Kungani i-VPN yethumbu eligcwele ifihla ama-VLAN akho endawo ahlelwe ngemizila

Isishintshi esithi “vumela inethiwekhi yendawo” kuklayenti ye-VPN sizwakala sengathi sihlanganisa konke esakhiweni. Empeleni ngokuvamile sengeza izingafani ezimbalwa zamakheli wangasese emzileni ozenzakalelayo wethumbu bese siyema lapho. I-VLAN yakho yokugcina isafinyeleleka kuphela uma umzila waleyo phrefikhi ethile ukhona ngisho ngemva kokufika kwethumbu, futhi kumaklayenti amaningi awukho.

Lona umbuzo wokuhlela izindlela hhayi isilungiselelo se-VPN, okuyizindaba ezinhle: unomphendulo oqondile.

Ukuthi “vumela inethiwekhi yendawo” kuhlanganisa ukuthini ngempela

Amaklayenti asebenzisa leyo nketho ngezindlela ezahlukene. Amanye engeza imizila yesubnethi okuxhunywe kuyo umshini, amanye engeza izigaba ze-RFC 1918, futhi ambalwa akhipha kuphela isango elizenzakalelayo. Awekho awo azi ukuthi irutha yasehhovisi lakho iphinde isebenze i-VLAN yokugcina, ingxenye yelabhorethri noma isubnethi yephrinta, ngoba lezo phrefikhi azikho kulayini okwazi ukubona iklayenti. Funda imibhalo yeklayenti uqobo ukuze uthole ukuziphatha okuqondile esikhundleni sokucabanga ukuthi ilebula ichaza ukuhleleka kwakho.

Umehluko ubaluleke kakhulu ekwakhiweni kwethumbu eligcwele, lapho iklayenti lishintsha ngamabomu umzila ozenzakalelayo ukuze yonke into ihamba nge-VPN. Yilokho okungumgomo wakho konke ukwakhiwa, futhi yikho okwenza amanethiwekhi endawo ahlelwe ngemizila anyamalale. Awazange ambozwe umzila wawo; ayegibele emzileni ozenzakalelayo osanda kushintshwa. Iklayenti alikwazi ukuhlela into engayazi ukuthi ikhona, futhi lifunda kuphela ngamaphrefikhi axhumene nesixhumi salo uqobo. Konke okunye kufanele kuchazwe umuntu owazi ukuhleleka.

Imizila exhunyiwe ima kurutha yokuqala

Isiteshi sokusebenza esiku-192.168.10.20/24 nesango 192.168.10.1 sithola ngokuzenzakalela umzila oxhunyiwe we-192.168.10.0/24. I-VLAN yokugcina eku-192.168.20.0/24 iyiphrefikhi ehlukile, ifinyeleleka kuphela ngaleso sango, futhi isiteshi sokusebenza asinawo umzila wayo ngaphandle kowenzakalelayo. Ngaphambi kokuba umhubhe unyuke, umzila ozenzakalelayo ojwayelekile ususa ukuthuthwa kokugcina ukuya ku-192.168.10.1 futhi konke kuyasebenza.

Uma i-VPN ifaka owenzakalelayo wethumbu eligcwele, amaphakethe e-192.168.20.1 alandela owenzakalelayo omusha angena ethumbwini. Isango elikude alazi ukuthi leyo phrefikhi ihlala kuphi, ngakho iwalahla noma iwadlulisela endaweni engasizi. Akukho okwalungiselelwa ngokungalungile ku-VLAN yokugcina; indlela yayo yabolekwa, futhi imali yokuboleka yabuyiswa.

Isilingo siwukwelula isandla ezingafani ezibanzi njengepheya lemizila engu-/1 noma okunye okuzekakalelayo. Melana nakho. Uma ingafani incane, kulula ukuyichaza, ukuyihlola nokuyisusa uma inethiwekhi ishintsha.

Faka ingafani kuthebula elinqobayo

Ngaphakathi kwethebula elilodwa lokuhlela imizila, u-/24 wehlula u-/0 noma u-/1 ngokufanisa iphrefikhi ende kakhulu, ngakho umzila oqondile oya ku-VLAN yokugcina ngokusebenzisa isango lendawo wanele, inqobo nje uma ithebula libuzwa nakancane. Ku-Linux indlela ejwayelekile imfushane:

ip route add 192.168.20.0/24 via 192.168.10.1 dev eth0

Ukuhlela ngomgomo kwenza leso siqiniseko sibe nzima. Umthetho wangaphambilini ungathumela ukuthuthwa kuthebula omzila walo ozenzakalelayo okhombisa ethumbwini, futhi ithebula eliyinhloko eliphethe u-/24 wakho alifikwa nakancane. Hlola imithetho ngaphambi kokucabanga ukuthi umzila unegunya, ngoba umbhalo obonakala ulungile kuthebula elingalungile uchaza ukwehluleka okubonakala njengomzila ophukile.

Bese wenza umbhalo uhlale unjalo ngendlela esekelwa iklayenti noma ngumphathi wenethiwekhi ophethe isixhumi. Umzila obhalwe kumqhubi uyanyamalala ekuxhumaneni okulandelayo, futhi umzila oboshelwe esangweni elilodwa le-Wi-Fi awudluliselwa kunethiwekhi elandelayo evakashelwa yilaptop.

Amagama nomgomo awulandeli imizila

Ukulungisa umzila kubuyisa amaphakethe, hhayi amagama. Uma amadivaysi endawo ehlaziywa ngesixazululi esithunyelwe esingazi lutho ngawo, ukubopha kusahluleka ngisho noma ikheli lifinyeleleka. Amagama endawo adinga ukuhlelwa kwe-DNS kwasendawo noma okuhlukanisiwe, futhi leso yisinqumo esihlukile kungafani yomzila.

Umgomo uhlukile futhi. Isihlungi sokufinyelela kwendawo sekhayenti ye-VPN singavimbela ngamabomu ukuthuthwa okuya ezigabeni zangasese, futhi umzila awuwedluli lowo mthetho. Kunethiwekhi engathembekile, ikheli langasese futhi alibona ubufakazi bokuthi indawo iyiseva yakho yokugcina, ngakho ingafani kufanele icace njengomzila uqobo.

Isivumelwano ongasinikezela

Ukuhlelwa okuqediwe kufanele kufundwe njengohlu olufushane: ukuthuthwa kwe-inthanethi okujwayelekile kulandela umhubhe, futhi lawa maphrefikhi endawo aqanjwe agcina indlela yawo ngokusebenzisa irutha yendawo. Bhala phansi amaphrefikhi, isinyathelo esilandelayo kanye nesijobelelo se-DNS esihamba nabo, futhi gcina uhlu lufushane ngokwanele ukuthi othile angaluqinisekisa ngaphandle kokufunda ithebula lokuhlela imizila.

Qaphela ukugqagqana phakathi kwezigaba zendawo nezikude. I-VLAN yokugcina eyabelana ngephrefikhi nokuthile ngemva kwe-VPN izoxazululwa ngomzila ocace kakhulu, futhi ukuziphatha okuphumayo kuyadida ngendlela ebonakala njengezikhathi ezithile. Ukuphinda kwenziwe izinombolo ohlangothini olulodwa ngokuvamile kushibhe ukulungisa lokho kungaqondakali kuze kube phakade.

Hlola isivumelwano kabili: kanye lapho umhubhe unyukile futhi kanye lapho ususehla. Uma indlela yendawo isebenza kwesinye salezo zimo kuphela, ingafani ayikabi yisivumelwano.