Umsebenzisi wegesi ku-Access Server: ukuhambisa i-LAN yegatsha leklayenti

Unga pinga ikheli le-tunnel leklayenti le-OpenVPN kodwa ungafinyeleli kusiphetho siseva ku-LAN engemuva kwalo. I-Access Server inika iklayenti ikheli elivela echibini le-VPN, futhi ikheli lechibi yilokho kuphela iseva elikwaziyo njengekwayo. Isiqalo segatsha siyiqiniso elihlukile okufanele simenyezelwe, futhi ngisho nalapho igatsha lidinga umdlulisi kanti indlunkulu idinga indlela yokubuya. Indlela ebhalwe endaweni engalungile ayishintshi lutho.

Amakheli amabili, izimangalo ezimbili

Lapho iklayenti ixhuma, i-Access Server iyinika ikheli elivela echibini le-VPN elilungisiwe, isibonelo 10.90.0.0/24. Lokho kwabiwa kuwukuqashisa kwesiphetho esisodwa. Akukho okuthi iklayenti elifanayo limi futhi phambi kwe-10.60.0.0/24, futhi iseva ngeke iqage: isiqalo se-LAN sifinyeleleka ngokusebenzisa iklayenti elithile kuphela uma umqondisi esimemezela.

Yingakho indlela eqinile kwenye imishini ingasizi. Indlela ithi thumela i-10.60.0.0/24 kuleli kheli, kodwa uma ikheli lingeleklayenti elingakaze limakwe njengegesi, iseva ayinasizathu sokuletha lawo maphakethe lapho, futhi isitaki seklayenti singawalahla. Isimemezelo nendlela ziyingxenye ezimbili zendlela eyodwa.

Ukulungiselelwa kwegesi kufaka ini

Ku-Admin Web UI isimemezelo siyisici somsebenzisi: vula i-Configure VPN gateway kumsebenzisi we-connector futhi ufake isiqalo sangempela segatsha ku-Network on the VPN client side. Lowo msebenzisi uqinisekiswa njengabanye, ngakho udinga inqubomgomo yobufakazi efanele idivayisi engenakugadwa.

Iseva ithatha isiqalo njengesifinyeleleka ngokusebenzisa ikheli lechibi lalelo klayenti, futhi ukulungiselelwa kokuhambisa ngaphansi kwe-Access Controls kunquma okutshelwa abanye: izindlela ezithunyelwa kumaklayenti ajwayelekile nemithetho yokufinyelela evumela ukuhamba okuvela kunethiwekhi zendlu enkulu. Vula ukuhambisa kunethiwekhi okufanele zifinyelele egatsheni, futhi gcina uhlu lufushane.

Umyalelo wendlela ye-Community onamatheliswe kufayela elikhiqiziwe awubambi iqhaza kule modeli. Umkhiqizo ungumnikazi wethebula lokuhambisa alithumelayo; umugqa ohlelwe ngesandla uyashintshwa.

Qedela izindlela zokubuya zazo zombili izethiwekhi

Uhlelo: indlunkulu 10.40.0.0/24, igatsha 10.60.0.0/24, ichibi le-VPN 10.90.0.0/24, futhi i-Access Server ifinyeleleka ngekheli langasese ohlangothini lwendlu enkulu. Irotha idinga izindlela zesiqalo segatsha nezechibi. Ngaphandle kwazo impendulo iphuma ngegesi elizenzakalelayo, okudala ukuxhumana okuvulekile ingxenye.

Egatsheni i-connector kufanele idlulisele amaphakethe angaqondiswanga kuyo: ukudlulisela kwe-IP ku-OS yayo kanye nemvume ebekelwe i-tunnel ne-LAN interfaces; ku-Linux yi-net.ipv4.ip_forward=1 nemithetho yeketanga elithi forward, ku-Windows yi-routing and remote access. Bese iziphetho zidinga indlela yokubuya: i-connector iyigesi yazo elizenzakalelayo, noma igesi ekhona ithwala izindlela eziqondile.

Ithebula lokuhambisa le-connector alilungisi isiphetho ngasinye ku-LAN yegatsha. Uma iziphetho zikhomba kwenye irotha, izindlela zokubuya zingezayo, futhi kufanele yamukele ukuthi ikheli lomthombo elibonayo akulona umakhelwane ku-subnet yendawo.

Funda ukwehluleka njengendlela

Hlola ngokulandelana okumisiwe. Kuqala insiza evunyelwe isuka ku-Access Server iya esiphethweni segatsha, bese kuba yiyo leyo nsiza isuka esiphethweni esijwayelekile sendlunkulu, bese kuba uhlangothi oluphambene uma inqubomgomo ivuma. Uma eyokuqala idlula eyesibili yehluleka, izindlela ezithunyelwe noma imithetho yokufinyelela iyona nkinga. Uma zombili zidlula kodwa izimpendulo zingafiki, hlola ukudlulisela egatsheni nendlela yokubuya endlunkulu.

I-firewall yesiphetho iwumsolwa olandelayo, ngoba ekufinyeleleni okuhambisiwe indawo ekuyiwa kuyo ibona ikheli lendlu enkulu noma lechibi njengomthombo. Umthetho obhalelwe i-subnet yendawo ngeke uhambisane.

Amadizayini amabili adinga okwengeziwe. Iziqalo ezigqagqene zenza indawo ekuyiwa kuyo ingacaci futhi kudinga ukubalwa kabusha noma ukuhunyushwa; i-Access Server yeqembu idinga ukuthi inodi ngayinye ibe nendlela esebenzayo eya ku-connector. Sebenzisa izinguquko ngendlela ejwayelekile yokugcina, xhuma kabusha i-connector futhi uqinisekise kuzo zombili izinhlangothi.

Isifundo se-site-to-site se-Access Server sibala ukulungiselelwa okufanayo ngokulandelana komkhiqizo.