Me ya sa VPN mai aiki har yanzu yake ƙarewa a kan amsa
Isar da buƙata zuwa uwar garke mai zaman kanta rabin musayar ne kawai. Amsarta dole ta sami abokin haɗin tunnel ta hanyar ƙofar, hanya ko fassarar da aka nufa.
Buƙatar tana isowa, uwar garken tana rubuta ta, kuma abokin haɗin yana ba da rahoton ƙarewar lokaci har yanzu. Wannan haɗin yana nufin cewa amsar ba ta sami hanyar komawa ba, kuma yana ɗaya daga cikin ƙananan kurakurai da za ka iya tabbatarwa daga ɓangarori biyu a lokaci ɗaya. Yi binciken a jere kuma ka tsaya idan ɗaya ya kasa.
Fara daga inda buƙatar ta iso
Tabbatar cewa fakitin ya isa sabis ɗin kafin ka duba wani abu. Rubutun log a gefen uwar garke, ma'aunin haɗi ko kamawa da aka yarda da shi a ƙarshen nesa duk suna amsa tambaya ɗaya, kuma rashinsu yana mayar da kai ga tunnel maimakon ci gaba ga amsa. Wannan ita ce binciken da ke raba matsalar turawa da matsalar hanyar dawowa.
Idan buƙatar ba ta iso ba, tsaya a nan. Tunnel, turawa zuwa prefix mai zaman kanta ko ƙa'idar shiga ita ce batun, kuma hanyar amsa ba ta da mahimmanci tukuna. Kuma ka rubuta adireshin tushen da uwar garken ta gani. Ko dai adireshin tafkin da aka bai wa abokin haɗin ne ko adireshin da aka fassara, kuma wannan bambancin shi ne ke ƙayyade wane daga cikin binciken na gaba zai shafi.
Amsa tana buƙatar hanya zuwa tafkin
Abokin haɗin shiga daga nesa yawanci yana samun adireshi daga tafki, kuma cibiyar sadarwa mai zaman kanta tana buƙatar hanyar dawowa zuwa wannan tafkin. Uwar garken da hanyarta ta asali ke nuna ƙofarta ta kanta tana ba da fakitin ga wannan ƙofar, wadda ba ta san inda tafkin yake ba, don haka amsar tana mutuwa a can. Abokin haɗin yana ganin ƙarewar lokaci saboda babu abin da ya dawo, wanda ba za a iya bambancewa da buƙatar da ba ta taɓa fita ba.
Duba hanyar da uwar garken ke zaɓa don adireshin abokin haɗin, ba hanyar da take amfani da ita don rukuninta ba. Waɗannan binciken biyu na iya bayar da amsoshi daban-daban, kuma na biyu shi ne ke da mahimmanci a nan. Fassara ita ce tsarin madadin kuma yana canza abin da uwar garken ke gani. Yana iya sauƙaƙa hanyar dawowa, kuma yana cire ainihin adireshin abokin haɗin daga log ɗin uwar garken, wanda ke shafar kowace ƙa'ida ko rahoto da aka gina kan wannan filin.
Kwatanta kamawar uwar garke da kamawar ƙofar
Kwatanta abin da ke barin uwar garke da abin da ke isa ƙofar. Kamawa a kan hanyar fita ta uwar garke da kamawa a kan ƙofar tunnel suna amsa rabin tambayar daban, kuma tazarar da ke tsakaninsu tana nuna inda asarar ta faru.
ip route get 10.90.0.14
tcpdump -ni any host 10.90.0.14 and port 443
ip route show table all | grep 10.90.0.0| Where the reply stops | What it proves |
|---|---|
| Request in the server log, nothing on its outbound capture | The server picked a gateway that cannot reach the pool |
| Reply leaves the server but never shows up at the gateway | Loss on the LAN path, not on the tunnel |
| Reply reaches the gateway but not the client | Return translation or tunnel policy, not the server route |
Buƙatar da ƙofar da kanta ta ƙirƙira ita ce mummunan madadin gwajin abokin haɗi, domin tana fitowa daga wani adireshi kuma tana fuskantar wasu ƙa'idoji. Shi ya sa ping mai nasara daga ƙofar da buƙatar da ta kasa daga abokin haɗin za su iya zama gaskiya duka.
Inda routers da yawa ke kan hanya, duba kowanne da ke buƙatar hanya zuwa tafkin. Tsarin sito-zuwa-sito yakan buƙaci a san prefix na nesa a fiye da na'ura ɗaya, kuma ƙofar da kanta dole ta tura tsakanin tunnel da LAN; bayanan turawa na strongSwan sun shafi gefen sysctl da Tacewar wuta na hakan.
Rubuta tafkin, prefix ɗin da mai shi
Abubuwa huɗu suna cikin bayanin: tafkin da abokin haɗin ya samu, prefix ɗin mai zaman kanta da yake buƙata, router ɗin da ke da alhakin amsar, da ƙa'idar fassara idan akwai. Da waɗannan, canjin ƙofa daga baya kwatance ne ba bincike ba.
Sannan sake gwadawa da talakawan abokin haɗi da ainihin asusun aikace-aikacen. Faɗaɗa haƙƙin aikace-aikacen ba zai iya gyara hanyar dawowar fakitin ba, kuma canjin asusu da aka yi yayin wannan bincike zai rikitar da kwatancen na gaba. Idan tsarin ya dogara da fassara, rubuta shi a inda ake karanta log ɗin uwar garke. Wanda ya ga baƙon adireshin tushe a cikin sawun dubawa bai kamata ya sake gano taswirar daga tikitin ba.