{"id":53572,"date":"2019-12-05T00:00:00","date_gmt":"2019-12-04T21:00:00","guid":{"rendered":"https:\/\/prohoster.info\/blog\/blog_prohoster\/chto-proishodit-pri-soedineniyah-vnutri-i-vne-vpn-tunnelya"},"modified":"2020-02-18T14:01:29","modified_gmt":"2020-02-18T11:01:29","slug":"chto-proishodit-pri-soedineniyah-vnutri-i-vne-vpn-tunnelya","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-proishodit-pri-soedineniyah-vnutri-i-vne-vpn-tunnelya","title":{"rendered":"\u00c7far\u00eb ndodh gjat\u00eb lidhjeve brenda dhe jasht\u00eb tunelit VPN","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Nga mesazhet e ardhura n\u00eb sh\u00ebrbimin e mb\u00ebshtetjes teknike Tucha, lindin artikuj t\u00eb v\u00ebrtet\u00eb. K\u00ebshtu, s\u00eb fundmi nj\u00eb klient na u drejtua p\u00ebr t\u00eb sqaruar se \u00e7far\u00eb ndodh gjat\u00eb lidhjeve brenda tunelit VPN nd\u00ebrmjet zyr\u00ebs s\u00eb p\u00ebrdoruesit dhe mjedisit n\u00eb re, si dhe gjat\u00eb lidhjeve jasht\u00eb tunelit VPN. Prandaj, gjith\u00e7ka e shkruar m\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb let\u00ebr reale q\u00eb i d\u00ebrguam nj\u00ebrit nga klient\u00ebt tan\u00eb si p\u00ebrgjigje ndaj pyetjes s\u00eb tij. Sigurisht, ndryshuam adresat IP p\u00ebr t\u00eb mos e de-anonimizuar klientin. Por, po, sh\u00ebrbimi i mb\u00ebshtetjes teknike Tucha n\u00eb t\u00eb v\u00ebrtet\u00eb njihet p\u00ebr p\u00ebrgjigjet e tij t\u00eb zgjeruara dhe shkresat informuese. \ud83d\ude42<\/p>\n

Sigurisht, ne e kuptojm\u00eb se p\u00ebr shum\u00eb njer\u00ebz ky artikull nuk do t\u00eb jet\u00eb nj\u00eb zbulim. Por, duke pasur parasysh q\u00eb her\u00eb pas here n\u00eb Habr shfaqen artikuj p\u00ebr administrator\u00ebt e rinj, dhe gjithashtu duke marr\u00eb parasysh se ky artikull erdhi nga nj\u00eb let\u00ebr reale p\u00ebr nj\u00eb klient t\u00eb v\u00ebrtet\u00eb, ne do t\u00eb ndajm\u00eb k\u00ebt\u00eb informacion edhe k\u00ebtu. Ka nj\u00eb mund\u00ebsi t\u00eb madhe q\u00eb dikujt do t'i jet\u00eb i dobish\u00ebm.
\nPra ndaj shpjegojm\u00eb me holl\u00ebsi se \u00e7far\u00eb ndodh midis serverit n\u00eb cloud dhe zyr\u00ebs, n\u00ebse ato jan\u00eb t\u00eb lidhura me nj\u00eb rrjet site-to-site. Vlen t\u00eb theksohet se disa sh\u00ebrbime jan\u00eb t\u00eb disponueshme vet\u00ebm nga zyra, nd\u00ebrsa t\u00eb tjera \u2014 nga kudo n\u00eb internet.<\/p>\n

