Hlela izigaba zamakheli e-VPN ezizimele ngaphambi kokuba iziza zishayisane
Izigaba ezizimele ezigqagqene zephula umzila ngaphambi kwanoma iyiphi indlela yomhubhe. Bhala uhlu lwamaprefikhi, linganisa amachibi amaklayenti ngokwehlukile kuma-LAN eziza futhi uhlole ohlangothini olukude.
Iziza ezimbili ezisebenzisa zombili i-192.168.1.0/24 zingafinyelela i-inthanethi futhi zehluleke ukufinyelelana. Isango alibiki phutha; lifaka umzila owodwa wale prefikhi futhi lithumela yonke iphakethe kumlingani oyifuna kuqala. Akukho lutho ekuxhawulaneni, ohlwini lwezinhlamvu zokubhala noma kusilinganiso sesixhumanisi okusho ukuthi umuphi umlingani onephutha. Ukuhlela amakheli yingxenye yedizayini ekuxazulula lokhu ngaphambi kokuba noma ubani axhumane.
Bhala uhlu lwaso sonke isikhala okufanele sifinyeleleke
Bhala phansi izigaba okufanele zihanjiswe, hhayi kuphela lezo ozilungisayo. Lokho kusho ama-LAN eziza, amachibi amaklayenti e-VPN, ama-subnet asefwini, amanethiwekhi okuphatha nalawo angaphandle kwebhendi, izingxenye zaselabhorethri kanye namanethiwekhi abasebenzisi abaxhumana nawo ngokuvamile besuka ekhaya. Irawutha yomsebenzisi ethunyelwa njenge-192.168.1.0/24 ayiyona into ecatshangelwayo, futhi leyo prefikhi iyavela emahhotela nasezindaweni zemihlangano. Uhlu luyitafula le-prefikhi, umnikazi nenjongo, futhi iyona kuphela incwadi evimbela ukuthi isigaba esifanayo sikhishwe kabili.
| Prefix | Purpose | Owner |
|---|---|---|
| 10.20.0.0/16 | site LANs | network team |
| 10.20.100.0/22 | VPN client pool | remote access |
| 10.20.200.0/24 | management | operations |
Engeza amaprefikhi owalindele onyakeni ozayo, ngoba uhlelo oluhlanganisa kuphela lwanamuhla luyahluleka esizeni sokuqala esisha. Maka umugqa ngamunye ukuthi ubani angawushintsha, hhayi kuphela ukuthi ungubani umnikazi.
Ukusetshenziswa kabusha yikho okwenza lokhu kube nzima: isikhala esizimele sinomkhawulo futhi yonke inhlangano ibheka i-10.0.0.0/8 njengeyayo. Uhlelo alunakuthembisa ukuthi i-LAN yezivakashi yesikhathi esizayo ngeke yehlele kwenye yamaprefikhi akho, ngakho idizayini kufanele isho ukuthi kwenzekani lapho kwenzeka. Imithetho emibili yenza iningi lomsebenzi. Beka amachibi amaklayenti ebhulokini elilodwa elilandelanayo ongalifingqa, futhi ungahlali wabela isigaba esivele sihanjiswa elinye ithimba. Konke okunye kuyirekhodi umuntu akugcina kusesikhathini.
Kungani ukugqagqana kunqoba itafula lomzila
Umzila uyiprefikhi kanye nokugxuma okulandelayo, futhi ukudlulisa kukhetha iprefikhi ehambisana kakhulu ende kunazo zonke. Lapho abalingani ababili bafuna i-192.168.1.0/24 efanayo, itafula ligcina ingeno eyodwa yayo, ngakho ithrafikhi yazo zombili iziza iphuma ngomhubhe ofanayo. Isiza sesibili asilungiswanga kabi; asifinyeleleki ngoba esokuqala siphendula ngamakheli afanayo. Asikho isilinganiso esingahlukanisa, ngoba ukuhambisana kwenzeka ngaphambi kokuboniswa kwezilinganiso.
Ukwehluleka akulingani futhi kulula ukukufunda kabi. Amahostu esizeni A afinyelela isango nezinye izinsizakalo, kuyilapho amahostu esizeni B engaphenduli lutho, futhi ilogi ikhombisa umhubhe onempilo ezinhlangothini zombili. Lelo phethini ukushayisana kwamakheli hhayi ukwehluleka kokuqinisekisa noma kwesihlangu somlilo, futhi ukuqinisekisa kudinga idampa eyodwa yetafula eqhathaniswa nohlu.
