Za mu gaya muku game da hanya mara tsada da amintacciyar hanya don tabbatar da haɗin gwiwar ma'aikata masu nisa ta hanyar VPN, ba tare da fallasa kamfani ga haɗari ko haɗari na kuɗi ba kuma ba tare da haifar da ƙarin matsaloli ga sashen IT da sarrafa kamfani ba.
Tare da ci gaban IT, ya zama mai yiwuwa don jawo hankalin ma'aikata masu nisa zuwa ƙara yawan matsayi.
Idan a baya a cikin ma'aikata masu nisa akwai wakilai na ƙwararrun ƙwararru, alal misali, masu zane-zane, masu rubutun rubuce-rubuce, yanzu ma'aikacin akawu, mai ba da shawara kan shari'a, da wakilai da yawa na sauran sana'o'i na iya sauƙin aiki daga gida, ziyartar ofishin kawai idan ya cancanta.
Amma a kowane hali, wajibi ne don tsara aiki ta hanyar tashar tashar jiragen ruwa.
Zaɓin mafi sauƙi. Mun kafa VPN akan uwar garken, ana ba ma'aikaci kalmar sirri ta shiga da maɓallin shaidar VPN, da kuma umarnin yadda ake saita abokin ciniki na VPN akan kwamfutarsa. Kuma sashen IT yana la'akari da kammala aikinsa.
Manufar ba ta da kyau, sai dai abu ɗaya: dole ne ya zama ma'aikaci wanda ya san yadda za a tsara komai da kansa. Idan muna magana ne game da ƙwararren mai haɓaka aikace-aikacen cibiyar sadarwa, da alama zai iya jurewa wannan aikin.
Amma akawu, mai zane, mai zane, marubucin fasaha, gine-gine, da sauran sana'o'i da yawa ba lallai ba ne su fahimci sarƙaƙƙen kafa VPN. Ko dai wani yana buƙatar haɗi da su daga nesa kuma ya taimaka, ko ya zo da kansa ya saita komai a wurin. Saboda haka, idan wani abu ya daina aiki a gare su, alal misali, saboda glitch a cikin bayanin martabar mai amfani, saitunan abokin ciniki na cibiyar sadarwa sun ɓace, to duk abin yana buƙatar sake maimaitawa.
Wasu kamfanoni suna ba da kwamfutar tafi-da-gidanka tare da software da aka riga aka shigar da kuma ingantaccen abokin ciniki na software na VPN don aiki mai nisa. A ka'idar, a wannan yanayin, masu amfani kada su sami haƙƙin gudanarwa. Ta wannan hanyar, ana magance matsalolin guda biyu: an ba wa ma'aikata tabbacin samar da software mai lasisi wanda ya dace da ayyukansu da kuma hanyar sadarwar da aka shirya. A lokaci guda, ba za su iya canza saitunan da kansu ba, wanda ke rage yawan kira zuwa ga
goyon bayan sana'a.
A wasu lokuta wannan ya dace. Misali, samun kwamfutar tafi-da-gidanka, za ku iya zama cikin kwanciyar hankali a cikin ɗakin ku da rana, kuma ku yi aiki cikin nutsuwa a cikin kicin da daddare don kada ku tada kowa.
Menene babban hasara? Daidai da ƙari - na'urar hannu ce da za a iya ɗauka. Masu amfani sun faɗi kashi biyu: waɗanda suka fi son PC ɗin tebur don iko da babban mai saka idanu, da waɗanda ke son ɗaukar hoto.
Ƙungiya ta biyu na masu amfani suna zaɓe da hannayensu biyu don kwamfyutocin. Bayan samun kwamfutar tafi-da-gidanka na kamfani, irin waɗannan ma'aikata suna fara jin daɗin tafiya tare da shi zuwa cafes, gidajen cin abinci, zuwa yanayi kuma suna ƙoƙarin yin aiki daga can. Idan kawai zai yi aiki, kuma ba kawai amfani da na'urar da aka karɓa azaman kwamfutar ku ba don cibiyoyin sadarwar jama'a da sauran nishaɗi.
Ba dade ko ba dade, kwamfutar tafi-da-gidanka na kamfani ya ɓace ba kawai tare da bayanin aikin akan rumbun kwamfutarka ba, har ma tare da ingantaccen damar VPN. Idan an duba akwatin "ajiye kalmar sirri" a cikin saitunan abokin ciniki na VPN, to mintuna suna ƙidaya. A cikin yanayin da ba a gano asarar nan da nan ba, ba a sanar da sabis na tallafi nan da nan ba, ko ma'aikacin da ya dace tare da haƙƙin toshe ba a samu nan da nan ba - wannan zai iya zama babban bala'i.
