Iyiphi i-interface ethola indima ye-NAT ngaphakathi nangaphandle ekuphumeni kwe-VPN ye-IOS
Landelela iphakethe lekhasimende elihlaziyiwe lisuka ku-interface ebunjiwe lize liye emgqeni ophezulu. Ukuhumusha kungokwale nqubo yangaphakathi, hhayi ukuthuthwa kwangaphandle komhubhe.
Amarutha anikeza ukuphuma kwe-inthanethi ngomhubhe ogcwele enza imisebenzi emibili ebukeka njengomunye. Iqeda umhubhe futhi idlulisela iphakethe lekhasimende elihlaziyiwe ku-inthanethi. Umsebenzi wesibili kuphela odinga ukuhunyushwa, futhi ukuhumusha kufanele kuhambisane nokugeleza kwangaphakathi. Umehluko lowo unquma ukuthi yimaphi ama-interface athwala izindima ze-NAT nokuthi yiluphi uhla lwamakheli oluvela emthethweni.
Landelela iphakethe elilodwa ngomrutha
Thatha ikhasimende eliku-10.90.0.25 elivula insizakalo ye-HTTPS yomphakathi. Ukuthi leyo ndawo iyangena yini emhubheni isinqumo senqubomgomo yekhasimende ngokwalo. Uma ingena, umrutha uhlaziya iphakethe bese liyidlulisela ku-interface ebunjiwe, lapho lisuke liqondiswa khona emgqeni ophezulu womphakathi.
Leyo interface ebunjiwe iyingaphakathi yokuhumusha. Umugqa ophezulu womphakathi uyingaphandle. Uma izindima zihlanekezelwe noma zingekho, iphakethe liphuma nomthombo oyimfihlo noma liyalahlwa ngaphambi kokuba lihunyushwe.
| Stage | Question to answer |
|---|---|
| VPN client | Does the client's policy put this destination inside the tunnel? |
| Decrypted ingress | Which virtual interface receives the inner packet? |
| Internet egress | Which route, access policy and source translation apply? |
| Reply | Is the client's flow translated back before it is delivered over the tunnel? |
Vumelanisa inqubomgomo yokuhumusha neqembu lamakhasimende
Umthetho we-NAT kufanele usho uhla amakhasimende aluthola ngempela, hhayi i-LAN yasehhovisi evele yabelana ngomugqa ophezulu. Umthetho ohlanganisa kuphela isubneti yendawo ugeja amakhasimende akude ngisho noma womabili ephuma nge-interface eyodwa.
ip access-list extended NAT-TUNNEL
permit ip 10.90.0.0 0.0.0.255 any
ip nat inside source list NAT-TUNNEL interface GigabitEthernet0/0/0 overloadGcina izihlengelo zamasayithi ayimfihlo zihlukile. Ukuhamba okuya ezindaweni zangaphakathi kufanele kugcine umthombo wako wangempela, ngaphandle kwalokho indawo izophendula ikheli engakwazi ukulifinyelela futhi umlenze wokubuya uhluleke ngendlela ebukeka njengomjikelezo womzila.
Sebenzisa izindima kuma-interface angempela kumklamo otshaliwe. Ucezu lwe-Virtual-Template olukotshwe empendulweni endala ye-Easy VPN akulona ukulungiselelwa kwamanje okuphelele, futhi uhlobo lomhubhe olusetshenziswayo lunquma ukuthi iyiphi i-interface eyamukela iphakethe elihlaziyiwe.
Hlukanisa ukuthuthwa kwangaphandle nokuhumusha kwangaphakathi
Ukuhumusha umthombo wohlelo lokusebenza ohlaziyiwe akusona isenzo esifanayo nokucindezela ama-IKE noma amaphakethe avikelekile ngomshini we-NAT ongaphezulu. Okokuqala kushintsha lokho i-inthanethi ekubona njengomthombo wesicelo sekhasimende; okwesibili kugcina umhubhe uphila ngokunqamula umshini ongapakathi.
Ukukudidanisa kukhiqiza iziphambeko ezimbili ezijwayelekile. Umrutha ohumusha ukuthuthwa komhubhe wawo uqeda ubudlelwano bozakwabo, kuyilapho umrutha ongalokothi uhumushe ukugeleza kwangaphakathi udlulisela amakheli ayimfihlo ku-inthanethi. Funda ukuthi yikuphi ukugeleza okubhekile ngaphambi kokuhlela umthetho, futhi uhlole ukuthi umhubhe wahlala umile yini ngemuva koshintsho. Umthetho olungisa ukuphequlula kodwa owisa umhubhe ususe inkinga esikhundleni sokuyixazulula.
Akukho kuphambeka okulungiswa ngokushintsha okunye. Funda ukuthi yikuphi ukugeleza okubhekile ngaphambi kokuhlela umthetho.
Qinisekisa emikhawulweni yomibili
Funda umthombo wohlelo lokusebenza emkhawulweni we-inthanethi, kanye nendawo ebuyiselwe emlenzeni wokubuya. Okokuqala kukutshela ukuthi ukuhumusha kwenzekile yini; okwesibili kukutshela ukuthi ukumephu okuhlanekezelwe kubuyele ekhasimendeni elifanele yini.
Bese uhlola ikhasimende elisebenzisa umzila womhubhe ohlukanisiwe ogunyaziwe. Lelo khasimende alikaze lisebenzise ukuhumusha kwe-inthanethi kwalomrutha, ngakho kufanele liziphathe ngendlela ehlukile, futhi umehluko uqinisekisa ukuthi ukuhamba kwathatha muphi umzila.
Uma womabili amakhasimende eziphethe ngendlela efanayo, inqubomgomo yomhubhe ohlukanisiwe ayikwenzi lokho okushiwo umklamo. Lungisa lokho ngaphambi kokwengeza eminye imithetho yokuhumusha, ngoba umthetho obhalelwe umzila ongasetshenziswa ufihla inkinga yangempela.