Iklayenti le-VPN kuroutha noma imodi yeseva: ngayinye ivumela ini
Indima eyodwa yeroutha ithumela ithrafikhi yakho endleleni yokuphuma ekude, enye ikuvumela ukuba ungene futhi. Funda amamenyu, ubufakazi kanye nendlela yokubuyela ngaphambi kokuvula noma iyiphi.
Ungena kuroutha, uvula ikhasi le-VPN bese uthola amathebhu amabili abukeka njengento eyodwa echazwe kabili: elilodwa lifuna ifayela lephrofayela kwelinye indawo, elinye lifuna ukuthi wakhe izitifiketi bese ukhetha imbobo. Lawa akubona ukubuka okubili kwesilungiselelo esisodwa. Indima eyodwa yenza iroutha ishaye ngaphandle, enye iyenze iphendule, futhi idivayisi eyodwa ingenza kokubili ngaphandle kokuthi enye isize enye. Nakhu ukuthi ungayifunda kanjani imenyu futhi unqume ukuthi usesihlanguhla esiphi ngaphambi kokuvula noma yini.
Vula imenyu ye-VPN bese ufunda amagama ezindima
Qala ngezihloko zezigaba, hhayi ngezinti. Ithebhu ebhalwe iklayenti noma “xhuma kusevisi ye-VPN” ilindele iphrofayela elethiwe, ifayela lokulungiselela noma isethi yobufakazi ekhishwe omunye umuntu. Ithebhu ebhalwe iseva ilindele ukuthi wakhe ubunikazi, ukhethe iphrothokholi nembobo, futhi ngokuvamile ukhiphe iphrofayela yedivayisi ngayinye ezoxhuma.
Thatha umusho wokuthengisa okusebhokisini njengongaqinisekisiwe kuze kufike lapho imenyu ihambisana nawo. “Ukusekelwa kwe-VPN” kungase kusho iklayenti, iseva, umsizi wokudlulisa iphrothokholi othumela amaphakethe kuphela kudivayisi engemuva kweroutha, noma uhlelo lokusebenza lokufinyelela kude lobunikazi ngaphandle kwanoma iyiphi iphrofayela ejwayelekile. Imibhalo ye-firmware kuphela ehlukanisa lezo zimo, hhayi inombolo yemodeli esikwini.
Imodi yeklayenti: i-LAN yakho iphuma ngendlela yokuphuma yomunye umuntu
Kumodi yeklayenti iroutha liziphatha njengekhompyutha ephathwayo eqhuba uhlelo lwe-VPN. Lidinga iphrothokholi ehambisanayo, iphrofayela noma ubufakazi obuvela kumqhubi okude, kanye nesinqumo somzila sokuthi yiziphi izinto ezisezingeni eliphansi ezisebenzisa ithaneli. Ama-firmware amaningi anikeza uhlu lwenqubomgomo lapho ubhala khona amakheli omthombo noma ama-interface okufanele athunyelwe ngethaneli futhi ushiye okunye kuxhumo olujwayelekile.
Ingxenye ehluleka buthule uhlangothi olukude. Iphoyinti lokugcina olixhumayo kufanele lidlulise ithrafikhi ye-inthanethi egameni lakho futhi linikeze indlela yokubuyela, futhi lokho kuyinqubomgomo kumhlinzeki, hhayi isilungiselelo kuroutha yakho. Imenyu enikeza imodi yeseva kuphela ayikwazi ukwakha le sevisi yangaphandle noma ngabe ilungiselelwe kanjani, futhi umhlinzeki osekelayo kuphela izixhumanisi phakathi kwezindawo angase axhumanise ithaneli ngempumelelo kodwa alahle konke okukuthumelayo ngayo.
Bese uhlola ukuthi ithaneli liphatha kanjani i-DNS. Uma iphrofayela iphusha isixazululi, iroutha kufanele linikeze leso sixazululi kumaklayenti asezingeni eliphansi; uma ingenjalo, amaklayenti aqhubeka esebenzisa isixazululi somhlinzeki futhi axazulule amagama ngaphandle kwethaneli nakuba amaphakethe engena ngaphakathi. Ukuhlola okusheshayo kukhompyutha ephathwayo exhunyiwe: ikheli olibona ekhasini le-IP echo kufanele kube indlela yokuphuma, futhi ikheli lesixazululi elisetshenziswayo kufanele kube lelo elinikezwe ithaneli.
