I-VPN, noma i-Virtual Private Network, iyisevisi esungula umhubhe obethelwe phakathi kwendawo yekhompyutha yakho neseva ekude.

Yonke ithrafikhi yakho ye-inthanethi idluliswa kulo mhubhe, empeleni ifihla indawo yakho yangempela, njengoba ikheli lasesizindeni se-inthanethi leseva ye-VPN lingase libonakale lisedivayisini yakho.

Ngaphezu kwalokho, yonke ithrafikhi ibethelwe ukuze ulwazi lwakho luhlale luvikelekile ngaso sonke isikhathi, ngisho noma umgebengu we-inthanethi noma umlawuli wenethiwekhi yakho eyivimba.

I-Virtual Private Network (VPN) inweba inethiwekhi yangasese kunethiwekhi yomphakathi, ikuvumela ukuthi ufinyelele ngokuphephile idatha yakho ukude kunethiwekhi yomphakathi. Ngokusebenzisa iseva ye-VPN njengeseva elibamba, ungasebenzisa futhi i-VPN ukuze uvikele ukusebenza kwakho kwe-inthanethi

Lesi sihloko sizokukhombisa ukuthi, igxathu negxathu, ungasetha kanjani i-VPN kukhompyutha ye-Windows Server. Ukuze umise iseva yakho ye-VPN, landela le miyalo elula

== INDLELA YOKUSEBENZISA ICLIENT YE-VPN KU-VPS YAKHO ==
Ukusethwa kweseva ye-VPN esetshenziswa kabanzi ezindaweni ezincane kuzoxoxwa ngakho kulesi sihloko. Ngezinjongo zebhizinisi, siphakamisa ukusebenzisa Ukufinyelela Okuqondile

Ukuze wakhe iseva ye-VPN, kunezinhlelo eziningi ezingasetshenziswa. Sizosebenzisa i-OpenVPN kulokhu okuthunyelwe, okunikeza isisombululo esiguquguqukayo

Kuzinhlelo zokusebenza ezihlukene, kusukela ku-Windows kuya ku-Linux noma i-MacOS, i-OpenVPN ingafakwa. Inokucaciswa kwedivayisi okuphansi kakhulu, ngakho-ke i-VPS eshibhe kakhulu inezinsiza ezanele zokuyiqhuba kahle. Ikheli le-IP elizinikezele kufanele libe sohlwini lwakho

Sizobe sisebenzisa i-CentOS 7.6 VPS enamakhore angu-2 CPU kanye no-2 GB we-RAM, kodwa uma uthanda, ungehla ngisho nangaphansi. Yenza isibuyekezo sesistimu esijwayelekile ngaphambi kokufaka ukuze uqinisekise ukuthi wonke amaphakheji abuyekezelwa kunguqulo yawo yakamuva

Khetha umhlinzeki wesevisi ye-DNS yeDynamic. Sincoma i-no-ip.org, evumelana kahle ne-Windows VPS yethu. Ngemuva kokungena ngemvume, uzokwazi ukukhetha igama lakho lomethuleli elizosetshenziswa ukuxhuma ku-Windows VPS yakho. Sicela uqaphele ukuthi ngeke udinge ukuthi i-VPN yakho isebenze ukuze usebenzise igama lomethuleli, njengoba izophinda ithole i-IP yangempela ye-VPS. Ngemva kokubhalisa, uzodinga ukulanda futhi ulungiselele iklayenti lakho leDynamic DNS ngokungena kwakho okuzenzakalelayo okufakwe ohlwini lwefomu lokubhalisa, njengoba ufisa (okuhlanganisa nezinga lokuvuselela eliwusizo ku-Dynamic VPN IP)


Kufanele uzame ngokuqondile igama lomethuleli kuhlelo lwakho lokusebenza lwedeskithophu ekude ngemva kokufaka nokusetha ukuze wenze isiqiniseko sokuthi lisebenza kahle kuze kube yilapho isizinda sivunyelwa. Uma uqinisekise ukuthi i-DNS yakho yeDynamic isebenza kahle, ungachofoza inkinobho yokuxhuma ku-VPN yakho. Inethiwekhi yangasese ebonakalayo iyindlela yokuxhuma kunethiwekhi yangasese (njengenethiwekhi yehhovisi lakho) ngokusebenzisa inethiwekhi yomphakathi (njenge-inthanethi). I-VPN ihlanganisa ubuhle besixhumanisi sokudayela kuseva yokudayela ngokunethezeka nokuguquguquka koxhumano lwe-inthanethi

