Kungani ukubhukha kwe-DHCP kungesilo i-IP eqinile kuseva yakho ye-VPN

Ngathutha ibhokisi le-VPN lasekhaya lisuka ku-Wi-Fi laya ku-Ethernet futhi ikheli laso “eliphelele” lashintsha ngalobo kusihlwa. Akukho okwalimele ku-router. Ukubhukha kwakuhambisana ne-adaptha engenantambo, futhi leyo adaptha yayingasekho emzileni.

Umbono oyiphutha ofanayo unengxenye yesibili. Ukulungisa ikheli le-LAN akwenzi lutho ekhelini abangani bakho abaxhuma kulo, futhi akuhlangene neqoqo eliyimfihlo i-VPN eyinikeza amakhasimende. Amakheli amathathu, izindlela ezintathu ezihlukene zokuhluleka, futhi kungenye kuphela kuzo umsebenzi wokubhukha.

Ukubhukha kuhambisana nekhasimende, hhayi idivayisi

Ku-DHCPv4 ukubhukha kuboshwe ekhelini lehadiwe lekhasimende; ku-DHCPv6 kuboshwe ku-DUID okulindeleke ukuthi ikhasimende iliyigcine. Inkambu ye-hostname iwilebula yabantu. Lokho i-router eqhathanisa ngempela isihlonzi esifika esicelweni.

Funda okulotshiwe njengesimo: lapho lesi sihlonzi sicela, sinikeza leli kheli. Izandiso zigcina isivumelwano esifanayo uma ukuvumelana kuqhubeka, futhi ukuqalisa kabusha kucela futhi nje. Uma isihlonzi sishintsha, isicelo seqa ukubhukha futhi ikhasimende lithatha noma yini enikezwa iqoqo eliguqukayo. Alukho iphutha, asikho isexwayiso, kukhona ikheli elihlukile.

I-OpenWrt ikhombisa ukuma ngokucacile. Ibhlokhi eyodwa ye-config host ku-/etc/config/dhcp ihlanganisa igama, i-MAC nekheli, futhi imibhalo yezivumelwano eziqinile ichaza ukuthi lowo mbhalo usebenza kanjani neqoqo. Amanye ama-router afihla lezo nkambu ezintathu ngemuva kwamalebula ahlukene.

Lapho ukuvumelana kuwa khona buthule

Ukushintsha ihadiwe yisimo esivamile. Shintsha i-NIC, noma hambisa umshini phakathi kwe-Ethernet ne-Wi-Fi, futhi nekheli i-router elibonayo liyashintsha nalo. Ukubhukha kwakudala kuhlala ohlwini, kusabukeka kulungile.

Ukufaka kabusha yisimo sesibili, futhi kuluma kakhulu ku-IPv6. Ukufaka okusha kungakhiqiza i-DUID entsha ngenkathi isivumelwano esidala se-IPv4 sisasebenza, ngakho ikheli le-v4 liphila isikhashana futhi umbhalo we-v6 uyeka ukusebenza ngaphandle kokuhlela okubonakalayo.

Okwesithathu isihlonzi sekhasimende esiboshwe. Amakhasimende amaningi e-DHCP akuvumela ukuthi ubeke umucu wesihlonzi esikhundleni sokusebenzisa i-MAC. Uma ukuthuthukiswa noma ukubhalwa kabusha kokucushwa kushiya leso silungiselelo, ukuvumelana kuyanyamalala nakuba umshini ungahambanga.

Okwesine ukuphindaphinda: ibhlokhi endala nebhlokhi entsha yomsingathi ofanayo. Iseva iphendula ngomthetho ovumelanayo, ngokuvamile ngekheli leqoqo obufuna ukuligwema. Susa umbhalo wakudala esikhundleni sokwengeza owesibili.

Ukucushwa ohlangothini lomsingathi nokuthi kubiza malini

Ukubeka ikheli kumsingathi kususa ngokuphelele umbuzo wokuvumelana. Isixhumi sikhula ngaleo kheli noma i-DHCP iphendula noma cha, futhi yilokho okufunayo kumshini okumelwe ufinyeleleke ngemuva kokuqalisa kabusha i-router.

