Sizokutshela ngendlela engabizi futhi evikelekile yokuqinisekisa ukuthi abasebenzi abakude baxhumeke nge-VPN, ngaphandle kokudalula inkampani ezingozini zesithunzi noma zezezimali futhi ngaphandle kokudala izinkinga ezengeziwe zomnyango we-IT nabaphathi benkampani.
Ngokuthuthuka kwe-IT, sekwenzeke ukuheha abasebenzi abakude ukuba babe nenani elandayo lezikhundla.
Uma ngaphambili phakathi kwezisebenzi ezikude kwakukhona ikakhulukazi abameleli bomsebenzi wokudala, isibonelo, abaklami, abakopishi, manje i-accountant, umeluleki wezomthetho, nabameleli abaningi bezinye izingcweti bangasebenza kalula ekhaya, bevakashela ihhovisi kuphela uma kunesidingo.
Kodwa kunoma yikuphi, kuyadingeka ukuhlela umsebenzi ngokusebenzisa isiteshi esivikelekile.
Inketho elula. Setha i-VPN kuseva, isisebenzi sinikezwa iphasiwedi yokungena kanye nokhiye wesitifiketi se-VPN, kanye neziqondiso zendlela yokusetha iklayenti le-VPN kukhompyutha yakhe. Futhi umnyango we-IT ubheka umsebenzi wawo njengophothuliwe.
Umbono ubonakala ungemubi, ngaphandle kwento eyodwa: kufanele kube isisebenzi owazi ukulungisa yonke into ngokwakhe. Uma sikhuluma ngomthuthukisi wesicelo senethiwekhi oqeqeshiwe, kungenzeka ukuthi uzobhekana nalo msebenzi.
Kodwa i-accountant, iciko, umklami, umbhali wezobuchwepheshe, umakhi wezakhiwo, kanye neminye imisebenzi eminingi akudingeki ukuthi baqonde izingqinamba zokusetha i-VPN. Kungenzeka ukuthi othile udinga ukuxhumana naye ukude futhi asize, noma eze mathupha futhi asethe yonke into khona lapho. Ngakho-ke, uma okuthile kuyeka ukubasebenzela, isibonelo, ngenxa yephutha kuphrofayela yomsebenzisi, izilungiselelo zeklayenti lenethiwekhi zilahlekile, ngakho-ke yonke into idinga ukuphindaphinda futhi.
Ezinye izinkampani zihlinzeka ngekhompyutha ephathekayo enesofthiwe esivele ifakiwe kanye neklayenti lesofthiwe ye-VPN emisiwe yomsebenzi oqhelile. Ngokombono, kulokhu, abasebenzisi akufanele babe namalungelo omlawuli. Ngale ndlela, izinkinga ezimbili ziyaxazululwa: abasebenzi baqinisekisiwe ukuthi bazonikezwa isofthiwe enelayisensi evumelana nemisebenzi yabo kanye nesiteshi sokuxhumana esenziwe ngomumo. Ngesikhathi esifanayo, abakwazi ukushintsha izilungiselelo ngokwabo, okunciphisa imvamisa yezingcingo
ukusekela kwezobuchwepheshe.
Kwezinye izimo lokhu kulula. Isibonelo, ukuba ne-laptop, ungakwazi ukuhlala ngokunethezeka ekamelweni lakho emini, futhi usebenze ngokuthula ekhishini ebusuku ukuze ungavusi muntu.
Yimuphi umonakalo omkhulu? Okufanayo njenge-plus - iyidivayisi ephathwayo engathwalwa. Abasebenzisi bawela ezigabeni ezimbili: labo abancamela i-PC yedeskithophu amandla kanye nemonitha enkulu, nalabo abathanda ukuphatheka.
Iqembu lesibili labasebenzisi livota ngazo zombili izandla zamalaptop. Ngemva kokuthola i-laptop yenkampani, abasebenzi abanjalo baqala ukuhamba nayo ngenjabulo kumathilomu, izindawo zokudlela, ukuya emvelweni bese bezama ukusebenza kusukela lapho. Ukube nje bekuzosebenza, hhayi nje ukusebenzisa idivayisi eyamukelwe njengekhompyutha yakho kumanethiwekhi omphakathi nokunye ukuzijabulisa.
