I-router kumodi yeklayenti ye-VPN: kungani ama-divayisi e-LAN anyamalala
Ama-divayisi e-LAN ayanyamalala ngemva kokuba i-router ingene kumodi yeklayenti ye-VPN: hlola isici sokuhlola endleleni yokudlulisa kuqala, bese kuba yibanga le-LAN elishintshwe yi-firmware ngaphansi kwakho.
Inkolelo yokuthi imodi yeklayenti ngokwayo ibulala ukufinyelela kwe-LAN iholela abantu kumenyu yezilungiselelo engalungile, futhi izimbangela zangempela zivame ukuba zimbili. Ithungu alisusi ibhuloho le-LAN futhi alivimbeli amaklayenti anezintambo nangaphandle kwentambo ekufinyeleleni komunye nomunye. Okwephula ukufinyelela kwasendaweni isici sokuhlola esisendleleni yokudlulisa ye-router noma ibanga lamakheli e-LAN elathuthuka ngesikhathi i-firmware yenza lokho. Kokubili kukhiqiza isikhalo esifanayo, futhi akukho okulungiswa ngokufaka kabusha iphrofayela ye-VPN.
Inganekwane, nokuthi imodi yeklayenti ishintsha ngempela ini
Imodi yeklayenti yengeza isixhumi sethungu nomzila ozawo oya ngaso, bese idlulisela ithrafikhi ye-LAN kulelo thungu. Ibhuloho phakathi kwamachweba anezintambo namarediyo angenazintambo lihlala lingathintekile, kanjalo nokushintshwa kwasendaweni. Okushintshayo inqubomgomo: iyiphi ithrafikhi edluliswayo, kuphi ihunyushwa futhi iyiphi isixazululi amaklayenti ayitholayo.
Lo mehluko ubalulekile ngoba i-LAN ephukile ngokuvamile isho ukuthi enye yalezi zinqubomgomo ezintathu ishintshile, hhayi ukuthi i-router iyekile ukuba yiswishi. I-router esaphendula ikhasi layo lokuphatha iyisibonelo sokuthi isixhumi se-LAN siyaphila. I-router engaphenduli lutho inenye inkinga, njengekheli le-LAN elishintshile noma iklayenti kusubneti engalungile.
Ngakho isinyathelo sokuqala esiwusizo ukuthola ukuthi yiliphi ungqimba oluphukile, hhayi ukushintsha ungqimba olusolayo.
Hlola izinhloso ezintathu ngaphambi kokuthinta isilungiselelo
Kusuka kuklayenti elinezintambo, hlola izinhloso ezintathu ngokwehlukana futhi ubhale umphumela ngamunye: ikheli le-LAN le-router uqobo, elinye idivayisi kuswishi efanayo nge-IP, nokuthile okufinyeleleka kuphela ngethungu. Kuzenze ngokulandelana, ngoba umphumela ngamunye ususa ungqimba oluhlukile. Sebenzisa amakheli esikhundleni samagama emzuliswaneni wokuqala, ngoba ukwehluleka kwegama kuhlanganisa i-DNS embuzweni wokuxhumana.
Iphethini lezimpendulo iwukuxilonga. I-router ephendula ngesikhathi amadivayisi asendaweni engaphenduli ikhomba ekushintshweni kwasendaweni noma esicini sokuhlunga hhayi ekuhambiseni. Amadivayisi asendaweni aphendulayo ngesikhathi uhlangothi lwethungu lungaphenduli akhomba emzileni wethungu noma kufayela elingaphandle. Uma konke kuphendula ngekheli kodwa amagama ehluleka, kuwumbuzo wesixazululi, futhi akukho ukuhlela umzila okuzokulungisa.
| What answers | What it points at |
|---|---|
| Router only | LAN-side filtering or a broken bridge |
| Router and local hosts, not remote | Tunnel route, NAT or remote firewall |
| Addresses yes, names no | DNS handed to clients by the router |
| Nothing at all | Client subnet or router LAN address changed |
Gcina ithebula eduze kwemiphumela yokuhlola. Liguqula isikhalo esingacacile sibe umugqa owodwa ongasebenza kuwo.
