I-Wake-on-LAN nge-VPN iyeka ukusebenza? Lungisa ingeno ye-ARP
Amaphakethe omlingo awela umhubhe, kodwa i-router iwalahla lapho ingeno ye-ARP iphelelwa yisikhathi. Qhathanisa izindlela ezintathu zokuletha, bese uqinisa ikheli le-MAC unomphela.
Thumela iphakethe lokuvusa ngokushesha ngemva kokucisha futhi ikhompyutha iyabuya; umyalo ofanayo ngakusasa ekuseni awenzi lutho. Akukho okushintshile ekulungiselelweni kwe-VPN, futhi ukudluliswa kwembobo kusabhekisa ekhelini elifanele. Umehluko uyisikhathi: ithebula labomakhelwane le-router likhohliwe umshini olele, ngakho alinayo ikheli le-MAC elingafakwa kufreyimu. Ukuphela kwesikhathi, hhayi umhubhe, kuchaza iningi lokwehluleka kwe-Wake-on-LAN nge-VPN.
Ukucisha kokuqala kuyasebenza futhi okulandelayo akusebenzi
I-router idlulisela ifreyimu ekhelini langasese ngokufuna umgomo kuthebula labomakhelwane. Ngesikhathi umshini usebenza uphendula ku-ARP, ngakho ukuhlangana kuhlala kusha. Uma ucishwa, akukho okuphendulayo, ingeno iguga ngemva kwemizuzu embalwa, futhi amafreyimu alandelayo aya kulelo kheli ayalahlwa nakuba i-IP nokudluliswa kwembobo kusasebenza.
Iphethini ikutshela ukuthi iyiphi inkinga oyonayo. Ukuvusa okungasebenzi nanini kukhombisa ukulethwa: imbobo engalungile, umgomo ongalungile noma i-firewall elahla iphakethe ngaphambi kokuba lifinyelele ku-LAN. Ukuvusa okusebenza kanye bese kwehluleka amahora amaningi kukhombisa ingeno yomakhelwane. Ukuvusa okusebenza kuze kushintshe isivumelwano se-DHCP kukhombisa ukwabiwa kwekheli, okulungiswa ukubekelwa eceleni.
Qinisekisa ukuthi ikheli lizinze ngaphambi kokuthinta i-ARP. Uma umshini olele uthola ikheli elisha ngemva kokuphela kwesivumelwano, ingeno yomakhelwane eboshwe ekhelini elidala iyoba ngunomphela futhi ingabi nasidingo ngasikhathi sinye. Qala ngokubeka ukugcinwa kwe-DHCP ukuze ikheli likwazi ukusinda ekusetshenzisweni kabusha.
Iphakethe lomlingo lidinga ini kunethiwekhi
Umthwalo ulula: amabhayithi angu-102 akhiwe ngamabhayithi ayisithupha angu-0xFF alandelwa yikheli le-MAC lomgomo izikhathi eziyishumi nesithupha, ngokuvamile kuthunyelwa embotsheni ye-UDP 9. Ku-LAN eyisicaba liphuma njengokusakazwa, yonke imbobo iyalithola, futhi ikhadi lenethiwekhi elicishiwe liyabona ikheli lalo.
Nge-VPN iphakethe lifinyelela ku-router njengokuthumela okukodwa ekhelini langasese noma njengokusakaza okuqondiswe kunethiwekhi encane. Esimweni sokuthumela okukodwa i-router kufanele ixazulule umgomo ngekheli le-MAC ngaphambi kokuba ibeke ifreyimu ku-LAN, futhi lokho kuxazulula yikho okwehlulwayo ngesikhathi umsingathi ulele.
Amanye amathuluzi athumela embotsheni ye-7 esikhundleni sika-9, futhi amanye amadivayisi avimba ukusakaza okuqondisiwe ngokuzenzakalela. Lokhu kuwukwehluleka kokulethwa, hhayi kwe-ARP, ngakho hlola umgomo nembobo ngaphambi kokushintsha ithebula labomakhelwane.