Ngokushesha noma kamuva, i-laptop yenkampani ayilahleki kuphela kanye nolwazi lomsebenzi ku-hard drive, kodwa futhi nokufinyelela okuhleliwe kwe-VPN. Uma ibhokisi lokuhlola elithi "gcina iphasiwedi" lithikhiwe kuzilungiselelo zeklayenti le-VPN, bese kubalwa amaminithi. Ezimweni lapho ukulahlekelwa kungazange kutholakale khona ngokushesha, isevisi yokusekela ayizange yaziswe ngokushesha, noma isisebenzi esifanele esinamalungelo okuvimbela asizange sitholakale ngokushesha - lokhu kungase kuphenduke inhlekelele enkulu.
Kwesinye isikhathi ukukhawulela ukufinyelela olwazini kuyasiza. Kodwa ukukhawulela ukufinyelela akusho ukuxazulula ngokuphelele izinkinga zokulahlekelwa idivayisi; kuyindlela nje yokunciphisa ukulahlekelwa lapho idatha idalulwa futhi ifakwa engozini.
Ungasebenzisa ukubethela noma ukufakazela ubuqiniso kwezinto ezimbili, isibonelo ngokhiye we-USB. Ngaphandle, umbono ubukeka umuhle, kodwa manje uma i-laptop iwela ezandleni ezingalungile, umnikazi wayo kuzodingeka asebenze kanzima ukuze afinyelele idatha, kuhlanganise nokufinyelela nge-VPN. Ngalesi sikhathi, ungakwazi ukuphatha ukuvimba ukufinyelela kunethiwekhi yebhizinisi. Futhi amathuba amasha avulekele umsebenzisi okude: ukugebenga ikhompuyutha ephathekayo, noma ukhiye wokufinyelela, noma konke ngesikhathi esisodwa. Ngokusemthethweni, izinga lokuvikela linyukile, kodwa isevisi yokusekelwa kwezobuchwepheshe ngeke ibe nesithukuthezi. Ngaphezu kwalokho, u-opharetha wesilawuli kude manje uzodingeka athenge ikhithi yokuqinisekisa izinto ezimbili (noma yokubethela).
Indaba ehlukile edabukisayo nende iqoqo lomonakalo wamakhompyutha aphathekayo alahlekile noma alimele (aphonswe phansi, achitheke ngetiye elinoshukela, ikhofi, nezinye izingozi) nokhiye bokufinyelela abalahlekile.
Phakathi kokunye, ikhompuyutha ephathekayo iqukethe izingxenye zemishini, njengekhibhodi, izixhumi ze-USB, nesivalo esinesikrini - zonke lezi zinto ziguga impilo yazo yesevisi ngokuhamba kwesikhathi, ziyakhubazeka, ziyaxega futhi kufanele zilungiswe noma zishintshwe (isikhathi esiningi. , i-laptop yonke iyashintshwa).
Manje kuthiwani? Kunqatshelwe ngokuphelele ukukhipha i-laptop efulethini bese ulandelela
ezihambayo?
Pho kungani bekhiphe ilaptop?
Esinye isizathu ukuthi i-laptop kulula ukuyidlulisela. Ake siqhamuke nokunye, nakho okuhlangene.
Awukwazi ukukhipha ikhompuyutha ephathekayo, kodwa avikelwe ama-flash drive e-LiveUSB anoxhumano lwe-VPN oselulungisiwe, futhi umsebenzisi uzosebenzisa ikhompyutha yakhe. Kodwa lokhu futhi ilotho: ingabe umhlangano wesofthiwe uzosebenza kukhompyutha yomsebenzisi noma cha? Inkinga ingase ibe ukuntula okulula kwabashayeli abadingekayo.
Sidinga ukuthola ukuthi singakuhlela kanjani ukuxhumana kwabasebenzi ukude, futhi kuyinto efiselekayo ukuthi umuntu anganqotshwa isilingo sokuzulazula edolobheni nge-laptop yenkampani, kodwa uhlala ekhaya futhi asebenze ngokuthula ngaphandle kwengozi yokukhohlwa noma ukulahlekelwa idivayisi ephathiswe yena ndawana thize.
