Inethiwekhi yasendaweni ayifinyeleleki ngenkathi i-VPN ixhunyiwe? Ukuhlola okune

Umhubhe uyaphakama, i-intranet iyavela, kanti iphrinta iyeka ukuphendula. Akukho okonakele ku-LAN; i-client ishintshe indlela eyisebenzisayo kumakheli engasawanakekeli njengasendaweni. Yenza izinhlolo ezine ezingezansi ngokulandelana futhi ume lapho enye ikhombisa ukungafani okuqondile, ngoba uphawu olufanayo lunembangela ezine ezijwayelekile futhi eyodwa kuphela yazo ilungiswa ngokushintsha i-VPN.

Okokuqala, bheka ithebula lemizila efakwe yi-client

Vula ithebula lemizila ye-client ngenkathi i-VPN ixhunyiwe. Ku-Linux sebenzisa ip route, ku-Windows sebenzisa route print noma Get-NetRoute, futhi ku-macOS sebenzisa netstat -rn. Ufuna umzila ozenzakalelayo odlula emhubheni kanye nalokho okwenzeke kumzila ozenzakalelayo wangempela.

I-client yomhubhe ogcwele ivamise ukungeza imizila emibili yengxenye yokuzenzakalela, 0.0.0.0/1 kanye ne-128.0.0.0/1, esikhundleni sokushintsha i-0.0.0.0/0. Umzila wokuqala ozenzakalelayo uhlala ubonakala kodwa uhlulwa yikho konke ukusesha, yingakho ithebula libonakala liphelele kuyilapho yonke ithrafikhi engaphandle kwe-subnet ihamba. Uma i-client ye-VPN inenketho yomhubhe ohlukanisiwe futhi inqubomgomo ivuma, lokho kuwukulungisa okumsulwa kakhulu.

Uma umhubhe kufanele uhlale ungumzila ozenzakalelayo, gcizelela i-subnet yasendaweni esikhundleni salokho. Ku-Linux umzila usho i-interface yangempela kanye ne-gateway; ku-Windows engeza -p ukuze uhlale ukhona futhi ufunde inombolo ye-interface ku-route print esikhundleni sokuyiqagela:

sudo ip route add 192.168.1.0/24 via 192.168.1.1 dev wlan0
route add -p 192.168.1.0 MASK 255.255.255.0 192.168.1.1 METRIC 1 IF 12

Umzila ogcizelelwe uhlala kuphela inqobo nje uma ikheli elilusebenzisayo lingashintshi. Ilaptop ethola inombolo entsha ye-adaptha ye-Wi-Fi njalo lapho ixhumana izophula umthetho futhi, ngakho hlola ikheli le-interface ngaphambi kokunquma ukuthi ukulungisa kwehlulekile.

Okwesibili, qinisekisa ukuthi ikheli lalilokhu lingelendawo kusukela ekuqaleni

Uma indawo oya kuyo ingaphakathi kwe-subnet exhunyiwe, umzila ozenzakalelayo womhubhe awusebenzi neze futhi i-VPN ayiyona imbangela. Iphrinta ku-192.168.1.40 ku-client ene-192.168.1.0/24 isebenzisa umzila oxhunyiwe; uma lelo kheli lihluleka, bheka idivayisi, iswishi noma i-firewall ye-client hhayi i-VPN.

Icala elikhohlisa abantu ikheli lomphakathi lesiphakeli sasendaweni. Ngaphakathi kwe-LAN, ukufinyelela ikheli le-WAN le-router bese ubuya kudinga i-hairpin NAT, futhi ama-router amaningi awakusebenzi lokho ekudlulisweni kwamaphothi. Hlola ikheli langasese eduze kwelomphakathi. Uma elangasese lisebenza kanti elomphakathi lingasebenzi, i-VPN iveze kuphela umkhawulo we-NAT owawuvele ukhona.

Igama lomsingathi lokhu kukwenza kube kubi kakhulu. Uma igama lasendaweni manje lixazululeka libe ikheli lomphakathi, i-client izoqhubeka nokuzama indlela engakwazi ukubuya. Sebenzisa ikheli langasese ekuhloleni, bese ulungisa igama esikhundleni sokwengeza okunye ukudluliswa kwamaphothi.

