Ithebula le-VPN elingenalutho alivimbeli lutho ngokwalo
Ithebula lenqubomgomo elingenayo indlela ehambisanayo aliwalahli amaphakethe; ukusesha kuyaqhubeka. Engeza isenzo sokugcina, bese uhlola zombili izimo zokwehluleka.
Umthetho wenqubomgomo uthumela amaphakethe amakwe kuwebula elikhethekile, futhi umbono ojwayelekile ukuthi ukulahleka komzila we-VPN kuyawavimbela. Kodwa indlela yokusebenza yenza okunye. Lapho ithebula lingenayo indlela ehambisanayo, ukusesha kuyaqhubeka kumthetho olandelayo esikhundleni sokuma, futhi ithebula main lisaphethe indlela ejwayelekile yokuzenzakalela ye-uplink. Umphumela uyisimo esibonakala njenge-fail-closed kodwa esiziphatha njenge-fail-open.
Akukho okonakele; yile ndlela ukuhamba kwemizila okusekelwe kunqubomgomo okuchazwe ngayo.
Ukusesha kuyaqhubeka lapho ithebula lingenalutho
100: from all fwmark 0x36 lookup 42 110: from all fwmark 0x36 lookup default 32766: from all lookup main
Thatha lelo qoqo lemithetho: ukusesha okumakiwe kungena kuthebula 42, futhi umthetho olandelayo uthumela uphawu olufanayo kuthebula elibizwa nge-default. Uma ithebula 42 lisaphethe indlela ejwayelekile esebenzisekayo, ukusesha kokuqala kunikeza indlela. Lapho leyondlela inyamalala futhi akukho okunye kuthebula 42 okuhambisanayo, ukusesha akuphenduki kube ukulahla; ukucutshungulwa kudlulela kumthetho olandelayo, futhi uma nawo ungatholi lutho, kufinyelela ithebula main. Akukho lutho kulolo hlelo olubika ukuthi wuphi umthetho owanikeza impendulo yokugcina, ngakho ukuxhumana okusebenzayo kubonakala njengenqubomgomo esebenzayo.
Ithebula 253, elivame ukubizwa nge-default, iyithebula elijwayelekile lokuhamba kwemizila futhi ngokuvamile alinalutho. Igama lalo akusona isiyalo sokulahla amaphakethe, futhi alifani nendlela yendawo ekuyiwa kuyo ejwayelekile ngaphakathi kwethebula.
Izenzo zokugcina ziqeda ukusesha
100: from all fwmark 0x36 lookup 42 110: from all fwmark 0x36 prohibit 32766: from all lookup main
Umthetho wokugcina ungalandela ukusesha kwe-VPN esikhundleni sokusesha kwethebula elingenalutho. Ngophawu olufanayo, isenzo se-prohibit esibekwe ngemva komthetho wethebula 42 siqeda ukusesha lapho lelo thebula linganikezi lutho, futhi sibuyisela ukwenqaba kokuphatha esikhundleni sokunikeza ithebula main elinye ithuba. I-unreachable ne-blackhole nazo ziyizinto zokugcina, ngokuziphatha okwehlukile kwephutha kumthumeli.
Indlela yohlobo lwe-throw yehlukile: ngaphakathi kwalelo thebula iziphatha sengathi akukho okuhambisanayo, ngakho imithetho elandelayo isathola ithuba layo. Lokho kwenza i-throw ibe usizo ekuhlehleni ngamabomu futhi ingalungile njengesithiyo sokugcina.
Qinisekisa ngophawu lwangempela kanye ne-interface
ip -4 rule show ip -4 route show table 42 ip -4 route get 198.51.100.20 from 10.44.0.2 iif lan0 mark 0x36
Hlola imithetho yangempela kanye nethebula esikhundleni somdwebo, bese ubuza ukugeleza ngengqikithi yomthombo, uphawu nokungena enakho ngempela. Ukusesha kokufunda kuphela okuqondiswe endaweni ekuyiwa kuyo, okunikezwa ikheli lomthombo, i-interface kanye nophawu, kubika indlela i-kernel engayikhetha ngaphandle kokuba iphakethe liphume. Ukunikeza uphawu embuzweni akufakazeli ukuthi i-firewall imaka ithrafikhi yangempela; lokho kuwukuhlola okwahlukile kwemithetho yokumaka. Qinisekisa inani ngesibali noma ngelogi ngaphambi kokuthatha iziphetho embuzweni.
Izicelo ezikhiqizwe endaweni zidinga ingqikithi yazo, ngoba indlela yazo yokumaka ivame ukwehluka kuleyo yethrafikhi edluliswayo. Zihlole nge-interface yokuphuma uhlelo lokusebenza oluyosebenzisa ngempela.
Izimo zokwehluleka ezimbili, hhayi esisodwa
Isimo esisodwa sokwehluleka ukunyamalala komzila we-VPN nokwehla kwethrafikhi ku-uplink. Umhubhe ofile omzila wawo uhlala ufakiwe ungenye into: amaphakethe aqhubeka eqondiswa endleleni engasebenziseki esikhundleni sokwehla, futhi uphawu ukulahlekelwa okuthule hhayi ukuxhumana okuqondile okubonakalayo. Hlola kokubili, futhi uhlole nokuziphatha ngesikhathi sokuqala, ukuxhumana kabusha nokumisa insizakalo.
Umthetho onjalo usize kuphela uma ukhona futhi amaphakethe esawuthwala uphawu olumkhethayo. Iskripthi sokuvala esisusa umthetho, noma indlela esusa uphawu, sibuyisela ukuziphatha okuvulekile. Lokho kushintsha kufanele kuzilolonge.
Sebenzisa inqubomgomo ku-IPv6 ngokwehlukile, futhi gcina izihlengelo zamaphoyinti okugcina ezigunyaziwe zicacile hhayi ngokungaqondile.