Ukufinyelela okumile kwe-VPN
Kuthiwani uma unganikezi idivayisi yokugcina, isibonelo, ikhompyutha ephathekayo, noma ikakhulukazi hhayi i-flash drive ehlukile yokuxhumeka, kodwa isango lenethiwekhi elineklayenti le-VPN ebhodini?
Isibonelo, i-router eyenziwe ngomumo ehlanganisa ukusekelwa kwezivumelwano ezihlukahlukene, lapho uxhumano lwe-VPN seluvele lulungisiwe. Isisebenzi esikude sidinga nje ukuxhuma ikhompuyutha yaso kuso futhi siqale ukusebenza.
Iziphi izinkinga lokhu okusiza ukuzixazulula?
- Izisetshenziswa ezinokufinyelela okumisiwe kunethiwekhi yebhizinisi nge-VPN azikhishelwa ngaphandle.
- Ungaxhuma amadivaysi amaningana esiteshini esisodwa se-VPN.
Sesivele sibhale ngenhla ukuthi kuhle ukukwazi ukuhambahamba efulethini nge-laptop, kodwa ngokuvamile kulula futhi kulula kakhulu ukusebenza ngekhompyutha yedeskithophu.
Futhi ungakwazi ukuxhuma i-PC, ikhompuyutha ephathekayo, i-smartphone, ithebhulethi, kanye nesifundi se-e ku-VPN kumzila - noma yini esekela ukufinyelela nge-Wi-Fi noma i-Ethernet enentambo.
Uma ubheka isimo ngokubanzi, lokhu kungaba, isibonelo, indawo yokuxhumana yehhovisi elincane lapho abantu abambalwa bengasebenza khona.
Ngaphakathi kwengxenye enjalo evikelekile, amadivaysi axhunyiwe angashintshanisa ulwazi, ungakwazi ukuhlela okuthile okufana nensiza yokwabelana ngamafayela, kuyilapho unokufinyelela okuvamile ku-inthanethi, ukuthumela amadokhumenti okuphrinta kwiphrinta yangaphandle, njalonjalo.
Ucingo lwebhizinisi! Kuningi kakhulu kulo msindo ozwakala endaweni ethile ku-tube! Isiteshi se-VPN esimaphakathi samadivayisi amaningana sikuvumela ukuthi uxhume i-smartphone ngenethiwekhi ye-Wi-Fi futhi usebenzise ucingo lwe-IP ukuze wenze izingcingo ezinombolweni ezimfushane ngaphakathi kwenethiwekhi yebhizinisi.
Uma kungenjalo, kuzomele wenze izingcingo zamaselula noma usebenzise izinhlelo zokusebenza zangaphandle ezifana ne-WhatsApp, engahlali ihambisana nenqubomgomo yezokuphepha yenkampani.
Futhi njengoba sikhuluma ngokuphepha, kubalulekile ukuphawula elinye iqiniso elibalulekile. Ngesango le-VPN yehadiwe, ungathuthukisa ukuphepha kwakho ngokusebenzisa izici ezintsha zokulawula kusango lokungena. Lokhu kukuvumela ukuthi ukhuphule ukuvikeleka futhi ususe ingxenye yomthwalo wokuvikela ithrafikhi esangweni lenethiwekhi.
Isiphi isisombululo uZyxel angasinikeza kuleli cala?
Sicubungula idivayisi okufanele ikhishelwe ukusetshenziswa kwesikhashana kubo bonke abasebenzi abakwaziyo nabafuna ukusebenza bekude.
Ngakho-ke, idivayisi enjalo kufanele ibe:
- engabizi;
- okuthembekile (ukuze ungachithi imali nesikhathi ekulungiseni);
- etholakalayo ukuze ithengwe ngamaketanga okudayisa;
- kulula ukusetha (kuhloswe ukuthi kusetshenziswe ngaphandle kokushaya ucingo ngokuqondile
uchwepheshe oqeqeshiwe).
