Ukukopisha i-/32 yetunnel ngeke kuhambise isubneti yasehhovisi
Ikheli i-VPN elinikeza i-adaptha yakho lichaza isixhumanisi, hhayi indawo eya kuyo. Engeza isiqalo sensiza kusiphrofayili bese ushiya indlela ezenzakalelayo.
I-VPN iyaxhuma, i-interface ikhombisa ikheli eline-mask yamabhithi angamashumi amathathu nambili, futhi iseva yasehhovisi ihlala ingafinyeleleki. Isinyathelo esilandelayo ngokuvamile ukusebenzisa leyo mask futhi emzileni, ngombono wokuthi i-interface ichaza ukuthi itunnel ingafinyelela kuphi. Akunjalo. Lelo kheli lichaza umkhawulo wasekhaya wesixhumanisi sephoyinti-kuya-kwephoyinti, futhi indawo oyikhathazayo isesiqalweni esinye ngaphesheya.
Izinto ezimbili ezihlukene ziyahlanganiswa: ikheli i-tunnel elikunikeze lona, kanye nenethiwekhi ofuna ukuyifinyelela ngalo.
Amakheli amabili, imisebenzi emibili
Ku-tunnel yephoyinti-kuya-kwephoyinti, ikheli lekhasimende ngokuvamile iyikheli elilodwa lomsingathi ngoba kukhona uzakwabo oyedwa nje emkhawulweni omunye wesixhumanisi. Akukho sigaba esabiwe futhi akukho-ARP, ngakho i-mask ebingabonakala ingenangqondo ku-Ethernet ilungile ngokuphelele lapha.
Isiqalo sendawo okufunekayo siyiqiniso mayelana nenethiwekhi yasehhovisi, hhayi mayelana ne-tunnel. Uma udinga iseva eyodwa, indlela iyindlela yomsingathi yaleyo seva. Uma udinga yonke isubneti yasehhovisi, indlela iyileyo subneti. Akukho kulezi zimpendulo ezimbili okungafundwa kusuka ku-interface, futhi ukukhetha eyodwa ngoba yavela eduze kwekheli le-tunnel yiyo indlela ukuhleleka okusebenzayo okwephulwa ngayo.
| What you need to reach | What to install |
|---|---|
| One server, nothing else | A host route for that address |
| The office subnet | A route for the subnet prefix |
| Everything in the private space | Only if the requirement says so, and only with the owner's approval |
Leyo mugqa wesithathu yindawo lapho ithemba liphenduka ukuphazamiseka. Ukuhambisa yonke ibanga langasese ku-tunnel esebenzela indawo eyodwa kuphela kusunduza ithrafikhi engahlobene iye emzileni ongakwazi ukuyihambisa, futhi ukwehluleka okuvelayo kubonakala njenge-VPN ephukile hhayi indlela ebanzi kakhulu.
Khetha isiqalo esivela emfanekisweni wezidingo
Bhala isidingo njengomusho ngaphambi kokuthinta iphrofayili: yimaphi amasingathi okufanele afinyeleleke, futhi yisiphi isiqalo esincane kakhulu esibambo wona? Iseva eyodwa iyindlela yomsingathi. Isubneti iyindlela yesubneti. Ibanga lamasebuneti isifinyezo, futhi isifinyezo isithembiso sokuthi yonke ikheli ngaphakathi kulo iyafinyeleleka, okuyinto engavamile ukuba yiqiniso.
Bese uqhathanisa inombolo nalokho okusetshenziswa yihhovisi ngempela. Ukukopisha isiqalo kumlayezo wengxoxo ngaphandle kokuqinisekisa ngohlelo lwamakheli lwendawo yiyo indlela indlela egcina ikhomba ngayo isubneti okungekho muntu oyiphethe.
Khumbula futhi ukuthi indlela iyindlela, hhayi imvume. Isango lisayinquma ukuthi ikhasimende lakho lingayisebenzisa yini indawo, futhi isevisi isengakwazi ukukunqaba. Ukufaka indlela ngendlela efanele kuletha iphakethe lapho futhi akuphenduli lutho mayelana nogunyazo.
Engeza kuphrofayili, ungalokothi uyishintshe
Izindlela kuphrofayili ye-NetworkManager ziyimpahla enamanani amaningi, futhi umehluko phakathi kokusetha nokwengeza uwuhlamvu olulodwa. Sebenzisa uhlobo lokwengeza ukwengeza okufakiwe nokugcina konke osekuvele kulondoloziwe.
nmcli connection modify uuid 11111111-2222-4333-8444-555555555555 \
+ipv4.routes "10.40.20.9/32"Ngaphandle kokwengeza, isabelo sishintsha uhlu lonke. Kuphrofayili esevele ithwele iziqalo ezimbalwa, lokho kususa buthule lezo ezazisebenza, futhi uphawu lufika kamuva njengesevisi eyayifinyeleleka kuleli laptop.
Sebenzisa i-UUID esikhundleni segama. Amagama ayaphindwa ngemva kokubuyiselwa, futhi uxhumano oluhlelayo kungenzeka kube lona oluthwala ithrafikhi yakho. Hlola kuqala ukuthi ngabe kukhona okufakiwe okufanayo, ngoba ukwengeza okuphindwayo akuhlelekile ngisho noma akunangozi.
Le incomba yezakhiwo zomzila ibhala indawo eya kuyo, igxathu elilandelayo elingakhethwa, isilinganiso kanye ne-syntax yezakhi seveshini efakiwe. Yifunde ngaphambi kokwengeza igxathu elilandelayo, ngoba ukuthi iyadingeka yini kuncike ekuhlanganisweni nasekuhlelweni, futhi ukuqagela kusukela ekhelini lokuqala ohlwini lwe-interface akuyona indlela.
Indlela ezenzakalelayo ne-DNS yizinqumo ezihlukene
Adding an office prefix says nothing about where the rest of your traffic goes. If policy requires ordinary internet traffic to stay outside the tunnel, that is the ipv4.never-default decision, and it belongs to whoever owns the connection policy rather than to whoever is fixing one unreachable server.
Izindlela ezizenzakalelayo zingenye into okungafanele iphazanyiswe ngokunganaki. Ukuzicindezela ukuxazulula okufakiwe okukodwa okungekho kungasusa ezimbalwa ezisebenzayo, futhi umuntu okuhlongozile wayevamise ukubheka iphrofayili ehlukile enama-push ahlukile.
I-DNS inendlela yayo kanye nokwehluleka kwayo. Igama elixazululwa likheli elifanele ngomxazululi ongafanele, noma umxazululi ongakwazi ukuphendula isifunda sangasese, kuzobonakala njengenkinga yomzila ngenkathi indlela iphelele. Hlola ikheli negama ngokwehlukana, bese unquma ukuthi yiliphi ungqimba olwehlulekile ngempela.
Qinisekisa ukuthi kwasetshenziswa ini
Ushintsho olulondoloziwe akulona ushintsho olusetshenziswe. Xhuma futhi ngomjikelezo wokuphila osekelwe wumphathi, bese ubheka indlela yangempela eya endaweni ehlosiwe kanye nemithetho yenqubomgomo enquma ukuthi iyiphi ithebula ebuzwayo.
Uma isiqalo sikhona futhi uxhumano lusahluleka, usudlulele kwenye inkinga: ukukhethwa kwekheli lomthombo, indlela yokubuyela emuva emkhawulweni okude, noma isevisi enqaba ikhasimende lakho. Ngakunye kwalokho yindawo engcono yokubheka kunephrofayili osuyilungisile.