Ungandizela kwamanye amazwe ngokusebenzisa uxhumano lwe-inthanethi futhi, ezindaweni eziningi, uxhume ehhovisi lakho ngekholi yasendaweni enombolweni yocingo eseduze ukuze uthole i-inthanethi. Uma ikhompuyutha yakho nehhovisi linoxhumano lwe-inthanethi olunesivinini esikhulu (njengekhebula noma i-DSL), ungakwazi ukuxhumana nehhovisi lakho ngesivinini esikhulu se-inthanethi, esishesha kakhulu kunanoma yikuphi ukuxhumana kokudayela usebenzisa imodemu ye-analog. Lobu buchwepheshe benza inkampani ikwazi ukuxhumana ngenethiwekhi yomphakathi iye emahhovisi ayo egatsha noma nezinye izinkampani kuyilapho igcina ukuxhumana okuphephile. Ngokunengqondo, isixhumanisi se-VPN ku-inthanethi yonkana sisebenza njengoxhumano lwenethiwekhi yendawo ebanzi (i-WAN) ezinikele

Ukuqinisekisa ukuthi abasebenzisi abagunyaziwe kuphela abangaxhuma kunethiwekhi yakho, amanethiwekhi ayimfihlo abonakalayo asebenzisa ukuxhumana okuqinisekisiwe. Ukuxhumana kwe-VPN kusebenzisa I-Point-to-Point Tunnel Protocol (PPTP) noma I-Layer Two Tunneling Protocol (L2TP) ukuze ibethele idatha ukuze kuqinisekiswe ukuthi idatha iphephile njengoba idlula kunethiwekhi yomphakathi. Kumaseva asebenzisa i-Windows Server 2003, i-VPN iqukethe iseva ye-VPN, iklayenti le-VPN, isixhumanisi se-VPN (ingxenye yokuxhumana lapho idatha ibethelwe khona) kanye nomhubhe (leyo ngxenye yokuxhumana lapho idatha ifakwe khona)

Enye yezimiso ezilandelwayo zomhubhe ezinikezwe ngamaseva asebenzisa i-Windows Server 2003, womabili afakwe ne-Routing and Remote Access, iqeda umhubhe. Isevisi yomzila kanye nokufinyelela kude ifakwa ngokuzenzakalelayo phakathi nenqubo yokufaka yakho ye-Windows Server 2003. Isevisi yomzila kanye nokufinyelela kude ivaliwe ngokuzenzakalelayo, nokho

== Indlela yokufaka nokulungisa iseva yenethiwekhi yangasese ebonakalayo ku-Windows Server ==
Indlela evamile yokuvumela abasebenzisi ukuthi bathole ukufinyelela bekude kunethiwekhi yangaphakathi inethiwekhi yangasese ebonakalayo. Imigudu ye-VPN inganikeza ukufinyelela okuphephile cishe kuso sonke isixhumanisi, kuye ngokuthi icushwe kanjani. Ungasetha inethiwekhi yangasese ebonakalayo uma ufuna ukufinyelela okuphephile kunethiwekhi yakho ngenkathi ungekho ehhovisi (VPN). Ungakwazi ukuxhumana nge-inthanethi futhi ufinyelele amafayela akho abelwene nezinsiza ngokuphephile. Uma ungenabo abasebenzisi abaningi, awudingi ukuthenga iseva ye-VPN ebizayo. Iseva ye-VPN nezici zeklayenti empeleni zisekelwa yiWindows
Kulula ukukhweza nokumisa iseva ye-VPN usebenzisa i-Windows Server 2016. iseva ye-rolt VPN ingafakwa emizuzwini embalwa nje ngokulandela imiyalelo ekulesi sihloko. I-VPN inikeza ukufinyelela okuvikelekile kudatha yangaphakathi kanye nezinhlelo zokusebenza zezinhlangano zamakhasimende namadivayisi asebenzisa i-inthanethi. Ukuze wethule kahle futhi ugcine imvelo ye-VPN ngaphakathi kwenhlangano yakho, udinga ukuqonda ukuthi ungayikhetha kanjani iphrothokholi yokudonsa efanelekile, ulungiselele ukuqinisekiswa kwe-VPN, futhi ulungiselele indima yeseva ukusekela ukucushwa kwakho okukhethiwe.
Ngokombono we-VPN, inselele enkulu kunazo zonke ukuthi ivumela wonke amaklayenti (axhumeke ngempumelelo) ukuthi athwale zonke izinkinga zawo kunethiwekhi yezinkampani. I-Split-tunneling amandla eklayenti le-VPN "lokusebenzelana"namanye amanethiwekhi kuyilapho ligcina umhubhe we-VPN ngenethiwekhi phakathi nenqubo esebenzayo. Uma ukuhlukaniswa kukamhubhe kuvunyelwe, iklayenti elimisa umhubhe we-VPN lizokwazi ukugcina ukufinyelela kumanethiwekhi angavikelekile njengama-LAN omphakathi noma i-inthanethi.

