{"id":30229,"date":"2019-10-31T21:34:23","date_gmt":"2019-10-31T18:34:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti\/"},"modified":"2019-10-31T21:34:23","modified_gmt":"2019-10-31T18:34:23","slug":"vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti","title":{"rendered":"VPN p\u00ebr pajisje mobile n\u00eb nivel rrjeti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb internetin rus ende ka befasuese pak materiale mbi nj\u00eb teknologji t\u00eb till\u00eb t\u00eb vjet\u00ebr dhe t\u00eb thjesht\u00eb, por t\u00eb rehatshme, t\u00eb sigurt dhe ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme me zhvillimin e Internetit t\u00eb Things, si\u00e7 \u00ebsht\u00eb VPN-aj mobil (rrjeti privat virtual). N\u00eb k\u00ebt\u00eb artikull do t\u00eb p\u00ebrshkruaj se si dhe pse mund t\u00eb konfigurohet qasja n\u00eb rrjetin tuaj privat nga \u00e7do pajisje me kart\u00eb SIM pa nevoj\u00ebn p\u00ebr t\u00eb instaluar softuer t\u00eb specializuar mbi t\u00eb.
\n\"VPN
\n<\/a><\/noindex><\/p>\n

Detyrat dhe kufizimet<\/h2>\n

\nFillimisht, do t\u00eb p\u00ebrgjigjem n\u00eb pyetjen \"pse?\". VPN si teknologji p\u00ebrdoret p\u00ebr t\u00eb zgjidhur nj\u00eb gam\u00eb t\u00eb gjer\u00eb detyrash rrjetesh, t\u00eb p\u00ebrbashk\u00ebta nga nj\u00eb karakteristik\u00eb e p\u00ebrbashk\u00ebt \u2014 transferimi i izoluar i t\u00eb dh\u00ebnave midis dy pajisjeve p\u00ebrmes nj\u00eb numri t\u00eb madh nyjesh nd\u00ebrmjet\u00ebse. N\u00eb baz\u00eb t\u00eb k\u00ebtij transferimi, nd\u00ebrtohen zgjidhje m\u00eb komplekse dhe zgjidhen ato detyra t\u00eb ndryshme. N\u00eb rastin e zakonsh\u00ebm dhe t\u00eb njohur p\u00ebr t\u00eb gjith\u00eb, p\u00ebr nd\u00ebrtimin e VPN p\u00ebrdoret rrjeti i operator\u00ebve t\u00eb lidhjeve fikse (ata q\u00eb duan detaje kan\u00eb material t\u00eb shk\u00eblqyer<\/a><\/noindex>) ose nj\u00eb num\u00ebr t\u00eb madh protokollesh rrjeti (GRE, IPSec, L2TP dhe t\u00eb tjer\u00eb \u2014 po t\u00eb nj\u00ebjti autor p\u00ebr k\u00ebt\u00eb<\/a><\/noindex>) dhe produkteve softuerike q\u00eb punojn\u00eb me ta (Cisco AnyConnect, OpenVPN, TOR \u2014 e dini edhe vet\u00eb), por p\u00ebrdorimi i tyre n\u00eb nj\u00eb pajisje p\u00ebrfundimtare t\u00eb caktuar menj\u00ebher\u00eb paraqet nj\u00eb s\u00ebr\u00eb k\u00ebrkesash q\u00eb, n\u00ebse nuk p\u00ebrmbushen, \u00e7ojn\u00eb n\u00eb kufizime t\u00eb caktuar.<\/p>\n

Kufizimi i par\u00eb serioz \u2014 pajisja duhet t\u00eb jet\u00eb n\u00eb gjendje t\u00eb punoj\u00eb n\u00eb nivelin harduerik dhe softuerik me t\u00eb pakt\u00ebn nj\u00eb nga k\u00ebta protokoll\u00eb. M\u00eb shpesh, kjo p\u00ebrcaktohet nga softueri, i cili \u00ebsht\u00eb leht\u00ebsisht i gjetur p\u00ebr laptop\u00eb ose smartphone, por ka raste kur detyra i shtrohet nj\u00eb pajisjeje shum\u00eb t\u00eb thjesht\u00eb nga pik\u00ebpamja harduerike, ose softueri i saj ka kufizime: mat\u00ebsi i ujit d\u00ebshiron t\u00eb p\u00ebrdor\u00eb VPN-in p\u00ebr t\u00eb transferuar at\u00eb ndihm\u00ebse bajt t\u00eb leximeve nj\u00eb her\u00eb n\u00eb muaj, po aq sa ju d\u00ebshironi t\u00eb p\u00ebrdorni VPN p\u00ebr t\u00eb redaktuar profilin tuaj n\u00eb LinkedIn.<\/p>\n

