Uma uhlala ushintsha phakathi kwe-Wi-Fi yakho yasekhaya, inethiwekhi yehhovisi, inethiwekhi yaseyunivesithi, noma i-hotspot yakho yeselula, ukushintsha izilungiselelo zenethiwekhi ngesandla kuyinkinga enkulu. Ngenhlanhla, iWindows nezinye izinhlelo zokusebenza zinikeza izindlela zokwenza lokhu. dala amaphrofayili azenzakalelayo ngokusekelwe kunethiwekhi ye-WiFi oxhuma kuyo, lawula ukuthi yisiphi isikhombimsebenzisi esisebenza nganoma yisiphi isikhathi bese usebenzisa izinqubomgomo zokuphepha noma ama-firewall avumelaniswe nendawo ngayinye.
Kulesi sihloko uzobona, ngokuningiliziwe, ukuthi zisebenza kanjani amaphrofayili enethiwekhiLokho abakuvumela ukuthi ukwenze ku-Windows, ukuthi ungazihlanganisa kanjani namathuluzi afana ne-Intune noma nezixazululo zokuphepha, yiziphi izinhlelo zezinkampani zangaphandle okufanele udlule kuzo, nokuthi konke lokhu kuhambisana kanjani nemibono efana nezindawo, amaqembu abalulekile esibonakalayo, noma amaphrofayili e-IPsec kuma-router ebhizinisi.
Iyini iphrofayili yenethiwekhi futhi kungani ungathanda ukuyisebenzisa?
Iphrofayela yenethiwekhi ngokuyisisekelo iyisethi ye amapharamitha achazwe ngaphambilini asetshenziswa ekuxhumaneni (noma eziningana) kuye ngezimo ezithile: inethiwekhi ye-WiFi oxhuma kuyo, isikhombikubona esisebenzayo, indawo, njll. Lezi zinhlaka zingasukela ku-IP kanye ne-DNS kuya emithethweni ye-firewall, ukusetshenziswa kwe-VPN, amaphrinta, izinsiza ezabiwe, noma ngisho nezikripthi ezenziwe ngokwezifiso.
Ku-Windows, uhlelo seluvele luhlukanisa amanethiwekhi njenge esidlangalaleni noma ngaseseUma uxhuma kunethiwekhi ye-Wi-Fi noma ye-LAN okokuqala, uhlelo lubuza ukuthi ngabe luyinethiwekhi ethembekile. Uma uthi yebo, lubhekwa njengoluyimfihlo; uma kungenjalo, lubhekwa njengolusesidlangalaleni. Ngokusekelwe kulesi sinqumo, lulungisa i-firewall kanye nokubonakala kwedivayisi yakho kunethiwekhi, luphumuze ukuphepha kumanethiwekhi asekhaya noma emahhovisi amancane, futhi luqinise kumanethiwekhi emahhotela, ezikhumulweni zezindiza, noma kuma-cafe.
Ku-a inethiwekhi yangaseseI-Windows icabanga ukuthi ulawula ukuthi ubani oxhumayo nokuthi amadivayisi ayaziwa. Lokhu kukuvumela, isibonelo, ukuthola amanye amakhompyutha kunethiwekhi, ukufinyelela amafolda abiwe, ukuthumela imisebenzi yokuphrinta kumaphrinta enethiwekhi, noma ukusebenzisa izici ezifana ne-HomeGroup noma ukusakaza ku-Smart TV. Uhlelo lunciphisa imikhawulo ngoba luyaqonda ukuthi imvelo iphephile.
Ku-a inethiwekhi yomphakathiI-Windows icabanga ukuthi inethiwekhi ayithembekile. Ngakho-ke, ikhubaza ukutholwa kwedivayisi, ukwabelana ngamafayela nephrinta, kanye nezinye izinsizakalo ezingakuchaya ekuhlaselweni okuvela kwamanye amadivayisi axhunyiwe. ubuthakathaka obufana nobo obuku-WhatsAppUsengaphequlula i-inthanethi, kodwa idivayisi yakho ihlukanisiwe nezinye, okuyinto ebalulekile uma uxhuma kwi-WiFi enxanxatheleni yezitolo, esikhumulweni sezindiza, noma kunethiwekhi evulekile.
Inkinga ivela lapho i-laptop efanayo ihanjiswa amanethiwekhi amaningi anezidingo ezihlukene kakhuluOmunye angadinga ikheli le-IP elingaguquki, omunye asebenzise i-DHCP; omunye angadinga ukuthi udlule ku-proxy yenkampani, omunye ukuze usebenzise i-VPN, kanti omunye angase angakudingi. Ukushintsha lokhu ngesandla isikhathi ngasinye kuyadina futhi kuvame ukuba namaphutha. Yilapho amaphrofayili enethiwekhi athuthukile angena khona, kokubili ku-Windows kanye nangezinhlelo ezikhethekile.