Menj\u00ebher\u00eb do t\u00eb sqarojm\u00eb se klienti yn\u00eb d\u00ebshiroi q\u00eb n\u00eb server 192.168.A.1<\/b> t\u00eb mund t\u00eb lidhet nga kudo p\u00ebrmes RDP, duke u lidhur me A.A.A.2:13389<\/b>, nd\u00ebrsa p\u00ebr sh\u00ebrbimet e tjera \u2014 vet\u00ebm nga zyra (192.168.B.0\/24)<\/b>, e cila \u00ebsht\u00eb e lidhur p\u00ebrmes VPN<\/a>. Po ashtu, klienti kishte vendosur nga fillimi q\u00eb te makina 192.168.B.2 <\/b>n\u00eb zyr\u00eb gjithashtu t\u00eb ishte mund\u00ebsia e lidhjes p\u00ebrmes RDP nga kudo, duke u lidhur me B.B.B.1:11111<\/b>. Ne ndihmuam n\u00eb organizimin e lidhjeve IPSec midis cloud-it dhe zyr\u00ebs, dhe specialisti IT i klientit filloi t\u00eb b\u00ebj\u00eb pyetje rreth asaj se \u00e7far\u00eb do ndodhte n\u00eb rastet e ndryshme. P\u00ebr t'iu p\u00ebrgjigjur t\u00eb gjitha k\u00ebtyre pyetjeve, ne, n\u00eb thelb, i shkruam gjith\u00e7ka q\u00eb mund t\u00eb lexoni m\u00eb posht\u00eb.
\n<\/a><\/noindex>
\n\"\u00c7far\u00eb<\/p>\n

Tani le t\u00eb shqyrtojm\u00eb k\u00ebto procese m\u00eb holl\u00ebsisht.<\/p>\n

<\/p>\n

Pozita e par\u00eb<\/h3>\n

\nKur di\u00e7ka d\u00ebrgohet nga 192.168.B.0\/24<\/b> n\u00eb 192.168.A.0\/24<\/b> apo nga 192.168.A.0\/24<\/b> n\u00eb 192.168.B.0\/24<\/b>, ajo kalon n\u00eb VPN. Kjo do t\u00eb thot\u00eb se ky paket \u00ebsht\u00eb shtes\u00eb e koduar dhe d\u00ebrgohet midis B.B.B.1<\/b> dhe A.A.A.1<\/b>, por 192.168.A.1<\/b> sheh paketin pik\u00ebrisht nga 192.168.B.1<\/b>. Ata mund t\u00eb komunikojn\u00eb me nj\u00ebri-tjetrin p\u00ebrmes protokollesh t\u00eb ndryshme. Po ashtu, p\u00ebrgjigjet d\u00ebrgohen p\u00ebrmes VPN, k\u00ebshtu q\u00eb paketi nga 192.168.A.1<\/b> p\u00ebr 192.168.B.1<\/b> do t\u00eb d\u00ebrgohet si nj\u00eb ESP-datagram nga A.A.A.1<\/b> n\u00eb B.B.B.1<\/b>, i cili n\u00eb an\u00ebn tjet\u00ebr do t\u00eb shnd\u00ebrrohet nga router-i, do t\u00eb nxjerr\u00eb at\u00eb paket\u00eb dhe do t\u2019ia jap\u00eb 192.168.B.1<\/b> si paket\u00eb nga 192.168.A.1<\/b>.<\/p>\n

Nj\u00eb shembull konkret:<\/p>\n

1) 192.168.B.1<\/b> i drejtohet 192.168.A.1<\/b>, d\u00ebshiron t\u00eb krijoj\u00eb nj\u00eb lidhje TCP me 192.168.A.1:3389<\/b>;<\/p>\n

2) 192.168.B.1<\/b> d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb p\u00ebr t\u00eb krijuar lidhjen nga 192.168.B.1:55555<\/b> (numri i portit p\u00ebr p\u00ebrgjigje e zgjedh vet\u00eb, k\u00ebtu dhe m\u00eb tej do t\u00eb p\u00ebrdorim numrin 55555 si nj\u00eb shembull t\u00eb till\u00eb porti, q\u00eb sistemi e zgjedh gjat\u00eb krijimit t\u00eb lidhjes TCP) n\u00eb 192.168.A.1:3389<\/b>;<\/p>\n

3) sistemi operativ q\u00eb funksionon n\u00eb kompjuterin me adres\u00eb 192.168.B.1<\/b>, vendos t\u00eb d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb n\u00eb adres\u00ebn gateway t\u00eb router-it (192.168.B.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr 192.168.A.1<\/b>, prandaj, ajo e d\u00ebrgon paket\u00ebn p\u00ebrmes rrug\u00ebs p\u00ebr default (0.0.0.0\/0);<\/p>\n

