Sida loo hubiyo haddii satelaytka Mesh Wi-Fi uu isticmaalo routerka VPN
Raac gateway-ga caadiga ah, habka gudbinta nodka iyo shaxda xaaladda routerka si aad u caddayso haddii macaamiisha satelaytka Mesh ay maraan VPN.
Satelayt ka jawaaba isla magaca Wi-Fi ee routerka aasaasiga ah waxba kama sheegto halka baakadaha macaamiishiisa tagaan. Nodku waa raadiyo iyo buundo ilaa liddiisa la caddeeyo. Waxa go'aamiya bixitaanka gateway-ga caadiga ah ee macmiil kastaa helo iyo habka gudbinta nodka hortiisa. Samee shantan hubin macmiilka iyo dibadda, waxaadna heli doontaa jawaab difaacan karto, ma aha aragti ka timid imtixaan xawaare.
Akhri gateway-ga uu macmiilku dhab ahaan helay
Macmiilka, daabac shaxda waddooyinka iyo shaxda deriska. Waddada caadiga ah waxay sheegtaa cinwaanka gudbiya taraafikada; gelinta deriska waxay sheegtaa MAC-ka leh cinwaankaas. Isticmaal macmiilka, ma aha liiska qalabka routerka, sababtoo ah liiska qalabka wuxuu muujinayaa xiriirka, ma aha waddooyinka.
ip route show default
ip -6 route show default
ip neigh showWindows wuxuu daabacaa isla xaqiiqooyinka qaab kale: ipconfig /all wuxuu bixiyaa gateway-ga caadiga ah iyo arp -a wuxuu bixiyaa MAC-ka. macOS, route -n get default iyo arp -an waxay daboolaan isla waxaas.
Isbarbardhig gateway-gaas laba cinwaan oo aad hore u taqaan: cinwaanka LAN ee routerka aasaasiga ah iyo cinwaanka maamulka satelaytka. Haddii gateway-ga yahay cinwaanka LAN ee routerka, macmiilku wuxuu ku xiran yahay routerka buundo ahaan oo siyaasadda routerka ee shabakadaas waxay socotaa iyada oo aan isbeddelin. Haddii gateway-ga yahay cinwaanka satelaytka, satelaytku wuu waddo oo routerku waligiis ma arko baakadaha macmiilka sida taraafikada LAN; go'aanku waa inuu ku dhaco nodka, haddii kale ma dhaco haba yaraatee.
Xaqiiji habka uu nodku dhab ahaan ku jiro
Alaabta Mesh waxay dib u isticmaashaa saddex eray oo loogu talagalay dabeecado kala duwan, marka ka aamin waddada baakadka in ka badan sumadda app-ka. Habka buundo ama barta gelitaanka wuxuu gudbiyaa fareemada. Habka router wuxuu dhameeyaa subnet oo wuxuu maamulaa DHCP. Habka martida wuxuu badanaa macaamiisha dhigaa VLAN gaar ah oo leh xeerarkiisa. Nod ku jira habka router oo ka dambeeya router kale waa NAT labanlaab ah, macaamiishiisuna waxay gaaraan routerka VPN iyagoo hore loo tarjumay, taasoo wiiqda siyaasadda ku saleysan cinwaanka isha.
| What you see | What it means | Next check |
|---|---|---|
| Gateway is the router's LAN address, one MAC for every node | The node bridges; the router owns the policy | Router policy for that LAN and VLAN |
| Gateway is the node's address and DHCP comes from the node | The node routes; double NAT | Node's own VPN client, or a static route plus policy on the router |
| Gateway is a different subnet on a guest SSID | Guest VLAN, often client-isolated | Whether that VLAN is inside the tunnel policy |
| Gateway changes when you walk into another room | Roaming across segments | Repeat the check per node |
Si loo go'aamiyo MAC-ka, akhri sumadda ku taal nodka oo la barbardhig ip neigh. Soo saarayaashu waxay daabacaan MAC-ka aasaasiga ah oo waxay soo saaraan MAC-ka raadiyaha kasta iyagoo kordhinaya hal bayt, sidaas darteed lambarka ugu dambeeya ee hexadecimal-ka wuu kala duwan yahay; isbarbardhig horgalaha ee ma aha cinwaanka oo dhan. Haddii MAC-ka gateway-ga uu ka tirsan yahay interface-ka LAN ee routerka, nodku ma waddo macmiilkaas.
