Leyo ikheli lethuneli ingumlingani, hhayi isethi engaphansi ongayiphenya
Imaski kusixhumanisi samaphuzu amabili ichaza umkhawulo okude, hhayi ibanga lomakhelwane. Funda ikheli lomlingani ngaphambi kokunquma ukuthi isethi engaphansi ibukeka ingalungile.
Iklayenti lakho liyaxhumana futhi likhombisa ipheya lamakheli, noma ikheli elilodwa elibonisa 255.255.255.255 njengemaski, futhi ukusabela kokuqala ukuthi iseva inikeze into ephukile. Akukho okwephukile: isixhumanisi sethuneli siyisixhumanisi samaphuzu amabili, futhi imaski ichaza umkhawulo okude walokho xhumanisi elilodwa, hhayi ibanga lomakhelwane. Ukufunda ipheya njengelekheli lendawo nomlingani kuchaza imaski eyisimanga, umzila wehosi elilodwa eceleni kwayo kanye nethebula lomakhelwane elingekho. Lokho ukufunda okufanayo okungakuxoleli uhlelo lwamakheli oluhlangana nenethiwekhi yehhovisi.
Kungani imaski ibukeka ingalungile kusixhumanisi sethuneli
Kusixhumanisi se-Ethernet, ikheli nemaski kusho izinto ezimbili: le hos iyona ephethe ikheli, futhi konke okungaphakathi kwesiqalo kungumakhelwane oqondile. I-kernel ikhipha umzila kusixhumanisi kulezo zinto ezimbili, bese ixazulula amakheli esixhumanisi kulabo makhelwane eicabanga ukuthi bakhona. Isixhumanisi samaphuzu amabili sigcina ubunikazi futhi siyeke abomakhelwane, ngakho ikheli lesibili emgqeni weklayenti umkhawulo okude, hhayi enye ihosi esigabeni esabiwe. Akukho ukukhonjwa kwezingxenyekazi, akukho ukuhanjiswa kokuxazulula futhi asikho isigaba sokusakaza ongajoyina kuso, yingakho isixhumanisi siziphatha njengepayipi elinomkhawulo munye qobo.
Yingakho futhi umzila wehosi elilodwa eceleni kwemaski ebanzi ujwayelekile lapha hhayi uphawu. Ukufinyeleleka kulesi sixhumanisi kusho ikheli elilodwa, futhi i-kernel ibhala khona kanye lokho. Funda womabili amakheli ndawonye ngaphambi kokunquma ukuthi ukuhlelwa akulungile, ngoba ngayinye iyodwa ibukeka njengephutha.
Ama-topology amabili, izimo zamakheli ezimbili
I-topology endala yamaphuzu amabili inikeza iklayenti ngalinye ibhulokhi elincane futhi isebenzisa amakheli amabili aphakathi nendawo, ngakho imaski ibukeka njengengxenye yenethiwekhi hhayi njengechibi. I-topology yesethi engaphansi inikeza ikheli elivela echibini nemaski yechibi futhi ibiza ikheli lethuneli leseva ngokuthi umlingani. Zombili zenza isixhumanisi esivumelekile, futhi zihluka kuphela ngokuthi yimaphi amakheli avela kuphrofayela kanye nemaski umsebenzisi angase ayibuze.
| Topology | Client address shape | Peer | Route to expect |
|---|---|---|---|
| Point-to-point block per client | Two neighbouring addresses inside a small block | The far address of that block | A single host route on the tunnel device |
| Shared pool | One address carrying the pool mask | The server's tunnel address | A single host route on the tunnel device |
Noma yimuphi umugqa ohambisana neklayenti lakho, funda umlingani kuqala, ngoba ubiza umkhawulo okude ngakho uchaza imaski. Iphrofayela ekhotshelwe phakathi kwamaseva asebenzisa ama-topology ahlukene izokhombisa isimo esingalungile sekhaya layo elisha, futhi lokho kungafani kulula ukukuthatha njengephutha leseva.
