Macmiilka VPN ee router-ka ama habka server-ka: mid kastaa maxuu suurtageliyaa
Hal doorka router-ku wuxuu u dirayaa taraafikagaaga meel fog oo bixitaan ah, kan kalena wuxuu kuu oggolaanayaa inaad dib ugu soo noqoto. Akhri menu-yada, aqoonsiga iyo wadada soo noqoshada ka hor intaadan midkoodna shidin.
Waxaad gashaa router-ka, furtaa bogga VPN, oo waxaad heshaa laba tab oo u eg isla sifo laba jeer lagu sharraxay: mid waxay rabtaa fayl profile ah oo meel kale ka yimid, tan kalena waxay rabtaa inaad abuurto shahaadooyin oo aad doorato deked. Kuwani ma aha laba aragti oo hal dejinta ah. Hal door ayaa router-ka ka dhigaa mid dibadda waca, kan kalena wuxuu ka dhigaa mid jawaabta, iyo hal qalab ayaa labadaba qaban kara, iyada oo aan midka kale caawinayn. Halkan waxaa ah sida loo akhriyo menu-ga iyo sida loo go’aansado dhinaca aad ku sugan tahay ka hor intaadan wax shidin.
Fur menu-ga VPN oo akhri magacyada doorarka
Ka bilow cinwaannada qaybaha, ma aha badhanka. Tab lagu calaamadeeyay macmiil ama “ku xir adeegga VPN” waxay filayaa profile la soo galiyay, fayl habayn ama jaangooyo aqoonsi ah oo qof kale soo saaray. Tab lagu calaamadeeyay server waxay filayaa inaad abuurto aqoonsiyada, doorato borotokool iyo deked, oo sida caadiga ah dhoofiso profile qalab kasta oo isku xiraysa.
U qaado sadarka suuq-geynta ee sanduuqa mid aan la xaqiijin ilaa menu-gu uu la mid noqdo. “Taageerada VPN” waxay ka dhigan kartaa macmiil, server, caawiye marinka borotokool oo kaliya baakadaha u dira qalabka router-ka gadaashiisa, ama app gelitaan fog oo gaar ah oo aan lahayn profile caadi ah gabi ahaanba. Dukumeentiga firmware-ka oo kaliya ayaa kala saara xaaladahaas, lambarka moodeelka ku yaal istiikar-ka ma aha.
Habka macmiilka: LAN-kaagu wuxuu ku baxaa bixitaan qof kale
Habka macmiilka router-ku wuxuu u dhaqmaa sida laptop socodsiinaya app VPN. Waxay u baahan tahay borotokool qumman, profile ama aqoonsi ka yimid hawlwadeenka fog, iyo go’aan dariiqa ku saabsan qalabka hoose ee isticmaala tunnel-ka. Firmware badan waxay bixiyaan liis siyaasad ah oo aad ku magacawdo cinwaannada isha ama interface-yada ay tahay in lagu diro tunnel-ka, inta kalena ku reebo isku xirka caadiga ah.
Qaybta aamusnaan ku guuldareysata waa dhinaca fog. Meesha aad ku xiranto waa in ay taraafikaga internetka kuu gudbiso oo ay bixiso wado soo noqosho, taasina waa siyaasad ka haysata bixiyaha, ma aha dejinta router-kaaga. Menu kaliya bixiya habka server ma dhisi karo adeeggan dibadda, si kasta oo loo habeeyo, bixiye taageera kaliya xiriirka site-to-site ayaa si guul leh u xiri kara tunnel-ka laakiin wuu tuuri karaa wax kasta oo aad ku dirto.
Marka xigta hubi sida tunnel-ku u maareeyo DNS. Haddii profile-ku riixo xalliyaha, router-ku waa in uu xalliyahaas siiyo macaamiisha hoose; haddii kale, macaamiishu waxay sii wadaan isticmaalka xalliyaha bixiyaha oo waxay xalliyaan magacyada meel ka baxsan tunnel-ka inkastoo baakaduhu gudaha galaan. Hubin deg deg ah oo laga sameeyo laptop ku xiran: cinwaanka aad ka aragto bogga IP echo waa in uu noqdaa bixitaanka, cinwaanka xalliyaha la isticmaalayna waa in uu noqdaa kii tunnel-ku bixiyay.