Intengo ubunikazi. Manje unikeza isiqalo, isango nezixazululi, futhi kufanele ugcine ikheli ngaphandle kweqoqo eliguqukayo ngokwakho. Ku-Ubuntu ne-netplan, i-/etc/netplan/01-vpn.yaml iyalithwala:

network:
  version: 2
  ethernets:
    eth0:
      dhcp4: false
      addresses: [192.168.50.10/24]
      routes:
        - to: default
          via: 192.168.50.1
      nameservers:
        addresses: [192.168.50.1]

Abasebenzisi be-NetworkManager bafinyelela esimweni esifanayo nge-nmcli con mod "Wired connection 1" ipv4.method manual ipv4.addresses 192.168.50.10/24 ipv4.gateway 192.168.50.1, bese nge-nmcli con up "Wired connection 1". Sebenzisa i-netplan nge-netplan try emzamweni wokuqala esikhundleni se-netplan apply; isango elithayiphiwe kabi likhipha ibhokisi kunethiwekhi futhi likushiye ufuna ikhonsoli.

Noma kunjalo gcina ukubhukha okuvumelanayo. Akusikho okweqile. Umbhalo urekhoda ikheli ohlangothini lwe-router futhi uvimbela iseva ye-DHCP ukuthi inikeze lelo kheli kudivayisi yesivakashi uma othile ekhulisa iqoqo kamuva.

Ikheli le-LAN elizinzile akusiyo indawo yokugcina yomphakathi

Qondisa ukudluliswa kwembobo ku-192.168.50.10 futhi umthetho uyosinda kukho konke ukushintsha ohlangothini lwe-LAN. Awukunikezi ikheli le-inthanethi elizinzile. I-IP yakho yomphakathi ingeyo-ISP futhi ingahamba lapho kuxhunyaniswa kabusha noma kushintshwa imodemu, yilokho i-DNS eguqukayo eyenzelwe kona.

Ngemuva kwe-NAT yezinga lomhlinzeki akukho IPv4 yomphakathi yokudlulisa nhlobo, futhi akukho kubhukha okudala enye. Hlola ikhasi le-WAN le-router ngaphambi kwanoma yini enye: uma ikheli likububanzi okwabiwe, ukudluliswa okungenayo ngeke kusebenze, kungakhathaliseki ukuthi ukubhukha kuhlanzekile kangakanani.

Ikheli lesithathu iqoqo lomhubhe, ngokuvamile into efana ne-10.8.0.0/24. Lawo makheli akhona ngaphakathi komhubhe kuphela futhi awaveli ku-LAN. Ukuwadida nekheli le-LAN leseva yindlela imbobo egcina idluliselwe ngayo kukhasimende elikuxhakaxholo kuphela uma lixhunyiwe.

Hlola indlela ngokulandelana lapho iphuka khona

Qala ku-router. Qhathanisa umbhalo ohlwini lwezivumelwano nomgomo wokubhukha; uma iseva ithathe ikheli leqoqo, isihlonzi asilungile, futhi i-ip link show kumsingathi ikunikeza inani lokuliqhathanisa.

Bese kuba umsingathi. I-ip -4 addr show eth0 kufanele ibike ikheli nesinqamuleli okulindelekile. Ikheli lesibili kusixhumi esifanayo ngokuvamile lisho ukuthi i-DHCP isasebenza eduze kokucushwa kwakho okuqinile.

Bese kuba ukudluliswa. Qinisekisa ukuthi indawo okuhlosiwe isalingana nekheli osanda kulihlola, futhi qinisekisa ukuthi kukhona okulalelayo nge-ss -lntp. Ukudluliswa okubhekise embotsheni evaliwe kubonakala ngaphandle kufana ncamashi nokudluliswa okugqithisile.

Qeda ngaphandle, ocingweni olucishiwe i-Wi-Fi. Leyo nhlolo eyodwa ihlukanisa “ikheli lasendaweni alilungile” nokuthi “ukufinyeleleka komphakathi kugqithisile”, izinkinga ezimbili lezi zilungiselelo eziqhubeka nokuzihlanganisa.

Bhala phansi amakheli amathathu, i-LAN, owomphakathi neqoqo lomhubhe, futhi uphawule ukuthi yiluphi uhlelo olungumnikazi walinye. Uma inyanga ezayo uxhumano luhluleka uzokwazi ukuthi yiluphi okufanele uluhlole esikhundleni sokushintsha womathathu ngesikhathi esisodwa.