Koobiinta /32-ka tunnel-ka ma marin doonto shabakada hoose ee xafiiska
Cinwaanka VPN-ku siiyo adapter-kaaga wuxuu qeexaa isku-xirka, ma aha meesha loo socdo. Ku dar horgalaha kheyraadka profile-ka oo ka tag tii caadiga ah.
VPN-ku wuu xirmayaa, interface-ku wuxuu muujinayaa cinwaan leh maskar labaatan iyo laba bit ah, server-ka xafiiskuna wuu aan la gaari karin. Tallaabada xigta badanaa waa in maskarkaas marinnada lagu isticmaalo markale, iyadoo loo maleynayo in interface-ku qeexayo waxa tunnel-ku gaari karo. Ma qeexayo. Cinwaankaas wuxuu qeexaa cidhifka maxalliga ah ee isku-xirka dhibic-ilaa-dhibic, halka meesha loo socdo ee adiga kugu danbeysa ay ku taal horgale kale dhinaca kale.
Laba shay oo kala duwan ayaa la isku darayaa: cinwaanka tunnel-ku ku siiyay, iyo shabakada aad rabto inaad ku gaarto.
Laba cinwaan, laba shaqo
Tunnel dhibic-ilaa-dhibic ah, cinwaanka macmiilka badanaa waa hal cinwaan martigeliye ah sababtoo ah waxaa jira hal lammaane oo sax ah cidhifka kale ee isku-xirka. Ma jiro qayb la wadaago iyo ARP midna, sidaas darteed maskar Ethernet-ka ku eg mid aan caqli gal ahayn ayaa halkan si buuxda caadi u ah.
Horgalaha meesha loo socdo waa xaqiiqo ku saabsan shabakada xafiiska, ma aha tunnel-ka. Haddii aad u baahan tahay hal server, marinadu waa marin martigeliye oo serverkaas ah. Haddii aad u baahan tahay dhammaan shabakada hoose ee xafiiska, marinadu waa shabakadaas hoose. Midkoodna jawaabaha lama akhrin karo interface-ka, iyo in mid la doorto sababtoo ah wuxuu ka soo muuqday agagaarka cinwaanka tunnel-ka ayaa ah sida habaynta shaqeysa loo jabiyo.
| What you need to reach | What to install |
|---|---|
| One server, nothing else | A host route for that address |
| The office subnet | A route for the subnet prefix |
| Everything in the private space | Only if the requirement says so, and only with the owner's approval |
Sadarkaas saddexaad waa halka rajo ahaanshuhu uu noqdo hakad. In dhammaan xadka gaarka ah lagu maro tunnel uun hal goob u adeega waxay u riixdaa taraafikada aan xiriirka lahayn waddo aysan gaarsiin karin, iyo guul-darrooyinka ka yimaada waxay u eg yihiin VPN jabay halkii ay ahaan lahaayeen marin aad u ballaaran.
Dooro horgalaha shuruudda
Ka hor inta aadan taaban profile, shuruudda u qor jumlad ahaan: martigeliyayaasha kee ayaa la gaari karaa, oo waa maxay horgalaha ugu cidhiidhi ee iyaga daboolaya? Hal server waa marin martigeliye. Shabakad hoose waa marin shabakad hoose. Xad shabakado hoose waa soo koobid, soo koobidna waa ballanqaad in cinwaan kasta oo gudaheeda ah la gaari karo, taas oo aan badanaa run ahayn.
Kadib tirooyinka la barbardhig waxa xafiisku dhab ahaan isticmaalo. In horgale laga koobiyeeyo fariin sheeko iyada oo aan la xaqiijin qorshaha cinwaanaynta goobta ayaa ah sida marin uu ku dhammaado isagoo tilmaamaya shabakad hoose oo aan cidna lahaan.
Sidoo kale xusuuso in marinadu tahay waddo, ma aha fasax. Albaabku wali wuxuu go'aansadaa in macmiilkaagu isticmaali karo meesha loo socdo, iyo adeeg wali wuu ku diidi karaa. In si sax ah loo rakibo marinada ayaa baakadda halkaas geeya oo waxna kama jawaabo fasaxa.
Ku dar profile-ka, waligaa ha beddelin
Marinnada profile NetworkManager waa hanti qiimo badan leh, farqiqa u dhexeeya dhigista iyo ku darista waa hal xaraf. Isticmaal qaabka lagu daro si aad u kudarto gelitaan oo aad u haysato wax kasta oo horey loo kaydiyay.
nmcli connection modify uuid 11111111-2222-4333-8444-555555555555 \
+ipv4.routes "10.40.20.9/32"Iyada oo aan lagu darin, meelayntu waxay beddelaa liiska oo dhan. Profile horey u qaada horgalayaal dhowr ah, tani waxay si aamusnaan ah u tirtirtaa kuwii shaqeynayay, calaamaduna waxay soo baxdaa mar dambe sida adeeg hore looga gaari jiray laptop-kan.
Isticmaal UUID halkii magaca. Magacyadu way is-duubaan ka dib soo celinta, iyo xiriirka aad wax ka beddelayso lama hubo inuu yahay kan qaada taraafikadaada. Marka hore hubi inuu jiro gelitaan isku mid ah, sababtoo ah ku darista nuqul waa nidaam-darro xitaa marka aan waxyeello lahayn.
Tani tixraaca sifooyinka marinnada waxay diiwaangelisaa meesha loo socdo, tallaabada xigta ee ikhtiyaariga ah, mitirka iyo syntax-ka sifooyinka nooca la rakibay. Akhri ka hor inta aadan ku darin tallaabada xigta, sababtoo ah haddii loo baahan yahay waxay ku xiran tahay isku-dhafka iyo topolojiga, iyo in laga qiyaaso cinwaanka koowaad ee liiska interface-ka ma aha hab.
Marinka caadiga ah iyo DNS waa go'aamo kala duwan
Adding an office prefix says nothing about where the rest of your traffic goes. If policy requires ordinary internet traffic to stay outside the tunnel, that is the ipv4.never-default decision, and it belongs to whoever owns the connection policy rather than to whoever is fixing one unreachable server.
Marinnada otomaatiga ah waa shayga kale ee aan si taxadar la'aan ah loo carqaladayn. In la xakameeyo si loo xalliyo hal gelitaan oo maqan waxay meesha ka saari kartaa dhowr shaqeeya, iyo qofka soo jeediyay waxay badanaa eegayay profile kale oo leh push kale.
DNS waxay leedahay waddo u gaar ah iyo guul-darrooyin u gaar ah. Magac ku xalliya cinwaanka saxda ah iyada oo loo marayo xalliyaha qaldan, ama xalliye aan ka jawaabi karin aagga gaarka ah, ayaa u eg mashaakil marinnada iyadoo marinadu qumman tahay. Tijaabi cinwaanka iyo magaca si gooni ah, kadib go'aanso lakabka dhab ahaan guuldareystay.
Xaqiiji waxa la isticmaalay
Beddelka la kaydiyay ma aha beddelka la isticmaalay. Dib ugu xir isku-xirka hab-nololeedka taageeraya maamulka, kadib eeg marinka dhabta ah ee meesha loo socdo iyo xeerarka siyaasadda ee go'aamiya shaxda la tashanayo.
Haddii horgalahu jiro oo xiriirku wali guuldareysto, waxaad u gudubtay mashaakil kale: xulashada cinwaanka isha, marin soo-noqod ah cidhifka fog, ama adeeg diida macmiilkaaga. Mid kasta oo ka mid ah ayaa ah meel ka wanaagsan in la eego profile-ka aad horey u saxday.