{"id":30229,"date":"2019-10-31T21:34:23","date_gmt":"2019-10-31T18:34:23","guid":{"rendered":"https:\/\/prohoster.info\/blog\/vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti\/"},"modified":"2019-10-31T21:34:23","modified_gmt":"2019-10-31T18:34:23","slug":"vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/vpn-dlya-mobilnyh-ustrojstv-na-urovne-seti","title":{"rendered":"VPN p\u00ebr pajisje mobile n\u00eb nivel rrjeti","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb ru-net, ende ka shum\u00eb pak material mbi nj\u00eb teknologji t\u00eb till\u00eb t\u00eb vjet\u00ebr dhe t\u00eb thjesht\u00eb, por t\u00eb p\u00ebrshtatshme, t\u00eb sigurt dhe ve\u00e7an\u00ebrisht t\u00eb r\u00ebnd\u00ebsishme p\u00ebr shkak t\u00eb zhvillimit t\u00eb Internetit t\u00eb gj\u00ebrave, si\u00e7 \u00ebsht\u00eb VPN mobile (rrjeti privat virtual). N\u00eb k\u00ebt\u00eb artikull do t\u00eb p\u00ebrshkruaj se si dhe pse mund t\u00eb konfigurohet akses n\u00eb rrjetin tuaj privat p\u00ebr \u00e7do pajisje me kart\u00eb SIM pa pasur nevoj\u00eb p\u00ebr t\u00eb instaluar softuer t\u00eb specializuar n\u00eb t\u00eb.
\n\"VPN
\n<\/a><\/noindex><\/p>\n

Detyrat dhe kufizimet<\/h2>\n

\nP\u00ebr t\u00eb filluar, do t'ju p\u00ebrgjigjem pyetjes \"pse?\". VPN si teknologji p\u00ebrdoret p\u00ebr t\u00eb zgjidhur nj\u00eb gam\u00eb t\u00eb gjer\u00eb detyrash rrjet\u00eb, t\u00eb lidhura me karakteristik\u00ebn e p\u00ebrbashk\u00ebt - transmetimin e izolluar t\u00eb t\u00eb dh\u00ebnave midis dy pajisjeve p\u00ebrmes nj\u00eb numri t\u00eb madh nyjesh nd\u00ebrmjet\u00ebse. N\u00eb baz\u00ebn e k\u00ebsaj ndahen zgjidhje m\u00eb komplekse dhe nd\u00ebrtohen p\u00ebrgjigje p\u00ebr k\u00ebto detyra t\u00eb ndryshme. N\u00eb rastin e zakonsh\u00ebm, t\u00eb njohur p\u00ebr t\u00eb gjith\u00eb, p\u00ebr nd\u00ebrtimin e nj\u00eb VPN p\u00ebrdoret rrjeti i operatorit t\u00eb lidhjes fikse (ata q\u00eb d\u00ebshirojn\u00eb n\u00eb detaje kan\u00eb materialin e shk\u00eblqyer<\/a><\/noindex>) ose shum\u00eb protokolle t\u00eb ndryshme rrjeti (GRE, IPSec, L2TP dhe t\u00eb tjer\u00eb - i nj\u00ebjti autor p\u00ebr k\u00ebt\u00eb<\/a><\/noindex>) dhe produktet e softuerit q\u00eb punojn\u00eb me to (Cisco AnyConnect, OpenVPN, TOR - por edhe ju vet\u00eb e dini at\u00eb), por p\u00ebrdorimi i tyre n\u00eb nj\u00eb pajisje t\u00eb caktuar k\u00ebrkon menj\u00ebher\u00eb nj\u00eb s\u00ebr\u00eb k\u00ebrkesash, t\u00eb cilat, n\u00ebse nuk plot\u00ebsohen, \u00e7ojn\u00eb n\u00eb kufizime specifike.<\/p>\n

Kufizimi i par\u00eb serioz - pajisja duhet n\u00eb nivelin harduerik dhe softuerik t\u00eb jet\u00eb n\u00eb gjendje t\u00eb punoj\u00eb s\u00eb paku me nj\u00eb nga k\u00ebto protokolle. Nganj\u00ebher\u00eb kjo p\u00ebrcaktohet nga softueri, i cili \u00ebsht\u00eb leht\u00ebsisht i disponuesh\u00ebm p\u00ebr laptop\u00ebt ose smartphone-et, por ekzistojn\u00eb raste kur detyra p\u00ebrballet me nj\u00eb pajisje shum\u00eb t\u00eb thjesht\u00eb nga pik\u00ebpamja harduerike, ose softueri i saj ka kufizime: ndihm\u00ebs i ujit d\u00ebshiron t\u00eb p\u00ebrdor\u00eb VPN p\u00ebr t\u00eb transmetuar bajtin e tij t\u00eb fatkeq nj\u00eb her\u00eb n\u00eb muaj jo m\u00eb pak se sa ju d\u00ebshironi t\u00eb p\u00ebrdorni VPN p\u00ebr t\u00eb p\u00ebrdit\u00ebsuar profilin tuaj n\u00eb LinkedIn.<\/p>\n