Ubuchwepheshe be-VPN (virtual private network) buvumela idivayisi ukuthi ifinyelele inethiwekhi yangasese “ngomhubhe” ovikelekile phakathi kwalowo mshini nenethiwekhi isebenzisa uxhumano lwe-inthanethi olusesidlangalaleni. Lokhu kuvikela idatha kubadlali abanonya ababonwa noma aphazanyiswe. Izinhlelo ze-Market VPN ezivumela abantu ukuthi bantweza ngasese besuka ekhaya noma endaweni yomphakathi kanye nezixazululo ezigxile kwezamabhizinisi ezivumela abasebenzi ukuthi baxhumane bekude nenethiwekhi yebhizinisi ngokuvikelekile yizimo ezi-2 ezivame ukusetshenziswa kakhulu.

Susa noma yiziphi izinhlelo zokusebenza zeklayenti le-VPN zamanje ongazidingi, njengesinyathelo sokuqala. Ngokweqile, amakhasimende e-VPN kufanele akwazi ukusebenza ndawonye, ​​kodwa amakhasimende aqhudelanayo angase abe umthombo wezinkinga, ngakho-ke kungcono ukuwaqeda. Manje futhi indawo ekahle yokuqala ukumisa inethiwekhi Ungase udinge ukuchitha isikhathi esiningi ulungiselela iklayenti le-VPN uma uhlose ukufaka i-VPN yabasebenzi abafinyelela izinsiza ze-inthanethi ngezindlela ezihlukahlukene, njenge-Wireless Fidelty kanye namamodemu e-5G, futhi ukuxhumana okunezintambo. Kungaba usizo ukwenza lula amanethiwekhi ngokunqamula okokusebenza okungasetshenzisiwe

Ukushintsha amaklayenti kumhlinzeki wakho we-VPN kuyindlela eshesha kakhulu yokwenza i-VPN yakho isebenze. Azinikezi, nokho izinhlelo zokusebenza zayo yonke inkundla, njengeWindows, iOS, ne-Android, oyidingayo. Noma bengakwenzi, kuhle ukuthi uqale ufake lokho abakuthengisayo bese uhlola ukuthi iphrofayili yakho ye-VPN isebenza kahle yini. Bheka kuwebhusayithi yomhlinzeki wakho we-VPN ukuze uthole ithebhu "okulandiwe". Njengoba ufuna ukuvikela ukuxhumana kusuka kumadivayisi amaningi ngangokunokwenzeka, ungadawuniloda izinhlelo zokusebenza zamadivaysi eselula asetshenziswa abasebenzi bakho

== Indlela yokufaka i-VPN usebenzisa i-RRAS (Ukufinyelela Okukude Nomzila) ==
I-VPN wuhlobo olufushane lwenethiwekhi yangasese ebonakalayo esinika ubumfihlo be-inthanethi bomphakathi, ukungaziwa nokuvikelwa. I-ISP yethu ye-IP imbozwe insiza ye-VPN, ngakho-ke imisebenzi yakho eku-inthanethi ayilandeleki. I-VPN ingase futhi isetshenziselwe ukuxhumanisa amakhompyutha nge-inthanethi noma enye inethiwekhi emaphakathi namanethiwekhi ekhompyutha aqhelelene, akude ngokuvamile angatholakali.

Isevisi yomzila kanye ne-Remote Access iwumsebenzi weseva yobunikazi ye-Windows esekela Inethiwekhi Eyimfihlo Ebonakalayo (i-VPN) noma izixhumanisi zokudayela kumsebenzisi wesilawuli kude noma ukuxhumana kwesayithi nesayithi. Ngakho, singakwazi ukuguqula i-Windows Server ejwayelekile ibe yiseva ye-VPN sisebenzisa i-RRAS. Iseva ye-Microsoft RRAS kanye neklayenti le-VPN lisekela ukuxhumana kwe-VPN okusekelwe ku-PPTP, L2TP/IPSec, SSTP, kanye ne-IKEv2

Kulesi sihloko, sixoxa ngendlela yokufaka i-VPN usebenzisa i-RRAS ku-Windows Server nokuthi ungavumela kanjani uxhumano lwe-inthanethi ukuze amakhompyutha amaklayenti akwazi ukufinyelela amawebhusayithi ngamaseva e-VPN ngisho noma akunethiwekhi yangaphakathi encane.

Ukuxhumeka kwe-VPN kwenziwa kusetshenziswa i-PPTP (I-Point-to-Pont Tunnel Protocol) ngokuzenzakalelayo, kodwa futhi sithuthukisa iseva yethu ye-VPN ukuze isekele i-SSTP.

