SoftEther SecureNAT: i-DHCP ne-NAT ziyizinqumo ezimbili

I-SecureNAT iyibhokisi elilodwa lokukhetha elivula izinsizakalo ezimbili, futhi lapho kuvela khona ukudideka okuningi ngayo. Iseva ye-DHCP ecishe ibe khona inika iklayenti ikheli, imaski, isango kanye nesixazululi kaningi. I-NAT ecishe ibe khona idlulisa amaphakethe ngale kwesango ngokusebenzisa isitaki senethiwekhi somsingathi weseva uqobo. Zombili zimi eduze komunye nomunye ekucushweni futhi zihluleka ngokuzimela: iklayenti lingaba nesivumelwano sokuqashisa esiphelele kodwa lingabi nandlela esebenzayo, noma libe nendlela esebenzayo enezilungiselelo ezikhomba kusixazululi esingalungile. Zihlole njengezinqumo ezimbili, futhi ukuxilongwa kuba kufushane.

Izinsizakalo ezimbili ngemuva kwebhokisi elilodwa lokukhetha

Uhlangothi lwe-DHCP ecishe ibe khona luphendula umbuzo wokucushwa: yiziphi izilungiselelo ezitholwa yiklayenti ngaphakathi kwale hub ecishe ibe khona. Uhlangothi lwe-NAT ecishe ibe khona luphendula umbuzo wokudlulisela: lapho iklayenti lithumela iphakethe ekhelini elingaphandle kwe-hub, ingabe iseva iyalihumusha futhi ilidlulisele. Eyokuqala yeyasekhaya ku-hub futhi ayidingi inethiwekhi ephezulu. Eyesibili incike ngokuphelele kumsingathi.

Isixhumi semsingathi esicishe sibe khona siyingxenye yesinqumo sokuqala, hhayi eyesibili. Ikheli laso, kaningi ngokuzenzakalelayo into efana no-192.168.30.1, yisango elinikezwa yinsizakalo ye-DHCP. Akulona ikheli lomphakathi lokulalela leseva, futhi ukuhlanganisa kokubili kudala imithetho yodonga lomlilo nezilungiselelo zeklayenti eziqondiswe emshinini ongekho kuleyo nethiwekhi.

Isinqumo 1: ubani onikeza ikheli

Uma i-DHCP ecishe ibe khona ivuliwe, amaklayenti kufanele athole isivumelwano sokuqashisa echibini olilungisele, isango kube yisixhumi semsingathi esicishe sibe khona futhi isixazululi kube yileso osinikezile. Hlola isivumelwano sokuqashisa hhayi umbhalo wesimo seklayenti, ngoba «kuxhunyiwe» kuchaza umhubhe hhayi ukwabiwa kwekheli:

vpncmd localhost /SERVER /CMD SecureNatStatusGet
vpncmd localhost /SERVER /CMD DhcpGet
ip -4 addr show
ip route

Kunezindlela ezimbili zokwehluleka okufanele zaziwe ngaphambi kokulungisa enye into. Iklayenti elinekheli eliqinile elisele lisuka ekwakhiweni kwangaphambili lizoligcina futhi linganaki isivumelwano sokuqashisa, okubonakala sengathi i-DHCP iyala ukuphendula. Futhi umthombo wesibili we-DHCP esigabeni esinebhuloho uzolwela amaklayenti afanayo, okudala amakheli ashintsha ngezikhathi kanye nomugqa wosekelo ongakwazi ukuphinda adale inkinga.

Amachibi adlulanayo nawo ayingxenye yalokhu. Uma ichibi le-DHCP ecishe ibe khona lidlulana nesubneti ye-LAN yomsingathi noma ichibi lelinye i-hub, iklayenti lithola ikheli elihlelwa ngendlela engacacile, futhi konke ukuhlolwa okulandela akunaso isinqumo.

Isinqumo 2: ubani odlulisela ngale kwesango elisicishe sibe khona

Uma i-NAT ecishe ibe khona ivuliwe, iseva ihumusha ithrafikhi ephumayo isuka ku-hub futhi iyithumele ngokwethebula lokuhlela indlela lomsingathi. Lokho kusho ukuthi uchungechunge lokudlulisela luthi: iklayenti liya esangweni elisicishe sibe khona, i-NAT ecishe ibe khona iya esitakini soms ingathi, isitaki soms ingathi siya emzileni waso ozenzakalelayo. Ikhonkco ngalinye lingahluleka ngaphandle kokuthinta amanye, futhi izimpawu zokwehluleka ziyahluka.

