I-General failure lapho uphinga ikheli le-LAN ngesikhathi iklayenti le-VPN livuliwe
I-Windows ithi ayikwazi ukufinyelela i-adaptha noma iyiphi nakancane kuyilapho ithebula lemizila libukeka lilungile. Nquma ukuthi ukuvinjwa kungokwemizila, ukuhlunga noma iklayenti.
Umzila owodwa womsingathi, ikheli elilodwa, futhi i-ping yehluleka ngokushesha nge-General failure esikhundleni sokuthi isicelo siphelelwe isikhathi. Lowo mehluko uwo wonke umhlahlandlela. Ukuphela kwesikhathi kusho ukuthi iphakethe liphumile futhi kukhona okulishaya indiva. I-General failure isho ukuthi i-Windows ayikwazanga ukunikeza iphakethe kunoma iyiphi i-interface kusukela ekuqaleni.
Ngakho uma ithebula lemizila libukeka liphelele kodwa iphutha lisaqhubeka nokuba yi-General failure, ukuvinjwa kwenzeka ngaphansi kwesinqumo somzila, futhi iklayenti lomhlinzeki yilona elisebenza lapho.
Funda iphutha ngaphambi kwethebula lemizila
I-Windows ibuyisela lelo phutha lapho ingayitholi i-interface yokuthumela, futhi ayisho lutho mayelana nokuthi indawo okuyiwa kuyo yayizokwenzani ngephakethe. Ukufinyeleleka, ama-firewall asemkhawulweni okude kanye nokutholakala kwensizakalo konke kuyimibuzo yakamuva ongakafinyeli kuyo.
Ukulungiselelwa kwakudala kwale khasi umzila womsingathi oqondisa ikheli elilodwa le-LAN egedeni lomzimba ukuze lidlule umhubhe. I-route add uyayamukela, i-route print uyayibonisa, futhi i-ping isahluleka, ngoba umshayeli wokuhlunga usenqumile ukuthi iphakethe alivunyelwe ukuphuma.
Ngaphambi kokwamukela leyo ncazelo, qinisekisa ukuthi umzila ukhethwa ngempela: hlola inkomba ye-interface nesilinganiso, futhi uqiniseke ukuthi ukufakwa akukaphelelwa yisikhathi ngemuva kokuxhuma kabusha. Umzila okhomba ku-interface engasekho ukhiqiza iphutha elifanayo ngesizathu esingathandeki kakhulu.
Izendlalelo ezintathu, abanikazi abathathu abehlukene
Kuwina isendlalelo esisebenza ekugcineni, futhi lezi zintathu azikho ngokulandelana okucatshangwa iningi labantu.
| Layer | What it decides |
|---|---|
| Routing table | Which interface and next hop should carry the packet |
| Client filter driver | Whether this packet is permitted to leave outside the tunnel at all |
| Client feature | Whether a named feature, such as LAN blocking, is active right now |
Isendlalelo esiphakathi yisizathu sokuthi umzila ungaba ngcono futhi ungabi naluhlelo ngesikhathi esisodwa. Amaklayenti omhlinzeki afaka isihlungi nemithetho ye-firewall ukuze ithrafikhi engaphandle komhubhe ilahlwe, futhi yiyo leyo ndlela efaka i-kill switch yabo. Akukho lutho ku-thebula lemizila okuhlanganyela kuleso sinqumo.
Isendlalelo sesithathu sichaza umbiko oyisimanga ofika njalo: i-subnet yasendaweni ayifinyeleleki ngisho ngemuva kokunqamula iklayenti. Insizakalo isasebenza futhi isihlungi sisafakiwe, ngakho ukungaxhunyiwe akufani nokungahlungi. Phuma kuklayenti esikhundleni sokulinqamula kuphela ngaphambi kokuphetha noma yini.
