MULTI: ikheli lomthombo elingalungile elivela kuklayenti: kwakuyikheli likabani?
Umthombo wangaphakathi awuhambisani neklayenti eliyilethile. Hlanganisa nokwabiwa kwethela, i-LAN engemuva kweklayenti, noma ubunikazi obuphindiwe.
Ilogi yeseva iphrinta i-MULTI: bad source address from client, ilahla iphakethe, futhi iseshini ihlala ixhunyiwe. Le nhlanganisela iyadida abantu abafunda umyalezo njengokwehluleka kokuqinisekisa. Akunjalo: iklayenti liqinisekisile, futhi iphakethe elifikile laliphethe ikheli lomthombo wangaphakathi iseva engakwazanga ukulixhumanisa naleso sibonelo seklayenti. Ukuhlola kwenzeka ngaphambi kokulethwa, yingakho ithela libonakala linempilo kuyilapho kungekho lutho olusizo oludlulayo.
Yini iseva eqhathanisa ngaphambi kokulethwa
Kuwo wonke amaphakethe avela kuklayenti, iseva endaweni yomsebenzisi ibheka ikheli lomthombo ngaphakathi kwethela bese ibuza isimo sayo sangaphakathi sokuhamba ngemizila ukuthi lelo kheli ngelakuklayenti liphi. Uma umnikazi kuyisibonelo esinye, noma kungekho mnikazi nhlobo, iphakethe liyalahlwa futhi isixwayiso sikhishwe.
Ukulethwa okuvamile ngesixhumi sethela akwenzeki neze.
Lokho kuhleleka kuchaza imininingwane edida abantu: izibali zocingo lomlilo lomphathi azinyakazi, ngoba iphakethe alikaze lifinyelele ucingo lomlilo. Ukulungisa ukuhlunga komzila obuyayo kumphathi akushintshi lutho lapha, ngoba ukwenqatshwa kwenzeka ekuhlolweni kokuxhumana kwedemon uqobo. Funda umyalezo njengesitatimende ngobunikazi, bese uthola ukuthi yisiphi kwezimo ezintathu esikudala.
Imithombo emithathu yekheli langaphakathi elingahambisani
Iklayenti kungenzeka lithumelela lisuka ekhelini elingalinikezwanga, lisuka kunethiwekhi okungekho owathi ngeyakhe, noma lisuka ekopini lobunikazi osele bunomnikazi. Womithathu ukhiqiza umugqa ofanayo welogi. Bahluka kulokho okufanele ukushintshe. Qala ngekheli nohlu lwabelo lwamanje, bese uvumela lawo maqiniso amabili ukuba akhethe icala.
Ukubahlukanisa kudinga amaqiniso amabili: ikheli elenqatshwe kulogi, kanye nezabelo iseva ezithatha njengezamanje. Okwesibili kuyatholakala kumbono wesimo noma wokuphatha wesibonelo esisebenzayo, futhi iyona kuphela igunya okufanele kududuzwe nayo, ngoba ifayela lokuhlela libhala izinhloso hhayi isimo samanje.
Bhala kokubili ngaphambi kokushintsha noma yini, bese uhlukanisa. Isithombe sesikrini esithathwe ngemuva akusona irekhodi lesimo esakhiqiza isixwayiso. Gcina nesigxivizo sesikhathi, ngoba izabelo ziyafuduka phakathi kwemihlangano.
| Rejected source is | Likely cause |
|---|---|
| The client's own tunnel address | Static assignment conflict, wrong profile, or manual address change |
| A host behind that client | Missing internal ownership for that prefix |
| An address belonging to another session | Two devices sharing one identity or one static address |
I-LAN engemuva kweklayenti ne-iroute
Uma iklayenti lesayithi lihambisa ngemizila inethiwekhi yalo yangasese, leyo nethiwekhi kufanele imenyezelwe njengeye klayenti. Ifayela elikhethekile leklayenti elinokufakwa kwe-iroute likwenza lokho, futhi ukufakwa kusho isiqalo esivunyelwe ukuba iklayenti lisithwale.
Umzila wekherneli okhomba leso siqalo esifanayo etheleni uyisidingo esihlukile, futhi ukuswengezwa kwaso akushintshi lutho ebunikazini bangaphakathi bedemon.
# /etc/openvpn/server/ccd/site-b
iroute 192.168.70.0 255.255.255.0Qinisekisa ukuthi ubunikazi obusebenzayo buhambisana negama lefayela, ngoba ukungahambisani kusho ukuthi ifayela alilayishwa neze futhi uphawu lufana nokufakwa okungekho. Ungaswengezi i-iroute ebanzi ukuze uthulise isixwayiso, ngoba lokho kuguqula umthombo ongalindelekile ube ngovunyelwe ngaphandle kokuphendula ukuthi kungani iklayenti likuthumele. Incwadi ye-OpenVPN 2.6 ibhala i-iroute, i-duplicate-cn kanye nokumephuwa kobunikazi njengezilawuli ezihlukile.
Ubunikazi obufanayo emishinini emibili
Iphrofayela ekopishiwe kwikhompyutha yamathanga yesibili iphethe isitifiketi esifanayo negama elivamile elifanayo. Kuye ngezilungiselelo zeseva, ukuxhumana okusha kungathatha indawo kwesidala, futhi isibonelo esiphethe ubunikazi siyawina ukuhlolwa kokuxhumana.
Lokho kwenza iphutha libonakale lingapheli futhi livela kuphela lapho womabili amadivayisi ephapheme.
Ukuvumela amagama avamile aphindiwe kuvumela kokubili ukuxhumana, kodwa akubaniki amakheli aqinile azimele noma ubunikazi obuzimele. Uma amadivayisi amabili kufanele abe khona ndawonye, babhalise ngokwehlukana ukuze ngayinye ibe nobunikazi bayo nokwabiwa kwayo. Ukuthatha isilungiselelo sokuphinda njengokulungiswa kwalesi sixwayiso kushiya imfihlakalo endaweni yayo futhi kwengeze enye.
Fakazela ukuthi ukuxhumana kwashintsha
Sebenzisa isilungiso ngumnikazi wokuhlela, bese uxhuma kabusha iklayenti elithintekile ukuze umgomo omusha ulayishwe.
Phinda ukuhamba okufanayo futhi uqinisekise izinto ezintathu: umthombo wangaphakathi wephakethe, isibonelo seklayenti iseva esixhumanisa nayo, kanye nokuziphatha kwendawo ekuyiwa kuyo ngemuva kwalokho.
Uma isixwayiso siphela kodwa uhlelo lusahluleka, inkinga isifudukele kwenye indawo hhayi ukunyamalala. Ukudlulisela, imithetho yocingo lomlilo nomzila wokubuya kuyizigaba ezihlukile, futhi ukuphumelela ukuhlolwa kokuxhumana kusho kuphela ukuthi iphakethe lavunyelwa ukuphuma etheleni.