Okwesithathu, bheka ukuthi ubani ophendula amagama manje

Isixazululi senkampani siyazi i-intranet futhi ngokuvamile asazi lutho ngama-hostname e-NAS, igama le-Bonjour lephrinta noma isiteketiso sendawo se-router. Lapho i-VPN icindezela amaseva ayo e-DNS, lawo magama ayeka ukuxazululeka nakuba amakheli awo efinyeleleka. Buza igama ngqo bese uqhathanisa impendulo nekheli owaziyo ukuthi idivayisi inalo.

Ku-Linux resolvectl query nas.local ibonisa ukuthi isiphi isixazululi esiphendulile. Ku-Windows nslookup nas.local isho iseva, futhi ipconfig /all ibonisa ukulandelana kwezixazululi. Uma isijobelelo sasendaweni manje sisingathwa isixazululi senkampani, phendukisa leso sijobelelo sibuyele kusixazululi sasendaweni noma sebenzisa ikheli le-IP kudivayisi.

Ukutholakala kuyisendlalelo esihlukile. I-mDNS nokusalaba akukweluki umhubhe onomzila, ngakho idivayisi ingafinyeleleka ngekheli kuyilapho igama layo lingabonakali. Isibonisi noma umbhalo we-DNS wasendaweni ukuxazulula lokho; umzila awukuxazululi.

Okwesine, hlola ukuthi nomunye umshini use-VPN ini futhi

Lapho umshini ofuna ukufinyelela kuwo nawo ugidinga i-client ye-VPN, isikhathi sakho singafika kuyilapho impendulo yaso iphuma ngomunye umhubhe. Lokho kukhiqiza ukuxhumana okusungulwayo bese kuyama, noma umzamo we-RDP ne-SSH ophelelwa yisikhathi ngaphandle kwephutha ngasohlangothini lwakho. Hlola ithebula lemizila yomunye umsingathi kanye nomzila wayo ozenzakalelayo ngaphambi kokusola i-client yakho.

Hlola futhi ikheli isevisi elalela kulo. Isilaleli esiboshelwe kuphela ekhelini lomhubhe samukela ukuxhumana okuvela ku-VPN futhi senqaba okuvela ku-LAN, ngisho noma umzila uphelele. Lokho kuwukucushwa kwesevisi, hhayi umzila wenethiwekhi, futhi kuvamile ezindaweni zokuphatha ezivalelwe ekhelini le-VPN.

Gcina umzila wokuphatha ongancikile emhubheni: umzila ongaguquki okhonjisa inethiwekhi yakho yomthombo, enye i-interface exhunywe ku-LAN, noma ikhonsoli edlula ngokuphelele emhubheni. Ukuklama lowo mzila ngemva kokufa kwesikhathi kunzima kakhulu kunokuwungeza ngaphambi kokuxhumana okulandelayo.

Sebenzisa ukulungisa okuhambisana nokuhlola okwehlulekile

Uma ithebula lemizila likhombise ukuthathwa kwengxenye yokuzenzakalelayo, khetha umhubhe ohlukanisiwe lapho inqubomgomo ivuma kanye nomzila wasendaweni ogcizelelwe lapho ingavumi. Uma ikheli livelile lingelomphakathi, shintsha ukuhlola kanye negama liye ekhelini langasese. Uma isixazululi sishintshe izandla, khawulela kusijobelelo sasendaweni noma sebenzisa ikheli. Uma omunye umsingathi usemhubheni, lungisa indlela yawo yokubuya noma ukuboshelwa kwesilaleli.

Shintsha into eyodwa, bese uphinda ukuhlola okufanayo. Umzila owengezwe kwi-subnet engalungile, isijobelelo sesixazululi esinamaphutha okubhala kanye nomzila ogcizelelwe ku-interface ethola izinombolo ezintsha konke kubonakala njengokonakala kwasekuqaleni. Ukuphinda yikho okuhlukanisa ukulungisa nenhlanhla nje.

Bhala phansi umzila, ikheli kanye nesixazululi okusebenzile ngenkathi i-VPN ixhunyiwe. Ukuxhumana okulandelayo kuzoshintsha okungenani okukodwa kukho, futhi inothi lizoguqula ukuphazamiseka okulandelayo kube ukuqhathanisa okufushane esikhundleni sophenyo olusha.