PPTP na MikroTik yana yankewa? Gyara hanyar zuwa uwar garke

Abokin ciniki na PPTP a RouterOS yana haɗawa, yana ɗan matsar da zirga-zirga sannan ya mutu, kuma log ɗin yana kama da matsalar shaidar shiga ko uwar garke. Yawanci ba ɗaya ba ne. Ramin yana ɗaukar fakitin jigilarsa saboda hanyar zuwa uwar garke ita ma ta dace da hanyar da ramin ya girka. Ƙwarya ta daina jin na'urar, kuma zaman ya mutu yayin da mashigar har yanzu tana iƙirarin tana nan.

Gyaran shine hanya ɗaya, ko saiti ɗaya, wanda ke kiyaye uwar garke ana isa gareta ta WAN na zahiri. Wanne ya dogara da ko ana son na'urar ta zama ƙofar rami cikakke.

Alamar: yana haɗawa, yana matsar da zirga-zirga, yana mutuwa

Tsarin yana maimaituwa a kowane sake haɗawa, kuma wannan ita ce alama ta farko mai amfani. Kalmar sirri da aka ƙi tana kasawa kafin mashigar ta tashi, rashin daidaiton saitin wutar bango yawanci yana toshe waje ɗaya, kuma madauki na hanya yana barin mashigar ta kafu sannan ya shaƙe ta. Duba lissafin: ramin yana nuna fashewar fakitin farko sannan babu komai, yayin da mashigar WAN ke ci gaba da aika kwafi da aka nade. Wannan na'ura ce da ke ciyar da fitarta ta komawa cikinta.

PPTP yana sauƙaƙa hakan saboda jigilar ita ce IP kawai zuwa adireshin uwar garke, ba rami ba wanda ƙarshensa na nesa yake a wata ƙaramar cibiyar sadarwa. Duk abin da ke juya wannan adireshin yana juya jigilar tare da shi.

Me ya sa ramin ke hadiye fakitinsa

Lokacin da abokin ciniki ya haɗa, yana girka hanya wacce ƙofarta ita ce mashigar rami. Idan bayanin ya kuma girka hanyar da aka saba, to kowace manufa da ba ta da cikakkiyar daidaituwa, har da adireshin jama'a na uwar garke, tana karkata zuwa ramin. Na'urar tana naɗe fakitin, tana ba da adireshin fakitin waje ga uwar garke, sannan ta sake neman hanyar: manufa ɗaya, na al'ada ɗaya, rami ɗaya. Dangane da sigar, ana watsar da wannan maimaitawa, ana sa a layi, ko a juya a madauki har ƙwarya ta daina kuma ta tsaga zaman.

Masu kera na'urori sukan ƙara hanyar baƙo don uwar garkensu kai tsaye, don su guje wa wannan. RouterOS ba ya ɗauka haka, don haka mai aiki dole ya bayyana banda ko ya guje wa hanyar da aka saba tun farko.

Ɗora adireshin uwar garke akan WAN

Ƙara mafi ƙarancin hanya: /32 don adireshin jama'a na uwar garke, tare da ƙofar mai badawa a matsayin tsalle na gaba, akan mashigar da ke isa intanet. /32 yana doke kowace hanyar da aka saba ta tsawon prefix, kuma ƙaramin nisa yana yin nasara idan akwai wata hanya don wannan prefix. Sannan sake haɗawa kuma tabbatar da hanyar tana aiki ba kawai tana cikin jerin ba.

/ip route add dst-address=198.51.100.10/32 gateway=192.0.2.1 distance=10

Idan ana koyon ƙofar mai badawa ta DHCP, yi amfani da adireshin ƙofar da DHCP ya girka, ko ɗaure hanyar ga mashigar idan sigar tana goyon baya. Ƙofar da aka rubuta da hannu wadda za ta canza a haya na gaba, gazawa ce da aka jinkirta. Duba adireshin bayan sake haɗa WAN, domin a lokacin ne tsohuwar ƙofa ke bayyana kuma ramin ya sake fara yankewa.

Ko ka hana ramin neman hanyar da aka saba

Reshe da ke buƙatar LAN mai nisa guda ɗaya ya kamata ya nisantar da bayanin PPTP daga hanyar da aka saba gaba ɗaya. Kashe wannan zaɓi a cikin bayanin abokin ciniki kuma ƙara takamaiman hanya don prefix mai nisa ta mashigar rami maimakon. Zirga-zirgar yau da kullum tana zama a WAN, jigilar ramin tana kiyaye hanyarta ta dabi'a, kuma teburin hanya ya fi sauƙin bayani. Wannan shine mafi kyawun ƙira ga reshe da ke buƙatar ƙaramin cibiyar sadarwa ɗaya, ba ga na'ura da ya kamata ta zama mafitar wurin ba.

Cikakken rami yana da bukatunsa: tafiyar da manufofi don zaɓaɓɓun tushe, shiri don zirga-zirgar dawowa, da shawara kan abin da zai faru idan ramin ya faɗi. Babu ɗaya daga cikinsu da hanyar baƙo ke magancewa, wacce kawai ke kiyaye jigilar da rai.

Tabbatar da mataki-mataki, sannan rufe ramin gudanarwa

Gwada mataki-mataki: yi ping ga adireshin jama'a na uwar garke kafin haɗawa, yi ping ga ƙofar nesa bayan haɗawa, sannan yi ping ga baƙo a LAN mai nisa. Ƙara masquerade akan mashigar rami idan baƙi a bayan na'urar suna buƙatar amsoshi su dawo ta gareta.

/ip firewall nat add chain=srcnat out-interface=pptp-out1 action=masquerade

Sannan sake kunna na'urar ko tilasta sake haɗa WAN kuma maimaita ping ɗin guda uku, domin hanyar da ke cikin saitin da ke gudana kawai ba za ta rayu ba. Saitin da aka fitar zuwa fayil ɗin ajiya kuma aka dawo da shi daga baya shine wani wurin da wannan ke karyewa, tunda hanyar na iya rasa a cikin fitarwa idan an ƙara ta a lokacin aiki.

A ƙarshe, iyakance Winbox da gudanarwar yanar gizo ga sanannun adiresoshin tushe kafin buga wani canjin VPN ko hanya. Na'urar da ke ƙarewa ramuka manufa ce ta gudanarwa, kuma tashar 80 da ta buɗe ga duniya babbar ganowa ce fiye da hanyar da ka gyara yanzu.