe, futhi kufanele ugcine izinhlelo ezibucayi zivaliwe kulelo windi elingaphandle komhubhe; yisikhathi kuphela lapho ukuhamba kwasekhaya kuphuma ngaphandle kwesivikelo. Idivayisi ephethwe ehlala ivuliwe kufanele isebenzise inqubo eshicilelwe umnikazi wayo esikhundleni sokuthi wena ususe inqubomgomo. Uma ingosi ikhombisa isexwayiso sesitifiketi, yima: ukusamukela kudlulisa iseshini yakho kuphroksi yokubamba yendawo, futhi leyophroksi ingafunda konke okukuthumelayo. Ku-Android, ukukhiya ngaphansi kwe-VPN ehlala ivuliwe kuvimba ukuhamba ngaphambi kokuba umhubhe uphakame, futhi ezinye izakhiwo azikwazi ukukhipha ukugeleza kwengosi; uma eyakho ingakwazi, sebenzisa ukufinyelela okunye kwendawo noma elinye idivayisi esikhundleni sokushiya ukukhiya kuvaliwe. Imithetho ye-Apple yokufunwa ingabhalwa ukuze inqabe umhubhe kuze kuphumelele isivivinyo, futhi yikho ukuziphatha okukufunayo kunethiwekhi zamahhotela.
Qinisekisa ngokulandelana ngamathuluzi onawo kakade. Ngaphambi komhubhe, sebenzisa isivivinyo ngokuthi kokubili izihloko nomzimba kubonakale, futhi ubheke ukuthi ukuhamba kwe-VPN yakho kuthola impendulo ethile yini:
curl -sS -D - http://captive.apple.com/hotspot-detect.html -o -
sudo tcpdump -ni any 'udp port 500 or udp port 4500 or udp port 1194'Ngaphambi kokugunyazwa, ingosi evamile inikeza enye yezimpendulo ezimbili: i-302 okukuyo i-Location ekhomba ekhasini lokungena, noma i-200 enomzimba we-HTML oyikhasi lengosi. Bhala ukuthi uthole ephi. Ukuphambukisa ngaphambi kokungena akusikho ukwehluleka; ingosi ikutshela ukuthi uyaphi. Ngemva kokuba ingosi ibike impumelelo, phinda umyalo futhi ulindele i-200 okungumzimba wayo igama elingokoqobo elithi Success. Yilowo mucu owenza isivivinyo sibe nencazelo. Uma umsingathi ephendula ngokujwayelekile ngaphambi kokuba uke ungena, akukho ngosi yokubamba kule netiwekhi. Ekubambeni, ukulahla ngaphambi kokugunyazwa ngamaphakethe aphumayo okungekho okubuya, kuyilapho indlela esebenzayo ikhombisa impendulo kuleyo mpophoma cishe ngomzuzwana owodwa. Xhuma, bese uphinda ukubamba.
Uma umhubhe usahluleka ngemva kokuba ingosi ithe yebo
Impumelelo yokungena ayifani nokuhamba okuvunyelwe. Izindawo eziningi zivumela ingosi nokuphequlula okuvamile kodwa zivimba i-UDP ngokuphelele, okushiya i-WireGuard ne-OpenVPN phezu kwe-UDP ziphukile futhi i-TCP 443 isebenza. Uma i-TCP 443 idlula futhi i-UDP ingadluli, lowo umthetho wendawo hhayi iklayenti olibhale kabi, ngakho shintsha ukuhamba noma wamukele umkhawulo bese uqhubeka. Uma ukuxhuma kabusha kusahluleka ngemva kwalokho, gcina iphutha eliqondile; likhomba isigaba okubhajwe kuso.
Okunye ukwehluleka kuhlala kudivayisi. Iseshini esaxhunywe ku-MAC endala, i-adaptha yesibili ye-Wi-Fi enokuqashwa kwayo, noma iklayenti eligcine ukukhishwa kwesitifiketi sengosi kungaqhubeka kwehluleka ngemva kokugunyazwa okusha okuhlanzekile. Yehlisa ukuxhumana, gunyaza futhi, futhi uzame kanye ngaphambi kokuthinta izilungiselelo zeklayenti. RFC 8952 kufanele ifundwe uma ufuna isakhiwo esingemuva kwezingxenye ozibhekile.
Uma ingosi ngokwayo inqaba ukugunyaza, inkinga ise-akhawunti noma ekwabiweni kwedivayisi futhi akukho silungiselelo se-VPN esizoyilungisa. Ukushintsha izwe lokuphuma le-VPN akusibuyiseli emuva isimo sokufinyelela sendawo; lelo thebula lixhunywe kudivayisi yakho, hhayi kusiphakeli osikhethayo. Buza umqhubi wendawo futhi umnike isikhathi, ngoba ithebula lamaseshini yilona azolibheka.
Ngaphambi kohambo olulandelayo bhala izinto ezintathu: ikhasi lengosi njengesinyathelo sokuqala, isinyathelo sokumisa ukuvimba sayo yonke idivayisi oyithathayo, nokuhamba okunye osekusebenza owakuhlola ngempela. Uma umhubhe owawusebenza emizuzwini eyishumi edlule ume futhi, kubheke njengokugunyazwa okuphelelwe yisikhathi futhi uhlole ingosi futhi ngaphambi kokuthinta iphrofayili ye-VPN.