Uxhumano lwe-PPTP - yintoni na?

Mhlawumbi, abaninzi abasebenzisi baye bakuva ngegama elithi "uxhulumaniso lwe-PPTP". Yiyiphi le, abanye bangacingi nakude. Nangona kunjalo, ukuba uchaza imigaqo yokuseka uxhaso olusekelwe kule protocol ngolwimi olucacileyo, akunzima ukuyiqonda.

Uxhumano lwe-PPTP: yintoni na?

Uxhumano lwale hlobo lusekelwe kwiprothotho yegama elifanayo, isicatshulwa egameni elivela kwi-protocol yesikhokelo ye-English-point-point-point, echazwe ngokoqobo njengelungelo "protocol-to-point" protocol. Ngamanye amazwi, uxhumano phakathi kwabababhalisi ababini ngokuthumela iipakethe zedatha kwifomu ebhaliweyo ngokusebenzisa amanethiwekhi angakhuselekanga asekelwe kwiTCP / IP.

Uhlobo loxhumano lwe-PPTP lukuvumela ukuba uguqule izinto ezibizwa ngokuba yiPPP kwiipakethe ze-IP eziqhelekileyo, ezithunyelwa, umzekelo, nge-Intanethi efanayo. Yaye nangona kukholelwa ukuba inkqubo yezokuphepha ye-PPTP ingaphantsi kwamanye amanyathelo afana ne-IPSec, namhlanje ixhaphake kakhulu, kuba, ngokwenene, umsebenzisi ubhekisana nenye yeentlobo ze-VPN (uxhulumaniso lwe-wireless).

Uxhumano lwePPTP: kutheni usebenzise?

Ububanzi balo mgaqo-nkqubo bukhulu kakhulu. Okokuqala, olu hlobo loxhumo phakathi kwabasebenzisi ababini aluvumelekanga kuphela ukukhusela ulwazi oludluliselwayo, kodwa nokugcina ngokubanzi kwiifowuni ezide.

Ukongezelela, le protocol isoloko ingenakulungiswa xa inikezela unxibelelwano phakathi kokunxibelelana kweendawo ezimbini, okukuthi ngokuthumela iipakethi kwi-Intanethi ngelayini ekhuselekileyo (umlambo) ngaphandle kokusebenzisa uxhulumano ngqo phakathi kwabo. Oko kukuthi, amanxibelelwano angabini angabinxibelelwano ngqo kwaye asebenzise i-tunnel njengombhalisi.

Ngakolunye uhlangothi, ukuxhunyezwa kwe-PPTP-kusetyenziswa kwakhona ukudala uxhumano lwabaxhasi-umsebenzisi xa isiqhagamshelo somsebenzisi sidibanisa kumncedisi kwisiteshi esilondekileyo.

Ukuphunyezwa kwePPTP kwiinkqubo ezahlukeneyo zokusebenza

Ngoku kuphazamiseka kancinane kwaye ngakwelinye icala siza kujonga uxhumano lwe-PPTP. Yintoni, ukususela kumzuzwana wophuhliso lweprotocol e-Microsoft Corporation, ngoko ke bambalwa kakhulu abantu abaqondayo. Kwaye ngokokuqala ngqa kwiphepha elipheleleyo, laphunyezwa nguCisco.

Nangona kunjalo, iingcali zeMicrosoft azizange zigule emva. Ukuqala nge-Windows 95 OSR2, inokwenzeka yokudala uxhumano olusekelwe kwi-PPTP lubonakala kwimveliso yesofthiwe kamva, nangaphandle kwezixhobo zokucwangcisa iseva ye-PPTP. Ukongeza, njengomzekelo, siza kuqwalasela uxhulumaniso lwe-PPTP lwe-Windows 7, ngokukodwa ekubeni le nkqubo yinto ethandwa kakhulu kuninzi lwabasebenzisi.

Kwiinkqubo zeLinux kude kube kutshanje, kwakungekho inkxaso epheleleyo yale teknoloji. Kwabonakala kuphela kwinguqulelo 2.6.13, kwaye yaziswe ngokusemthethweni kwi-2.6.14 i-kernel version.

Iifayile ze-FreeBSD kunye ne-Mac OS X ziza kunye nabaxhasi be-PPTP abakhiwe. I-Palm PDA kunye ne-Wi-Fi yokuxhumeka kwenethiwekhi engenakunxibelelwano oluxhaswa nge-Wiregic client.

Iimeko zokuqala zoxhumo oluchanekileyo

Ukusetyenziswa kwe-tunneling kuyinto ecacileyo. Ukumisela uxhulumaniso lwe-PPTP kubandakanya ukusebenzisa i-TCP port 1723 kwaye nakanjani-IP IP protocol inombolo 47.