Okufanele kuzanywe, ngokulandelana
Qala ngokususa izici ezishibhile ukuzisusa futhi ezilula ukuzibuyisela. Ukutholwa kwe-LAN, kwesinye isikhathi okubizwa ngokuthi ukungabonakali ku-LAN, kuvimbela ithrafikhi eya emikhakheni yamakheli ayimfihlo ukuze umshini uhlale ufihliwe komakhelwane. Amaphrinta, amaseva amafayela asendaweni kanye nomzila uqobo zinyamalala ngemuva kwaleso switch. Izici zokuvikela izinsongo ezihlunga i-DNS zifaka ama-hook azo futhi kubikwa ukuthi zephula ukufinyeleleka kwasendaweni ngendlela efanayo.
Cisha kokubili, phuma ngokuphelele kuklayenti, bese uhlola ikheli. Lokho kulandelana kuhlukanisa isici esivimbela ithrafikhi kumhubhe oyihambisa ngendlela engalungile, futhi kuthatha amaminithi amabili esikhundleni sentambama yonke yemizila engaguquki.
ping 192.168.1.50
tracert -d 192.168.1.50
route print -4Uma ikheli liphendula ngemuva kokucishwa kwezici, unesinqumo senqubomgomo hhayi ukuhluleka: khetha phakathi kokushiya isici sicishiwe, ukwengeza okuhlukile, noma ukuvuma ukuthi umshini uzohlala ungabonakali kunethiwekhi yasendaweni.
Sebenzisa indlela yokuhlukanisa yeklayenti, ngobuncane
Lapho isici kufanele sihlale sivuliwe, umhubhe ohlukanisiwe weklayenti uqobo uyindlela ephumayo esekelwayo. Gcina okuhlukile kukuncane ngangokunokwenzeka ngokwemfuneko, lokho ngokuvamile kusho ikheli elilodwa lomsingathi eseva eyodwa noma isiqalo esisodwa sesigaba esisodwa. Umthetho ohlanganisa lonke ibanga eliyimfihlo uyimbobo engapheli okungekho ozokhumbula ukuthi wayengeza futhi okungekho ozoqhaqhazela ukuyisusa.
Bese uqinisekisa kuqala ngekheli bese ngokugama. Uma ikheli liphendula ngokugxuma kokuqala egedeni lomzimba, okuhlukile kuyasebenza. Uma igama lisahluleka, usudlulele ku-DNS, ngoba isixazululi somhubhe asazi isifunda sasendaweni futhi akukho shintsho lomzila olizofundisa.
Gcina umzila noma okuhlukile, hhayi kokubili, kanye nenothi lokuthi yikuphi okwenza umsebenzi. Izindlela ezimbili ezihlangana ziyafihlana, futhi umuntu olandelayo ozolungisa lo mshini uzosusa enye yazo futhi angaboni ushintsho.
Lapho iklayenti liyisithiyo
Amanye amabhilidi ahlunga ithrafikhi ngezindlela okungekho mzila ongaguquki noma okuhlukile kweklayenti ongakwazi ukuzinqoba. Uma lokho kuyinto etholakele, izinketho zobuqotho ukulinda isici sokudlula noma ukuxhuma ngeklayenti elijwayelekile le-OpenVPN kusetshenziswa iphrofayili yomhlinzeki uqobo, okuyinto eyanconywa impendulo yosekelo lomthengisi embikweni wokuqala.
Qonda ukushintshana ngaphambi kokwenza lokho kufaka esikhundleni. Iphrofayili ejwayelekile iziphatha njenganoma yimuphi umhubhe ojwayelekile: ifaka imizila yayo futhi ayihleli kabusha ingxenye esele yesitaki, ngakho umzila womsingathi omncane usaziphatha ngendlela oyilindele. Okulahlekayo yikho konke okwenziwa iklayenti elinophawu ezungeze umhubhe, kufaka i-kill switch nokuhlunga kwe-DNS, futhi lokho kufanele kwenziwe futhi ngamabomu noma kwamukelwe njengokungekho.
Noma yini oyikhethayo, rekhoda ukuthi yisiphi isendlalelo ebesingumnikazi wokuvinja. Iphakethe elingakaze liphume emshinini liwumphumela wesihlungi, futhi akukho shintsho lomzila olungilungisa isihlungi.