Akukho ndlela elungisa iphuli ye-VPN ehlangana ne-LAN yakho

Lapho iphuli ye-tunnel kanye ne-LAN yasekhaya kwabelana nge-192.168.1.0/24, inethiwekhi encane yasekhaya iyawina. Phinda unombolo ohlangothini olulawulayo, noma uhumushe ibanga elikude.

Uhlelo luthi i-tunnel iphilile, kodwa ingxenye yezindawo ozidingayo ayiphenduli neze. Ukusabela kokuqala ukwengeza umzila noma ukwehlisa isilinganiso, futhi lokho kusabela yikho insumansumane okufanele ibulawe kuqala. Lapho i-LAN yeklayenti uqobo kanye nephuli ye-tunnel zifuna isiqalo esifanayo, ithebula lomzila libamba amaqiniso amabili angavumelani, futhi akukho mzila ozenzakalelayo noma isilinganiso okuxazulula. Ukulungisa yisinqumo sokwabiwa kwamakheli, futhi akukho ukuhlela umzila okungathatha indawo yaso.

Kungani umzila owengeziwe ungeke wehlukanise isiqalo esisodwa

Umzila awukwazi ukwehlukanisa izimangalo ezimbili esiqalweni esisodwa, yingakho isinyathelo sobuhlakani ukumisa ukufuna umugqa womzila ofanele. Isiteki ngeke sibeke isiqalo esifanayo phambi komzila oxhunyiwe, futhi ukufakwa okuqondile kakhulu kuyabamba ikheli, kodwa kwenza umsingathi wendawo ongumnikazi wakho ungafinyeleleki. Okubonakala njengenkinga yomzila ukungqubuzana kwamakheli, futhi kokubili ukulungisa kushintsha amakheli, hhayi imizila. Hlola lesi simangalo emshinini wakho ngaphambi kokusamukela.

ip route get 192.168.1.50
route -n get 192.168.1.50
Find-NetRoute -RemoteIPAddress 192.168.1.50

Buza uhlelo mayelana nekheli elilodwa futhi uqaphele ukuthi lisho yiphi i-interface. I-Linux, i-macOS ne-Windows ziphendula ngosesho lokufunda kuphela olubika i-interface ekhethiwe kanye nehop elilandelayo ngaphandle kokuthumela lutho. Lapho impendulo ikhomba ku-adaptha yomzimba ngenkathi i-tunnel iphakeme, i-kernel ithatha ikheli njengelikusixhumanisi hhayi njengento i-tunnel engayithwala.

Beka isiqalo esinikezwe umhlinzeki eduze kwesiqalo esisetshenziswa yiroutha yasekhaya bese uziqhathanisa njengezintambo. Ukuvumelana okunembile yikhona okucacile, futhi iphuli ebanzi yomhlinzeki equkethe inethiwekhi encane yasekhaya yehluleka ngendlela efanayo, kodwa kulula ukuyigeja. Iziqalo ezimbili ezibonakala zifana kuphela akukona ukungqubuzana, ngakho bhala kokubili ngaphambi kokushintsha noma yini.

Funda iphuli ekhompyutha yeklayenti eyitholile ngempela

Funda lokho iklayenti elikutholile, hhayi ikhasi lokumaketha lomhlinzeki. Khuphula imininingwane yelogi yeklayenti le-OpenVPN futhi imizila ecindezelwa iseva izovela kuyo, iveze iziqalo ze-tunnel; kwezinye izindawo iphuli ivela emininingwaneni yokuxhumana noma ku-adaptha uqobo. Cela umhlinzeki uhlu oluphelele lwezikhathi ezizimele azisebenzisayo, ngoba i-/24 eyodwa namuhla ingaba zimbili kusasa. Ukugwema amabhulokhi ajwayelekile e-RFC 1918 akufani nokugwema ukwabiwa okuwutholile ngempela.

Iphuli nayo ingehla noma isuke phakathi kwezifunda, ngakho uhlu ludinga usuku nomnikazi. Thatha noma iyiphi impendulo yomhlinzeki endala kunokushintsha kwakho kokugcina kohlelo njengokuqagela, hhayi iqiniso. Buza futhi ngaphambi kokuzibophezela ebangeni, futhi gcina impendulo kanye namanothi enethiwekhi ukuze umuntu olandelayo azuze ubufakazi.

