Kungani ukuthwebula kwe-VPN enomzila kungavezi ngaso sonke isikhathi ithegi ye-VLAN yesigaba

Ukuthwebula okuthathwe kusixhumi sethuneli ngeke kulokothi kubonise i-ID ye-VLAN yesigaba, futhi lokhu kuyisici somklamo hhayi igebe kuthuluzi. Ithuneli ye-TUN enomzila ithwala amaphakethe e-IP, ngakho ifreyimu ye-Ethernet enethegi eyawathwala kusixhumanisi sesigaba igcina kumzila owawuhambisa wona. Uma umbuzo wenqubomgomo yakho umayelana nezingxenye, indawo yenzwa kufanele ikhethwe yalo mbuzo ngaphambi kokuba ukuqoshwa kuqale. Inkambu ye-VLAN obuyilindele kufanele ishintshwe ngumongo ongawuvikela.

Bheka ukuthi isixhumi sethuneli sithwala ini ngempela

I-TUN ihambisa amaphakethe e-IP kusibungu; i-TAP ihambisa amafreyimu e-Ethernet. Umklamo onomzila usebenzisa owokuqala, okusho ukuthi iphakethe elifika ngemva kokususwa kokubethela alinayo ngokuphelele inhloko yesendlalelo sokuxhumana, ngakho futhi alinayo ithegi ye-802.1Q ongayifunda. Akukho okwasuswa endleleni, ngoba ithegi ayizange ingene kuthuneli. Iphakethe langaphakathi liqala ekuqaleni kwenhloko yalo ye-IP, ngakho zonke izinkambu umthetho owaziyo nge-VLAN ozilindele azikho ngokuphelele.

Qinisekisa uhlobo lwesixhumi ngaphambi kokuphikisana ngokuqoshwa, ngoba idivayisi ye-TAP ekusetshenzisweni okufanayo izokwenza ngendlela ehlukile futhi ikuholele esiphethweni esingalungile.

ip -d link show tun0
tcpdump -i tun0 -nn -e -c 20

Umyalo wokuqala uphrinta uhlobo lwedivayisi namafulegi ayo. Owesibili uphrinta izinhloko zesendlalelo sokuxhumana zamaphakethe angamashumi amabili okuqala, futhi kudivayisi ye-TUN okukhiphayo kuqala ku-IP ngaphandle kwebhlokhi ye-Ethernet, okuyisichasiselo sonke kusikrini esisodwa.

Ukukhetha i-TAP nakho akubuyiseli ithegi. Idvayisi ye-TAP idlulisela amafreyimu ebhulohweni, futhi okwenzeka ethegini kuncike ekuhlungweni kwe-VLAN kwebhuloho kanye nobulungu obulungisiwe bembobo. Lesi yisinqumo somklamo esihlukile esinezinhlobo zaso zokwehluleka.

Ma kube kwenye yezindawo ezintathu futhi wamukele okungabonwa yiyo

Esigabeni se-Ethernet sesigaba ithegi ikhona, kodwa inzwa ibona kuphela ithrafikhi yasendaweni kuleso sigaba. Kunethiwekhi ye-VPN yangaphandle ithrafikhi ivikelwe, ngakho obukayo ufunda iziphetho nomthamo futhi akukho lutho ngophakethe lwangaphakathi. Endleleni ye-TUN ngemva kokususwa kokubethela iphakethe le-IP langaphakathi liyatholakala, kanye nekheli nemibobo yalo, futhi ngaphandle kwefreyimu yesigaba. Ngakho ukuqoshwa kutrunk nokuqoshwa okunomzila kokugeleza okufanayo kubonakala njengezingxoxo ezimbili ezihlukile.

Lezo zindawo ezintathu ziphendula imibuzo emithathu ehlukile, futhi ukuqoshwa okukodwa ngeke kube nakho konke ngesikhathi esisodwa.

tcpdump -i eth0 -nn -e 'vlan' -c 10
tcpdump -i tun0 -nn -c 10

Qalisa lezi zimbili bese uqathanisa. Okokuqala kubonisa amafreyimu anethegi nama-ID awo e-VLAN lapho isixhumanisi sesigaba sithwelwe kutrunk siya kusibungu; okwesibili kubonisa ingxoxo efanayo njenge-IP elula ngemva kokuhambisa. Uma okokuqala kungabuyisi lutho, hlola ukuthi imbobo yesibungu iyimbobo yokungena yini, ngoba lapho ithegi isivele isuswe isiswishi futhi akukho kuqoshwa kusibungu okuyokwazi ukuyibonisa.

Shintsha ithegi engekho ngemephu ongayivikela

Uma inqubomgomo ihlukanisa izigaba ngesiqalo se-IP, bhala leyo mephu kanye nemikhawulo yayo. Izintaba zamakheli ezihlangana, ukuhumusha komthombo kanye nesango elabiwe kungase kwenza isiqalo esisodwa singanele ukuthola ukuthi iphakethe lalivela kuphi ngempela.

Themba isixhumi nomongo wokuhambisa okulawulayo, hhayi ilebula elinikezwa iklayenti. Inkambu yenhloko uhamba naye angayisetha ayisosifakazo sobulungu, futhi umthetho wokuhlola oyithatha njengalokho uyagwenywa kalula.

ip route get 10.20.30.40
ip -br addr show

Umyalo wokuqala ubika isixhumi nomthombo umgogodla ongawusebenzisa endaweni ekhokhelwayo, okuwumbono wasendaweni wokuxhumana nesigaba. Owesibili ubala amakheli ngesixhumi ngasinye ukuze iziqalo kumephu yakho ziqhathaniswe nokwenzekayo hhayi nomdwebo.

Hlola indlela yokubuya nomthwalo ngaphambi kokuthemba umphumela

Indawo yokuhlola ebona uhlangothi olulodwa kuphela izolahlekelwa uhhafu wengxoxo, futhi ukuhambisa okungalingani kuvamile uma i-VPN ibandakanyekile. Qinisekisa ukuthi izimpendulo zidlula enzweni efanayo ngaphambi kokuthatha ukuqoshwa kohlangothi olulodwa njengokuphelele.

Ukubuyisa iphakethe le-IP langaphakathi nakho akukususi ukubethela kwesikhathi se-HTTPS ngaphakathi kwalo. Uma umbuzo wenqubomgomo umayelana nokuqukethwe hhayi nokugeleza, indawo yenzwa kufanele isuswe futhi, futhi leso sinqumo singesodokhumenti yomklamo efanayo.

Ukunweba itrunk engenamingcele iye enzweni kuphela ukuze inkambu ye-VLAN ibonakale kwandisa umngcele wenethiwekhi ngaphandle kokuphendula umbuzo wokuqala. Khetha indawo yokwaziswa okudingwa inqubomgomo, bhala lokho engakwazi ukukubona, futhi ubuyekeze ukukhetha uma umbuzo ushintsha.