Qondisa isethi engaphansi yegatsha ngokuphuma kwe-inthanethi kwe-SonicWall yekomkhulu

Khetha iqembu lomthombo wegatsha, lamukele kunqubomgomo ye-tunnel, humusha ku-WAN emaphakathi, bese uhlola amaklayenti amathathu. Umzila wodwa awudali isango.

Izingcingo zegatsha kufanele ziphume ngekomkhulu kuyilapho amalaptop egatsha eqhubeka nokusebenzisa i-WAN yasendaweni, futhi inqubomgomo yomzila yodwa ngeke ikunikeze lokho. Umzila wegatsha ungakhetha i-tunnel, kodwa inqubomgomo ye-tunnel kufanele yamukele ithrafikhi, ikomkhulu kufanele iyidlulisele futhi iyihumushe, futhi impendulo kufanele ibuye ngendlela efanayo. Uma uphuthelwa yilokhu okukodwa kokuthathu, uphawu luzoba yiqembu elincane lamaklayenti alahlekelwa i-inthanethi ngesikhathi i-tunnel isebenza.

Qala ngesikhethi, hhayi ngomzila

Inqubomgomo yomzila ihambisana nomthombo, ngakho umthombo kufanele uzinze ngaphambi kwanoma yini enye. Beka amadivayisi akhethiwe eqenjini lamakheli eligcinwa umlawuli noma, kangcono, kwisegimenti ezinikezelwe elelo layo lilandela indima yedivayisi. Uma ukushintsha okujwayelekile kwe-DHCP kungahambisa ikheli elihambisanayo kwenye imshini, inqubomgomo ikhetha ngokuthula iklayenti elingalungile, futhi umbiko wokuqala uvamise ukuba mayelana nokuphequlula okunensayo okuyiwona mzila ojikelezayo.

Qamba iqembu ngokwenqubomgomo eliyisebenzelayo, hhayi ngesitezi noma umnyango, ngoba umthetho womzila uzophila kukho kokubili. Bhala ukuthi yimaphi amadivayisi akulo nokuthi ubani ovunyelwe ukwengeza elilodwa.

Engeza inqubomgomo yegatsha, bese uvikele ukulandelana kwayo

Ku-SonicWall yegatsha inqubomgomo yomzila ikhetha iqembu lomthombo, isho izindawo ezihlosiwe futhi isetha i-interface ye-tunnel njengesango, futhi yilokho okwenzelwe ukwakheka kwe-interface ye-tunnel okusekelwayo. Gcina imithetho yezindawo zasendaweni neziyimfihlo ngaphezu komthetho obanzi we-inthanethi, ngoba ukufanisa kokuqala kuyawina, futhi isiqalo esiyimfihlo esiphushwa ku-tunnel sifika ekomkhulu ukuze silahlwe kuphela. Bika futhi umzila we-firewall uqobo oya kumlingani wayo we-VPN, kungenjalo ukuthutha kwe-tunnel kuzolandela inqubomgomo encikile kuyo. Akukho kulokhu okukuphoqa ukuthi uguqule yonke i-tunnel ekhona esekelwe kunqubomgomo; i-interface ye-tunnel ingenye yezindlela ezisekelwayo phakathi kweziningi.

Ukulandelana ingxenye eshintsha ngephutha. Noma ubani owengeza okuhlukile kufanele akufake ngaphezu komthetho obanzi, futhi noma ubani ohlela umthetho obanzi angaphendula umklamo wonke ngokulondoloza okukodwa. Bhala ukulandelana okuhlosiwe eduze kwenqubomgomo futhi ukuhlole futhi ngemva kwezibuyekezo ze-firmware, ngoba ukuqanjwa kwe-interface nokuboniswa kwenqubomgomo kuyashintsha ngempela phakathi kwezinguqulo.