Ukuphinda unombolo yikho ukulungisa ongakwenza

Uma iseva ye-VPN kungeyona eyakho ukuthi uyishintshe, ukuhambisa i-LAN yasekhaya yikho kuphela ukulungisa okutholakalayo, futhi lesi yisimo esijwayelekile nomhlinzeki wezentengiselwano. Khetha ibanga elingaphandle kwephuli yomhlinzeki nangaphandle kwezikhathi ongazidinga kamuva, futhi ulihlole kuyo yonke enye isayithi oyifinyelela nge-tunnel. Linda ukuphazamiseka okufushane kanye nomsila omude wamadivayisi akhohliwe: idivayisi esaphethe ikheli elidala ibonakala isebenza kuze kube idinga isango.

  1. Okokuqala uhlu: ikheli leroutha uqobo, ububanzi be-DHCP, izibekiwe, ukudluliswa kwamachweba kanye nanoma iyiphi idivayisi ikheli layo elibhalwe ngesandla.
  2. Bese ushintsha isiqalo se-LAN seroutha kanye nobubanzi be-DHCP ndawonye ngaphakathi kwewindi lokunakekela, futhi uvuselele izivumelwano ezinocingo ngaphambi kwezingenacingo.
  3. Bese ulungisa amakheli anganyakazi: amaphrinta, isitoreji senethiwekhi, noma yini enesango elibhalwe ngokuqinile.
  4. Ekugcineni, xhuma kabusha iklayenti le-VPN futhi uqinisekise ukuthi ikheli le-tunnel alisaxabana ne-LAN.

Dlula emakhelini ngalolo hlelo hhayi wonke ngesikhathi esisodwa, futhi shiya ibanga elidala libhalwe isikhathi ukuze idivayisi endala ibonakale, hhayi ibe yimfihlakalo. Idivayisi engagcini neze izazisa ngokungafinyeleli esangweni, okuyisibonakaliso esingcono kakhulu kunocingo lokucela usizo. Uma iroutha inikeza izivumelwano ezinde kunosuku, zifinyeze ngesikhathi sewindi.

Okungenziwa yigama elihlukile nokungeke kwenzeke

Lapho iseva ingeyakho, ukuhumusha amakheli kuklayenti kungase kuveze isiqalo esikude ngaphakathi kwebanga lendawo elingenalutho, ukuze umsingathi ofanayo aphendule ekhelini lesibili. I-OpenVPN yomphakathi yenza lokhu nge client-nat, futhi lowo myalelo uqondene naleyo klayenti kuphela, awukho kumaklayenti ezentengiselwano naweselula abantu abavame ukuwaqhathanisa nawo. Ukuhlelwa kudinga umzila ohambisana nokuhumusha, ibanga elivulekile legama elihlukile kanye neseva elizimisele ukuphendula ikheli leklayenti elingahunyushiwe. Akukho kulokhu okusiza lapho iklayenti ingelomhlinzeki ophethwe ongakwazi ukumisela.

Lapho ushintsho luqala ukusebenza, finyelela kumsingathi wendawo nowezindawo ezikude kuqala ngekheli bese ngokwegama, ubhala umzila uhlelo olukhethayo ngaso sonke isikhathi. Igama lingase lisaxazululwe ebangeni elidala, ngakho amakheli namagama afanele ukuhlolwa ngokwahlukana. Qalisa kabusha iklayenti elilodwa nedivayisi eyodwa ohlangothini lwesivela uma okunye kwakho kwahlala kuvuliwe kuso sonke isikhathi soshintsho, ngoba amarekhodi omsingathi agciniwe aphila isikhathi eside kunokuhlela.

Bhala iziqalo enivumelene ngazo lapho abantu babheka khona ngempela: amanothi enethiwekhi, inkambu yokuphawula yeroutha uqobo, ikhasi lokwamukela. Othile uzophinda akhethe i-192.168.1.0/24, futhi ukungqubuzana kuzobuya naye.

Izihloko ezihlobene