4) p\u00ebr k\u00ebt\u00eb ajo p\u00ebrpiqet t\u00eb gjej\u00eb adres\u00ebn MAC p\u00ebr adres\u00ebn IP 192.168.B.254 <\/b>n\u00eb tabel\u00ebn e cache-it t\u00eb protokollit ARP. N\u00ebse nuk e gjen, d\u00ebrgon nga adresa 192.168.B.1<\/b> nj\u00eb k\u00ebrkes\u00eb t\u00eb p\u00ebrgjithshme who-has n\u00eb rrjet 192.168.B.0\/24<\/b>. Kur 192.168.B.254<\/b> ajo i kthehet asaj me adres\u00ebn e tij MAC, sistemi d\u00ebrgon nj\u00eb paket\u00eb Ethernet p\u00ebr t\u00eb dhe e regjistron k\u00ebt\u00eb informacion n\u00eb tabel\u00ebn e tij t\u00eb cache;<\/p>\n

5) ruter i pranon k\u00ebt\u00eb paket\u00eb dhe vendos se ku ta d\u00ebrgoj\u00eb: ai ka nj\u00eb politik\u00eb t\u00eb shkruar, sipas s\u00eb cil\u00ebs duhet t\u00eb d\u00ebrgoj\u00eb t\u00eb gjitha paketat n\u00ebp\u00ebrmjet 192.168.B.0\/24<\/b> dhe 192.168.A.0\/24<\/b> lidhjes VPN midis B.B.B.1<\/b> dhe A.A.A.1<\/b>;<\/p>\n

6) ruter formon nj\u00eb datagram ESP nga B.B.B.1<\/b> n\u00eb A.A.A.1<\/b>;<\/p>\n

7) ruter vendos se kujt t'i d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb, ai e d\u00ebrgon at\u00eb te, p\u00ebr shembull, B.B.B.254<\/b> (gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit), sepse nuk ka rrug\u00eb m\u00eb specifike drejt A.A.A.1<\/b>, se 0.0.0.0\/0;<\/p>\n

8) ashtu si\u00e7 u tha tashm\u00eb, ai gjen adres\u00ebn MAC p\u00ebr B.B.B.254<\/b> dhe e d\u00ebrgon paket\u00ebn te gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit;<\/p>\n

9) ofruesit e sh\u00ebrbimit t\u00eb internetit transmetojn\u00eb n\u00ebp\u00ebr rrjetet e tyre datagramin ESP nga B.B.B.1<\/b> n\u00eb A.A.A.1<\/b>;<\/p>\n

10) ruter virtual n\u00eb A.A.A.1<\/b> pranon k\u00ebt\u00eb datagram, e dekripton at\u00eb dhe merr paket\u00ebn nga 192.168.B.1:55555<\/b> p\u00ebr 192.168.A.1:3389<\/b>;<\/p>\n

11) ruter virtual kontrollon kujt t'i d\u00ebrgoj\u00eb, gjen n\u00eb tabel\u00ebn e routingut rrjetin 192.168.A.0\/24<\/b> dhe e d\u00ebrgon at\u00eb menj\u00ebher\u00eb te 192.168.A.1<\/b>, pasi ka nj\u00eb nd\u00ebrfaqe 192.168.A.254\/24<\/b>;<\/p>\n

12) p\u00ebr k\u00ebt\u00eb, ruter virtual gjen adres\u00ebn MAC p\u00ebr 192.168.A.1<\/b> dhe ia d\u00ebrgon k\u00ebt\u00eb paket\u00eb p\u00ebrmes nj\u00eb rrjeti virtual Ethernet;<\/p>\n

13) 192.168.A.1<\/b> merr k\u00ebt\u00eb paket n\u00eb portin 3389, pranon t\u00eb vendos\u00eb lidhjen dhe formon paket\u00ebn n\u00eb p\u00ebrgjigje nga 192.168.A.1:3389<\/b> n\u00eb 192.168.B.1:55555<\/b>;<\/p>\n

