Imodi ye-promiscuous ku-adaptha ye-VPN ibulala ukuxhumana
Ukuthwebula ku-adaptha ye-tunnel kungamisa ukudlulisa kwayo. Vala imodi ye-promiscuous, khetha ungqimba oluphendula umbuzo, futhi uthathe ifayela njengemfihlo.
I-Wireshark isebenza kahle kakhulu ku-interface ye-Ethernet, bese kuthi ku-adaptha ye-VPN, i-tunnel iyeke ukudlulisa i-traffic ngaso leso sikhathi lapho ukuqoshwa kuqala. Iwindi lokuqopha liqhubeka ligcwala, ngakho ithuluzi libonakala liphilile kuyilapho ukuxhumana ngaphansi kwalo kufa. Imodi ye-promiscuous iyimbangela evamile, ngoba umshayeli we-tunnel ocelwa wonke amafreyimu esigabeni angenaso angaphelela esimweni lapho kungaphumi lutho.
Vala leyonto kuqala, bese unquma ukuthi iyiphi ingqimba odinga ukuyibona ngempela.
Ama-adaptha amabili, imibono emibili ehlukene
Iklayenti le-VPN livamise ukwethula ama-interface amabili: elomzimba elithwala ukuthutha okubethelwe, nelokufakelwa elithwala i-traffic yangaphakathi esusiwe ukubethelwa. Aphendula imibuzo ehlukene. Ukuqoshwa komzimba kubonisa iziphetho, amachweba nosayizi wamaphakethe, kuyilapho elokufakelwa libonisa amaphrothokholi ezinhlelo njengoba i-tunnel iwadlulisa. Ukukhetha okukodwa ngaphandle kokwazi ukuthi ubuza umbuzo muni kumosha ukuqoshwa.
Akukho mbono ongaphezu komnye, futhi ukuqoshwa okukodwa akuvamisile ukuphendula imibuzo yomibili ngasikhathi sinye.
Khetha i-interface ngombuzo hhayi ngokulandelana kohlu, ngoba iklayenti lesitayela se-PPP lingethula i-adaptha yalo njengedivayisi ye-Ethernet futhi igama elibonisiwe ngeke likutshele ukuthi iyiphi ingqimba oyikhethile. Ukuqoshwa kwi-gateway noma kwichweba lesibuko kwengeza umbono wesithathu, okubonisa indlela ngemva kokudluliswa, futhi yilapho ukuhamba kwezindlela okungalingani nokuhlunga kubonakala khona.
| Capture point | What it shows | What it cannot show |
|---|---|---|
| Physical interface | Outer endpoints, ports, packet sizes | Any inner payload |
| Tunnel interface | Decrypted inner traffic | What the VPN added around it |
| Gateway or mirror | Forwarded path after the tunnel | The client's own decision process |
Kungani imodi ye-promiscuous yephula i-adaptha ye-tunnel
Imodi ye-promiscuous icela umshayeli ukuthi alethi amafreyimu angabhekiselwe kusibungu, okuyinto enengqondo esigabeni se-Ethernet esabiwe futhi enengqondo encane kakhulu ku-tunnel yephuzu-kuya-phuzu. Abanye omshayeli bayasamukela isicelo ngokuthula; abanye bayeka ukukhipha i-traffic yokuthumela emgqeni, futhi i-interface iba umgodi omnyama buthule. Ukuqoshwa kusaqopha okufikayo, ngakho ifayela libonakala njengobufakazi bokuxhumana okusebenzayo. Leyo gebe phakathi kwalokho okuboniswa yifayela nalokho okwenziwe yi-interface iwumphelela wonke umgibe.
Vala inketho ngaphambi kwephakethe lokuqala, gcina isihlungi sokuqopha sincane futhi usebenzise isigcinalwazi esincane. Isigcinalwazi esikhulu esiyindilinga ku-interface ematasa sidela khona kanye lawo mafreyimu abalulekile, okukhiqiza ukuqoshwa okuphelele yonke indawo ngaphandle kwalapho inkinga yayikhona.
Uma ukuxhumana kuma phakathi nokuqoshwa, kumisa bese ubheka ukululama. Lowo mbono owodwa uhlukanisa umphumela oseceleni wokuqoshwa nenkinga yangempela ye-tunnel, futhi uthatha isikhathi esincane kunanoma yikuphi ukulungiswa kwesihlungi.
Ukwenza ukuqoshwa kwe-IPsec kufundeke
Ukuqoshwa kwe-IPsec kukodwa akufundeki, ngoba i-ESP ibethela umthwalo. I-Wireshark ingakukhulisa uma unikeza okhiye beseshini, noma uma ikwazi ukulandela izingxoxo ze-IKE ezibakhiqizile, okusho ukuthi ukuxhawulana kufanele kube kufayela elilodwa.
Okhiye bayaphelelwa yisikhathi. Ngemva kokuba izinhlangothi zivuselele okhiye, iqoqo lokhiye abadala liyeka ukusebenza phakathi nokuqoshwa, futhi umphumela ubonakala njengephutha lesihlukanisi hhayi umngcele wesikhathi.
Landela ifomethi yokhiye ebhalwe ngumhlinzeki esikhundleni sokungenisa izinto ezivela emthonjeni ongahlobene, futhi ulindele ukuthi ezinye izinkundla zenqabe ngokuphelele lo msebenzi. Uma i-gateway ingawanikezi okhiye noma ingakuvumeli ukuqoshwa, vuma ukuthi umthwalo awukwazi ukuhlolwa lapho uhlezi khona. Amalogi eziphetho namakhawunta e-interface ubufakazi obusele, futhi ngokuvamile banele umbuzo wokuhamba kwezindlela.
Ukuqoshwa ongakwabelana ngakho ngokuphephile
Ukuqoshwa kwangaphakathi kuseduze nokuchithwa kobunikazi kunelogi. Kungaqukatha amagama, amakheli nombhalo ocacile ovela kumaphrothokholi abhalwe ngomqondo wokuthi akekho oyoke awafunde, okwenza ifayela ngokwalo libe into ebucayi hhayi ukuhlaziya.
Qinisekisa ukuthi isibungu nenethiwekhi yizona okuvunyelwe ukuthi uqoshe kuzo, bhala kokubili i-interface nesihlungi kanye nomphumela, khawulela iseshini emizuzwini embalwa ephendula umbuzo, futhi ususe ifayela uma usuqedile. Uma kufanele kwabiwe, chaza ukugeleza noma susa umthwalo kuqala.
Bese uphinda umsebenzi womsebenzisi wangempela. Ukuqoshwa okufakazela ukuthi iphakethe lafika akubona ubufakazi bokuthi uhlelo lwamukele impendulo, futhi umehluko phakathi kwalokho okubili ngokuvamile yilapho inkinga yangempela ikhona.