Yenza izilungiselelo ngokuzenzakalelayo uma ushintsha amanethiwekhi e-WiFi ku-Windows
I-Windows ikuvumela ukuthi uchaze amapharamitha ahlukene ngephrofayili yenethiwekhi (yomphakathi noma yangasese) kanye nokuxhumeka okuthile, kodwa ukuphathwa okuhlanganisiwe kuyasilela uma ufuna. Shintsha i-IP, i-DNS, i-proxy, i-VPN kanye ne-firewall konke ngesikhathi esisodwa njalo uma uthola i-SSID ehlukile. Kulokhu, indlela evamile ukuhlanganisa lokho okunikezwa yisistimu namathuluzi angaphandle aphatha amaphrofayili athuthukile.
Esibonakalayo sokuphathwa kwenethiwekhi yezithombe kwezinye izindawo (isibonelo, ukusatshalaliswa okusebenzisa imiqondo efana ne-Solaris' NCPs) kuvezwa umehluko amaphrofayela enethiwekhi asabelayo nalungisiweIphrofayili ephendulayo "Ezenzakalelayo" iqala ngokuzama ukusungula uxhumano olunezintambo, futhi uma lokho kwehluleka, isebenzisa uxhumano olungenantambo. Iphrofayili elungisiwe "Ezenzakalelayo" ichaza isethi yezixhumanisi ezingaguquki ezihlala zingashintshi kuze kube yilapho ziguqulwa kusetshenziswa amathuluzi omugqa womyalo.
Lawa maphrofayili alawula ukuthi yiziphi izixhumi ezingasetshenziswa yenza kusebenze noma kuvale nganoma yisiphi isikhathiKukhompyutha ephathekayo evamile ene-Ethernet ne-Wi-Fi, ungase ufune ukusebenzisa i-Ethernet kuphela uma ikhebula litholakala bese uvala i-Wi-Fi ukuze uvikeleke, noma okuphambene nalokho. I-Network Preferences GUI ivame ukunikeza isimo soxhumano, iphrofayela yenethiwekhi, kanye nokubukwa kwezakhiwo zoxhumano, lapho ungabona khona isimo samanje, ukuthi iyiphi iphrofayela esebenzayo, kanye nezakhiwo ezithile (ikheli le-IP, i-IPv4/IPv6, amanethiwekhi angenantambo athandwayo, njll.).
Ngaphezu kwalokho, ungakwazi ukuchaza izindawo Lezi zilungiselelo zihlanganisa ukucushwa okufana namasevisi egama, i-firewall, kanye ne-IPsec, futhi zenziwa zisebenze ngesandla noma ngokwemibandela ngokwemithetho (isibonelo, indawo "yehhovisi" uma uthola ikheli le-IP kusuka ebangeni elithile, kanye nendawo "yekhaya" enezinqubomgomo ezahlukene). Indawo eyodwa kuphela engasebenza ngesikhathi, futhi ingashintshwa kusuka kusithonjana sesimo senethiwekhi noma ngemiyalo efana ne-netadm ezinhlelweni ezifana ne-Solaris.
Izinhlelo zokudala amaphrofayili azenzakalelayo ngenethiwekhi ngayinye ye-WiFi
Ukuze udlule lokho okunikezwa yiWindows ngokuzenzakalelayo, kunezindlela ezithile ezivumela dala futhi usebenzise amaphrofayili enethiwekhi aphelele Kuya ngenethiwekhi (i-SSID) oxhuma kuyo noma i-adaptha esebenzayo. Eziningi zazo zisekela i-Windows XP nge-Windows 11.
I-Easy Net Switch
I-Easy Net Switch Luhlelo olukhokhelwayo lwe-Windows oluvelele ngenani elikhulu lezilungiselelo zenethiwekhi elingakwazi ukuzisingatha. Nakuba isikhombikubona salo sifana nenkathi ye-Windows XP, sisahambisana I-Windows XP, 7, 8, 10 kanye ne-11, futhi ifaka phakathi i-GUI kanye nemodi yomugqa womyalo yabasebenzisi abathuthukile.
Nge-Easy Net Switch ungachaza amaphrofayili alawula cishe yonke into: Ikheli le-IP, imaski ye-subnet, isango, i-DNS, i-WINS, i-NetBIOS, i-MAC spoofing, i-WiFi, i-VPN, i-proxy, i-firewall, iphrinta ezenzakalelayo, amadrayivu enethiwekhi, imizila engaguqukifuthi usebenzise ngisho nezikripthi noma ushintshe ifayela le-hosts. Ipharamitha ngayinye iyazikhethela; ungazikhawulela ku-IP kanye ne-DNS noma usethe iphrofayili eyinkimbinkimbi kakhulu yendawo yenkampani.