Hlola isinqumo sesibili ngento okufanele iphume ku-hub, hhayi ngento yasekhaya kuyo. Ukupinga isango elisicishe sibe khona kufakazela ikhonkco lokuqala futhi akukho okunye:

vpncmd localhost /SERVER /CMD NatGet
vpncmd localhost /SERVER /CMD NatTable
dig +short example.com
ip route get 203.0.113.10

Uma ukuxazululwa kwamagama kusebenza kodwa ukuxhumana nekheli lomphakathi kwehluleka, usemgqeni wokudlulisela hhayi ku-DHCP. Uma kokubili kwehluleka, hlola isixazululi kuqala, ngoba isixazululi esithunyelwa njengekheli langaphakathi elingafinyeleleki sizokwenza indlela esebenzayo ibonakale iphukile ngokuphelele.

Ukudlulisela kwe-SecureNAT kwenziwa inqubo yeseva, hhayi indlela yokudlulisela yengqikithi oyisebenzisa nebhuloho. Lokho kulula futhi kuhamba kancane kunokubhuloha, futhi kusho nokuthi imithetho yodonga lomlilo nezinqumo zokuhlela indlela zomsingathi zisasebenza kuthrafikhi ehumushiwe. I-NAT ecishe ibe khona ayidluli inqubomgomo yomsingathi; iyisebenzisa.

Indlela yomsingathi uqobo iyinto yesithathu

Konke okungenhla kucabanga ukuthi umsingathi weseva angafinyelela indawo ekuyiwa kuyo. Umsingathi ongenayo indlela ephezulu esebenzayo, onenqubomgomo evimbayo yokuphuma, noma onomndeni wamakheli angenawo uzohluleka esinqumweni sesibili, kungakhathaliseki ukuthi ukucushwa kwe-hub kulungile kangakanani. Hlola umsingathi eyedwa, ngaphandle komhubhe, ngaphambi kokuthi ukwehluleka kwakhe kube yiphutha le-SoftEther.

I-SecureNAT futhi ayisona isigunyazo sokufinyelela yonke inethiwekhi exhunywe kuseva. Ihumusha futhi idlulisele ithrafikhi efinyelela kuyo; ukunquma ukuthi umsingathi angafinyelela ini kuseyinto yodonga lomlilo nokuhlela indlela komsingathi, futhi ukwakhiwa okuthembele emhubheni ukunikeza ukufinyelela kuseduze nomthetho owodwa omubi wokunikeza okukhulu kakhulu.

Imindeni yamakheli ifanele ukuhlolwa kwayo. Isibonelo se-DHCP se-IPv4 esisebenzayo asifakazeli ukuthi wonke amandla e-IPv6 akhona ekwakhiweni kwakho, ngakho funda incwadi yomhlahlandlela yenguqulo oyisebenzisayo ngempela ngaphambi kokuthembisa ukuziphatha kwesitaki esikabili. Isigaba se-SecureNAT sencwadi sihlanganisa imisebenzi ye-NAT ne-DHCP ecishe ibe khona yokukhishwa kwamanje.

Qinisekisa isinqumo ngasinye ngokuhlolwa kwaso

Yamukela isinqumo sokuqala ngokuhlolwa kwesivumelwano sokuqashisa: ikheli lisechibini, isango lilingana nesixhumi semsingathi esicishe sibe khona, isixazululi yileso osilungisile. Yamukela eyesibili ngesicelo esiphumayo esivela kuklayenti kanye nokubheka ithebula le-NAT kuseva, ngoba inani lezikhathi ezikhulayo liwubufakazi obuqondile kuphela bokuthi ukuhumusha kuyenzeka hhayi nje ukuthi kuvuliwe.

Bese ubhala ukwehlukaniswa encwadini yokwakhiwa: iyiphi ingxenye enikeza ikheli, iyiphi ingxenye edluliselayo, futhi ithrafikhi iphuma ngasiphi isixhumi semsingathi. Lapho ukuqala kabusha kushintsha ukuziphatha, leyo ncwadi izokutshela ukuthi iyiphi kwabathathu okufanele uyihlole esikhundleni sokuqala konke kabusha nokuthemba ukuthi uphawu luzosuka.

Esinye isinqumo futhi siyingxenye yerekhodi, ngisho noma ungasisithathi namuhla: i-SecureNAT nebhuloho lasekhaya ziyizakhiwo ezihlukene ze-hub eyodwa, futhi i-hub edinga kokubili iyihub edinga elinye icebo. Khetha ngokuqwashile, bhala ukuthi kungani, futhi umuntu olandelayo ngeke kudingeke aphinde ayakhe ehlehlise isuka ekucushweni okusebenzayo.