Kwafin /32 na ramin VPN ba zai nufi sashin yankin ofis ba

VPN ɗin yana haɗawa, interface ɗin yana nuna adireshi mai mask ɗin bit talatin da biyu, kuma uwar garken ofis ɗin ya kasance ba a iya samunsa. Mataki na gaba sau da yawa shine sake amfani da wannan mask ɗin a cikin hanya, bisa tunanin cewa interface ɗin yana bayanin abin da ramin zai iya kaiwa. Ba haka yake ba. Wannan adireshin yana bayanin ƙarshen gida na haɗin batu-da-batu, kuma inda kake so ya kasance a wani prefix daban a wancan gefensa.

Ana haɗa abubuwa biyu daban-daban: adireshin da ramin ya ba ka, da cibiyar sadarwar da kake so ka isa ta hanyarsa.

Adireshi biyu, ayyuka biyu

A cikin ramin batu-da-batu, adireshin abokin ciniki sau da yawa adireshin mai masauki ɗaya ne saboda akwai takwaransa ɗaya daidai a wancan ƙarshen haɗin. Babu yanki da aka raba kuma babu ARP, don haka mask ɗin da zai yi kama da rashin hankali a Ethernet ya zama gaba ɗaya na al’ada a nan.

Prefix ɗin inda za a je hujja ce game da cibiyar sadarwar ofis, ba game da ramin ba. Idan kana buƙatar uwar garke ɗaya, hanyar ita ce hanyar mai masauki ga wannan uwar garken. Idan kana buƙatar dukan sashin ofis, hanyar ita ce sashin. Babu ɗaya daga cikin amsoshin da za a iya karantawa daga interface ɗin, kuma zaɓin ɗaya saboda ya bayyana kusa da adireshin ramin shine yadda ake karya tsarin da ke aiki.

Wannan layi na uku shine inda fata ke juya zuwa katsewa. Yin hanyar dukan yanki na sirri zuwa cikin ramin da ke hidimar wuri ɗaya kawai yana tura zirga-zirgar da ba ta da alaƙa zuwa hanyar da ba za ta iya isar da ita ba, kuma gazawar da ke faruwa tana kama da VPN da ya lalace maimakon hanya mai faɗi da yawa.

Zaɓi prefix ɗin daga buƙatar

Rubuta buƙatar a matsayin jumla kafin ka taɓa bayanin martaba: waɗanne masauka ne dole a iya samun su, kuma menene mafi ƙarancin prefix da ke rufe su? Uwar garke ɗaya ita ce hanyar mai masauki. Sashin yanki shine hanyar sashin. Jerin sassan shine taƙaitawa, kuma taƙaitawa alkawari ne cewa kowane adireshi a cikinsa ana iya samunsa, wanda ba safai yake gaskiya ba.

Sannan duba lambar da abin da ofis ɗin ke amfani da shi a zahiri. Kwafin prefix daga saƙon hira ba tare da tabbatar da shi da shirin adireshin wurin ba shine yadda hanya ke ƙarewa tana nuna sashin da babu wanda ya mallaka.

Ka kuma tuna cewa hanya hanya ce, ba izini ba. Ƙofar har yanzu tana yanke shawara ko abokin cinikinka zai iya amfani da inda za a je, kuma sabis na iya har yanzu ya ƙi ka. Shigar da hanyar daidai yana kai jigilar zuwa can kuma ba ya amsa komai game da izini.

Ƙara zuwa bayanin martaba, kada ka taɓa maye gurbinsa

Hanyoyi a cikin bayanin martaba na NetworkManager dukiya ce mai ƙima da yawa, kuma bambanci tsakanin saitawa da ƙarawa harafi ɗaya ne. Yi amfani da siffar daɗaɗɗa don ƙara wani shiga da kuma kiyaye duk abin da aka riga aka ajiye.

nmcli connection modify uuid 11111111-2222-4333-8444-555555555555 \
  +ipv4.routes "10.40.20.9/32"

Ba tare da daɗaɗɗa ba, rabon yana maye gurbin dukan jerin. A cikin bayanin martaba da ke ɗauke da prefixes da yawa, wannan yana share waɗanda ke aiki cikin shiru, kuma alamar tana zuwa daga baya a matsayin sabis da a da ake iya samu daga wannan kwamfutar tafi-da-gidanka.

Yi amfani da UUID maimakon sunan. Ana kwafin sunaye bayan dawo da su, kuma haɗin da kake gyara yana iya zama ba shine wanda ke ɗaukar zirga-zirgarka ba. Fara duba ko akwai shigar da ya riga ya kasance iri ɗaya, saboda ƙara kwafi ba shi da tsari ko da ba shi da lahani.

Wannan bayanan martabar kaddarorin hanya yana rubuta inda za a je, matakin gaba na zaɓi, ma’auni da sigar sifofi don fasalin da aka shigar. Karanta shi kafin ƙara matakin gaba, saboda ko ana buƙatarsa ya dogara da haɗin kai da tsarin, kuma yin hasashe daga adireshin farko a jerin interface ba hanya ce ba.

Hanyar tsoho da DNS yanke shawara ne daban

Adding an office prefix says nothing about where the rest of your traffic goes. If policy requires ordinary internet traffic to stay outside the tunnel, that is the ipv4.never-default decision, and it belongs to whoever owns the connection policy rather than to whoever is fixing one unreachable server.

Hanyoyi na atomatik sune wani abu da bai kamata a rikice ba cikin sakaci. Danne su don warware shiga ɗaya da ya ɓace na iya cire wasu da yawa masu aiki, kuma wanda ya ba da shawarar hakan yawanci yana kallon wani bayanin martaba da wasu push daban.

DNS yana da hanyarsa da gazawarsa. Sunan da ke warwarewa zuwa adireshin daidai ta hanyar resolver mara kyau, ko resolver da ba zai iya amsa ga yankin sirri ba, zai yi kama da matsalar hanyoyi yayin da hanyar take daidai. Gwada adireshin da sunan daban, sannan yanke shawara wace matakin ya gaza a zahiri.

Tabbatar da abin da aka yi amfani da shi

Gyaran da aka ajiye ba shine gyaran da aka yi amfani da shi ba. Sake haɗawa ta hanyar tsarin rayuwar da manajan ke goyon baya, sannan duba ainihin hanyar zuwa inda aka nufa da kuma ka’idojin manufofin da ke yanke shawara wace tebur ake tuntuɓa.

Idan prefix ɗin yana nan kuma haɗin har yanzu yana gaza, ka koma wata matsala dabam: zaɓin adireshin tushe, hanyar dawowa a wancan ƙarshen nesa, ko sabis da ke ƙin abokin cinikinka. Kowanne daga cikinsu wuri ne mafi kyau da za a duba fiye da bayanin martabar da ka riga ka gyara.