SSTP VPN: Ikintu cyose wifuza kumenya

Igice cya 1: Niki SSTP VPN?

Porotokole Yizewe ya Sock Socket ni porotokoro ikoreshwa cyane ishobora gukoreshwa mugukora VPN yawe. Tekinoroji yatunganijwe na Microsoft kandi irashobora koherezwa hamwe na router wahisemo, nka Mikrotik SSTP VPN.

• • Ikoresha Port 443, nayo ikoreshwa na SSL ihuza. Kubwibyo, irashobora gukemura ibibazo bya firewall biboneka muri OpenVPN mugihe kimwe.
• • SSTP VPN ikoresha icyemezo cyabigenewe cyo kwemeza hamwe na encryption ya 2048-bit, bigatuma iba imwe muri protocole ifite umutekano.
• • Irashobora kurenga byoroshye firewall kandi igatanga infashanyo Yimbere Yimbere (PFS).
• • Mu mwanya wa IPSec, ishyigikira kohereza SSL. Ibi byashobokaga kuzerera aho guhererekanya amakuru gusa.
• • Gusa ikibi cya SSTP VPN nuko idatanga inkunga kubikoresho bigendanwa nka Android na iPhone.

Muri SSTP VPN Ubuntu kuri Windows, icyambu 443 gikoreshwa nkuko kwemeza bibaho kumukiriya arangije. Nyuma yo kubona seriveri icyemezo, ihuriro ryashyizweho. Ipaki ya HTTPS na SSTP noneho yimurwa kubakiriya, biganisha kumishyikirano ya PPP. Imigaragarire ya IP imaze gushyirwaho, seriveri hamwe nabakiriya barashobora kwimura amakuru yamapaki.

Igice cya 2: Nigute washyiraho VPN hamwe na SSTP?

Gushiraho SSTP VPN Ubuntu cyangwa Windows biratandukanye gato na L2TP cyangwa PPTP. Nubwo tekinoroji ikomoka kuri Windows, wakenera gushiraho Mikrotik SSTP VPN. Urashobora gukoresha ubundi buryo bwose. Nubwo, muriyi nyigisho, twasuzumye imiterere ya SSTP VPN Mikrotik kuri Windows 10. Inzira irasa cyane nizindi verisiyo za Windows na SSTP VPN Ubuntu nayo.

Intambwe ya 1: Kubona Icyemezo cyo Kwemeza Abakiriya

Nkuko mubizi, kugirango dushyireho Mikrotik SSTP VPN, dukeneye gukora ibyemezo byabugenewe. Kugirango ukore ibi, jya kuri Sisitemu> Impamyabumenyi hanyuma uhitemo gukora icyemezo gishya. Hano, urashobora gutanga izina rya DNS kugirango ushireho SSTP VPN. Na none, itariki izarangiriraho igomba kuba ifite iminsi 365 iri imbere. Ingano yingenzi igomba kuba ya 2048 bit.

Nyuma, jya kuri tab Urufunguzo rwo gukoresha hanyuma ushoboze gusa ibimenyetso bya crl nibyemezo byingenzi. amahitamo.

Bika impinduka zawe ukanze kuri bouton "Shyira". Ibi bizagufasha gukora seriveri ya SSTP VPN Mikrotik nayo.

Intambwe ya 2: Kora icyemezo cya seriveri

Muri ubwo buryo, ugomba gukora icyemezo cya seriveri nayo. Uhe izina rikwiye hanyuma ushireho urufunguzo kuri 2048. Igihe gishobora kuba ikintu cyose kuva 0 kugeza 3650.

Noneho, jya kuri Urufunguzo rwo Gukoresha hanyuma urebe neza ko ntanumwe mubishobora gukora.

Kanda gusa kuri buto ya "Shyira" hanyuma usohokemo idirishya.

Intambwe ya 3: Shyira umukono ku cyemezo

Kugirango ukomeze, ugomba gusinya icyemezo cyawe wenyine. Fungura gusa Icyemezo hanyuma ukande ahanditse "Ikimenyetso". Tanga izina rya DNS cyangwa aderesi ya IP ihamye hanyuma uhitemo kwiyandikisha wenyine.

Nyuma yo gusinya, ntushobora kugira icyo uhindura mubyemezo.