Wani lokaci iyakance samun bayanai yana taimakawa. Amma iyakance damar shiga ba yana nufin warware matsalolin asarar na'urar gaba ɗaya ba, hanya ce kawai ta rage asara lokacin da aka fallasa bayanan kuma an lalata su.
Kuna iya amfani da ɓoyayyen ɓoyayyen ko tantance abubuwa biyu, misali tare da maɓallin USB. A zahiri, ra'ayin yana da kyau, amma yanzu idan kwamfutar tafi-da-gidanka ta fada cikin hannun da ba daidai ba, mai shi zai yi aiki tukuru don samun damar shiga bayanan, gami da shiga ta hanyar VPN. A wannan lokacin, zaku iya sarrafa toshe damar shiga hanyar sadarwar kamfani. Kuma sabbin dama suna buɗewa ga mai amfani da nesa: don yin kutse ko dai kwamfutar tafi-da-gidanka, ko maɓallin shiga, ko duka gaba ɗaya. A bisa ka'ida, matakin kariya ya karu, amma sabis na tallafin fasaha ba zai gajiya ba. Bugu da kari, kowane ma'aikacin nesa zai sayi kayan tantance abubuwa biyu (ko boye-boye).
Wani labari na daban na bakin ciki da kuma dogon lokaci shine tarin diyya ga kwamfutocin tafi-da-gidanka da suka ɓace ko suka lalace (jefa su a ƙasa, zubar da shayi mai daɗi, kofi, da sauran hatsarori) da rasa maɓallan shiga.
Daga cikin wasu abubuwa, kwamfutar tafi-da-gidanka tana ƙunshe da sassa na inji, kamar keyboard, haɗin USB, da murfi mai allo - duk waɗannan sun ƙare rayuwar sabis ɗin su na tsawon lokaci, sun zama nakasu, suna kwance kuma dole ne a gyara su ko canza su (mafi yawancin lokuta. , an maye gurbin dukkan kwamfutar tafi-da-gidanka).
To yanzu me? An haramta shi sosai don fitar da kwamfutar tafi-da-gidanka daga gidan da waƙa
motsi?
Me yasa suka ba da kwamfutar tafi-da-gidanka?
Dalili ɗaya shine kwamfutar tafi-da-gidanka ya fi sauƙi don canja wurin. Bari mu fito da wani abu dabam, kuma m.
Ba za ku iya ba da kwamfutar tafi-da-gidanka ba, amma masu kariya ta LiveUSB flash drives tare da haɗin VPN da aka riga aka tsara, kuma mai amfani zai yi amfani da nasa kwamfutar. Amma wannan kuma irin caca ne: shin taron software zai gudana akan kwamfutar mai amfani ko a'a? Matsalar na iya zama rashin sauƙi na direbobi masu dacewa.
Muna bukatar mu gano yadda za a tsara haɗin ma'aikata daga nesa, kuma yana da kyawawa cewa mutum bai yarda da jarabar yawo a cikin birni tare da kwamfutar tafi-da-gidanka na kamfani ba, amma yana zaune a gida kuma yana aiki a hankali ba tare da hadarin mantuwa ko haɗari ba. rasa na'urar da aka bashi amana a wani wuri.
Samun damar VPN na tsaye
Me zai faru idan ba ka samar da na'urar ƙarshe ba, misali, kwamfutar tafi-da-gidanka, ko musamman ba keɓantaccen filasha don haɗi ba, amma ƙofar hanyar sadarwa tare da abokin ciniki na VPN a cikin jirgi?
Misali, na'ura mai ba da hanya tsakanin hanyoyin sadarwa wanda ya hada da tallafi ga ka'idoji daban-daban, wanda an riga an saita haɗin VPN. Ma'aikacin nesa yana buƙatar haɗa kwamfutarsa da ita kuma ya fara aiki.
Wadanne batutuwa ne wannan ke taimakawa magance?
- Ba a fitar da kayan aiki tare da saita hanyar shiga cibiyar sadarwar kamfani ta hanyar VPN daga gidan.
- Kuna iya haɗa na'urori da yawa zuwa tashar VPN ɗaya.
Mun riga mun rubuta a sama cewa yana da kyau a iya motsawa a kusa da ɗakin tare da kwamfutar tafi-da-gidanka, amma sau da yawa yana da sauƙi kuma mafi dacewa don aiki tare da kwamfutar tebur.
Kuma kuna iya haɗa PC, kwamfutar tafi-da-gidanka, wayar hannu, kwamfutar hannu, har ma da e-reader zuwa VPN akan na'ura mai ba da hanya tsakanin hanyoyin sadarwa - duk wani abu da ke goyan bayan shiga ta hanyar Wi-Fi ko Ethernet mai waya.
