Ukwehlukaniswa kwamaklayenti e-Wi-Fi kuqhathaniswa nokufinyelela kwendawo nge-VPN: yini ekuvimbayo

Beka amafoni amabili ku-SSID eyodwa yezivakashi futhi akekho obona omunye, kodwa womabili afinyelela ku-inthanethi. Faka iklayenti le-VPN kwelinye futhi iphrinta ebangeni lamamitha amathathu ihlala ingabonakali, kuyilapho iseva kwenye izwekazi iphendula i-ping. Akukho okugqekeziwe emhubheni; kunezinqumo ezimbili ezihlukene zokufinyelela ezihilelekile, futhi kunye kuphela kuzo okuphathelene nokuhamba kwendlela. Indawo yokufinyelela inquma ukuthi amaklayenti angenantambo angakhuluma yini, futhi iklayenti le-VPN linquma ukuthi iziphetho ziphuma ngamuphi umhubhe. Ukuhlanganisa lezi ezimbili kulethela amahora amaningi okushintsha kokumiswa okungenamsebenzi.

Amasango amabili azimele

Ukwehlukaniswa kwamaklayenti yisinqumo sokushintsha. Indawo yokufinyelela yamukela uhlaka olusuka esiteshini esisodwa esixhunyiwe, ibheka indawo ekuyiwa kuyo, ibona ukuthi leyo ndawo ingenye isiteshi esisebhulohweni elilodwa, bese iyilahla. Ikheli le-IP lesiteshi alihambisani naleso sinqumo, futhi ne-VPN ayihambisani.

Ukuhamba kwendlela kuyisinqumo esihlukile esithathwa kuklayenti. Ithebula lemizila ye-VPN linquma ukuthi iphakethe eliya ku-192.168.1.50 lingena emhubheni noma liphuma ngensiza ye-Wi-Fi. Uma iphakethe liphuma nge-Wi-Fi futhi indawo yokufinyelela ihlukanisa amaklayenti, liyafa endaweni yokufinyelela. Uma iphakethe lingena emhubheni, indawo yokufinyelela ayikaze ibone indawo yokuqala ekuyiwa kuyo futhi ayikwazi ukwehlukanisa lutho.

Lokho ukwehlukaniswa okuvimba kukho endaweni yokufinyelela evamile

Abakhiqizi baletha lokhu ngamagama amaningi: ukwehlukaniswa kwamaklayenti, ukwehlukaniswa kwe-AP, ukwehlukaniswa kweziteshi, noma inethiwekhi yezivakashi ekuveza lokho. Ku-OpenWrt ukukhetha kwensiza ngayinye isolate ngaphakathi kokumiswa okungenantambo, njengoba kuchazwe kumbhalo ongentambo, futhi i-SSID yezivakashi ivamise ukuthola ibhuloho layo nendawo yodonga lomlilo. Umphumela ukuthi amahlaka e-unicast phakathi kwamaklayenti awahlanganiswa ngebhuloho, ngakho i-ping, ukuxhumana kwe-SMB noma umsebenzi wokuphrinta kumakhelwane kuyahluleka nakuba womabili amadivayisi ekhombisa isignali egcwele.

Amaphrothokholi okuthola izinto ahlupheka kuqala nangendlela ebonakala kakhulu. I-mDNS yamaphrinta namadivayisi emidiya ihamba nge-multicast iya ku-224.0.0.251, i-SSDP isebenzisa u-239.255.255.250, futhi ukuthi lawo mahlaka ayawela yini ibhuloho kuncike kumkhiqizi nasekutheni ukuguqulwa kwe-multicast kube yi-unicast kuvuliwe. Idivayisi engekho ohlwini iwubufakazi obuthakathaka kunokuxhumana okuqondile okuhlulekile okuya ekhelini elaziwayo.

I-VPN ishintshani, futhi yini engakwazi ukuyishintsha

Umhubhe ogcwele uthatha umzila wokuzenzakalela, ngakho izizinda ezingaphansi zendawo zifinyelelwa kuphela uma iklayenti ligcina umzila oqondile kakhulu wazo. Imihubhe ehlukanisiwe yenza okuphambene futhi igcina ukufinyelela kwendawo ngokwakhiwa kwayo. Akukho kulezi zilungiselelo okungaphoqa indawo yokufinyelela ehlukanisayo ukuba idlulise uhlaka phakathi kwamaklayenti ayo amabili, yingakho ukuvumela ithrafikhi yendawo kuklayenti le-VPN kudingekile kodwa akwanele.