Linganisa ngamabomu ichibi lamaklayenti nezigaba zeziza
Ichibi lamaklayenti e-VPN yisigaba isango elinikeza kuso ikheli elilodwa ngesikhathi, ngakho ubukhulu balo bunciphisa ukwenzeka kanyekanye. I-/24 inamakheli angu-254 asebenzisekayo, okuyisihlelo eqenjini elincane futhi kuyisicindezelo egatsheni elisebenzisa iziqukathi; i-/22 ayibizi lutho olwengeziwe esikhaleni esizimele futhi isusa ingxabano. Gcina ichibi lilandelanayo futhi likude nayo yonke i-LAN yesiza, ukuze umzila ofingqiwe oya kumaklayenti ungagwinyi isiza. Gcina isigaba singasetshenziswa ngisho lapho ichibi lingenalutho, ngoba isigaba esingabhalwanga yisona esizokwabiwa unjiniyela olandelayo.
Iziza zithola izigaba ezilinganiselwe amahostu alindelekile kanye nokukhula, ziqondaniswe emngceleni ofingqeka kahle. Izikhala ezenziwe ngamabomu phakathi kokwabiwa azibizi lutho futhi zithenga indawo yokuhlanganisa kamuva.
Bese uhlola uhlangothi abantu abalukhohlwayo: indlela yokubuya. Irawutha yesiza ngayinye idinga umzila oya echibini lamaklayenti, futhi isihlanganisi sidinga umzila oya kuwo wonke amaprefikhi eziza esiwasebenzelayo. Itafula lamaprefikhi elihle ngaphandle kwendlela yokubuya eya echibini liseyidizayini ephukile, futhi uphawu ukuxhumana ohlangothini olulodwa okungaphenduli lutho. Gcina izinhlangothi zombili etafuleni elilodwa futhi ulibuyekeze njalo lapho kwenezwa isiza.
Ukuhumusha nokubhala kabusha izinombolo kuxazulula izinkinga ezihlukene
Lapho ukugqagqana sekukhona, kunezinketho ezimbili eziqotho neyodwa engaqotho. Ukubhala kabusha izinombolo kususa ukushayisana unomphela futhi kubiza iwindi lokunakekela kanye nayo yonke ikheli eliqoshwe ngamandla olikhohliwe. Ukuhumusha amakheli kuhlanganisa isigaba esizimele sohlangothi olulodwa nesinye isigaba emaphethelweni omhubhe, okushiya iziza zombili zingathintekile kodwa kwengeza isimo, kwephula izinqubo ezifaka amakheli futhi kwenza amalogi kube nzima ukuwafunda. Inketho engaqotho umzila wehostu oya kuseva eyodwa, odlula ukuhlolwa okukodwa futhi wehluleke kukho konke okunye.
Khetha ngokulawula nangobude bokuphila. Isiza osiphethe futhi ongasihlela siwela endleleni yokubhala kabusha izinombolo; inethiwekhi yomlingani ongakwazi ukuyithinta futhi esetshenziselwa uhlelo olulodwa iyikhandidethi yokuhumusha ngemephu ebhaliwe. Bhala leyo mephu, ngoba ukuhumusha okukhona kuphela ngaphakathi kwefayela lokumisa kuyanyamalala ngesikhathi ifayela lishintshwa.
Hlola ohlangothini olukude ngaphambi kokusabalalisa
Hlola kunethiwekhi engasibambi isango, ngoba i-LAN yesango ngokwayo ifihla iningi lamaphutha omzila. Xhuma iklayenti ngemuva kwerawutha yasekhaya evamile, bese ufinyelela insizakalo esizeni ngasinye neyodwa ngaphakathi kwechibi lamaklayenti. Hlola nendlela ephambene, kusuka kuhostu yesiza kuye kuklayenti, ngoba izindlela zokubuya zehluleka ngokuzimela. Ukuhlolwa okupinga kuphela isango kufakazela ukuthi umhubhe uyasebenza hhayi okunye.
Gcina izigaba, abanikazi namamephu okuhumusha kurekhodi elilodwa elabiwe isiza esilandelayo elilifunda ngaphambi kokwaba noma yini. Libuyekeze lapho kwenezwa isiza, futhi ubheke isigaba esingabhalwanga njengephutha hhayi isimanga.
Irekhodi iwumphumela. Uhlelo oluhlala emqondweni wabantu abathathu luyahluleka okokuqala lapho oyedwa wabo esekhefini, futhi ukugqagqana okutholakala ekukhiqizeni kubiza kakhulu kunetafula.