Nj\u00eb kufizim tjet\u00ebr i r\u00ebnd\u00ebsish\u00ebm \u00ebsht\u00eb nevoja p\u00ebr konfigurim. Ky kufizim vlejti si p\u00ebr pajisjet \"dum-dum\" si\u00e7 \u00ebsht\u00eb p\u00ebrmendur m\u00eb par\u00eb, ashtu edhe p\u00ebr smartfon\u00ebt dhe kompjuter\u00ebt klasik\u00eb, t\u00eb cil\u00ebt nuk jan\u00eb t\u00eb njohur me kufizimin e m\u00ebparsh\u00ebm. Nd\u00ebrsa me pajisjet e para \u00ebsht\u00eb relativisht e thjesht\u00eb dhe ka t\u00eb b\u00ebj\u00eb me koh\u00ebn e shpenzuar p\u00ebr konfigurim, p\u00ebr pajisjet e dyta ka mund\u00ebsi t\u00eb tjera. Shpesh organizatat p\u00ebrdorin VPN p\u00ebr q\u00ebllime sigurie, p\u00ebr t\u00eb mbrojtur pajisjet e tyre nga falja n\u00eb rrjetin publik pa mbrojtjen e duhur korporative ose nga d\u00ebrgimi i t\u00eb dh\u00ebnave t\u00eb kompanis\u00eb p\u00ebrmes kanaleve publike. P\u00ebrdoruesit p\u00ebrfundimtar\u00eb, ndonj\u00ebher\u00eb, mund p\u00ebr arsye t\u00eb veta t\u00eb \u00e7aktivizojn\u00eb ose harrojn\u00eb t\u00eb aktivizojn\u00eb VPN, si rezultat i s\u00eb cil\u00ebs shum\u00eb sisteme sigurie t\u00eb kompanis\u00eb mund t\u00eb mbeten \"n\u00eb an\u00eb\".<\/p>\n

T\u00eb dy k\u00ebto kufizime leht\u00ebsisht eliminohen n\u00ebse qasja n\u00eb VPN sigurohet n\u00eb nivelin e rrjetit. N\u00eb rastin e lidhjeve mobile, kjo mund t\u00eb realizohet p\u00ebrmes nj\u00eb \"VPN mobile\". \u00c7do pajisje me \u00e7do kompleksitet q\u00eb \u00ebsht\u00eb n\u00eb gjendje t\u00eb transferoj\u00eb t\u00eb dh\u00ebna do t'i d\u00ebrgoj\u00eb ato n\u00eb rrjetin e duhur. Nuk ka r\u00ebnd\u00ebsi se cilat konfigurime jan\u00eb b\u00ebr\u00eb n\u00eb pajisje, kur rrjeti \u00ebsht\u00eb konfiguruar si\u00e7 duhet, do t\u00eb d\u00ebrgoj\u00eb gjithmon\u00eb t\u00eb dh\u00ebnat aty ku \u00ebsht\u00eb e nevojshme dhe askund tjet\u00ebr. <\/p>\n

Dhe si nj\u00eb bonus i k\u00ebndsh\u00ebm, pajisja do t\u00eb marr\u00eb nj\u00eb adres\u00eb nga rrjeti i brendsh\u00ebm, e cila do t\u00eb konfigurohet n\u00eb distanc\u00eb, dhe qasja n\u00eb t\u00eb do t\u00eb mund t\u00eb arrihet vet\u00ebm nga brenda k\u00ebtij rrjeti (ose fizikisht). Kjo \u00ebsht\u00eb shum\u00eb e r\u00ebnd\u00ebsishme p\u00ebr nj\u00eb kategorit\u00eb t\u00eb caktuara t\u00eb pajisjeve.<\/p>\n