Ungqimba lokuphepha ngaphakathi kwendlela yokudlulisa
Amamodeli e-router asetshenziswa abantu avame ukufaka isici sokuhlola esiqapha ithrafikhi edluliswayo, futhi sisebenza endleleni efanayo ethwala amaphakethe ukusuka ku-LAN kuya ethungwini. Uma lokho kuhlola kungakwazi ukuhlukanisa ithrafikhi yethungu, ukudlulisa kungama ngesikhathi ithungu ngokwalo lihlala likhona futhi i-router ibika uxhumano olunempilo. Akukho lutho kuloji ye-VPN olukhombisa lokhu, ngoba i-VPN ixhumeke ngempela.
Ukuxilonga kuwukuhlola okulawulwayo, hhayi ushintsho oluhlala njalo. Bhala isilungiselelo samanje, vala isici ngesikhathi sokuhlola okukodwa, uphakamise ithungu futhi, bese uhlola isibungu sasendaweni esisodwa ngekheli. Ukudlulisa okubuyayo kuwubufakazi obukudingayo, futhi lapho ukushintshana kuba isinqumo esikhundleni sokuqagela. Uma kungashintshi lutho, vula futhi ngokushesha bese uya embangeleni yamakheli.
Ukushiya isici sokuphepha esikhokhelwayo sivaliwe ukuze ithungu liqhubeke lisebenza kuwukushintshana okufanele kwenziwe ngamabomu futhi kubhalwe phansi. Kufanele futhi kuzwe ukuthi ithungu kufanele yini libe kwenye idivayisi, ngoba i-router okufanele ihlole konke kanye ne-router okufanele idlulise konke kuyimisebenzi emibili ehlukene.
Isizathu sesibili: ibanga le-LAN lathuthuka
Izibuyekezo ze-firmware zivamisa ukubuyisela ikheli le-LAN kumayelana okuzenzakalelayo komkhiqizi, futhi amanye amarouter aneswishi yemodi ecacile enquma ukuthi i-LAN igcina ibanga eliyimfihlo noma izuza elilodwa kudivayisi engaphezulu. Iklayenti elilindele 192.168.8.x lingagcina lisesi 10.64.0.x, bese isikhathi sesikhathi se-SSH kusibungu siphela nakuba ithungu linempilo ngokuphelele.
ipconfig /all
ip addr show
ip route get 192.168.8.20Funda isiqalo nesango kusivumelwano sokusebenzisa ngaphambi kokuvula ikhasi le-router. Imiyalo emibili yokuqala ikhombisa lokho iklayenti elikutholile ngempela, futhi eyesithathu ikhombisa ukuthi iyiphi isixhumi iklayenti elizoyisebenzisa kukheli lasendaweni, futhi yileyo ndlela umzila osele noma isubneti endala eziveza ngayo. Bese uqhathanisa nalokho nekhasi le-LAN kanye nemodi i-router ekuyo.
Uma ibanga lingakwazi ukubuyela emuva, buyekeza yonke into eyilibiza ngegama: ukubhukha kwe-DHCP, noma yimuphi umzila ogxilile oya kusubneti endala kanye nomthetho ngamunye wefayela elithwala isiqalo sangaphambilini. Ibanga elishayisana nesubneti ekude yethungu iwuhlobo olubi kakhulu, ngoba amadivayisi asendaweni ahlala efinyeleleka ngesikhathi izindawo ezikude ziqondiswa ngokuthula ngendlela engalungile ziya ku-LAN.
Xhuma futhi bese uphinda uhlole ngokulandelana kwamaphakethe
Ngemva kokunye kwalokho kushintsho okubili, xhuma futhi ithungu bese uphinda ukuhlola ngokulandelana kwamaphakethe: i-router, isibungu sasendaweni, isibungu esikude, bese kuba amagama, bese kuba uhlelo lokusebenza. Ukuhlola uhlelo lokusebenza kuqala kufihla ukuthi yiluphi ungqimba olusaphukile, futhi ukuzama kabusha kwesiphequluli egameni eligcinwe kukheshi kungabonakala njengokwehluleka kokuhambisa.
Bhala inguqulo ye-firmware, isiqalo se-LAN kanye nesimo sesici sokuhlola eduze kwephrofayela ye-VPN. Zontathu izilungiselelo ezingase zibhalwe phezulu isibuyekezo esilandelayo, futhi imigqa emibili yamanothi yonga ihora osanda kulichitha.