Ukufinyelela idivayisi yasekhaya nge-VPN yokufinyelela kude: izango ezinhlanu

I-VPN yokukhishwa ku-inthanethi yezentengiselwano ifihla ikheli lakho; ayikuxhumanisi nekhaya lakho. Ukufinyelela i-NAS noma iphrinta kunethiwekhi yasekhaya kudinga isango elikuleyo nethiwekhi kanye neklayenti elakha umhubhe kulo. Ipaki ke kufanele idlule izivivinyo ezinhlanu, futhi noma yikuphi ukwehluleka kwazo kubonakala kufana ngaphandle.

Isango 1: iklayenti kufanele likhethe umhubhe

Hlola ukuthi ingemuva lokuya lapho lihamba ngempela yini lingena emhubheni kuklayenti. Iphrofayela ye-split-tunnel ethumela kuphela i-subnet ye-VPN ngokwayo izothumela i-192.168.x.x ngqo ngaphandle kwesikhombimsebenzisi sendawo, lapho ingafiki ndawo. Bheka ithebula lokuhamba kuklayenti, hhayi igama lephrofayela.

Lokhu ukwehluleka okuvame kakhulu kumaklayenti ocingo, avame ukuthumela kuphela i-DNS noma ingemuva elilodwa ngokuzenzakalela. Uma indlela ingekho, ukuxhawula kungaphelela kuyilapho idivayisi ingakwazi ukufinyeleleka.

Qinisekisa ukuthi ikheli ledamu leklayenti kanye ne-subnet yasekhaya akuxhumani ngaphambi kokuqhubeka.

Isango 2: isango kufanele lidlulise

I-VPN iphelela kumsingathi okufanele adlulise ipaki ekhululiwe ku-LAN. Lokho kudinga ukudluliswa kwe-IP kuvuliwe kanye nenqubomgomo yodonga lomlilo evumela ukugeleza kusuka kusikhombimsebenzisi se-VPN kuya kusikhombimsebenzisi se-LAN. Kudivayisi yerutha lokhu ngokuvamile kwakhiwe ngaphakathi; kubhokisi le-Linux elisebenza i-strongSwan noma i-WireGuard lezi izilungiselelo ezimbili abantu abazikhohlwayo. Hlola zombili ngaphambi kokuhlola isevisi, ngoba ngayinye iyodwa inika isikhathi sokuphela esifanayo.

Hlola ngokubamba kusikhombimsebenzisi se-LAN, ngoba ipaki engaveli nakanye lapho yalahlwa noma ayizange idluliswe.

Lokhu ukwehluleka okuhlukile kusevisi enqaba ukuxhumana, futhi umehluko usindisa isikhathi esiningi. Gcina imvume incane, ikhawulelwe kusevisi nasedamini le-VPN esikhundleni se-subnet yonke.

Isango 3: indlela yokuphendula inquma konke

Ilitshe liphendula ikheli lomthombo elikubonile, okuyikheli ledamu leklayenti noma isango, kuye ngokuthi uyahumusha yini. Uma isango elizenzakalelayo lentsha kuyirutha yasekhaya futhi leyo rutha ingenayo indlela eya edamini le-VPN, impendulo iphuma nge-inthanethi futhi ife. Lokhu ukuxhumana okuqondile okuyingxenye eyodwa.

Kunezixazululo ezimbili ezisemthethweni: engeza indlela yedamu esangweni le-LAN, noma wenze i-source-NAT esangweni le-VPN ukuze ilitshe libone kuphela ikheli lesango. Eyesibili ilula futhi ilahlekelwa ubunikazi bomthombo wangempela.

Khetha eyodwa ngamabomu futhi ubhale ukuthi iyiphi, ngoba imithetho yodonga lomlilo namalogo zincike kukho. Umhlahlandlela wokudlulisa we-strongSwan udlula ohlangothini lwe-Linux lwaleso sinqumo.

Isango 4: amagama nokuxhumana kwezingemuva

Amagama okutholwa endawo awadluli umngcele ohambayo, ngakho idivayisi evela ngegama elilunge ekhaya ingase ingabonakali ngomhubhe. Nikeza i-DNS yesifunda esiyimfihlo, noma bhala ikheli. Noma yiliphi igama olisebenzisayo kufanele lixazululeke entweni iklayenti elikude elingayihambisa. Yingakho idivayisi ingafinyeleleka ngekheli futhi ingabonakali ngegama ngasikhathi sinye.

Izingemuva ezixhumanayo zingenye ingibe: uma idamu leklayenti liyi-192.168.1.0/24 futhi inethiwekhi yasekhaya nayo injalo, iklayenti lithatha indawo njengendawo yasekhaya futhi aliyithumeli ngomhubhe nakanye.

Phinda unombolo ohlangothini olulodwa, noma sebenzisa idamu elivela ebangeni ongayoke ulihlangabezane nalo ekhaya.

Isango 5: hlola ngaphandle kwekhaya

Ukuhlola okuvela ekhishini akufakazi lutho, ngoba ithrafikhi ingase ingaphumi neze ku-LAN. Xhumana ne-hotspot yeselula noma enye inethiwekhi, bese uhamba izango ngokulandelana: indlela kuklayenti, ukubamba kusikhombimsebenzisi se-LAN, impendulo yesevisi, ukubamba kwempendulo nokuxazululwa kwamagama. Isango lokuqala elingalethi bufakazi yilapho umsebenzi ukhona.

Uma isevisi iphendula kodwa igama lingaphenduli, unenkinga ye-DNS hhayi inkinga yomhubhe.

Gcina ukucushwa okusebenzayo kunothi nedamu, indlela kanye nokukhethwa kwe-NAT, ngoba ukushintshwa kwerutha okulandelayo kuzosetha kabusha kuzo zontathu.