Sababta VPN shaqeynaya uu wali ugu dhamaado waqtiga jawaabta
In codsigu gaaro server gaar ah waa kala badhka isdhaafsiga. Jawaabtiisu waa in ay ka hesho macmiilka tunnel-ka iyada oo marayso gateway-ga, wadada ama tarjumaadda loogu talagalay.
Codsigu wuu yimaadaa, server-ku wuu diiwaangeliyaa, macmiilkuna wali wuxuu soo sheegaa waqti-dhaaf. Isku-darkaas macneheedu waa jawaabtu ma helin wadada dib ugu noqoshada, waana mid ka mid ah cilladaha yar ee aad ka xaqiijin karto labada daraf isku mar. Baaritaannada si taxane ah u samee oo jooji marka mid ka mid ah guuldareysto.
Ka bilow halka codsigu yimid
Ka hor inta aadan wax kale baarin, xaqiiji in xirmadu gaartay adeegga. Diiwaanka log-ga dhinaca server-ka, tirinta xiriirada ama qabashada la ogolaaday ee darafka fog—dhammaantood waxay ka jawaabaan isla su'aal, maqnaanshahooduna waxay kuu celinayaa tunnel-ka halkii ay kuu horayn lahaayeen jawaabta. Kani waa baaritaanka kala sooca dhibaatada gudbinta iyo dhibaatada wadada dib u noqoshada.
Haddii codsigu waligiis iman, halkan jooji. Tunnel-ka, wadada loo maro prefix-ga gaarka ah ama qaanuunka gelitaanka ayaa mawduuca ah, wadada jawaabtuna wali khuseyso ma leh. Sidoo kale qor ciwaanka isha ee server-ku arkay. Waa ama ciwaanka barkada ee macmiilku helay ama ciwaan la tarjumay, farqigaasna wuxuu go'aamiyaa baaritaanka dambe ee khuseeya.
Jawaabtu waxay u baahan tahay wado loo maro barkada
Macmiilka gelitaanka fog wuxuu inta badan ciwaan ka helaa barkad, shabakadda gaarka ahna waxay u baahan tahay wado dib ugu noqota barkaas. Server-ka wadadiisa caadiga ahi u jeeddo gateway-giisa gaarka ah wuxuu xirmada u dhiibaa gateway-gaas, oo aan wax fikrad ah ka lahayn halka barkadu ku taal, sidaas darteed jawaabtu halkaas ku dhintaa. Macmiilku wuxuu arkaa waqti-dhaaf sababtoo ah waxba dib uma soo noqon, taasna lama kala sooci karo codsi waligiis bixin.
Baar wadada server-ku u doorto ciwaanka macmiilka, ma aha wadada uu u isticmaalo subnet-kiisa. Labadaas raadin waxay bixin karaan jawaabo kala duwan, tan labaadna waa tan halkan muhiimka ah. Tarjumaaddu waa naqshadda kale waxayna beddeshaa waxa server-ku arko. Waxay fududeyn kartaa wadada dib u noqoshada, waxayna sidoo kale ka saartaa ciwaanka asalka ah ee macmiilka log-yada server-ka, taas oo saameyn ku leh qaanuun kasta ama warbixin kasta oo lagu dhisay goobtaas.
Isbarbardhig qabashada server-ka iyo qabashada gateway-ga
Isbarbardhig waxa ka baxa server-ka iyo waxa yimaada gateway-ga. Qabashada interface-ka bixitaanka server-ka iyo qabashada gateway-ga tunnel-ku waxay ka jawaabaan laba qaybood oo kala duwan oo su'aasha ah, farqiga u dhexeeyana wuxuu tilmaamaa halka luminta dhacday.
ip route get 10.90.0.14
tcpdump -ni any host 10.90.0.14 and port 443
ip route show table all | grep 10.90.0.0| Where the reply stops | What it proves |
|---|---|
| Request in the server log, nothing on its outbound capture | The server picked a gateway that cannot reach the pool |
| Reply leaves the server but never shows up at the gateway | Loss on the LAN path, not on the tunnel |
| Reply reaches the gateway but not the client | Return translation or tunnel policy, not the server route |
Codsi uu gateway-gu isagu soo saaro waa beddelka liita ee imtixaanka macmiilka, sababtoo ah wuxuu ka yimaadaa ciwaan kale wuxuuna la kulmaa qaanuunno kale. Taasi waa sababta ping guul leh oo gateway-ga laga sameeyo iyo codsi guuldareystay oo macmiilka laga sameeyo ay labaduba run noqon karaan.
Marka waddada ay ku yaalliin routerro badan, baar mid kasta oo u baahan wado loo maro barkada. Naqshadda goob-ilaa-goob waxay inta badan u baahan tahay in prefix-ga fog lagu yaqaan in ka badan hal qalab, gateway-ka laftiisuna waa in uu u gudbiyo tunnel-ka iyo LAN-ka dhexdooda; qoraallada gudbinta ee strongSwan waxay daboolaan dhinaca sysctl iyo dab-demiska taas.
Qor barkada, prefix-ga iyo masuulka
Xusuus-qorka waxaa ku jira afar xaqiiqo: barkada uu macmiilku helay, prefix-ga gaarka ah ee uu u baahnaa, router-ka masuulka ka ah jawaabta, iyo qaanuunka tarjumaadda haddii uu jiro. Iyaga awgeed beddelaadda gateway-ga mar dambe waa isbarbardhig ma aha baaritaan.
Kadib mar kale ku tijaabi macmiil caadi ah iyo akoonka dhabta ah ee barnaamijka. Ballaarinta xuquuqda barnaamijku ma hagaajin karto wadada dib u noqoshada xirmada, beddelaadda akoonka inta lagu jiro ogaal-cilmi-baadhistan waxay qasin doontaa isbarbardhigga xiga. Haddii naqshaddu ku tiirsan tahay tarjumaad, ku diiwaangeli halka log-yada server-ka lagu akhriyo. Qofka arka ciwaan isha aan la aqoon raad-raacga hanti-dhawrka waa in aanu mar kale ka ogaan khariidadda tikit-ka.