Kungani i-route-nopull yodwa ishiya iseva yamafayela ingafinyeleleki
Ukuziba imizila eqhutshwayo kuyingxenye kuphela yethubhu ehlukanisiwe. Khetha umnikazi womzila, engeza isiqalo sehhovisi ngesandla, futhi uhlole imigudu emithathu ngaphambi kokuthi usho ukuthi isilungisiwe.
Iseva yamafayela ivuleka kahle, futhi ucingo lwevidiyo ewindini eliseduze luqala ukugxuma. Akukho okunensayo futhi ayikho i-MTU engalungile: iklayenti lakho lamukele uhlu lwemizila olunikezwe iseva, ngakho iphakethe ngalinye manje liphuma ngodonga lomlilo lwehhovisi. Isixazululo akusilo olunye uphawu lokuhlela kodwa isinqumo sokuthi ubani ungumnikazi wetafula lemizila leklayenti. Leso sinqumo singesendawo eyodwa, futhi izindlela zokuhluleka ngezansi zikutshela ukuthi iyiphi indawo oyikhethile ngempela.
Nquma ukuthi ubani ungumnikazi wetafula lemizila
Abanikazi abathathu bangenzeka. Iseva ingaqhuba imizila kanye nesango elimisiwe, futhi lapho iklayenti lifaka konke elikutshelwayo futhi libe ithubhu eliphelele. Iphrofayela leklayenti ingathatha ubunikazi ngokulahla ukuhanjiswa futhi ithwale imigqa yayo yemizila. Umphathi woxhumano lwedeskithophu naye angaba umnikazi wesinqumo ngezakhiwo zakhe zomzila kanye nomzila omisiwe.
Ukukhetha ngakunye kuhluleka ngendlela ehlukile, yingakho kufanelekile ukufunda itafula ngaphambi kokuhlela iphrofayela. Umugqa ohambisana nomphawu wakho unguwo umnikazi onaye ngempela.
| Owner | Where it lives | Result |
|---|---|---|
| Server | server config, redirect-gateway, pushed routes | client becomes a full tunnel |
| Profile | route-nopull and its own route lines | tunnel up, office prefix missing |
| Manager | never-default plus its own routes | desktop decides, profile ignored |
Khetha eyodwa futhi uyibhale phansi. Ukuxuba ezimbili kushiya umhambukeli ozindlela zakhe ezimisiwe ziphikisana nemibhalo yakhe, futhi unjiniyela olandelayo akakwazi ukuthi yiluphi ungqimba olunqobile. Susa ohluliwe ngokucacile.
I-route-nopull ihlunga ukuhanjiswa, ayengezi imizila
route-nopull ingeyephrofayela leklayenti, futhi ukulandelana kwayo kulelo fayela akubalulekile ngoba ilahla kuphela amanani avela kuseva. Ilahla imizila eqhutshwayo, kuhlanganise nomzila omisiwe oqhutshwayo, ngenkathi ithubhu lisaqhubeka likhuphuka ngokujwayelekile.
Umphumela abantu abawuphuthelayo ukuthi izinketho ze-DHCP eziqhutshwayo zihamba nazo. Izilungiselelo ze-DNS ezithunyelwa iseva nazo ziyalahlwa, ngakho amagama angaphakathi ayeka ukuxazululeka nakuba ithubhu linempilo futhi iseva ifinyeleleka ngekheli.
Lokho kushiya ithubhu elingenayo indlela eya esiqalweni sehhovisi ngaphandle uma wengeza eyakho: kuleyo phrofayela route-nopull bese kulandela route 10.30.0.0 255.255.0.0. Lowo mugqa uthwala ikheli nesifihlo; awusho igxathu elilandelayo.
Enye indlela yengeza uphawu lwesango, route 10.30.0.0 255.255.0.0 vpn_gateway, olukhombisa okufakiwe ethubhini ngegama. Abangenisi bayehluka ekutheni bayayihumusha yini leyo nhlobo, ngakho hlola uxhumano olugciniwe uma okufakiwe kungekho etafuleni le-kernel.
