Ingabe i-VPN iyawa ngemva kokuvuselelwa kwe-DHCP? Qhathanisa amakheli

Ukuvuselelwa kwesivumelwano sokuqasha nokuhluleka kwe-VPN kubonakala ndawonye kumarekhodi kaningi ngokwanele ukuthi abantu baphethe ngokuthi okukodwa kubangela okunye. Ukuhlangana kwesikhathi kungokoqobo; ubudlelwane besizathu ngokuvamile abukho. Ukuvuselelwa yisicelo se-unicast esiya kuseva eyakhipha isivumelwano sokuqasha, sicela ukuqhubeka nokusebenzisa ukubopha okufanayo, futhi iseva ingayandisa ngaphandle kokuthi ikhasimende lishintshe ikheli ellilodwa. Ukuhlola amanani ekhasimende ngokwalo eduze komcimbi kuhlukanisa isivumelwano esivuselelwe buthule nenethiwekhi eshintshe ngempela ngaphansi komhubhe osebenzayo.

Qala ngekhasimende eliwile

Okokuqala vula irekhodi lokuxhumana lekhasimende futhi ubhale isikhathi sokuwa size sifike kusekhondi. Bese uvula irekhodi lenethiwekhi lesistimu yokusebenza ngayo leyo minithi futhi ufunde ngokulandelana ukuthi isikhombimsebenzisi senzani. Lolu kulandelana yilona uphenyo lonke: umcimbi we-DHCP ngaphambi kokunqamuka, ukunqamuka ngaphambi komcimbi we-DHCP, kanye nemicimbi emibili engenalutho phakathi kwayo kuyizinto ezintathu ezihlukene ezitholakele. Umugqa werekhodi okhuluma kuphela ngesivumelwano sokuqasha ngenkathi umhubhe usuxhuma kabusha uwumhlobiso, akusona ubufakazi.

Bhala uhlu lwezikhathi njengoba uqhubeka esikhundleni sokulugcina engqondweni. Izimpawu zesikhathi ezivela kumathuluzi ahlukene azivamisile ukuvumelana ngokuphelele, futhi umehluko ngokwawo kwesinye isikhathi uyincazelo.

Qhathanisa amanani amane eduze komcimbi

Amanani amane achaza ngokwanele uhlangothi lwasekhaya lokuxhumana ukuze abambe ushintsho lwangempela: ikheli lesikhombimsebenzisi, isango elizenzakalelayo, uhlu lwezixazululi kanye nesimo sokusebenza sesikhombimsebenzisi. Zithathe phakathi nomzuzu ngemva kokuwa futhi uqhathanise nokuthwetshulwa okuthathwe ngenkathi umhubhe uphilile.

ip -4 -brief addr show dev wlan0
ip -4 route show default
resolvectl status | grep -A3 'DNS Servers'
journalctl -u NetworkManager --since -10m --no-pager | grep -i dhcp

Ikheli elingashintshanga elinesango elingashintshanga kanye nohlu lwezixazululi olushintshile kukhombisa ukuxazululwa kwamagama hhayi umzila, futhi umhubhe kungenzeka wasinda ngenkathi izinhlelo ziyeka ukuthola izingqalaziningi. Isango elishintshile lisho ukuthi indlela yokuphuma enethiwekhi yasekhaya isihambile, futhi lokho kwanele ukwenza umzila owawukhombisa kwelangaphambili ungasebenzi. Uma wonke amanani amane evumelana nokuthwetshulwa okunempilo, isivumelwano sokuqasha akusona isizathu sakho futhi umqondo wokuxhuma kabusha wekhasimende ngokwalo uba yisihloko. Thatha ukuqhathanisa ngenkathi iphutha libonakala, ngoba ukuthwetshulwa okunempilo okuthathwe ngemva kokuqalisa kabusha kunomlando wamakheli ohlukile futhi ngeke kuvumelane.

