I-router ye-VPN: i-LAN ne-WAN — okufanele ukukubhala ngaphambi kokuthenga
Ilebuli ye-VPN ayisho lutho nge-VLAN, ukushintsha kwe-WAN lapho kwehluleka noma izindima zamathumbu. Bhala amakhono aqondile emodeli ne-firmware ohlela ukuyisebenzisa.
Thatha ilebuli elilungele i-VPN njengengxenye eyodwa yedivayisi okufanele futhi ihambise, ihlukanise futhi ishintshe lapho kwehluleka, ngoba ilebuli ayisho ukuthi idivayisi ingabamba amanethiwekhi amangaki ahlukene. Qala ngokubhala irekhodi lamakhono emodeli ne-firmware aqondile, bese uqhathanisa lelo rekhodi nokugeleza okudingwa isizinda. Amakhasi okumaketha abala izimbobo; awavamile ukubala ubulungu be-VLAN, inqubomgomo yokushintsha lapho kwehluleka noma ububanzi bethumbu. Irekhodi lithatha cishe amaminithi angamashumi amabili futhi lixazulula izingxabano eziningi zokuthenga ngaphambi kokufika kwedivayisi.
Qinisekisa idivayisi eqondile ngaphambi kwanoma yini enye
Amagama emodeli adlula ezizukulwaneni ze-firmware, futhi ikhabethe elifanayo lingahamba nedrayiva yeswishi ehlukile kuye ngokukhishwa. Funda ubunikazi bebhodi kudivayisi ngokwayo hhayi ebhokisini, ukuze isimangalo ngasinye esilandelayo siboshwe entweni ongayiphinda. Ku-OpenWrt umyalo owodwa uhlanganisa imodeli, igama lebhodi nokukhishwa kwe-firmware, futhi izikrini ezilinganayo zikhona kuma-firmware amaningi ebhizinisi.
ssh [email protected] 'ubus call system board'
cat /etc/openwrt_releaseBhala lezo zintambo kurekhodi, ungalokothi uzifinyeze. Bese uhlukanisa umsebenzi ojwayelekile wokuhambisa nomsebenzi wethumbu. Idivayisi edlulisa amaphakethe kahle isengenqaba ukuqeda ithumbu, futhi idivayisi eqeda ithumbu ingase ingabi nayo indlela yokugcina amanethiwekhi amabili endawo ehlukene. Uma kokubili kuthathwa njengesidingo esisodwa, ukungafani kuyacatshwa kuze kube yilapho iyunithi isifakiwe erackini, ilungisiwe futhi ithenjwa ngengxenye.
Bhala ukwakheka kwe-LAN, hhayi inani lezimbobo
Izimbobo ezine ngokuvamile zisho iswishi eyodwa, futhi iswishi isho isizinda sokusakaza esisodwa ngaphandle uma ama-VLAN elungisiwe. Lokho kulungile kunethiwekhi yasekhaya eyisicaba futhi akulungile esizindeni esifuna ingxenye yezivakashi, ingxenye yokuphatha kanye nengxenye yekhamera ehlukanisiwe kudivayisi eyodwa. Bhala ukuthi yiziphi izimbobo ezikuphi i-VLAN, yimaphi ama-VLAN afinyelela ku-CPU nokuthi imiphi imikhawulo ephethe amakheli.
Lapho i-firmware inikeza ama-VLAN, uhlu lwemikhawulo lunquma ukuthi zingaki izinqubomgomo ezihlukene ongazibhala. I-VLAN echazwe kuswishi kodwa engakaze yabelwe njengomkhawulo ayinalo ikheli futhi ayinaso isifunda somlilo, ngakho ayikwazi ukuphoqelela lutho iyodwa.
| Field to record | Example entry | Review stops if |
|---|---|---|
| Ports and VLAN membership | ports 1-4 untagged on VLAN 10, port 5 trunk with VLAN 10 and 20 | the datasheet offers only a socket count |
| Routed interfaces | br-lan 192.168.88.1/24, vlan20 192.168.99.1/24 | two subnets cannot hold separate policies |
| WAN method and failover | DHCP on wan, PPPoE on wan2, policy route to wan2 on loss | only one uplink is configurable |
| Tunnel role and scope | WireGuard peer on the router, only 192.168.88.0/24 routed inside | the router can only pass another tunnel through |
Funda isimo seswishi esikhundleni sokuthemba imenyu. Ezimpokophelweni ezindala ze-OpenWrt ithuluzi leswishi liphrinta amadivayisi alungisiwe, futhi ezimpokophelweni ze-DSA amathuluzi ebhuloho abika amaqiniso afanayo embobeni ngayinye, yingakho ukukhishwa kwe-firmware kuyingxenye yerekhodi.
Bhala ukuziphatha kwe-WAN nokushintsha lapho kwehluleka
Indlela yokufinyelela, ubunikazi bekheli nokulandelana kokushintsha lapho kwehluleka kungokomugqa owodwa kuxhumo ngalunye olungaphezulu, ngoba ithumbu elisinda ekushintsheni kwe-WAN lincike kukho kukathathu. Isikhathi se-PPPoE sixhuma kabusha ngekheli elisha futhi siwisa ithumbu kanye nalo, kanti uxhumo olungaphezulu lwe-DHCP olugcina irenti yalo lungase lungakwenzi lokho.
Ukushintsha lapho kwehluleka kudinga futhi isinqumo senqubomgomo. Ukuthumela yonke intrafikhi kuxhumo oluyisipele kulula; ukugcina ithumbu kuxhumo lokuqala ngenkathi intrafikhi evamile yewebhu isebenzisa eliyisipele kudinga ukuhambisa okusekelwe kunqubomgomo, futhi akuzona zonke izi-firmware ezinikeza lokho. Bhala ukuthi ithumbu liboshwe kuxhumo olulodwa olungaphezulu yini nokuthi idivayisi yenzani emaseshini asunguliwe lapho lolo xhumo lunyamalala. Gcina ithebula lokuhambisa njengobufakazi, hhayi ibhokisi lokumaka lokushintsha lapho kwehluleka.
Hlola ukugeleza okuvunyelwe okukodwa nokugeleza okuvinjiwe okukodwa
Irekhodi lidinga ukugcinwa kuphela uma idivayisi ingamukelwa ngokwalo. Khetha ukugeleza okufanele kusebenze, okunye okungafanele, bese ugijima kokubili kusuka kuklayenti engxenyeni efanele. Ithumbu elithwala yonke isubnet liyahluleka lapho isidingo kwakuyisubnet eyodwa.
Bese uqinisekisa ukwenqatshwa, ngoba okuzenzakalelayo okuvumelayo yikho okuvamile ukumangaza. Ingxenye yezivakashi akufanele ifinyelele ikheli lokuphatha, futhi ukuhlola kufanele kubonise ukuphela kwesikhathi noma ukwenqatshwa hhayi ikhasi lokungena.
curl -sS --max-time 8 https://api.ipify.org
ping -c 2 192.168.99.1
ip -4 route get 192.168.99.1Uma ukugeleza okuvunyelwe kusebenza nokuvinjiwe kusebenza futhi, ukuhlukanisa akukho noma amamenyu asikisela okuhlukile. Uma kokubili kuhluleka, ububanzi bethumbu noma indlela yokubuya ayilungile, futhi irekhodi le-WAN ngokuvamile lichaza ukuthi yikuphi. Gcina imiphumela emibili kanye nerekhodi lamakhono ukuze umhloli olandelayo abone ukuthi kwamukelwa ini, kuyiphi i-firmware nangaluphi usuku.