I-DHCP ngaphesheya kwe-VPN: ukwakha ibhuloho noma ukudlulisa isicelo?

I-laptop entsha engaphesheya komhubhe ayitholi ikheli, kanti iyona kanye i-laptop iyasebenza ekomkhulu. Umcabango wokuqala ojwayelekile ukuthi umhubhe uvimba i-DHCP. Ezikhathini eziningi ukusakaza kwakungakaze kube nomzila: iklayenti elingakalungiswa lithumela ku-255.255.255.255, futhi i-router ye-IP evamile ayikudlulisi leyo phakethe. Umhubhe wenza kanye lokho okwenza umhubhe ohamba ngomzila.

Imiklamo emibili ingakushintsha lokho, futhi ayilingani. Eyodwa ithwala ukusakaza; enye idlulisa isicelo.

Ukusakaza akukaze kweqe i-router

Iklayenti le-DHCPv4 elingenakheli lithumela lisuka ku-0.0.0.0 liya ekhelini lokusakaza elilinganiselwe kumachweba e-UDP 67 no-68. Leyo phakethe ihlala kusixhumanisi sayo ngokomklamo. I-router engayidlulisa ibingagcwalisa yonke ingxenye eyisebenzelayo.

Ngakho-ke umhubhe ohamba ngomzila osuka esizeni uya esizeni uxhuma i-relay nesiphakeli. Awukhulisi isizinda sokusakaza sekilayenti, futhi awukho umthetho we-firewall ozokwenza lokho.

Ingabe umhubhe onebhuloho wengeza ini ngempela

I-VPN eyakhiwe ibhuloho ngamabomu ingathwala ukusakaza kwe-Ethernet ngaphakathi kwethopology exhaswayo, bese i-DHCP idlula njenge-traffic yendawo. Lona iyindlela yangempela yokwenza, kodwa isinqumo somklamo wengqimba 2. Ukhulisa isizinda sokwehluleka nomngcele wokufinyelela kanye nokusakaza.

Ukwakha ibhuloho kushintsha futhi ukuthi isiphepho sokusakaza, ukuskena kwe-ARP noma isiphakeli se-DHCP esikhohlisayo kungafinyelela kuphi. Uma ubungeke uxhume ihhovisi elikude ku-switch efanayo, ungakhi ibhuloho kumhubhe ngenjongo yokwaba izindawo kuphela. Hlola lowo mkhakha womthelela ngaphambi kokuwuvula.

Isinqumo esikhulu kunokunikeza ikheli, futhi kufanele sithathwe ngamabomu.

Esikhundleni salokho dlulisa isicelo

Impendulo ejwayelekile i-relay kwinethiwekhi yendawo yekilayenti. Yamukela ukusakaza, ikuguqula kube isicelo se-unicast, futhi ibeka ikheli layo enkambeni yekheli lesango. Isiphakeli siphendula kulelo kheli le-relay.

Ehhovisi elikude eliyisibonelo, i-relay ihlala ku-LAN yehhovisi futhi isiphakeli sifinyelelwa nge-VPN yesayithi. Lungisa ububanzi balelo hhovisi, ubunikazi be-relay nesiphakeli, nomzila ophelele wokubuya. Ukuvumela i-UDP 67 ngomhubhe akutsheli isiphakeli ukuthi kusetshenziswe yiphi ichibi.

I-relay edlulisayo kodwa engalokothi ithole impendulo ngokuvamile iyinkinga yomzila wokubuya. Hlola umzila obuyayo oya ekhelini le-relay ngaphambi kokushintsha ububanzi.

Ehlukanisa i-DHCP ne-ARP kanye nokwabiwa kwamakheli omhubhe

I-DHCP ihamba phezu kwe-UDP/IP. Ku-Ethernet, umphathi angase asebenzise i-ARP ukuhlola ukuthi ikheli elihlongozwayo selivele lisetshenziswa. Lokho kuhlola kokungqubuzana kungumsebenzi ohlukile wasendaweni yesixhumanisi, hhayi ukuthutha kwemilayezo ye-DHCP. Ukuthi i-DHCP iyi-ARP ngokuyisisekelo akulungile; ukuthi zombili azihlobene neze kubanzi kakhulu.

Iklayenti le-VPN lingathola ikheli lomhubhe livela kuphrothokholi ye-VPN noma echibini lesiphakeli uqobo esikhundleni kokusakaza kwe-DHCP. Inketho ene-DHCP egameni layo ingachaza izilungiselelo zekilayenti ezicindezelwe, hhayi iphakethe le-DHCP elidlulisiwe. Hlola ichibi lesiphakeli ngaphambi kokucabanga ukuthi i-DHCP iyabandakanyeka.

Qopha inethiwekhi yomamukeli, umnikazi wokwabiwa, ububanzi, ukuthi ikhona yini i-relay, nokuziphatha okulindelekile ngesikhathi sokuphazamiseka. Bese uhlola isivumelwano esisha nokuvuselelwa ngalowo modeli. Uma amasayithi amabili engakhonza ichibi elifanayo elingaphathwanga, unokungqubuzana okulindele i-laptop yokuqala ehambayo.