Caddee bixitaanka routerka, ma aha imtixaan xawaare
Xaaladda dhinaca routerka waa goobta kaliya ee muujisa tarjumaadda. OpenWrt, liis garay xeerarka siyaasadda iyo shaxda waddooyinka, ka dibna xaqiiji in tunnelku leeyahay handshake cusub:
ip rule show
ip route show table all | grep default
wg showpfSense ama OPNsense isla caddaynta waxay ku jirtaa pfctl -sr xeerarka, pfctl -ss xaaladaha firfircoon iyo bogga xaaladda WireGuard ee tirooyinka jaalka, sida ku cad dukumeentiga macmiilka WireGuard. Kala shaandhee shaxda xaaladda cinwaanka macmiilka. Haddii xaaladdu muujiso macmiilka oo loo tarjumay cinwaanka tunnelka, taraafikadu waxay ku jirtaa tunnelka; haddii ay muujiso cinwaanka WAN, ma jirto, wax kasta oo calaamadda dashboard-ka sheegto.
Traceroute laga bilaabo macmiilka wuxuu ku darayaa hal xaqiiqo oo shaxda xaaladdu bixin karin: boodka koowaad. Haddii boodka koowaad yahay cinwaanka LAN ee routerka, macmiilku si toos ah ayuu u gaaray routerka. Haddii uu yahay cinwaanka nodka oo ay raacdo bood kale oo gaar ah, waxaad ku jirtaa qayb la waddo, boodkaas labaadna waa qalabka ay tahay inuu hayo siyaasadda.
Eeg waxa nodku qaybiyo marka laga reebo cinwaan
Ikhtiyaarada DHCP waxay la socdaan kireyska, sidaas darteed nod leh DHCP u gaar ah wuxuu sidoo kale qaybin karaa DNS u gaar ah iyo ogeysiisyada routerka IPv6 u gaar ah. Sidaas darteed macmiilku wuxuu ka bixi karaa tunnelka oo weli u diri karaa su'aalo resolver ku yaal nodka, ama wuxuu heli karaa cinwaan IPv6 caalami ah oo aan siyaasadda tunnelka waligeed daboolin. Labadaba ku daabac macmiilka:
cat /etc/resolv.conf
ip -6 addr show scope globalHaddii resolverku yahay nodka oo nodku u gudbiyo routerka, DNS waxay raacdaa tunnelka. Haddii nodku gudaha ku xalliyo ama u tilmaamo resolverka bixiyaha, su'aalahu waxay ka baxaan tunnelka xitaa marka HTTP aan sidaas yeelin. IPv6 waxay mudan tahay isla imtixaanka: cinwaan caalami ah iyo waddo caadi ah oo dhaafsiisan tunnelka waa daadin, Mesh firmware-na badanaa wuxuu ka tagaa IPv6 oo shidan inta siyaasadda VPN ay daboolayso kaliya IPv4.
Jab tunnelka si ula kac ah, ka dibna qor natiijada
Soo deji tunnelka oo fiiri macmiil ku xiran nodkaas, ma aha macmiil fadhiya routerka agtiisa. ping iyo curl oo leh waqti sugitaan gaaban ayaa ku filan; su'aashu waa haddii taraafikadu istaago ama dib ugu soo laabto WAN. Jooji tunnelka amarka adeegga routerka laftiisa, tusaale ahaan wg-quick down wg0 ama joojinta adeegga OpenVPN, oo imtixaanka gaaban hayso.
Haddii macmiilku sii shaqeeyo, nodka ama routerku wuu ku guuldareystaa si furan qaybtaas, mesh-na wuxuu aamusnaan u baaqday kill switch-ka. Soo celi tunnelka, xaqiiji in tirooyinka handshake ay dhaqaaqeen, oo ku celi hubinta shaxda xaaladda tallaabada saddexaad.
Qor hal safar nod kasta: sumad, SSID, cinwaanka gateway-ga, horgalaha MAC, bixitaanka la xaqiijiyay haa ama maya, IPv6 la daboolay iyo dabeecadda marka tunnelku hoos yahay. Roaming waa meesha jawaabtu isbeddesho, marka tijaabi qolalka aad dhab ahaan isticmaasho. Marka safar kuwo kale la seegin, nodkaas waa kan la baadho, sixidna waxay ku taal qalabka leh gateway-ga safkaas.