I-adaptha ye-VPN ikhombisa /32: lokho akusho ukuthi kunendawo eyodwa kuphela

Imasiki engu-255.255.255.255 ku-adaptha ye-VPN iyikheli lek layenti ngokwakho, hhayi umngcele wamahosthi angafinyeleleka. Funda imizila, ububanzi besango kanye nendlela yokubuya ngokuhlukana.

Ama-adaptha akhombisa u-255.255.255.255, futhi isiphetho ngokuvamile ukuthi i-VPN ifinyelela ikheli elilodwa ngqo. Lokho kufunda kuhlanganisa ikheli lek layenti ngokwakho neqoqo lezindawo eziqondiswa ngomhubhe. Ku-interface ye-point-to-point noma eqondisiwe, lezi zinto ezimbili ezihlukene, futhi eyodwa yazo kuphela elawula ukufinyeleleka. Le nganekwane isaqhubeka ngoba imasiki ibukeka njengemasiki yesizinda esincane abantu abasifunda ku-Ethernet.

Inganekwane: imasiki yehosti isho ihosti eyodwa efinyelelekayo

Isabelo sika-/32 sitshela i-interface ukuthi iyiphi ikheli eyeka lolu hlangothi lwesixhumanisi, futhi kusixhumanisi se-point-to-point yilokho kuphela okushiwo. Ikheli lozoma linguwensimu ehlukile, futhi imizila esho ukuthi yini engaphezu kozoma nayo ihlukile. Akukho lutho kumasiki okuchaza inethiwekhi ekude, ngoba imasiki akuyona indawo lapho kuchazwa khona amanethiwekhi akude. Ukuyifunda njengomngcele wokufinyeleleka kufana nokufunda inombolo yendlu yakho njengohlu lwawo wonke amakheli ovunyelwe ukuwavakashela.

Ukudideka kunomsuka wangempela: ku-Ethernet, imasiki yehosti iyoshiwo ngempela ikheli elilodwa kuleso sigaba. Umhubhe awusona isigaba se-Ethernet, futhi okudlula kuwo kunqunywa ithebula lemizila yek layenti, hhayi imasiki. Yingakho i-/32 efanayo ingama phambi kwesikhungo sedatha sonke.

Funda ikheli nemizila njengezinto ezihlukene

Phrinta i-interface nethebula ndawonye, bese uzifunda njengezimpendulo ezimbili zemibuzo emibili. Ikheli liphendula ukuthi ungubani lolu hlangothi; imizila iphendula ukuthi ithrafikhi ingaya kuphi. Umbuzo wesithathu, ukuthi yiziphi izindawo isango elizivumayo, awubonakali nhlobo kule kleyenti. Isithenjwa samakheli se-iproute2 sichaza ngokuhlukana izinkambu zekheli lendawo, lozoma kanye nomzila wesiqalo ngesizathu salokhu.

ip addr show tun0
ip route show
ip route get 10.60.5.10

Ku-Windows kunokwehlukana okufanayo phakathi kohlu lwamakheli nethebula lemizila, futhi umyalo wokusesha uyindlela esheshayo yokubona ukuthi yikuphi okunqobayo endaweni ethile. Uma ukusesha kubuyisa i-interface yomhubhe, ikleyenti izothumela iphakethe lapho. Uma kubuyisa i-adaptha yomzimba, ikleyenti ayisoze ibuze i-VPN, futhi asikho isigunyazo ohlangothini lweseva esizokushintsha lokho. Hlola indawo oyidinga ngempela, hhayi ikheli lomphakathi elijwayelekile.

Get-NetIPAddress -InterfaceAlias "VPN"
Find-NetRoute -RemoteIPAddress 10.60.5.10

Yima uma ukusesha kukhomba i-interface engalungile. Lokho kuyinkinga yemizila yekleyenti, futhi ilungiswa kukleyenti.

Kungani ukwandisa imasiki ngokuvamile kwenza kube kubi kakhulu

Ukushintsha isabelo sibe ngu-/24 ukuze kubukeke njenge-LAN yasehhovisi kungadala isiqalo esixhumanisini: i-kernel manje ikholelwa ukuthi lonke u-/24 luxhunywe ngqo ku-interface yomhubhe. Ithrafikhi eya emakhelini okufanele iqondiswe ngesango ibe isithunyelwa sengathi kunomakhelwane osesixhumanisini. Umiphumela iwumgodi omnyama obukeka njengokuwohloka kweseva.

Futhi kufihla inkinga yangempela, okuwumzila ongekho noma isigunyazo esingekho esangweni. Akukho kukulokhu okudala imasiki ebanzi, futhi kokubili kuyaqhubeka ngemuva koshintsho. Uma umklamo udinga isiqalo esikhulu ku-interface, leso yisinqumo somfanekiso we-interface osetshenziswayo, esithathwe nemibhalo iphathwe ngesandla. Ukukopisha imasiki ezithombeni zomkhiqizo omunye akusona leso sinqumo.

Uma umzila wesiqalo esikude ungekho, lungisa ukuhlinzekwa kwawo. Uma ukhona futhi uxhumano lusenqatshwa, imasiki yayingakaze ibe ukuxilongwa.

Lapho umzila ulungile futhi ukugeleza kusahluleka

Umzila olungile ufakazela kuphela ukuthi ikleyenti izothumela iphakethe. Isango kusamele lamukele indawo, indlela yokubuya kufanele ibekhona yekheli elabelwe, futhi insizakalo kufanele ivume ukugeleza. Hlola lezi zinto ezintathu ngokuhlukana: ukusesha kukleyenti, ububanzi obuvunyelwe besango kanye nesicelo esiya kuseva eyodwa edingekayo. Ukuthi ukuqinisekiswa kuphumelele ngaphambi kokuba zontathu zibe sendaweni kujwayelekile, futhi yingakho ikleyenti exhunyiwe ingase ingafinyeleli ndawo.

ping -c1 10.60.5.10
traceroute -n 10.60.5.10
curl -sv https://app.internal.example/ -o /dev/null

Gcina izinto zenethiwekhi nezimvume zeqembu kumnikazi wazo ensizakalweni ephethwe idivayisi. Lokho ikleyenti etshelwa ukuthi kufinyelele kanye nalokho evunyelwe ukukusebenzisa kuyizilungiselelo ezihlukene, ngokuvamile kuzikrini ezihlukene. Ukushintsha okukodwa nokuhlola okunye yindlela ithikithi eligxuma ngayo phakathi kwamaqembu amabili.

Inganekwane okufanele ithathe umhlalaphansi ukuthi imasiki ingumngcele wokufinyeleleka. Funda ikheli, imizila kanye nenqubomgomo yesango njengamaqiniso amathathu ahlukene, futhi u-/32 uyayeka ukubukeka njengomkhawulo futhi uqala ukubukeka njengesabelo esijwayelekile somhubhe.

Izihloko ezihlobene