Kicinta kombuyuutar guriga oo hurda iyada oo loo marayo VPN: xagee baakaddu ka timaaddaa
Tunnel ma kicin karo mishiinka uu isagu dhammeeyo. Baakadda magic packet dhig LAN-ka guriga, xaqiiji adapterka iyo xaaladda tamarta, ka dibna isku xir.
Waad isku xirtaa, router-ku wuu jawaabaa, kombuyuutarka miiska ahna mugdi buu ku sii ahaanayaa. Tunnel-ku waa hagaagsan yahay; baakaddii mishiinka kicin lahayd waligeed ma gaarin qaybta uu mishiinku dhageysto. Haddii aad waddada ka dib u socoto router-ka, waad arki doontaa halka ay ku dhimato.
Saddex qalab ayaa leh saddex shaqo. Isku qasidda ayaa ah sababta caadiga ah ee isku dayga kicinta weligiis u wareegto.
Ka bilow macmiilka fog oo raac waddada
Shabakad hotel ka ah waxaad ku xirtaa router-ka guriga, kaas oo ah barta kaliya ee had iyo jeer shaqeysa sawirka. Codsi kicin ah oo aad laptop-ka ku qorto wuxuu noqdaa socodka tunnel caadi ah, oo loo dirayo meel kasta oo aad sheegtay. Meeshaas ayaa go'aamisa wax kasta oo xiga.
Haddii aad u dirtay ciwaanka LAN ee router-ka guriga dekedda magic-packet, router-ku wuu aqbali karaa datagram-ka oo waligiis ma soo saari doono frame qaybta guriga, sababtoo ah waxba halkaas kama dhageysto dekeddaas. Haddii aad ku faafiso tunnel-ka gudihiisa, waxay ku istaagtaa interface-ka tunnel-ka. Tunnel la maro ma aha fidinta lakabka 2 ee fiilooyinka guriga. Raac waddada tallaabo tallaabo oo meesha xiran way caddaanaysaa.
Hubinta go'aamisa tan waxay u baahan tahay hal amar dhinaca fog iyo hal dhinaca guriga. Dir codsiga, ka dibna fiiri qaybta guriga frame-ka.
U rar diridda qaybta guriga
Router-ku isagu wuu sameyn karaa kicinta marka lagu xaqiijiyo tunnel-ka. OpenWrt waxay diiwaangelisaa adeegga Wake-on-LAN oo ku shaqeeya qalabka oo frame-ka si maxalli ah u soo saara, taasna waa qaabka saxda ah ee loo baahan yahay: xaqiijin fog oo dibadda ah, faafin maxalli ah oo gudaha ah.
Habkani waxa uu sidoo kale kicinta ka fogeynayaa internet-ka guud. Internet-ka wax cusub laguma bandhigo, sababtoo ah kiciyaha wuxuu maraa VPN-ka aad horey u aaminsan tahay. Beddelka, adeeg kicin oo dekedda la gudbiyay, wuxuu ku beddelaa raaxo yar barta internet-ka u jeedda oo qof walba tijaabin karo.
Ku tiirsanaanta wareegga ah waa in si cad loo magacaabo. Macmiil VPN oo ku rakiban kombuyuutarka miiska ah ma kicin karo kombuyuutarkaas, sababtoo ah habka macmiilka wuxuu u baahan yahay mishiinka inuu shaqeeyo. Ku hay barta gelitaanka fog router-ka ama sanduuq kale oo had iyo jeer shaqeeya, kombuyuutarka miiskana ha ahaado bartilmaameed oo keliya.
Xaqiiji bartilmaameedka ka hor inta aadan tunnel-ka eedeyn
Qaybtan waxaa go'aamiya hardware-ka, ma aha VPN, xaaladda tamartana waxay go'aamisaa marka hore. Adapter-ku waa inuu taageero kicinta, firmware-ku waa inuu adapter-ka tamar siiyo hurdada, nidaamka shaqaduna waa inuu u habaysan yahay inuu taas oggolaado. Mishiin la hakiyay waa kiis ka duwan kan la damiyay, labaduna way ka duwan yihiin mishiinka tamartiisa darbiga laga gooyay. Xalli xaaladdaas ka hor inta aadan ka shaqeyn liiska intiisa kale.
Akhri ciwaanka hardware-ka adapter-ka dhab ahaan qaadan doona frame-ka. Kombuyuutar miis leh Ethernet iyo Wi-Fi labadaba wuxuu inta badan leeyahay laba ciwaan, midkood oo keliya ayaa laga yaabaa inuu awood u leeyahay kicinta. Kicinta bilaa fiilo waa awood gooni ah oo leh shuruudaha firmware-keeda, sidaas darteed kicin Ethernet oo shaqeeya wax kama sheegto kicinta Wi-Fi.
Marka hore caddee waddada maxalliga ah. Baakadda magic packet ka dir qalab kale oo isla switch-ka ah oo fiiri mishiinka oo soo kaca. Haddii taas guuldareysato, wax xaddiga ah oo debugging tunnel-ka ah ma caawin doono, cilladuna waxay ku jirtaa firmware-ka, habaynta adapter-ka ama xaaladda tamarta.
Ka dib kicinta, isku xir adeegga aad rabtay
Kicintu ma aha gelitaan fog. Marka mishiinku sii socdo, wali waa inuu kiciyaa adeegyadiisa, helo ciwaan oo aqbalo fadhiga aad dhab ahaan u baahan tahay. Sii waqti uu gaaro xaaladdaas ka hor inta aadan go'aansan in kicintu guuldareysatay.
# remote side: trigger the wake through the already-authenticated tunnel
ssh [email protected] 'wol -i br-lan 3c:7a:8f:2b:11:04'
# home side: is the target answering on the LAN?
ping -c 3 10.10.0.42
arp -n 10.10.0.42
Sadarka arp waa kan faa'iidada leh. Diiwaangelinta ka beddelmaysa mid aan dhammaystirnayn una gudbaysa ciwaan hardware dhab ah macneheedu waa mishiinku sii socday oo jawaabay; codsiga waligiis aan la xallin wuxuu dib u tilmaamayaa tallaabada kicinta, ma aha adeegga aad isku dayeyso inaad gaarto.
Kala sooc tallaabooyinka qoraalladaada: kicin, kiciye, adeeg. Guuldarada tallaabada labaad waxay ka muuqataa daaqadda sheekaysiga si la mid ah guuldarada tallaabada koowaad, oo waxaa kala saara oo keliya caddaynta maxalliga ah.