Ibhuloho lendawo le-SoftEther noma i-SecureNAT: yikuphi okufanele kuvulwe

Vula i-SoftEther Manager, futhi isinqumo sokuqala sangempela mayelana ne-hub akusilo ibhokisi lokumaka, kuwumbuzo we-topology. Ibhuloho lendawo lixhuma leyo hub ku-adaptha yomzimba futhi livumele isigaba esikhona ukuthi sinikeze amakheli, kuyilapho i-SecureNAT inikeza i-hub i-router yayo ebonakalayo, i-NAT kanye ne-DHCP. Ukukhetha phakathi kwazo kushintsha ukuthi amakheli avela kuphi nokuthi iyiphi idivayisi ephendula ngawo. Ukuvula kokubili nokuthemba ukuthi elilodwa lizowina iyona ndlela ilabhu esebenzayo eba umucu wokusekela ngayo.

Qala ku-hub oyihlela ngempela

I-Manager ibonisa isihlahla samaseva nama-hub, futhi kulula ukuhlela i-hub ezenzakalelayo ngenkathi amaklayenti exhuma kwenye enegama elihlukile. Chofoza i-hub, funda igama layo, futhi uqinisekise ukuthi amaseshini asohlwini ngezansi angamaklayenti ozama ukuwasevisa. Lokho kuhlola okukodwa kuvimbela iningi lokudideka okubekwa emuva kwesikhathi emthethweni.

Bese unquma ukuthi iklayenti lidinga ini kusukela ekugcineni okude. Ukuziphatha kwe-Ethernet okwabiwe okunokusakaza kanye nezinsizakalo ze-LAN kukhombisa ibhuloho, ukufinyelela okuyimfihlo okuhlelwe kufinyelela kububanzi obuncane bamakheli kukhombisa i-SecureNAT, futhi ukuphuma ku-inthanethi yisinqumo somzila wokuhamba okungaba yizinto zombili ezingakwazi ukukuthwala kabi.

Bhala impendulo ngaphambi kokuchofoza noma yini, ngoba lezi zilungiselelo ezimbili azikwazi ukushintshwa futhi ukuhoxisa kuthatha isikhathi eside kunesinqumo. Imizuzu emibili yokubhala yonga ihora lokuxhuma kabusha.

Ibhuloho lendawo lenza ini ekwabeleni amakheli

Ibhuloho lendawo lixhuma i-hub ku-adaptha yomzimba, ngakho i-hub iba yingxenye yaleso sigaba se-Ethernet. Amaklayenti athola amakheli kulokho osekwanele isigaba, futhi isango lawo yi-router yesigaba. Ngokombono weklayenti, isijoyine i-LAN yehhovisi, nakho konke ukufinyeleleka nakho konke ukuchayeka okuhambisana nakho.

Lokho futhi kusho ukuthi ibhuloho lidinga i-adaptha yangempela enokusekelwa okufanele komshayeli nokuthi umqondisi kufanele agunyazwe ukunweba leso sigaba. Ukungena nge-VPN kufakazela ukuqinisekiswa, hhayi ilungelo lokubeka isibungu ku-VLAN yokukhiqiza. Hlola ukuthi igama lomshayeli lihambisana ne-adaptha oyihlosile, ngoba ukubhuloha imbobo engalungile kuwisa isigaba ngokushesha. Uma uhlu lwama-adaptha lungenalutho noma ibhuloho libika ukuhluleka, imbangela ngokuvamile ihlobene nomshayeli noma izimvume, hhayi i-cryptography.

Funda ithebula lamabhuloho kusukela emugqeni womyalo lapho isihlahla somdwebo singacaci. Umphumela usho i-adaptha, into isihlahla esingayenzi njalo.

vpncmd /SERVER localhost /HUB VPN /CMD BridgeList
vpncmd /SERVER localhost /HUB VPN /CMD SessionList

Uhlu lwamabhuloho olungenalutho namaseshini axhunyiwe kuyisithombe esiwusizo: amaklayenti angaphakathi kwe-hub ebonakalayo futhi akukho okunweba iye esigabeni okwamanje.

I-SecureNAT yengeza ini futhi ifihla ini

I-SecureNAT inikeza i-hub i-router ebonakalayo, umsebenzi we-NAT kanye nensizakalo ye-DHCP, konke ngaphakathi kwenqubo ye-SoftEther. Amaklayenti athola amakheli ebangeni le-DHCP elibonakalayo, i-router ebonakalayo iphendula isango elizenzakalelayo, futhi ithrafikhi edinga ukuphuma iyahumushwa. Awekho ama-adaptha omzimba ahilelekile, yingakho kusebenza kusibungu esine-NIC eyodwa nangaphandle kokuhlelwa kweswitshi.