14) sistemi i tij d\u00ebrgon k\u00ebt\u00eb paket\u00eb n\u00eb adres\u00ebn e gateway-it t\u00eb router-it virtual (192.168.A.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr 192.168.B.1<\/b>, nuk ka, dhe p\u00ebr k\u00ebt\u00eb arsye duhet t\u00eb d\u00ebrgoj\u00eb paket\u00ebn p\u00ebrmes rrug\u00ebs standarde (0.0.0.0\/0);<\/p>\n

15) ashtu si n\u00eb rastet e m\u00ebparshme, sistemi q\u00eb punon n\u00eb serverin me adres\u00ebn 192.168.A.1<\/b>, gjen adres\u00ebn MAC 192.168.A.254<\/b>, pasi ajo ndodhet n\u00eb t\u00eb nj\u00ebjtin rrjet me nd\u00ebrfaqen e saj 192.168.A.1\/24<\/b>;<\/p>\n

16) router-i virtual pranon k\u00ebt\u00eb paket\u00eb dhe vendos se ku ta d\u00ebrgoj\u00eb: ai ka nj\u00eb politik\u00eb, sipas s\u00eb cil\u00ebs duhet t\u00eb kaloj\u00eb t\u00eb gjitha paketat nd\u00ebrmjet 192.168.A.0\/24<\/b> dhe 192.168.B.0\/24<\/b> lidhjes VPN midis A.A.A.1<\/b> dhe B.B.B.1<\/b>;<\/p>\n

17) router-i virtual formon paket\u00ebn ESP nga A.A.A.1<\/b> p\u00ebr B.B.B.1<\/b>;<\/p>\n

18) router-i virtual vendos, kujt t'i d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb, e d\u00ebrgon n\u00eb A.A.A.254<\/b> (gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit, n\u00eb k\u00ebt\u00eb rast, jemi gjithashtu ne), sepse nuk ka rruge m\u00eb specifike p\u00ebr B.B.B.1<\/b>, se 0.0.0.0\/0;<\/p>\n

19) ofruesit e sh\u00ebrbimit t\u00eb internetit d\u00ebrgojn\u00eb p\u00ebrmes rrjeteve t\u00eb tyre paket\u00ebn ESP me A.A.A.1<\/b> n\u00eb B.B.B.1<\/b>;<\/p>\n

20) router-in n\u00eb B.B.B.1 <\/b>pranon k\u00ebt\u00eb datagram, e dekripton at\u00eb dhe merr paket\u00ebn nga 192.168.A.1:3389<\/b> p\u00ebr 192.168.B.1:55555<\/b>;<\/p>\n

21) ai e kupton se duhet ta d\u00ebrgoj\u00eb sakt\u00ebsisht n\u00eb 192.168.B.1<\/b>, pasi ai ndodhet n\u00eb t\u00eb nj\u00ebjt\u00ebn rrjet me t\u00eb, atij i krijohet nj\u00eb sh\u00ebnim p\u00ebrkat\u00ebs n\u00eb tabel\u00ebn e rrug\u00ebve, i cili e detyron at\u00eb t\u00eb d\u00ebrgoj\u00eb paketa p\u00ebr t\u00eb gjitha 192.168.B.0\/24<\/b> direkt;<\/p>\n

22) routeri gjen adres\u00ebn MAC p\u00ebr 192.168.B.1<\/b> dhe i d\u00ebrgon atij k\u00ebt\u00eb paket\u00eb;<\/p>\n

23) sistemi operacional n\u00eb kompjuterin me adres\u00eb 192.168.B.1<\/b> pranon paket\u00ebn nga 192.168.A.1:3389<\/b> p\u00ebr 192.168.B.1:55555<\/b> dhe nisin hapat e ardhsh\u00ebm p\u00ebr t\u00eb vendosur nj\u00eb lidhje TCP.<\/p>\n