Akuzwakali okwangempela, akunjalo?
Nokho, idivayisi enjalo ikhona, ikhona ngempela futhi imahhala
- Zyxel ZyWALL VPN2S
I-VPN2S iyi-firewall ye-VPN ekuvumela ukuthi usebenzise uxhumano oluyimfihlo
iphuzu-kuya-iphuzu ngaphandle kokucushwa okuyinkimbinkimbi kwemingcele yenethiwekhi.
Umfanekiso 1. Ukubukeka kweZyxel ZyWALL VPN2S
Ukucaciswa kwedivayisi kafushane
Izici ze-Hardware
10/100/1000 Mbps RJ-45 izimbobo
3 x LAN, 1 x WAN/LAN, 1 x WAN
Izimbobo ze-USB
I-2 x i-USB 2.0
Akukho fan
Yebo
Amandla wesistimu nokusebenza
I-SPI Firewall Throughput (Mbps)
I-1.5 Gbps
Umkhawulokudonsa we-VPN (Mbps)
35
Inombolo enkulu yamaseshini ngesikhathi esisodwa. I-TCP
50000
Inombolo enkulu yamathaneli e-IPsec VPN kanyekanye [5] 20
Izoni ezingenziwa ngendlela oyifisayo
Yebo
Usekelo lwe-IPv6
Yebo
Inombolo enkulu yama-VLAN
16
Izici Eziyinhloko Zesofthiwe
Ibhalansi Yokulayisha Ye-Multi-WAN/Eyehlulekile
Yebo
Inethiwekhi yangasese ye-Virtual (VPN)
Yebo (IPSec, L2TP phezu kwe-IPSec, PPTP, L2TP, GRE)
Iklayenti le-VPN
IPSec/L2TP/PPTP
Ukuhlunga okuqukethwe
Unyaka ongu-1 mahhala
I-Firewall
Yebo
Iqembu le-VLAN/Interface
Yebo
Ukuphathwa Komkhawulokudonsa
Yebo
Ilogi yomcimbi nokuqapha
Yebo
Umsizi Wamafu
Yebo
Isilawuli kude
Yebo
Qaphela. Idatha esethebula isekelwe ku-OPAL BE microcode 1.12 noma ngaphezulu
inguqulo yakamuva.
Yiziphi izinketho ze-VPN ezisekelwa yi-ZyWALL VPN2S
Empeleni, kusukela egameni kuyacaca ukuthi idivayisi ye-ZyWALL VPN2S ngokuyinhloko
yakhelwe ukuxhuma abasebenzi abakude namagatsha amancane nge-VPN.
- Iphrothokholi ye-L2TP Over IPSec VPN inikezwe abasebenzisi bokugcina.
- Ukuze uxhume amahhovisi amancane, ukuxhumana nge-Site-to-Site IPSec VPN kunikezwa.
- Futhi, usebenzisa i-ZyWALL VPN2S ungakha uxhumano lwe-L2TP VPN ngalo
umhlinzeki wesevisi ukuze uthole ukufinyelela ku-inthanethi okuphephile.
Kumele kuqashelwe ukuthi lokhu kuhlukaniswa kunemibandela kakhulu. Ngokwesibonelo, ungakwazi
iphoyinti elikude lungiselela ukuxhumana kwe-Site-to-Site IPSec VPN ngeyodwa
umsebenzisi ngaphakathi komjikelezo.
Vele, konke lokhu kusetshenziswa ama-algorithms e-VPN aqinile (IKEv2 ne-SHA-2).
Isebenzisa ama-WAN amaningi
Ngomsebenzi oqhelile, into eyinhloko ukuba nesiteshi esizinzile. Ngeshwa, kanye kuphela
Lokhu akunakuqinisekiswa ngolayini wokuxhumana ngisho nakumhlinzeki onokwethenjelwa.