Nj\u00eb kufizim tjet\u00ebr i r\u00ebnd\u00ebsish\u00ebm \u00ebsht\u00eb nevoja p\u00ebr konfigurim. Kjo funksionon p\u00ebr pajisjet \"e thjeshta\" q\u00eb p\u00ebrmend\u00ebm m\u00eb par\u00eb, ashtu si p\u00ebr smartphone dhe kompjuter\u00eb klasik\u00eb, t\u00eb cil\u00ebt nuk e din\u00eb kufizimin e m\u00ebparsh\u00ebm. Dhe n\u00ebse p\u00ebr t\u00eb par\u00ebt kjo \u00ebsht\u00eb relativisht e thjesht\u00eb dhe varet nga koha e shpenzuar p\u00ebr konfigurimin, p\u00ebr t\u00eb dyt\u00ebt ka disa mund\u00ebsi. Shum\u00eb her\u00eb, organizatat p\u00ebrdorin VPN p\u00ebr siguri, p\u00ebr t\u00eb mbrojtur pajisjen p\u00ebrfundimtare t\u00eb pun\u00ebs nga dalja n\u00eb internetin publik pa mbrojtjen e duhur korporative ose nga transferimi i t\u00eb dh\u00ebnave t\u00eb pun\u00ebs p\u00ebrmes kanaleve publike. P\u00ebrdoruesit p\u00ebrfundimtar\u00eb, p\u00ebr disa arsye, mund t\u00eb \u00e7aktivizojn\u00eb ose harrojn\u00eb t\u00eb aktivizojn\u00eb VPN-n\u00eb, duke e b\u00ebr\u00eb k\u00ebshtu q\u00eb shum\u00eb sisteme sigurie t\u00eb kompanis\u00eb t\u00eb mbeten \"jasht\u00eb\".<\/p>\n

T\u00eb dy k\u00ebto kufizime jan\u00eb leht\u00ebsisht t\u00eb tejkalueshme n\u00ebse aksesin n\u00eb VPN e siguron n\u00eb nivelin e rrjetit. N\u00eb rastin e lidhjeve mobile, kjo mund t\u00eb realizohet me nj\u00eb \"VPN mobile\". Pajisja e cila mund t\u00eb jet\u00eb e nd\u00ebrlikuar do t\u00eb transmetoj\u00eb t\u00eb dh\u00ebnat n\u00eb rrjetin e duhur. Nuk ka r\u00ebnd\u00ebsi se cilat konfigurime jan\u00eb b\u00ebr\u00eb n\u00eb pajisje, me nj\u00eb rrjet t\u00eb konfiguruar si\u00e7 duhet, n\u00eb \u00e7do rast do t\u00eb transmetoj\u00eb ato atje ku duhet dhe askund tjet\u00ebr. <\/p>\n

Dhe si nj\u00eb bonus i k\u00ebndsh\u00ebm, pajisja do t\u00eb marr\u00eb nj\u00eb adres\u00eb nga rrjeti i brendsh\u00ebm, e cila mund t\u00eb konfigurohet n\u00eb distanc\u00eb, dhe akses n\u00eb t\u00eb do t\u00eb jet\u00eb e mundur vet\u00ebm nga brenda k\u00ebtij rrjeti (ose fizikisht). P\u00ebr nj\u00eb klas\u00eb t\u00eb caktuar pajisjesh, kjo \u00ebsht\u00eb shum\u00eb e r\u00ebnd\u00ebsishme.<\/p>\n

