I-CIDR yeqembu le-Access Server: amakheli amalungu noma inethiwekhi yezinsiza
I-CIDR yeqembu ingase iqambe iphuli yomhubhe noma i-LAN okuyiwa kuyo, futhi lezi akufani neze. Hlukanisa ukwabiwa, imithetho yokufinyelela kanye nobunikazi begatsha.
Eqenjini le-Access Server izinkambu ezimbili zamukela i-CIDR futhi uma kubhekwa okokuqala zibonakala ziyinto eyodwa yokufaka: enye ichaza amakheli anikezwa amalungu e-VPN, enye ichaza amanethiwekhi amalungu angafinyelela kuwo. Ukugcwalisa inkambu engalungile kwamukelwa ngaphandle kwephutha, futhi yikho okwenza leli phutha libize. Eyokuqala ishintsha uhlelo lwamakheli omhubhe, eyesibili inquma ukuthi yiziphi izindawo ekuyiwa kuzo ezivunyelwe, futhi akukho okusikisela okunye. Kukhona nento yesithathu abantu abayihlanganisa nalezi ezimbili, okuyi-subnet engemuva kwesango legatsha, futhi ayisiyo yanoma iyiphi inkambu.
Isakhiwo esifanayo, imibuzo ehlukile
Buza ukuthi inani liqamba ini. I-CIDR yamakheli amalungu iphendula umbuzo wokuthi yimaphi amakheli angaphakathi amatholakala amaklayenti axhumayo, futhi umshini wokwaba uwusebenzisa ngaphambi kokuthi noma yikuphi ukuhamba kugeleze. I-CIDR yensiza iphendula ukuthi yiziphi izindawo ekuyiwa kuzo leli qembu elingazisebenzisa, futhi imithetho yokufinyelela iyisebenzisa lapho iphakethe lihlolwa. Enye incazelo yephuli, enye imvume.
Imiphumela yokuhlanganisa iyaphikisana. I-LAN okuyiwa kuyo enamathiselwe enkambini yephuli inganikeza amakheli asevele ekhona kuleyo LAN futhi idale ukuziphatha kwamakheli aphindwe kabili, noma isuse iphuli ukuze imithetho yonke yodonga lomlilo ebhalelwe ibanga elidala yephuke buthule. Iphuli enamathiselwe emthethweni wokufinyelela alinikezi lutho olusizo, ngoba akukho ndawo okuyiwa kuyo ehlala lapho. Womabili amaphutha abonakala ngendlela efanayo: umhubhe uphakeme kodwa kukhona okungalungile.
Ukwabiwa: isikhala samakheli samalungu
Iphuli akumele lihlangane nanoma iyiphi i-LAN ilungu elingafinyelela kuyo noma nenye iphuli ye-VPN ekusetshenzisweni. Lona umkhawulo wokuhlela, hhayi isilungiselelo somkhiqizo: uma izindawo ezimbili zisebenzisa i-10.90.40.0/24 yamalungu, ilungu lesizinda esisodwa alikwazi ukuhambisa ngomzila liye kwesinye ngaphandle kokuhumusha, futhi awukho umthetho wokufinyelela okulungisayo.
Indlela yokwaba nayo ibalulekile. Iphuli eliguqukayo linikeza ilungu ngalinye ikheli elilandelayo elikhululekile, kuyilapho ukwabiwa okungaguquki ngomsebenzisi kuyalibopha. Ukwabiwa okungaguquki yikho okudingayo lapho imithetho yodonga lomlilo noma ukuqapha kubhekisa kumalungu ngamanye, futhi kwenza ukushintsha kohlelo lwamakheli kubonakale: ikheli eliboshiwe lisekhona kuphuli elisha noma cha. Funda ikheli lomhubhe welungu elilodwa elixhunyiwe ngaphambi nangemuva kwanoma yiluphi ushintsho kule nkambu.
