Ukuvula isango le-VPN akukwenzi amaklayenti afinyelele ku-LAN

Umthetho wokungena uvumela amaphakethe aqondiswe kugethiweyi ngokwayo. Ukuhamba kweklayenti kuye kwelinye ihosi kudinga ukudluliswa, umzila kanye nendlela yokubuya, okuhlolwa ngokwehlukana.

Ithuneli liyenyuka, iklayenti liyaziqinisekisa, kodwa i-LAN engemuva kwegethiweyi ihlala ingabonakali. Umthetho obekufanele ulungise lokhu uvumela isango le-VPN futhi usebenza ngqo njengoba ubhaliwe, ngoba lowo mthetho ulawula amaphakethe aqondiswe kugethiweyi ngokwayo. Ukuhamba kweklayenti kuye kwehosi engemuva kwegethiweyi kunenye indawo nenye uchungechunge. Ukungena okuphumelelayo akushintshi ukuthi i-kernel ibheka luphi kulezi zimbili.

Imigqa emibili, izindawo ezimbili ezihlukene

Isiphetho sephakethe sinqunywa yilapho liya khona, hhayi indlela elafika ngayo. Ukuhamba okuqondiswe ekhelini elikugethiweyi kuhanjiswa endaweni futhi kuhlolwe ngemithetho yokungena. Ukuhamba okudluliswa igethiweyi kuhlolwe ngemithetho yokudlulisa. Isixhumanisi sethuneli esisodwa singakhiqiza zombili izinhlobo zamaphakethe, ngakho umthetho owodwa awukwazi ukumboza imisebenzi yomibili.

Indaba yonke emshweni owodwa: ukuvumela umlaleli akusho lutho mayelana nokuvumela inethiwekhi engemuva kwakhe. Lezi izinqumo ezimbili ezihlukene ezinobufakazi obuhlukene, futhi igama lesixhumanisi kuzo zombili alizihlanganisi.

Umthetho womlaleli uvumela ini ngempela

Amaphakethe omlaleli aphelela enqubweni ye-VPN, futhi yikho okwenza kube nokwenzeka ukwakha ithuneli. Ikhasi lokuphatha legethiweyi nempendulo yokuxilonga yasendaweni nakho kusebenzisa indlela yokungena yehosi uqobo, ngakho ukuhlolwa okuya kugethiweyi kuyaphumelela kuyilapho konke okungemuva kwakho kwehluleka. Yomibili imiphumela ilungile futhi akukho okukhuluma nge-LAN.

Lapho inqubo ikhipha ukuhamba kweklayenti kusikhwama ukuze kuqondiswe kwenye indawo, iphakethe lingena emzileni wokudlulisa futhi lidinga imvume lapho. Ukuqinisekisa okuphumelelayo kunquma ukuthi iklayenti ungubani; akunqumi ukuthi lingaya kuphi. Imibuzo emibili inabanikazi, amarekhodi nemilayezo yephutha ehlukene.

Hlola kusuka kuklayenti, ungalokothi uhlole usuka kugethiweyi

Ukuhlolwa okwenziwe kugethiweyi kulandela indlela yokuphuma yehosi uqobo futhi kungaphumelela nakuba umzila wokudlulisa uvaliwe. Qala ukuhlolwa kusuka kuklayenti bese ubheka zombili iziphetho zokugeleza.

nc -vz 10.40.7.25 445
tcpdump -ni tun0 host 10.40.7.25

Uma isicelo sibonakala ku-tun0 futhi akukho okufinyelela endaweni ekuyiwa kuyo, iphakethe liyaphonswa ngemva kokufika, lokhu okukhomba emithethweni yokudlulisa noma ekuhlungweni kwendawo uqobo. Uma kungabonakali lutho ku-tun0, iklayenti alikuthumeli ngisho ethunelini, futhi inkinga isemzileni kuklayenti hhayi kunqubomgomo yegethiweyi. Qhathanisa nesicelo esiphuma ngendlela efanele futhi esingabuyiseli lutho, okuyicala lomzila wokubuya.

Ukudlulisa kudinga izinto ezintathu, hhayi eyodwa

Ukudlulisa ku-kernel kufanele kuvulwe, umthetho wokuhlunga kufanele wamukele ukugeleza, futhi indawo ekuyiwa kuyo kufanele ifinyeleleke futhi ibe nomzila wokuthi impendulo ibuye. Uma kukhishwa okukodwa kwezintathu, ukuthula kuyafana ngokombono weklayenti.

sysctl net.ipv4.ip_forward
sudo iptables -S FORWARD
sudo iptables -S INPUT

Funda imiphumela emithathu ndawonye. Uziro kowokuqala wenza eminye emibili ingabi nandaba, futhi inqubomgomo yokulahla ezenzakalelayo kowesibili ilahla amaphakethe eklayenti kuyilapho ukuhamba kwegethiweyi uqobo kuqhubeka nokusebenza. Umphumela wesithathu ukhombisa ukuthi kungani umthetho womlaleli ungazange ube inkinga.

Gcina amaqoqo amabili emithetho ehlukene emibhalweni

Bhala umthetho womlaleli nomthetho wensizakalo edluliswayo emigqeni ehlukene, nabanikazi nezizathu ehlukene. Lapho isango le-VPN lishintsha noma kumenyezelwa insizakalo entsha, lokho kwehlukanisa kuvimbela ukuthi ushintsho olulodwa lwandise olunye buthule.

Esikhundleni sokuthatha wonke umlingani oqinisekisiwe njengelungu le-LAN elithenjwayo, sebenzisa imithetho emincane yamabanga eklayenti nezinsizakalo ezizidingayo. Amanothi okudlulisa e-StrongSwan achaza uhlangothi lomzila wokubuya nokuhumusha kwalo mkhawulo, okuphinde kube isinqumo sesithathu.

Ekugcineni, gcina izingqimba ziqondile lapho umsebenzisi enqatshwa. Uma isicelo sifinyelela kuhosi futhi uhlelo lwenqaba i-akhawunti, lungisa imvume yohlelo kulelo ngqimba; ukwandisa ukudlulisa akukwazi ukunikeza ubufakazi bokwabelana ngamafayela futhi kuzokwandisa ukufinyelela kubo bonke abanye abaxhuma ngempumelelo.

Izihloko ezihlobene