Si funksionon kjo<\/h2>\n

<\/p>\n

PS Core<\/h3>\n

\nN\u00eb dukje, VPN \u00ebsht\u00eb nj\u00eb sh\u00ebrbim klasik i t\u00eb gjith\u00eb operator\u00ebve t\u00eb komunikimit p\u00ebr segmentin B2B, dhe p\u00ebrse at\u00ebher\u00eb duhet t\u00eb fokusohemi n\u00eb k\u00ebt\u00eb? E gjith\u00eb \u00e7\u00ebshtja \u00ebsht\u00eb n\u00eb m\u00ebnyr\u00ebn se si \u00ebsht\u00eb e nd\u00ebrtuar rruga e transferimit t\u00eb t\u00eb dh\u00ebnave p\u00ebr pajisjet e lidhura p\u00ebrmes GPRS, HSPA, LTE ose ndonj\u00eb teknologjie tjet\u00ebr t\u00eb komunikimeve mobile. K\u00ebtu nuk ka VLAN-\u00ebsh t\u00eb njohur p\u00ebr t\u00eb gjith\u00eb administrator\u00ebt e rrjetit, nuk ka switch-e, as edhe router-a n\u00eb kuptimin e tyre t\u00eb zakonsh\u00ebm. Por ka nj\u00eb rrjet t\u00eb aksesit radio (RAN) dhe nj\u00eb kernel paketa (PS Core). <\/p>\n

\"VPN
\nNj\u00eb skem\u00eb e thjeshtuar e rrjetit t\u00eb paketave t\u00eb operatorit t\u00eb komunikimeve mobile. Ajo dallohet paksa p\u00ebr LTE, por kuptimi i p\u00ebrgjithsh\u00ebm mbetet i nj\u00ebjt\u00eb.<\/i><\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, \u00e7do pajisje me kartel\u00eb SIM, e regjistruar n\u00eb rrjetin paketor (e cila ka kaluar procedur\u00ebn GPRS attach ose ekuivalente), p\u00ebrpara se t\u00eb filloj\u00eb t\u00eb d\u00ebrgoj\u00eb t\u00eb dh\u00ebna diku, duhet t\u00eb inicoj\u00eb krijimin e nj\u00eb seanc\u00eb transmetimi t\u00eb t\u00eb dh\u00ebnave (konteksti PDP) n\u00eb ruterin b\u00ebrthamor t\u00eb rrjetit paketor, GGSN. Detajet dhe q\u00ebllimi i k\u00ebtyre proceseve jan\u00eb p\u00ebrshkruar shum\u00eb mir\u00eb k\u00ebtu k\u00ebto artikuj<\/a><\/noindex>. \u00c7far\u00eb \u00ebsht\u00eb e r\u00ebnd\u00ebsishme p\u00ebr ne: gjat\u00eb iniciat\u00ebs s\u00eb seanc\u00ebs, n\u00eb k\u00ebrkes\u00ebn p\u00ebr GGSN, mes parametrave t\u00eb tjer\u00eb jan\u00eb ato q\u00eb shum\u00eb njer\u00ebz i kan\u00eb par\u00eb n\u00eb telefonat e tyre ose madje kan\u00eb pasur t\u00eb b\u00ebjn\u00eb me to gjat\u00eb konfigurimit, p\u00ebr shembull, t\u00eb modem\u00ebve USB. K\u00ebto jan\u00eb tri fusha: APN, emri i p\u00ebrdoruesit dhe fjal\u00ebkalimi. APN (pik\u00eb qasje) \u00ebsht\u00eb nj\u00eb entitet shum\u00eb i r\u00ebnd\u00ebsish\u00ebm n\u00eb logjik\u00ebn e pun\u00ebs s\u00eb GGSN: n\u00eb var\u00ebsi t\u00eb asaj se nga cila APN inicohet seanca, GGSN vepron n\u00eb m\u00ebnyra t\u00eb ndryshme. Si rezultat i p\u00ebrpunimit t\u00eb suksessh\u00ebm t\u00eb k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit, GGSN duhet t\u00eb aktivizoj\u00eb nj\u00eb seanc\u00eb transmetimi t\u00eb t\u00eb dh\u00ebnave dhe t'i komunikoj\u00eb pajisjes parametrat e saj, ve\u00e7an\u00ebrisht, adres\u00ebn IP t\u00eb dh\u00ebn\u00eb pajisjes dhe adresat DNS. K\u00ebtu ka disa ve\u00e7ori shum\u00eb t\u00eb r\u00ebnd\u00ebsishme:<\/p>\n