Oku kuthetha ukuba ukucwangciswa kwe- firewall, ukuba kukho nayiphi na okanye i-Windows firewall eyakhelwe kuyo kufuneka ukuba iipakethi ze-IP zingadlula ngokukhululekile kwaye zingenasithintelo. Oku akusebenzi kuphela kumashishini abasebenzisi okanye amanethiwekhi asekuhlaleni. Ngokulinganayo, ukuhanjiswa okungafaniyo kwedatha ekhonkxiweyo kufuneka kunikwe kwinqanaba lomboneleli.

Ukuba i-NAT isetyenziswe kwisigaba esiphakathi sogqithiselo lweedatha, ngoko ukusetyenziswa kwe-VPN kweli candelo kufuneka kulungiswe ngokufanelekileyo.

Imigaqo-siseko yokusebenza kunye noxhumano

Siye saqwalasela uxhumano lwePPTP ngokukhawuleza. Yintoni na, abaninzi, mhlawumbi, sele bencinci ngokucacileyo. Ukucaca okupheleleyo kwimiba iya kwenziwa emva kokuqwalasela imigaqo-siseko yokusebenza komgaqo-nkqubo kunye nokuxhamla okusekelwe kuyo, kunye nakwicandelo apho inkqubo yokufakela iya kuboniswa ngamanyathelo e-PPTP GRE uxhulumaniso.

Ngoko, ukudibanisa phakathi kwamaphuzu amabini kusekwe ngesiseko seseshoni yePPP esekelwe kwi-GRE protocol (encapsulation). Ukuqhagamshelana kwesibili ngqo kwichweba leTCP linoxanduva lokulawula iGrisi nokuqalisa.

Ipakethe ye-IPX ngokwayo iqulethwe ngedatha, ngamanye amaxesha ebizwa ngokuba ngumrhumo, kunye nolwazi olongezelelweyo lolawulo. Yintoni eyenzekayo xa ufumana ipakethi kwenye indawo ekupheleni komgca? Inkqubo ehambelanayo yoxhumano lwe-PPTP, njengokuba kunjalo, ibuyisela ulwazi oluqulethwe kwiPixet yonke kwaye iyakuthumela ukusetyenziswa ngokusebenzisa izixhobo ezihambelana nomgaqo-nkqubo wenkqubo.

Ukongezelela, enye yezinto ezibalulekileyo zokudluliselwa kombane kunye nokufumana ulwazi oluyisiseko ngumqathango onyanzelekileyo wokusebenzisa ukufikelela ngoncedo lwe-"login-password" inhlanganisela. Ngokuqinisekileyo, unokwazi ukuphawula i-logins kunye neephasiwedi kwisigaba sokwamkela, kodwa kwinkqubo yokudlulisa ulwazi nge-corridor ekhuselekile (i-tunnel) - nangayiphi na indlela.

Izixhobo zoxhumo loxhumo

Njengoko sele kuthethwe ngazo, ukulungiswa ngokusekelwe kwiprothokholi ye-PPTP ayikhuselwanga ngokupheleleyo kuzo zonke iziganeko. Nangona kunjalo, ukuba sinokuqwalasela ukuba izixhobo ezinjenge-EAP-TLS, i-MSCHAP-v2 okanye i-MPEE zisetyenziselwa ukubethelwa kwedatha , sinokuthetha ngezinga eliphezulu lokukhusela.

Ngamanye amaxesha, ukuze kuphuculwe umgangatho wokhuselo, iifowuni ezizenzekelayo (ukutshintshwa kweefowuni) zingasetyenziselwa, apho ukuthumela okanye ukufumana iqela liqinisekisa ukuxhomekeka kunye nokuhanjiswa kolwazi kwenkqubo.

Ukuqwalasela i-PPTP nge-Windows 7 Izixhobo eziziQonga: Izicwangciso ze-Adapter Network

Ukuqwalasela uxhumano lwe-PPTP kunoma iyiphi inkqubo ye-Windows kulula. Njengoko sele sichaziwe, thabatha "ezisixhenxe" njengomzekelo.

Okokuqala kufuneka uhambe kwiNethwekhi kunye neZiko lokwabelana. Unokwenza oku kusuka kwiPaneli yokuLawula. Okanye kwimenyu ebizwa ngokuba yiqhosha lokunene kwi icon ye-intanethi okanye uxhumano lwenethiwekhi.

Ngakwesokunxele kwimenyu kukho umgca wokutshintsha iiparameters ze-adapter yomnatha, okufuneka uyenze, uze uqakraze ngokuchanekileyo ekunxibelelaneni ngokusebenzisa inethiwekhi yendawo ukubiza imenyu yomongo kwaye ukhethe umgca wepropati.

Kwifestile entsha sisebenzisa iipropto zeProtocol zeTCP / IPv4. Kwifestile yokucwangcisa, kufuneka ubhale phantsi iiparamitha ezibonelelwe ngumboneleli xa uxhuma (amaninzi amaninzi, ukufumana ngokuzenzekelayo iilesi ze-IP kunye ne-DNS iseva).

