Yabelana Ngoxhumano Olulodwa lwe-VPN Nawo Wonke Amadivayisi ku-LAN Yakho

I-laptop eyodwa iphethe ithuneli, yonke indlu ifuna ukufinyelela okufanayo, futhi umzamo wokuqala ukukhomba konke kumshini oxhunyiwe. Yehluleka ngezizathu ezingenasihlobo ne-VPN: umsingathi owamukelayo kufanele adlulise iphakethe, abhale kabusha umthombo walo futhi aqinisekise ukuthi izimpendulo zithola indlela yokubuya. Uma uphuthelwa eyodwa kwezintathu, i-laptop exhunyiwe iyaqhubeka nokusebenza kuyilapho wonke amanye amadivayisi engatholi mpendulo. Isixazululo umklamo womzila, hhayi isilungiselelo sekhasimende.

Kungani ukukhomba amadivayisi kumsingathi kwehluleka

Umsingathi owamukela iphakethe elibhekiswe kunethiwekhi ekude uba irutha ngalowo mzuzu, kungakhathalekile ukuthi ubani uyilungiselele kanjalo noma cha. Ukudlulisa kucishiwe ngokuzenzakalelayo ku-Linux naku-Windows ngaphandle uma isici sithile sikuvula. Ukuhunyushwa kwamakheli kubalulekile ngoba uhlangothi olukude kufanele lwazi ukuthi luthumelela kuphi izimpendulo, futhi ikheli le-LAN eliyimfihlo alisho lutho kulo. Umzila wokubuya uyingxenye yesithathu, futhi yiwo abantu abawukhohlwayo lapho i-ping yokuqala ibonakala iphumelele.

Hlola ngalolo hlelo esikhundleni sokuvula nokuvala izilungiselelo ngokungahleliwe. Ingxenye ngayinye engekho ikhiqiza uphawu oluhluke kancane.

Vula ukudlulisa nokuhunyushwa kwamakheli kumsingathi

Izinguquko ezimbili kumsingathi oxhunyiwe zihlanganisa izingxenye ezimbili zokuqala: vula ukudlulisa kwe-IPv4 futhi uhunyushe ithrafikhi ye-LAN iye kusixhumi sethuneli.

sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -o tun0 -j MASQUERADE

Gcina inani le-sysctl kufayela elingaphansi kuka /etc/sysctl.d, futhi uhlole kabusha umthetho we-masquerade ngemuva kokuvula kabusha, ngoba izingxenye zangaphambili ze-firewall zingasula amaketanga angokwezifiso. Ku-Windows isici sokwabelana senza zombili izinyathelo, kodwa siphinde sikhombe i-adaptha ye-LAN kunethiwekhi engaphansi engaguquki futhi sisule isango laso, okwephula ukukhombisa okumile kanye nokudluliswa kwembobo. Buyisela umzila werutha oya kumsingathi ekhelini lakhe elisha ngaphambi kokuphetha ngokuthi ukwabelana kwehlulekile. Bese ubheka izibali zomthetho zikhuphuka ngenkathi idivayisi yesibili ithumela ithrafikhi.

Nikeza i-LAN umzila ophila ngemuva kokuvula kabusha

Amanye amadivayisi adinga umzila oya kusiqalo esikude, futhi izindlela ezimbili zokukunikeza ziyahluka ngobukhulu bomthelela.

ip route add 10.8.0.0/24 via 192.168.1.20 dev eth0

Ukukhomba isango elizenzakalelayo lekhasimende kumsingathi kuthumela yonke ithrafikhi yalo ngomsingathi, kuhlanganise ukuphrinta kwasekhaya nokwabelana ngamafayela, ngakho izinto ezingahlobene ziyama lapho umsingathi elele. Ukwengeza umzila othile kurutha wesiqalo esikude kuncane: yizindawo eziphansi kwethuneli kuphela eziya kumshini oxhunyiwe, futhi i-LAN esele iyaqhubeka nokusebenza. Amanethiwekhi angaphansi angenhla ayizibonelo, ngakho shintsha ngezikhathi zakho ze-LAN nethuneli. Noma kuyini, hlola kudivayisi yesibili ithuneli livuliwe bese livalwa.

Bheka i-MTU ngaphambi kokusola ithuneli

Amathuneli anciphisa usayizi wephakethe osebenzisekayo, futhi idivayisi yesibili ayazi lutho ngalokho. Ukudluliswa okukhulu nokuxhawana kwe-TLS kuyama kuyilapho izicelo ezincane ziphumelela.

ping -M do -s 1400 10.8.0.5

Impendulo ifakazela ukuthi lowo sayizi unqamula umzila ngaphandle kokuqhekeka; isikhathi sokuphela sisho ukuthi umthwalo wokufaka embozweni ucindezele iphakethe ngale kwe-MTU yethuneli. Yehlisa i-MTU kusixhumi sokwabelana noma unciphise usayizi omkhulu wesegimenti kumdlulisi, bese uphinda ukuhlola okufanayo. Hlola usayizi ofanayo ohlangothini lwe-LAN kuqala, ngoba ukwehluleka kwasekhaya kukhombisa i-LAN hhayi ithuneli. Rekhoda usayizi osebenzayo, ngoba ushintsho lwakamuva lomhlinzeki noma lwethuneli lungayisusa.

Kudivayisi eyodwa eyengeziwe, ukwabelana kusuka kumsingathi kwanele. Komndeni, beka umzila kurutha. Lapho ukufinyelela kufanele kuqhubeke lapho i-laptop ihamba nawe, ithuneli ngokwalo kufanele libe sesangweni elizinikele.