I-laptop yomsebenzi ku-VPN yomuntu siqu: okuwela ngempela

Ukuxhuma i-laptop yenkampani ku-VPN yasekhaya kuyibeka ezindaweni ezimbili ngasikhathi sinye, futhi umbuzo othakazelisayo mncane futhi uwusizo ukwedlula lowo owesabisayo. Akekho owabeka ikhebuli ye-Ethernet phakathi kwehhovisi nekhaya, futhi ayikho indlela eyenza inethiwekhi yasekhaya ibe yisandiso sesubneti yenkampani. Okukhona yindawo eyodwa yokugcina enokufinyelela kuzo zombili izimo, futhi izindlela ezintathu ezihlukene zinquma ukuthi yini ngempela engahamba phakathi kwazo. Ukuhamba kulezo zintathu, kusuka endaweni yokugcina ukuya ngaphandle, kunikeza impendulo umphathi angasebenza ngayo esikhundleni sengxabano ngezilebula.

Qala endaweni yokugcina, hhayi kumdwebo wenethiwekhi

Indawo yokugcina iyindawo lapho kuhlangana khona ukuxhumana kokubili, ngakho yilapho kuqala khona ukubuyekezwa: yiziphi izinqubo ezisebenzayo, yini ezingayifinyelela, futhi ubani ozilawulayo. Umdwebo okhombisa amafu amabili axhunywe ku-laptop unembile futhi awunamsebenzi, ngoba usikisela isixhumanisi okungenzeka singekho. Esikhundleni sawo faka uhlu lwezinhlelo zokusebenza ezingakhuluma nesimo ngasinye, futhi ubhale ukuthi ngayinye isebenza ngaphansi kweliphi i-akhawunti. Lolu hlaka lugcina nokubuyekezwa kulingana, ngoba i-laptop enemigudu emibili ayiyona into efanayo namanehiwekhi amabili ahlangene.

Lolu hlu yilona hlu lwempahla okusetshenzwa ngalo kolunye ukubuyekezwa. Uma luqukethe iklayenti lokuvumelanisa, iphrofayela yesiphequluli engene kuzo zombili izimo, kanye ne-ejenti yokwakha enemininingwane yokungena, ukubuyekezwa sekunezihloko zako.

Izindawo ezintathu zokuwela, zihlolwe ngokwehlukana

Ukufinyelela kwezinhlelo zokusebenza yindawo yokuqala yokuwela, futhi akudingi kunywetshwa. Ithebhu yesiphequluli, iklayenti lokuvumelanisa noma i-ejenti yokwakha endaweni yokugcina ingafunda kusisetshenziswa sesimo esisodwa bese ithumela idatha kusisetshenziswa sesinye isimo. Leli khono likhona kungakhathalekile ukuthi uhlelo lokusebenza ludlulisa amaphakethe phakathi kwezixhumi noma cha, futhi yilona buciko abantu abalushiya lapho bephelha ngokuthi akukho bhuloho okusho ukuthi akukho bungozi. Ngakho ukufunda uhlu lwezinhlelo zokusebenza kunikeza ulwazi oluningi kunokufunda uhlu lwezixhumi.

Ubuchwepheshe nedatha bakha indawo yesibili yokuwela. Imininingwane yokungena yenkampani, amakhukhi esikhathi, amadokhumende alandiwe kanye namalungelo okuphatha ahlala endaweni yokugcina, futhi ukujoyina enye inethiwekhi akuzivezi ngokwako. Okushintshayo yiqoqo lezinhlangothi ezingase zibe nomthelela endaweni yokugcina ngenkathi iphethe leyo mininingwane, futhi lowo umbuzo mayelana nokwethembeka kwenethiwekhi yomuntu siqu hhayi mayelana nokuhamba kwemizila. Lesi yisinqumo umnikazi wendawo yokugcina angakwazi ukusithatha eyedwa, futhi ukungabikho komthetho wokudlulisa akusona impendulo.

Ukudlulisa kwenethiwekhi kungokwesithathu, futhi ukuphela okungashintsha i-laptop ibe idivayisi yokudlula. Ukudlulisa kwe-IP, ukwabelana ngoxhumo lwe-inthanethi, i-proxy noma isici sebhuloho kungakwenza lokho, futhi ngakunye kuyisilungiselelo esivuliwe noma esingavuliwe. Hlola leso simo ngqo esikhundleni sokucabanga kusuka ekubeni khona kweklayenti ye-VPN. Emashini aphethwe impendulo ngokuvamile ingu-cha, futhi ukuyiqinisekisa kuguqula umcabango ube yiqiniso elifanele ukubhalwa.

