Buga uwar garken ta hanyar ƙofar D-Link DFL

Ina da ɗawainiya - don buga sabis akan na'ura mai ba da hanya tsakanin hanyoyin sadarwa D-Link DFL a adireshin IP wanda ba a haɗa shi da mahallin wan ba. Amma na kasa samun umarni a Intanet da za su magance wannan matsala, don haka na rubuta nawa.

Bayanan farko (duk adireshi ana ɗaukar su azaman misali)

Sabar yanar gizo akan hanyar sadarwa ta ciki tare da IP: 192.168.0.2 (port 8080).
Pool na fararen adireshi na waje wanda mai bayarwa ya kebe: 5.255.255.0/28, ƙofar mai bayarwa: 5.255.255.1, sauran adiresoshin "mu". 5.255.255.2-14.

Bari adiresoshin 5.255.255.2-10 muna amfani da shi don NAT da sauran bukatun. Ana haɗa hanyar haɗin mai bada zuwa tashar jiragen ruwa wani 1. Don dubawa wani 1 adireshin haɗi 5.255.255.2.

Aiki: buga sabar gidan yanar gizo na ciki zuwa adireshin jama'a 5.255.255.11, a tashar ruwa 80.

Maganin a takaice

Don buga sabis akan IP wanda bai dace da adireshin mu'amala ba kuna buƙatar:

1. Nuna wa na'ura mai ba da hanya tsakanin hanyoyin sadarwa cewa ya kamata a bincika ip ɗin da aka buga a ciki ta amfani da shi tebur kwatance.
2. Turanci arpdon haka na'ura mai ba da hanya tsakanin hanyoyin sadarwa ya amsa maƙwabta cewa adireshin da aka buga nasa ne.
3. dokokin firewall (zauna), wanda a cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa zai canza adireshin wurin zuwa adireshin uwar garken ƙarshe.
4. Dokar Firewall (Ba da izini), wanda zai ba da damar haɗi daga mahaɗar waje zuwa adireshin da aka buga a cikin na'ura mai ba da hanya tsakanin hanyoyin sadarwa

Kuma yanzu kadan game da kowane batu

Horo

I. Da farko, bari mu ƙirƙiri "Abubuwa" don duk bukatunmu (yanzu zan nuna tsarin don ƙirar gidan yanar gizo, Ina tsammanin waɗanda ke aiki tare da na'ura wasan bidiyo za su iya canja wurin ayyuka zuwa umarnin ta'aziyya).

1. Ƙara adiresoshin IPv4 guda biyu zuwa littafin adireshi:
uwar garken yanar gizo = 192.168.0.2
jama'a-web-uwar garken = 5.255.255.11

2. Sannan muna ƙara tashoshin jiragen ruwa zuwa jerin ayyuka:
int_http = ku: 8080

Tashar jiragen ruwa ku: 80 ya riga ya kasance a cikin jerin ayyuka, wanda ake kira http, yana da iyaka a 2000 zaman, iyaka za a iya daidaita.

ohYa juya cewa babu buƙatar ƙara tashar tashar uwar garke akan hanyar sadarwar cikin gida, amma na bar shi saboda ... ana iya buƙatar misali don tashar jiragen ruwa na jama'a, amma ana ƙara su ta hanya ɗaya

II. Bari mu matsa kai tsaye zuwa mafita.

Sakin layi 1 и 2 ana iya hadewa, saboda Lokacin ƙara madaidaiciyar hanya, yana yiwuwa a samar da ARP nan da nan. A gaskiya, ban ga wannan damar nan da nan ba kuma na kafa littafin da hannu; na'ura mai ba da hanya tsakanin hanyoyin sadarwa yana da irin wannan aikin.

1. Don haka, idan har yanzu ba ku ƙirƙiri bunch of routing tables da dokoki a gare su, to, duk abin da za a iya yi a cikin babban kwatance tebur, shi ake kira. main.

Tebur mainza a sami hanyar da ta dace zuwa hanyar sadarwar 5.255.255.0/28 ta dubawa wani 1. Kuma awo na wannan hanya yayi daidai da awo da aka ƙayyade a cikin saitunan dubawa (ta tsohuwa 100).

Don hana ƙofa daga aika fakitin baya zuwa wurin dubawa wani 1, kuna buƙatar ƙirƙirar madaidaiciyar hanya zuwa adireshin jama'a-web-uwar garken zuwa dubawa core tare da metric ƙasa 100 (ƙananan ma'aunin dubawa wani 1) - to, ƙofar zai neme ta "cikin kanta".

2. A can, lokacin ƙirƙirar hanya, zaku iya saita Proxy ARP ta yadda ƙofa ta amsa buƙatun ARP. A shafin wakili na ARP, ƙara WAN interface.

ƙirƙirar hanya, amma kar a danna Ok, amma je zuwa shafin Proxy ARP na biyu:

ARP, ƙara abin dubawa wani 1:

3.A ƙarshe, mun matsa zuwa kafa NAT da Tacewar zaɓi (wannan an riga an bayyana shi a cikin cikakkun bayanai a ciki). umarni akan gidan yanar gizon dlink.ua).

Mun ƙirƙiri ka'idar SAT don haka a cikin fakiti daga dubawa wani 1 tare da adireshin inda aka nufa jama'a-web-uwar garken tashar jiragen ruwa http, wanda muka tsara hanya don dubawa core, maye gurbin adireshin da aka nufa tare da adireshin ciki na uwar garken mu uwar garken yanar gizo da tashar jiragen ruwa 8080.

4. Kuma mataki na gaba shine ba da izinin irin wannan fakitin - ƙirƙirar ƙa'idar Bada izini tare da sigogi iri ɗaya (ya dace don kwafi ka'idar SAT kuma maye gurbin aikin tare da Allow).

bayanin kulaA wannan yanayin, dokokin yakamata su kasance cikin wannan tsari: na farko SAT, sannan Bada:

Ka tuna cewa dole ne dokar SAT ta kasance sama da ƙa'idar izini. Wannan shi ne saboda gaskiyar cewa fakiti, lokacin da ya fada cikin ƙa'idar ba da izini ko ƙin yarda, ba ya ci gaba ta hanyar tebur "Dokokin".

dlink.ua
A wannan yanayin, ana kuma ƙirƙiri ƙa'idar izini don tashar tashar jama'a da adireshin:

Lura cewa ƙa'idar, dubawa da sigogin cibiyar sadarwa a cikin ƙa'idar izini daidai suke da a cikin ƙa'idar tare da aikin "SAT".

Da alama a gare ni cewa an riga an sarrafa fakitin ta hanyar tsarin SAT a layi a baya, kuma adireshin wurin da za a nufa da tashar jiragen ruwa sababbi ne, amma a'a, da alama maye gurbin yana faruwa ne bayan an aiwatar da duk wasu dokoki.

В umarnin daga D-link Ayyukan SAT an bayyana sosai; yana ba da dama masu ban sha'awa da yawa. Burina shi ne in kawo batun da ba a cikin wannan koyarwar da sauran umarnin. Ina fata umarnin za su kasance masu amfani da fahimta.

source: www.habr.com