Idan ka kalli lamarin sosai, wannan na iya zama, alal misali, wurin haɗi don ƙaramin ofis inda mutane da yawa zasu iya aiki.
A cikin irin wannan yanki mai kariya, na'urorin da aka haɗa za su iya musayar bayanai, za ku iya tsara wani abu kamar hanyar raba fayil, yayin da samun damar shiga Intanet ta al'ada, aika takardu don bugawa zuwa firinta na waje, da sauransu.
Wayar kamfani! Akwai da yawa a cikin wannan sautin da ke yin sauti a wani wuri a cikin bututu! Tashar VPN ta tsakiya don na'urori da yawa suna ba ku damar haɗa wayar hannu ta hanyar hanyar sadarwar Wi-Fi kuma amfani da wayar IP don yin kira zuwa gajerun lambobi a cikin hanyar sadarwar kamfani.
In ba haka ba, dole ne ku yi kiran wayar hannu ko amfani da aikace-aikacen waje kamar WhatsApp, wanda ba koyaushe ya dace da manufofin tsaro na kamfanoni ba.
Kuma tun da yake muna magana ne game da aminci, yana da kyau a lura da wata muhimmiyar hujja. Tare da ƙofar VPN hardware, zaku iya haɓaka tsaro ta amfani da sabbin fasalolin sarrafawa akan ƙofar shiga. Wannan yana ba ku damar ƙara tsaro da matsawa wani ɓangare na nauyin kariya na zirga-zirga zuwa ƙofar hanyar sadarwa.
Wane bayani ne Zyxel zai iya bayarwa ga wannan harka?
Muna la'akari da na'urar da yakamata a fitar don amfani na ɗan lokaci ga duk ma'aikatan da zasu iya kuma suna son yin aiki daga nesa.
Saboda haka, irin wannan na'urar ya kamata ya kasance:
- m;
- abin dogara (don kada a ɓata kuɗi da lokaci akan gyare-gyare);
- samuwa don siya a cikin sarƙoƙi na tallace-tallace;
- mai sauƙin saitawa (an yi nufin amfani da shi ba tare da kira na musamman ba
ƙwararren mai horarwa).
Ba sauti sosai, dama?
Koyaya, irin wannan na'urar ta wanzu, tana da gaske kuma tana da kyauta
Zyxel ZyWALL VPN2S
VPN2S shine tacewar zaɓi na VPN wanda ke ba ku damar amfani da haɗin sirri
aya-zuwa-matsayi ba tare da hadadden tsarin sigogin cibiyar sadarwa ba.
Hoto 1. Bayyanar Zyxel ZyWALL VPN2S
Takaitaccen bayanin na'urar
Fasalolin Hardware
10/100/1000 Mbps RJ-45 tashar jiragen ruwa
3 x LAN, 1 x WAN/LAN, 1 x WAN
tashoshin USB
2 x USB 2.0
Babu fan
A
Ƙarfin tsarin da aiki
Wutar Wutar Wuta ta SPI (Mbps)
1.5 Gbps
Bandwidth VPN (Mbps)
35
Matsakaicin adadin zaman lokaci guda. TCP
50000
Matsakaicin adadin ramukan IPsec VPN lokaci guda [5] 20
Yankunan da za a iya daidaita su
A
IPv6 goyon baya
A
Matsakaicin adadin VLANs
16
Babban Fasalolin Software
Multi-WAN Load Ma'auni/Rashi
A
Cibiyar sadarwar sirri mai zaman kanta (VPN)
Ee (IPSec, L2TP akan IPSec, PPTP, L2TP, GRE)
Abokin ciniki na VPN
IPSec/L2TP/PPTP
Tace abun ciki
shekara 1 kyauta
Firewall
A
Rukunin Interface VLAN
A
Gudanar da bandwidth
A
log log da saka idanu
A
Mai Taimakon Cloud
A
Ikon nesa
A
Ka lura. Bayanan da ke cikin tebur sun dogara ne akan OPAL BE microcode 1.12 ko sama
daga baya sigar.
Waɗanne zaɓuɓɓukan VPN ne ke samun goyan bayan ZyWALL VPN2S
A zahiri, daga sunan a bayyane yake cewa na'urar ZyWALL VPN2S ita ce da farko
tsara don haɗa ma'aikata masu nisa da ƙananan rassa ta hanyar VPN.
- An ba da ka'idar L2TP Sama da IPSec VPN don masu amfani na ƙarshe.
