Ma jebisaa daminta ARP VPN-kaaga? Waxay ku jebin kartaa hop-ka dibadda
Tunnel-ku wuxuu qaadaa baakadaha IP; xiriirka sirta ah wali wuxuu u baahan yahay raadin maxalli ah oo hop-ka xiga. Dooro xallinta firfircoon iyo gelinta la ilaaliyo.
{Laba baakadood ayaa ku socda isla xiriirka waxayna raacaan xeerar kala duwan. Mid waa baakadda gaarka ah ee tunnel-ku qaado, oo interface-ka macmalka ah ku maareeyo iyada oo aan lahayn cinwaan Ethernet ah. Midka kale waa baakadda sirta ah ee ka baxda mishiinka iyada oo maraysa xiriirka gelitaanka, oo weli waxay u baahan tahay hop xiga oo maxalli ah oo loo xalliyo cinwaan hardware. Labadan isku qasidda waa sababta ay dadku u damiyaan xallinta cinwaannada interface-ka qaldan ka dibna la yaabaan sababta tunnel-ku uusan waligiis bilaaban.}
{Baakad mid gudaha mid kale, laba nooc oo gudbin}
{Interface-ka macmalka ah ee qaabka la maro wuxuu aqbalaa baakadaha IP. Ma laha cinwaan Ethernet, ma laha goob baahin iyo cinwaanno gudaha lagu xalliyo, sidaas darteed baakadda gudaha waxaa gudbiya tunnel-ka laftiisa. Waxa ka dhaca shabakadda gelitaanka waa lakab gudbin oo gaar ah.}
inner packet: private address -> tunnel device -> the VPN process
outer packet: endpoint address -> access route -> next-hop hardware address
{Baakaddaas dibadda waa frame unicast caadi ah marka ay ka baxdo interface Ethernet, waxayna u baahan tahay cinwaanka hardware ee meesha loo socdo hop-keeda xiga. Xallinta cinwaannada ayaa bixisa, hop-ka xigana badanaa waa gateway maxalli ah ee maaha server fog. Fahanka in raadintu ay tahay gateway-ka ee maaha barta ugu dambaysa waa inta badan ogaanshaha. Qor labada cinwaan ka hor inta aadan wax beddelin.}
{Hel deriska run ahaan muhiimka ah}
{Weydii shaxda marista hop-ka xiga ee barta ugu dambaysa isticmaasho, ka dib hubi shaxda deriska ee hop-kaas. Barta ugu dambaysa lafteeda ayaa halkaas dhif ku muuqata, sababtoo ah kuma jirto xiriirka maxalliga ah.}
ip route get 198.51.100.20
ip neigh show 192.168.0.1
{Haddii gelintu jirto oo la gaari karo, wadada dibaddu waa hagaagsan tahay cilladuna meel kale ayay ku taal. Haddii ay maqan tahay ama ay ku jirto xaalad guul-darro, xiriirka, cinwaanka gateway-ka ama siyaasad xannibaysa xallinta ayaa ah meesha la fiiriyo. Beddelka dejinta sirta ee tunnel-ka ma caawin karo labada xaaladood midkoodna. Ogaaw xarigga xaaladda ee shaxda derisku soo sheegto, sababtoo ah waxay kala saartaa isku-day socda iyo guul-darro joogto ah.}
{Gelinta la bartay waxay qarin kartaa ku-tiirsanaanta}
{Gelinta kaydka ah waxay sii shaqaysaa muddo ka dib marka ay lunto waxa abuuray, sidaas darteed imtixaan la sameeyay dhowr daqiiqo ka dib isbeddel ayaa ku gudbi kara sabab qaldan. Sug ilaa gelintu duqowdo, ama si ula kac ah u tirtir, ka hor inta aadan go'aan ka gaarin in xallintu aan loo baahnayn.}
{Khaladka lidka ah ayaa isna intaas la mid ah: gelinta aan la xallin waxaa loo arkaa caddayn in tunnel-ku jabay. Ficill ahaan waxay tilmaantaa qaybta maxalliga ah, cinwaan labanlaab ah, ama xeer ammaan deked oo tuuraya frame-yada sidan jawaabta. Hubi dekedda switch-ka ka hor inta aadan taaban habaynta VPN.}
{Akhri waqtiga sida caddayn. Gelinta xallisan oo ka dib si isdaba joog ah dhacda waxay soo jeedinaysaa xiriir gariira ama laba qalab oo ka jawaabaya hal cinwaan, halka gelinta aan waligeed xallinayn ay tilmaamayso cinwaanka gateway-ka ama shaandhaynta dekedda gelitaanka.}
{Go'aan ka gaar xallinta firfircoon iyo gelinta go'an}
{Xallinta firfircoon waa tan caadiga ah sabab awgeed: waxay raacdaa hardware-ka marka gateway la beddelo lamana baahna isku-dubbarid qofna. Gelinta taagan waa la difaaci karaa marka shabakadda si ula kac ah loo maareeyo oo isku-xirka cinwaanka iyo cinwaanka hardware uu qayb ka yahay naqshad diiwaan gashan.}
| Approach | Good fit | Cost you accept |
|---|---|---|
| Dynamic resolution | Laptops, changing networks, anything with a spare minute to recover | A short outage while the entry is relearned |
| Permanent entry | Fixed appliances where the pairing is controlled and recorded | A silent failure the day the hardware changes |
{Si kastaba ha ahaatee, codsiga ku dabaq interface-ka gelitaanka ee qaada baakadda dibadda. Daminta xallinta interface-kaas ma adkeeyso tunnel-ka; waxay ka qaaddaa macmiilka awoodda uu ku gaaro gateway-ka qaada, guul-darruna waxay u ekaataa VPN dhintay ee maaha dhibaato cinwaan maxalli ah.}
{Maskaxda ku hay stack-ka kale}
{IPv6 ma isticmaalo xallinta cinwaannada isla qaabkaas; waxay isticmaashaa ogaanshaha deriska. Su'aasha lakabyada waxay ku sii socotaa sidii oo kale: sidee baakadda dibadda dhabta ah u gaartaa hop xiga oo maxalli ah, oo maxaa caddeeya in jawaabtu tahay mid casri ah.}
{Hubi labada xaqiiqo ee isku mid ah stack-ka kale ka hor inta aadan ku dhawaaqin naqshaddu inay dhammaatay, sababtoo ah tunnel qaada labada qoys wuxuu leeyahay laba waddo oo dibadda ah oo la tixgeliyo. Qor tan aad hubisay iyo tan aad qiyaastay.}