Londoloza utshintsho kwaye ubuyele ekuxhumeni kwinethiwekhi yendawo, apho kufuneka uhlolisise nokuba isebenza ngoku. Ukwenza oku, sebenzisa iqhosha lokunene. Ukuba umgca ophezulu ubonisa "Khubaza", ngoko uxhulumaniso lusebenza. Ngaphandle koko, vula.

Yakha uphinde ulungise iisethingi zeVPN

Isinyathelo esilandelayo kukudala uxhulumaniso lweVPN. Ukwenza oku, kwicandelo "lokuLawula" kwindawo elungileyo yefestile sisebenzisa umgca wokudala uxhulumaniso olutsha.

Emva koko, ukhethe uxhumano kwindawo yomsebenzi, kwaye-ke-sebenzisa uxhumano olukhoyo kwi-intanethi.

Emva koko, siyeka i-intanethi-intanethi, kunye nefestile elandelayo sichaza idilesi ye-Intanethi yomqhubi we-VPN kwaye ufake igama elingabonakaliyo (mhlawumbi phantsi kwekhadi "Musa ukudibanisa ngoku").

Emva koko, faka ukungena ngemvume kunye nephasiwedi, ukuba kukho nayiphi na, unikeze isivumelwano sokubonelela ngeenkonzo, kwaye nqakraza iqhosha elithi "Yenza".

Kuluhlu lweekhonkco ezikhoyo, khetha i-newly created kwaye kwiwindow entsha cofa iqhosha lepropati. Emva koko kufuneka usebenze ngokucophelela. Kwiphepha lekhuseleko, kufuneka usethe iiparitha ezilandelayo:

• Uhlobo lwe-VPN: ngokuzenzekelayo;
• Ukubhaliweyo kwedatha: ukhetho;
• Iimvume zeProtocol: I-CHAP kunye ne-CHAP 2.

Qinisekisa utshintsho, iya kwiwindow yokuseta uxhumo, apho sicinezela inkinobho yoxhumo. Ukuba izicwangciso zichanekile, uxhumo lwe-intanethi luya kwenziwa.

Ngaba kufuneka ndisebenzise izibonelelo zenkampani yesithathu?

Kwimibuzo yokufaka ii-server ezongezelelweyo ze-PPTP okanye abathengi, abasebenzisi basabela ngendlela eyahlukileyo, kodwa abaninzi bavuma ukuba ukusetha nokusebenzisa i-modyu ye-Windows ekhethiweyo ikhangeleka ngakumbi ngokubhetele.

Unako ukufaka into efana nephakheji ye-pfSense, engumzila we-firewall-router, kodwa "umthonyama" we-Multilink PPP Daemon umthengi unengxaki ezininzi usebenzisa iiseva ze-Windows ezisekelwe kwi-PPTP ngokusasaza ukusetyenziswa kweprotocol yokuqinisekisa phakathi komxhasi kunye nomncedisi. Unxibelelwano lwamaqumrhu, nangona bekungekho iingxaki ezinjalo kwiindawo zokusebenzisa ekhaya. Kuqwalaselo, le nkonzo, kunye nayiphi na enye, inzima kakhulu, kwaye ngaphandle kolwazi olukhethekileyo ukuchaza iiparitha ezifanelekileyo okanye ukulungisa "ukuhlanganiswa" rhoqo komsebenzisi we-IP-dilesi akunakwenzeka.

Unokuzama amanye amashishini okanye iinkonzo zeseva ezenzelwe ukuseka uxhumano lwe-PPTP, kodwa yintoni inqaku lokukhuphela inkqubo ngeenkqubo ezingadingekile xa nayiphi na inkqubo yokusebenza yeWindows inezixhobo zayo? Ukongezelela, ezinye iinkqubo azikho nzima ukuzimisela, kodwa nazo zingabangela ukungquzulana kwiprogram nakwizinga lomzimba. Ngoko kungcono ukulinganiselwa kulokho.

Esikhundleni sokulandelelana

Kukho konke malunga neprotocol ye-PPTP, kunye nokudala, ukuqwalasela nokusebenzisa uxhumo lomnatha osekelwe kulo. Ngokubhekiselele ekusebenziseni kwayo, akufanelekanga kumsebenzisi oqhelekileyo. Vuka nje ukungaqiniseki ngokuqinisekileyo ukuba umntu unokufuna i-channel ekhuselekileyo yokunxibelelana. Ukuba ufuna ngokwenene ukukhusela i-IP yakho, kungcono ukusebenzisa amaseva angabonakaliyo kumaseva kwi-intanethi okanye kuthiwa yi-anonymous.

Kodwa ukuqinisekisa ukusebenzisana phakathi kwamanethiwekhi asekuhlaleni kwamashishini athengisa okanye nayiphi na izakhiwo, ukufakwa koxhumo lwe-PPTP lunokuba yindlela elula kakhulu. Kwaye nangona ukuxhamla okunjalo akuqinisekisi ukuba u-100% ukhuseleko, nangona kunjalo, isabelo sengqiqo ekusebenzeni kwayo.