Cela isisetshenziswa esisodwa, hhayi amanethiwekhi amabili

Izidingo eziningi zangempela zincane kunalokho ezibonakala ngakho ekuqaleni: ikhonsoli eyodwa, ukwabelana ngefayela okukodwa, uhlelo lokusebenza lwewebhu lwangaphakathi olulodwa. Shono isidingo kanjalo futhi uvumele umnikazi wesisetshenziswa anqume ukuthi sifanele yini le ndawo yokugcina. Isicelo esakhiwe njengokuhlanganisa amanethiwekhi amabili sinzima ukusivuma futhi silula ukusenqaba; isicelo sesevisi eyodwa eqanjiwe sinempendulo.

Uma impendulo ingu-yebo, khetha indlela emincane esekelwayo futhi uyigcine ngaphakathi kwezilawuli ezikhona zenhlangano. Iphrofayela yesibili ephethwe noma ukufakwa kohlelo lokusebenza okulinganiselwe kugcina ukuqapha kanye nenqubomgomo; ukulungiselelwa komuntu siqu okuqhudelanayo kuzithatha indawo ngokuthula, futhi akekho owaziyo ukuthi yikuphi okuzonqoba ngemuva kokubuyekezwa okulandelayo.

Faka imiphumela ye-DNS nemizila

Ukuxazululwa kwamagama kuyashintsha ngaso leso sikhathi lapho iphrofayela yesibili isebenza. Iklayenti lomuntu siqu lingaphoqa isixazululi salo, isiphequluli singasebenzisa i-DNS yaso ebhaliwe, futhi ithebula lenqubomgomo lingaqondisa amagama angaphakathi kwiseva ehlukile kunaleya elindelwe ukulungiselelwa kwenkampani. Akukho kulokhu okudinga ukudlulisa, futhi noma yikuphi kungathumela igama lomsingathi wangaphakathi endaweni engalungile.

Resolve-DnsName intranet.corp.example -Type A
Get-DnsClientNrptPolicy -Effective
route print 0.0.0.0

Thwebula leyo miphumela emithathu ngaphambi nangemuva kokuxhuma kwephrofayela yesibili. Umehluko phakathi kwazo uwumphumela ofinyelela ngempela kumsebenzisi, futhi uvamise ukuba mkhulu kunoshintsho lokuhamba kwemizila oluchazwa yithikithi. Gcina kokubili ukuthwebula ukuze umbuyekezi wakamuva abone ukuthi kwashintshani, hhayi ukuthi kwakuhloswe ini.

Qinisekisa futhi ugcine indlela yokuphuma

Hlola uhlelo lokusebenza olugunyaziwe kusuka kunqubo yangempela nasemongopheni womsebenzisi, hhayi kusuka kugobongo lomphathi kumashini ofanayo. Bese uqinisekisa ukuthi izindawo ezingahlobene zihlala zingafinyeleleki lapho ukuklanywa kukudinga: umngcele ongakaze uhlolwe yinoma ubani umngcele ongakwazi ukufunwa yinoma ubani. Ukunqamuka kwethuneli yomuntu siqu kufanele kubuyisele isimo sangaphambilini, futhi lokho kubuyisela kufanele kuhlolwe ngenkathi kusabuke umuntu.

Test-NetConnection -ComputerName files.corp.example -Port 443
Get-NetConnectionProfile

Isiqondiso se-NIST mayelana nomklamo wokuthembela ku-zero siwusizo lapha ngoba sisusa indawo yenethiwekhi njengomthombo wokuthembela ozenzakalelayo, futhi yilowo umcabango okuphikiswana ngawo. Umbuzo awuwona wokuthi inethiwekhi yasekhaya ithembekile ngokwemvelo; umbuzo ngukuthi ubani angafinyelela isiphi isisetshenziswa, kusuka endaweni yokugcina iphi, ngendawo yokuphoqelela iphi. Phendula lezo zintathu, futhi gcina ubufakazi kanye nesinqumo.