N\u00eb k\u00ebt\u00eb shembull, \u00ebsht\u00eb p\u00ebrshkruar n\u00eb m\u00ebnyr\u00eb mjaft t\u00eb shkurt\u00ebr dhe t\u00eb thjesht\u00eb (dhe k\u00ebtu mund t\u00eb kujtojm\u00eb shum\u00eb detaje t\u00eb tjera) se \u00e7far\u00eb ndodh n\u00eb nivelet 2-4. Nivelet 1, 5-7 nuk jan\u00eb shqyrtuar.<\/p>\n

Pozita e dyt\u00eb<\/h3>\n

\nN\u00ebse me 192.168.B.0\/24<\/b> di\u00e7ka d\u00ebrgohet sakt\u00ebsisht n\u00eb A.A.A.2<\/b>, ajo shkon jo n\u00eb VPN, por direkt. K\u00ebshtu q\u00eb n\u00ebse p\u00ebrdoruesi nga adresa 192.168.B.1<\/b> i drejtohet A.A.A.2:13389<\/b>, kjo paket\u00eb d\u00ebrgohet nga adresa B.B.B.1<\/b>, kalon n\u00eb A.A.A.2<\/b>, dhe atje routeri e pranon at\u00eb dhe e d\u00ebrgon n\u00eb 192.168.A.1<\/b>. 192.168.A.1<\/b> nuk di gj\u00eb p\u00ebr 192.168.B.1<\/b>, ai sheh nj\u00eb paket\u00eb nga B.B.B.1<\/b>, pasi ai e d\u00ebrgoi at\u00eb. Prandaj, p\u00ebrgjigja p\u00ebr k\u00ebt\u00eb k\u00ebrkes\u00eb shkon p\u00ebrmes rrug\u00ebs s\u00eb zakonshme, ajo d\u00ebrgohet po ashtu nga adresa A.A.A.2 <\/b>dhe shkon n\u00eb B.B.B.1<\/b>, dhe ai router k\u00ebt\u00eb p\u00ebrgjigje e kthen n\u00eb 192.168.B.1<\/b>, ai sheh p\u00ebrgjigjen nga A.A.A.2<\/b>, t\u00eb cilit iu drejtua.<\/p>\n

Nj\u00eb shembull konkret:<\/p>\n

1) 192.168.B.1<\/b> i drejtohet A.A.A.2<\/b>, d\u00ebshiron t\u00eb krijoj\u00eb nj\u00eb lidhje TCP me A.A.A.2:13389<\/b>;<\/p>\n

2) 192.168.B.1<\/b> d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb p\u00ebr t\u00eb krijuar lidhjen nga 192.168.B.1:55555<\/b> (k\u00ebt\u00eb num\u00ebr, ashtu si n\u00eb shembullin e kaluar, mund t\u00eb jet\u00eb i ndrysh\u00ebm) n\u00eb A.A.A.2:13389<\/b>;<\/p>\n

3) sistemi operativ q\u00eb funksionon n\u00eb kompjuterin me adres\u00eb 192.168.B.1<\/b>, vendos t\u00eb d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb n\u00eb adres\u00ebn gateway t\u00eb router-it (192.168.B.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr A.A.A.2<\/b>, nuk ka, dhe kjo do t\u00eb thot\u00eb se ajo d\u00ebrgon paket\u00ebn p\u00ebrmes rrug\u00ebs s\u00eb paracaktuar (0.0.0.0\/0);<\/p>\n

4) p\u00ebr k\u00ebt\u00eb ajo, si\u00e7 e p\u00ebrmend\u00ebm n\u00eb shembullin e m\u00ebparsh\u00ebm, p\u00ebrpiqet t\u00eb gjej\u00eb adres\u00ebn MAC p\u00ebr adres\u00ebn IP 192.168.B.254<\/b> n\u00eb tabel\u00ebn e cache-it t\u00eb protokollit ARP. N\u00ebse nuk e gjen, d\u00ebrgon nga adresa 192.168.B.1<\/b> nj\u00eb k\u00ebrkes\u00eb t\u00eb p\u00ebrgjithshme who-has n\u00eb rrjet 192.168.B.0\/24<\/b>. Kur 192.168.B.254<\/b> ajo i kthehet asaj me adres\u00ebn e tij MAC, sistemi d\u00ebrgon nj\u00eb paket\u00eb Ethernet p\u00ebr t\u00eb dhe e regjistron k\u00ebt\u00eb informacion n\u00eb tabel\u00ebn e tij t\u00eb cache;<\/p>\n

