Iklayenti le-VPN elinekhasi le-LAN alikho ku-LAN

Iklayenti liyaxhuma, lithola u-10.50.0.200 futhi alikwazi ukufinyelela iseva ku-10.50.0.20 nakuba zombili izinombolo ziku-/24 elilodwa. Inkolelo engemuva kwalokho kulungiselelwa iwukuthi ikheli elivela kusandiso le-LAN lenza iklayenti libe yingxenye ye-LAN. Akwenzi lokho. Iklayenti likulinki ye-point-to-point, iseva ithatha indawo ekuyiwa kuyo njengeyasekhaya, futhi ingxenye eshayekile yimpendulo yomakhelwane okungekho muntu oyithumelayo.

Inkolelo eyiphutha: isandiso esifanayo sisho ingxenye efanayo

Isandiso sekheli sitshela ihost ukuthi yiziphi izindawo engafinyelela kuzo ngqo nokuthi yiziphi ezidinga irutha. Asitsheli ihost ukuthi indawo ekuyiwa kuyo ixhunywe kanjani ngokwenyama, futhi asiqinisekisi ukuthi indawo ekuyiwa kuyo ingaphendula isicelo sasendlalelo sokuxhumanisa. Le micabango ihlukene, futhi amathebula ahlukene kuhost ayayiphendula. Imaski iphendula owokuqala, ithebula lomakhelwane liphendula owesibili, futhi nguyena kuphela owokuqala osezandleni zakho ngasohlangothini lwe-VPN.

Lapho iseva ithumela ku-10.50.0.200, iqhathanisa indawo ekuyiwa kuyo nemaski yayo, inquma ukuthi ikheli liku-on-link, futhi ibuza ingxenye yasekhaya ikheli lezingxenyekazi elilinikazi. Leso sicelo siphuma ngesixhumanisi se-Ethernet, futhi iklayenti le-VPN alikho lapho ukulizwa.

Akukho okukulungiselelo lweklayenti okungakulungisa lokhu ngasohlangothini lwayo. Indlela yempendulo incike ekutheni idivayisi eseku-LAN iphendula egameni leklayenti, noma ekutheni iklayenti linokheli iseva engakuthathi njengolwasekhaya.

Ihost yasekhaya yenzani ngempela ngekheli

Indlela yokuziphatha kulula ukuyibona futhi kufanele ibonwe ngaphambi kokushintsha noma yini. Bheka ithebula lomakhelwane kuhost ye-LAN ngemva kokuzama ukufinyelela iklayenti: ingeno engaphelele noma ehlulekile iwukuxilongwa konke ngomugqa owodwa. Lowo mugqa ukutshela futhi ukuthi iphutha lingelasekhaya esigabeni, hhayi kwenye indawo ngaphakathi kwethuneli.

ip neigh show 10.50.0.200
ip route get 10.50.0.200
arping -I eth0 -c 3 10.50.0.200

Ukusesha komzila kuzobika indawo ekuyiwa kuyo njenge-on-link ngesixhumanisi se-Ethernet, futhi lokho kuyinkinga ngqo. Uma ingeno yomakhelwane ihlala ingaphelele ngesikhathi iseshini ye-VPN isasebenza, uqinisekisile ukuthi ingxenye eshayekile iwukuxazululwa kwesendlalelo sokuxhumanisa, hhayi umzila noma inqubomgomo yodonga lomlilo.

Yenza ukuhlolwa okufanayo kuhost ekwenye inethiwekhi engaphansi bese uqhathanisa. Ihost efinyelela iklayenti ngerutha ayidingi ngisho nengeno yomakhelwane, futhi lowo mehluko uyisinqumo somklamo ngokwesilinganiso esincane.

Indlela i-proxy ARP enikeza ngayo umgqamo olandelayo

I-proxy ARP yenza igethiwe iphendule isicelo sesendlalelo sokuxhumanisa egameni lendawo ekuyiwa kuyo engayifinyelela ngesinye isixhumanisi. Ihost ye-LAN ithola ikheli lezingxenyekazi, ithumela uhlaka kugethiwe, futhi igethiwe idlulisela iphakethe kuseshini ye-VPN. Ngokombono wehost, iklayenti libonakala lingemuva kwegethiwe nje. Akukho okukulungiselelo lweklayenti okushintshayo.

