Inqubomgomo ye-IKEv2 yangokwezifiso ku-Windows: yisebenzise njengesinyathelo esihlukile

Uxhumano oluhlinzekiwe kanye nesethi yokubhala ngokuyimfihlo yangokwezifiso kuyimiphumela emibili. Fanisa izinsimu zenqubomgomo, ububanzi bephrofayela kanye nomnikazi oyisebenzisa futhi.

Iphakethe lokuhlinzeka lenza uxhumano lwe-IKEv2, futhi iphrofayela evelayo ixoxisana ngokunye ngaphandle kwesethi obukade uyihlose. Iphakethe lenze umsebenzi walo; belingakaze libe nensimu yomsebenzi obuwucabanga. Thatha isethi yokubhala ngokuyimfihlo njengesinyathelo sokuhlinzeka esihlukile nesingaqinisekiswa.

Dlula kulezi zinto ezinhlanu ezingezansi ngokulandelana, futhi uhlukanise imiphumela yokwamukela.

Izinhlobo ezimbili zomgomo ngemva kwamagama afanayo

I-Windows ihlukanisa inqubomgomo evikela ukushintshana kokhiye nenqubomgomo evikela ukuxhumana kwedatha. Uhlangothi lwe-IKE luhlelwa ngendlela yokubhala ngokuyimfihlo kanye nendlela yokuphelela. Uhlangothi lwedatha luhlelwa ngezinto ezingaguquguquki zesihlukanisi kanye nezesinguqulo sokuqinisekisa, futhi lezo zinto zisebenzisa amagama azo. Ilebula elilodwa le-AES elikopishwe endaweni engalungile lenza uxhumano olusungulwa ngaphansi kwenqubomgomo okungekho muntu oyigunyazile.

Iqembu lokushintshana kokhiye kanye nokufihlwa okuphelele okuya phambili kungokwengxoxo eyodwa futhi kufanele kwamukeleke esangweni. Ukuzibeka ngaphandle kokuhlola ukuphela okude kuletha ukwehluleka esigabeni esisemuva kuneso obukade usihlela, yingakho la maphutha abonakala njengezinkinga zesango.

Yakha inqubomgomo ephelele, hhayi amagama amabili e-algorithm

Bhala yonke insimu ngokusobala, kuhlanganise leyo ocabanga ukuthi iyimizindalwazi. Inqubomgomo eyingxenye esetshenziswe ngefulegi yokuphoqa iba ukuhlelwa okugciniwe, futhi amanani owashiya ngaphandle yiwona umtapo owawunawo ngalowo mzuzu. Amanani aqala ngengxenye yokuqala efanayo awashintsheki phakathi kwezinsimu, futhi elinye lamagama amasiko wenguqulo lisebenza kuphela njengenguqulo yokuqinisekisa.

$policy = @{
    ConnectionName = 'Corp IKEv2'
    AllUserConnection = $true
    EncryptionMethod = 'AES256'
    IntegrityCheckMethod = 'SHA384'
    CipherTransformConstants = 'AES256'
    AuthenticationTransformConstants = 'SHA384128'
    DHGroup = 'Group19'
    PfsGroup = 'PFS2048'
    Force = $true
}
Set-VpnConnectionIPsecConfiguration @policy

Thatha leyobhlokhi njengesethi eyisibonelo okufanele uhlangothi kokubili luyisekele, hhayi njengesincomo. Isishintshi sokuphoqa sicindezela isicelo; asigunyazi iphakethe ongalihlolanga.

Dala kuqala, bese usebenzisa — kububanzi obubodwa

Uxhumano kufanele lube khona ngaphambi kokuba inqubomgomo yalo isethwe, futhi ububanzi kufanele bufane esinyathelweni ngasinye. Isinyathelo kumongo womshini asikwazi ukuthola iphrofayela eyimfihlo yanoma yimuphi umsebenzisi ngoba nje igama elibonisiwe lifana. Izixhumaniso zabo bonke abasebenzisi, izixhumaniso zomsebenzisi kanye nezikhombisi zazo zesimo ziyizinto ezihlukile ezinamagama ahlukile.

Ukulandelana kubaluleke kakhulu kunalokho okubonakala kukho kwiphakethe lokuhlinzeka, ngoba imiyalo emibili ingasebenza eduze kakhulu kunaleso sikhathi esidingekayo ukudala uxhumano. Pakisha umsebenzi wangemva kokuhlelwa njengomyalo wokuhlinzeka ogunyaziwe onomongo wokusebenza omenyaziwe, futhi vumela injini yokuhlinzeka ukuthi iwuhlele esikhundleni sokufaka ukulibaziseka okuqageliwe. Ukulala isikhathi esanele kuzinsiza zakho zokuhlola kuyisimo somncintiswano esinokulibaziseka okunanyathiselwe. Rekhoda ukuncika, hhayi ubude besikhathi.

Izinsimu ezibhaliwe ze-Configuration Designer zichaza ukuhlelwa okukodwa kwe-VPN futhi azivezi zonke izilawuli zomdabu ze-IPsec. Uma imfuneko iwukulethwa okuphethwe, umhlinzeki wensizakalo yokuhlelwa ye-VPNv2 unesigaba sesethi yokubhala ngokuyimfihlo ngqo yale njongo.

Qoka umnikazi oyedwa wenqubomgomo

Isibuyekezo sakamuva sephrofayela yokuphatha singakha kabusha uxhumano futhi sishintshe lokho okusetshenziswe iskripthi, futhi ukushintsha kuzobonakala njengokuhlehla. Nquma ukuthi isethi ingeyephrofayela, ingeyesikripthi noma ingeyomsele wokuphatha, futhi wenze ukuthi izibuyekezo ezijwayelekile zilandele indlela efanayo nokufakwa kokuqala.

Abanikazi ababili kuyafana nokungabi naye umnikazi lapho labo ababili bengavumelani. Bhala igama lomnikazi kurekhodi loshintsho lwephrofayela. Isibuyekezo esilandelayo sizolandela lokho okushiwo yilelo rekhodi.

Qinisekisa umphumela okuxoxiswene ngawo, hhayi iphakethe

Funda iphrofayela egciniwe kanye nobubanzi bayo, bese usungula uxhumano olusha futhi uqhathanise iziphakamiso ezikhethiwe esangweni. Qinisekisa nokuziphatha kokukhiqiza kabusha kokhiye, ngoba ukuxhawula kokuqala kungaphumelela ngesethi esenqatshwa isigaba sakamuva.

Get-VpnConnection -Name 'Corp IKEv2' -AllUserConnection | Format-List
Get-ChildItem 'C:\ProgramData\Microsoft\Network\Connections\Pbk' | Select-Object Name, LastWriteTime

Imiphumela emithathu yokwamukela akusona isigameko esisodwa: iphakethe lafakwa, iphrofayela ikhona nenqubomgomo ehlosiwe, futhi izinhlangothi zaxoxisana ngayo. Zihlukanise, ukuze insimu engekho ingalokothi ilungiswe ngokwenza ubuqiniso bube buthakathaka noma ngokuvula indlela yokubuyela emuva okungekho muntu oyikhethile.

Izihloko ezihlobene