Umsizi wesiphathi se-OpenVPN: inethiwekhi kanye ne-netmask, hhayi i-CIDR neze

Umugqa wesiphathi oxuba isijobelelo se-CIDR nemaski enamachashazi umisa i-daemon ngaphambi kokuba ivule ngisho imbobo. Umsizi server we-IPv4 ufuna izingxoxo ezimbili ezihlukene: ikheli lenethiwekhi eliqondisiwe, bese kuba i-netmask ngesimo esinamachashazi. Konke okunye kulowo mugqa wukuqagela, futhi kukuqagela lapho usayizi wephuli namamaski amaklayenti engahambi kahle.

Izingxoxo ezimbili ezamukelwa umsizi

Bhala inethiwekhi kuqala bese kuba imaski, ngaphandle kokuxhuma noma yini ekhelini:

server 10.72.16.0 255.255.240.0

Lena yifomu ye-/20. Umugqa ongezansi uyiphutha, futhi wehluleka ekuhlaziyeni izinketho, hhayi ngesikhathi sokusebenza:

server 10.72.16.0/20 255.255.240.0

Hlukanisa imibono emibili lapho ulungisa lokhu. Ubude be-prefix nemaski enamachashazi kuchaza ibanga elifanayo, kodwa umsizi akamukeli kokubili ngesikhathi esisodwa, futhi umugqa owenqatshiwe ukhiqiza iphutha lezinketho elisho umyalo, hhayi izibalo.

Qondisa inethiwekhi ngaphambi kokubhala imaski

Ikheli lokuqala ikheli lenethiwekhi lebanga, hhayi ikheli leklayenti elilula ngaphakathi kwayo. Ku-/20 ibanga lihamba kusukela 10.72.16.0 kuya 10.72.31.255, futhi yilona kuphela lokuqala eliyingxoxo yenethiwekhi evumelekile. I-/21 isebenzisa 255.255.248.0 futhi ihlanganisa 10.72.16.0 kuya 10.72.23.255, ngakho umugqa wayo server 10.72.16.0 255.255.248.0.

Ukushintsha i-prefix kushintsha ibanga futhi akukho okunye. Akushintshi ukuthi iklayenti elilodwa lithola amakheli amangaki, ngoba lokho kuyisici se-topology, hhayi semaski kulo mugqa.

Qinisekisa iphuli kusukela ohlangothini lwesiphathi

Qala isenzakalo ngaphambili ngokuloga okuningiliziwe futhi ufunde imigqa ekhipha umsizi. Iphuli eliyakhile liphrintwa ekubhaleni, okuyinto ethembeke kakhulu kunokubala izibalo ngesandla:

openvpn --config /etc/openvpn/server.conf --verb 4 --dev tun9 --port 1195

Funa isifinyezo sephuli eduze nengxenye ephezulu yokuphuma. Sibalula ibanga elibekelwe umsizi, futhi uma lelo banga lingahambisani nenhloso yakho, izingxoxo ezisemugqeni zingalungile, kungakhathaliseki ukuthi izibalo zemaski zithini.

Bese uxhuma iklayenti elilodwa futhi uthole umugqa oqopha ikheli elinikezelwe kulo. Lelo kheli elilodwa, eceleni kwebanga lephuli, likutshela ukuthi iklayenti lihlale ngaphakathi kwebhloku eligciniwe noma endaweni obungalilindele. Uma kokubili kungahambisani, lungisa izingxoxo hhayi iklayenti. Uma kuhambisana futhi iklayenti lingakwazi ukufinyelela lutho, iphuli kwakungeyona inkinga neze.

Funda imaski yeklayenti ugcine i-topology engqondweni

Iklayenti elibonisa i-/30 kusixhumi saso somhubhe akubona ubufakazi bephuli eliphukile. Ekukhetheni amakheli kusuka ephuzwini kuya ephuzwini iklayenti ngalinye lithola ibhloku elincane futhi imaski yesixhumi sayo ichaza lelo bhloku, kuyilapho iphuli lesiphathi lihlanganisa konke. Ku-topology yenethiwekhi engaphansi, imaski yeklayenti ihambisana nemaski yephuli esikhundleni salokho. Ngakho imaski yodwa isho ukuthi iyiphi i-topology esebenzayo, hhayi ukuthi iphuli libhalwe ngendlela efanele yini.

Hlola i-topology emisiwe kanye nekheli elinikeziwe ndawonye ngaphambi kokufinyelela esiphethweni:

ip -4 addr show tun0

Uma ikheli lingaphakathi kwephuli futhi imaski incane kunephuli, lokho yi-topology eyenza umsebenzi wayo. Uma ikheli lingaphandle kwephuli, iphuli alilungile, futhi akukho ukuhlola ohlangothini lweklayenti okuzolungisa lokho.

Ukushintsha iphuli elisebenzayo

Khetha ibanga elingadlulisi nephuli lamanje, i-LAN, noma noma yimuphi umzila osudluliselwe kumaklayenti. Ukudlulana kuwukuhluleka okusinda ekuqaliseni kabusha bese kuthi ezinsukwini kamuva kubonakale njengesizinda esingafinyeleleki kusukela ohlangothini olulodwa.

Shintsha umugqa, qalisa kabusha futhi ufunde iphuli lokuqalisa kabusha ngaphambi kokuvumela abasebenzisi ukuba babuye. Uma ibanga elisha lishayisana nokuthile, ukuphuma kokufanayo kokuqalisa kubonisa lokho ngokushesha, futhi ukuhoxisela emuva ukuhlela umugqa owodwa kanye nokuqalisa kabusha okunye.

Gcina ibanga elidala libekelwe isikhathi esithile ngemuva koshintsho. Amaklayenti axhuma sekwedlule isikhathi asengaba nekheli elivela kuphuli lwangaphambilini, futhi ibanga elisha elisebenzisa lawo makheli lisebenza kabusha likhiqiza ukwabiwa okuphindwe kabili okubonakala njengephutha lokuhlela imizila. Incwadi ye-OpenVPN 2.6 ibhala izingxoxo zomsizi kanye nokwanda kwayo, okuyinto okufanele ifundwe ngaphambi kokucabanga ukuthi umyalo usebenzisa umbhalo ofanayo nowomakhelwane wawo.