Qedela indlela ekomkhulu

Inqubomgomo ye-tunnel ekomkhulu kufanele yamukele ithrafikhi umzila wegatsha oyikhethayo manje. Isikhethi samahhovisi angaphakathi esikhawulelwe ku-LAN eyimfihlo yekomkhulu akusona isivumelwano sokuthwala izindawo zomphakathi ezingafuneki, ngakho inqubomgomo idinga umthombo wegatsha kanye nebanga lezindawo ozimisele ngempela. Ikakhulukazi ikomkhulu lidlulisela leyo thrafikhi engenayo ku-uplink yalo ye-inthanethi ngokwemithetho yalo yokufinyelela, futhi isibonelo sokuphuma esimaphakathi se-SonicWall sihlanganisa ukuhumusha komthombo kwenethiwekhi ekude ku-WAN emaphakathi. Ngaphandle kwalokho kuhumusha uhlangothi olukude lubona ikheli legatsha eliyimfihlo futhi alinawo umzila wokubuyela kulo.

Izimpendulo ziyisiqingatha esinye sesivumelwano. Kufanele zibuye nge-tunnel noma ngokuhumusha okunesimo okwakhelwe zona, futhi ithrafikhi eya kumasayithi ayimfihlo ingadinga ukwelashwa kwe-NAT okuhlukile kunokuphuma komphakathi. Gcina leyo mithetho ihlukaniseka, ngoba umthetho owodwa obanzi wokuhumusha ofihla wonke umthombo wangaphakathi wenza ukuloga nokuxazulula izinkinga kamuva kube nzima kakhulu ukukufunda.

Nquma ukuthi iqembu lenzeni uma i-tunnel iwa

Uma ukuphuma esimaphakathi kuyisidingo hhayi ukuthanda, ukubuyela ku-WAN yasendaweni kuwukwehluleka kokuhambisana nakuba abasebenzisi bahlala beku-inthanethi. I-SonicOS ibhala umzila wokulahla i-interface ye-tunnel njengendlela esekelwayo yokuvimbela ithrafikhi ekhethiwe ukuthi ingathathi indlela ehlukile engadingekile.

Qondanisa ububanzi nokubaluleka kwalowo mzila nenguqulo efakiwe, futhi uwuhlole ngokwehlisa i-tunnel esikhundleni sokuthemba ilebula. Iqembu okungafanele lize liphume ngasendaweni kufanele lehluleke livaliwe, kuyilapho iqembu lapho ukutholakala kubaluleke kakhulu lingahlehla ngokufanelekile; kokubili izinqumo, futhi akukho okufanele kwenzeke ngokuzenzakalela.

Qinisekisa kumaklayenti amathathu, bese uhlehlisa ngokuhlanzekile

I-ping eya esangweni elimaphakathi ihlola into engalungile, ngoba isuka ku-firewall hhayi kuklayenti ekhethiwe. Hlola kumadivayisi, futhi uhlole amathathu awo: idivayisi ekhethiwe, idivayisi evamile okufanele ihlale isendaweni, nelinye elincike kumasevisi asendaweni.

ip -4 route get 203.0.113.10
curl -sS -m 5 -o /dev/null -w "%{http_code}\n" https://example.com
traceroute -n -m 6 203.0.113.10

Qhathanisa lapho isicelo somphakathi sivele khona ngempela. Iklayenti elikhethiwe kufanele lifinyelele i-inthanethi ngokuphuma kwekomkhulu, futhi iklayenti elivamile kufanele lisabonisa ikheli legatsha uqobo ohlangothini olukude; 203.0.113.10 iyikheli lemibhalo elisetshenziswa njengokumela indawo oyikhathazayo. Faka i-DNS esigabeni esifanayo, ngoba iklayenti elibuza isixazululi segatsha lingakhiqiza ukusesha okuvela ku-router ngomthombo ohlukile futhi ngalokho umzila ohlukile.

Ukuhlehlisa ukulandelana kwenqubomgomo okugciniwe kanye neqembu lamakheli. Buyisela ukulandelana kwangaphambili, susa iqembu kunqubomgomo, futhi uhlole kabusha zombili izigaba zamadivayisi. Gcina ukulungiselelwa okukhishiwe kanye nerekhodi loshintsho, ngoba unjiniyela olandelayo udinga ukwazi ukuthi wamuphi umthetho owawubanzi ngaphambi kokuba othile uwuhlele.

Izihloko ezihlobene