ifconfig-push: adireshin abokin tarayya a net30 ko mashin yanar gizo a subnet?

Abokan ciniki masu motsi suna haɗuwa kuma turawa tana aiki da kyau, amma abokin ciniki ɗaya mai tsayayyen adireshi ba ya isa uwar garken kwata-kwata. Babu abin da ya canza a bangon wuta, kuma layin CCD yana da alama mai ma'ana. Dalilin da aka saba shine hujja ta biyu da aka rubuta don wata topologiyar TUN daban da wadda uwar garken ke gudanarwa. Rashin nasarar shiru ne: abokin ciniki ya tashi da adireshi kuma uwar garken ta karɓi haɗin, amma babu zirga-zirgar da ke wucewa.

A net30 wannan filin adireshin abokin tarayya ne; a subnet kuwa mashin yanar gizo ne. Siffofin biyu zaɓi ne, ba jerin abubuwa ba.

Siffofin biyu, gefe da gefe

A tsarin net30 na gargajiya kowane abokin ciniki yana da toshe /30: adireshin cibiyar sadarwa, adireshi biyu da ake iya amfani da su da adireshin watsa. ifconfig-push yana ɗaukar adireshin abokin ciniki da adireshin abokin tarayya, kuma abokin tarayya shine ɗayan adireshin da ake iya amfani da shi a cikin wannan toshe, wanda gefen uwar garken na hanyar haɗin maki-zuwa-maki ke amfani da shi.

# net30: client address and its peer
ifconfig-push 10.99.0.6 10.99.0.5
# topology subnet: client address and the pool netmask
ifconfig-push 10.99.0.20 255.255.255.0

Ƙarƙashin topology subnet abokin ciniki yana raba yanki ɗaya tare da uwar garken, kuma wannan umarni ɗaya yana ɗaukar adireshi da mashin yanar gizo. Adireshin uwar garken kanta yana fitowa daga umarnin server, ba daga filin na biyu ba. Haɗa siffofin yana haifar da abokin ciniki da yake tsammanin yana kan hanyar maki-zuwa-maki yayin da uwar garken ke tura shi a matsayin mai masaukin subnet, ko akasin haka. Shi ya sa ba za a taɓa haɗa mashin yanar gizo da net30 ba.

Duk layukan biyu a cikin toshe layuka ɗaya ne don fayil ɗin CCD. Kowane abokin ciniki yana samun ɗaya daga cikinsu daidai.

Karanta topologiyar da uwar garken ke gudanarwa a zahiri

Karanta tsarin da ke gudana maimakon tsohon tsarin fakiti, domin ana iya saita topologiyar shekaru da suka wuce kuma a kwafe ta gaba. Nemo topology subnet ko rashinsa, sannan duba yadda layin server ke raba adireshi. Tsarin da bai taɓa ambaton topologiya ba ba ɗaya yake da wanda ke saita subnet ba.

Sannan karanta saitunan da abokin ciniki ya karɓa. Adireshin, mashin da abokin tarayya da yake bayarwa suna gaya muku wace fassarar uwar garken ta yi amfani da ita.

Ka riƙe tsayayyen adireshin a wajen tafkin masu motsi

Tsayayyen adireshi dole ya kasance a wajen tafkin masu motsi, in ba haka ba ana iya ba abokan ciniki biyu adireshi ɗaya. Tare da topologiyar subnet, nopool a layin server yana hana tafkin atomatik, kuma takamaiman kewayon ifconfig-pool yana bayyana abin da abokan ciniki masu motsi ke samu.

dev tun
topology subnet
server 10.99.0.0 255.255.255.0 nopool
ifconfig-pool 10.99.0.100 10.99.0.210 255.255.255.0
client-config-dir /etc/openvpn/ccd

Uwar garken tana ɗaukar 10.99.0.1 don kanta, kuma tsayayyen adireshin abokin ciniki yana wajen kewayon tafkin. Ana sa wa fayil ɗin CCD sunan ainihin shaidar abokin ciniki, ba sunan fayil ɗin bayanan martaba ba, kuma baya ɗaukar wani ƙarin tsawo. Idan username-as-common-name yana aiki, sunan mai amfani da aka tabbatar shine shaidar da za a daidaita. Na'urori biyu da suke raba shaidar ɗaya za su raba tsayayyen adireshin kuma, wanda matsala ce ta manufa ba ta turawa ba.

Tabbatar da rabon da abokin ciniki ya samu a zahiri

Sake haɗa abokin cinikin da aka nufa kuma tabbatar wane fayil ɗin CCD aka zaɓa kafin duba wani abu. Sannan tabbatar da adireshin, mashin ko abokin tarayya, da hanyar komawa uwar garken. Abokin ciniki da ke nuna adireshin abokin tarayya a cikin tsarin subnet har yanzu yana amfani da sigar da ba daidai ba.

Canza topologiya yana shafar kowane abokin ciniki da kowane sokewa, don haka ɗauke shi a matsayin ƙaura ba gyaran abokin ciniki ɗaya ba. Gyara layin tsayayye don dacewa da topologiyar da ake amfani da ita tuni shine yawanci ƙaramin canji. bayanin server-options yana rubuta mataimakin da sokewar da ta shafi abokin ciniki.