Mabuganku yana aiki awa ɗaya da ya wuce. Sannan kun kunna VPN, kuma yanzu ayyuka suna zama a jere har sai sun kasa. Kill switch shine mai yiwuwa sanadi, ba mabugan ba: yana watsar da zirga-zirgar da zai bar na'urar a wajen ramin, kuma mabugan LAN shine irin wannan zirga-zirgar. Ainihin shawarar ba yadda za a gyara bugu ba ce, amma ko wannan na'urar ya kamata ta isa cibiyar sadarwar gida kwata-kwata. Sharuɗɗa uku suna warware hakan, kuma kowanne cikinsu na iya kawo ƙarshen tattaunawar da wuri.

Abin da kill switch ke watsarwa da kuma dalili

Kill switch ƙa'idar hanya ce da ke da yanayin gazawa a haɗe. Idan ramin yana aiki, fakiti masu dacewa suna fita cikin ɓoyayye; idan ramin ya faɗi, abokin ciniki yana tura hanyar da aka saba zuwa wani baƙin rami domin babu abin da zai fita a bayyane. Mabugan da ke kan wannan ƙaramin cibiya ba ya taɓa dacewa da hanyar ramin, don haka ana ɗaukarsa kamar ƙoƙarin tserewa ko da zirga-zirgar ba ya taɓa barin ginin.

Ganowa yana sa alamar ta rikice. Mabugai suna tallata kansu ta multicast DNS a tashar 5353, kuma jeren da ake nunawa a taga ƙara mabuga ana gina shi daga waɗannan tallace-tallace. Yayin da toshewar ke aiki tallan na iya rashin isowa, don haka mabugan ya ɓace daga jerin ko da adireshinsa yana amsawa. IPP a 631, bugu mai ƙarfi a 9100 da SMB a 445 ayyukan LAN ne na yau da kullum ba tare da hanyar rami kwata-kwata ba.

Da farko tabbatar mabugan yana isa

Kafin canza kowace manufa, tabbatar mabugan yana lafiya kuma tabbatar adireshin da kuke tsammanin yana da shi. Karanta adireshin daga allon mabugan ko shafinsa na yanar gizo. Tsohuwar shigarwa a jerin tsarin aiki na iya nuni ga adireshin da DHCP ya ba wata na'ura makonni da suka wuce.

Cire VPN, sannan gwada adireshin da manyan tashoshin bugu biyu:

nc -vz 192.168.1.50 9100
nc -vz 192.168.1.50 631

A Windows makamancin shine Test-NetConnection 192.168.1.50 -Port 9100. Sake haɗa VPN kuma maimaita. Idan tashoshin suna amsawa da VPN a kashe kuma lokaci ya ƙare da ita a kunne, kun sake haifar da toshewar kuma sauran tambayar manufa ce. Idan sun kasa a duka yanayi biyu, tsaya: mabugan, sashin Wi-Fi ko keɓewar abokin ciniki ne ke da laifi, kuma keɓewar VPN zai ƙara fallasa kawai.

Sharuɗɗa uku da ke yanke shawara izini ko toshewa

Gudanar da su bisa tsari. Sharaɗi na farko da ya kasa shine ke yanke sakamakon, don haka na baya ba sa buƙatar gwadawa.

ConditionAllow a scoped exceptionKeep the block
Who owns the networkHome or single-tenant office where you control the segmentHotel, cafe or shared Wi-Fi where the printer is not yours
Who owns the device policyPersonal device with no enforced profileManaged profile that enforces always-on VPN
What the device carriesNothing another LAN peer must not reachClient data that must not touch an untrusted segment

Cibiyoyin baƙi sune mafi bayyanan a'a. A sashin otal yankin gida shine kowane baƙo, don haka keɓewar da ta isa mabuganku tana isa kwamfutocinsu na hannu kuma. Mabugan da ba naku ba ba dalili bane na buɗe wannan sashin.

