Amasayithi amabili, isubneti eyodwa: yakha umbono we-alias kuwona wonke
Lapho amasayithi amabili esebenzisa i-LAN efanayo, nikeza ngalinye i-prefix ye-alias futhi uhumushe nhlangothi zombili. Hlola ukungqubuzana, inqubomgomo ye-overlay, amagama e-DNS kanye nerekhodi.
Amasayithi amabili amaklayenti womabili asebenzisa 192.168.50.0/24, futhi unjiniyela okude kudingeka afinyelele iphrinta ekhelini elifanayo kwelinye ngalinye. Awekho amaqhinga omzila awaxazulula yedwa lowo mbhidwango. Isayithi ngasinye sidinga umbono wekheli ohlukile, futhi isango kufanele likhethe isayithi kusukela kulowo mbono ngaphambi kokudlulisela noma yini.
Uhlelo lunezingxenye ezine: ama-prefix e-alias, izinhlangothi zombili zokuhumusha, inqubomgomo ye-overlay namagama. Ngayinye kufanele ivumelane nezinye.
Khetha i-prefix eyodwa ye-alias ngesayithi ngasinye
Nikeza isayithi ngasinye i-prefix ephelele ye-alias engesiyo yomunye umuntu endaweni. Uhlelo lwamasayithi amabili lungamaka 192.168.50.0/24 yesayithi A kuya ku-172.21.10.0/24 kanye ne-LAN efanayo yesayithi B kuya ku-172.21.20.0/24. Hlola abazokhethwa ngokumelene nayo yonke inethiwekhi ebambe iqhaza, kuhlanganise nama-VPC asefwini namanye amachibi e-VPN. Isikhala sekheli langasese sisetshenziswa yinhlangano ngayinye, ngakho ukuthi ububanzi buwu-RFC 1918 akusho lutho mayelana nokuthi buvulekile lapha.
Sakaza i-alias, hhayi isubneti yemvelo, kubasebenzisi abakude. Ububanzi bemvelo buhlala buyiqiniso lendawo.
Humusha nhlangothi zombili
Humusha nhlangothi zombili. Ukumaka kokuyiswa kabusha kubhala kabusha ikheli le-alias libe yikheli lemvelo esayithini eliphethe. Ukumaka komthombo kubhala kabusha umshayi okude abe yi-alias amanye amasayithi angayihlukanisa.
Ukumaka okumile okukodwa-kuya-kokukodwa kunqunyiwe, futhi lokho akwenzi ukuqaliswa kungabi nasimo. Ukuhumusha okuhlanekezelayo kungase kuncike esimweni sokuxhumana, futhi ukushintshela ekuhlulekeni noma izindlela ezingalingani kungaphula uhlelo olukushaya indiva. Imibhalo yenkundla inquma ukuthi yikuphi kwalokhu okusebenzayo.
Isigaba esiqondile lapho inqubomgomo, abakhethi kanye nemizila kusebenza kuyahluka phakathi kwe-IPsec esekelwe kunqubomgomo, amashubhu asekelwe emizileni neminye imikhiqizo. Dizayinela leyo oyisebenzisayo.
Yisa uhlelo phakathi kwe-overlay
Ku-hub, yabela i-prefix ngayinye ye-alias endleleni yesayithi eliyiphethe futhi uvumele kuphela ukudlula okudingwa umsebenzi. Ku-mesh, i-peer ngayinye efanele idinga i-prefix efanayo nolwazi lwenqubomgomo. Ukwengeza amashubhu akukulungisi ukukhethwa kwekheli okungaqondile kukodwa.
Ukusakazwa kwesubneti yonke kubanzi kunokusakazwa kwensizakalo eyodwa. Uma kudingeka imishini noma amachweba ambalwa kuphela, gcina imithetho yokufinyelela incane kunokumaka.
Ukuhumusha kwekhanda akubhali kabusha imithwalo yohlelo lokusebenza. Ukuqondisa kabusha, amakheli ashumekwe kumafayela wokucushwa kanye nezimvume ezisekelwe emthonjeni konke kusengathwala ikheli lemvelo. Hlola indlela yohlelo lokusebenza, hhayi i-ping kuphela. Impendulo ye-ICMP esebenzayo ifakazela ukuthi ukumaka kukhona futhi ayisho lutho mayelana nokuthi uhlelo lokusebenza lwamukela i-alias.
Lungisa amagama abonwa umshayi ngamunye
Nikeza amagama okunakekela izimpendulo ezihambisana nombono womshayi. Uma unjiniyela okude exazulula igama lomsingathi, kufanele ibuyisele ikheli le-alias yalelo sayithi, hhayi ububanzi bemvelo obabiwe.
Hlola imibono ye-DNS ngesayithi ngasinye ngaphambi kwefasitela lokuqala lokunakekela. Igama elixazulula kusubneti yemvelo libuyisela umshayi emuva embhidwangweni obekufanele uhlelo luyisuse.
Rekhoda futhi uqinisekise ngesayithi ngasinye
Yamukela isayithi ngasinye ngokwehlukana kumshayi wangempela futhi uqinisekise ukuthi iyiphi imishini ephendulile. Rekhoda ndawonye ikheli lemvelo, i-alias, isango eliphethe kanye nensizakalo evunyelwe.
Lolo hlu luyilo olugcina umehluko lapho kufika isayithi lesithathu eline-LAN ezenzakalelayo efanayo. Umhlahlandlela we-IPsec NAT osekelwe kunqubomgomo ubhala imodeli eyodwa eqondile yokuhumusha; akusona isivumelwano sayo yonke inkundla.