Kungani inzwa yakho ye-VPN ingalokothi ibone ithegi ye-VLAN yesigaba
Ithuneli elihamba ngemizila libuyisela amaphakethe, hhayi amafreyimu akuthwele. Izihlolo ezine ngohlobo lwesixhumanisi, indawo yenzwa, umongo womthombo nendlela yokuphendula.
Inzwa ohlangothini lwe-VPN ibona ama-VLAN amabili esigaba njengokuhamba kwe-IP okujwayelekile, futhi ithegi eyayihlonza isigaba ngasinye ocingweni lwayo yanyamalala. Yilokho okwenzayo ithuneli elihamba ngemizila: libuyisela amaphakethe, hhayi amafreyimu e-Ethernet ayewalethile. Ukuthi ithegi elahlekile libalulekile yini kuncike ngokuphelele embuzweni owubuzayo enzweni. Yenza izihlolo ezine ezingezansi ngokulandelana futhi uzokwazi ukuthi yiliphi iphuzu lokubheka elingayiphendula.
Okokuqala: thola ukuthi ithuneli lakho libuyisela ini
Isixhumanisi se-TUN sithwala amaphakethe e-IP, ngakho ikhanda le-VLAN lefreyimu lesigaba liyaphuma emzimbeni kumzila ohambisa ngemizila owasunduza ukuhamba wangena ethunelini. Isixhumanisi se-TAP sithwala amafreyimu e-Ethernet, okusho ukuthi amathegi angaphila lapho ibhuloho nemithetho yokwamukela i-VLAN kuwavumela ukuba adlule. Funda uhlobo lwesixhumanisi ngaphambi kokucabanga ukuthi ukubamba kufanele kuqukathe ini.
Akukho ukukhetha okuwukukhubazeka. Womabili amadizayini aphendula imibuzo ehlukile futhi ashiya ithegi ezindaweni ezehlukene.
Qinisekisa isixhumanisi ngokwakho esikhundleni sokusiqagela egameni lomkhiqizo. Imininingwane yoxhumano isho uhlobo lwedivayisi futhi ibonisa amafulegi asebenzayo, futhi ukubamba okuthathwe kudivayisi ye-TUN ngeke kuthole ikhanda le-Ethernet ngoba nje ukucelile. Uma amathegi evela ekubambeni kwe-TUN, cishe ngokuqinisekile ufunda esinye isixhumanisi noma ithuneli elithwala amafreyimu ngaphakathi komthwalo walo. Qaphela ukuthi usesimweni esiphi ngaphambi kokuqhubeka.
Okwesibili: beka inzwa lapho into isekhona khona
Izindawo ezintathu zihlanganisa iningi lamadizayini ahamba ngemizila: ingxenye ye-Ethernet yesigaba, inethiwekhi yangaphandle phakathi kweziphetho zethuneli, nomgwaqo ngemva kokucubungula kwethuneli. Ngayinye ibona into ehlukile, futhi ithegi likhona kuphela kwelokuqala. Ukukhetha indawo yenzwa kuyisinqumo mayelana nokuthi iyiphi into edingwa inqubomgomo, hhayi indaba yokunethezeka.
| Observation point | What is actually there | Question it can answer |
|---|---|---|
| Branch Ethernet segment | Tagged frames on the local wire | Which VLAN carried this frame here |
| Outer tunnel network | The protected carrier between endpoints | Which endpoints are exchanging traffic |
| After tunnel processing | Recovered IP packets | Which branch prefix the packet claims |
Buza umbuzo wenqubomgomo ngamagama ithebula elingawaphendula, futhi ngokuvamile uyazixazulula. Uma umthetho udinga ukwazi ukuthi iphakethe lavela kusiphi isigaba, ukumephwa kwezandulela ezansi kungase kwanele, kodwa kuphela uma lokho kumephwa kunembile futhi kungacacisi. Uma umthetho udinga ukwazi ukuthi ifreyimu yafika kweliphi ichweba, udinga indawo yokuqala, ngoba akukho lutho olusezansi olungayakha kabusha. Izihlolo ezibekwe ngomkhuba hhayi ngombuzo yizo ezenza amaqembu agcine efuna insimu idizayini engakaze iyithwale.
