Kungani i-VPN esebenzayo isagcina isikhathi kumphendulo
Ukufika kwesicelo kuseva eyimfihlo kuyingxenye eyodwa kuphela yokushintshisana. Imphendulo yaso kufanele ithole iklayenti lomhubhe ngokusebenzisa isango, umzila noma ukuhumusha okuhloswe.
Isicelo siyafika, iseva iyasibhala, futhi iklayenti lisabika ukuthi isikhathi siphelile. Leyo nhlanganisela isho ukuthi imphendulo ayitholanga indlela yokubuyela emuva, futhi lokhu kungenye yezinkinga ezimbalwa ongaziqinisekisa kuzo zombili izinhlangothi ngesikhathi esisodwa. Yenza izivivinyo ngokulandelana futhi ume lapho eyodwa yehluleka.
Qala lapho isicelo sifike khona
Qinisekisa ukuthi iphakethe lafika kusevisi ngaphambi kokuhlola enye into. Umugqa wokubhalwa ohlangothini lwesheva, isibali sokuxhumana noma ukuthwebula okuvunyelwe ekugcineni okude, konke kuphendula umbuzo ofanayo, futhi ukungabikho kwazo kubuyisela emuva emhubheni esikhundleni sokuqhubekela phambili emphendulweni. Lona umhlolo ohlukanisa inkinga yokudlulisa nenkinga yendlela yokubuyela emuva.
Uma isicelo singakaze sifike, ma lapha. Umhubhe, ukuhlela umzila oya kuqhubeka kwangasese noma umthetho wokufinyelela yikho okuyisihloko, futhi indlela yemphendulo ayikabaluleki. Bhala futhi ikheli lomthombo iseva elikubonile. Kungenye yekheli lechibi elinikezwe iklayenti noma ikheli elihunyushiwe, futhi lowo mehluko unquma ukuthi yikuphi ukuhlola okulandelayo okusebenzayo.
Imphendulo idinga umzila oya echibini
Iklayenti lokufinyelela kude ngokuvamile lithola ikheli echibini, futhi inethiwekhi yangasese idinga umzila wokubuyela emuva kulelo chibi. Iseva umzila wayo wokuzenzakalela ukhomba esangweni layo iqobo lwayo inikela iphakethe kulelo sango, elingazi ukuthi ichibi likuphi, ngakho imphendulo ifela lapho. Iklayenti libona isikhathi siphelile ngoba akukho okubuyile, futhi lokho akukwazi ukuhlukaniswa nesicelo esingazange siphume.
Hlola umzila iseva ewukhethela ikheli leklayenti, hhayi umzila ewusebenzisayo wenethiwekhi yakhe encane. Lezo zinto ezimbili zokucinga zinganikeza izimpendulo ezihlukile, futhi eyesibili yiyona ebalulekile lapha. Ukuhumusha kungenye indlela yokuklama futhi kushintsha lokho iseva ekubonayo. Kungenza indlela yokubuyela emuva ibe lula, futhi kususa ikheli lokuqala leklayenti emibhalweni yesheva, okuthinta noma yimuphi umthetho noma umbiko owakhiwe kuleyo nkambu.
Qhathanisa ukuthwebula kwesheva nokuthwebula kwesango
Qhathanisa okukhishwa yiseva nalokho okufika esangweni. Ukuthwebula kusixhumanisi sokuphuma sesheva nokuthwebula esangweni somhubhe kuphendula izingxenye ezimbili ezihlukile zalo mbuzo, futhi igebe phakathi kwazo likhombisa lapho ukulahleka kwenzeke.
ip route get 10.90.0.14
tcpdump -ni any host 10.90.0.14 and port 443
ip route show table all | grep 10.90.0.0| Where the reply stops | What it proves |
|---|---|
| Request in the server log, nothing on its outbound capture | The server picked a gateway that cannot reach the pool |
| Reply leaves the server but never shows up at the gateway | Loss on the LAN path, not on the tunnel |
| Reply reaches the gateway but not the client | Return translation or tunnel policy, not the server route |
Isicelo esenziwe isango ngokwalo siyindawo ebuthakathaka yokuthatha indawo yokuhlolwa kweklayenti, ngoba sivela kwelinye ikheli futhi sihlangabezana neminye imithetho. Yingakho i-ping ephumelelayo evela esangweni nesicelo esihlulekile esivela eklayentini kungaba yiqiniso kokubili ngesikhathi esisodwa.
Lapho kukhona amarowutha amaningi endleleni, hlola ngalinye elidinga umzila oya echibini. Ukuklama kusuka endaweni kuya kwenye kuvame ukudinga ukuthi isiqalo sendlela esikude saziwe kumadivayisi angaphezu kwelilodwa, futhi isango ngokwalo kufanele lidlulise phakathi komhubhe ne-LAN; amanothi okudlulisa e-strongSwan ahlanganisa uhlangothi lwe-sysctl nomthombo womlilo walokho.
Bhala ichibi, isiqalo sendlela kanye nomthwalo wemfanelo
Amaqiniso amane angena kumanothi: ichibi iklayenti elilitholile, isiqalo sendlela esiyimfihlo esilidingayo, irowutha elibhekele imphendulo, kanye nomthetho wokuhumusha uma ukhona. Ngalokhu, ushintsho lwesango kamuva luyisiqhathaniso hhayi uphenyo.
Bese uphinda uhlole ngeklayenti elijwayelekile kanye ne-akhawunti yangempela yohlelo. Ukwandisa amalungelo ohlelo akukwazi ukulungisa indlela yokubuyela emuva yephakethe, futhi ushintsho lwe-akhawunti olwenziwe phakathi nalokhu kuxilonga luzodida isiqhathaniso esilandelayo. Uma ukuklama kuncike ekuhumusheni, kubhale lapho kufundwa khona imibhalo yesheva. Umuntu obona ikheli lomthombo elingaziwa emkhondweni wokucwaninga akufanele aphinde athole ukuhlangana kusuka kuthikithi.