Kungani i-Windows IKEv2 yomdabu ingenawo nhlobo isigaba se-PSK

Iphrothokholi isekela okhiye ababiwe, kuyilapho iklayenti elakhelwe ngaphakathi linikeza izitifiketi ne-EAP. Khetha indlela ezoqotshwa yizinhlangothi zombili, hhayi isixazululo sendawo.

Imibhalo yesango ithi ukhiye owabiwe ngaphambili ufakwa kuklayenti, kodwa iphrofayela ye-Windows ayinaso isigaba sakho. Lesi sikhala akulona iphutha elingagwenywa ngokubhala ukhiye ebhokisini lephasiwedi. Umehluko phakathi kwalokho okungenziwa yiphrothokholi nalokho okunikezwa ukuqaliswa okuthile.

Ikhono lephrothokholi akulona ukusekelwa kweklayenti

Incazelo ye-IKEv2 ihlanganisa ukuqinisekiswa ngokhiye owabiwe, ngakho isango lingahle lihlelwe ngokusemthethweni salokho. Iphrofayela yomdabu yokufinyelela kude ye-Windows ibhalisa esikhundleni salokho amalungiselelo ezitifiketi ne-EAP, futhi ikhono lephrothokholi alidali isigaba, ipharamitha noma inani lokubhalisa iklayenti elingakaze libe nalo.

Abantu bavame ukugcina ngokufika ku-isithenjwa se-PowerShell sokwengeza uxhumano lwe-VPN, futhi lapho kuboniswa i-L2tpPsk yelungiselelo le-L2TP. Leyo pharamitha ingeyo-L2TP futhi ayiyona imfihlo evamile ye-IKEv2. Izilungiselelo zokukhetha i-algorithm zikhetha amapharamitha okuvikelwa, okuyinto yesithathu engahlobene. Indima yomzila we-Windows Server nayo ayiyona into efanayo. Isixhumanisi seseva singaba nezilawuli zokuhlelwa ezingenazo iphrofayela yeklayenti ledeskithophu, futhi ukukopisha isilungiselelo seseva kuphelela kuphrofayela yesiteshi somsebenzi akukuyiphinde enhle lo ikhono.

Khetha phakathi kwesitifiketi, i-EAP noma i-L2TP

Uma umqhubi wesango emukela ukuqinisekiswa ngesitifiketi, lokho ngokuvamile kuyindawo ehlanzekile kakhulu: iklayenti lithula isitifiketi, isango liqinisekisa ngomkhiphi othembekile, futhi asikho isimfihlo esabiwe esisalayo kuphrofayela ukuze umuntu asikopishe. Lokho kudinga ukubhaliswa, uchungechunge oluthembekile kanye nokuhlelwa kwesango okuxhumanisa isitifiketi nesinqumo sokugunyaza.

I-EAP enemininingwane yomsebenzisi ingenye indlela esekelwayo kuleli klayenti, futhi ihambisa isinqumo kumhlinzeki wobunikazi. Iletha nokuncika kwayo, ngoba indlela ye-EAP, isitifiketi seseva nokuthembela kweklayenti kuleso sitifiketi konke kufanele kuvumelane. Ukushintshela ku-L2TP/IPsec kuphela ukuze kutholakale isigaba esijwayelekile kushintsha isitaki sephrothokholi. Lokho kwamukelekile lapho kuwukukhetha okusekelwayo okunesizathu esibhaliwe, futhi kuwumphumela omubi lapho kwenzeka ngoba othile wayefuna ibhokisi lokubhala ukhiye.

Hlola ukuthi isango lizokwamukela ini

Buza umqhubi ukuthi isevisi yokufinyelela kude inikeza ziphi izindlela zokuqinisekisa namuhla, hhayi ukuthi umkhiqizo usekela ziphi ngokujwayelekile. Isevisi ehlelwe nge-IKEv2 ne-PSK kuphela ngeke yamukele isitifiketi ngoba iklayenti sikhetha esinye.

Get-VpnConnection -Name "Corp IKEv2" | Format-List AuthenticationMethod, TunnelType, EncryptionLevel, ServerValidation
Get-ChildItem Cert:\CurrentUser\My | Select-Object Subject, NotAfter

Funda indlela yokuqinisekisa yephrofayela nesitoreji sezitifiketi ndawonye. Iphrofayela esethelwe ku-EAP ngaphandle kwesitifiketi esisebenzisekayo ngemuva kwayo yehluleka ngendlela ebukeka njengenkinga yeseva.

Uma impendulo ingukuthi i-PSK kuphela etholakalayo, izinketho ezithembekile iklayenti eligunyaziwe eliyisekelayo noma ushintsho ekwakhiweni kokuqinisekisa kwesango. Akukho kokubili okuyisixazululo sendawo, futhi ukuzenza sengathi kungenjalo kukhiqiza uxhumano okungaLuphinda kuphela umuntu oluhlelile.

Bhala isinqumo nezimfihlo

Bhala indlela ekhethiwe, i-anchor yokuthembela, ubunikazi obuhambisana nayo kanye nomuntu ogunyaze ushintsho. Lelo rekhodi yilokho okudingwa ukubuyekezwa kwesigameko, futhi futhi kuvimbela unjiniyela olandelayo ukuthi angitholi futhi indlela efanayo yokuphela.

Gcina izimfihlo zihlukene kumanothi akho: iphasiwedi ye-akhawunti, umusho wokhiye wangasese kanye nokhiye wesango owabiwe ngaphambili kuyizinto ezintathu ezihlukene, ngisho nalapho isikrini sezilungiselelo sizibiza zonke ngokuthi iphasiwedi. Ukuzihlanganisa yindlela ukhiye ogcina ngokungena ngayo kuthikithi. Hlola iphrofayela ewumphumela ngoxhumano olusha nangesicelo esisodwa sohlelo lokusebenza emthonjeni wangasese. Umhubhe ophumelelayo ngaphandle kwesevisi efinyelelekayo uwumphumela oyingxenye, futhi iphrofayela akufanele ichazwe njengeqediwe kuze kusebenze nomthombo.

Izihloko ezihlobene