Qinisekisa ngezinto zokusesha imizila, hhayi nge-ping
I-ping ikutshela ukuthi kukhona okuphendulile. Ukusesha umzila kukutshela ukuthi iyiphi i-interface i-kernel engayikhetha, futhi lowo umbuzo owawubuze ngempela. Imiyalo emine emifushane yehlukanisa umzila ongekho nomzila okhomba idivayisi engalungile.
Funda ukuthi ithubhu lafaka ini nge-ip route show dev tun0. Ukungabikho kwempumela nhlobo kusho imizila engu-zero, okuyona ithubhu ehlukanisiwe esebenzayo, futhi uwumphumela ojwayelekile wokwengeza isihlungi ngaphandle komugqa ocacile.
Bese uhlola ikheli lehhovisi elilodwa nge-ip route get 10.30.5.7, nekheli le-inthanethi elijwayelekile nge-ip route get 1.1.1.1. Eyesibili kufanele isho i-interface yomzimba; uma isho ithubhu, ukuhanjiswa akuzange kuhlunywe nhlobo.
Ekugcineni funda i-ip rule, ngoba umthetho wenqubomgomo oshiywe umzamo wangaphambilini ungadlula itafula osanda kulilungisa. Iphrofayela elungile enomthetho ophelelwe yisikhathi phezulu ibukeka njengephrofayela ephukile impela. Susa umthetho owawengeze ngokugcina ngaphambi kokwengeza omunye.
Ama-subnet agqagqene abukeka njengethubhu eliphukile
Izinhlobo ezimbili ezizimele zingafana ngokombono weklayenti, futhi yilapho ithubhu ehlukanisiwe lisolwa ngokungakubangalanga. Uma ihhovisi likhipha isiqalo esifanayo nesetshenziswa yi-router yasekhaya, umzila wethubhu uvala i-router futhi inethiwekhi yasekhaya ibonakala inyamalala.
Qhathanisa ikheli elikusixhumi sakho nelomzila ofakwa iphrofayela, usebenzisa uhlu olulula lwamakheli ngaphambi kokushintsha noma yini. Ukugqagqana kungokoqobo, futhi akukho khetho lwephrofayela olukuxazululayo. Ongakulungisa ukuqamba amagama, ukuze umuntu olandelayo abone izinhlobo ezimbili esikhundleni sokukodwa.
Izilungiso eziqotho ukuphinda unombolo uhlangothi olulodwa noma ukuhumusha amakheli ehhovisi. Ukubophela umzila owodwa womhambukeli ku-router kusebenza kuze kushintshe ikheli le-router, bese kuba imfihlakalo yesibili phezu kweyokuqala.
Yenza isinqumo siphile ngemuva kokuxhuma kabusha
Okufakiwe okubhalwe ngesandla akuhlali ngemuva kokuxhuma kabusha, futhi umphathi woxhumano wakha kabusha itafula njalo lapho iphrofayela iqala. Beka isinqumo lapho kwakhiwa khona uxhumano, kungaba iphrofayela noma izilungiselelo ezigciniwe zomphathi. Bese uqalisa kabusha uxhumano kanye ngamabomu esikhundleni sokuthola ukuziphatha phakathi kocingo. Iphrofayela esebenza kuze kufike ukuxhuma kabusha okulandelayo ayikapheli.
Zijwayeze imigudu emithathu ngasikhathi sinye: umhambukeli wehhovisi ngekheli elingokoqobo, lowo mhambukeli ngegama, kanye nesayithi lomphakathi elijwayelekile. Eyesithathu phakathi incike kusevisi yamagama oyilungiselele ngemuva kokulahla izinketho ze-DNS eziqhutshwayo, futhi iyona ehluleka buthule.