Ithuneli elithwala i-Ethernet liyidizayini ehlukile futhi lidinga ukuhlola kwalo kokuthi iziphetho zigcina noma zibhala kabusha ini. Ukukhetha i-TAP kuphela akukachazi ibhuloho, imithetho yokwamukela i-VLAN noma inqubomgomo yokuhlola.
Okwesithathu: zuza umongo womthombo esikhundleni sokwethembela kuwo
Ibanga lokhelo elilodwa ngesigaba yisimo esijwayelekile sokumela ubunikazi be-VLAN, futhi lihlala kuphela uma ukumephwa kuhlala kungu-oyedwa-kuyedwa. Izandulela ezigqagqanayo, ukuhumusha nangesango elabiwe ngayinye ihlukanisa leso sisekelo ngendlela ebonakala njengenkinga yekhwalithi yedatha hhayi yedizayini. Bhala ukumephwa nemikhawulo yako futhi usho ukuthi kwenzekani ngephakethe elihambisana nemigqa emibili. Isandulela esivela ezigabeni ezimbili kufanele kube iphutha olitholayo, hhayi ukuphonsa uhlamvu lwesiliva okwamukelayo.
Umongo onikezwe yiklayenti awubona ubufakazi bobulungu. Kuyisimangalo, futhi indawo yaso kukholamu ehlukile.
Lapho umehluko ubalulekile, sebenzisa idatha yokuxhumana oyilawulayo: isiphi isimo sethuneli esamukele uxhumano, isiphi isixhumanisi amaphakethe afike kuso, ithini ithebula lomzila wasekhaya ngalowo mlingani. Ilebula elinikezwe yiklayenti liyinkomba ewusizo kanye nokokufaka okungenamsebenzi kokugunyaza. Uma inzwa ingakwazi ukusungula ukuxhumana ohlangothini lwayo, inqubomgomo idinga umthetho obanzi esikhundleni sokuqagela okuzethembayo.
Okwesine: qinisekisa indlela yokuphendula nokuthi ukususa ukubethela kweqa ini
Inzwa ebona uhlangothi olulodwa ingase ibukeke iphilile, ngoba izicelo ziyaqhubeka zifika ngesikhathi. Hlola indlela yokuphendula ngokusobala, futhi uyihlole ngokugeleza okufanayo hhayi ngokufinyeleleka okujwayelekile. Ukubonakala kwengxenye-kabili kuba isikhala esithule kuyo yonke isiphetho esisekelwe esimweni osithola kukho.
Ukubuyisela ukuhamba kwe-IP kwangaphakathi nakho akufani nokubona uhlelo lokusebenza ngaphakathi kwayo, ngoba i-TLS ethwelwe phezu kwethuneli ihlala iyi-TLS.
ip -d link show tun0
tcpdump -i tun0 -n -e -c 5Le mithi emibili iphendula umbuzo wesixhumanisi futhi ibonisa ukuthi ukubamba kuqukethe ini ngempela, okuyashesha kunokuphikisana ngesakhiwo. Shintsha igama lesixhumanisi elisetshenziswa idizayini yakho bese ugijima ukubamba ngesikhathi ukugeleza okukukhathazayo kusebenza. Lapho kungekho thegi elivela kudivayisi ye-TUN, okutholakele ukuthi idizayini yahamba ngemizila esikhundleni sokwakha ibhuloho, hhayi ukuthi inzwa yalahla idatha. Bese kuthi mhlawumbe uhambisa inzwa endaweni engabona ithegi, noma ubhale kabusha umthetho ngamagama indawo yamanje engawasekela.