Kungani i-interface yakho ye-VPN ihamba njalo ishiya indawo yayo ye-firewalld

Ufaka i-tun0 esikhaleni esifanele, uhlelo luqala ukusebenza, futhi ukulungiswa kuyanyamalala ekuxhumaneni okulandelayo. Ukuphinda ugijime umyalo ofanayo kuyasebenza, okukwenza kubonakale sengathi i-firewalld ikhohliwe. Akikhohliwanga; into enelungelo eliqinile kuleyo interface iyiphinde yayabela.

Indawo ihlala ize i-interface yakhiwe kabusha

Ukunikezwa kwendawo ye-firewalld ku-interface kuwukubopha, futhi ukubopha kuboshelwe entweni ye-interface njengoba ikhona manje. Iklayenti le-VPN elidiliza idivayisi futhi lilakhe kabusha likhiqiza into entsha, futhi entsha iqala kulokho okushiwo ingxenye enikezelayo. Yingakho uphawu luphindaphindeka ekuxhumaneni ngakunye hhayi kupakethe ngalinye.

Ukuqonda okufanayo kuchaza indlela yokuziphatha lapho kuqalwa kabusha: ukubopha kwesikhathi sokusebenza akukho eqa ukuqalwa kabusha, futhi ukubopha okungenamkhawulo kusebenza kuphela kumadivayisi i-firewalld ekholelwa ukuthi ingeyayo.

Ngaphambi kokushintsha noma yini, thola ukuthi iyiphi ingxenye enikezela indawo.

Funda izinto ezintathu ngaphambi kokushintsha noma yini

Bhala phansi indawo i-interface enayo manje, izindawo ezisebenzayo kanye nama-interface azo, kanye nohlu lwama-interface angunaphakade lwendawo oyihlosile. Gijima leyo mibuzo ngaphambi koshintsho, ngemva kokuxhumana kanye nangemva kokuqalwa kabusha. Ukuqhathanisa imiphumela emithathu kukutshela ukuthi ukubopha kuyashintshwa, kuyashaywa indiva, noma kusetshenziswa sekwephuzile kuphela. Uma uhlu lwangunaphakade seluvele lusho idivayisi kuyilapho indawo yesikhathi sokusebenza ingavumelani, kukhona okweqa ukuhlela kwakho.

Bhala futhi igama langempela ledivayisi esigabeni ngasinye, ngoba ithumbu elihla ku-tun0 namuhla lingahla ku-tun1 kusasa.

Ukubopha okugcinwe egameni elijwayelekile akukona ukuhlolwa kobunikazi, futhi amaminithi amabili okubhala asindisa ihora lokucabanga.

Lapho i-NetworkManager ingumnikazi wokuxhumana

Uma i-NetworkManager ilawula ukuxhumana kwe-VPN, iphrofayela yayo ithwala indawo futhi iyidlulisela ku-firewalld lapho ukuxhumana kusebenza. Ukubopha kwe-interface okungunaphakade ku-firewalld kwedivayisi efanayo kungase kushaywe indiva ngaleso sikhathi, ngoba i-NetworkManager ingumnikazi. Setha indawo ekuxhumaneni, futhi qinisekisa ukuthi uhlela iphrofayela ye-VPN hhayi ukuxhumana komzimba okungahlobene noma irekhodi lesikhashana.

Ukushintsha leyo mpawu kungase kube nomthelela ekuxhumaneni okusebenzayo ngokushesha.

Gcina indlela yokuphatha itholakala futhi ufunde inqubomgomo yendawo okuyiwa kuyo ngaphambi kokuyisebenzisa. Ukuhlela inkambu ye-ZONE yefayela le-ifcfg kulungile kuphela lapho lelo fayela lisewumthombo wokucushwa.

Lapho i-firewalld ingumnikazi wokubopha

Ngenxa yethumbu elizimele elinegama le-interface eliqinisekisiwe ngamabomu, ukushintshwa kwe-interface okungunaphakade iyithuluzi elifanele. Kuyisebenzise ngokulayisha kabusha noma ngomjikelezo wokuphila osetshenziswa ukusabalalisa kwakho, bese uhlola isimo sesikhathi sokusebenza, ngoba ukuhlela okungunaphakade kuphela kuchaza inhloso hhayi lokho okusebenzayo. Lokhu kokubili kungase kungavumelani isikhathi sonke ukulayisha kabusha okuthathayo.

Uma igama le-interface liguquguquka, gcina ukwabiwa phakathi nomjikelezo wokuphila wokuxhumana esikhundleni sokugijima noma iyiphi ithumbu elifuna igama kuqala.

Ungayiphonsi i-interface ku-trusted ukuze nje uhlelo lusebenze.

Hlola ukulayisha kabusha, ukuxhumana kabusha nokuqalwa kabusha

Ushintsho luphela kuphela lapho lweqa konke okuthathu.

Layisha kabusha kuqala, ngoba yilapho kushabalala khona ukuhlela kwesikhathi sokusebenza kuphela. Bese uxhuma ithumbu kabusha, ngoba yilapho i-interface eshintshiwe ilahlekelwa khona ukubopha kwayo. Bese uqala kabusha, ngoba yilapho ukungavumelani kommikazi kuvela khona ekugcineni. Bhala indawo esigabeni ngasinye futhi uyiqhathanise nenhloso oyibhalile, futhi uphawule ukuthi isiphi isigaba esidale umehluko.

Uma indawo ilungile futhi uhlelo lusahluleka, inkinga isemitherweni yendawo noma ekuhlukaniseni okusekelwe kumthombo, hhayi ebulungwini. Imibhalo ye-firewalld mayelana nokuxhumana nama-interface iyisithenjwa sendlela ubunikazi okufanele busebenze ngayo.

Bhala umnikazi, inani kanye nomphumela olindelekile ku-runbook, futhi ukwabiwa okulandelayo kuzochazeka.