Lapho ichibi nenethiwekhi yehhovisi zifuna amabhithi afanayo
Njengoba isixhumanisi sinomzila, ichibi lidinga isiqalo esingaveli ndawo phakathi kwezinethiwekhi iseva engazifinyelela. Yabelana ngesisodwa futhi iklayenti ligcina umzila owodwa webanga elisho izindawo ezimbili, futhi ukuthi iyiphi indawo ezonqoba kunquma umzila ofakwe ekugcineni. Iphutha livela kuklayenti nakuba isinqumo esingemuva kungesohlelo lwamakheli. Lokho abasebenzisi abikukho ukuthi i-router yendawo iyanyamalala lapho ithuneli likhuphuka, noma ukuthi amanye amahosi ehhovisi kuphela aphendulayo.
Iziqalo ezibukeka zifana kuphela zelinye icala, futhi ukuqhathanisa ama-octet ngamehlo akusikho ukuqhathanisa iziqalo. Bhala zombili futhi ubale amabhithi afakwe imaski: 192.168.4.0/24 uma kuqhathaniswa ne-192.168.6.0/24 kuyavumelana kuze kufike kubhithi 22 futhi kuyahlukana kubhithi 23, ngoba i-octet yesithathu ifundwa njenge-00000100 uma kuqhathaniswa ne-00000110, ngakho lezo zinethiwekhi ezimbili zihlukene ngempela. Beka i-10.8.0.0/24 eceleni kwelinye i-10.8.0.0/24 futhi wonke amabhithi angu-24 afakwe imaski ayavumelana, okusho ukuthi umzila owodwa awukwazi ukuveza zombili izindawo. Ubude bemaski bunquma lapho ukuqhathanisa kuma khona, futhi inethiwekhi efakwe okwesibili iyona elahlekayo.
Lokho isixhumanisi esinomzila esingakunikeza
Ukusakaza ne-multicast akudluli isixhumanisi esinomzila, futhi izici eziningi ezijwayelekile zakhiwe phezu kwazo. Uhlu lokuphenya, izimemezelo zamagama nokutholakala kwesevisi konke kucabanga isigaba esabiwe, ngakho iseva yamafayela ingaphendula yonke isicelo ngekheli futhi noma kunjalo ingaveli ohlwini. Ukuxazululwa kwamagama okuncike ekusakazeni kwendawo kwesixhumanisi kuyahluleka ngesizathu esifanayo, futhi akukho ukuhlelwa kwephrofayela okushintsha lokho ithuneli elingakuthwala. Ukuthi lokho kubalulekile kuwumbuzo wezimfuneko, hhayi womzila.
Iklayenti elidinga ngempela leyo mithwalo lidinga isixhumanisi sebhuloho, esithwala amafreyimu e-Ethernet ngakho sigcina isigaba sokusakaza. Intengo isixhumanisi esinomsindo, ukulahlekelwa ukukhonjwa okuhlanzekile okuchazwe ngenhla, kanye nendawo yephutha enkulu kakhulu lapho kuvela imijikelezo. Thethelela isimfuneko ngaphambi kokushintsha, futhi ukhethe isevisi yamagama esebenza phezu kwezixhumanisi ezinomzila lapho isimfuneko sikhuluma ngamagama kuphela.
Ukufunda isixhumanisi ngaphambi kokuhlela iphrofayela
Buza i-kernel ukuthi yifake ini, hhayi ukuthi iphrofayela ibukeka ithini. Umphumela wamakheli ukhombisa umlingani ochaza imaski, futhi umphumela wemizila ukhombisa ukuthi ikhona yini indlela eya kuwo. Ukugijima kokubili kumadivaysi ethuneli kuthatha isikhashana futhi kuxazulula umbuzo.
ip -4 addr show dev tun0
ip route show dev tun0
ip route get 10.8.0.1Uma lezo zintathu zivumelana, iphrofayela yenza lokho eyayihlelelwe kona, futhi inkinga esele ikwenye indawo. Shintsha i-topology kuphela ngesizathu esibiza ikhono elingekho, ngoba imaski engaziwa ayisiso isizathu esinjalo.