I-adaptha ye-OpenVPN iyashintshashintsha ku-Windows? Hlola ikheli le-IP eliphindwe kabili

Ku-Windows, i-adaptha ye-OpenVPN ethatha ikheli, ililahle, bese iphinda lokho njalo ngemizuzwana embalwa ngokuvamile akuyona iphutha le-DHCP. I-adaptha itshelwa ukuthi isebenzise ikheli okukhona okunye osekuvele kuphendula kulo, ngakho i-Windows ilimaka njengelingasebenziseki futhi iklayenti liqala phansi. Ilogi yeklayenti ihlala ithule ngoba ukungqubuzana kuxazululwa ngaphansi kwalo, ngaphakathi kwesitaki senethiwekhi sesistimu yokusebenza uqobo.

Lowo mehluko ubalulekile, ngoba zonke izinyathelo zokuxazulula inkinga eziqondiswe ekucushweni kwethaneli zizokweqa ikheli eliphindwe kabili ohlangothini lweseva.

Qala ngelogi yezehlakalo ye-Windows, hhayi ilogi yeklayenti

I-Windows irekhoda ukungqubuzana kwamakheli kulogi ye-System ngezinhlamvu zezehlakalo 4198 no-4199. Eyokuqala ibika ukungqubuzana okutholiwe kwekheli, eyesibili ibika ukuthi i-interface ayikwazanga ukusebenzisa ikheli eyayicushwe ngalo. Azikho ezikhuluma nge-OpenVPN, yingakho kulula ukuzishaya indiva.

Khipha izehlakalo zakamuva bese uqhathanisa izikhathi zazo nomjikelezo wokuvuselelwa kwe-adaptha: Get-WinEvent -FilterHashtable @{LogName='System'; Id=4198,4199} -MaxEvents 40 | Format-Table TimeCreated,Id,Message -Wrap. Ukungqubuzana njalo ngemizuzwana eyishumi nanhlanu kuhambisana neklayenti elizama ikheli elifanayo ngokumelene nomnikazi oqhubeka ephendula ngalo. Ukungqubuzana okukodwa ngesikhathi sokuxhuma kukhombisa ukungqubuzana kwesikhathi esisodwa. Noma ngabe kuyiphi indlela, umbuzo olandelayo ukuthi ubani omunye ophethe ikheli.

Izinhlelo ezintathu zibeka amahosthi amabili ekhelini elilodwa

Buza iseva ukuthi icabanga ukuthi ubani ophethe ikheli, bese ubuza inethiwekhi ukuthi ubani ophendula ngalo. grep -H ifconfig-push /etc/openvpn/ccd/* ibala wonke amakheli ethaneli abophelwe kanye nesitifiketi okungesaso. ip -4 neigh show dev tap0 ikhombisa lokho ibhuloho elikufundile ezingeni lesibili. Ukuqhathanisa lezi zinhlu ezimbili kuthola iningi lamakheli aphindwe kabili ngaphansi komzuzu owodwa.

Izinhlelo ezintathu zibangela cishe zonke: i-entry ye-client-config-dir ibophela ikheli elilodwa kumasitifiketi amabili, ingxenye ye-tap ebhulohweni inikeza umshini ikheli umunye umhosthi osekuvele unalo ngokugxilile, noma ifayela lokuqashisa eliphelelwe yisikhathi libuyisela ikheli iklayenti elisaxhunyiwe elikholelwa ukuthi lingelalo. Icala lesithathu liyakhohlisa kakhulu, ngoba ifconfig-pool-persist isebenzisa amakheli futhi ngamabomu kumaklayenti aziwayo.

Yenza ikheli libe ngelilodwa esikhundleni sokuligijimela

Ukulandelana kokubhutha kunquma kuphela ukuthi ubani onqobayo namuhla, ngakho noma yikuphi ukulungiswa okusekelwe ekulandelaneni kokuqalisa kabusha kuthathwe njengokwesikhashana. Nika iklayenti ngalinye umugqa walo we-ifconfig-push, noma waba amakheli angagxilile asuka ebangeni okungekho bhuloho noma i-interface yeseva elithintayo. Hlola futhi uhlu lwamaklayenti ngamagama avamile aphindwe kabili, ngoba duplicate-cn ivumela amaseshini amabili ukuthi abe nobunikazi obubodwa futhi ngakho ikheli elilodwa elibophelwe. Uma idivayisi ebhulohweni idinga ngempela ikheli elingagxilile, yihambise kwisubnethi yayo noma uyigcinele kusuka ku-pool endaweni iseva ekurekhoda kuyo.

Susa ifayela le-persist kuphela ngemva kokuba wazi ukuthi liphethe iziqashiso ziphi, ngaphandle kwalokho ukuxhuma okulandelayo kuzophinda kunikeze wona lawo makheli.

Qalisa kabusha ngokulandelana okufanele bese uqinisekisa umnikazi oyedwa ngekheli ngalinye

Faka ushintsho kuseva kuqala, bese uxhuma amaklayenti kabusha, ukuze wonke umhlanganyeli abhalise ngokumelene ne-pool elungisiwe. Ukuqalisa kabusha amaklayenti kuqala kubashiya ebambe amakheli iseva esacabanga ukuthi athathiwe. Ngemva kokuqalisa kabusha, funda ifayela lesimo bese uqinisekisa ukuthi igama ngalinye elivamile livela kanye nekheli elilodwa. Amarekhodi amabili egameni elilodwa asho ukuthi iseshini endala ayikaze ivalwe, hhayi ukuthi i-pool yephukile.

Uma iklayenti lingakwazi ukugcina ikheli lalo, hlola ukuthi i-interface yebhuloho kulo hosthi efanayo iyalithwala yini. Ibhuloho elithole ikheli kudivayisi yomthengisi lizophendula i-ARP ngalo ngisho noma iseva ye-VPN isilinikeze iklayenti.

Buka ukudlula umjikelezo ogcwele wokuvuselelwa ngaphambi kokuvala ithikithi

Ukufunda okukodwa okuhlanzekile akufakazi lutho. Buka i-adaptha okungenani imizuzu eyishumi bese uphoqa ukuxhuma kabusha phakathi nendawo: Get-NetIPAddress -InterfaceAlias "OpenVPN*" | Select-Object IPAddress,AddressState. Ikheli kufanele lidlule ekuxhumeleni kabusha futhi lihlale esimweni esikhethiwe.

Bese uphinda wenze umbuzo wezehlakalo osuka esinyathelweni sokuqala futhi uqinisekise ukuthi awubuyisi lutho olusha. Ilogi ethule kukho konke ukuxhuma kabusha iwubufakazi bokuthi ukungqubuzana akusekho, kanti ilogi ethule ngemva kokuxhuma okukodwa isho kuphela ukuthi umncintiswano awukenzeki okwamanje. Ekugcineni, hlola insiza okhona ngayo ithaneli, ngoba ibhuloho elilahlekelwe ikheli lalo lingaphula indlela yomthengisi ngenkathi i-VPN uqobo ibonakala iphilile.

Rekhoda ububanzi be-pool, ikheli ngalinye elibophelwe kanye nehosthi elingelayo kumanothi eseva. Khona-ke ukungqubuzana okulandelayo kuzothatha imizuzu ukukubona esikhundleni sendlu yonke yantambama ukuphinda ukuthole.