5) routeri pranon k\u00ebt\u00eb paket\u00eb dhe vendos se ku ta d\u00ebrgoj\u00eb at\u00eb: ai ka nj\u00eb politik\u00eb t\u00eb caktuar, sipas s\u00eb cil\u00ebs ai duhet t\u00eb maskoj\u00eb (duke ndryshuar adres\u00ebn e kthimit) t\u00eb gjitha paketat nga 192.168.B.0\/24<\/b> p\u00ebr n\u00eb nyjat e tjera t\u00eb rrjetit Internet;<\/p>\n

6) sepse kjo politik\u00eb n\u00ebnkupton se adresa e kthimit duhet t\u00eb p\u00ebrputhet me adres\u00ebn m\u00eb t\u00eb ul\u00ebt n\u00eb nd\u00ebrfaqen p\u00ebrmes t\u00eb cil\u00ebs do t\u00eb d\u00ebrgohet kjo paket\u00eb, routeri s\u00eb pari vendos se kujt t'i d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb, dhe ai, si n\u00eb shembullin e m\u00ebparsh\u00ebm, duhet ta d\u00ebrgoj\u00eb at\u00eb n\u00eb B.B.B.254<\/b> (gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit), sepse nuk ka rrug\u00eb m\u00eb specifike drejt A.A.A.2<\/b>, se 0.0.0.0\/0;<\/p>\n

7) p\u00ebr k\u00ebt\u00eb arsye, routeri ndryshon adres\u00ebn e kthimit t\u00eb paket\u00ebs, pra paketa nga B.B.B.1:44444<\/b> (numri i portit sigurisht q\u00eb mund t\u00eb jet\u00eb tjet\u00ebr) n\u00eb A.A.A.2:13389<\/b>;<\/p>\n

8) routeri kujton se \u00e7far\u00eb b\u00ebri, k\u00ebshtu q\u00eb kur A.A.A.2:13389<\/b> p\u00ebr B.B.B.1:44444<\/b> kthehet nj\u00eb p\u00ebrgjigje, ai do t\u00eb dij\u00eb se duhet t\u00eb ndryshoj\u00eb adres\u00ebn dhe portin e marr\u00ebsit n\u00eb 192.168.B.1:55555<\/b>.<\/p>\n

9) tani routeri duhet ta d\u00ebrgoj\u00eb at\u00eb te rrjeti i ofruesit t\u00eb Internetit p\u00ebrmes B.B.B.254<\/b>, prandaj, ashtu si\u00e7 e kemi p\u00ebrmendur m\u00eb par\u00eb, ai gjen adres\u00ebn MAC p\u00ebr B.B.B.254 <\/b>dhe e d\u00ebrgon paket\u00ebn te gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit;<\/p>\n

10) ofruesit e internetit d\u00ebrgojn\u00eb n\u00ebp\u00ebr rrjetet e tyre nj\u00eb paket\u00eb prej B.B.B.1<\/b> n\u00eb A.A.A.2<\/b>;<\/p>\n

11) router virtual n\u00eb A.A.A.2<\/b> pranon k\u00ebt\u00eb paket\u00eb n\u00eb portin 13389;<\/p>\n

12) n\u00eb routerin virtual ka nj\u00eb rregull q\u00eb parashikon se paketat q\u00eb vijn\u00eb nga \u00e7do d\u00ebrgues n\u00eb k\u00ebt\u00eb port, duhet t\u00eb d\u00ebrgohen n\u00eb 192.168.A.1:3389<\/b>;<\/p>\n

13) routeri virtual gjen n\u00eb tabel\u00ebn e rrug\u00ebve rrjetin 192.168.A.0\/24<\/b> dhe e d\u00ebrgon direkt 192.168.A.<\/b>1, pasi ka nj\u00eb nd\u00ebrfaqe 192.168.A.254\/24<\/b>;<\/p>\n

