Kungani ithebula lemizila le-VPN ye-Windows likhombisa 0.0.0.0/1 ne-128.0.0.0/1

Ukukhetha kwesango ozenzakalelayo kwengeza izingxenye ezimbili zomzila ozenzakalelayo, hhayi owodwa. Funda isiqalo, imethrikhi ne-interface ngaphambi kokwengeza noma ukususa umzila kuklayenti.

Xhuma ku-VPN ye-Windows bese uvula ithebula lemizila, futhi kugqama imibhalo emibili: 0.0.0.0/1 kanye ne-128.0.0.0/1. Akuwona amaphutha okuthayipha futhi awathathi indawo yomzila ozenzakalelayo. Ukubonakala kwawo kuncike kukho okukhethiwe kwephrofayela eyodwa, futhi le pheya iyindlela okwakhiwa ngayo umhubhe ogcwele, hhayi isici somhubhe ohlukanisiwe. Funda ukukhetha, isiqalo kanye ne-interface ndawonye ngaphambi kokushintsha ngisho umugqa owodwa.

Yini okufakwa ukukhetha kwesango ozenzakalelayo

Ukukhetha kwephrofayela okuthumela konke ngomhubhe kusebenza ngokwengeza lezo ziqalo ezimbili. Susa ukukhetha futhi ziyanyamalala, kusale umzila ohlanganisa kuphela isethi engaphansi enikezwe i-adaptha yomhubhe. Ibhokisi lokumaka lilawula le pheya; alibhali kabusha umzila owodwa ozenzakalelayo. Yingakho ithebula ngemva kokususa uphawu libonakala njengokubhala kabusha okwengxenye hhayi njengokususa.

I-0.0.0.0/1 ihlanganisa ingxenye engezansi yesikhala se-IPv4 kanti i-128.0.0.0/1 ihlanganisa ingxenye ephezulu, ngakho ndawonye zihlanganisa yonke ikheli le-unicast. Ngayinye icacile kunomzila ozenzakalelayo 0.0.0.0/0, okusho ukuthi ukufanisa kwesiqalo eside kakhulu kuthumela ithrafikhi evamile emhubheni ngesikhathi umzila wangempela ozenzakalelayo uhlala lapho wawukhona. Ukugcina lowo mzila ozenzakalelayo akusiyo into yokuhlobisa: amaphakethe asonga umthwalo obethelwe aqondiswe ekhelini lomphakathi leseva futhi kufanele aphume nge-adaptha yangempela. Shintsha umzila ozenzakalelayo esikhundleni sokuwuhlukanisa, futhi ukuthuthwa komhubhe ngokwawo kuzozama ukungena emhubheni, okuwumjikelezo hhayi ukuxhumana.

Ngakho-ke i-0.0.0.0/0 yombhalo oqondiswe ku-adaptha ye-VPN kufanele kume kuyo. Iklayenti lendabuko ngokuvamile alibhali okunjalo, ngakho umzila wokwenziwa ngesandla noma ukulungiselelwa kweklayenti elinye kushintshe ithebula ngemuva kwakho. Yithole ngaphambi kokulungisa noma yini ngezansi.

Ukuhlakaza kushibhile kunokugcina isango

Ukuhlakaza kuyisizathu esisebenzayo sezingeno ezimbili esikhundleni esisodwa. Iklayenti liphethe imizila emibili ngqo ngenkathi lixhunyiwe futhi iyayisusa lapho inqanyulwa, ishiya lokho i-adaptha yangempela enakho ngaleso sikhathi. Iklayenti ebelishintshe umzila owodwa ozenzakalelayo bekufanele likhumbule isango langaphambilini, futhi ngemva kokushintsha kwesivumelwano se-DHCP lingase libuyisele elingasekho. Izingeno ezimbili eziphethwe azithwali isimo esinjalo.

Amanye amaklayenti afinyelela kumklamo ofanayo. Iphrofayela ye-OpenVPN ene-redirect-gateway def1 ifaka lezo ziqalo ezimbili esikhundleni sokususa ozenzakalelayo, futhi iklayenti le-Windows lilandela lephethini ngesizathu esifanayo sokuhlela imizila.

Yingakho futhi ithebula lingabonakala njengomhubhe ogcwele lapho ubulindele ukuhlukaniswa. Le pheya iyindlela okwakhiwa ngayo umhubhe ogcwele, hhayi ubufakazi bephutha lomhubhe ohlukanisiwe. Uma iphrofayela isethwe ukusebenzisa isango elikude, konke kuhlelwa, noma yini uhlelo lwendawo olulodwa lusafinyelela kuyo.