Habka server-ka: qof kale ayaa soo gala LAN-kaaga
Habka server-ku wuxuu roonaa jihada. Router-ku wuu dhageystaa, qalabka safarka ayaa isku xira, ka dibna router-ku wuxuu go’aansadaa khayraadka guriga ee xiriirkaas gaari karo. Kani waa doorka aad u rabto NAS, mishiin shaybaadh ama printer, wuxuuna leeyahay shuruud aan doorka macmiilku lahayn: wax dibadda ah waa in uu gaari karo dhageystaha.
Shuruuddaas ayaa ah halka qalabaynta guriga intooda badan istaagaan. Haddii router-ku uu ka dambeeyo albaabka bixiyaha laftiisa, dekedda VPN waa in laga soo gudbiyo albaabkaas, ama router-ka waa in lagu dhigaa hab buundo ama DMZ. Ka dambeeya NAT heerka sidaha ma jiro deked soo gasha oo la gudbin karo gabi ahaanba, sidaas darteed nashqaddu waa in ay is beddesho: tunnel baxa oo ka yimaada router-ka oo tagaya relay, meel fog oo la martigeliyay ama badeecad mesh ah. Server aan la gaari karin ma aha mid si khaldan loo habeeyay, waa mid aan la gaari karin.
Aqoonsiyaduna sidoo kale way kala duwan yihiin doorka. Profile macmiil guri oo wax walba u dira bixitaan lacag leh waa sir hal ah oo la wadaago, halka server qaata saddex taleefan iyo laptop uu u baahan yahay afar aqoonsi oo aad gooni u burin karto. Shahaadooyinka iyo furayaashu waa qalab kasta, bogga dhoofinta router-kana waa in uu kuu siiyaa hal fayl qalab kasta halkii uu hal fayl u siin lahaa guriga oo dhan.
Hubi hirgelinta saxda ah ka hor intaadan ballan qaadin
Dukumeentiga Netgate ee ku saabsan doorashada doorka VPN waxay doorarka u kala soocdaa sidan, oo waxaa mudan in la akhriyo bogga u dhigma firmware-kaaga halkii laga malayn lahaa magacyada tab-ka. Raadi saddex xaqiiqo oo cad: borotokoolka uu macmiilku ku hadli karo, in server-ku taageero borotokoolka qalabkaagu isticmaalo, iyo in siyaasadda dariiqu ay daboosho cinwaannada isha, interface-yada oo dhan ama waxba.
Ka dib eeg xadka taageerada. Router macmiil leh tab macmiil laakiin aan lahayn liis siyaasad ah wuxuu qalab kasta mari doonaa tunnel-ka, taas oo ku fiican sanduuqa streaming kuna khaldan laptop shaqo oo u baahan tunnel xafiiska. Router leh tab server laakiin hal profile la wadaago waa qalab shaybaadh macquul ah iyo doorasho liidata qoys, sababtoo ah burinta hal qalab macnaheedu waa beddelidda habaynta qof walba.
Dooro doorka iyadoo lagu salaynayo halka taraafikagu ka bilaabmo
| What you want | Role | What must be true |
|---|---|---|
| Household devices exit through a paid VPN | client | provider profile plus a working return path |
| Reach a NAS while travelling | server | reachable listener and per-device identities |
| Join two sites permanently | either, as a site-to-site pair | matching protocols and non-overlapping subnets |
| Only one laptop needs the tunnel | neither | run the client on the laptop instead |
Socodsii safka la doortay bilow ilaa dhammaad ka hor intaadan wax kale beddelin. Shid doorka, ku xir hal macmiil, xaqiiji cinwaanka uu ku muuqdo, xaqiiji xalliyaha uu isticmaalo, oo xaqiiji wadada soo noqoshada jihada ka soo horjeeda. Haddii router-ku uu leeyahay bogga firewall sidoo kale, hubi in interface-ka cusub uusan xannibin qaanuun caadi ah oo la qoray markii tunnel-ku aanu jirin.
Marka labada door ay diyaar yihiin oo baahidu dhab ahaan tahay labadaba, u socodsii sida sifooyin gooni ah oo leh dukumeenti gooni ah. Hal router ayaa dibadda u wici kara telefishanka oo isla waqti ka qaadan kara xiriir taleefan oo NAS ah, laakiin labada siyaasad waa in aanay wadaagin subnet, dejinta DNS ama aag firewall, haddii kale isbeddelka ugu horreeya ee aad mid ka mid ah u samaysato wuu jebin doonaa kan kale.