Leyo kheli le-L2TP yi-IPCP, akulona ukuqashwa kwe-DHCP ku-LAN

Ikheli langaphakathi livela ezingxoxweni ze-PPP, hhayi kuseva ye-DHCP yehhovisi. Bona isigaba esikunikezayo, kungani i-LAN ingakwazi ukuphendula nokuthi yini okufanele ihlolwe.

Uxhumano luyaphuma futhi i-adaptha ikhombisa ikheli elisendaweni yekhovisi, ngakho isiphetho esingokwemvelo ukuthi i-VPN ikunikeze ikheli le-LAN futhi ngalokho ikubeke ku-LAN. Azikho kulezi zingxenye ezimbili eziqondile ngokuphelele. L2TP ithwala iseshini ye-PPP, futhi i-PPP ixoxisana ngekheli langaphakathi le-IPv4 nge-IPCP. Lelo kheli liyipharamitha yeseshini okuvunyelwene ngayo phakathi kwezinhlangothi ezimbili, hhayi ukuqashwa okukhishwe iseva ye-DHCP yekhovisi, futhi ukuba nalo akukwenzi ube umakhelwane ocingweni lwekhovisi.

Amakheli amabili kuxhumano olulodwa

Kunezingxoxo ezimbili ezizimele kuxhumano lwe-L2TP. Eyokuqala yangaphandle yakha indlela evikelwe phakathi kwedivayisi yakho nendawo yokugcina ye-VPN kunoma iyiphi inethiwekhi onayo kakade. Eyesibili yangaphakathi yiseshini ye-PPP, futhi yilapho kuvunyelwana khona ngekheli leseshini yakho nekheli lohlangothi olulandelayo. Ithrafikhi ye-inthanethi ingaphuma ngokuphelele ngaphansi kwekheli lesithathu, ikheli lomphakathi lendawo yokugcina, yingakho ikhasi lokuhlola i-VPN nekheli le-adaptha kungavamisile ukuvumelana.

Ukwehlukanisa lezi zindima ezintathu kuphendula imibuzo eminingi abantu abayiletha kuleli khasi. Inombolo yangasese kusixhumi se-VPN iyinto evamile futhi elindelekile. Ayisho lutho mayelana nokuthi indawo yokugcina ishintshile yini umphumela wakho womphakathi, futhi ayinqumi ngokwayo ukuthi ithrafikhi yakho ifinyelela ziphi izindawo.

I-IPCP yenzani ngempela

I-IPCP iwumthetho wokulawula we-IPv4 we-PPP. Uhlangothi ngalunye luthumela imilayezo ye-Configure-Request echaza izinketho ezilifunayo, futhi inketho yekheli ingenye yazo. Iklayenti elingenalo ikheli lisacela nge-0.0.0.0, futhi iseva liphendula nge-Configure-Nak ethwala ikheli elilifuna iklayenti lisebenzise. Bese iklayenti licela lelo kheli, futhi iseshini iphuma nekheli lendawo nekheli elikude.

Lokho kushintshana kubhalwe emibhalweni ye-PPP ne-IPCP, futhi kuchaza imininingwane ebukeka njengephutha: ikheli likhethwa iseva ngokomgomo wayo, okungaba yiqoqo, isethingi yomsebenzisi ngamunye noma ikheli elixhunywe kubunikazi obuqinisekisiwe. Lapho iqoqo liphela, noma umgomo ungqubuzana nesicelo, ukuqinisekisa kungaphumelela kuyilapho izingxoxo zekheli zehluleka, futhi iklayenti libika uxhumano olungazange luzinze.

ip addr show ppp0
ip route show default
dmesg | grep -i pppd

Umugqa kumbhalo we-pppd okhuluma ngekheli lendawo nekheli elikude uwukuphela okuphumelelayo kwalokho kuxoxisana. Ukungabikho kwawo eduze kokuqinisekisa okuphumelelayo kukhombisa isigaba sekheli hhayi imininingwane yokungena.

Kungani i-LAN ingakwazi ukukuphendula

Ikheli elivela ebangeni lohlangothi olukude lidala ukulindela ukuthi izingqalaba kuleyo LAN zingakufinyelela, futhi ngokuvamile azikwazi ngaphandle uma iseva ihambisa ikheli leseshini yakho libuyela emhubeni. Ukuba ngaphakathi kweqoqo isitatimende mayelana nokwabiwa, hhayi mayelana nokwakheka kwenethiwekhi. Iseva yamafayela yekhovisi ayinayo indlela eya ekhelini leseshini yakho ngaphandle uma iseva ye-VPN iyidlulisela, futhi kungenzeka ukuthi akukavunyelwe ngisho uma idlulisa.

Yingakho futhi amabanga anqabelanayo adala izinkinga ezingalingani nobukhulu bawo obonakalayo. Uma iqoqo linqabelana ne-LAN iklayenti elivele liyisebenzisa, ithebula lemizila yeklayenti manje linamacala amabili kusiphakamiso esisodwa, futhi okungalungile kuvame ukunqoba ngezizathu ezingahlobene ncamashi nomhubo.

Qinisekisa iseshini, bese umzila

Hlola isixhumi kuqala, bese imizila, bese indawo eyodwa ebalulekile. Isinyathelo ngasinye sinendlela yaso yokwehluleka, futhi ukuhlola zontathu kanyekanye kuveza isiphetho ongakwazi ukusivikela kamuva.

curl -sS --max-time 5 https://ifconfig.me
ping -c 3 10.50.30.20
ip route get 10.50.30.20

Uma ukuhlola komphakathi kukhombisa ikheli lendawo yokugcina kuyilapho indawo yangasese iphelelwa yisikhathi, umhubo uthwala umzila wakho ozenzakalelayo futhi uhlangothi olukude aluphenduli kuleyo ndawo. Uma indawo yangasese iphendula kodwa ukuhlola komphakathi kungashintshi, iphrofayili isebenzisa umhubo ohlukanisiwe futhi ingxenye ethile yethrafikhi kuphela esebenzisa iseshini.

Gcina izigaba ezintathu zehlukene

Ukuqinisekisa, izingxoxo zekheli nokudlulisa kwehluleka ngezindlela ezihlukene, futhi ngakunye kunomphathi ohlukile. Imininingwane yokungena iyinkinga yobunikazi, ukuphela kwe-IPCP kuyinkinga yomgomo weserva, futhi umzila wokubuya ongekho kuyinkinga yokuklama inethiwekhi. Ukubika zontathu ngokuthi “i-VPN iphukile” kuqinisekisa ukulungiswa okunensayo.

Bhala phansi ikheli elinikeziwe, iqoqo elivela kulo nokuthi i-LAN kufanele ifinyelele kulo yini. Lelo nothi elilodwa livimbela umuntu olandelayo ukuthi acabange ukuqashwa kwe-DHCP futhi afune ibanga elingazange lihileleke.

Izihloko ezihlobene