I-Wake-on-LAN nge-VPN ayisebenzi? Ukusakaza akukaze kweqe

Ulalisa umshini wasehhovisi, uxhuma i-VPN usekhaya, futhi uhlala ucishiwe. Ithuneli livuliwe, izabelo zamafayela ziyaphendula, futhi ikhasi le-wake-on-LAN lesiphathimandla sezinga liyabika ukuthi lithumele isicelo. Zonke izimpawu ezibonakalayo zithi inethiwekhi ilungile, futhi yikho kanye okwenza leli cala lidide: uhlaka oluzovusa umshini alukaze lufinyelele kusegimenti okulo.

Izimpawu zikhomba kunethiwekhi encane, hhayi ethunelini

I-ping kumgcini olele iyahluleka, futhi leyo ngxenye ijwayelekile. Umshini okulesimo sokulinda awunayo i-IP stack esebenzayo, ngakho awukwazi ukuphendula i-ARP noma i-ICMP, futhi akukho ukuhlelwa kwethuneli okushintsha lokho. Ukuhlola okuwusizo ukuthi umshini wesibili kuyo leyo LAN uyavuka yini, nokuthi ikhasi lokuvusa lesiphathimandla ngokwalo liyasebenza yini kumgcini oxhunywe kulo.

Lapho ukuhlola kusegimenti efanayo kudlula, iphutha lisebangeni. Isithumeli osisebenzisayo sihlala ku-interface ye-VPN, futhi iphakethe eliyakhayo ingukusakaza kwesixhumanisi sendawo, ngakho liphuma ku-interface engalungile noma aliphumi nhlobo. Ithuneli aliphukile; lithwala uhlobo olungalungile lwethrafikhi. Thola ukuthi isithumeli sikhetha iyiphi i-interface ngaphambi kokushintsha ngisho isilungiselelo esisodwa sesiphathimandla.

I-magic packet iwuhlaka, hhayi isevisi

Umthwalo uqala ngekhanda elingaguquki lamabhayithi ayisithupha 0xFF, bese ikheli lehadiwe lekhadini elijwayelekile liphindwa izikhathi eziyishumi nesithupha, bese kufika iphasiwedi ye-SecureOn engakhethiwe yamabhayithi amane. Izithumeli zivame ukuyisonga ku-UDP ziyise ku-port 7 noma ku-port 9, kodwa inombolo ye-port isivumelwano phakathi kwesithumeli nekhadini, hhayi isilaleli ongaxhuma kuso. Akukho okulalelayo, futhi akukho okuphendulayo.

Okwenza umshini uvuke i-interface yenethiwekhi, egcina ingxenye encane yamasekhethi inamandla kusuka kulayini wokulinda ngenkathi lonke uhlelo lucishiwe. Yingakho isilungiselelo kufanele simelane nokuphela kwamandla ngokuphelele kanye nokulala: ibhodi elinqamula amandla okulinda lapho licishwa alisenayo ikhadi elizothola noma yini.

Kungani ithuneli elisethiwe lingakudluliseli

I-interface ye-VPN esethiwe iyisixhumanisi se-IP samaphuzu amabili phakathi kwamakheli amabili ethuneli. Ikhona ukuze ithwale amaphakethe akhelelwe umlingani, yingakho i-ping, i-SSH nezabelo zamafayela zisebenza ngokujwayelekile ngayo. Uhlaka lokusakaza alunikezwanga ikheli kulo mlingani, futhi ikheli lokusakaza elilinganiselwe alidluliswa ngusiphathimandla ngokuzethemba.

Ukudlulisela ukusakaza okuqondiswe kunethiwekhi encane kuyikhono lesiphathimandla elenziwe ngamabomu elithewa izilungiselelo eziningi zokuzenzakalela, futhi ngisho nalapho lihlala likuyisa kuleyo nethiwekhi encane, hhayi ekhadini elithile elilele. Umgcini olele nawo awukwazi ukuphendula i-ARP, ngakho isiphathimandla esizama ukuxazulula ikheli elijwayelekile ngaphambi kokudlulisa siyalahla uhlaka ngenkathi silinde impendulo engasoze ifike. Irekhodi lokuxhuma eliqinile lilungisa leyo ngxenye futhi lishiya inkinga yebanga lokusakaza ingathintwanga. Ngakho imikhawulo emibili ehlukene, futhi ukususa eyodwa akwenzi lutho kwenye.