Izinkinga zingahlukaniswa zibe izinhlobo ezimbili:
- ukwehla kwesivinini - umsebenzi wokulinganisa umthwalo we-Multi-WAN uzosiza kulokhu
ukugcina uxhumano oluzinzile ngesivinini esidingekayo; - ukwehluleka esiteshini - ngale njongo umsebenzi we-Multi-WAN failover usetshenziselwa
ukuqinisekisa ukubekezelela amaphutha ngokusebenzisa indlela yokuphindaphinda.
Yimaphi amakhono we-hardware akhona kulokhu:
- Imbobo yesine ye-LAN ingalungiselelwa njengembobo ye-WAN eyengeziwe.
- Imbobo ye-USB ingasetshenziswa ukuxhuma imodemu ye-3G/4G, ehlinzeka
ishaneli eyisipele ngendlela yokuxhumana kwamaselula.
Ukuphepha kwenethiwekhi okukhulisiwe
Njengoba kushiwo ngenhla, lokhu kungenye yezinzuzo eziyinhloko zokusebenzisa okukhethekile
amadivaysi aphakathi nendawo.
I-ZyWALL VPN2S inomsebenzi we-SPI (Stateful Packet Inspection) we-firewall ukulwa nezinhlobo ezahlukene zokuhlaselwa, okuhlanganisa i-DoS (Denial of Service), ukuhlaselwa kusetshenziswa amakheli e-IP angcolile, kanye nokufinyelela okukude okungagunyaziwe kumasistimu, ithrafikhi yenethiwekhi esolisayo namaphakheji.
Njengesivikelo esingeziwe, idivayisi inokuhlunga Okuqukethwe ukuze kuvinjwe ukufinyelela komsebenzisi kokuqukethwe okusolisayo, okuyingozi nokungajwayelekile.
Ukusethwa kwezinyathelo ezi-5 okusheshayo nokulula ngewizadi yokusetha
Ukuze usethe ngokushesha uxhumano, kunewizadi yokusetha efanelekile kanye nesithombe
interface ngezilimi eziningana.
Umfanekiso 2. Isibonelo seskrini esisodwa sewizadi yokusetha.
Ukuze uthole ukuphatha okusheshayo nokuphumelelayo, i-Zyxel inikeza iphakheji eliphelele lezinsiza zokuphatha ezikude ongakwazi ukumisa ngayo kalula i-VPN2S futhi uyiqaphe.
Ikhono lokuphinda izilungiselelo lenza lula kakhulu ukulungiswa kwemishini eminingi ye-ZyWALL VPN2S ukuze idluliselwe kubasebenzi abakude.
Ukusekelwa kwe-VLAN
Naphezu kweqiniso lokuthi i-ZyWALL VPN2S yakhelwe umsebenzi okude, isekela i-VLAN. Lokhu kukuvumela ukuthi ukwandise ukuphepha kwenethiwekhi, isibonelo, uma ihhovisi likasomabhizinisi ngamunye lixhunyiwe, elinesivakashi se-Wi-Fi. Imisebenzi ejwayelekile ye-VLAN, efana nokukhawulela izizinda zokusakaza, ukunciphisa ithrafikhi edluliswayo nokusebenzisa izinqubomgomo zokuphepha, iyadingeka kumanethiwekhi ezinkampani, kodwa ngokomthetho ingasetshenziswa emabhizinisini amancane.
Ukusekelwa kwe-VLAN nakho kuyasiza ekuhleleni inethiwekhi ehlukile, isibonelo, yocingo lwe-IP.
Ukuqinisekisa ukusebenza nge-VLAN, idivayisi ye-ZyWALL VPN2S isekela izinga le-IEEE 802.1Q.
Ukufingqa
Ingozi yokulahlekelwa idivayisi yeselula enesiteshi se-VPN esimisiwe idinga izixazululo ngaphandle kokusabalalisa amakhompyutha aphathekayo ezinkampani.
Ukusetshenziswa kwamasango e-VPN acwebile futhi angabizi kukuvumela ukuthi uhlele kalula umsebenzi wabasebenzi abakude.
Imodeli ye-ZyWALL VPN2S ekuqaleni yayiklanyelwe ukuxhuma izisebenzi ezikude namahhovisi amancane.
Izixhumanisi eziwusizo
→
→
→
→
→
Source: www.habr.com