I-Wi-Fi isebenza nge-VPN ye-router. Kuthiwani ngamachweba anezintambo?

I-laptop ye-Wi-Fi ikhombisa ikheli lokuphuma le-VPN, kanti i-desktop yezintambo egumbini eliseduze ikhombisa elomhlinzeki. Zombili zixhumene ne-router eyodwa, ngakho umehluko awukho ekulungiselelweni kwe-VPN. Umehluko usendleleni yokuthi ukuhamba kwedatha kudlule kuphi: i-interface, i-VLAN noma inqubomgomo. Ukumboza kuyisici sendlela ngayinye, akusona isici sebhokisi.

Ukuqhathanisa amaklayenti amabili ndawonye kuthola umehluko ngokushesha kunokufunda imithetho ye-router.

Izindlela ezimbili eziya ku-router eyodwa

I-router eneklayenti le-VPN ingaqondisa ukuhamba kwedatha kusuka ebhulohweni elilodwa, ku-VLAN eyodwa noma ohlwini lwamachweba olulodwa, bese ishiya okunye ku-WAN. Lona umklamo ojwayelekile, yingakho ukuhlolwa okungenantambo okuphumelelayo kufakazela indlela engenantambo kuphela. I-switch elawulwayo nayo ingabeka ichweba lodonga esigabeni esihlukile kuleso esisetshenziswa yindawo yokungena, ngaphandle kokuthi othile athinte i-router. Inqubomgomo ezisekelwe emachwebeni yizona ezilula ukweqiwa, ngoba ichweba libonakala njengengxenye ye-LAN efanayo.

I-hardware efanayo, inqubomgomo ehlukile. Ibhokisi lomzimba akusona umngcele ocabangayo.

Qhathanisa i-gateway esetshenziswa ngamunye iklayenti

Kudivayisi yezintambo, funda i-interface esebenzayo, ikheli layo kanye ne-gateway ezenzakalelayo. Emshinini lapho i-Wi-Fi ne-Ethernet zombili zisebenza khona, isilinganiso sokuhamba kwedatha sinquma ukuthi ubani ozonqoba, futhi lokho ngokuvamile akusiyo into oyilindele. Qhathanisa leyo gateway naleyo esetshenziswe yiklayenti elingenantambo, bese uhlola ukuthi ichweba le-switch ingeliphi inethiwekhi ye-router. Iresiphi yeklayenti le-WireGuard ku-pfSense ibonisa indlela i-router eyodwa engaba ne-tunnel ngayo kuyilapho ishiya ezinye izinsiza zingathintekile.

Uma ama-gateway amabili ehlukile, usunayo impendulo ngaphambi kokuthinta ngisho umthetho owodwa we-firewall.

Qhathanisa i-DNS ne-IPv6 ngokwehlukana

Iklayenti lezintambo elinesixazululi esilungiselelwe ngesandla lingadlula ngokuphelele inqubomgomo ye-DNS ye-router, ngisho nalapho ukuhamba kwalo kwedatha kuqondiswa ngendlela efanele. I-IPv6 ingesinye isigamu: i-tunnel esebenza ne-IPv4 kuphela ingashiya ukuhamba kwe-IPv6 endleleni yokuqala. Hlola umbuzo wegama nendawo yokuya ye-IPv6 kusuka kudivayisi yezintambo, hhayi nje ukuhlolwa kwekheli le-IPv4. Sebenzisa umbuzo okungasixazululi se-router kuphela esingawuphendula, njengegama lomsingathi langaphakathi.

Ngakunye kwalokho ukufanekisa okwehlukile, futhi ngakunye kungahluleka ngakho sodwa.

Qhathanisa okwenzekayo lapho i-tunnel iwa

Uma umklamo udinga ukufinyelela nge-VPN kuphela, misa i-tunnel bese uhlola iklayenti lezintambo ngokuhamba kwedatha okungenabungozi. Idivayisi yezintambo ebuyela ku-WAN ejwayelekile ihlala ixhunyiwe kodwa igedele indlela ebehlosiwe, lokho okubonakala kuyimpumelelo kunoma ubani ohlola ukuxhumana kuphela. Iklayenti elingenantambo lingase lenze okuhlukile, futhi lowo mehluko yiwona ukufanekisa okufanele.

Ukuziphatha lapho kwehluleka kuyingxenye yokumboza, akusona isimo somngcele esilandelayo.

Yabela umphumela esigabeni esifanele

Iklayenti le-VPN ekamelweni ledivayisi noma i-proxy yesiphequluli emshinini wezintambo kungashintsha ikheli lokuphuma elilinganisiwe ngaphandle kwe-router. Qopha ukuthi yiziphi izigaba ezazisebenza ngesikhathi sokuhlolwa, kungenjalo ukushintsha kwekheli okuphumelelayo kuyobalwa ku-gateway engalungile. Ukuqapha okufanayo kuyasebenza nasemphumeleni ogcinwe ku-cache kusukela ngaphambi koshintsho.

Hlola ukuhamba kwedatha okusha, qaphela izigaba, bese ubhala isigaba ne-interface. Yilowo mbhalo oqopha owenza ukufanekisa okulandelayo kube nencazelo esikhundleni sokunye ukuqagela.