Sisebenzisa i-RRAS ku-Windows Server 2012 r2 Standard Edition efakwe iseva ye-VPS. Nge-Windows Server 2016 noma i-2019, ungakwazi futhi ukulandela izinyathelo ezifanayo. Le seva ye-VPS inekhadi elilodwa le-NIC kuphela futhi ayivunyelwe i-NAT uma ilungiselelwe ngekheli le-IP lomphakathi elimile. Njengoba kuyiseva ye-VPS, sisebenzisa ikheli le-IP lomphakathi le-VPS, sinokufinyelela kwe-RDP. Ngakho, ake siqale

Isango le-RRAS Multitenant. Ungase usebenzise i-RRAS njengesango lesofthiwe esekelwe kumshini (VM) kanye nerutha eyenza i-Cloud Service Providers (CSPs) kanye Namabhizinisi ivumele isikhungo sedatha kanye nomzila wethrafikhi yenethiwekhi yamafu phakathi kwamanethiwekhi angokoqobo nangokoqobo, okuhlanganisa i-inthanethi, kungakhathaliseki ukuthi uyayisebenzisa. I-Hyper-V Network Virtualization noma unamanethiwekhi e-VM afakwe nama-VLAN. Nge-RRAS Multitenant Gateway, ku-datacenter kusuka noma yikuphi, abaqashi bangakwazi i-VPN ezinsizeni zabo zenethiwekhi ye-VM. Futhi ungenza ukuxhumana kwe-VPN yesayithi kuya kusayithi kufinyeleleke kubaqashi phakathi kwamasayithi abo akude nendawo yakho yedatha

Ukwengeza, ungakwazi ukumisa i-RRAS Multitenant Gateway ene-Border Gateway Protocol yomzila oguquguqukayo, futhi ungakwazi ukunika amandla I-Network Address Translation (NAT) ukuze unikeze ukufinyelela kwe-inthanethi kwama-VM kumanethiwekhi e-VM.

Ngena ngemvume kuseva yakho ye-Remote Desktop, lapho ufuna ukufaka khona i-VPN Open Server Manager, bese ucindezela Engeza Izindima Nemisebenzi. Ngewizadi yokufaka, landela izinyathelo. Khetha Uhlobo Lokufaka: 'Ukufaka okusekelwe endimeni noma okusekelwe ezicini.'Hlola okuthi 'Khetha Iseva Ephulini Leseva'endaweni yokukhetha iseva. Ungabona igama leseva yekhompyutha yakho ku-pool yeseva. Ezindimeni Zeseva, khetha indawo yokufinyelela kude bese ucindezela inkinobho ethi Okulandelayo. Ungashintshi noma yiziphi izici bese uchofoza Okulandelayo

Khetha Ukufinyelela Okuqondile kanye ne-VPN, Amasevisi Womzila, bese uchofoza Okulandelayo ngaphansi Kwezinsizakalo Zomsebenzi. Buyekeza ithebhu yokufaka, futhi uma usulungile, chofoza isibuyekezo

Chofoza okuthi 'Vula Iwizadi Yokuqalisa'uma ukufakwa sekuqediwe. Bona isilekeleli 'sokusethwa kokufinyelela kude'. Vele uchofoze ku-Deploy VPN. Ungabona i-MMC Yomzila Nokufinyelela Kukude. Chofoza kwesokudla egameni leseva yakho bese uchofoza okuthi 'Lungisa futhi Vumela Umzila kanye Nokufinyelela Kukude.'Manje, landela imiyalelo evela kuwizadi yokufaka. Kuwizadi Yokwamukela, chofoza Okulandelayo

Khetha u-'Ukufinyelela ku-Virtual Private Network (VPN) kanye ne-NAT'kuWizadi Yokucushwa bese uchofoza Okulandelayo. Ku-VPN Link, khetha isixhumi esibonakalayo esinoxhumano lwe-inthanethi olufanele olunekheli le-IP lomphakathi, bese uchofoza Okulandelayo. Khetha 'Kusuka ohlwini olunikeziwe lwamakheli'Emsebenzini Wekheli Le-IP bese ukhetha Okulandelayo. Ngaphansi Kokunikezwa Kwebanga Lekheli, khetha Okusha bese wengeza ububanzi bekheli le-IP lendawo (qiniseka ukuthi ikheli le-Qala le-IP liyafana nekheli le-IP eliyinhloko lenethiwekhi yakho yangaphakathi)

Lokhu kwasetshenziselwa ukunikeza amakheli e-IP kumakhasimende axhumeke ukude kule seva ye-VPN. Khetha Okulandelayo ukuze uqhubeke uma usungeze isethi yama-IP. Khetha okuthi 'Cha, sebenzisa Umzila kanye Nokufinyelela Ukude ukuze uqinisekise izicelo zesixhumanisi'Ekuphatheni Amaseva Okufinyelela Okukude Okuningi bese uchofoza Okulandelayo. Chofoza okuthi Qeda ukuze uqedele iwizadi. Uzocelwa ukuthi uthumele umlayezo kumenzeli we-DHCP edluliselwe ngokumane uchofoze Kulungile kulo mlayezo.

Funda kabanzi :