Icala eliphambene livamile ngokufanayo. Indawo yokufinyelela ivumela ithrafikhi phakathi kontanga, iklayenti le-VPN alifaki isizinda sendawo emhubheni, futhi iphrinta ayiphenduli ngoba udonga lomlilo lomsingathi lubheka inethiwekhi ye-Wi-Fi njengomphakathi. Izendlalelo ezintathu, izinqubo zokuzenzakalela ezintathu ezihlukene, futhi umzila kuphela obonakalayo kumarekhodi amaningi e-VPN.

Thola ukuthi yiliphi isango elivaliwe

Qala ngokuhlola okususa i-VPN esithombeni: xhuma amadivayisi amabili avamile ku-SSID eyodwa bese uzama ukufinyelela kwelinye isuka kwelinye ngekheli. Uma lokho kuhluleka, indawo yokufinyelela iyahlukanisa futhi asikho isilungiselelo se-VPN esizokulungisa. Uma kuphumelela, iya kuklayenti bese usebenzisa i-ip route get 192.168.1.50 ku-Linux noma i-Find-NetRoute -RemoteIPAddress 192.168.1.50 ku-Windows; umphumela usho insiza iphakethe elizoyisebenzisa.

Uma umzila ukhomba ensizeni ye-Wi-Fi, iphakethe liphuma ngaphandle kokubethelwa futhi umbuzo uba ukuthi ingabe indawo yokufinyelela nodonga lomlilo lomsingathi bayakuvumela. Uma umzila ukhomba emhubheni, indawo ekuyiwa kuyo ithunyelwa kuseva ye-VPN, okuyiphutha kudivayisi ekulayo i-LAN futhi ngokuvamile kusho ukuthi uhlu oluvunyelwe lomhubhe lubanzi kakhulu.

Ukuxhumana okuqondile embobeni yephrinta kuwukuhlola okungcono kuhlu lokuthola izinto. I-nc -vz 192.168.1.50 9100 ku-Linux noma i-Test-NetConnection 192.168.1.50 -Port 9100 ku-PowerShell ikutshela ukuthi ikheli liyafinyeleleka noma cha, ngaphambi kokuba nakuphi ukubhangqa kwezinga lesicelo kungene engxoxweni.

Khetha ikhambi lenethiwekhi okuyo

Enethiwekhi yehhotela noma yezivakashi, ukwehlukaniswa kunenjongo futhi akufanele uzame ukukuchitha. Thatha idivayisi yendawo njengengafinyeleleki, sebenzisa i-VPN ukufinyelela umsingathi ongakwazi ukuphrinta noma ukwabelana, futhi uyeke ukuthatha i-SSID njenge-LAN.

Ekhaya, ukuvala ukwehlukaniswa ku-SSID eyinhloko kuyafaneleka uma amadivayisi kungawakho, kuyilapho i-SSID yezivakashi ihlala ihlukanisiwe. Isilungiselelo sihlala ekumisweni okungenantambo kwendawo yokufinyelela, futhi kukhona lapho kufanele khona, hhayi kwezikhathi ezingafakwanga zodonga lomlilo kuklayenti ngayinye.

Ehhovisi, cabanga ukuthi indawo yokufinyelela, i-VLAN kanye nodonga lomlilo lomsingathi konke kunenjongo. Khuphukela phezulu nemiphumela yokuhlola esikhundleni sokucela ukuthi ukwehlukaniswa kucishwe, ngoba inethiwekhi ehlukanisa amaklayenti ivamise ukuvikela okuthile.

Qinisekisa isicelo, hhayi i-ping kuphela

I-ping ephumelelayo ifakazela umzila, hhayi insizakalo. Amaphrinta avamise ukwamukela u-9100 oluhlaza noma i-IPP ku-631 kodwa enqabe ukutholwa, futhi ukwabelana ngamafayela kudinga u-445 kanye nokuxazululwa kwamagama okusebenzayo. Qinisekisa imbobo esetshenziswa isicelo, bese uzama futhi umsebenzi wangempela kudivayisi.

Gcina izendlalelo ezimbili zihlukene kumanothi akho: lokho inethiwekhi ye-Wi-Fi okuvumayo, nalokho i-VPN okuwuhambisayo. Ngokuzayo lapho idivayisi inyamalala ohlwini, lokho kwehlukanisa kuzokutshela ukuthi ubheke kuphi kuqala.