Nikeza izingqimba ze-LAN indlela yokubuya ye-VPN ngokukhetha 121 kwe-DHCP

Amaklayenti e-VPN akude ayaxhuma, iseva ye-LAN iyaphendula, futhi impendulo iphuma ngomgwaqo ojwayelekile we-inthanethi bese ifela lapho. Iseva eyodwa ingalungiswa ngendlela eqinile, kodwa isethi yonke yamanethiwekhi angaphansi kungcono ukuyiphatha lapho isivele ithola khona ukulungiselelwa kwayo kwenethiwekhi. Ukukhetha 121 kwe-DHCPv4 kusabalalisa kahle leyo ndlela yendawo ekuyiwa kuyo, futhi lena ingxenye abantu abavame ukuyenza iphutha ngaso leso sikhathi lapho bekhohlwa okumisiwe. Isibonakaliso ukuhamba kwendlela eyodwa: izicelo ziyafika kanti izimpendulo ziyanyamalala.

Qala ubize amakheli amathathu

Thatha i-LAN eqondile: 192.168.50.0/24 nomgwaqo ojwayelekile okumisiwe ku-192.168.50.1 kanye nesango le-VPN elihlukile ku-192.168.50.2. Amaklayenti akude aqinisekisiwe athatha 10.90.0.0/24.

Indlela edingwa yiyingqimba ngayinye ebamba iqhaza yi-10.90.0.0/24 via 192.168.50.2. Indawo ekuyiwa kuyo iqoqo lamaklayenti, futhi igxathu elilandelayo ikheli le-LAN lesango, hhayi ikheli laso lomhubhe.

Yikode njengendlela eqinile engenazo izigaba

Ukukhetha 121 kuthwala amabhangqa esiqalo negxathu elilandelayo, futhi RFC 3442 ichaza kokubili ukukhoda nokuziphatha kweklayenti okulandelayo. Esimweni esikhona se-dnsmasq esisebenza kuphela le-LAN eyisibonelo, uhlobo lokulungiselelwa yilolu:

dhcp-option=121,10.90.0.0/24,192.168.50.2,0.0.0.0/0,192.168.50.1

Lokhu kucezu, hhayi insizakalo entsha ye-DHCP. Kuseva ephethe izingxenye eziningi, khawulela ukukhetha ngamathegi noma ngenqubomgomo yenethiwekhi osekuyisebenzisayo. Gcina ukulungiselelwa kwangaphambilini eduze, ngoba ukukuhoxisa kusho okunye ukuvuselelwa kwesivumelwano, hhayi ukuqala kabusha.

Ungalahlekelwa indlela ezenzakalelayo

Lona umgibe. Iklayenti elithola ukukhetha 121 kufanele lingakunaki ukukhetha okujwayelekile kwe-Router, ngakho ukumemezela kuphela indlela yeqoqo le-VPN kungase kushiye leyo ngqimba ingenayo nhlobo indlela ezenzakalelayo. Umshini usabonakala ulungisiwe futhi ulahlekelwa i-inthanethi buthule. Abasebenzisi bakuchaza njengokuthi inethiwekhi iphansi kuyilapho zonke izixhumanisi zivuliwe.

Faka okumisiwe okuhloswe kukho ohlwini olufanayo, njengoba kwenza ucezu olungenhla. Gcina futhi ukukhetha okujwayelekile kwe-Router endaweni yako, kumaklayenti angakusebenzisi ukukhetha okungenazigaba; ukuphathwa kokukhetha kweseva ngokwayo kunquma ukuthi kuthunyelwa ini kubani.

Hlola lokho iklayenti elizokwamukela

Ingqimba enekheli elibekwe ngesandla ayikutholi lokhu nhlobo, ngoba ayiceli isivumelwano. Ukusekelwa kwamaklayenti nakho kuyahluka, ngakho hlola kusistimu yokusebenza oyisebenzisayo ngempela esikhundleni sokucabanga ukuthi yonke idivayisi ihlonipha ukukhetha 121. Qinisekisa nabantu abanazo lezo seva ukuthi ziphi ezinekheli eliqinile. Lezo zingqimba zidinga okwazo okufakiwe kwendlela, kungenjalo ngeke zihlanganyele.

Izinsizakalo ze-DHCP eziphethwe zingenye imingcele. Amanye amanethiwekhi efu awavumeli abaphathi ukuthi bashicilele ukukhetha okungahleliwe, futhi iseva ye-DHCP eqhudelanayo esigabeni esifanayo yimbi kunokungabi nakho ukukhetha nhlobo.

Qinisekisa isivumelwano, bese ukusesha

Cela umnikazi we-DHCP ukuthi asebenzise ushintsho, bese uvuselela isivumelwano kuklayenti. Izivumelwano ezikhona zigcina ukulungiselelwa kwakudala kuze kuvuselelwe, ngakho imiphumela esheshayo ayiqinisekisiwe.

Kuklayenti le-Linux, funda izindlela zangempela bese uqinisekisa kokubili okufakiwe:

ip -4 route
ip -4 route get 10.90.0.23

Ukusesha okusekelwe kumongo kufanele kubonise indlela yeqoqo nge-192.168.50.2 kanye nokumisiwe nge-192.168.50.1. Uma okumisiwe kungekho, usiphindile umgibe ongenhla.

Bese uhlola ukushintshana kwangempela

Ukusabalaliswa kwezindlela akulona lonke uhambo. Isango elihlukile lisadinga ukudlulisela, ubunikazi bozakwethu abakude kanye nenqubomgomo yokufinyelela evumela iseva, futhi i-DHCP ayiqinisekisi muntu.

Ekugcineni, gcina uhlelo lokususa. Indlela eqinile efundiwe ayizihoxisi yona uma i-VPN iwa, ngakho igxathu elilandelayo eliphelelwe yisikhathi lingenza leso siqalo sibe umgodi omnyama isikhathi eside ngemva kokunyamalala komhubhe.