Yini ukuvuselelwa okungayishintsha nokungayishintshi

RFC 2131 ichaza ukuvuselelwa njengesicelo esiya kuseva yasekuqaleni engxenyeni yesikhathi sesivumelwano sokuqasha, ngokubopha kabusha kunoma iyiphi iseva kwesishiyagalombili kwesikhombisa uma umzamo wokuqala uhlala ungaphendulwanga. Asikho isinyathelo esidinga ukuthi ikhasimende lithole ikheli elihlukile, futhi iseva ebambisana ngokuvamile yandisa ukubopha okukhona. Ushintsho lwangempela lwekheli ngokuvamile lufika ngomunye umzila: iseva inqaba ukuvuselelwa, ikhasimende lilahlekelwe yisimo salo futhi laqala kabusha, noma inethiwekhi yathutha idivayisi yaya kwesinye isigaba.

Uhlangothi lomphakathi lokuxhumana lungashintsha ngaphandle kwanoma yiluphi ushintsho lwasekhaya. Ngemva kokuhumusha kwezinga lomhlinzeki, ikheli elibonwa umlingani we-VPN lingabelwa kabusha ngokuzimela kunoma yini eyenziwe yisivumelwano sokuqasha sasekhaya, futhi lokho kwabelwa kabusha kubonakala kufana nokuhluleka kwenethiwekhi yasekhaya ngaphakathi kwekhasimende. Ukuqhathanisa ikheli elibikwe ekhaya nokubonwa ohlangothini lomlingani iyona ndlela kuphela yokuhlukanisa.

Lapho ikhasimende lihluleka ukuzivumelanisa

Ikhasimende elibophe ukuthutha kwalo ekhelini elidala, elagcina kusilondolozi umzila omdala oya kumlingani, noma elasindisa ubunikazi besikhombimsebenzisi lingaqhubeka lizama umzila ongasekho. Lokho kuyiphutha lokuzivumelanisa, futhi kubonakala njengokudluliswa kabusha okuphindaphindiwe okuya ekhelini umsingathi ongasakwazi ukulifinyelela. Amanye amakhasimende akusingatha ngokwakhiwa kwalo: isibonelo, i-WireGuard ibuyekeza indawo yokugcina yomlingani lapho iphakethe eliqinisekiswe ngendlela efanele lifika livela emthonjeni omusha.

Ukuqalisa kabusha ngesandla okuvuselela isevisi kuyinkomba yokuthi ukuzivumelanisa kwehluleka kuphi, hhayi ubufakazi bokuthi izivumelwano zokuqasha nemihubhe azivumelani. Gcina inqubomgomo yokuvimbela isebenza ngesikhathi sokuhlola, ngaphandle kwalokho ukuhlola ngokwako kuba ukuphazamiseka okunesinye isizathu. Bhala ukuthi ikhasimende lalulama ngokwalo yini, kwathatha isikhathi esingakanani futhi yiluphi ikheli elazama futhi; lokho kulandelana kukutshela okuningi kunesizathu sokunqamuka esiboniswa kusikhombimsebenzisi.

Phinda umcimbi ngaphambi kokusola

Khiqiza kabusha isimo esikhundleni sokulinda uhlelo lwezikhathi: khulula futhi uvuselele isivumelwano sokuqasha, noma uphoqe umcimbi olawulwayo olinganayo, futhi ubheke ukuthi umhubhe uyasinda yini. Kunethiwekhi ephethwe, xhumanisa noma yiluphi ushintsho lwekheli nomnikazi wenethiwekhi, ngoba ukwabiwa okumile okungafanele kungashayisana nedivayisi esivele inalelo kheli.

Ngemva kokulungiswa okusekelwayo, phinda umcimbi ofanayo bese uhlola uhlelo lokusebenza nokusesha kwegama, ngoba umhubhe oxhuma kabusha kodwa owephula i-DNS udlula ukuhlola okubuthakathaka kunalokho okubalulekile. Bika ushintsho oluthile olukubonile, kanye nesigxivizo sakho sikhathi, esikhundleni sokuthi usho isivumelwano sokuqasha esihleliwe njengesizathu. Umehluko phakathi kwale mibiko emibili ukuthi umuntu olandelayo angakwazi yini ukuphinda iphutha noma izindaba nje.