Ama-VLAN amaklayenti noma i-trunk enamathegi: khetha imodi ye-OpenVPN efanele

Izicelo ezimbili zifika ngamazwi acishe afane: faka iklayenti ngalinye le-VPN ku-VLAN ekhethiwe, noma thwala i-trunk ye-VLAN ekhona idlule ku-VPN. Lezi zinto ezimbili ezihlukene. Imodi ye-OpenVPN eyakhelwe ngaphakathi eqaphela i-VLAN iyimodeli yeswishi yesicelo sokuqala, futhi ayilona igama elifanayo lokuthutha amathegi okusobala. Ukukhetha okungalungile kukhiqiza isakhiwo esibonakala silungisiwe kodwa silahla buthule amafreyimu obukade uwakhathalele.

Yini eyakhiwe yimodi eqaphela i-VLAN

Lapho i-vlan-tagging ivuliwe ekusetshenzisweni kwe-TAP kweseva kuphela, i-daemon yenza imodeli yedivayisi yayo ye-TAP kanye neklayenti ngayinye exhunyiwe njengamachweba eswishi yangaphakathi. Amachweba amaklayenti awanamathegi, futhi ukuxhumana kwawo ne-VLAN kusethwa kuseva ngokusebenzisa umongo we-vlan-pvid weklayenti ngalinye, hhayi ngento ethunyelwa yiklayenti. Yiyo yonke inhloso yemodeli: ubulungu isinqumo sohlangothi lweseva mayelana nozakwabo oqinisekisiwe. Akukho lutho kuphrofayela yeklayenti okudinga ukwazi ukuthi ikuyiphi i-VLAN.

Uhlangothi lwe-TAP lweseva luthola inqubomgomo yalo yokwamukela enamathegi noma engenamathegi ngokusebenzisa i-vlan-accept. Ukudluliswa ngaphakathi kwaleyo swishi kwenzeka kuphela phakathi kwama-VID afanayo, kuhlanganise nalapho i-client-to-client isethiwe, ngakho amaklayenti amabili kuma-VLAN ahlukene awakwazi ukufinyelelana ngokusebenzisa iseva nakuba womabili exhunywe kuyo.

Leyo modeli iyimodeli yechweba lokufinyelela. Amafreyimu aphuma eklayenti awanamathegi, futhi ukuxhumana kuyaphoqelelwa yiseva ngokusekelwe kubunikazi. Ukucela ikhompyutha ephathekayo ukuthi inamathisele ithaghi kuyo yona ngokwayo ukuthutha kwayo kusho ukucela esinye isakhiwo.

Izabelo kumele zilande ubunikazi beklayenti obuqinisekisiwe, hhayi inani iklayenti elinikezayo ngokwalo. Isabelo esishiyiwe futhi asiso esimo sokuhlukaniswa: iklayenti liwela ku-PVID ezenzakalelayo, ngakho ukungabikho kombhalo we-ccd yisinqumo somgomo esithule, hhayi esingathathi hlangothi.

Yini edingwa yi-trunk esobala esikhundleni salokho

Ukuthwala amafreyimu asenamathegi esikhathi eside ukusuka ekugcineni kuya ekugcineni kuqala ngokucisha ukucubungula okuqaphela i-VLAN. Imodeli yeswishi nokugcinwa kwamathegi kuyizindlela ezihlukene, futhi ukuvula kokubili kucela isici esisodwa senze umsebenzi wesinye.

Ukuvala kuwukuqala kuphela. Ibhuloho ekugcineni ngakunye namachweba eswishi angokwenyama kumele avumelane ukuthi yimaphi ama-VLAN avunyelwe, iliphi ithaghi elomdabu, nokuthi amafreyimu angenamathegi aphathwa kanjani. Ukunweba i-trunk engenamingcele kubeka obala izizinda zokusakaza eziningi kakhulu kunalezo ezimbili obukade ufuna ukuzixhumanisa.

Usayizi wefreyimu udinga isabelomali sawo. Ifreyimu ye-Ethernet enethaghi kanye nokugoqwa kukhulu kunenombolo yomthwalo owusizo abantu abayikopisha encwadini yokuhola, futhi i-MTU eyayilungele umhubhe ohleliwe akuyona ubufakazi bokuthi indlela ye-trunk iyasebenza.

Imibandela emithathu enquma impendulo

Okokuqala, ingabe ingqalasizinda yeklayenti iyayisekela i-TAP nhlobo? I-Android ne-iOS aziyisekeli, futhi ukusekelwa kwe-macOS kunomkhawulo, ngakho iqembu labasebenzisi beselula liyakhipha zombili izakhiwo ze-TAP, kungakhathaliseki ukuthi ama-VLAN ahlelwe kanjani. Isikhathi se-TUN esihleliwe sithwala amaphakethe e-IP, hhayi amafreyimu e-Ethernet, futhi akukho kulungiswa kwe-VLAN ohlangothini lweseva okushintsha lokho. Hlola iqembu ngaphambi kokuklama i-topology, ngoba lesi yisimo esingakwazi ukugwenywa. Futhi yisimo esivame ukutholwa ngemuva kokuphela komsebenzi weswishi.

Okwesibili, ubani owabela i-VLAN? Uma impendulo ithi «iseva, ngokusekelwe kulowo oqinisekisile», imodeli yeswishi iyafaneleka. Uma impendulo ithi «ingqalasizinda yeswishi ekhona, namathegi asevele ekhona», udinga isakhiwo se-trunk.

Okwesithathu, ingaki yengxenye yenethiwekhi okufanele ifinyeleleke? Imodeli yeswishi igcina iklayenti ngalinye ku-VLAN eyodwa ngokwakhiwa kwayo. Isakhiwo se-trunk siyibhuloho, futhi ibhuloho elilungiswe ngokungalungile lihlanganisa izizinda zokusakaza obekufanele zihlale zihlukene.

Ukuhlola ukukhetha okwenzile

Xhumanisa iklayenti elilodwa okufanele libe ku-VLAN evunyelwe nelinye okungafanele libe khona, bese uhlola kusukela ekugcineni kwangempela hhayi kusukela kuseva uqobo. Ukufinyeleleka ohlangothini lweseva kufakazela ukuthi ibhuloho noma iswishi ikhona; akufakazeli ukuthi iklayenti lawela kuyiphi i-VLAN.

ip -d link show tap0
bridge vlan show

Kuseva, umyalo wesibili ukhombisa ubulungu be-VLAN bechweba ngalinye lebhuloho, kuhlanganise nokuthi ichweba linethaghi yini. Qhathanisa lokho nesabelo obukade usihlosile ngaphambi kokuxazulula noma yini engaphezu kwegxatho lesibili.

Bhala ukuthi yisiphi salezi zakhiwo ezimbili esisetshenziswa ukusetshenziswa. Inothi elithi «iqaphela i-VLAN» alicacile, futhi unjiniyela olandelayo uzothatha lokho akufunda kuqala. Incwadi yereferensi ye-VLAN ye-OpenVPNichaza ukuziphatha kweswishi kanye nomongo weklayenti ngalinye, futhi iyindlela emfushane yokuqinisekisa ukuthi isiphi isakhiwo osisebenzisayo.