Isiqalo eside kakhulu siyawina ngaphambi kwanoma iyiphi imethrikhi

Ubude besiqalo bunquma ukusesha ngaphambi kwanoma iyiphi enye intambama. Imethrikhi ixazulula kuphela ukulingana phakathi kwemizila enesiqalo esifanayo, ngakho ingeno ye-/1 yehlula i-/0 ozenzakalelayo ngisho noma imethrikhi yayo imbi kakhulu. Ukubopha ku-interface kunquma okusalayo lapho imizila emibili yabelana ngesiqalo futhi i-Windows kufanele ikhethe ukuthi iyiphi i-adaptha ethumela iphakethe.

route print -4
Get-NetRoute -AddressFamily IPv4 | Sort-Object DestinationPrefix
Find-NetRoute -RemoteIPAddress 10.50.5.20

Ithebula lomhubhe ohlukanisiwe liqukethe ozenzakalelayo wangempela, izingxenye ezimbili zikazenzakalelayo, umzila wesethi engaphansi yomhubhe kanye nanoma isiphi isiqalo sehhovisi osengezile. Umzila wangempela ozenzakalelayo ungaba kumethrikhi ephansi noma ephezulu kuye ngeklayenti nephrofayela, futhi uma nje ipheya ye-/1 ikhona lowo mehluko awushintshi lutho. Ishintsha konke ngesikhathi lapho ipheya isuswa, futhi yilapho kuvela khona isango eliphelelwe yisikhathi noma i-interface engalungile. Funda ithebula lonke hhayi umugqa owodwa obulindele ukuwushintsha.

Khetha umnikazi oyedwa wesiqalo sehhovisi

Kumhubhe ohlukanisiwe, shono kuphela isiqalo okufanele sisebenzise i-VPN, futhi ukhethe indlela eyodwa yokuba ngumnikazi waso. Ukuqondisa umzila ekhelini lomhubhe elinikeziwe kusebenza kuze kushintshe lelo kheli, kanti ukubopha ku-interface kuyasinda ekushintsheni kwekheli kodwa kuyaphuka lapho inkomba inikezwa kabusha ngemva kokwakhiwa kabusha kwephrofayela. I-cmdlet eboshelwe kuphrofayela igwema zombili lezi zinkinga, ngezindleko zokudinga iphrofayela.

route -p add 10.50.0.0 mask 255.255.0.0 172.16.8.1
route -p add 10.50.0.0 mask 255.255.0.0 0.0.0.0 IF 31
Add-VpnConnectionRoute -ConnectionName Office -DestinationPrefix 10.50.0.0/16

I-cmdlet ibopha isiqalo kuphrofayela eshiwo, ngakho umzila uvela nokuxhumana futhi uhambe nakho, okuyikho okufunwa yikompyutha ephathwayo elawulwayo. Umzila oqhubekayo usinda ekuqaliseni kabusha futhi usinde kuphrofayela eyawubangayo, futhi yileyo ndlela i-VPN ethathe umhlalaphansi eshiya ngayo izingeno iminyaka. Khetha indlela eyodwa ngesiqalo ngasinye futhi ubhale ukukhetha, ngoba umzila oqhubekayo kanye nomzila wephrofayela wesiqalo esifanayo bakhiqiza izimpinda okunzima ukuzixazulula ngesikhathi sokuhlakaza. Noma yini oyikhethayo, ubunikazi kufanele bubonakale kuthikithi hhayi emshinini kuphela.

Ubunikazi umbuzo okuphendula le ngxenye, hhayi uhlelo lolimi. Abanikazi ababili besiqalo esisodwa bayimo yokwehluleka okufanele kugwenywe.

Qinisekisa ngendawo oya kuyo, hhayi ngewebhusayithi

Hlola indawo okufanele iwele umhubhe, hhayi iwebhusayithi ebika ikheli lokuphuma. Find-NetRoute ibuyisela umzila okhethiwe nekheli lomthombo, ngakho uyabona ukuthi isiqalo sehhovisi yini esiwine noma ozenzakalelayo wangempela, bese uvula ukwabelana ngokwakho.

Find-NetRoute -RemoteIPAddress 10.50.5.20
Get-VpnConnection -Name Office

Iwebhusayithi yekheli lokuphuma iwukuhlola okubuthakathaka, ngoba i-DNS, i-IPv6 kanye ne-proxy yesiphequluli kungathumela leso sicelo ngendlela ehlukile. I-IPv4 ne-IPv6 zinezilungiselelo ezihlukene kuyo leyo ngxoxo, futhi ukusula ibhokisi elilodwa kushiya omunye umndeni ungathintekile, ngakho umshini oneziteki ezimbili ungathwala i-IPv6 ngomhubhe ngesikhathi i-IPv4 ilandela umzila ohlukanisiwe. Hlola yomibili imindeni ngaphambi kokubiza iphrofayela ngokuthi ihlukanisiwe. Uma umzila ulungile futhi insizakalo yehluleka, ungqimba olusele ukuhlunga hhayi ukuhlela imizila.

I-firewall elawulwa yiklayenti ingavimba isethi engaphansi yehhovisi ngisho kunethebula lemizila eliphelele. Leyo nqubomgomo ingeyalowo osakaze iphrofayela, hhayi umuntu ohlela imizila.

Izihloko ezihlobene