A ina hanyar ta dace a cikin OpenVPN: wurin abokin ciniki ko sabar?
Hanya mara kariya a cikin tsarin sabar tana canza sabar, ba abokin ciniki ba. Zaɓi fayil ɗin abokin ciniki, push na gama gari ko push na abokin ciniki ɗaya, sannan duba abin da ya iso.
Kuna ƙara route 10.60.0.0 255.255.255.0 a cikin tsarin sabar, sake farawa, sake haɗa kwamfutar tafi-da-gidanka, kuma rukunin cibiyar har yanzu ba a iya isa gare shi daga wannan kwamfutar. An karɓi layin, sabis ɗin ya fara tsafta, kuma babu abin da ya yi kama da kuskure a cikin rajista. Abin da ya faru shi ne an saka hanyar a kan injin da kuka gyara: ƙofar yanzu tana ganin za ta iya isa wannan prefix, yayin da ba a gaya wa abokin ciniki komai ba. Wuri shi ne dukan tambayar, kuma akwai wurare huɗu da layi ɗaya zai iya zama.
Wuraren huɗu da wanda kowane ke samu
Ana iya ƙara hanya ta hanyar tsarin abokin ciniki kansa, a ba da ita ga kowane abokin ciniki ta hanyar push na gama gari, a ba da ita ga abokin ciniki ɗaya ta hanyar fayil na musamman, ko a rubuta ta cikin yanayin tafiyar sabar kanta.
Waɗannan al'amura huɗu suna amfani da kusan irin wannan tsari kuma suna ba da sakamako daban-daban. Ukun farko suna shafar abin da abokin ciniki ke aikawa cikin rami; na huɗu yana shafar yadda sabar ke isa cibiyar sadarwa, wanda yake da amfani lokacin da sabar kanta ke bukatar hanya kuma yana da lahani lokacin da aka yi kuskuren ɗauka a matsayin rarrabawa.
Yanke shawara wanda daga cikin huɗun kuke so kafin rubuta layin, sannan tabbatar da mai karɓa.
| Placement | Effect | Receiver |
|---|---|---|
| Client profile route | Installed by the client at connect | That client only |
Global push "route ..." | Sent to every client that accepts pushed options | All pulling clients |
| Client-specific push | Sent to the matching client context | One identity |
| Server config route, no push | Added to the server's own table | The gateway itself |
Me ya sa hanyar sabar mara kariya ke ba mutane mamaki
Tsarin sabar shine wurin da masu gudanarwa suke fara dubawa, kuma umarnin hanya a can ana karanta shi kamar magana game da cibiyar sadarwar VPN. Ba haka ba ne. OpenVPN yana ɗaukarsa a matsayin shigar da hanya ta gida a kan injin da daemon ke gudana, wanda shine daidai irin canjin da za ku yi da ip route sannan ku manta.
Rarrabawa tana buƙatar a tura hanyar, kuma turawa tana buƙatar abokin ciniki ya ja ta. Abokin ciniki da aka fara da zaɓuɓɓukan ja a kashe yana watsi da tayin gaba ɗaya. Duba ƙarshen biyu na wannan musayar hannu kafin sake rubuta fayil ɗin sabar, domin rajistar sabar ba za ta yi korafi ba: daga gefenta an aika tayin. Hanyar da aka karɓa kuma tana aiki ne kawai a haɗin gaba, ba a cikin zaman da kuke ciki ba.
Da zarar kun ga biyun a matsayin ayyuka daban-daban, gazawar ta daina zama asiri: sabar tana isa prefix ɗin, abokin ciniki ba zai iya ba, kuma dukan maganganun biyu gaskiya ne a lokaci ɗaya.
Fayiloli na kowane abokin ciniki da asalin da suka dace da shi
Ana kiran fayil ɗin musamman na abokin ciniki da sunan asalin da sabar ta tabbatar, wanda bisa tsoho shine sunan gama gari na takardar shaidar. Sunan haɗi mai daɗi a cikin abokin ciniki na tebur ba shine wannan ƙimar ba, kuma rashin daidaituwa yana haifar da fayil da ba a taɓa karantawa ba.
Duba jagorar da sabar ke amfani da ita a zahiri, sannan tabbatar da sunan fayil ɗin ya dace da asalin da aka tabbatar daidai, gami da manyan da ƙananan haruffa.
grep -n 'client-config-dir' /etc/openvpn/server/server.conf
ls -l /etc/openvpn/ccd/A cikin wannan fayil ɗin har yanzu dole a tura hanyar, domin yanayin kowane abokin ciniki saitin zaɓuɓɓuka ne da ake amfani da su a zaman wannan abokin ciniki, ba teburin tafiya na gida ba. Hanya mara kariya a can tana da matsala ɗaya da hanya mara kariya a cikin babban fayil.
Fayil ɗin abokin ciniki da kansa da kayan aikin da ya mallake shi
Hanyar da aka saka a cikin tsarin abokin ciniki ana shigar da ita lokacin da wannan abokin ciniki ya haɗa, kuma ana cirewa lokacin da ya cire haɗin, wanda shine tsarin rayuwa daidai don manufa ta tsayayyiya.
Idan mai kula da cibiyar sadarwa ne ya mallaki bayanin, zai iya shigo da waɗannan zaɓuɓɓukan sau ɗaya sannan ya riƙe kwafinsa. Gyara fayil ɗin da aka sauke daga baya ba ya canza kome, wanda shine sanadin "hanyar tana nan amma ba ta aiki".
Duba bayanin da ke aiki maimakon fayil ɗin da kuka sauke, kuma duba saitunan da aka shigo da su da mai kula yake nunawa. Sannan ku haɗa kuma ku tambayi tsarin wace hanya adireshi na musamman yake amfani da ita, maimakon ɗauka cewa rami ya yi nasara saboda hanyar tana cikin fayil ɗin rubutu.
Tabbatar a wurin abokin ciniki, sannan duba hanyar dawowa
Tambayi teburin tafiya na abokin ciniki kansa game da manufa, ba na sabar ba. Binciken mai masauki ɗaya a cikin prefix ɗin ya isa ya nuna mu'amala da mataki na gaba da za a yi amfani da su.
ip route get 10.60.0.10Idan binciken ya nuna rami, rarrabawa ta yi aiki kuma sauran matsalar tana wani wuri. Idan ya nuna ƙofar da aka saba, ba a shigar da hanyar ba, an tace ta da zaɓi a gefen abokin ciniki, ko tana cikin bayanin da abokin ciniki ba ya amfani da shi.
Ka ɗauka rarrabawa ta yi aiki kuma har yanzu babu abin da ke amsawa: to duba tura gaba a ƙofar, hanyar dawowa ta wancan gefen, da duk wani garu tsakanin su. Hanya tana zaɓar hanya, ba ta ba da izini ba.