Intambwe ya 4: Shyira umukono kuri seriveri

Muburyo bumwe, urashobora gusinya seriveri ya seriveri nayo. Urashobora gukenera urufunguzo rwinyongera kugirango urusheho kugira umutekano.

Intambwe ya 5: Gushoboza seriveri

Noneho, ukeneye gukora seriveri ya SSTP VPN no gukora Ibanga. Gusa jya kumahitamo ya PPP hanyuma ushoboze seriveri ya SSTP. Kwemeza bigomba kuba "mschap2" gusa. Kandi, uhagarike kugenzura ibyemezo byabakiriya mbere yo kubika aya mahinduka.

Byongeye, kora ibanga rishya rya PPP. Tanga izina ukoresha, ijambo ryibanga hamwe na LAN ya router yawe ya Mikrotik. Na none, urashobora kwerekana IP adresse yumukiriya wa kure hano.

Intambwe ya 6: Kohereza icyemezo

Noneho, dukeneye kohereza hanze icyemezo cyabakiriya. Mbere, menya neza ko icyambu 443 gifunguye.

Tangiza gusa interineti ya Router yawe ikindi gihe. Hitamo icyemezo cya CA hanyuma ukande ahanditse "Kohereza". Shiraho ijambo rikomeye ryohereza hanze.

Birakomeye! Turi hafi. Jya kuri interineti ya Router hanyuma wandukure-wandike icyemezo cya CA kuri Windows.

Nyuma, urashobora gutangiza wizard yo gutumiza ibyemezo bishya. Hitamo imashini yaho nkisoko.

Kuva hano, urashobora gushakisha icyemezo wakoze. Urashobora kandi gukoresha "certlm.msc" hanyuma ugashyiraho icyemezo cyawe kuva.

Intambwe 7: Kurema SSTP VPN

Mugusoza, urashobora kujya kuri Panel Igenzura> Umuyoboro na Igenamiterere hanyuma ugahitamo gukora VPN nshya. Tanga izina rya seriveri hanyuma urebe neza ko ubwoko bwa VPN bwanditswe nka SSTP.

SSTP VPN imaze gushingwa, urashobora kujya kuri interineti ya Mikrotik. Kuva hano, urashobora kureba Mikrotik SSTP VPN yongeyeho. Urashobora noneho guhuza niyi SSTP VPN Mikrotik igihe icyo aricyo cyose.

Igice cya 3: SSTP na PPTP

Nkuko mubizi, SSTP iratandukanye cyane na PPTP. Kurugero, PPTP irahari hafi ya porogaramu zose ziyobora (harimo Android na iOS). Kurundi ruhande, SSTP ikomoka kuri Windows.

PPTP nayo ni protokole yihuta iyo ugereranije na SSTP. Nubwo, SSTP nuburyo bwiza bwo guhitamo. Kubera ko ishingiye ku cyambu kitigera kibuzwa na firewall, irashobora kurenga byoroshye umutekano wa NAT na firewall. Ikintu kimwe ntigishobora gukoreshwa kuri PPTP.

Niba ushaka protocole ya VPN kubyo ukeneye, noneho urashobora kujyana na PPTP. Ntabwo ishobora kuba ifite umutekano nka SSTP, ariko biroroshye gushiraho. Hariho kandi kubuntu kubuntu PPTP VPN seriveri.

Igice cya 4: SSTP na OpenVPN

Mugihe SSTP na PPTP bitandukanye cyane, OpenVPN na SSTP basangiye byinshi. Itandukaniro nyamukuru nuko SSTP ifitwe na Microsoft kandi ahanini ikora kuri sisitemu ya Windows. Kurundi ruhande, OpenVPN ni tekinoroji ifunguye kandi ikora kumurongo hafi ya yose (harimo desktop na sisitemu igendanwa).

SSTP irashobora kurenga ubwoko bwose bwa firewall, harimo izibuza OpenVPN. Urashobora gushiraho byoroshye serivise ya OpenVPN ukoresheje encryption wahisemo. Byombi, OpenVPN na SSTP bifite umutekano rwose. Nubwo, urashobora guhitamo OpenVPN nkimpinduka zurusobe rwawe, zidashobora kugerwaho byoroshye muri SSTP.

Byongeye kandi, OpenVPN irashobora guhuza UDP hamwe numuyoboro. Gushiraho OpenVPN, wakenera software ya gatatu mugihe ushyiraho SSTP VPN kuri Windows biroroshye.