I-VPN ithi ixhunyiwe kodwa akukho okuhanjiswayo: izindawo ezimbili okufanele zibhekwe

I-tunnel ingabika ukuthi ixhunyiwe kuyilapho kungenalutho oluyifinyelelayo, futhi la maqiniso amabili ahlala ezindaweni ezahlukene. Elinye yithebula lemizila, elingasaqhubeka nokuthumela amaphakethe edivayisini okungekho muntu owumnikazi walo. Elinye isixazululi, esingasaqhubeka nokufaka uhlu lweseva kuxhumano olususile. Ushintsho lwenethiwekhi aluzange lonakalise iphrofayela, lushiya isimo esasingesoxhumano lwangaphambilini sinjalo, futhi ukulungiswa kuncike ekutheni yikuphi kwalaba ababili obhekile ngempela.

Kuqala, buza i-kernel ukuthi iyosebenzisa yiphi idivayisi

Uhlu lwemizila lukhombisa okukhona; ukusesha umzila kukhombisa okungase kwenzeke. Buza ikheli lomphakathi bese ufunda igama ledivayisi empendulweni, ngoba leyondawo eyodwa inquma ukuthi iphakethe lizofika endaweni ewusizo yini. Lapho impendulo ibiza idivayisi ye-tunnel, i-kernel izonikela ngamaphakethe kuyo ngisho noma kungekho nqubo yeklayenti esaqhubeka ngemuva kwaleyo interface. Lapho impendulo ibiza i-adaptha yomzimba kuyilapho iklayenti lithi lixhunyiwe, i-tunnel isesikhundleni futhi ayiyona nje indlela ekhethiwe.

Icala lesibili yileso esivamile ngemuva kokuba ikhebuli ithathe indawo yewaya, futhi liziveza njenge-VPN ephukile.

ip route show default
ip route get 203.0.113.9

Funda ama-entry omsuka alandelayo, ngoba umzila owengezwe uxhumano lwesisekelo lwangaphambilini ungase udlule ushintsho lokuxhumana futhi ume phambi komusha. Umzila omsuka odlula kudivayisi evaliwe ubi kakhulu kunokungabi nawo nhlobo umzila omsuka, ngoba i-kernel isawuthanda. Qaphela imethrikhi eduze kwe-entry ngayinye, ngoba lokho kuhleleka kuchaza ukuthandwa ngokushesha kunezimo ze-interface.

Bese ufunda isixazululi ngokuxhumana ngakunye, hhayi ngefayela ngalinye

Ukuxazululwa kwamagama kuthwala isimo sakho kanye nokuguga kwakho. Isixazululi esifaka uhlu lwamaseva e-DNS ngokuxhumana ngakunye sigcina amaseva oxhumano lwe-tunnel oluvuliwe kodwa olusabhalisiwe, futhi ukusesha ngakunye bese kulinda iseva engayophenduli. Isibonakaliso inethiwekhi enomuzwa wokuthi ifile kuyilapho ithebula lemizila libukeka liphelele.

Hlola isimo ngokuxhumana ngakunye esikhundleni sefayela, ngoba ezisabalalini eziningi lelo fayela liyisixhumanisi esingumfanekiso esingena kusixazululi futhi ukulihlela kungenza lutho noma kusheshe kushintshwe. Bheka ukuthi yikuphi ukuxhumana okungumnikazi wamaphi amaseva nokuyisiphi isizinda sokusesha, bese ubuza ukuthi uxhumano lwe-tunnel kufanele lusabhaliswe yini. Uma kungafanele, khubaza uxhumano olunalo esikhundleni sokuhlela isimo esikhiqiziwe ngesandla. Igama elixazulukayo kuyilapho ukusesha umzila kuthumela amaphakethe kwenye indawo iyiphutha lesithathu futhi elihlukile.

resolvectl status
resolvectl query app.internal.example

Uma amakheli exazuluka futhi ukuxhumana kuhluleka, isixazululi sikhona futhi umzila awukho. Uma amakheli angaxazuluki nhlobo, yilapha indawo efanele yokuqala.

Umzila ogugile uwusinda kanjani ushintsho

Iklayenti alinayo inethiwekhi yodwa. Kusibungazwa se-NetworkManager iphrofayela ye-VPN yenziwa isebenze phezu koxhumano lwesisekelo, futhi izilungiselelo zoxhumano zivumela leso sisekelo ukuthi sibize i-VPN okufanele siyilande. Uma isisekelo sishintsha ngoba enye iphrofayela ithandwa, i-tunnel ilandela isisekelo esisha noma isala ingenaso.

Iphrofayela ye-VPN ayiziphakamisi yodwa, ngakho ukubhanqa kubaluleke kakhulu kunokuthandwa kokuxhuma okuzenzakalelayo kwephrofayela uqobo.

Funda uhlu olusebenzayo bese uphawula ukuthi yisiphi isisekelo esikhona ngaphambi kokuthinta i-tunnel. Uma isisekelo sikuluhlu futhi i-tunnel ingekho, umzila awukho hhayi ukuthi ugugile futhi ukulungiswa ukuvula. Uma ukuvula i-tunnel kukhononda ngokuthi akukho xhumano lomthombo, isisekelo eyayibhanqwe nayo isihambile, ngakho yiphakamise kuqala noma lungisa ukubhanqa esikhundleni sokuphinda uzame i-tunnel. Ukuphinda uzame iphrofayela engabikho umzali wayo kunikeza iphutha elifanayo isikhathi ngasinye, okuyisibonakaliso esiwusizo hhayi inkathazo.

nmcli device status
nmcli connection show --active
nmcli connection up office-vpn

Wehlukanise isimo esigugile nomzali ongekho

Izimo ezintathu zichaza cishe yonke imibiko, futhi ngayinye idinga ukulungiswa okuhlukile. Umzila omsuka odlula kudivayisi esekhona kodwa engasayithwali i-tunnel yisimo esigugile, esikhishwa ngokususa i-entry noma ngokuqalisa kabusha iphrofayela enomthwalo wemfanelo. Idivayisi ye-tunnel enqobo yeklayenti yayo inyamalele iwukwehluleka kokuhlanza, ngakho indlela yokunqamuka ifanele ukunakwa hhayi ithebula lemizila. Ukungabi khona nhlobo kwedivayisi ye-tunnel kusho ukuthi umzali noma ukubhanqa akukho futhi ithebula lemizila alizange libe khona.

Ukuqalisa kabusha kufihla ukuthi yikuphi kwezintathu obunakho, futhi yikona kanye okwenza kubonakale njengokulungiswa.

Ngemuva kokulungiswa, buza i-kernel ikheli elilodwa lomphakathi nelilodwa langaphakathi, bese ubuza igama langaphakathi. Uma ikheli lisebenza futhi igama lingasebenzi, uthole inkinga yobukhulu besizinda kusixazululi hhayi inkinga yokuhambisa. Bhala phansi ukuthi yisiphi isimo ositholile, ngoba ushintsho lwenethiwekhi olulandelayo luzophinda lwenze lokho okushiye.