Si funksionon<\/h2>\n

<\/p>\n

PS Core<\/h3>\n

\nMund t\u00eb duket se VPN \u00ebsht\u00eb nj\u00eb sh\u00ebrbim klasik i t\u00eb gjith\u00eb operator\u00ebve t\u00eb komunikimit p\u00ebr segmentin B2B, k\u00ebshtu q\u00eb p\u00ebrse duhet t\u00eb theksohet ky aspekt? E gjith\u00eb kjo ka t\u00eb b\u00ebj\u00eb me struktur\u00ebn e rrjetit t\u00eb transmetimit t\u00eb t\u00eb dh\u00ebnave p\u00ebr pajisjet e lidhura p\u00ebrmes GPRS, HSPA, LTE ose ndonj\u00eb teknologjie tjet\u00ebr t\u00eb lidhjes mobile. N\u00eb k\u00ebt\u00eb rast nuk ka VLAN-osh t\u00eb njohur p\u00ebr administrator\u00ebt e rrjetit, nuk ka switch-e, as edhe ruter\u00eb n\u00eb kuptimin e zakonsh\u00ebm t\u00eb fjal\u00ebs. N\u00eb vend t\u00eb k\u00ebsaj, ekziston nj\u00eb rrjet radio akses (RAN) dhe nj\u00eb b\u00ebrtham\u00eb paketash (PS Core). <\/p>\n

\"VPN
\nNj\u00eb diagram i thjeshtuar i rrjetit t\u00eb paketave t\u00eb operatorit t\u00eb lidhjeve mobile. Ai ndonj\u00ebher\u00eb ndryshon p\u00ebr LTE, por kuptimi i p\u00ebrgjithsh\u00ebm mbetet i nj\u00ebjt\u00eb.<\/i><\/p>\n

N\u00eb p\u00ebrgjith\u00ebsi, \u00e7do pajisje me kart\u00eb SIM, e regjistruar n\u00eb rrjetin paketor (n\u00ebp\u00ebrmjet proc\u00e9dures GPRS attach ose nj\u00eb procedure t\u00eb ngjashme), para se t\u00eb filloj\u00eb t\u00eb transferoj\u00eb t\u00eb dh\u00ebna n\u00eb ndonj\u00eb drejtim duhet t\u00eb inicoj\u00eb krijimin e nj\u00eb sesioni p\u00ebr transferimin e t\u00eb dh\u00ebnave (PDP context) n\u00eb routerin baz\u00eb t\u00eb rrjetit paketor, GGSN. Detajet dhe q\u00ebllimi i k\u00ebtyre proceseve jan\u00eb p\u00ebrshkruar shum\u00eb mir\u00eb k\u00ebtu k\u00ebt\u00eb artikull<\/a><\/noindex>. \u00c7far\u00eb \u00ebsht\u00eb e r\u00ebnd\u00ebsishme p\u00ebr ne: gjat\u00eb iniciat\u00ebs s\u00eb sesionit n\u00eb k\u00ebrkes\u00ebn drejtuar GGSN p\u00ebrmenden, p\u00ebrve\u00e7 t\u00eb tjerave, parametra q\u00eb shum\u00eb i kan\u00eb par\u00eb n\u00eb telefonat e tyre ose madje kan\u00eb pasur t\u00eb b\u00ebjn\u00eb me to gjat\u00eb konfigurimit, si p\u00ebr shembull, modemet USB. K\u00ebto jan\u00eb tri fusha: APN, emri i p\u00ebrdoruesit dhe fjal\u00ebkalimi. APN (pik\u00eb qasje) \u00ebsht\u00eb nj\u00eb entitet shum\u00eb i r\u00ebnd\u00ebsish\u00ebm n\u00eb logjik\u00ebn e funksionimit t\u00eb GGSN: n\u00eb var\u00ebsi t\u00eb APN nga e cila inicohet sesioni, GGSN vepron ndryshe. Si rezultat i p\u00ebrpunimit t\u00eb suksessh\u00ebm t\u00eb k\u00ebrkes\u00ebs s\u00eb p\u00ebrdoruesit, GGSN duhet t\u00eb aktivizoj\u00eb nj\u00eb sesion p\u00ebr transferimin e t\u00eb dh\u00ebnave dhe t'i komunikoj\u00eb pajisjes parametrat e saj, ve\u00e7an\u00ebrisht, adres\u00ebn IP t\u00eb dh\u00ebn\u00eb pajisjes dhe adresat DNS. K\u00ebtu ka nj\u00eb s\u00ebr\u00eb ve\u00e7orish shum\u00eb t\u00eb r\u00ebnd\u00ebsishme:<\/p>\n