Ukudala iphrofayela kuvame ukwenziwa ngokuchofoza inkinobho ethi "Okusha", usebenzisa i-wizard eyisisekelo ongayenza ngokwezifiso. Esigabeni esithi "Inethiwekhi", ukhetha ukuthi ikheli le-IP kanye ne-DNS kutholakala nge-DHCP noma ku-static, futhi ku-"Advanced" ungashintsha i-WINS, i-NetBIOS, ushintshe ikheli le-MAC, usule i-DNS cache, nokunye okuningi. Uma usebenzisa iphrofayela, uhlelo lubonisa i- Isifinyezo sezinguquko kanye nokuthi ngabe kube namaphutha yiniokwenza kube lula ukuxilonga uma kukhona okungasebenzi.
Esigabeni se-WiFi, i-Easy Net Switch ikuvumela ukuthi uchaze amaphrofayili angenantambo axhunywe kuma-SSID athileUngaskena amanethiwekhi atholakalayo noma ufake igama ngesandla, bese ulungisa ubuqiniso: kusukela kukhiye ababiwe ngaphambilini (i-PSK) kuya ekuqinisekisweni okuqinile nge-RADIUS kanye nezinqubo ezahlukahlukene ze-EAP. Lokhu kuvumela, isibonelo, iphrofayili enokhiye ofanele, ubuqiniso be-EAP obufanele, futhi, uma kudingeka, i-VPN ilungiselelwe ngokuzenzakalelayo njalo uma ubona i-SSID yenkampani.
Uhlelo luphinde luphathe izilungiselelo ze ummeleli wenkampani (kufaka phakathi ukuqinisekiswa), i-Dial-Up, i-VPN, futhi inikeza ngisho namathuluzi ahlanganisiwe njenge-ping kanye ne-traceroute, kanye newijethi yedeskithophu yokubuka ikheli le-IP lamanje ngaso sonke isikhathi. Izinketho zayo zifaka phakathi ukuqala nge-Windows, ukunciphisa kuthreyi yesistimu, ukukhubaza ukutholwa kwenethiwekhi ye-Wi-Fi okuzenzakalelayo, kanye nokufinyelela kohlelo lokuvikela iphasiwedi ukuvimbela izinguquko ezingagunyaziwe.
Umphathi we-TCP/IP
Umphathi we-TCP/IP Kuyiphrojekthi yamahhala nevulekile, yize ingakabuyekezwa eminyakeni edlule, kodwa isasebenza kahle ezinguqulweni zakamuva ze-Windows. Igxile ekudaleni amaphrofayili enethiwekhi angenamkhawulo ashintsha ngokushesha Ukucushwa kwe-IP, imaski ye-subnet, isango, i-DNS, i-proxy, igama leqembu lomsebenzi, kanye nekheli le-MAC.
Enye yezinzuzo zayo ukuthi ivumela ngenisa ukucushwa kwamanje Uhlelo lukuvumela ukuthi udale iphrofayela kusuka kuzilungiselelo zakho ezikhona ngaphandle kokufaka konke ngesandla. Luphinde lunikeze inketho yokuhlanganisa amafayela e-batch nephrofayela ngayinye, ukuze ukuyisebenzisa ngokuzenzakalela kusebenze imiyalo eyengeziwe (isibonelo, ukufaka amadrayivu enethiwekhi noma ukuqalisa i-VPN).
Ukushintsha phakathi kwamaphrofayili kungenziwa kusukela ku-interface uqobo noma nge okhiye abashisayoIlungele abasebenzisi abadinga ukuhamba ngokushesha phakathi kwezindawo (inethiwekhi yenkampani, ilebhu, iklayenti, njll.). Ngaphezu kwalokho, uhlelo lubuyekeza ngokuzenzakalelayo ngewebhu uma izinguqulo ezintsha zitholakala, okususa isidingo sokulandwa ngesandla.
IP Shifter
IP Shifter Kuyindlela elula futhi yamahhala eyenzelwe labo abadinga into elula. Isekela i-Windows XP nezinguqulo zakamuva, okuhlanganisa IWindows 10 neWindows 11futhi isebenza ngama-adaptha ahlukene, kokubili i-Ethernet ne-WiFi.
Umsebenzi wayo oyinhloko ukukuvumela ukuthi ushintshe ngaphandle kokuqala kabusha i- Ukucushwa kwe-IP, imaski ye-subnet, isango kanye ne-DNS yama-adaptha. Iphinde iphathe ukucushwa kwe-proxy kweziphequluli ezifana ne-Microsoft Edge noma i-Firefox, ihlanganisa umyalo we-ping osheshayo, futhi ingathola amadivayisi akhona ku-LAN, kanye nokubonisa ikheli le-IP lomphakathi elibonwa yi-inthanethi.
Ayinalo izinga lokujula kwe-Easy Net Switch noma i-NetSetMan, kodwa i- shintsha phakathi kwezimo ezimbili noma ezintathu eziyisisekelo (isibonelo, ikheli le-IP elingaguquki kunethiwekhi yezimboni kanye ne-DHCP ekhaya) ngokuvamile lanele.
