Ilease lesipele ngemuva kokubuya kwe-tunnel yesizinda: ukuvuselela noma ukulinda?

Isixhumanisi sesizinda sisebenza, i-tunnel isunguliwe, kepha amakhompyutha egatsha awakakwazi ukufinyelela iseva yamafayela. Ngesikhathi sokuphazamiseka amawashi amabili ayegijima futhi elilodwa kuphela lawo eliqedile. I-tunnel yabuya lapho indlela ebethelwe ibuyile; ikheli leklayenti ngalinye libuya lapho ilease yalo yamanje iphela noma ishintshwa. Ukuqhathanisa leyo mikhondo emibili yesikhathi kuchaza igebe ngokushesha kunokufunda amalogi e-firewall.

Amawashi amabili, futhi elilodwa kuwo akuyo i-tunnel

Nge-DHCP phezu kwe-VPN kanye nokubuyisela kwasekhaya, idivayisi ingakhipha amalease asekhaya esikhashana ngesikhathi indlela ye-DHCP ekude ingatholakali. Isikhathi sesikhashana sivame ukubalwa ngamaminithi, okukufushane ngokwanele ukufihla inkinga futhi kukude ngokwanele ukudlula ukuphazamiseka okufushane. Lapho i-tunnel ibuya, ukubuyisela kuyeka ukunikeza lawo malease. Akungeni kuklayenti futhi akukhanseli ilease elinayo kakade. Lelo klayenti ligcina ikheli, imaski, isango kanye nesixazululi sazo kuze kube ukuvuselela noma ukuphela, yingakho i-tunnel enempilo kanye nekhompyutha eyephukile kungaba ndawonye phakathi nesikhathi esisele seleasi.

Gcina ukuqaliswa kanye nenguqulo yesofthiwe kuhambisana nalesi sitatimende. Amagama ezikhathi kanye namavelu okuzenzakalela ahluka phakathi kwezinguqulo ze-SonicOS, futhi isixhumi esibonakalayo esidala asifakazeli okwenziwa yileso esisha.

Qhathanisa izinyathelo ezimbili zokubuyisela

Isinyathelo A ukulinda. Akubizi lutho, akunobungozi, futhi kuyeka iklayenti ngalinye livuselele ngokohlelo lalo. Isinyathelo B ukuphoqa ukukhululwa nokuvuselela kuklayenti elithintekile, okuveza ikheli elifunwayo ngokushesha kodwa kuphazamisa konke okwenziwa yiklayenti. Kukhompyutha eyodwa, ukuphoqa ukuvuselela ngokuvamile kuyindlela esheshayo futhi kulula ukuyithethelela. Elabhorethri noma kusitimela sokudayisa phakathi nokuthengiselana, ukulinda kuyisinqumo esiphephile, futhi ukuvuselela okuhleliwe ngaphandle kwesikhathi somsebenzi kudlula kokubili.

ipconfig /all
ipconfig /release
ipconfig /renew

Funda okukhiphayo ngaphambi kokukhulula noma yini. Uma ikheli, isango kanye ne-DNS sekuvele kuhambisana nebanga elijwayelekile, iklayenti lizibuyisele ngokwalo futhi inkinga esele ikwenye indawo. Kuklayenti le-Linux, okulingana nakho ukukhulula nokuvuselela ilease ngomphathi wenethiwekhi esikhundleni sekheli elihlelwe ngesandla, ngoba uma kungenjalo umphathi uzobhala kabusha ushintsho lwakho esigamekweni esilandelayo.

Funda isiphakamiso, hhayi ikheli kuphela

Ikheli lodwa alisho ukuthi ubani elinikeze. Okubalulekile isihlonzi seseva esisiphakamisweni, isikhathi seleasi, nokuthi isango nesixazululi kuhambisana nebanga lokubuyisela noma elijwayelekile.

tcpdump -ni any 'port 67 or port 68'

Thwebula ngesikhathi sokuvuselela, ngoba isixhumi esithule sikutshela ukuthi iklayenti alizange licele. Uma isiphakamiso sivela kokubuyisela kwasekhaya ngesikhathi i-tunnel isebenza, umqondo wokukhetha usabheka indlela ekude njengengatholakali, futhi ukuphoqa ukuvuselela kumaklayenti kuzophinda umphumela ofanayo. Xhumanisa okuthwetshuliwe nezigameko ze-tunnel kuwashi elifanayo. Ukuvuselela kokhiye noma ukuwa okufushane okuphela ngamasekhondi ambalwa ngaphambi kwesicelo seklayenti kuyisizathu esingenzeka; i-tunnel ehlanzekile enempendulo yokubuyisela iyinkinga yokuhlelwa endleleni yokukhetha.

Lapho ukuqhathanisa kuphenduka

Uma amaklayenti amaningi ethintekile ngesikhathi esisodwa, ukuvuselela kuklayenti ngakunye kuphenduka ugqozi lokuphazamiseka kanye nocingo lokusekela. Kuleso simo, bheka ibanga lokubuyisela kanye nenqubo yokubuyisela esikhundleni samaklayenti, ngoba iqembu labuyisela ndawonye futhi lizobuyisela ndawonye futhi.

Uma iklayenti elilodwa kuphela elithintekile ngesikhathi omakhelwane balo belungile, kusho okuphambene: okuguqukayo ilease yalelo klayenti, ukubekelwa kwalo indawo noma ukuziphatha kweklayenti lalo le-DHCP, futhi ushintsho kusizinda sonke iyithuluzi elingalungile.

Amakheli angenakushintshwa nokubekelwa indawo kudinga impendulo yesithathu. Iklayenti eliboshelwe ekhelini alikwazi ukusindiswa ngokuvuselela, futhi ukubekelwa indawo okushayisana nebanga lokubuyisela kukhiqiza ikhophi ebonakala njengephutha lokuhamba kuze kube uqhathanisa izinhlelo ezimbili zamakheli.

Bhala inqubo yokuphuma

Nquma kusengaphambili ukuthi ukubuyisela kungenxa yani, iklayenti lingagcina isikhathi esingakanani ikheli laso lesikhashana, nokuthi ubani ogunyaziwe ukuphoqa ukuvuselela ngesikhathi somsebenzi. Bhala impendulo lapho unjiniyela obhekele izikhathi ezithile ezoyithola khona, eduze nencazelo yebanga. Bese uyihlola kanye ngamabomu: nqamula i-tunnel, bheka ukuthi iklayenti lathola ini, buyisela i-tunnel, futhi bhala ukuthi kuthatha isikhathi esingakanani ukuthi iklayenti liphinde lithole izilungiselelo zalo ezijwayelekile. Lowo msebenzi owodwa uthatha indawo yokuqagela okuningi ngokuzayo lapho isixhumanisi sesizinda sinyakaza.

Qeda ngokuqinisekisa umthombo, hhayi ikheli. Ukufinyelela iseva yamafayela, ukuxazulula igama layo nokufinyelela i-inthanethi kungukuhlola okuthathu okwehlukene, futhi okokugcina kuphela okungakaze kube nokungabaza.