Imibhalo ye-RouterOS ARP yakwa-MikroTik ichaza lokho kusetshenziswa kubaklayenti be-dial-in ababoleka isikhala sekheli se-LAN exhunyiwe. Indlela iwukulungisa kokuxazululwa komakhelwane, futhi iyasebenza ngoba igethiwe isemigwageni yomibili ngempela.

Lokhu akufani nokuxhumanisa iklayenti ne-LAN ngebhuloho. Igethiwe isadinga ukudlulisela iphakethe kuseshini efanele esebenzayo, futhi umzila wayo nenqubomgomo yodonga lomlilo kusadingeka kuvumele insiza. I-proxy ARP ishintsha ukuthi ubani ophendula isicelo somakhelwane, hhayi ukuthi ubani ovunyelwe ukukhuluma.

Funda ngokucophelela amagama emodi epulatifomu. I-RouterOS yehlukanisa i-proxy-arp ne-local-proxy-arp, futhi eyesibili isebenza ngezimoto ezingena futhi ziphuma kusixhumanisi esifanayo. Lezi akuzona izipelingi ezishintshisanayo, futhi ukwenza zombili zisebenze ngaphandle komehluko akulona icebo elifushane.

Okungekho i-proxy ARP ekunikeza kona

Ayikunikezi ukutholwa nge-broadcast noma i-multicast. Iklayenti elidinga ukuthola insiza nge-broadcast lizohluleka noma kunjalo, ngoba igethiwe idlulisela i-unicast kuseshini futhi ayilwenzi iklayenti libe yilungu lesizinda se-broadcast se-LAN. Amaphrothokholi okutholwa ancike ku-broadcast angumthombo ovamile wemibiko yokuthi kuyasebenza entweni eyodwa hhayi kwenye emiklamo yamakheli abolekiwe.

Ayigcini ikheli. Uma inombolo ebolekiwe ikhona futhi echibini le-DHCP noma ekwabiweni okumile, amadivayisi amabili angagcina enekheli elilodwa futhi indlela yokuziphatha evelayo incike esikhathini. Ukungena okuphumelelayo akulona ukugcinwa.

Futhi ayikususi isidingo sokuxhumanisa nomnikazi we-LAN. Ingcono ye-proxy ARP emangaza umnikazi wohlelo lwamakheli iyisigameko sokusekelwa esilinde iviki elithule.

Ukuqhathanisa nechibi elihamba ngomzila ngokwehlukana

Enye indlela iwukunikeza amaklayenti e-VPN isandiso sawo bese uvumela amahost e-LAN ukuthi ahamba ngomzila aye lapho. Khona-ke iseva ithumela izimpendulo ze-off-link kugethiwe yayo, igethiwe ihamba ngomzila ngesandiso iye endaweni yokugcina ye-VPN, futhi esigabeni se-LAN akudingeki ngisho ukuxazululwa komakhelwane. Lezi izingxenye ezimbalwa ezinyakazayo kunechibi elibolekiwe kanye nempendulo ye-proxy.

Lowo mklamo kulula ukuwucabanga futhi kulula ukuwuhlola, ngoba ibanga lamaklayenti lihlukene ngokubonakalayo nebanga le-LAN. Kubiza umzila owodwa, indlela yokubuya kanye nomthetho wokufinyelela, okuyizinto ezifanayo ezidingwa umklamo we-proxy ARP endaweni engacaci kangako.

Khetha phakathi kwamamodeli ngamabomu hhayi ngengozi. I-proxy ARP ilungisa ubudlelwano obuthile; ichibi elihamba ngomzila ligwema isidingo salokho kulungisa. Bhala ukuthi ukhethe okukuphi nokuthi kungani, futhi umuntu olandelayo ngeke adinge ukuphinda akuthole lokho engceni yomakhelwane ehlulekile.