INetSetMan
INetSetMan Cishe kuyindlela yamahhala enamandla kakhulu kune-Easy Net Switch. Inenguqulo yamahhala enamaphrofayili afinyelela kwayisishiyagalombili kanye nenguqulo ye-Pro ekhokhelwayo ene Amaphrofayela angenamkhawulo kanye nezinketho eziningi ezigxile ebhizinisiniIfilosofi yabo iwukuthi ngokuchofoza okukodwa ungenza kusebenze isethi ephelele yezilungiselelo zenethiwekhi.
Phakathi kokucushwa okuvumelayo kukhona okuvamile (i-IP, imaski, isango, i-DNS), i- iqembu lokusebenza, iphrinta ezenzakalelayo, amadrayivu enethiwekhi, ithebula lokuqondisa, iseva ye-SMTP, igama le-PC, ikheli le-MAC, isimo sekhadi lenethiwekhi, isivinini sesixhumi esibonakalayo, i-MTU, i-VLAN nokunye okuningi. Ungachaza futhi amapharamitha eseva ye-VPN, i-launch batch, i-VBScript, noma izikripthi ze-JavaScript uma ushintsha amaphrofayili, usebenzisa ezinye izinhlelo, futhi uphatha ngisho nezilungiselelo ze-WiFi ngokuningiliziwe.
Inguqulo ye-Pro ingeza izici ezifana nalezi ukucushwa kwe-proxy okuthuthukisiwe kanye nezizinda zenethiwekhiLokhu kuwusizo kakhulu ekuhlanganisweni nezindawo zesizinda senkampani kanye namaseva e-proxy ahlanganisiwe. Kodwa-ke, inguqulo yamahhala ayikwazi ukusetshenziswa ku-Windows Server futhi ikhawulela inani lamaphrofayili abe yisishiyagalombili, into okufanele uyikhumbule uma uphatha izindawo eziningi.
Amaphrofayili e-WiFi aphathwa nge-Microsoft Intune
Ezindaweni zezinkampani lapho uphatha khona amakhulu noma izinkulungwane zamadivayisi, awukwazi ukuthembela kumsebenzisi ngamunye ukuthi alungiselele inethiwekhi yakhe ye-Wi-Fi ngendlela efanele. Yilapho i-Microsoft Intune ingena khona, okukuvumela ukuthi Dala amaphrofayili e-WiFi bese uwasabalalisa kumadivayisi e-Windows, Android, iOS, kanye ne-macOS. kanye nabanye, ngendlela ehlanganisiwe.
Un Iphrofayili ye-Intune WiFi Kuyisethi yamapharamitha okuxhumana (i-SSID, uhlobo lokuphepha, indlela yokuqinisekisa, iphasiwedi, izitifiketi, njll.) anikezwe amaqembu abasebenzisi noma amadivayisi. Uma idivayisi ithola iphrofayili, inethiwekhi ivela ohlwini lwamanethiwekhi aziwayo, futhi uma ingaphakathi kwebanga, idivayisi ingaxhuma ngokuzenzakalelayo ngaphandle kokuthi umsebenzisi ashintshe noma yiziphi izilungiselelo.
Ukuze udale iphrofayili ye-WiFi ejwayelekile ku-Intune, ulandela inqubo efanayo neyezinye izinqubomgomo: ufinyelela ku- Isikhungo Sokuphatha se-Microsoft IntuneIya kumadivayisi, izilungiselelo, dala inqubomgomo entsha, khetha ipulatifomu (i-Android, i-iOS, i-macOS, i-Windows 10/11, njll.), bese ukhetha "i-Wi-Fi" noma ithempulethi elihambisanayo njengohlobo lwephrofayela. Bese uchaza igama lephrofayela, incazelo, bese ulungiselela izinketho ezithile zepulatifomu: i-SSID, uhlobo lokuqinisekisa (i-WPA2, i-WPA3, i-EAP-TLS, njll.), ukusetshenziswa kwesitifiketi, amapharamitha athuthukile, bese ekugcineni unikeza iphrofayela emaqenjini afanele.
Ukwabiwa kungahlungwa nge amalebula we-scopeLokhu kuyasiza ekuhlukaniseni imithwalo yemfanelo phakathi kwamaqembu e-IT ahlukene (isibonelo, ithimba lokusekela lendawo eliphethe izwe elilodwa kuphela). Uma selisabalalisiwe, iphrofayela iyavela ohlwini lwephrofayela ye-Intune futhi isetshenziswa ngokuzenzakalelayo lapho amadivayisi evumelaniswa.
Amaphrofayili e-WiFi anokucushwa kwe-PSK ne-XML kusetshenziswa i-Intune
Ngaphezu kwamaphrofayili e-WiFi ajwayelekile, i-Intune ikuvumela ukuthi uchaze Amaphrofayili e-WiFi asekelwe kukhiye owabiwe ngaphambilini (i-PSK) kanye ne-EAP kusetshenziswa iziqondiso ezenziwe ngokwezifiso kanye ne-WiFi CSP. Lokhu kwenziwa ngamafayela e-XML achaza iphrofayili engenantambo futhi athunyelwa kumadivayisi nge-OMA-URI.
