Imodi yebhuloho akuyona i-VPN pass-through: yini umunye ushintsha
Imodi yebhuloho ishintsha indima yokudlulisa yerawutha; i-pass-through ivumela kuphela i-VPN yeklayenti ukuba idlule kuyo. Akukho okwakha ithumbu, ngakho azikwazi ukushintshana.
Imodi yebhuloho ne-VPN pass-through zikhulunywa emucu owodwa wokuxazulula izinkinga ngoba zombili zihlongozwa njengekhambi le-VPN engaxhumani. Zichaza imisebenzi ehlukene yerawutha, futhi akukho okwakha ithumbu le-VPN lodwa. Ukwakha ibhuloho kushintsha indlela idivayisi ehlanganyela ngayo nezingxenye zenethiwekhi noma ukuthi ngubani owenza umzila; i-pass-through inquma ukuthi ithrafikhi ye-VPN yeklayenti ingawela igethiweyini yini. Ukukhetha okungalungile kuphendula inkinga encane ibe yintambama yonke yokwaba ikheli kabusha.
Amalebula amabili, imisebenzi emibili ehlukene
Isivivinyo silula: ingabe uzama ukushintsha ukuma kwenethiwekhi, noma ukuvumela ithrafikhi esivele ikhona ukuba idlule kuyo? Leyo yizicelo ezihlukene ezinemiphumela ehlukene.
Ukuqhathanisa kuthebula elilodwa:
| Setting | What it actually does |
|---|---|
| Bridge mode | Changes the device's forwarding role: a modem bridge hands routing and NAT downstream, a software bridge joins selected interfaces |
| VPN pass-through | Lets a client's VPN traffic cross the router; the credentials and encryption stay with the client |
| Router VPN client | Terminates the tunnel on the router, so the router becomes the endpoint |
| Router VPN server | Accepts inbound tunnels, which needs an upstream path that can reach it |
Yizona ezimbili zokugcina kuphela ezakha ithumbu kuyirawutha. Ukwakha ibhuloho ne-pass-through zombili zishiya iphuzu lokugcina kwenye indawo, yingakho kungekho okungaxazulula inkinga ebangelwa iklayenti engekho noma iseva engafinyeleleki. Kukhulupheleka kalula ukulahlekelwa yilo mehluko ngoba izilungiselelo ziseduze kwenye kwezinye kusixhumi esisodwa. Bhala ukuthi iyiphi indawo yokugcina engumnikazi wethumbu ngaphambi kokuvula lelo khasi.
Nebhokisi lokumaka le-pass-through aliyona incazelo ephelele yokusekelwa kwephrothokholi. Ukudlula kwe-NAT kwe-IPsec yesimanje kusebenzisa ukugoqwa kwe-UDP okujwayelekile, kanti izici zosizo zakudala zinomkhuba oncike ekusetshenzisweni.
Ilebula lokumaketha elithi kusekelwa i-VPN alikutsheli ukuthi iyiphi kulezi zindima ezine eliyishoyo.
Yini imodi yebhuloho eyishintshayo kudivayisi yakho
Kumodemu noma kurawutha, inketho yebhuloho ngokuvamile ihambisa umthwalo womzila ne-NAT kwenye igethiweyi engezansi. Kudivayisi yesofthiwe kungase kusho ukuhlanganisa izixhumi zasendaweni ezikhethiwe zibe yisizinda esisodwa sokusakaza. Ububanzi obunembile buncike kumkhiqizo, ngakho funda imibhalo yalelo modeli hhayi yalelo gama. Zombili izincazelo zishintsha ukwabiwa kwamakheli, imingcele yefayela kanye nendlela ofinyelela ngayo ekuphathweni.
Yikho lokho okugcina okwenza ukwakha ibhuloho kube yimpendulo yokuqala embi ekwehlulekeni kwe-VPN. Ungalahlekelwa umzila wokuphatha kuyilapho inkinga yasekuqaleni ingakaxazululeki.
Gcina ikhophi yokulondoloza yokuhlelelwa ngaphambi kokushintsha indima yenethiwekhi, ngoba ukwabiwa kwamakheli kungahamba nayo.
Khetha indima ngaphambi kwesilungiselelo
Ukuze uthumele ithrafikhi yasekhaya ngokuphuma kwangaphandle, udinga iklayenti le-VPN elihambisana nerawutha, hhayi ibhuloho. Ukuze uxhume futhi ekhaya usuka kwenye indawo, udinga indima yesiva kanye nomzila ophezulu ongayifinyelela. Lezi zimfuno ezimbili cishe azinalutho olufanayo ngaphandle kwegama elithi VPN. Nquma ukuthi iyiphi oyakhayo ngaphambi kokubheka imenyu.
Idivayisi ingase isekele zombili izindima futhi ingakwazi ukusekela leyo oyidingayo ngesivinini osilindele.
Indima iyisinqumo somklamo; isilungiselelo siwumphumela waso.
Uma kuhluleka iphrothokholi eyodwa kuphela
Uma iphrothokholi eyodwa ihluleka ngemva kwerawutha esebenza kahle ngenye indlela, hlola kuqala ukuthutha nomzila we-NAT walevo phrothokholi. Ukushintsha yonke imodi yegethiweyi ukuze ulungise iklayenti eyodwa kufana nokwenza kabusha izintambo zendlu ngoba isibani siphukile. Hlola ukuthi ithrafikhi igoqiwe nge-UDP yini, ukuthi isici sosizo serawutha siyasebenza kuleyo phrothokholi yini, nokuthi ukwehluleka kuyalingana yini. Bese unquma ukuthi ukushintsha indima kufanelekile ngempela yini.
RFC 3948 ichaza ukugoqwa kwe-UDP okwenza i-IPsec iphile ngaphesheya kwe-NAT, futhi yilowo mthetho okufanele uwuhlole ngaphambi kokuthemba ibhokisi lokumaka le-pass-through.
Bhala lokho okushintshile nokuthi kungani, ngoba umuntu olandelayo uzothola idivayisi isemodini yebhuloho futhi acabange ukuthi kwakwenziwe ngamabomu. Umphumela ofanele iyinethiwekhi enokuma okukhethwe nguwe, hhayi leyo oyithole njengefa emhlanganweni wokuxazulula izinkinga.