Iphoyinti lokungena le-Wi-Fi ngemuva kwesango le-VPN: gcina i-LAN eyodwa

Iphoyinti lokungena eliboshiwe noma ingxenye yesibili eqondisiwe? Umehluko ukuthi ubani onamakheli, i-DNS kanye nomhubhe, futhi lokho kunquma ukuthi inqubomgomo ihlala kuphi.

Amaklayenti angenantambo angahlala ngemuva kwe-VPN ngaphandle kokuthi iphoyinti lokungena lazi lutho ngomhubhe. Xhuma umsakazo ngebhuloho ku-LAN yesango, vumela isango libe namakheli nomhubhe, futhi yonke idivayisi ku-Wi-Fi izuza ifa inqubomgomo efanayo. Enye indlela, ingxenye yesibili eqondisiwe enesango layo, iwumklamo ohlukile onendlela ehlukile yokwehluleka.

Lokhu kokubili kuyadidaniswa ngoba kokubili kubeka ibhokisi phakathi kwe-inthanethi namadivayisi akho. Ukuqhathanisa ukuthi ngakunye kungokabani iyona ndlela esheshayo yokukhetha.

Izindlela ezimbili zokubeka i-VPN phambi kwe-Wi-Fi

Esakhiweni sebhuloho iphoyinti lokungena lihambisa amafremu phakathi komsakazo nengxenye yezintambo futhi akukho okunye: isubneti eyodwa, igunya lamakheli elilodwa, umzulazuli oyedwa osebenzisa inqubomgomo. Esakhiweni esiqondisiwe ibhokisi lesibili linamakheli alo, ububanzi balo be-DHCP kanye nomzila walo wokuzenzakalela, ngakho ithrafikhi yeqa omunye umngcele ngaphambi kokufika emhubheni. Umklamo webhuloho wenza yonke idivayisi engenantambo ibonakale iyeyendawo kwisango, yingakho isethi eyodwa yemithetho ibamba yonke. Umklamo oqondisiwe ukunikeza ingxenye okufanele ucabange ngayo kanye nendawo yesibili lapho inqubomgomo ingahamba kabi khona.

internet
  -> vpn-capable gateway: routing, tunnel, dns, failure policy
  -> bridged access point: radio onto the same lan
  -> wifi clients

Khetha ibhuloho lapho imfuneko iwukuthi amadivayisi angenantambo asebenzise umhubhe ofanayo nowezintambo. Khetha oqondisiwe lapho ufuna ingxenye engahlukaniswa, noma lapho ibhokisi lesibili selivele likhona njengomzulazuli.

Ukuthi isakhiwo sebhuloho kushintsha ini ngempela

Ukubhuloha kususa isendlalelo sokuhumusha nesango elivamile elincintisanayo, futhi kunezela inkinga yokuphatha. Iphoyinti lokungena lisadinga ikheli ongafinyelela kulo, okuyinto inqubo yomthengisi evamise ukuyihlela nge-LAN eyinhloko. Insizakalo yalo ye-DHCP kufanele icishwe, ngaphandle kwalokho iziphathimandla ezimbili zizonikeza izivumelwano eziphikisanayo. Isango ligcina umhubhe, izilungiselelo zesixazululi kanye nesinqumo sokuthi kwenzekani lapho umhubhe uwela, ngakho inqubomgomo ihlala endaweni eyodwa impela.

Umsakazo awuzuzi lutho kwalokhu ngokuzenzakalela kumhubhe. Umazi uyeke ukunezela izingqimba ebezingakufihla.

Ingxenye yesibili eqondisiwe ifanele kuphi

Ingxenye eqondisiwe ikufanelekela ubunkimbinkimbi bayo lapho amadivayisi angemuva kwayo edinga ukuphathwa ngendlela ehlukile kune-LAN esele. Inethiwekhi yezivakashi, ilabhorethri, noma iqembu lamaklayenti okufanele lihlale liphuma ngezwe elithile konke kuyizizathu zokubeka umzulazuli endleleni. Izindleko igunya lesibili lamakheli, udonga lwesibili lomlilo okufanele lugcinwe luhambisana, kanye nomzila wokubuya usuka ku-LAN eyinhloko uma othile lapho edinga ukufinyelela ingxenye. Lezi zibopho hhayi imininingwane yokulungiselela.

Iphutha elivamile ukwakha inguqulo eqondisiwe ngengozi, kusetshenziswa kabusha umzulazuli osaqhuba i-DHCP nokuhumusha kwayo. Lokho kukhiqiza ukuhumusha okuphindwe kabili kanye nenqubomgomo okungekho ongayilandelela.

Hlola kuklayenti le-Wi-Fi, hhayi esangweni

Isicelo esiphumelelayo esangweni sibonisa ukuthi umhubhe uyasebenza esangweni. Umbuzo wangempela ukuthi ithrafikhi edluliselwe yeklayenti elingenantambo iyawusebenzisa yini, futhi lokho kufanele kubonwe kuklayenti. Imiyalo engezansi ihlola ikheli leklayenti, umzila walo kanye nekheli elibonwa yinsizakalo ekude.

ip -4 addr show wlan0
ip route get 1.1.1.1
curl -sS https://api.ipify.org; echo
traceroute -n -m 4 1.1.1.1

Ikheli ngaphakathi kwe-LAN yesango liqinisekisa ukuthi ibhuloho lidlulisa amafremu esikhundleni sokuwahumusha. Umzila ogxuma kuqala esangweni uqinisekisa ukuthi iklayenti alitholanga umzila wesibili wokuzenzakalela kwenye indawo. Ukuhlolwa kwekheli lokuphuma kuphendula umbuzo wangempela, futhi umkhondo omfushane ubonisa ukuthi amagxuma okuqala yiwo alindelekile yini. Uma ikheli leklayenti livela kobunye ububanzi, umsoliswa wokuqala isiphakeli se-DHCP esilahlekile.

Bhala indima yebhokisi ngalinye, ikheli lalo kanye negunya le-DHCP. Umdwebo wemigqa emithathu wanele, futhi uxazulula izimpikiswano eziningi mayelana nokuthi umthetho uhamba kuphi.

Izihloko ezihlobene