SSTP VPN: Txhua yam koj xav paub

James Davis

Lub Peb Hlis 07, 2022 • Xa mus rau: Tsis pub lwm tus paub Web Access • Cov kev daws teeb meem pov thawj

SSTP yog ib qho cuab yeej technology tsim los ntawm Microsoft. Nws sawv cev rau Secure Socket Tunneling Protocol thiab tau pib ua ntej hauv Microsoft Vista. Tam sim no, koj tuaj yeem txuas tau yooj yim rau SSTP VPN ntawm nrov versions ntawm Windows (thiab Linux). Teeb tsa SSTP VPN Ubuntu rau Windows tsis nyuaj heev thiab. Hauv phau ntawv qhia no, peb yuav qhia koj yuav ua li cas teeb tsa SSTP VPN Mikrotik thiab muab piv nrog lwm cov kev cai nrov.

Ntu 1: SSTP VPN? yog dab tsi

Qhov Kev Ruaj Ntseg Tunneling raws tu qauv yog siv dav siv tunneling raws tu qauv uas tuaj yeem siv los tsim koj tus kheej VPN. Cov thev naus laus zis tau tsim los ntawm Microsoft thiab tuaj yeem siv nrog lub router ntawm koj xaiv, zoo li Mikrotik SSTP VPN.

  • • Nws siv qhov chaw nres nkoj 443, uas yog siv los ntawm kev sib txuas SSL. Yog li, nws tuaj yeem daws teeb meem NAT firewall uas tshwm sim hauv OpenVPN lub sijhawm.
  • • SSTP VPN siv daim ntawv pov thawj kev lees paub tshwj xeeb thiab 2048-ntsis encryption, ua rau nws yog ib qho kev nyab xeeb tshaj plaws.
  • • Nws tuaj yeem hla tau yooj yim hla firewalls thiab muab Kev Pabcuam Zoo Tshaj Plaws Forward Secrecy (PFS).
  • • Hloov IPSec, nws txhawb SSL kis tau tus mob. Qhov no enabled roaming es tsis txhob tsuas point-to-point kis ntawm cov ntaub ntawv.
  • • Lub tsuas drawback ntawm SSTP VPN yog tias nws tsis muab kev txhawb nqa rau mobile pab kiag li lawm xws li Android thiab iPhone.

sstp vpn

Hauv SSTP VPN Ubuntu rau Windows, qhov chaw nres nkoj 443 yog siv raws li kev lees paub tshwm sim ntawm tus neeg siv khoom kawg. Tom qab tau txais daim ntawv pov thawj server, kev sib txuas tau tsim. Cov pob ntawv HTTPS thiab SSTP raug xa mus los ntawm tus neeg siv khoom, ua rau PPP kev sib tham. Thaum ib tus IP interface raug muab, tus neeg rau zaub mov thiab cov neeg siv khoom tuaj yeem hloov pauv cov ntaub ntawv pob khoom sib txuas.

SSTP VPN Ubuntu

Tshooj 2: Yuav teeb VPN li cas nrog SSTP?

Teeb tsa SSTP VPN Ubuntu lossis Windows yog qhov txawv me ntsis ntawm L2TP lossis PPTP. Txawm hais tias lub tshuab yog ib txwm nyob rau Windows, koj yuav tsum tau teeb tsa Mikrotik SSTP VPN. Koj tuaj yeem siv lwm lub router ib yam nkaus. Txawm li cas los xij, hauv qhov kev qhia no, peb tau txiav txim siab teeb tsa SSTP VPN Mikrotik ntawm Windows 10. Cov txheej txheem zoo sib xws rau lwm cov versions ntawm Windows thiab SSTP VPN Ubuntu ib yam nkaus.

