Isubneti efanayo ezinhlangothini zombili: hlanganisa i-LAN ekude nesigaba esikhululekile
Ukuhlelwa kwamakheli ohlangothini lwekhasimende kungaveza i-LAN ekude edlulanayo ngaphansi kwesigaba esikhululekile, kodwa amakhasimende ambalwa kuphela ayesebenzisayo futhi indlela yokubuya kumele ibekhona noma kunjalo.
Ikhaya nehhovisi zombili zisebenzisa i-192.168.1.0/24, ngakho isicelo esiya ku-192.168.1.1 sinezimpendulo ezimbili ezingaba khona futhi ikhasimende likhetha eyodwa ngaphandle kokubuza. Ukubhala kabusha izinombolo zenethiwekhi yehhovisi esebenzayo akuvamisile ukuthandwa, futhi amakheli e-router avame ukufakwa ngaphakathi kwamaphrinta, amakhamera nemibhalo. Ukuhlelwa kwamakheli ohlangothini lwekhasimende kungaveza inethiwekhi ekude ngaphansi kwesigaba esikhululekile esikhundleni salokho, futhi ingxenye ye-host ingahlala ifana ukuze i-192.168.1.20 ibonakale njenge-10.203.41.20. Inkinga ukuthi amakhasimende ambalwa kuphela ayisebenzisayo, futhi ayenzi lutho ngendlela yokubuya.
Imibono emibili ye-host efanayo
Ukuhlelwa kugcina ingxenye ye-host futhi kushintsha ingxenye yenethiwekhi kuphela. Umshini ofanayo ube uphendula kumakheli amabili kuye ngokuthi ume kuphi. Ukubhala zombili izigaba phansi ngaphambi kokuhlela noma yini kuvimbela ukufundwa okungalungile kwamalogi nemithetho ye-firewall kamuva.
| The application dials | The remote device is |
|---|---|
| 10.203.41.1 | 192.168.1.1 |
| 10.203.41.20 | 192.168.1.20 |
Amadivayisi endawo ekhaya agcina amakheli awo e-192.168.1.x, futhi lokho kuyinjongo yalokhu kuzilolonga. Iphrinta esekamelweni eliseduze ihlala ifinyeleleka ngenkathi ihhovisi libonakala ngaphansi kwesigaba esingashayisani.
Ukulandelana kwezimpikiswano yikho konke ubuqili
Le nketho ithatha indlela, inethiwekhi nemaski, kanye negama elihlukile: inethiwekhi yokuqala yilokho okubona ikhasimende, igama elihlukile yilokho okubona iseva. Ezinsizeni ezingemuva kwesango elikude, indlela iyisimo sendawo okuyiwa kuyo. Ukuhlanekezela izinto ezimbili ngenxa yokuthi impikiswano yokugcina ibizwa ngegama elihlukile yiphutha elikhiqiza umhubhe oxhumayo kodwa ongahlanganisi lutho.
push "route 10.203.41.0 255.255.255.0"
push "client-nat dnat 10.203.41.0 255.255.255.0 192.168.1.0"Indlela yiyo ethumela amaphakethe ekhasiwe kuya emhubheni wesigaba esisha; ukuhumusha kubhala kabusha indawo okuyiwa kuyo endleleni. Impendulo evela ku-192.168.1.20 ibhalwa ibuyele ku-10.203.41.20 ukuze isokhethi kukhasimende ihlale ihambisana. I-host eyodwa isebenza ngendlela efanayo ngemaski yobude obugcwele, inqobo nje uma indlela nokuhlelwa kuchaza ikheli elifanayo.
Lokhu ukuhlelwa kwamakheli, hhayi ukuhlelwa kwezimbobo. Amaqembu amabili kwi-host eyodwa awakwazi ukuhlukaniswa ngakho, futhi iphrothokholi efaka amakheli e-IP ngaphakathi komthwalo wayo izobona okwangempela.
Ukuhlelwa akukhiqizi indlela yokubuya
Ukuhumusha kwenzeka kukhasimende, ngakho iseva kusamele iqondise izimpendulo emhubheni futhi i-firewall yayo kusamele izivumele. Uma isango elikude lingazi ukuthi lifinyelela kanjani isubneti yomhubhe, isicelo siyafika futhi impendulo iphuma ngomnyango ongafanele; ukuhlelwa kwenza ukwehluleka kubonakale njengenkinga yekhasimende kuphela.
Imithetho yohlangothi lweseva kufanele ichaze amakheli akhona kuseva ngemva kokuhumusha, hhayi isigaba esibonwa ikhasimende. Ukukopisha igama elihlukile emthethweni wokuvumela kuchitha ntambama, ngoba awekho amaphakethe ngalolo hlangothi awuthwalayo.
Khetha isigaba segama elihlukile esingashayisani nanoma yini enye eqondiswa ikhasimende: enye i-VPN, inethiwekhi yekhontheyna, ihhovisi lesibili. Ukushayisana lapha kubuyisela ukungaqondakali kwasekuqaleni ngaphansi kwenombolo ehlukile futhi kunzima ukukubona ngoba amakheli abonakala engajwayelekile.
Amagama nemithwalo kuyasinda ekuhumusheni
Igama le-host elixazululeka ku-192.168.1.20 langempela lithumela isiphequluli kudivayisi yendawo esikhundleni sedivayisi elikude, kungakhathalise ukuthi ithebula lokuqondisa lithini. Impendulo ye-DNS yangasese kufanele ikhombise isigaba esibonwa ikhasimende, kuyilapho isitifiketi se-TLS sisathwala igama elilindelelwe uhlelo lokusebenza. Hlola ngegama hhayi ngekheli, ngoba ikheli lingasebenza ngenkathi igama lixazululeka buthule ngendlela engafanele. Uma isango elikude lisebenza nendawo leyo futhi, amarekhodi alo uqobo nawo adinga isigaba esibonwa ikhasimende.
Ukuqondisa kabusha, ama-URL afakiwe kanye nezinhlelo ezikhipha ikheli lazo kumthwalo kungase konakale ngezindlela okungekho ukuhlelwa kwamaphakethe okungakulungisa. Kubheke njengenkinga yohlelo lokusebenza futhi ulinganise umzamo ngokufanele ngaphambi kokuthembisa ukuthi ukubhala kabusha izinombolo akudingekile.
Izivivinyo ezintathu ngaphambi kokuzibophezela
Okokuqala, qinisekisa ukusetshenziswa kwekhasimende. I-Community OpenVPN iyayisekela le nketho; isisekelo sekhodi se-OpenVPN 3 siyibala phakathi kwezici ezingasekelwe, ngakho iphrofayili ephushwayo kuya kukhasimende lesitayela se-Connect ingase ingayinaki nje. Umyalelo owamukelwayo kodwa ongasetshenziswanga uyimbi kunephutha, ngoba umhubhe ubonakala uphilile.
Okwesibili, qinisekisa indlela nokuhumusha ngokwehlukana ngewindi lokuxilonga elifushane ekuchazeni okuphezulu, bese uhlola insizakalo yangempela esikhundleni se-ping. Okwesithathu, qinisekisa ukuthi i-router yendawo kanye nensiza ekude kuhlala kuhlukaniseka kukhasimende, ngoba kwakuyilokho okwakuyinjongo yasekuqaleni.
Uma ikhasimende lingakwazi ukuhumusha, cela usizo kuhlangothi lwesango noma wamukele ukubhala kabusha izinombolo. Ukwengeza ezinye izindlela zekheli elifanayo akusona isakhiwo.