Okhiye ababiwe ngaphambilini bavame ukusetshenziswa qinisekisa abasebenzisi kumanethiwekhi e-WiFi asekhaya noma kuma-LAN amancane angenantamboNge-Intune, ungakha inqubomgomo yokucushwa kwedivayisi ngokwezifiso equkethe iphrofayela ye-Wi-Fi ngefomethi ye-XML kanye nokucushwa kwe-OMA-URI okuyiletha ohlelweni lokusebenza. Le nketho iyatholakala ku-Android (kufaka phakathi izindlela zephrofayela ye-Enterprise kanye ne-Work), amanethiwekhi asekelwe ku-Windows, kanye ne-EAP.
Ukuze isebenze, udinga ukulungiselela ifayela le-XML elichaza iphrofayili, okuhlanganisa Igama lephrofayela, i-SSID (kumbhalo kanye ne-hexadecimal), uhlobo lokuqinisekisa, uhlobo lokubethela, ukhiye, imodi yokuxhuma, ukuthi inethiwekhi ifihliwe yininjll. Uma uthanda, ungakhipha le XML kukhompyutha ye-Windows esevele inenethiwekhi elungiselelwe usebenzisa imiyalo ye-netsh.
Ukudala inqubomgomo yangokwezifiso ku-Intune kuhilela ukubuyela kumadivayisi, izilungiselelo, ukudala inqubomgomo entsha, ukukhetha ipulatifomu, nokukhetha okuthi "Yenza ngokwezifiso" njengohlobo. Ngaphakathi kwe- izinketho zokucushwa Engeza okufakiwe okusha kwe-OMA-URI okubonisa:
- Igama kanye nencazelo yokucushwa.
- El OMA-URI kufanelekile, isibonelo:
- Ku-Android: ./Vendor/MSFT/WiFi/Profile/{SSID}/Settings
- Ku-Windows: ./Vendor/MSFT/WiFi/Profile/{SSID}/WlanXml
- Uhlobo lwedatha "Intambo".
- Ku-«Value», i-XML ephelele yephrofayili ye-WiFi.
Kubalulekile ukuthi inani le-{SSID} ku-OMA-URI lifane ne- igama lenethiwekhi elichazayo kuphrofayela ye-XMLUma igama liqukethe izikhala, kumele zifakwe ikhodi njengo-%20 ku-OMA-URI. Ngaphezu kwalokho, ku-XML, insimu Kumelwe kuhlale kungamanga ukuze ukhiye uthunyelwe ngombhalo ocacile (ubhalwe ngekhodi yisiteshi sokuphatha, kodwa ungafihli ngaphakathi kwe-XML). Uma kusethwe kuyiqiniso, idivayisi ingalindela iphasiwedi ebhalwe ngekhodi bese yehluleka ukuxhuma.
Isibonelo esijwayelekile sephrofayili ye-WiFi ene-PSK singabandakanya ibhulokhi enegama, i-SSID ku-hex nakumbhalo, I-ESS , imoto , ibhulokhi ngohlobo lokuqinisekisa (isb., i-WPA2PSK) kanye nokubethela (i-AES), kanye nebhulokhi nge i-passPhrase , amanga futhi iphasiwedi , lapho "iphasiwedi" iyisihluthulelo sombhalo ocacile.
Kumanethiwekhi asekelwe ku-EAP, i-XML iyinkimbinkimbi kakhulu ngoba ifaka phakathi ukucushwa kwe- I-EapHostConfig, izitifiketi, ukuqinisekiswa kweseva, uhlu lwe-hash lwe-CA, i-EKU, njll.Amapharamitha afana nohlobo lwe-EAP (isb., 13 lwe-EAP-TLS), umthombo wokuqinisekisa (isitolo sesitifiketi), ukuthi ukuqinisekiswa kweseva kuvunyelwe noma cha, kanye nezihlungi zesitifiketi ezingaba khona ezisebenzisa ama-EKU okuqinisekisa amaklayenti ziyachazwa.
Uma inqubomgomo yangokwezifiso isidaliwe, inikezwa amaqembu afanayo obungawasebenzisa nephrofayela ejwayelekile ye-Wi-Fi. Uma ubhalisa noma uvumelanisa, idivayisi ithola ifayela le-XML, ilingenise njengephrofayela engenantambo, futhi ikulungele ukuxhuma ngokuzenzakalelayo kuleyo nethiwekhi.
Dala i-XML kusuka kuxhumano lwe-WiFi olukhona
Ezimweni eziningi, kulula kakhulu ukuvumela iWindows ukuthi ikhiqize i-XML kusuka kuxhumano olusebenzayo olukhona. Ukuze wenze lokhu kukhompyutha ye-Windows, ungalandela lezi zinyathelo eziyisisekelo: thumela iphrofayela ye-WiFi:
- Dala ifolda yendawo, isibonelo, c:\WiFi.