Kauj ruam 1: Tau txais daim ntawv pov thawj rau Client Authentication

Raws li koj paub, txhawm rau teeb tsa Mikrotik SSTP VPN, peb yuav tsum tsim daim ntawv pov thawj tshwj xeeb. Txhawm rau ua qhov no, mus rau System> Certificate thiab xaiv los tsim daim ntawv pov thawj tshiab. Ntawm no, koj tuaj yeem muab lub npe DNS los teeb tsa SSTP VPN. Tsis tas li ntawd, hnub tas sij hawm yuav tsum siv tau rau 365 hnub tom ntej. Qhov loj me yuav tsum yog ntawm 2048 ntsis.

create new client certification

Tom qab ntawd, mus rau Qhov Tseem Ceeb Siv tab thiab ua kom tsuas yog crl kos npe thiab daim ntawv pov thawj tseem ceeb. kos npe xaiv.

Txuag koj cov kev hloov pauv los ntawm nyem rau ntawm "Thov" khawm. Qhov no yuav cia koj tsim daim ntawv pov thawj server rau SSTP VPN Mikrotik ib yam nkaus.

apply key usage settings

Kauj ruam 2: Tsim daim ntawv pov thawj Server

Nyob rau hauv tib txoj kev, koj yuav tsum tau tsim ib daim ntawv pov thawj rau lub server thiab. Muab nws lub npe tsim nyog thiab teeb qhov loj me rau 2048. Lub sijhawm yuav yog dab tsi ntawm 0 txog 3650.

create server certification

Tam sim no, mus rau Qhov Tseem Ceeb Siv tab thiab xyuas kom meej tias tsis muaj ob qho kev xaiv tau qhib.

disable key usage settings

Tsuas yog nyem rau ntawm "Thov" khawm thiab tawm ntawm lub qhov rais.

Kauj ruam 3: Kos npe rau daim ntawv pov thawj

Txhawm rau txuas ntxiv, koj yuav tsum kos npe rau koj daim ntawv pov thawj los ntawm koj tus kheej. Tsuas yog qhib daim ntawv pov thawj thiab nyem rau ntawm qhov "Sau npe" kev xaiv. Muab lub npe DNS lossis qhov chaw nyob IP zoo li qub thiab xaiv tus kheej kos npe rau daim ntawv pov thawj.

sign the certificate for sstp vpn

Tom qab kos npe, koj yuav tsis tuaj yeem hloov pauv hauv daim ntawv pov thawj.

Kauj ruam 4: Kos npe rau daim ntawv pov thawj server

Tib txoj kev, koj tuaj yeem kos npe rau daim ntawv pov thawj server ib yam. Tej zaum koj yuav xav tau tus yuam sij ntiag tug ntxiv kom nws ruaj ntseg dua.

sign the server certificate

Kauj ruam 5: Qhib lub server

Tam sim no, koj yuav tsum ua kom lub SSTP VPN server thiab tsim Secret. Tsuas yog mus rau PPP cov kev xaiv thiab qhib SSTP server. Qhov kev lees paub yuav tsum tsuas yog "mschap2". Tsis tas li ntawd, lov tes taw kev txheeb xyuas tus neeg siv daim ntawv pov thawj xaiv ua ntej khaws cov kev hloov pauv no.

enable sstp server

Tsis tas li ntawd, tsim kom muaj PPP zais cia tshiab. Muab koj tus username, password thiab LAN chaw nyob ntawm koj lub router Mikrotik. Tsis tas li ntawd, koj tuaj yeem teev tus IP chaw nyob ntawm tus neeg siv khoom nyob deb ntawm no.

Kauj ruam 6: Exporting daim ntawv pov thawj

Tam sim no, peb yuav tsum xa daim ntawv pov thawj Client Authentication. Ua ntej, xyuas kom meej tias qhov chaw nres nkoj 443 qhib.

Tsuas tso lub interface ntawm koj lub router ib zaug ntxiv. Xaiv daim ntawv pov thawj CA thiab nyem rau ntawm "Export" khawm. Teem lub Export Passphrase muaj zog.

export client certificate

Zoo heev! Peb yuav luag nyob ntawd. Mus rau Router interface thiab luam-muab cov ntawv pov thawj CA ntawm Windows drive.

paste the ca certification on windows drive

Tom qab ntawd, koj tuaj yeem tso tus wizard kom Ntshuam Daim Ntawv Pov Thawj Tshiab. Xaiv lub tshuab hauv zos ua qhov chaw.

import new certificate

Ntawm no, koj tuaj yeem xauj daim ntawv pov thawj koj tau tsim. Koj tuaj yeem khiav "certlm.msc" thiab nruab koj daim ntawv pov thawj los ntawm qhov ntawd.

