Isango le-VPN le-VirtualBox le-LAN: ibhuloho, umzila, ukubuya

Xhumanisa i-VM yesango ku-LAN ngebhuloho, memezela i-LAN kumaklayenti futhi wengeze umzila weqoqo kurutha ye-LAN. Isibonelo se-IPv4 esenziwe ngokugcwele esinezindlela zokubuya zangempela.

Abasebenzisi abakude badinga ukufinyelela iphrinta nesiphakeli samafayela ku-LAN yomzimba, futhi ikhompyutha yodwa ye-Linux ehlala ivuliwe iyi-VM ye-VirtualBox. Ukuxhumanisa leyo VM kuleyo LAN ngebhuloho ingxenye yokuqala. Ingxenye yesibili umzila wokubuya ozosetshenziswa ngempela yidivayisi ngayinye ku-LAN, futhi yiyo ingxenye eshiywa izilungiselelo eziningi. Uma ungekho, ithumbu liyaxhuma, iklayenti lenza i-ping kusango, futhi akukho okunye okuphendulayo.

Sebenzisa amakheli okungenzeka ufinyelele kuwo

Setha i-adaptha ye-LAN ye-VM kumodi ye-Bridged Adapter evunyelwe kuleyo nethiwekhi, futhi uyinikeze ikheli ngohlelo olujwayelekile lokwaba. Khona-ke i-VM ivela ku-LAN yomzimba njenganoma yimuphi omunye umsingathi. Umzila wayo ozenzakalelayo kufanele uqhubeke usebenzisa isango langempela, ukuze ukuthutha okubethelwe okuya ku-VPN peer kuhlale kufinyeleleka. Ungasebenzisi ikheli le-NAT elizenzakalelayo le-VirtualBox njengokugxuma okulandelayo kwe-LAN, ngoba lelo kheli lihlala ngemuva kwe-NAT ebunjiwe futhi alikho on-link kumsingathi noma kweminye imishini ku-LAN.

LAN router:          192.168.70.1/24
VirtualBox host:     192.168.70.5/24
VPN gateway VM:      192.168.70.10/24
Example LAN service: 192.168.70.40
VPN client pool:     10.80.0.0/24

Hlola ukugqagqana namanethiwekhi asekhaya abasebenzisi abakude ngaphambi kokukhetha iqoqo lamakheli. Ukugqagqana kuphenduka ukungacaci komzila okungekho ukulungiselelwa kwesiphakeli okukulungisayo.

Memeza i-LAN, bese udlulisa

Kusiphakeli okugunyazwa nokuthuthwa kwaso sekuvele kulawulwa, imigqa yenethiwekhi ibonakala kanje. I-push itshela iklayenti elamukelayo ukuthi lingafinyelela kanjani ku-LAN, futhi ayikwenzi i-VM idlulise noma yini ngokwayo.

dev tun
topology subnet
server 10.80.0.0 255.255.255.0
push "route 192.168.70.0 255.255.255.0"

Nika amandla ukudluliswa kwe-IPv4 kusilungiselelo senethiwekhi esihlala njalo se-VM, futhi uvumele iqoqo lamaklayenti ukuthi lifinyelele izinsizakalo ze-LAN ezihlosiwe emngceleni wokudlulisa we-VM. Imvume yokufinyelela isilaleli se-VPN umthetho ohlukile, futhi isivele isebenza uma ithumbu likhuphukile.

Umzila wokubuya usemzileni we-LAN

Amadivayisi aku-LAN aphendula ngesango lawo elizenzakalelayo, okuyirutha ye-LAN ku-192.168.70.1. Leyo rutha ayazi ukuthi i-10.80.0.0/24 ikuphi ngaphandle uma itshelwa. Engeza umzila weqoqo ekulungiselelweni okusekelwayo okuhlala njalo kwerutha, uqonde ekhelini le-LAN le-VM. Ukungeza kuphela kumsingathi we-VirtualBox kulungisa izindlela ezibuza lowo msingathi, futhi lokho akusiyo yonke idivayisi ku-LAN.

ip route add 10.80.0.0/24 via 192.168.70.10

I-firewall yendawo ekuyiwa kuyo kusafanele ivumele iqoqo lamaklayenti njengomthombo. Umzila uthwala iphakethe; awunikezi insizakalo.

Uma irutha ye-LAN ingenakushintshwa, ukuhumusha komthombo okulinganiselwe ku-VM kuyindlela ehlukile. Kwenza izimpendulo zibuye ngaphandle komzila, futhi kufihla amakheli amaklayenti ngamanye kusuka ensizakalweni ye-LAN.

Landela iphakethe elilodwa kusuka ekuqaleni kuze kube sekupheleni

Iklayenti ku-10.80.0.25 lithumela ku-192.168.70.40 ngethumbu. I-VM idlulisa iphakethe ku-LAN. Insizakalo iphendula kurutha yayo, ekhomba i-VM eqoqweni lamaklayenti, futhi i-VM ibuyisela iphakethe nge-OpenVPN. Wonke umgxumo kuleyo mvakazo uyindawo lapho umklamo ungahluleka khona.

Hlola ngohlelo lokusebenza lwangempela kusukela kuklayenti elikude, bese uphinda ngemuva kokulayisha kabusha isilungiselelo esilawulwayo ku-VM nakurutha.

Uma iklayenti lifinyelela i-VM kodwa lingayifinyeleli insizakalo, hlola umzila werutha kuqala. Uma insizakalo ithola isicelo futhi iklayenti lingakaze libone impendulo, umzila wokubuya uyisola.

Izihloko ezihlobene