Indlela yokuhlola ukuthi isathelayithi ye-Mesh Wi-Fi isebenzisa i-VPN router yini
Landela i-default gateway, imodi yokudlulisa ye-node kanye nethebula lesimo se-router ukuze ufakaze ukuthi amaklayenti esathelayithi ye-Mesh adlula ku-VPN yini.
Isathelayithi esiphendula igama le-Wi-Fi elifanayo nelerootha eyisisekelo ayisho lutho mayelana nokuthi amaphakethe amaklayenti ayo aya kuphi. I-node ingumthombo womsakazo kanye nebhuloho kuze kufakazelwe okuhlukile. Okunquma indlela yokuphuma i-default gateway etholwa yiklayenti ngalinye kanye nemodi yokudlulisa ye-node engaphambili kwayo. Yenza lezi zihlolo ezinhlanu kusukela kuklayenti kuye ngaphandle, futhi uzothola impendulo ongayivikela, hhayi umbono ovela kusivivinyo sesivinini.
Funda i-gateway ayithole ngempela iklayenti
Kuklayenti, phrinta ithebula lemizila kanye nethebula lomakhelwane. Umzila oyisisekelo usho ikheli elidlulisa ithrafikhi; ingeno yomakhelwane isho i-MAC engumnikazi walelo kheli. Sebenzisa iklayenti, hhayi uhlu lwamadivayisi erootha, ngoba uhlu lwamadivayisi lukhombisa ukuxhumana, hhayi izindlela.
ip route show default
ip -6 route show default
ip neigh showI-Windows iphrinta amaqiniso afanayo ngendlela ehlukile: ipconfig /all inikeza i-default gateway futhi arp -a inikeza i-MAC. Ku-macOS, route -n get default kanye arp -an kuhlinzeka okufanayo.
Qhathanisa leyo gateway namakheli amabili osuwazi: ikheli le-LAN lerotha eyisisekelo kanye nekheli lokuphatha lesathelayithi. Uma i-gateway iyikheli le-LAN lerotha, iklayenti lixhunywe ngebhuloho kurootha futhi inqubomgomo yerotha yaleyo nethiwekhi isebenza ngaphandle koshintsho. Uma i-gateway iyikheli lesathelayithi, isathelayithi sihamba ngemizila futhi irootha ayilokothi ibone amaphakethe eklayenti njengethrafikhi ye-LAN; isinqumo kufanele sithathwe ku-node, ngaphandle kwalokho asithathwa nhlobo.
Qinisekisa ukuthi i-node isekumodi iphi ngempela
Imikhiqizo ye-Mesh isebenzisa amagama amathathu kabusha ekuziphatheni okuhlukile, ngakho themba umzila wephakethe kunombhalo osesohlelweni. Imodi yebhuloho noma yendawo yokufinyelela idlulisa ozimele. Imodi yerotha iqeda i-subnet futhi isebenzise i-DHCP. Imodi yesivakashi ivamise ukubeka amaklayenti ku-VLAN ehlukile enemithetho yayo. I-node ekumodi yerotha ngemva kwelinye irootha iyi-NAT ephindwe kabili, futhi amaklayenti ayo afika kurootha ye-VPN esehunyushiwe, okubukela phansi inqubomgomo esekelwe ikheli lomthombo.
| What you see | What it means | Next check |
|---|---|---|
| Gateway is the router's LAN address, one MAC for every node | The node bridges; the router owns the policy | Router policy for that LAN and VLAN |
| Gateway is the node's address and DHCP comes from the node | The node routes; double NAT | Node's own VPN client, or a static route plus policy on the router |
| Gateway is a different subnet on a guest SSID | Guest VLAN, often client-isolated | Whether that VLAN is inside the tunnel policy |
| Gateway changes when you walk into another room | Roaming across segments | Repeat the check per node |
Ukuze uthole i-MAC, funda ilebula ku-node, bese uqhathanisa nokushiwo ip neigh. Abakhiqizi baphrinta i-MAC eyisisekelo futhi bakhipha ama-MAC erediyo ngayinye ngokwengeza ibhayithi eyodwa, ngakho idijithi yokugcina ye-hexadecimal iyahluka; qhathanisa isiqalo hhayi ikheli lonke. Uma i-MAC ye-gateway ingeyokuxhumana kwe-LAN kwerotha, i-node ayihambi ngemizila yalelo klayenti.