14) p\u00ebr k\u00ebt\u00eb router virtual gjen adres\u00ebn MAC p\u00ebr 192.168.A.1<\/b> dhe ia d\u00ebrgon k\u00ebt\u00eb paket\u00eb p\u00ebrmes nj\u00eb rrjeti virtual Ethernet;<\/p>\n

15) 192.168.A.1<\/b> merr k\u00ebt\u00eb paket n\u00eb portin 3389, pranon t\u00eb vendos\u00eb lidhjen dhe formon paket\u00ebn n\u00eb p\u00ebrgjigje nga 192.168.A.1:3389<\/b> n\u00eb B.B.B.1:44444<\/b>;<\/p>\n

16) sistemi i tij d\u00ebrgon k\u00ebt\u00eb paket\u00eb n\u00eb adres\u00ebn e dergut t\u00eb routerit virtual (192.168.A.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr B.B.B.1<\/b>, nuk ka, dhe p\u00ebr k\u00ebt\u00eb arsye duhet t\u00eb d\u00ebrgoj\u00eb paket\u00ebn p\u00ebrmes rrug\u00ebs standarde (0.0.0.0\/0);<\/p>\n

17) po ashtu si n\u00eb rastet e m\u00ebparshme, sistemi q\u00eb punon n\u00eb serverin me adres\u00ebn 192.168.A.1<\/b>, gjen adres\u00ebn MAC 192.168.A.254<\/b>, pasi ajo ndodhet n\u00eb t\u00eb nj\u00ebjtin rrjet me nd\u00ebrfaqen e saj 192.168.A.1\/24<\/b>;<\/p>\n

18) routeri virtual pranon k\u00ebt\u00eb paket\u00eb. Duhet t\u00eb vihet n\u00eb dukje se ai kujton se ka marr\u00eb n\u00eb A.A.A.2:13389<\/b> paket\u00ebn nga B.B.B.1:44444<\/b> dhe i ka ndryshuar adres\u00ebn dhe portin e marr\u00ebsit n\u00eb 192.168.A.1:3389<\/b>, prandaj, p\u00ebr paket\u00ebn nga 192.168.A.1:3389 <\/b>p\u00ebr B.B.B.1:44444<\/b> ai e ndryshon adres\u00ebn e d\u00ebrguesit n\u00eb A.A.A.2:13389<\/b>;<\/p>\n

19) routeri virtual vendos se kujt t'i d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb, ai e d\u00ebrgon n\u00eb A.A.A.254<\/b> (gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit, n\u00eb k\u00ebt\u00eb rast, jemi gjithashtu ne), sepse nuk ka rruge m\u00eb specifike p\u00ebr B.B.B.1<\/b>, se 0.0.0.0\/0;<\/p>\n

20) ofruesit e internetit d\u00ebrgojn\u00eb n\u00ebp\u00ebr rrjetet e tyre nj\u00eb paket\u00eb me A.A.A.2<\/b> n\u00eb B.B.B.1<\/b>;<\/p>\n

21) routeri n\u00eb B.B.B.1<\/b> pranon k\u00ebt\u00eb paket\u00eb dhe kujton se, kur ai ndihmoi paket\u00ebn nga 192.168.B.1:55555<\/b> p\u00ebr A.A.A.2:13389<\/b>, ai ndryshoi adres\u00ebn dhe portin e d\u00ebrguesit n\u00eb B.B.B.1:44444<\/b>, kjo do t\u00eb thot\u00eb se \u00ebsht\u00eb p\u00ebrgjigja q\u00eb duhet t\u00eb d\u00ebrgohet n\u00eb 192.168.B.1:55555<\/b> (n\u00eb t\u00eb v\u00ebrtet\u00eb, ka edhe disa kontrollime t\u00eb tjera, por ne nuk do t\u00eb thellohemi n\u00eb k\u00ebt\u00eb);<\/p>\n

