I-IP eqinile ye-OpenVPN yeklayenti ngayinye: ifconfig-push, hhayi ipp.txt

Ifayela lokuzinza liwumlando, hhayi ukubhuka. Khetha igama leklayenti elifanele, hlanganisa itopology, futhi ubonise ikheli kuxhumano olusha.

Ukuhlela umugqa ku-ipp.txt kuzwakala njengokubhuka ikheli, kodwa akunjalo. Lelo fayela, eliqanjwe yi-ifconfig-pool-persist, libhala ikheli igama elivamile elalinayo okokugcina ukuze ichibi likwazi ukubuyisela elifanayo lapho kufanelekile. Akukho lutho kuwo olubopha uxhumano olulandelayo kuleyo nombolo.

Yenza izivivinyo ezingezansi ngokulandelana. Ngayinye iqinisekisa indlela noma ithi kume futhi ulungise okokufaka.

Ifayela lokuzinza lenzelwe ini

Ifayela likhona ukuze amakheli ahlale eqinile phakathi kokuqalisa kabusha, okwenza ukuxhuma kabusha kube lula futhi amalogi afundeke kalula. Lifundwa njengomlando futhi libhalwa njengomlando, futhi indlela yokwaba ihlala ikhululekile ukukhetha elinye ikheli lapho inkomba ingafani: elinye ichibi, ukwabiwa okushayisanayo noma iklayenti elafika ngemuva kokugcwala kwechibi. Yingakho ukuhlela ngesandla kungabonakala kuphelele efayeleni futhi kungashintshi lutho kuxhumano. Kubheke njengenqolobane yezinqumo ezedlule, hhayi njengomthombo wenqubomgomo.

Uma udinga ikheli elithile leklayenti elithile, indlela ebhaliwe i-ifconfig-push, futhi ingeyokuhleleka okunikeza lelo klayenti.

Qinisekisa ukuthi kukhethwe iklayenti elifanele

Ukwabiwa okucacile kudingwa ngegama elivamile leklayenti, ngakho ifayela eliqanjwe ngobunikazi obungalungile alifundwa neze. Qinisekisa ukuthi iseva ibona ini njengegama lalelo klayenti, ikakhulukazi lapho i-username-as-common-name ilishintsha khona ngemuva kokuqinisekisa. Bese uqinisekisa ukuthi igama lefayela lihambisana ngqo nalelo nani, kuhlanganise nohlamvu olukhulu noluncane.

Cabanga ngokwenzeka kanyekanye ngesikhathi ulapha. Uma i-duplicate-cn ivunyelwe, amadivayisi amaningi angethula ubunikazi obufanayo, futhi ikheli elilodwa eliqinile alikwazi ukuba yingqayizivele kubo bonke. Nquma ukuthi ikheli eliqinile likufanele yini ukwenqaba izikhathi zokusebenza kanyekanye zalolo bunikazi, ngoba lezi zimfuneko ezimbili azikwazi ukugcwaliseka ngesikhathi esisodwa.

Qinisekisa ukuthi izinombolo zihambisana netopology

Incazelo yama-agumenti incike kutopology yomhubhe, futhi yilapha lapho isibonelo esikopishiwe senza khona umonakalo omkhulu. Ekuhlelweni kwakudala kwe-net30 iklayenti ngayinye ithatha ibhlokhi yamakheli amane, ngakho i-push inikeza ipheya lamakheli. Kutopology ye-subnet iklayenti ithola ikheli elilodwa kanye nemaski yechibi, futhi isimo sepheya asilungile. Funda itopology kusukela ekuhlelweni okusebenzayo ngaphambi kokubhala umugqa.

# /etc/openvpn/ccd/partner-a   (subnet topology)
ifconfig-push 10.44.0.61 255.255.255.0

Hlola ikheli ngokumelene nakho konke okunye okungase kube ngumnikazi walo: okunye ukwabiwa okucacile, ububanzi bechibi eliguquguqukayo kanye nanoma iyiphi indlela eqinile ecabanga umsingathi oqinile. Ikheli elihlangana nechibi lizosebenza kuze kube yilapho ichibi likunikeza omunye umuntu, futhi lokho kwehluleka kuzobonakala kungahleliwe.

Hlola umphumela kuxhumano olusha

Isikhathi esikhona sigcina ikheli elisinikwe, ngakho ukuhlolwa okuwukuphela okunengqondo uxhumano olusha. Nqamula iklayenti, xhuma futhi, bese ufunda ikheli elilitholile ngempela kanye nemizila efike nalo. Uma ikheli lisaqhubeka liguquguquka, ukwabiwa akuzange kusetshenziswe, futhi isinyathelo esilandelayo ukusesha ekuhlelweni, hhayi okunye ukuhlela efayeleni lomlando.

Gcina ubufakazi ndawonye: igama leklayenti, ifayela elihambisanayo, ikheli elabiwe kanye nechibi elivela kulo.

Ekugcineni, ikheli lomhubhe eliqinile akusona isiqinisekiso sedivayisi. Likhomba indawo ohlelweni lwamakheli, kuyilapho ukuqinisekisa kusencike kusitifiketi nasekhawunini. Ukudida kokubili kuguqula ukungqubuzana kwamakheli kube umcabango wokuphepha ongabhalwanga muntu.

Izihloko ezihlobene