Na'urorin da ake sarrafawa sune a'a na biyu. Lokacin da bayanin mai gudanarwa ya tilasta VPN na koyaushe tare da kullewa, abokin ciniki yana sake tabbatar da toshewar bayan kowane canji na gida, kuma hanyar wucin gadi na iya karya manufar da kuka yarda da ita. Nemi hanyar da aka tallafa zuwa tushen gida maimakon gyara saitunan da za a sake rubuta su.

Ƙaramin keɓewa da abokin cinikinku ke tallafawa

Abin da kuke so shine ƙa'idar iyakance ga manufa don adireshin mabuga ɗaya, ba babban maɓallin ba da izinin gida ba. Babban maɓalli yakan rufe dukan kewayon keɓaɓɓe da zirga-zirgar link-local, wanda ya fi abin da jeren bugu ɗaya ke buƙata da yawa, kuma yana mai da kowace na'ura a sashin abokin da kuka yarda da shi.

Windows yana bayar da split tunnelling, wasu builds kuma suna bayar da zaɓin cibiyar sadarwar gida. Inda hanya ɗaya tilo da aka tallafa ita ce shigarwar host, ƙara adireshi ɗaya ta hanyar ƙofar jiki bayan ramin ya tashi, misali route add 192.168.1.50 mask 255.255.255.255 192.168.1.1, sannan share shi idan zaman ya ƙare. WireGuard yana aiki daban: AllowedIPs ke yanke shawarar abin da ke shiga ramin, don haka bayanin cikakken rami 0.0.0.0/0 yana ɗaukar aikin bugu zuwa ƙarshen tafiya sai dai idan wata hanya mafi takamaiman ta tsallake shi, kuma wg-quick na iya sanya dokokin wuta da ke toshe duk wani abu.

A Android saitin koyaushe wanda ke toshe haɗin kai ba tare da VPN ba shine kill switch, kuma gano mabuga daga manhaja cikin wannan toshewar ba shi da hanyar LAN. An rubuta tsarin kowace manhaja da keɓewa a shafin VPN na Android, kuma shine wurin da ya kamata ku duba kafin canza wani abu: Jagorar haɗin VPN na Android. Sabbin fitattun macOS suna neman izinin cibiyar sadarwar gida daban da ramin, kuma iOS yana yin haka don shiga cibiyar sadarwar gida, amma jeren na iya kasa ko da ramin yana aiki saboda abokin cinikin mai sayarwa yana tura ƙaramin cibiyar ciki.

Kowace abokin ciniki da kuke amfani da shi, tsare keɓewar a adireshi ɗaya da tashoshin biyu ko uku da mabugan ke amfani da su da gaske. Ajiye hayar DHCP maimakon faɗaɗa ƙa'idar zuwa dukan ƙaramin cibiya saboda adireshin na iya motsi.

Tabbatar da keɓewar kuma san lokacin da za a janye ta

Bayan canjin, sake haɗawa kuma duba abubuwa uku bisa tsari. Mabugan yana amsawa a tashoshinsa, ana buga shafi na gwaji marar lahani, kuma binciken adireshi har yanzu yana mayar da ƙarshen VPN maimakon ISP ɗinku. Idan bugu yana aiki amma binciken yana nuna ISP ɗinku, kun buɗe fiye da mabugan kuma ya kamata ku koma baya.

Maimaita gwajin bayan sake farawa da kuma bayan kowane sabuntawa na abokin ciniki ko bayanin, saboda sabuntawa suna dawo da tsoffin saituna akai-akai don yin tasiri. Keɓewar da ke rayuwa kawai har zuwa haɗi na gaba ba shawara bace, rami ne na wucin gadi. Rubuta ainihin ƙa'idar domin ku iya cire ta da gangan.

Idan an yi nufin na'urar don rami kawai, kwamfutar tafiye-tafiye ko inji mai ɗauke da bayanan abokin ciniki, amsar da ta dace ita ce a riƙe toshewar kuma a buga wani wuri: adana a matsayin PDF kuma buga daga waya ko wata inji, ko isa uwar garken bugu da ramin zai iya turawa. Kashe kill switch don aiki ɗaya yana musanya kariya ta gaske da ɗan jin daɗi.

Labarai masu alaƙa