ifconfig-push: cinwaanka lamaanaha ee net30 ama maaskaraka subnet?

Doodda labaad ee ifconfig-push waa cinwaanka lamaanaha ee net30 iyo maaskaraka shabakadda ee topology subnet. Isbarbardhig topolojiyada socota ka hor intaadan tafatirin faylka CCD.

Macaamiisha firfircoon si fiican ayay isku xiraan oo waddooyinka u maraan, laakiin hal macmiil oo cinwaan go'an leh gebi ahaanba ma gaaro server-ka. Waxba kama beddelmin firewall-ka, khadka CCD-na wuu macquul yahay. Sababta caadiga ah waa dood labaad oo loo qoray topoloji TUN ka duwan tan server-ku socodsiiyo. Cilladdu waa aamusan tahay: macmiilku wuu soo baxaa isagoo cinwaan wata, server-kuna wuu aqbalaa xiriirka, laakiin wax taraafik ah ma gudbo.

Net30 dhexdiisa goobtaas waa cinwaanka lamaanaha; subnet dhexdiisa waa maaskaraka shabakadda. Labada qaab waa beddello, marnaba ma aha taxane.

Labada qaab, dhinac dhinac

Dejinta net30 dhaqameed, macmiil kastaa wuxuu leeyahay block /30: cinwaan shabakadeed, laba cinwaan la isticmaali karo iyo cinwaan baahinta. ifconfig-push wuxuu qaataa cinwaanka macmiilka iyo cinwaanka lamaanaha, lamaanuhuna waa cinwaanka kale ee la isticmaali karo isla block-kaas, oo ay isticmaasho dhinaca server-ka ee xiriirka dhibic-ilaa-dhibic.

# net30: client address and its peer
ifconfig-push 10.99.0.6 10.99.0.5
# topology subnet: client address and the pool netmask
ifconfig-push 10.99.0.20 255.255.255.0

topology subnet hoostiisa macmiilku wuxuu la wadaagaa hal subnet server-ka, oo isla tilmaantu waxay qaadataa cinwaan iyo maaskar shabakadeed. Cinwaanka server-ka laftiisu wuxuu ka yimaadaa tilmaanta server, ma aha goobta labaad. Qaababka isku dariddoodu waxay abuurtaa macmiil u malaynaya inuu ku jiro xiriir dhibic-ilaa-dhibic halka server-ku u waddo sida martigeliyaha subnet, ama liddi ku ah. Taasi waa sababta maaskar shabakadeed marnaba looma lammaanayn karo net30.

Labada khad ee block-ka waa khadad gaar ah faylka CCD. Hal macmiil wuxuu helaa midkood oo kaliya.

Akhri topolojiyada server-ku dhab ahaan socodsiiyo

Akhri konfigurashanka socda halkii aad ka akhrin lahayd midda caadiga ah ee xidhmada, sababtoo ah topolojiyada waxaa laga yaabaa in sanado ka hor la dhigay oo loo koobiyeeyay horay. Raadi topology subnet ama maqnaanshihiisa, ka dib hubi sida khadka server u qaybiyo cinwaannada. Konfigurashan aan marnaba xusin topolojiyada lama mid ah midka dejiya subnet.

Ka dib akhri dejinta macmiilku helay. Cinwaanka, maaskaraka iyo lamaanaha uu soo sheego waxay kuu sheegaan fasiraadda server-ku adeegsaday.

Cinwaanka go'an ka fogee barkada firfircoon

Cinwaan go'an waa inuu ka baxsan yahay barkada firfircoon, haddii kale laba macmiil ayaa laga yaabaa in la siiyo isla cinwaan. Topolojiyada subnet, nopool khadka server wuxuu xakameeyaa barkada otomaatiga ah, iyo xad cad ifconfig-pool wuxuu qeexaa waxa macaamiisha firfircoon helaan.

dev tun
topology subnet
server 10.99.0.0 255.255.255.0 nopool
ifconfig-pool 10.99.0.100 10.99.0.210 255.255.255.0
client-config-dir /etc/openvpn/ccd

Server-ku wuxuu qaataa 10.99.0.1 naftiisa, cinwaanka go'an ee macmiilkuna wuxuu ka baxsan yahay xadka barkada. Faylka CCD waxaa loogu magac daray aqoonsiga dhabta ah ee macmiilka, ma aha magaca faylka profile-ka, oo ma qaato kordhin dheeraad ah. Haddii username-as-common-name firfircoon yahay, magaca isticmaalaha la xaqiijiyay waa aqoonsiga la isbarbardhigayo. Laba qalab oo wadaaga hal aqoonsi waxay sidoo kale wadaagi doonaan cinwaanka go'an, taas oo ah dhibaato siyaasad ah oo aan ahayn mid waddo.

Xaqiiji qoondaynta macmiilku dhab ahaan helay

Dib u xiriir macmiilka loogu talagalay oo xaqiiji faylka CCD ee la doortay ka hor intaadan wax kale hubin. Ka dib hubi cinwaanka, maaskaraka ama lamaanaha, iyo waddada ku noqota server-ka. Macmiil ku muujinaya cinwaanka lamaanaha dejinta subnet wali wuxuu isticmaalayaa qaab khaldan.

Beddelka topolojiyada wuxuu saameeyaa macmiil kasta iyo ka-badasho kasta, marka u tixgeli socdaal ahaan ee ma aha dayactir hal macmiil. Hagaajinta khadka taagan si uu ugu habboonaado topolojiyada hore loo isticmaalayay badanaa waa isbeddelka yar. Tixraaca server-options wuxuu diiwaangeliyaa kaaliyaha iyo ka-badashooyinka gaarka ah ee macmiilka.

Maqaallo la xiriira