Izindawo ezintathu ezifinyelela ekhadini ngempela

Yonke indlela esebenzayo ibeka uhlaka kusegimenti yento ehlosiwe, futhi ziyehluka ngokuthi ziphazamisa kangakanani inethiwekhi:

1. Beka idivayisi ehlala ivuliwe kusegimenti ehlosiwe. Isiphathimandla, i-NAS noma ibhokisi elincane le-Linux elihlala linamandla lingakhipha uhlaka endaweni ngokushesha lapho usufinyelela kulo ngethuneli, futhi akukho okushintshayo ku-VPN.
2. Vumela isiphathimandla sikhiphe uhlaka ngokwaso. Amafirmware amaningi anikeza ikhasi lokuvusa elithumela kusuka ebhulohweni le-LAN, futhi lokho kusebenza inqobo nje uma into ehlosiwe isebhulohweni, hhayi ngemuva kwesiphathimandla sesibili.
3. Xhuma izindawo ngebhuloho nethuneli lohlobo lwe-TAP lapho ukusakaza kufanele kweqe ngempela. Lokhu kuhlanganisa izizinda ezimbili zokusakaza, kuletha iziphepho zokusakaza, uhlelo olulodwa lwamakheli kanye nayo yonke iphrothokholi yokuthola ebona zombili izindawo ngesikhathi esisodwa.

Inketho yokuqala iyona okufanele ikhethwe kumshini owodwa. Eyesithathu isinqumo sokuklama inethiwekhi esinezindleko eziqhubekayo, ngakho yithathe kanjalo, hhayi njengesixazululo esisheshayo sedeskithophu eyodwa.

Bhala ukuthi yimuphi umsizi okhipha uhlaka nokuthi usebhulohweni noma ku-VLAN iphi. Umsizi okhipha ku-interface engalungile unikeza ukurekhoda okuphelele kanye nomshini ongavuki, futhi leyo nhlanganisela idla intambama.

Qinisekisa ukuthumela ngaphambi kokusola iklayenti

Hlola ikhadi elihlosiwe kuqala, ngoba akekho isithumeli esingavusa ikhadi elingakalungi. Umyalo ongezansi ufunda izimo zokuvusa ezisekelwayo nezedlule, lapho inani lamanje g lisho ukuthi i-magic packet ivuliwe:

ethtool enp3s0 | grep -A1 'Wake-on'
ip neigh show 192.168.1.50
tcpdump -ni br0 -e 'ether broadcast and udp dst port 9'
etherwake -i br0 3c:7c:3f:00:11:22

Gijimisa ukurekhoda kumsizi ngenkathi ukuthumela kwenzeka, futhi ukufunde esikhundleni sokucabanga ukuthi kuphumelele. Uhlaka olushiya ibhuloho elifanele nge-MAC yento ehlosiwe yokusakaza uwubufakazi kuphela bokuthi ukuthumela kusebenzile; uma ukurekhoda kungenalutho, isithumeli sikhethe enye i-interface futhi ukuhlola okusele akunangqondo. Isithumeli esakha uhlaka oluhlaza esikhundleni se-datagram ye-UDP asihambisani naleso sihlungi, ngakho hlola ukuthi ithuluzi lakho lisebenzisa luphi uhlobo ngaphambi kokuphetha ngokuthi akukho okuthunyelwe.

Ku-Windows ukuhlola ikhadi okulingana nakho yi-powercfg /devicequery wake_armed, okubala amadivayisi avunyelwe ukuvusa uhlelo. I-adaptha yenethiwekhi engekho kulolo hlu lizoshaya indiva yonke iphakethe eliyethunyelwa, noma uhlaka lubukeka lulungile kangakanani entanjeni.

Bese uqinisekisa ukuvuka uqobo nokulandela. Umshini ovulekayo kodwa ohlala ungafinyeleleki ngegama udinga ikheli eliqinile nerekhodi le-DNS, ngoba ukuxazululwa kwamagama ngokusakaza akukadluli ethunelini. Ukuvusa okungenantambo kuyikhono elihlukile futhi elingathembekile kakhulu kunenguqulo enentambo, ngakho kuyihlole kusegimenti efanayo ngaphambi kokufaka i-VPN. Bhala igama le-interface kanye nomgcini womsizi kuthikithi, ngoba ukwehluleka okulandelayo ngokuvamile kumayelana nalawo maqiniso amabili.