Gateway VPN-ka VirtualBox ee LAN: buundo, waddo, soo noqod

Isticmaalayaasha fog waxay u baahan yihiin inay gaaraan daabacaha iyo serverka faylalka ee LAN jireed, markaas sanduuqa Linux ee kaliya ee had iyo jeer shaqeeya waa VM VirtualBox. In VM-ka lagu buundo LAN-kaas waa qaybta koowaad. Qaybta labaad waa waddo soo noqod oo qalab kasta oo LAN-ka ku jira uu dhab ahaan isticmaali doono, waana taas qaybta ay inta badan habayntu seegto. Marka aysan jirin, tunnel-ku wuu xirmo, macmiilku wuxuu ping gareeyaa gateway-ga, wax kalena ma jawaabo.

Isticmaal cinwaanno la gaari karo

U dhig adapter-ka LAN ee VM-ka habka Bridged Adapter ee loo ansixiyay shabakaddaas, oo siiso cinwaan iyada oo loo marayo habka qaybinta caadiga ah. Markaas VM-ku wuxuu ka soo muuqdaa LAN-ka jireed sida host kasta oo kale. Waddadiisa caadiga ah waa inuu wali isticmaalaa gateway-ga dhabta ah, si gaadiidka sirta ah ee loo maro VPN peer-ka uu u ahaado mid la gaari karo. Ha isticmaalin cinwaanka NAT ee caadiga ah ee VirtualBox sidii tallaabada xigta ee LAN-ka, sababtoo ah cinwaankaas wuxuu ku nool yahay gadaal NAT macmal ah oo on-link kama aha host-ka ama mishiinnada kale ee LAN-ka.

LAN router:          192.168.70.1/24
VirtualBox host:     192.168.70.5/24
VPN gateway VM:      192.168.70.10/24
Example LAN service: 192.168.70.40
VPN client pool:     10.80.0.0/24

Ka hubi is-dhexgalka shabakadaha guryaha ee isticmaalayaasha fog ka hor intaadan dooran kooxda cinwaannada. Is-dhexgalku wuxuu noqdaa madmadow waddo-marin oo aan habayn server ah hagaajin karin.

Ku dhawaaq LAN-ka, ka dibna gudbi

Server-ka xaqiijintiisa iyo gaadiidkiisa hore loo maareeyo, xariiqyada shabakaddu sidan bay u eg yihiin. push wuxuu u sheegaa macmiilka aqbalaaya sida loo gaaro LAN-ka, oo isagu iskiis uma horseedayo VM-ka inuu wax gudbiyo.

dev tun
topology subnet
server 10.80.0.0 255.255.255.0
push "route 192.168.70.0 255.255.255.0"

Daar gudbinta IPv4 ee habaynta shabakadda joogtada ah ee VM-ka, oo u ogolow kooxda macaamiisha inay gaaraan adeegyada LAN ee loogu talagalay xadka gudbinta VM-ka. Ogolaanshaha gaaritaanka dhegeysanaha VPN waa qaanuun gaar ah, oo horey ayuu u shaqeeyaa haddii tunnel-ku kor u kacay.

Waddada soo noqodka waxay ku taal router-ka LAN

Qalabka LAN-ku waxay ku jawaabaan gateway-gooda caadiga ah, kaas oo ah router-ka LAN ee 192.168.70.1. Router-kaas ma oga halka 10.80.0.0/24 ku yaal haddii aan loo sheegin. Ku dar waddada kooxda habaynta joogtada ah ee la taageeray ee router-ka, oo u jeedi cinwaanka LAN ee VM-ka. In lagu daro kaliya host-ka VirtualBox waxay hagaajinaysaa waddooyinka host-kaas weydiiya, taasna ma aha qalab kasta oo LAN-ka ku jira.

ip route add 10.80.0.0/24 via 192.168.70.10

Firewall-ka meesha loo socdo weli waa inuu u ogolaadaa kooxda macaamiisha inay tahay isha. Waddadu waxay qaaddaa baakadda; ma bixiso adeegga.

Haddii router-ka LAN aan la beddeli karin, tarjumaadda isha xaddidan ee VM-ka ayaa ah beddelka. Waxay jawaabaha ku soo celisaa waddo la'aan, oo waxay ka qarinaysaa cinwaannada macmiilka ee gaarka ah adeegga LAN.

Raac hal baakad bilow ilaa dhammaad

Macmiil ku yaal 10.80.0.25 wuxuu u diraa 192.168.70.40 tunnel-ka. VM-ku wuxuu baakadda u gudbiyaa LAN-ka. Adeeggu wuxuu u jawaabaa router-kiisa, kaas oo u doorta VM-ka kooxda macaamiisha, VM-na wuxuu baakadda ku soo celiyaa OpenVPN. Tallaabo kasta oo jumladaas ku jirta waa meel ay naqshaddu ku guuldarraysan karto.

Ku tijaabi codsiga dhabta ah macmiil fog, ka dibna ku celi ka dib markaad dib u soo rartay habaynta la maareeyo VM-ka iyo router-ka labadaba.

Haddii macmiilku gaaro VM-ka laakiin uusan gaarin adeegga, marka hore hubi waddada router-ka. Haddii adeeggu helo codsiga oo macmiilku waligiis arkin jawaabta, waddada soo noqodka ayaa la tuhunsan yahay.