- Vula umyalo wesinyathelo ngesinyathelo njengomphathi.
- Gijima netsh wlan bonisa amaphrofayela ukuze ubone amagama amaphrofayili akhona.
- Thumela iphrofayili oyifunayo nge
netsh wlan export profile name=»ProfileName» folder=c:\WiFi.
Uma iphrofayili ifaka ukhiye owabiwe ngaphambilini futhi ufuna i-XML iqukathe iphasiwedi ngombhalo ocacile (kudingeka ukuthi i-Intune iyisebenzise kahle), ipharamitha iyangezwa. ukhiye = kucace kumyalo wokuthumela ngaphandle. Ifayela le-XML elikhiqizwe (elinegama elifana ne-Wi-Fi-ProfileName.xml) lingavulwa ngomhleli wombhalo, libuyekezwe, futhi likopishwe ngqo enanini lokucushwa kwe-OMA-URI ku-Intune.
Imininingwane ethile idinga ukubhekwa, njengesici Iphrofayili ethunyelwe ayifaki izikhala ezingabangela amaphutha okwabiwa lapho kusetshenziswa i-Intune, noma ukuthi inani fanisa i-SSID ecacisiwe. Ngaphezu kwalokho, izinhlamvu ezikhethekile ku-XML (njenge-ampersand &) kumele ziphunywe kahle ukuze kugwenywe amaphutha okucubungula.
Izindlela ezinhle kakhulu zokusebenzisa i-PSK kanye nezinkinobho ezijikelezayo
Uma uphatha amanethiwekhi e-WiFi nge-PSK endaweni yebhizinisi, kubalulekile ukuhlela ukuzungezisa iphasiwediUkushintsha iphasiwedi ngokuzumayo ngaphandle kwesixwayiso kunganqamula amadivayisi amaningi athembele kuleyo nethiwekhi ukuxhumana ne-Intune futhi athole izilungiselelo ezintsha.
Kunconywa ukuthi uqale uhlole ukuthi amadivayisi angakwazi yini xhuma ngqo endaweni yokungena Ngokucushwa okuhleliwe, klama ushintsho oluyisihluthulelo ukuze kube nokuxhumeka kwe-inthanethi okunye: inethiwekhi yezivakashi, inethiwekhi ye-Wi-Fi yesikhashana ehambisanayo, noma idatha yeselula. Ngale ndlela, noma ngabe i-Wi-Fi yenkampani ishintsha i-PSK yayo, amadivayisi angasebenzisa uxhumano lwesibili ukuthola iphrofayili entsha.
Kunconywa futhi ukuhlela ukuthunyelwa kwamaphrofayili amasha ku amahora angekho ngesikhathi esimatasa futhi yazise abasebenzisi ukuthi ukuxhumana kungathinteka isikhathi esithile. Lokhu kunciphisa umthelela ekukhiqizeni futhi kwenza kube lula ukuqapha amaphutha noma izinto ezingavamile ngesikhathi senqubo.
Amaphrofayili okuxhumeka kwenethiwekhi kanye nemithetho yomlilo
Ezinye izixazululo zokuphepha, njengezindawo zokuvikela ezisebenza ekugcineni (I-Hexlock), vumela ukuchaza amaphrofayili oxhumano lwenethiwekhi ngokwezifiso Lawa maphrofayili asetshenziswa ekuxhumaneni okuthile ngokusekelwe ezicini noma ezimweni. Anezela ungqimba olwengeziwe ekucushweni kwe-Windows, alungisa i-firewall, ukubonakala kwedivayisi, kanye nezinye izivikelo ngokuya ngenethiwekhi.
Ku-console yokucushwa okuthuthukisiwe, ngokuvamile kuba nesigaba esithi "Amaphrofayili Okuxhumeka Kwenethiwekhi" anamaphrofayili achazwe ngaphambilini njenge I-Privado y Okusesidlangalaleni Lawa maphrofayili awakwazi ukuguqulwa noma ukususwa. Iphrofayili Eyimfihlo ihloselwe amanethiwekhi athembekile (ekhaya noma ehhovisi), lapho ukufinyelela kumafayela abiwe, amaphrinta, ukuxhumana kwe-RPC okungenayo, kanye nedeskithophu ekude kuvunyelwe khona. Iphrofayili Yomphakathi, ngakolunye uhlangothi, ivimba ukwabelana ngamafayela kanye nezinsiza futhi ihloselwe amanethiwekhi angathembekile.
Ngaphezu kwala maphrofayili, ungakha amaphrofayli wangokwezifiso futhi ulungise amapharamitha afana negama, incazelo, amakheli engeziwe athembekile, ukuthi uxhumano lubhekwa njengoluthembekile (ukwengeza wonke ama-subnet endaweni ephephile), futhi unike amandla izici ezifana ne-"Weak WiFi Encryption Report", ezikwazisa uma uxhuma kumanethiwekhi avulekile noma angavikelekile kahle.
