Amaklayenti e-VPN ne-LAN: nini ukusebenzisa isifunda esihlukile
I-interface yetunnel akudingeki ukuthi izuze ukuthembela kwe-LAN. Nquma nge-input noma i-forward, bhala uhlu lwezinsiza, futhi ubonise indlela enqatshiwe ngaphambi kokushintsha izifunda.
Ukubeka i-interface yetunnel esifundeni se-LAN kuyindlela emfushane kakhulu eya ku-VPN esebenzayo, futhi ngokuvamile iwukuhlela okuyiphutha okuzenzakalelayo. Kunika iklayenti elikude ukuthembela okufanayo ne-LAN enezintambo, okuyinto umsebenzi ongavamile ukuyidinga. Isifunda esihlukile sibiza imithetho embalwa futhi senza umngcele ubonakale. Isinqumo akusona ukuthi izifunda zingcono yini; yiziphi izimo ezintathu ezisebenza kunethiwekhi yakho.
Igama lesifunda alikufihli lutho futhi aliqinisekisi umsebenzisi. Lihlanganisa nje ama-interface ukuze kusetshenziswe imodeli yomgomo yocingo lomlilo.
Yini okulawulwa ngubulungu besifunda ngempela
Isifunda sihlanganisa ama-interface noma ithrafikhi kumodeli yocingo lomlilo. Khona-ke izilungiselelo zalo ze-input, output ne-forward zilawula izindima ezahlukene. I-input iyithrafikhi eya ku-router uqobo; i-forward iyithrafikhi edlula kuyo iya kwelinye ihosithi. Imibhalo ye-OpenWrt ngezifunda ibheka i-input, output ne-forward njengezilungiselelo ezihlukene ngenxa yalesi sizathu.
Imvume esuka esifundeni se-VPN iya esifundeni se-LAN ayiyona ngokuzenzakalela imvume ephambene. Imithetho ye-forward inendlela, futhi umthetho ovumela ithrafikhi esuka kuklayenti iya kuseva awuvumeli amaseshini asuka kuseva aya kuklayenti. Iklayenti elingavula ukuxhumana kuya kuseva akulona iklayenti iseva engavula ukuxhumana ibuyela kulo.
Umehluko lowo uyisizathu sokuthi isifunda esihlukile sisebenze: ungasho ngokucacile indlela ngayinye nendima ngayinye. Bhala indlela eceleni komthetho ngamunye.
Isinqumo sokuqala: i-input, i-forward noma kokubili
Uma amaklayenti akude edinga i-DNS evela ku-router, vumela i-input yalowo sevisi kuphela. Uma edinga ukufinyelela iseva yamafayela, vumela i-forward eya kuleyo ndawo. Imiklamo eminingi ye-VPN idinga kokubili, kodwa ngamasevisi ahlukene.
Ukufinyelela okubanzi kwe-input kuwo wonke amasevisi endawo cishe akukaze kudingeke. Bheka ukuphathwa kwe-router njengesinqumo esihlukile ekufinyeleleni izinhlelo. Uma i-router idinga ukuphendula i-DNS kuphela, bhala leyo mvume eyodwa futhi ushiye okunye kuvaliwe.
Isinqumo sesibili: iziphi izinsiza ezidingwa amaklayenti akude
Bhala uhlu lwamabanga amaklayenti, izindawo, namasevisi okufanele i-VPN iwanikeze ngaphambi kokubhala imithetho. Uhlu lwezindawo lunosizo kunombhalo wokuthembela, ngoba luyasinda ekufudukeni kocingo lomlilo.
Gcina ama-interface okuphatha ehlukile ekufinyeleleni okujwayelekile kwezinhlelo. Iklayenti elikude elifinyelela i-wiki alidingi ngenxa yalokho ikhasi lomlawuli we-router noma ikhonsoli ye-hypervisor.
Uma indawo evunyelwe ingaqhubekisela phambili, umngcele wesifunda uma eceleni kocingo lomlilo, hhayi kulokho okwenziwa yindawo ngemuva kwalokho.
Isinqumo sesithathu: uzobonisa kanjani umngcele
Hlola ukugeleza okuvunyelwe nalokho okunqatshiwe ngamabomu ngemva kwakho konke ukushintsha. Ukubonisa ukuthi iwebhusayithi eyodwa iyalayisha akuvezi imvume ebanzi engahlosiwe. Hlola kusuka kubanga lamakheli eklayenti le-VPN, hhayi kusuka ku-LAN, futhi ufake nendlela oyilindele ukuthi yehluleke. Bhala imiphumela yomibili eceleni komthetho.
Gcina ukufinyelela kokubuyisela kwesango ngaphambi kokushintsha umgomo wesifunda esikude. Sebenzisa ukucushwa okuphathwayo okuhlala njalo esikhundleni sezinguqulo ngesikhathi sokusebenza, uma kungenjalo ukuqalisa kabusha okulandelayo kuzobuyisela ukuthembela kwakudala. Ikhophi yokucushwa kwangaphambilini, egcinwe ngaphandle kwedivayisi, iyindlela eshibhile yokuhlehla ozokuthola.
Njengoba inethiwekhi ikhula, bhala ubulungu nenjongo yemithetho. I-interface esanda kuxhunywa akufanele izuze amalungelo ngoba nje othile uyinike igama lesifunda elilula.