I-Synology NAS enezimbobo ezimbili ze-LAN: kungani ukuxhawulana kwe-VPN kuhluleka

I-laptop ibika ukwehluleka kokuxhawulana kwe-TLS, okuzwakala njengenkinga yesitifiketi futhi ngokuvamile akunjalo. Ku-NAS enezimbobo ezimbili ze-Ethernet, imbangela evame kakhulu iwukuthi ukudlulisela ku-router okubhekiswe ekhelini iphakethe elingalaleli kulo, futhi umlayezo weklayenti uyafana kuzo zombili izimo. Iphakethe aliphenduli embobeni yesibili ngenxa nje yokuthi zombili izintambo zixhunyisiwe. Ngaphambi kokuba noma ubani aphinde akhiphe isitifiketi, khombisa ukuthi iphakethe lifinyelela ku-NAS noma cha.

Iklayenti libika ini futhi kwenzeka ini ngempela

Ukwehluleka kokuxhawulana okuvela kuklayenti ye-OpenVPN igama elijwayelekile. Kuhlanganisa ukungafani kwesitifiketi, ukungafani kokuthutha, isilaleli esikweminye imbobo kanye nokudlulisela okungazange kulethe lutho. Yingakho umlayezo ungasetshenziswa njengesiqalo futhi usetshenziswa kuphela njengesiqinisekiso. Wuthathe njengesitatimende sokuthi isikhathi asizange sisungulwe, hhayi into ethile kakhulu.

Imbobo nekheli eliboshiwe yiwona maqiniso amabili anquma ukuthi iphakethe lizofika noma cha.

Bhala kokubili ngaphambi kokuguqula noma yini, ngoba ukulungisa okunengqondo okusetshenziswe kusendlalelo esingalungile kuyindlela inkathazo yemizuzu eyishumi nanhlanu eyiba khona yonke intambama. Phawula isixhumi, ikheli elikuso, imbobo nokuthutha. Lawa manani amane ayingqikithi yayo yonke indlela yokungena, futhi isigaba esilandelayo sichaza ukuthi ngayinye ihlala kuphi.

Thola ikheli iphakethe elilalela kulo

I-DSM inikeza izinombolo izimbobo ze-Ethernet futhi ngayinye ithwele ikheli layo. Ikhasi le-VPN Server lisho isixhumi esisetshenziswa yisevisi ye-OpenVPN, futhi iphaneli yenethiwekhi ikhombisa ikheli elilungisiwe kuleso sixhumi. Zifunde ngalolo hlelo, kusukela kusevisi kuya ngaphandle, ukuze uchaze okulalelayo esikhundleni salokho ocabanga ukuthi kufanele kukusebenzise.

Isevisi ibopha ikheli elilodwa. Ukuxhumana nokusebenza kwalezi zimbobo zombili akwenzi isevisi iphendule kwesibili. Ikheli elimile kwesinye isixhumi eduze kwekheli le-DHCP kwesinye likunikeza amanani amabili afanayo okulula ukuwahlukanisa ngokubuka nje, ikakhulukazi uma ehluka kuphela ku-octet yokugcina. Kopisha ikheli kusukela kuphaneli esikhundleni sokulibhala ngokukhumbula. Bese uqinisekisa ku-NAS ukuthi yini eboshiwe ngempela embobeni.

sudo ss -lunp | grep 1194

Uma lokho kuphuma kusho ikheli obungalilindele, ukudlulisela kubhekiswe kusixhumi esingalungile futhi konke okunye lapha ukubalwa. Lungisa umthetho ngaphambi kokufunda okwengeziwe, kungenjalo uzogcina ulungisa isitifiketi ngenxa yephakethe elingazange liphume ku-router.

Lungisa ukudlulisela, bese uqaphela isibali

Hlela umthetho okhona wokudlulisela esikhundleni sokwengeza owesibili embobeni efanayo yangaphandle. Imithetho emibili ingaba khona ndawonye etafuleni le-router futhi eyodwa kuphela ehlala inqoba, okuguqula isikhathi sokulungisa sibe yingxabano yokuthi yimuphi ongempela. Qondisa ikheli langaphakathi kunani olifunde ku-NAS, bese ushiya imbobo yangaphakathi ihambisana nalokho isevisi ekulalelayo.

Uma i-DSM ithola lelo kheli nge-DHCP, qala ngokwenza ukubhuka. Ukushintsha kokuqashisa kwephula buthule ukudlulisela obekusebenza izolo.

sudo tcpdump -i any -n udp port 1194

Qala ukuthwebula ngaphambi kokuba iklayenti lizame ukuxhuma, futhi ufunde ikheli lomthombo kukho konke okuvelayo. Akukho nhlobo kusho ukuthi okuthile endleleni kwakulahla: ukudlulisela, udonga lomlilo lwe-DSM noma isixhumi obekubhekiswe kuso, futhi izitifiketi azikwazi ukuba yimbangela uma lokho kusaqhubeka. Okuthile okuvela ekhelini lomphakathi leklayenti ngaphandle kwempendulo kusho ukuthi i-NAS yathola isicelo futhi yakhetha ukungaphenduli. Lawa yimiphumela ehlukene, futhi owesibili kuphela obuyisela ekulungiseni kwephakethe ngokwalo.

Yilapho kuphela obheka izitifiketi nokuthutha

Uma amaphakethe efika, thekelisa kabusha iphrofayili ngemva kwanoma yiluphi ushintsho lwesitifiketi, ngoba ifayela elidala lisathwele isiphathimandla eladalwa naso. Iphrofayili ehlelwe ngesandla yokuthutha okunye ishiya iklayenti lilinde isilaleli esingekho, futhi ibika ukwehluleka okujwayelekile okufanayo nayo yonke enye into. Qhathanisa ukuthutha okungaphakathi kwephrofayili nokuthutha iphakethe elilungiselelwe ukukukhonza. Amaphrofayili amabili okuthutha okubili iwumklamo osemthethweni, futhi iphrofayili eyodwa ehlelwe kokubili ayiwona.

Hlola ngaphandle kwenethiwekhi yakho njengesinyathelo sokugcina, ngoba ukuxhumana okuvela ngaphakathi kwe-LAN kungaphumelela ngendlela engakaze ikuthinte ukudlulisela.

Gcina iphrofayili ethekelisiwe, ikheli lesixhumi kanye nomthetho wokudlulisela ndawonye kunothi elilodwa. Uma ikheli lishintsha, lolo nothi luwumehluko phakathi kokulungisa nokuphinda. Akukho lutho kule ndlela obekudinga ukufaka kabusha iphakethe, okufanele kukhunjulwe ngaphambi kokusolwa kokuqala kabusha okulandelayo.