Iphrofayela ngayinye ingaba nayo izishoshovuOkusho ukuthi, izimo okumele kuhlangatshezwane nazo ukuze iphrofayili isetshenziswe ekuxhumaneni: ikheli le-IP lesango, i-Wi-Fi SSID, uhlobo lwenethiwekhi, njll. Amaphrofayili ahlolwa ngokuya ngokulandelana okubalulekile, bese kusetshenziswa elokuqala elihambisana nemibandela. Lokhu kuvumela, isibonelo, ukuba nephrofayili ethile ye-Wi-Fi yenkampani, eyojwayelekile yamanethiwekhi asekhaya, kanye neyomkhawulo kakhulu kunoma iyiphi inethiwekhi yomphakathi engaziwa.
Ukuphathwa kwephrofayela nendawo ezindaweni ezithuthukile
Ezinhlelweni ezithuthuke kakhulu noma kumanethiwekhi ebhizinisi ane-Solaris noma amanye amapulatifomu, umqondo wephrofayili yenethiwekhi uhlanganiswa ne- Amayunithi Okucushwa Kwenethiwekhi (ama-NCU), amaqembu abalulekile, kanye nezindawoNgokusebenzisa isikhombikubona sezithombe se-Network Preferences noma imiyalo efana ne-ipadm, i-dladm, i-netcfg kanye ne-netadm, ungakha amaphrofayili asebenzayo nalungisiwe, uhlanganise izikhombikubona, futhi uchaze imithetho yokusebenzisa.
Ukubuka kwephrofayela yenethiwekhi ye-GUI kubonisa uhlu lwamaphrofayela atholakalayongezinkomba ezibonisa ukuthi iyiphi esebenzayo. Amaphrofayili achazwe yisistimu, njenge-"Automatic" kanye ne-"DefaultFixed," awakwazi ukuhlelwa noma ukususwa, kodwa ungakha amaphrofayili amaningi asebenzayo ngokwezifiso. Iphrofayili ngayinye ifaka isethi yokuxhumana (ama-NCU) asebenza noma angasebenzi lapho iphrofayili iqala ukusebenza.
Ukuze uhlele ama-interface, kusetshenziswa okulandelayo: amaqembu abalulekile ngezinhlobo ezintathu eziyinhloko:
- Okukhethekile: ukuxhumana okukodwa kuphela eqenjini okungasebenza, kanti ngenkathi okukodwa kusebenza, amaqembu angaphansi kwamaphuzu abalulekile awathintwa.
- Kwabiwe: konke ukuxhumana okungenzeka eqenjini kuyavulwa, futhi uma nje okungenani okukodwa kusebenza, amaqembu aphansi awasetshenziswa.
- Konke: konke kumele kube kuyasebenza; uma okukodwa kwehluleka, konke kuyavalwa, ngaphandle kokuzama amaqembu angaphansi kokubaluleka.
Iphrofayili ethi "Okuzenzakalelayo", isibonelo, ivame ukuba nalokhu okulandelayo eqenjini layo elibaluleke kakhulu: izixhumi ezixhunyiweUkuxhumeka okungenantambo kuseqenjini elingaphansi kwenani elibalulekile. Ngakho-ke, uma ikhebula litholakala, i-Ethernet ihlala ibekwa phambili, futhi i-Wi-Fi iyagwenywa ngaphandle uma kudingeka ngempela.
Ngokuqondene ne izindawo zenethiwekhiLezi zilungiselelo ziqoqa ukucushwa kwezinsizakalo zamagama (i-DNS, i-LDAP, njll.) kanye nokuphepha (amafayela okucushwa kwama-firewall e-IP kanye ne-IPsec). Izindawo zesistimu (Ezenzakalelayo, i-NoNet, i-DefaultFixed), izindawo ezenziwe ngesandla, noma izindawo ezinemibandela zingachazwa. Izindawo ezenziwe ngesandla zenziwa ngesandla ngebhokisi lengxoxo lezindawo, kuyilapho izindawo ezinemibandela zenziwa zisebenze ngokusekelwe emithethweni (isb., uhlobo lwenethiwekhi, ikheli le-IP elitholiwe, njll.).
Ukusuka ku-GUI ungashintsha imodi yokusebenzisa indawo, uyibeke ku-"manual kuphela" noma "eqalwe yimithetho", bese uhlela leyo mithetho ukuze uchaze kahle Kukuziphi izimo lapho kusetshenziswa khona isethi ngayinye yezinqubomgomo?Ukusebenzisa indawo entsha kuhlale kuyenza ingasebenzi eyedlule, okuqinisekisa ukuthi eyodwa kuphela esebenzayo nganoma yisiphi isikhathi.
