Umsebenzisi we-VPN udinga iphrinta eyodwa, hhayi yonke i-LAN
I-VPN yephrinta kuphela idinga umthetho owodwa wokuvumela omncane kanye nomzila, hhayi ukuba yilungu le-LAN. Hlola ukuhleleka komthetho okusebenzayo ngaphambi kokuthemba owomncane.
Umthetho ubonakala ulungile kanti iphrinta isala. Noma iphrinta iyasebenza futhi lowo msebenzisi ufinyelela nesiphakeli samafayela, okuyinto embi kakhulu. Yomibili imiphumela ivamise ukuvela endaweni eyodwa: umthetho omncane wengezwe eqoqweni lemithetho eyayivele ivumela into ebanzi. Ukufunda ukuhleleka okusebenzayo kuchaza umphumela ngaphambi kokuba kubhalwe noma yimuphi umthetho omusha.
Uphawu: umthetho omncane awuzange ushintshe lutho
Ichibi le-VPN elikhethekile, ikheli elilodwa lephrinta nomthetho wokuvumela ku-TCP 631 kuwumklamo onengqondo. Uma ungavezi lushintsho, ukusola kokuqala kufanele kube ukuthi ithrafikhi ayizange ifinyelele lowo mthetho. Umthetho unquma kuphela ngethrafikhi efinyelela endaweni yawo ekuhlelweni kokuhlola. Izinkambu zilula ukuzihlola futhi azivamisile ukuba yimbangela yokwehluleka.
Uphawu oluphambene kulula ukulushiya. Umsebenzi wokuphrinta uyaphumelela, futhi kunjalo nokuxhumana nokwabelwana ngamafayela umsebenzisi ayengafanele ukufinyelela kukho. Lokho kusho ukuthi okuthile kwangaphambilini kwasekuvumele i-LAN.
Womabili amaphuzu akhomba ekuhlelweni hhayi ezinkambini zomthetho omusha. Omunye umthetho owawungafanisi neze, futhi omunye umthetho owafanisa ngokushesha kakhulu.
Iqoqo liphi lemithetho ithrafikhi eliwushayayo ngempela
I-pfSense ihlola imithetho ngesixhumi ngasinye, futhi i-OpenVPN inethebhu yayo lapho imithetho yayo isebenza kuyo yonke insiza yesiphakeli neyeklayenti. Leyo mithetho icutshungulwa ngaphambi kwemithetho eyabelwe isixhumi esithile se-OpenVPN. Ngakho-ke imvume ebanzi esele kuthebhu ye-OpenVPN iyasebenza nakulo msebenzisi, noma ithebhu yesixhumi ithini. Kopisha lokho kuhleleka kurekhodi loshintsho ukuze ukubuyekezwa kukwazi ukukuhlola ngaphandle kokuvula i-GUI.
Yingakho imvume emncane entsha ingeke ikwazi ukususa ukufinyelela. Imithetho yokuvikela iyengeza imvume futhi ayiyisusi ekufanisweni kwangaphambilini.
Funda uhlu olusebenzayo kusukela phezulu futhi ume emthethweni wokuqala ofana nethrafikhi. Lokho kufanisa kokuqala kuyisinqumo, futhi konke okungaphansi kwaso akufinyeleleki kulowo mfula.
Bhala umthetho wokuvumela kusukela emsebenzini wokuphrinta
Qala emsebenzini hhayi kwiphrinta. Umsebenzisi udinga insizakalo yokuphrinta ekhelini lephrinta, ngakho umthetho usho lelo kheli, leyo protocol kanye naleyo port. Igama elihlukile lechibi le-VPN negama elihlukile lephrinta kugcina umthetho ufundeka.
Mela ukwengezwa kwamaport wokuthola noma okuphatha ukuze umhleli wezinyathelo ajabule. Umthetho ovumela yonke iphrinta uyinqubomgomo ehlukile kuleyo evumela umugqa wokuphrinta.
Gcina ukuqinisekisa kwephrinta ngokwayo endaweni yako. Imvume yenethiwekhi ayiyithathi indawo. I-akhawunti yezinga lomugqa iwukulawula okufanele kokuthi ubani angaphrinta ini.
Amanani ayisithupha athwala yonke inhloso: imvume njengesenzo, i-IPv4 njengomndeni, i-TCP njengeprotocol, igama lechibi njengomthombo, igama lephrinta njengendawo okuyiwa kuyo kanye no-631 njengeport. Noma yini engaphezu kwalawo ayisithupha iyinqubomgomo ehlukile kuleyo eceliwe.
Nikeza iklayenti indlela ngaphandle kwemvume ye-LAN
Iklayenti lidinga umzila oya ekhelini lephrinta, futhi uhlangothi lwehhovisi ludinga indlela yokuphendula eya echibini le-VPN. Ukuthumela i-/32 eyodwa kugcina ukulungiselelwa kweklayenti kuncane, okusiza ekuxazululeni izinkinga. Akusona umngcele wokugunyaza, ngoba iklayenti lingeza imizila ngokwalo.
Uma umugqa ukhonjwa ngegama, chaza ukuncika kwesixazululi ngokwehlukana. Ukuvumela yonke i-LAN ukuze kuxazululwe igama elilodwa ukushintsha okukhulu kakhulu kunalokho okudingwa umsebenzi.
Khetha ngamabomu phakathi kokuhambisa umzila ubuyela echibini nokuhumusha umthombo. Kokubili kuyasebenza, futhi ngakunye kufihla okuthile okuhlukile kumarekhodi.
Hlola ukwenqatshwa kanye nomsebenzi
Thumela umsebenzi omncane ongenazwelo losuka kumsebenzisi we-VPN, bese uzama insiza ye-LAN okufanele yenqatshwe kanye nekhasi lokuphatha lowo mthetho wokuvikela ngokwawo. Izivivinyo zontathu zingezesikhathi esisodwa, ngoba yiyo kuphela indlela yokubona inqubomgomo iyonke. Umsebenzi wokuphrinta ophumelele wodwa awufakazi cishe lutho mayelana nomngcele.
Buyekeza i-IPv6 nanoma yimuphi omunye umzila we-VPN osebenzayo ngaphambi kokubiza ukusetshenziswa ngokuthi iphrinta kuphela. Iqoqo lemithetho elincane kumndeni owodwa wamakheli lingavuleka ngokuphelele komunye.