Izindlela ezintathu eziya kumsingathi olele
Une izindlela ezintathu ezingokoqobo zokuletha ifreyimu ku-LAN, futhi ukukhetha okufanele kuncike kulokho okulawulayo.
| Method | What it needs | Where it breaks |
|---|---|---|
| Subnet-directed broadcast | A wake tool that accepts a broadcast address and a router that forwards it | Broadcast filtering, or a tool that only takes a MAC |
| Helper on the LAN | An always-on host such as the VPN server | No suitable host, or the host cannot reach the target VLAN |
| Permanent neighbour entry | Router shell access and the target MAC | NIC replacement or address change |
Khetha umsingathi osizayo uma ekhona, ngoba usakaza kusixhumanisi futhi awudingi mbandezelo ku-router. Khetha ukusakaza okuqondisiwe uma i-router isivele ikuvumela futhi ithuluzi lokuvusa lamukela ikheli. Khetha ingeno eqinile uma kungekho kokubili futhi ungakwazi ukusebenzisa umyalo ku-router.
Lokhu akukuvimbeli okunye. Ingeno engunomphela yenza nendlela yokuthumela okukodwa idlule ubuthongo, okusiza lapho iklayenti le-VPN lingathumela kuphela ekhelini elithile.
Yenza ingeno yomakhelwane ibe ngunomphela
Ku-router ene-shell ye-Linux, umyalo owodwa uqinisa ukuhlangana. Amavelu lapha ngawe-LAN eyisibonelo futhi kufanele ashintshwe ngawakho:
ip neigh replace 192.168.50.23 lladdr 3c:7c:3f:12:9a:4e dev br0 nud permanent
ip neigh show dev br0 | grep 192.168.50.23Isimo nud permanent sigcina ingeno kuzo zonke izikhathi ze-ARP futhi siyisebenzisela ukudlulisa ngesikhathi umshini ucishiwe. Umyalo wesibili ufakazela ukuthi ingeno ikhona futhi ubonisa isixhumanisi esiyiyo, okubalulekile kuma-router anebhuloho lezivakashi noma i-VLAN ehlukile.
Yenza ikwazi ukumelana nokuqalisa kabusha ngayo noma iyiphi ihuku enikezwa yi-firmware: umbhalo ku-/jffs/scripts ku-Asuswrt-Merlin, iyunithi ye-systemd oneshot kuseva ye-Linux njengesango, Neighbor= stanza ku-systemd-networkd, noma ingeno ku-/etc/ethers efundwa amathuluzi wendawo. Umyalo obhalwe ku-shell uyanyamalala ekuqalisweni okulandelayo, futhi lesi yisizathu esivame kakhulu sokuthi ukulungisa okusebenzayo kubonakale kuyeka ukusebenza.
Hlola ngaphandle futhi wazi ukuthi uzoyisusa nini
Lalisa umshini bese ulinda okungenani imizuzu eyishumi, kwanele ukuba noma yikuphi ukungena okuguquguqukayo kuphelelwe yisikhathi. Bese uthumela isicelo sokuvusa kusuka kuklayenti le-VPN futhi ubheke izinhlangothi zombili ze-router:
tcpdump -ni tun0 udp port 9
tcpdump -ni br0 ether proto 0x0806 or udp port 9Ukubanjwa kokuqala kufakazela ukuthi iphakethe lavela emhubheni; kwesibili kufakazela ukuthi i-router yabeka ifreyimu ku-LAN. Iphakethe lomlingo elivumelekile livela njengamabhayithi angu-102 ane-MAC ephindwayo, ngakho hlola ubude nomgomo. Uma ifreyimu ishiya ibhuloho le-LAN futhi umshini uhlala ucishiwe, inkinga esele isedivayisini: ukuqalisa okusheshayo, ubuthongo obujulile noma isethingi ye-BIOS enqamula ugesi kukhadi lenethiwekhi.
Susa ingeno uma ikhadi lenethiwekhi lishintsha, futhi uyibuyekeze uma uhambisa umshini ekhelini elinye. Ukuhlangana okungunomphela kuwukwehluka ngamabomu, futhi ukwehluka okungekho muntu okukhumbulayo yiyo indlela i-laptop yesikhathi esizayo eqala ngayo ukuthola amafreyimu ayenzelwe i-desktop eseyethulile.