Izindleko ziwukuthi amakheli abonakalayo angaka-hub hhayi enye into. Umshini ose-LAN yehhovisi awukwazi ukuhambisa umzila uye ekhelini le-SecureNAT leklayenti ngaphandle kosizo, futhi noma yini erekhoda amakheli omsuka ibona ikheli elihumushiwe lesibungu se-SoftEther. Uma imithetho yakho yokufinyelela noma umkhondo wokucwaninga uncike ekhelini langempela leklayenti, lokho ukushintshwa komklamo hhayi imininingwane. Futhi kunquma ukuthi umthetho wekheli lomsuka uzoke ulibone yini iklayenti.

Futhi iyiseva ye-DHCP. Ukuyisebenzisa esigabeni esinayo kakade, noma ukubhuloha leso sigaba ngasikhathi sinye, kukhiqiza abaphenduli ababili nokuqashwa okungalindelekile. Incwadi yokufunda ithatha le misebenzi emibili njengezinqumo ezihlukene ngenxa yalesi sizathu.

Hlola ukuthi i-hub isevisa ini manje ngaphambi kokuvula enye into. Wonke umyalo uphrinta isimo samanje, hhayi esihlosiwe.

vpncmd /SERVER localhost /HUB VPN /CMD SecureNatStatusGet
vpncmd /SERVER localhost /HUB VPN /CMD NatGet
vpncmd /SERVER localhost /HUB VPN /CMD DhcpGet

Ukuvula okukodwa ngaphandle kokuphula okunye

Khetha ukuhlelwa, kuvule, futhi ushiye okunye kucishiwe. I-hub enebhuloho ne-SecureNAT kokubili kusebenza iyi-hub enezimpendulo ezimbili ezingaba khona embuzweni ofanayo, futhi iklayenti lizokholwa okufika kuqala. Uma usuka kwelinye uya kwelinye, vala umsebenzi omdala futhi uxhume iklayenti kabusha esikhundleni sokucabanga ukuthi isilungiselelo esisha sisebenza kuseshini ekhona.

Hlela ushintsho ukuze iqoqo lamaklayenti lingahlangani nesigaba se-LAN. Amasubnet ahlanganayo ayimbangela yesibili evame kakhulu yomhubhe oxhumayo bese ungafinyeleli ndawo, futhi awabonakali kuze kube uqhathanisa izinhlelo zamakheli zombili eceleni.

Bese uxhuma kabusha kusukela kuklayenti futhi ufunde ukuthi lathola ini, ngoba umbono we-hub weseshi awuwona umbono weklayenti wenethiwekhi yalo. Ukuxhuma kabusha kuyindlela yokuphela ethembekile yokuphoqa ukuqashwa okusha.

Hlola isango nesisombululi kuklayenti

Ukuqinisekiswa okuphumelelayo kukutshela ukuthi izifakaziso ziyasebenza nokuthi i-hub yamukele iseshi. Akusho lutho mayelana nokuthi iklayenti liyafinyelela yini, ngoba lokho kuncike ekhelini, kumaski, esangweni nakuseva ye-DNS eliyitholile. Funda lezo zindinganiso ezine kuklayenti ngaphambi kokuthinta isilungiselelo seseva futhi.

Ku-Windows imininingwane ye-adaptha ibonisa ukuqashwa nesisombululi, futhi ithebula lemizila likhombisa ukuthi umhubhe uwumzila ozenzakalelayo ngempela yini.

ipconfig /all
route print -4
nslookup intranet.corp.internal

Kuklayenti le-Linux ulwazi olufanayo luvela kumafayela amakheli, imizila nesisombululi. Umzila ozenzakalelayo iyona ndinganiso enquma ukuthi ithrafikhi iyaphuma yini ngomhubhe. Uma isango likhombisa i-router yehhovisi kuyilapho umhubhe ulindele ukuthwala ithrafikhi, i-topology ibhulohiwe ngegama futhi yephukile empeleni. Lungisa umthombo wamakheli kuqala, bese uphinda uhlole uhlelo lokusebenza, futhi ngemva kwalokho kuphela cabanga ukushintsha enye imodi.