Imvume: amanethiwekhi okuyiwa kuwo asemthethweni wokufinyelela
Ukufinyeleleka kuvezwa emthethweni wokufinyelela, oqamba iqembu noma abasebenzisi, inethiwekhi noma isevisi okuyiwa kuyo kanye nendlela yokufinyelela. Leyo ngxenye yokugcina iyindawo lapho izilungiselelo eziningi ezingaqediwe zifa khona: umthetho ungasunduza ukuhamba uye endaweni okuyiwa kuyo noma kwenze i-NAT, futhi kokubili kudinga izinto ezihlukile kunethiwekhi. Indlela esetshenzisiwe idinga ukuthi uhlangothi lwendawo okuyiwa kuyo lwazi ukuthi kubuyiselwa kanjani ukuhamba kuphuli ye-VPN, kuyilapho indlela ye-NAT ifihla amalungu ngemuva kwekheli inethiwekhi eseyithembile. Imibhalo yamaqembu e-Access Server igcina inethiwekhi yeqembu ihlukile emthethweni wokufinyelela weqembu, futhi amalebula asuke phakathi kwezinguqulo.
Indawo okuyiwa kuyo evunyelwe isadinga indlela esebenzisekayo. Umthetho uvumela, umzila uletha, indlela yokubuya iyaphendula futhi isevisi kusibambi iyamukela. Izinto ezine, izindawo ezine zokubheka, futhi eyokuqala kuphela ekhona emthethweni wokufinyelela. Imvume eluhlaza kanye ne-traceroute efile ngokuvamile kusho ukuthi indlela yokubuya ayikho esangweni lendawo okuyiwa kuyo, hhayi ukuthi umthetho awulungile.
Into yesithathu: i-subnet yegatsha ngemuva kwesango
Ukumemezela ukuthi iklayenti elithile lingumnikazi we-subnet isitatimende somzila mayelana nendawo, hhayi ukwabiwa kwamakheli futhi hhayi imvume. Ngamagama e-Access Server lokhu ukulungiselelwa kwesango okusekelwayo kwenethiwekhi exhumayo, futhi kukhona ngoba umhambisi wegatsha angamemezela i-LAN engemuva kwakhe. Amalungu asathola amakheli kuphuli, futhi asadinga umthetho wokufinyelela ukuze asebenzise leyo LAN yegatsha.
Ukugcina lezi zintathu zihlukile kuyakhokhela ekubuyekezweni. I-subnet yegatsha ebhalwe njengesikhala samakheli amalungu eqembu ibonakala ilungile esithombeni sesikrini futhi yephula ukwabiwa kwawo wonke umuntu eqenjini. Leyo subnet efakwe kuphela emthethweni wokufinyelela inikeza ukufinyelela ngaphandle kwesitatimende sobunikazi, ngakho ukuhamba okubuyayo akunandawo okungaya kuyo. Beka into ngayinye kukholamu yayo ekwakhiweni futhi lelo phutha ngeke lisakwenzeka.
Ungazi kanjani ukuthi ubheke yiphi
Funda ilebula kanye nomakhelwane balo. Inkambu eseduze kwendlela yokwaba, usayizi wephuli noma ukweqa ngomsebenzisi imayelana nokwabiwa. Inkambu eseduze kwesikhethi seqembu, isevisi noma imbobo kanye nendlela yomzila imayelana nemvume. Izinguqulo zishintsha amagama, kodwa omakhelwane bahlala cishe endaweni yabo, yikho amazwi asesithombeni sesikrini esidala ayisiwo umhlahlandlela omuhle wokuzulazula.
Bese uqinisekisa ngelungu elilodwa esikhundleni seqembu lonke: iqembu lalo elisebenzayo, ikheli lomhubhe elabiwe kanye nomthetho ogunyaza indawo okuyiwa kuyo ehlosiwe. Qinisekisa umzila, i-NAT noma indlela esetshenzisiwe, ukuhamba okubuyayo kanye nemvume yesevisi ngaleyo ndlela, futhi shintsha kuphela inkambu ehambisana nokungafani okubonisiwe. Gcina amarekhodi okwabiwa kanye nemvume ehlukile ngemuva kwalokho, ukuze ushintsho lwephuli lwakamuva lungafundwa njengoshintsho kulokho iqembu elingafinyelela kukho.