- Don haɗa ƙananan ofisoshi, ana ba da sadarwa ta hanyar Site-zuwa-Gidan IPSec VPN.
- Hakanan, ta amfani da ZyWALL VPN2S zaku iya gina haɗin L2TP VPN da ita
mai bada sabis don amintaccen damar Intanet.
Ya kamata a lura cewa wannan rabo yana da sharadi sosai. Misali, zaku iya
wuri mai nisa yana saita haɗin yanar gizo-zuwa-Gidan IPSec VPN tare da guda ɗaya
mai amfani a cikin kewaye.
Tabbas, duk wannan ta amfani da tsauraran algorithms na VPN (IKEv2 da SHA-2).
Amfani da WAN da yawa
Don aiki mai nisa, babban abu shine samun tashar tsayayye. Abin takaici, tare da kawai
Ba za a iya tabbatar da wannan tare da layin sadarwa koda daga mafi amintaccen mai bada sabis ba.
Ana iya raba matsalolin zuwa nau'i biyu:
- sauke cikin sauri - Multi-WAN ma'auni nauyin nauyin aiki zai taimaka tare da wannan
kiyaye kwanciyar hankali a saurin da ake buƙata; - gazawar akan tashar - don wannan dalili ana amfani da aikin gazawar Multi-WAN don
tabbatar da juriyar rashin kuskure ta amfani da hanyar kwafi.
Waɗanne damar hardware ke akwai don wannan:
- Ana iya daidaita tashar LAN ta huɗu azaman ƙarin tashar WAN.
- Ana iya amfani da tashar USB don haɗa modem na 3G/4G, wanda ke samarwa
tashar madadin a cikin hanyar sadarwar salula.
Ƙara tsaro na cibiyar sadarwa
Kamar yadda aka ambata a sama, wannan shine ɗayan manyan fa'idodin amfani da na musamman
na'urori na tsakiya.
ZyWALL VPN2S yana da aikin SPI (Bayanin Fakitin Jiha) don magance nau'ikan hare-hare daban-daban, gami da DoS (Kin Sabis), hare-hare ta amfani da adiresoshin IP da ba su da izini, da samun damar shiga nesa mara izini, zirga-zirgar cibiyar sadarwa da fakitin da ake tuhuma.
A matsayin ƙarin kariya, na'urar tana da tace abun ciki don toshe damar mai amfani zuwa abun ciki mai tuhuma, haɗari da ban sha'awa.
Mai sauri da sauƙi saitin mataki 5 tare da saitin maye
Don saita haɗi da sauri, akwai madaidaicin saitin maye da hoto
dubawa a cikin yaruka da yawa.
Hoto 2. Misali na ɗaya daga cikin saitin wizard fuska.
Don gudanarwa mai sauri da inganci, Zyxel yana ba da cikakkiyar fakitin kayan aikin gudanarwa na nesa wanda zaku iya daidaita VPN2S cikin sauƙi da saka idanu.
Ikon kwafin saituna yana sauƙaƙe shirye-shiryen na'urorin ZyWALL VPN2S da yawa don canja wurin zuwa ma'aikatan nesa.
VLAN goyon baya
Duk da cewa an tsara ZyWALL VPN2S don aiki mai nisa, yana goyan bayan VLAN. Wannan yana ba ku damar haɓaka tsaro na cibiyar sadarwa, misali, idan an haɗa ofishin ɗan kasuwa ɗaya, wanda ke da Wi-Fi baƙo. Ayyukan VLAN na yau da kullun, kamar iyakance wuraren watsa shirye-shirye, rage zirga-zirgar zirga-zirgar zirga-zirgar zirga-zirga da amfani da manufofin tsaro, ana buƙata a cikin cibiyoyin sadarwar kamfanoni, amma a ƙa'ida kuma ana iya amfani da su a cikin ƙananan kasuwancin.
Tallafin VLAN kuma yana da amfani don tsara hanyar sadarwa daban, misali, don wayar IP.
Don tabbatar da aiki tare da VLAN, na'urar ZyWALL VPN2S tana goyan bayan mizanin IEEE 802.1Q.
Girgawa sama
Haɗarin rasa na'urar hannu tare da ingantaccen tashar VPN na buƙatar mafita banda rarraba kwamfyutocin kamfanoni.
Amfani da ƙananan ƙofofin VPN marasa tsada yana ba ku damar tsara ayyukan ma'aikata masu nisa cikin sauƙi.
An tsara ƙirar ZyWALL VPN2S asali don haɗa ma'aikata masu nisa da ƙananan ofisoshi.
hanyoyi masu amfani
→
→
→
→
→
source: www.habr.com