I-router entsha, iseva ye-VPN efanayo: hambisa umnyango wayo womphakathi

Uxhuma i-router entsha, i-inthanethi iyabuya, futhi iklayenti le-VPN ocingweni lisabheke ikheli elingasaphenduli. Akukho okushintshile kuseva ye-VPN, ngoba iseva ayikaze ihambiswe. I-router yayingumnyango womphakathi, futhi ukuyishintsha kwashintsha ikheli, umthetho wokudlulisa kanye ne-isibuyekezi se-DNS eguqukayo ngesikhathi esisodwa.

Thatha ukushintsha njengezinguquko ezimbili, hhayi eyodwa, futhi gcina indlela yasendaweni yokungena ku-interface yokuphatha ngenkathi usebenza.

Bhala inguquko ngaphambi kokuxhuma

Bhala i-prefix ye-LAN, ikheli leseva nendlela elinikezwa ngayo, isilaleli kanye nokuthutha okusetshenziswa yi-VPN ngempela, umthetho wokungena oyisakaza, kanye negama eligcinwe amaklayenti. Bese ubhala ukuthi iyiphi imshini ebuyekeza irekhodi le-DNS eguqukayo namuhla: kungaba i-router, iseva uqobo noma i-ejenti ehlukile kusihost esinye. Yenza lokhu ngesikhathi amakhasi amadala okuphatha esalayisha. Isithombe-skrini somthetho wokungena singcono kunenombolo yephothi elikhumbulekile.

Engeza ama-prefix angasese okufanele amaklayenti afinyelele kuwo, nendlela amadivaysi ku-LAN athumela ngayo izimpendulo emuva kuzo. Kokubili kuyakhohlwa kalula ngoba isihambi sokushintsha sikhuluma ngokufinyelela i-inthanethi, hhayi ngezindlela zokubuya. Faka futhi ukulungiselelwa kwakudala uma umkhiqizi esekela ukukubuyisela, ngenkathi wamukela ukuthi ikhophi yemodeli eyodwa ayivamisile ukungeniswa ngokuhlanzekile kwesinye.

Gcina lelo rekhodi endaweni evikelwe. Ikhophi ye-router ingaqukatha ubufakazi bokungena kuxhumano lwe-WAN. Phatha ifayela elikhiqiziwe njengephasiwedi hhayi njengenothi yezilungiselelo.

Hambisa ikheli kuqala, bese ukudlulisa

Uma i-router entsha igcina i-prefix efanayo ye-LAN, nika iseva ukubekelwa kwayo kwangaphambili noma ukwabiwa okumile okulingana nakho. Uma i-prefix ishintsha, buyekeza kuqala ikheli leseva nanoma yikuphi ukubophelela kwesilaleli okulishoyo, ngoba ukudlulisa okubheke ikheli elidala kuzothumela ithrafikhi buthule endaweni engekho.

Bese wakha umthetho owodwa wokungena wokuthutha okusetshenziswa yi-VPN. Imihlahlandlela yabakhiqizi echaza ukudlulisela kuseva yasendaweni ibonisa indlela yokusebenza, hhayi indlela yokupheka evamile, ngakho hlanganisa umthetho nephrothokholi yakho yangempela kanye nephothi, hhayi nohlu olusuka kubhulogi. Ukudlulisa ku-router entsha akukwazi ukususa i-NAT yezinga lomhlinzeki ephezu kwayo, futhi awukho umthetho wasendaweni ozozenza ikheli langasese lifinyeleleke kusukela ku-inthanethi uma umhlinzeki esebenza noma yiliphi elilodwa nawe.

Qinisekisa ukuthi udonga lomlilo lweseva uqobo lusavumela leyo thrafikhi. Hlola ukuthi ingabe ikhona indawo yokungena yesibili ehlezi phakathi kwe-router ne-inthanethi, ngoba abahlinzeki abaningi banikeza imodemu ne-router kuhlangene. Funda ikheli le-WAN kudivaysi entsha bese uliqhathanisa nekheli elixazululwa amaklayenti. Uma ehluka, ukudlulisa kwakho kuhla endaweni engezona umkhawulo.

Nquma ukuthi ubani obuyekeza igama lomphakathi

Izibuyekezo zendawo yokugcina zidinga umnikazi oyedwa futhi oyedwa kuphela. Uma i-router endala yayisakaza igama, lungiselela isibuyekezi esisekelwayo kokungena esikhundleni futhi uqinisekise ukuthi irekhodi lishintshile ngempela. Uma iseva yayivele isikukhipha, shiya lelo hlelo linjalo esikhundleni sokwengeza isibuyekezi esincintisana sona esihamba phakathi kwamakheli amabili.

Lapho ukusetshenziswa kusakaza imindeni yamakheli yomibili, funda irekhodi le-A ne-AAAA. Ngayinye kufanele ikhombe isevisi elalela ngempela nevunyelwe ngendlela yayo yodonga lomlilo, futhi imephu ye-IPv4 esebenzayo ayisho lutho ngohlangothi lwe-IPv6. Gcina futhi izahlolo zobunikazi kuphrofayela yeklayenti: ikheli lomphakathi elishintshile akusona isizathu sokwamukela isitifiketi noma ukhiye wozakwethu ongahambisani.

Fakazela ukushintsha ngaphandle

Hlola ngoxhumano lwangaphandle olugunyaziwe kanye nesikhathi esisha, hhayi ngaphakathi ku-LAN. Ukuhlola kwangaphakathi ngakwikheli lomphakathi kuncike ekuziphatheni kokubuya kulelo kheli futhi kudlula endleleni ehlukile kunaleyo iklayenti langempela elizodlula kuyo.

Landela ukulandelana okulandelwa iklayenti: xazulula igama, xoxisana ngomhubhe, qinisekisa ubunikazi, bese wenza umsebenzi owodwa kumthombo wangasese. Isinyathelo sokugcina yiso esigxunyekwa abantu, futhi yiso kuphela esifakazela indlela yokubuya. Uma ukungena kuphumelela kodwa umsebenzi wangasese uhluleka, qhathanisa i-prefix entsha ye-LAN, imizila ekhethwe iklayenti kanye nendlela yokuphendula yomthombo namarekhodi akho enguquko.

Kuphela ngemuva kokuthi izinyathelo zine zidlule kungaphephile ukuhoxisa i-router endala. Yixhume, bese uphinda ukuhlola kwangaphandle kwesinye isikhathi. Irekhodi elidala elisaxazululwa ekhelini elidala lihluleka esinyathelweni sokuqala, futhi lokho kulula ukukuxilonga ngenkathi idivaysi endala iseshalofini.

Gcina imephu entsha namarekhodi akho okubuyisela

Gcina ukwabiwa kokugcina kweseva, umthetho wokungena kanye negama lomnikazi wesibuyekezo eduze kwenqubo yokufinyelela i-router endaweni. Ukushintsha okulandelayo kufanele kuqale kulelo khasi hhayi ku-traceroute.

Uma umhubhe usuhluleka ngaphandle ngemuva kwakho konke okungenhla, hlola ukuthi ikheli lomphakathi elibikwa i-router liyahambisana yini nalelo elixazululwa amaklayenti. Leyo ncwadi eyodwa yehlukanisa inkinga ye-DNS enkingeni yokudlulisa, futhi ithatha isikhathi esincane kunokufunda omunye umhlahlandlela wokudlulisa amaphothi.