Imigwaqo ehlukanisiwe ye-L2TP ku-Mac: kungani ikheli le-host lingasebenzi

I-setadditionalroutes ifuna amapheya enethiwekhi nemaski, ishintsha lonke uhlu futhi idinga igama lesevisi elingokoqobo. Hlola ithebula ngaphambi kokusola isango.

I-VPN iyaxhuma, ibha yemenyu iyayikhombisa, futhi i-host yangaphakathi isagcina isikhathi. Kuleso simo kunezizathu ezintathu ezingaba khona, futhi ukuthi yisiphi esisebenza kuncike ekutheni umhubhe wawuhlelwe kanjani. Kuphakathi kokuthi umyalo womzila usebenzise ikheli le-host lapho kwakudingeka khona ikheli lenethiwekhi, noma iphrofayela ngokwayo ifaka umzila ophakeme odla isinqumo, noma iklayenti iwumhubhe we-PPP odinga ihhuku esikhundleni sokhiye wephrofayela. Bazihlole ngokulandelana, ngoba okokuqala kulula ukukukhipha.

Indawo yokuphela iyikheli lenethiwekhi, imaski ichaza isiqalo

networksetup -setadditionalroutes ithatha izintathu zendawo yokuphela, imaski yesubnethi nesango. Ucingo oluthumela isubnethi eyodwa yangaphakathi ngomhubhe lubonakala kanje:

sudo networksetup -setadditionalroutes "VPN (L2TP)" 192.168.1.0 255.255.255.0 10.2.0.0

Qaphela ukuthi iyini indawo yokuphela: ikheli lenethiwekhi, hhayi ikheli leseva ozama ukuyifinyelela. Esimweni esadala le ndatshana, umyalo ofanayo one-192.168.1.20 kuleso sikhundla awenzanga lutho olusizayo, futhi ukuwushintsha nge-192.168.1.0 kwashesha ngokushesha. Imaski efanayo, isango elifanayo, inombolo eyodwa ehlukile. Yikho konke ukwehluleka ngokuncane.

Isizathu yizibalo, hhayi inqubomgomo. Ikheli le-host elihambisana nemaski engu-/24 alichazi i-192.168.1.0/24; lichaza into ithebula lomzila elingeke liyigcine ngendlela ewusizo, ngakho ukufakwa kuyaliwa noma kungayekwa futhi umhubhe ugcina uthwala okuncane kunalokho obukuhlosile.

Uma ufuna i-host eyodwa ngqo, sebenzisa ikheli le-host nemaski engu-255.255.255.255. Amapheya axubile yiwo lapho lokhu kuhamba kabi khona, hhayi ukusetshenziswa kwekheli le-host ngokwako. I-/32 eyakhiwe ngekheli elilodwa iwumzila osemthethweni; i-/24 eyakhiwe ngekheli elilodwa iyiphutha.

Ucingo lushintsha uhlu, futhi igama lingokoqobo

Izinqumo ezimbili ziyamangaza abantu emzameni wokuqala. Umyalo ubeka uhlu oluphelele lwemigwaqo eyengeziwe esikhundleni sokwengeza, ngakho ucingo olwengeza isiqalo esisodwa lususa ngokuthula ezinye ezazikhona ngaphambili. Yakha lonke iqoqo ngocingo olulodwa.

Igama lesevisi futhi akulona ilebula owalicabanga. Lifunde kuthuluzi bese ulikopa ngqo, kuhlanganise nesijobelelo sohlobo:

networksetup -listallnetworkservices

Igama elihluka ngohlamvu olulodwa alinikezi iphutha elifanele ukufundwa noma umzila. Ukukopisha nokunamathisela yisu lokusebenza elifanele lapha, hhayi ukuphinda uthayiphe ngokukhumbula.

Uma iphrofayela ifuna umzila ophakeme

Imigwaqo ehlukanisiwe iyahlulwa umzila ophakeme kuyo yonke indawo yokuphela engayifaki ngokucacile, futhi iphrofayela ye-L2TP ehlelwe umhubhe ogcwele ifaka khona kanye lokho. Uma iphrofayela ithi konke kudlula emhubheni, uhlu lwemigwaqo eyengeziwe lushintsha kancane kakhulu. Ukufakwa kwakho akunaphutha; kumane kungahlobene nezingxenye zokuphela elingazibizi neze. Ukulawula lokhu ngokuvamile kusekuhlelweni kwephrofayela kokuthumela yonke ithrafikhi, hhayi kunoma yimuphi umyalo womzila.

Nquma ukuthi yiluphi uhlobo olufunayo ngempela ngaphambi kokuhlela okunye ukufakwa. Umhubhe ogcwele onezimo ezingafani uhlobo oluhlukile kumhubhe ohlukanisiwe oneziqalo ezithile, futhi ukuxuba kokubili kwenza ithebula okungekho muntu ongalibikezela.

Uma inhlangano idinga umhubhe ogcwele, yeka ukuzama ukuwuhlukanisa endaweni futhi yisa isidingo kulowo ophethe inqubomgomo. Umzila owengezwe endaweni ophikisana nakho uzosulwa noma kunjalo ekubuyekezweni kwephrofayela okulandelayo.

Imihubhe ye-PPP idinga ihhuku esikhundleni sokhiye

Emihubheni esekelwe ku-PPP, i-defaultroute iwukhiye wephrofayela odala umzila ophakeme; kususe futhi iklayenti liyeka ukufuna yonke indawo yokuphela. Imigwaqo bese yengezwa ngemva kokuvela kwesixhumi, ngokuvamile isuka ku-/etc/ppp/ip-up:

#!/bin/sh
/sbin/route add -net 192.168.1.0 -interface ppp0

Gcina iskripthi siphethwe i-root futhi sisebenziseka, futhi wengeze isivikelo egameni lesixhumi uma kukhona iphrofayela yomhubhe engaphezu kweyodwa emshinini. Ihhuku elisebenza kukho konke ukuxhumana kwe-PPP futhi licabanga igama ledivayisi elilodwa iyiphutha elincane elinokuphila isikhathi eside.

Qinisekisa ukuhlukaniswa ngezicelo ezintathu

Thwebula ithebula ngenkathi uxhunyiwe futhi uphawule ukuthi yisiphi isixhumi esisebenza umhubhe. Bese uhlola indawo yokuphela ethile esikhundleni sokuthemba isimo sokuphuma somyalo owudalile. Ikhodi yokuphuma ibika ukuthi ithuluzi lamukele izimpikiswano, hhayi ukuthi ithrafikhi ihamba ngendlela obuyihlose.

Qeda ngezicelo ezintathu ezibonisa ukuhlukaniswa: i-host eyodwa yangaphakathi ngekheli, igama langaphakathi elilodwa ngokusebenzisa isixazululi sangaphakathi, nendawo yokuqala evamile okufanele isasebenzise uxhumano lwasekhaya. Uma indawo yokuqala manje idlula emhubheni futhi, ukuhlukaniswa akuzange kwenzeke, noma ngabe uhlu lwemigwaqo lubonakala luthini.

Xhuma futhi uphinde isicelo sangaphakathi, ngoba imigwaqo eyengezwa ngesandla ingaphila isikhathi eside ukudlula isixhumi esiyenze yasebenza futhi iguqule ithrafikhi ibe umgodi omnyama ngokuthula ngemva kokuwa komhubhe.

Izihloko ezihlobene