Imodi yeseva: omunye umuntu ungena ku-LAN yakho
Imodi yeseva iguqula isiqondiso. Iroutha liyalalela, idivayisi ehambayo iyaxhuma, bese iroutha linquma ukuthi yiziphi izinsiza zasekhaya leyo xhumo engazifinyelela. Lona yindima oyifunayo ye-NAS, umshini waselebhu noma iphrinta, futhi inombandela wokuqala ongenawo indima yeklayenti: okuthile kwangaphandle kufanele kukwazi ukufinyelela kumlaleli.
Kulowo mbandela wokuqala yilapho ukuhlelwa okuningi kwasekhaya kumile khona. Uma iroutha lingemuva kwesango lomhlinzeki uqobo, imbobo ye-VPN kufanele idluliselwe kusukela kulelo sango, noma iroutha lifakwe kumodi yebhuloho noma ye-DMZ. Ngemuva kwe-NAT yezinga lomthwali awekho imbobo engenayo yokudlulisa, ngakho umklamo kufanele ushintshe: ithaneli eliphumayo lisuka kuroutha liya ku-relay, iphoyinti lokugcina elisingathiwe noma umkhiqizo we-mesh. Iseva engafinyeleleki ayilungiselwanga kabi, ayifinyeleleki.
Ubuchwepheshe bobunikazi nabo buyahluka ngedima. Iphrofayela yeklayenti lasekhaya ethumela konke endleleni yokuphuma ekhokhelwayo iyimfihlo eyodwa eyabiwe, kuyilapho iseva eyamukela amafoni amathathu nekhompyutha ephathwayo idinga ubunikazi obune ongabuhoxisa ngabunye. Izitifiketi nezinkinobho zezedivayisi ngayinye, futhi ikhasi lokukhipha leroutha kufanele likunikeze ifayela elilodwa ngedivayisi ngayinye hhayi ifayela elilodwa lomuzi wonke.
Hlola ukusetshenziswa okuqondile ngaphambi kokuzibophezela
Imibhalo yakwa-Netgate mayelana nokukhetha indima ye-VPN yehlukanisa izindima ngale ndlela, futhi kufanele ufunde ikhasi elifanayo le-firmware yakho esikhundleni sokuqagela ngamagama amathebhu. Funa amaqiniso amathathu abonakalayo: yimaphi amaphrothokholi iklayenti elingawakhuluma, ingabe iseva isekela iphrothokholi esetshenziswa amadivayisi akho, nokuthi inqubomgomo yomzila ihlanganisa amakheli omthombo, ama-interface aphelele noma lutho.
Bese ubheka umngcele wokusekelwa. Iroutha lomsebenzisi elinethebhu yeklayenti kodwa lingenawo uhlu lwenqubomgomo lizothumela idivayisi ngayinye ngethaneli, lokho kulungile kubhokisi lokusakaza futhi akulungile kukhompyutha ephathwayo yomsebenzi edinga ithaneli lehhovisi. Iroutha elinethebhu yeseva kodwa iphrofayela eyodwa eyabiwe liyithuluzi laselebhu elifanele futhi liwukukhetha okubi emndenini, ngoba ukuhoxisa idivayisi eyodwa kusho ukushintsha ukulungiselelwa kwabo bonke.
Khetha indima ngokusho lapho ithrafikhi iqala khona
| What you want | Role | What must be true |
|---|---|---|
| Household devices exit through a paid VPN | client | provider profile plus a working return path |
| Reach a NAS while travelling | server | reachable listener and per-device identities |
| Join two sites permanently | either, as a site-to-site pair | matching protocols and non-overlapping subnets |
| Only one laptop needs the tunnel | neither | run the client on the laptop instead |
Hamba ngomugqa okhethiwe kusukela ekuqaleni kuze kube sekupheleni ngaphambi kokushintsha okunye. Vula indima, xhuma iklayenti elilodwa, qinisekisa ikheli elivela ngalo, qinisekisa ukuthi yisiphi isixazululi elisisebenzisayo, futhi uqinisekise indlela yokubuyela ohlangothini oluphambene. Uma iroutha linayo nekhasi le-firewall, hlola ukuthi i-interface entsha ayivinjwanga umthetho ozenzakalelayo owabhalwa ngesikhathi ithaneli lalingekho.
Uma zombili izindima zitholakala futhi isidingo ngempela siyizona zombili, zisebenzise njengezici ezihlukene nemibhalo ehlukene. Iroutha elilodwa lingashaya ngaphandle kukamabonakude futhi lamukele ukuxhumana kocingo ku-NAS ngesikhathi esisodwa, kodwa izinqubomgomo ezimbili akumele zabelane nge-subnet, isilungiselelo se-DNS noma indawo ye-firewall, ngaphandle kwalokho ushintsho lokuqala olwenzela olunye luzophula olunye.