Kauj ruam 7: Tsim SSTP VPN

Thaum kawg, koj tuaj yeem mus rau Tswj Vaj Huam Sib Luag> Network thiab Chaw thiab xaiv los tsim VPN tshiab. Muab lub npe neeg rau zaub mov thiab xyuas kom meej tias hom VPN tau teev tseg raws li SSTP.

create sstp vpn from windows network settings

Thaum SSTP VPN tsim, koj tuaj yeem mus rau Mikrotik interface. Ntawm no, koj tuaj yeem saib Mikrotik SSTP VPN uas tau ntxiv lawm. Tam sim no koj tuaj yeem txuas rau SSTP VPN Mikrotik no txhua lub sijhawm.

view mikrotik sstp vpn

Ntu 3: SSTP vs. PPTP

Raws li koj paub, SSTP yog qhov txawv ntawm PPTP. Piv txwv li, PPTP muaj nyob rau yuav luag txhua lub platform ua lag luam (xws li Android thiab iOS). Ntawm qhov tod tes, SSTP yog ib txwm nyob rau Windows.

PPTP kuj yog ib qho kev sib txuas ceev dua thaum piv rau SSTP. Txawm li cas los xij, SSTP yog qhov kev xaiv ruaj ntseg dua. Txij li thaum nws nyob ntawm qhov chaw nres nkoj uas tsis tau thaiv los ntawm firewalls, nws tuaj yeem yooj yim hla NAT kev ruaj ntseg thiab firewalls. Tib yam tsis tuaj yeem siv rau PPTP.

Yog tias koj tab tom nrhiav rau VPN raws tu qauv rau koj tus kheej xav tau, ces koj tuaj yeem mus nrog PPTP. Nws yuav tsis muaj kev nyab xeeb li SSTP, tab sis nws yooj yim heev rau kev teeb tsa. Kuj tseem muaj PPTP VPN servers dawb.

Ntu 4: SSTP vs. OpenVPN

Thaum SSTP thiab PPTP sib txawv heev, OpenVPN thiab SSTP sib koom ntau qhov sib xws. Qhov sib txawv loj yog tias SSTP yog tus tswv los ntawm Microsoft thiab feem ntau ua haujlwm ntawm Windows systems. Ntawm qhov tod tes, OpenVPN yog qhov kev siv thev naus laus zis thiab ua haujlwm ntawm yuav luag txhua lub platform loj (xws li desktop thiab mobile systems).

SSTP tuaj yeem hla txhua hom firewalls, suav nrog cov uas thaiv OpenVPN. Koj tuaj yeem yooj yim teeb tsa qhov kev pabcuam OpenVPN los ntawm kev siv qhov encryption ntawm koj xaiv. Ob leeg, OpenVPN thiab SSTP muaj kev nyab xeeb heev. Txawm li cas los xij, koj tuaj yeem hloov kho OpenVPN raws li kev hloov pauv hauv koj lub network, uas tsis tuaj yeem ua tiav hauv SSTP tau yooj yim.

Tsis tas li ntawd, OpenVPN tuaj yeem tunnel UDP thiab tes hauj lwm ib yam nkaus. Txhawm rau teeb OpenVPN, koj yuav xav tau software thib peb thaum teeb tsa SSTP VPN ntawm Windows yooj yim dua.

Tam sim no thaum koj paub cov hauv paus ntawm SSTP VPN thiab yuav teeb tsa Mikrotik SSTP VPN li cas, koj tuaj yeem ua tau raws li koj xav tau. Tsuas yog mus nrog VPN raws tu qauv ntawm koj xaiv thiab nco ntsoov kom muaj kev nyab xeeb kev tshawb nrhiav.

James Davis

James Davis

neeg ua haujlwm Editor

VPN

Kev tshuaj xyuas VPN
VPN Cov npe saum toj kawg nkaus
VPN Yuav Ua Li Cas
Home> Yuav ua li cas-rau > Tsis qhia npe Web Access > SSTP VPN: Txhua yam koj xav paub