I-VPN ye-FRITZ!Box iyaxhuma kodwa akukho okuphendulayo: WireGuard noma IPSec
Ithube le-FRITZ!Box elixhunyiwe elingafinyeleli ku-LAN yinkinga yamakheli. Hlola izinkambu ezine ze-IPSec noma i-peer ye-WireGuard ngaphambi kokungenisa kabusha.
Ithube libika ukuthi lixhunyiwe, isithonjana siluhlaza, futhi akukho lutho ku-LAN yasekhaya oluphendulayo. Lesi yisikhalo esivame kakhulu mayelana nokufinyelela kude kwe-FRITZ!Box, futhi cishe akulona ithube uqobo. Uhlelo lwamakheli, ubunikazi be-subnet noma ithebula lemizila yeklayenti kukhona okungalungile. Ukuthi iyiphi yazo ozoyilungisa ekugcineni kuncike ekutheni ukhethe i-WireGuard noma i-IPSec Fernzugang endala, ngakho qala ngokwazi ukuthi yikuphi okwakumisile ngempela.
Ithube liyaphakama kanti i-LAN ithule
Ithube elisungulwayo lifakazela ukuthi okhiye kanye nendawo yokugcina kulungile. Kodwa alifakazeli ukuthi iklayenti lathola ikheli ibhokisi elingalidlulisela kulo, noma ukuthi iklayenti liyazi ukuthi yiziphi iziqalo ezingezethube. Lezi yimpumelelo ezimbili ezihlukene, futhi eyesibili kuphela eyenza ukwazi ukufinyelela iphrinta.
Hlola ikheli leklayenti kuqala, bese kuba ithebula lemizila yalo.
Uma ikheli elinikeziwe lingaphandle kwe-subnet ye-LAN, ibhokisi alinayo indawo yokudlulisela emuva kuyo. Uma lisingaphakathi kwebanga le-DHCP, ibhokisi linganikeza ikheli elifanayo kudivayisi yasendaweni. Kokubili kukhiqiza ithube elixhumayo kanye ne-LAN engakunaki.
Okwenziwa wukulungiselela yikho konke ukukhetha
Ukukhetha i-IPSec kukhiqiza ifayela lokulungiselela lomsebenzisi oyedwa, eliqukethe ukhiye owabiwe ngaphambili kanye namakheli. Ulingenisa kuklayenti elikhuluma iphrofayela efanayo, okusho ku-Windows ngokuvamile ithuluzi lomkhiqizi hhayi iklayenti elakhelwe ngaphakathi. Ukukhetha i-WireGuard kukhiqiza i-peer yedivayisi eyodwa: ipheya lokhiye, ikheli ngaphakathi kwethube kanye nendawo yokugcina.
Lowo mehluko unquma imodeli yakho yokunakekela. Idivayisi ngayinye ye-WireGuard iyi-peer ehlukile enokhiye wayo, ngakho ukuhoxisa ifoni elahlekile kusho ukususa i-peer eyodwa ngenkathi ezinye ziqhubeka nokusebenza. I-IPSec ihoxisa ngokushintsha imfihlo eyabiwe noma ukulungiselela komsebenzisi, okuyinto eqinile futhi ethinta yonke idivayisi eyisebenzisayo.
Akukho kukhetha okuphelelwe yisikhathi. Indlela ye-IPSec ihlala iyiyo esekelwayo lapho ukuphela okukude kungakwazi ukusebenzisa i-WireGuard.
Izinkambu ze-IPSec ezikhiqiza ithube elifile
Amanani amane kufanele avumelane ne-LAN yakho, futhi amathathu awo ehluleka ngendlela ebukeka njengethube eliphukile.
| Value | What breaks when it is wrong |
|---|---|
| LAN subnet | The client routes nothing, or routes the wrong prefix |
| Network address | The configuration looks valid and the tunnel never establishes |
| DHCP range | No address is left to assign to tunnel clients |
| DNS server | The tunnel works and name resolution does not |
Yikheli lenethiwekhi elibamba abantu. I-subnet ibonakala ngekheli layo lokuqala, elivame ukuphela ngoziro, futhi ukufaka ikheli lomsingathi lapho kukhiqiza ukulungiselela okubukeka kukholakala ngokuphelele futhi okungaxhumi neze. Ibanga le-DHCP libalulekile ngesinye isizathu: amaklayenti ethube ngokuvamile anikezwa ngaphezu kwalo, ngakho ibanga elidla yonke i-subnet alishiye lutho lokwaba.
Ama-subnet agqagqanayo ayisinye isimo esijwayelekile. Uma i-LAN ekude ojoyina nayo isebenzisa isiqalo esifanayo ne-LAN ohlezi kuyo, umzila awukwazi ukwehlukanisa zombili, futhi ukuphinda unombolo ohlangothini olulodwa yikho kuphela ukulungisa kwangempela. Akukho nani lokulungiselela kweklayenti okuxazulula lokho.
Kungani i-WireGuard yehluleka ngendlela ehlukile
I-WireGuard ayinayo ukhiye owabiwe ngaphambili ongabhalwa ngokungalungile, ngakho ukwehluleka kwayo kuqoqana eduze kwencazelo ye-peer. Uhlu lwama-IP avunyelwe olweqa isiqalo se-LAN lukhiqiza ithube elingathwali lutho, ngoba iklayenti alilokothi lithumele kulo ithrafikhi eqondile ku-LAN. Ukhiye womphakathi ophelelwe yisikhathi kunoma yiluphi uhlangothi ukhiqiza ukuxhawula okungapheli neze. Indawo yokugcina engekho noma imbobo engalungile kukhiqiza ukuthula esikhundleni sephutha.
Qhathanisa izinhlangothi zombili inkambu ngenkambu esikhundleni sokuphinda ungenise ifayela bese uthemba.
Ukwehluleka okuyodwa okuvamile ukungqubuzana kwama-subnet. I-WireGuard izokwakha ngokuzimisela ithube eliya kunethiwekhi egqagqana neyakho yasendaweni, bese kuthi ithebula lemizila linqume ukuthi yisiphi kulezi ziqalo ezimbili ezifanayo esizowina.
Kufakazele ngaphandle, bese ugcina indlela yokubuyela ngaphakathi
Hlola ngoxhumano lweselula, hhayi neze ngaphakathi kwe-LAN, ngoba ngaphakathi uhlola indlela engahlangene neze nethube. Bhala ukuthi ukukhetha ngakunye kusebenzisa yiphi imbobo ngaphambi kokukuvula, bese udlulisela leyo mbobo ebhokisini.
Gcina ifayela elikhiqiziwe endaweni ongafinyelela kuyo ngaphandle kwethube, futhi ubhale negama langaphandle lebhokisi.
Ukulungiselela okungakaze kuhlolwe ngaphandle kuwuhlelo, akuyona indlela yokufinyelela kude esebenzayo. Hlola umsingathi oyedwa we-LAN ngekheli hhayi ngegama, ukuze ukwehluleka kwe-DNS kungathathwa ngephutha njengokwehluleka komzila.