Fakaza ukuphuma kurootha, hhayi ngesivivinyo sesivinini
Isimo sohlangothi lwerotha iyona ndawo kuphela ekhombisa ukuhunyushwa. Ku-OpenWrt, bhala imithetho yenqubomgomo namathebula emizila, bese uqinisekisa ukuthi ithaneli inokuxhawana okusha:
ip rule show
ip route show table all | grep default
wg showKu-pfSense noma i-OPNsense ubufakazi obufanayo buba khona kulokhu okulandelayo: pfctl -sr emithetho, pfctl -ss izimo ezisebenzayo kanye nekhasi lesimo le-WireGuard lezibali zontanga, ngokulandela idokhumenti yeklayenti le-WireGuard. Hlunga ithebula lesimo ngekheli leklayenti. Uma isimo sikhombisa iklayenti lihunyushwe kwikheli lethanele, ithrafikhi ingaphakathi kwethaneli; uma likhombisa ikheli le-WAN, ayikho, noma yini ibheji ledashibhodi eliyishoyo.
I-traceroute evela kuklayenti yengeza iqiniso elilodwa ithebula lesimo elingakwazi ukulinikeza: ukugxuma kokuqala. Uma ukugxuma kokuqala kuyikheli le-LAN lerotha, iklayenti lafinyelela irootha ngqo. Uma kuyikheli le-node bese kulandela okunye ukugxuma okuyimfihlo, usengxenyeni ehamba ngemizila, futhi lokho kugxuma kwesibili iyona divayisi okufanele ibambe inqubomgomo.
Hlola ukuthi i-node isabalalisa ini ngaphandle kwekheli
Izinketho ze-DHCP zihamba nokuqashiswa, ngakho i-node enikeza i-DHCP yayo inganikeza ne-DNS yayo kanye nezimemezelo zayo zerotha ye-IPv6. Ngakho iklayenti lingaphuma ngethaneli futhi lisathumele imibuzo ku-resolver eseku-node, noma lithole ikheli lomhlaba le-IPv6 inqubomgomo yethaneli engakaze ilifake. Phrinta kokubili kuklayenti:
cat /etc/resolv.conf
ip -6 addr show scope globalUma i-resolver iyi-node futhi i-node idlulisela kurootha, i-DNS ilandela ithaneli. Uma i-node ixazulula kwasendaweni noma ikhomba ku-resolver yomhlinzeki, imibuzo iphuma ngaphandle kwethaneli ngisho ne-HTTP ingakwenzi. I-IPv6 nayo ifanele isivivinyo esifanayo: ikheli lomhlaba kanye nomzila oyisisekelo ogwema ithaneli kuwukuvuza, futhi i-firmware ye-Mesh ivamise ukushiya i-IPv6 ivuliwe ngenkathi inqubomgomo ye-VPN ihlanganisa i-IPv4 kuphela.
Nqamula ithaneli ngamabomu, bese ubhala umphumela
Yehlisa ithaneli futhi ubuke iklayenti elixhunywe kuleyo node, hhayi iklayenti elihlezi eduze kwerotha. ping kanye curl enesikhathi esifushane sokulinda kwanele; umbuzo ukuthi ithrafikhi iyama noma ibuyela ku-WAN. Misa ithaneli ngomyalo wesevisi werotha uqobo, isibonelo wg-quick down wg0 noma ukumisa isevisi ye-OpenVPN, futhi gcina isivivinyo sifushane.
Uma iklayenti liqhubeka lisebenza, i-node noma irootha yehluleka ngokuvulekile kuleyo ngxenye, futhi i-mesh isuse i-kill switch ngokuthula. Buyisela ithaneli, qinisekisa ukuthi isibali sokuxhawana sanyuka, futhi uphinde uhlole ithebula lesimo kusukela esigabeni sesithathu.
Bhala umugqa owodwa nge-node ngayinye: ilebula, i-SSID, ikheli le-gateway, isiqalo se-MAC, ukuphuma kuqinisekisiwe yebo noma cha, i-IPv6 ihlanganisiwe, kanye nokuziphatha uma ithaneli lehlisiwe. I-roaming yilapho impendulo ishintsha khona, ngakho hlola amakamelo owasebenzisayo ngempela. Uma umugqa owodwa ungavumelani neminye, leyo node iyona okufanele iphenywe, futhi ukulungiswa kufanele kube kudivayisi ephethe i-gateway yalowo mugqa.