Ngabe iklayenti le-VPN lisusa umzila owengeziwe? Sebenzisa ithebula lenqubomgomo

Iklayenti liphinda liqinisekise imizila eliphethe yona, ngakho umhora owengezwe ngesandla unyamalala ngemizuzwana. Beka okuhlukile kuthebula lenqubomgomo elinezinga lokuqala lomthetho elizowina.

I-/24 eyodwa yephrinta yaselabhorethri iyanyamalala phakathi kwezingcingo ezimbili ze-ip route show, futhi ilogi yeklayenti ithi kuphela ukuphuka kwesixhumanisi. Akukho okwakungalungile kumyalo, kusiqalo noma emalungelweni akho. Iklayenti lebhizinisi eliphethe imodeli yokuhambisa yomhlinzeki womsindo liphinda liqinisekise leyo modeli noma nini lapho omunye umuntu eyihlela, ngakho umhora owengezwe nguwe ususwa njengomhlaseli. Ukulwa nayo kulelo thebula elilodwa kuyisikhundla sokwehlulwa. Isixazululo siwukuyeka ngokuphelele ukuncintisana ngalelo thebula bese ubeka okuhlukile endaweni lapho umqaphi angakaze abheke khona.

Umqaphi uchaza umzila onyamalele

Khombisa lokhu ngaphambi kokuhlela kabusha noma yini: funda ithebula, engeza isiqalo, linda imizuzwana embalwa, funda futhi. Uma umhora ungekho futhi ungazange uthayiphe lutho ukuwususa, kunenhlangano eqapha. Thola inqubo ephethe lokhu kuziphatha bese ufunda incwadi yayo yokuhlola esikhathini lapho umzila unyamalala khona, ngoba ngokuvamile leyo sevisi igcina umhubhe, izihlungi zamaphakethe kanye nokulungiselelwa kwesixazululi. Ukuyibulala ukuze umzila wakho uhlale kungukushintshana ozokuzisola ngakho ekuxhumaneni okulandelayo.

ip route show
ip route add 192.168.2.0/24 dev enp0s31f6
sleep 5; ip route show

Isiqalo nesixhumanisi esingenhla yizindawo zokubamba. Ukukopisha igama lesixhumanisi kusuka esibonelweni esisebenza kwenye imishini yisizathu esivame kakhulu sokuthi lo mbukiso ungakhiqizi lutho nhlobo.

Ithebula lesibili alibonakali kumqaphi

Inhlangano yakha kabusha kuphela ithebula eliphethe. Nika okuhlukile ithebula laso kanye nomthetho othumela izindawo ezifanayo lapho, futhi ithebula eliyinhloko alishintshi neze, ngakho inhlangano ayinalutho eyolungisa. Lona umqondo wonke: indawo eyodwa yamagama yemizila egcinwa omunye umuntu, nenye oyithinta wena kuphela.

Ukushintshana kungukugcinwa. Izinto ezimbili zingahlukana, futhi indawo yomthetho ohlwini ibalulekile njengomzila ongaphakathi kwethebula eliwukhethayo.

Yakha okuhlukile bese ukwenza ukuthi kunqobe

Dala ithebula, faka umzila bese wengeza umthetho okhetha ithebula lalowo mkhondo. Izinga lokuqala linquma ukuthi umthetho wakho ubhekwa ngaphambi noma ngemuva kwemiyalo efakwe yiklayenti, futhi umthetho ohlelwa kamuva awufinyelelwa neze, ngakho inombolo iyingxenye yokwakhiwa hhayi umhlobiso. Bese ubuza i-kernel ukuthi izokwenzani ngempela, okungumbuzo ohlukile kulokho okulungiselelile.

ip rule add to 192.168.2.0/24 table 110 pref 30010
ip route add 192.168.2.0/24 dev enp0s31f6 table 110
ip route get 192.168.2.50

ip route get ixazulula umzila i-kernel ezowusebenzisa, kufaka phakathi idivayisi nekheli lomthombo. Ayikhiphi isihlonzi sethebula, ngakho yihlanganisa ne-ip rule show lapho udinga ukuqinisekisa ukuthi iyiphi ithebula enqobile. Ngokuhlanganyela ziyaphendula umbuzo owodwa obalulekile: ingabe ithrafikhi eya kulelo kheli iphuma lapho obukuhlosile?

Ezinye izimo zalo mqondo

Iphethini iyajwayeleka lapho uyeka ukucabanga ngezindawo. Isixhumanisi sendawo sangaphakathi singahlala sifinyeleleka ngenkathi umhubhe ugcina umzila ozenzakalelayo. Izimpendulo ezivela kuseva ye-SSH exhunywe ku-LAN zingaphuma ngosixhumanisi ezangena ngalo esikhundleni sokunyamalala emhubheni. Futhi umthetho osuselwe kusixhumanisi ungacindezela konke okufika kusixhumanisi esingenantambo kungene emhubheni, ngenkathi ithrafikhi ekhiqizwa umhlinzeki womsindo uqobo ihlala ku-Ethernet:

ip rule add iif wlan0 table 10
ip route add default dev tun0 table 10

Leyo faka yokugcina ihambisana nesixhumanisi esingenayo kunokuba ihambisane nomkhondo, okuwuhlobo oluhlukile lomthetho kanye nemodeli ehlukile yokucabanga. Ithrafikhi edluliswayo nayo idinga i-net.ipv4.ip_forward inikwe amandla, futhi umkhawulo okude kufanele uhambise kabusha ububanzi bomthombo noma ubuhumushe; umthetho kumshini owodwa awukhi neze enye ingxenye yomzila.

Thatha umthetho njengento esetshenziswa kanye

Imiyalo nemizila yethebula ihlala ememori. Ngemuva kokuxhumana futhi idivayisi yomhubhe ingaqanjwa kabusha, ikheli elinikeziwe lingahamba, futhi umthetho ophethe ivelu endala uyeka ngokuthula ukufanisa. Sebenzisa kabusha yonke inguquko kusuka kuskripthi esisodwa esiyiphethe, bese uhlola futhi i-ip rule show, igama ledivayisi lamanje kanye ne-ip route get entsha ngokumelene nomkhondo wangempela ngaphambi kokuthemba okuhlukile.

Imingcele emibili iyasinda noma ngabe yikuphi ukunakekela. Iklayenti lisabusa imithetho yalo yokuhlunga nokulungiselelwa kwesixazululi, futhi okuhlukile kokuhambisa akukushintshi kokubili. Uma iklayenti liphinda lisusa umthetho wakho wenqubomgomo, izindlela ezisekelwayo inqubomgomo yalo yomhubhe ohlukanisiwe noma iklayenti elikuvumela ukuthi uphathe imizila, njenge-OpenConnect; ukulungisa ibhinari yomthengisi ukuze uthulise umqaphi wayo kuyisibopho sokugcinwa esinokuhlolwa kobuqotho okunamathiselwe.

Bhala inombolo yethebula, izinga lokuqala kanye nomkhondo kunothi eduze kuskripthi. Uma kungenjalo umuntu olandelayo uzothola umthetho odlula umhubhe futhi ngeke abe nendlela yokwazi ukuthi kungani.

Izihloko ezihlobene