Amaphrofayili e-IPsec kuma-router ukuze kuxhunywe ngokuphephile
Lonke lolu hlelo lokufaka amaphrofayili alugcini kumadivayisi abasebenzisi bokugcina. Lusebenza futhi kuma-router ochwepheshe, njengochungechunge. I-Cisco RV160 kanye ne-RV260Kusetshenziswa amaphrofayili e-IPsec achaza indlela ithrafikhi phakathi kwamasayithi evikelwe ngayo kusetshenziswa i-VPN.
Un Iphrofayela ye-IPsec Ihlanganisa ama-algorithm namapharamitha asetshenziswa ekuxoxisaneni ngokhiye (isigaba I kanye ne-IKE) kanye nokubethela idatha (isigaba II). Lokhu kufaka phakathi izici ezifana ne-algorithm yokubethela (3DES, AES-128, AES-192, AES-256), indlela yokuqinisekisa (MD5, SHA1, SHA2-256), iqembu le-Diffie-Hellman (isb., Iqembu 2 lama-bits angu-1024 noma Iqembu 5 lama-bits angu-1536), ubude bezinhlangano zokuphepha (ama-SA), nokuthi imodi yokhiye okuzenzakalelayo (IKEv1 noma i-IKEv2) noma imodi yokhiye ngesandla iyasetshenziswa.
La isigaba I Isungula ukuxhumana okuphephile nokuqinisekisiwe phakathi kwama-endpoint amabili e-VPN, okhiye bokuxoxisana kanye nokuqinisekisa ontanga. Kulesi sigaba, kukhethwa i-IKEv1 noma i-IKEv2, kanye neqembu le-DH, i-algorithm yokubethela, kanye ne-authentication hash, kanye nesikhathi sokuphila se-SA (isibonelo, imizuzwana engu-28800). I-IKEv2 ivame ukuthandwa ngoba isebenza kahle kakhulu, idinga ukushintshaniswa kwephakethe okuncane, futhi isekela izinketho eziningi zokuqinisekisa.
La isigaba II Iphatha ukubethela ithrafikhi yangempela. Uchaza ukuthi uzosebenzisa i-ESP (yokubethela kanye, ngokuzithandela, ukuqinisekiswa) noma i-AH (ukuqinisekiswa kuphela, ngaphandle kobumfihlo), khetha ukubethela kanye nama-algorithms e-hashing futhi, hlola ukuthi i-Perfect Forward Secrecy (PFS) iyafunwa yini, bese ulungisa isikhathi sokuphila se-IPsec SA (isibonelo, imizuzwana engu-3600). Isincomo ngokuvamile ukuthi isikhathi sokuphila seSigaba I sibe mkhulu kunalowo wesigaba sesi-2ukuze okhiye bedatha bavuselelwe kaningi kunezinkinobho zesiteshi.
Ekucushweni kwe-RV160/RV260, iya kumenyu ye-VPN > IPSec VPN > Amaphrofayili e-IPSec, engeza iphrofayili entsha, uyiqambe (isibonelo, "i-HomeOffice"), khetha imodi yokudala ukhiye (Okuzenzakalelayo), inguqulo ye-IKE (ngokufanele i-IKEv2 uma zombili iziphetho ziyisekela), amapharamitha eSigaba I kanye neSigaba II, vumela i-PFS uma kungenzeka, bese ukhetha iqembu le-DH futhi leSigaba II. Okokugcina, faka futhi ulondoloze ukucushwa ukuze kuqhubeke ekuqaliseni kabusha ngokukopisha ukucushwa okusebenzayo ekuqaleni.
Kubalulekile ukuthi zombili iziphetho zomhubhe osuka endaweni uye kwenye zibe amapharamitha ephrofayili afanayo (ama-algorithm afanayo, izikhathi zokuphila, inguqulo ye-IKE, i-PSK noma izitifiketi, njll.). Ngaphandle kwalokho, ingxoxo izohluleka futhi umhubhe ngeke usungulwe.
Uma kuhlangene, lokhu kuhlanganiswa kwamaphrofayili e-WiFi, amaphrofayili enethiwekhi, izindawo, ukucushwa kwe-Intune, kanye namaphrofayili e-IPsec kuma-router kukuvumela ukuthi wakhe izindawo lapho ikhompyutha yakho, i-laptop, noma idivayisi yeselula icishe izivumelanise ngokuzenzakalelayo nenethiwekhi ekuyo. Khetha isikhombikubona esifanele, sebenzisa ukuphepha okufanele, xhuma ku-WiFi ngaphandle kokungenelela komsebenzisi, yenza i-VPN isebenze uma kudingeka, bese ulungisa i-firewall ukuze ivumelane nomongo.Ekugcineni, lokho kuyindlela ewusizo nephephile kakhulu yokwakha amaphrofayili azenzakalelayo ngokusekelwe kunethiwekhi ye-WiFi oyisebenzisayo. Yabelana ngalolu lwazi ukuze abasebenzisi abaningi bazi mayelana nesihloko..