Iphuli yakho ye-VPN akuyona ibanga le-DHCP ye-LAN: kungani iphuka

Indlela emfushane ekhangayo ukunikeza amaklayenti e-VPN amakheli asuka ebangeni elifanayo elisetshenziswa iseva ye-DHCP yasehhovisi, ngombono wokuthi konke kuyinethiwekhi eyodwa noma kunjalo. Akunjalo. Ithuneli elihambisa ngomzila lithwala amaphakethe e-unicast phakathi kweziphetho ezimbili, kuyilapho iphuli ye-LAN ikhona ukuze iphendule izicelo zokusakaza esigabeni esibonakalayo. Ukusebenzisa kabusha lezi zinombolo kubeka abahlukanisi ababili ukuba babhekele isikhala samakheli esisodwa futhi kushiye umzila wokubuyela ungacacisiwe.

Abahlukanisi ababili, isikhala samakheli esisodwa

Iseva ye-DHCP ye-LAN iyazi ukuthi iqashele imaphi amakheli nokuthi kuyiphi ikheli le-MAC, futhi iwavikela nge-ARP. Iseva ye-VPN inephuli yayo futhi ayazi lutho ngalezi zivumelwano zokuqasha. Akekho kubo oxekayo; abazange nje bethulwe komunye nomunye.

Ikheli elisuka kuphuli ye-LAN elinikezwa iseva ye-VPN kungenzeka ukuthi kakade lingelaphrinta. Manje amadivayisi amabili afuna ikheli elilodwa kusifanekiselo esifanayo, futhi ithebula lokudlulisa yeswishi linquma ukuthi ngubani ophendulayo.

Lena yinkinga abantu abahlangabezana nayo kuqala: iklayenti elixhuma ngempumelelo bese lifinyelela kumshini ongafanele, noma lifinyelela kolungile ngezikhathi ezithile.

Kungani irutha ingasabalalisi amakheli e-VPN

Ukutholwa kwe-DHCP ukusakaza, futhi ukusakaza kuyama emngceleni ohambisa ngomzila. Ngaphandle uma idizayini ixhumanisa ithuneli ngebhuloho noma isebenzisa i-relay ye-DHCP enegunya elifanayo, isicelo sekhayenti asisoze safinyelela iseva ye-LAN.

Ngakho-ke iseva ye-VPN iyayabela ikheli ngokwayo: iphuli ekuhlelweni kweseva, ikheli kumlingani ngamunye kusethaphu ye-WireGuard, noma ikheli elicindezelwa isendlalelo sokuqinisekisa kusetshenziswa kwe-IKEv2. Lezi zindlela azincikile kusizindalwazi sokuqasha se-LAN, futhi yikho kanye okwenza zidinge ibanga lazo.

Ukuqonda okufanayo kuchaza ukuthi kungani ukushintsha ububanzi be-DHCP kungalilungisi iklayenti le-VPN elingalitholi neze ikheli. Iklayenti alibuzi iseva ye-LAN, futhi akukho ukuhlela kobubanzi okulenza libuze.

Ukudlulana kuvela njengokushayisana, hhayi njengenethiwekhi enenslowu

Amanethiwekhi amabili abelana isifanekiselo ngaphandle kwedizayini esekelwayo ayinkinga ehlukile kunobunikazi obuphindiwe, futhi avame ukudidaniswa. Uma iphuli ye-VPN iyisifanekiselo esihlukile, ukudlulana kubalulekile kuphela uma umzila uthumela ithrafikhi ohlangothini olungalungile. Uma iphuli ingaphakathi kwesifanekiselo se-LAN, ukushayisana kukhona ngokushesha futhi kuyasendaweni.

Empeleni ubona izimpendulo ze-ARP ezivela kudivayisi engalungile, ukuxhumana okusethwa kabusha phakathi, nek layenti elikheli lalo lifunwa omunye umuntu. Akukho kulokhu okubonakala njengenkinga yokuhambisa ngomzila, yikho ukulungiswa kusetshenziswa esendlalelweni esingalungile. Ukuqasha okuphindiwe kulula ukuqinisekisa futhi kuyahlupha ukuphila nakho. Kuyasinda nasekuqaliseni kabusha, ngoba bobabili abahlukanisi baqhubeka benxusa ikheli elifanayo.

Umzila wokubuyela uyinkinga ehlukile

Ngisho nangephuli ehlanzekile nehlukile, abasingathi be-LAN kudingeka bazi ukuthi bamphendula kanjani iklayenti. Isango labo elimisiwe yirutha, futhi irutha idinga umzila wale phuli okhomba kuseva ye-VPN, ngaphandle uma idizayini ihumusha ithrafikhi yekhayenti esikhundleni salokho.

Funda umzila kuzo zombili izinhlangothi ngaphambi kokushintsha noma yini. Esangweni, buza ukuthi iyiphi i-interface ikhenele ezoysisebenzisa ekhelini leklayenti; kuklayenti, buza ukuthi isebenzisa muphi umzila ekhelini le-LAN.

Le mishini iyakhombisa isinqumo sokudlulisa esangweni kanye namarekhodi omakhelwane adalula impinda:

ip -4 route get 10.8.0.5
ip neigh show dev br-lan | grep 10.8
ip -4 route get 192.168.50.20

Uma umshini wokuqala uphendula nge-interface yethuneli, umzila wokubuyela ukhona. Uma uphendula nge-interface ye-LAN, irutha likholelwa ukuthi iklayenti lisekhebula futhi lizozama ukwenza i-ARP kulo.

Amadizayini anebhuloho akhona, kodwa kufanele akhethwe

Ukuxhumanisa ithuneli ne-LAN ngebhuloho idizayini yangempela, esetshenziswa lapho amaklayenti kufanele athole ukusakaza noma atholwe amaphrothokholi acabanga ingxenye eyodwa. Kudinga ukuthi iseva ibe nakho lokho kuziphatha kwebhuloho kanye nokuphathwa kwamakheli okuhamba nakho.

Okungasebenzi ukulingisa umphumela ngokukopisha izinombolo. Iphuli eyabiwe ngaphandle kwebhuloho ikunikeza ukushayisana ngaphandle kokutholwa, okuyinto embi kakhulu kuzo zombili izinhlelo.

Khetha isendlalelo sesithathu ngephuli ehlukile ngaphandle uma uhlelo ludinga ngempela ingxenye, futhi bhala iphuli ukuze umphathi olandelayo angaphindi asebenzise ibanga le-DHCP ngenxa yokuhleleka.