22) ai kupton se duhet ta d\u00ebrgoj\u00eb drejtp\u00ebrdrejt n\u00eb 192.168.B.1<\/b>, pasi ai \u00ebsht\u00eb n\u00eb t\u00eb nj\u00ebjtin rrjet me t\u00eb, k\u00ebshtu q\u00eb ka nj\u00eb regjistrim n\u00eb tabel\u00ebn e routing-ut q\u00eb b\u00ebn q\u00eb paketat t\u00eb d\u00ebrgohen p\u00ebr t\u00eb gjith\u00eb 192.168.B.0\/24 <\/b>direkt;<\/p>\n

23) router-i gjen adres\u00ebn MAC p\u00ebr 192.168.B.1<\/b> dhe i d\u00ebrgon atij k\u00ebt\u00eb paket\u00eb;<\/p>\n

24) sistemi operativ n\u00eb kompjuterin me adres\u00ebn 192.168.B.1<\/b> pranon paket\u00ebn nga A.A.A.2:13389<\/b> p\u00ebr 192.168.B.1:55555<\/b> dhe nisin hapat e ardhsh\u00ebm p\u00ebr t\u00eb vendosur nj\u00eb lidhje TCP.<\/p>\n

Duhet theksuar se n\u00eb k\u00ebt\u00eb rast kompjuteri me adres\u00ebn 192.168.B.1<\/b> nuk di asgj\u00eb p\u00ebr serverin me adres\u00ebn 192.168.A.1<\/b>, ai komunikon vet\u00ebm me A.A.A.2<\/b>. Po ashtu, serveri me adres\u00ebn 192.168.A.1<\/b> nuk di asgj\u00eb p\u00ebr kompjuterin me adres\u00ebn 192.168.B.1<\/b>. Ai beson se \u00ebsht\u00eb lidhur nga adresa B.B.B.1<\/b>, dhe nuk di asgj\u00eb tjet\u00ebr, k\u00ebshtu p\u00ebr t\u00eb th\u00ebn\u00eb.<\/p>\n

Duhet gjithashtu theksuar se n\u00eb rast se ky kompjuter i drejtohet A.A.A.2:1540<\/b>, lidhja nuk do t\u00eb krijohet, sepse p\u00ebrcaktimi i lidhjeve n\u00eb portin 1540 nuk \u00ebsht\u00eb i konfiguruar n\u00eb router-in virtual, edhe n\u00ebse n\u00eb ndonj\u00eb server n\u00eb rrjetin virtual 192.168.A.0\/24<\/b> (p.sh., n\u00eb serverin me adres\u00ebn 192.168.A.1<\/b>) dhe ka ndonj\u00eb sh\u00ebrbim q\u00eb pret lidhje n\u00eb k\u00ebt\u00eb port. N\u00ebse p\u00ebrdoruesi i kompjuterit me adres\u00eb 192.168.B.1<\/b> \u00ebsht\u00eb jasht\u00ebzakonisht i nevojsh\u00ebm t\u00eb vendos\u00eb lidhjen me k\u00ebt\u00eb sh\u00ebrbim, ai duhet t\u00eb p\u00ebrdor\u00eb VPN, dmth t\u00eb lidhet drejtp\u00ebrdrejt me 192.168.A.1:1540<\/b>.<\/p>\n

Duhet t\u00eb theksohet se \u00e7do p\u00ebrpjekje p\u00ebr t\u00eb vendosur lidhjen me A.A.A.1<\/b> (p\u00ebrve\u00e7 lidhjes IPSec nga ana e B.B.B.1<\/b> nuk do t\u00eb jet\u00eb e suksesshme. T\u00eb gjitha p\u00ebrpjekjet p\u00ebr t\u00eb vendosur lidhje me A.A.A.2<\/b>, p\u00ebrve\u00e7 lidhjeve me portin 13389, gjithashtu nuk do t\u00eb jen\u00eb t\u00eb suksesshme.
\nPo ashtu, t\u00eb theksojm\u00eb se n\u00ebse tek A.A.A.2 <\/b>k\u00ebrkon ndonj\u00eb tjet\u00ebr (p.sh., C.C.C.C), gjith\u00e7ka q\u00eb \u00ebsht\u00eb e sh\u00ebnuar n\u00eb pik\u00ebt 10-20 do t\u00eb jet\u00eb e lidhur edhe me t\u00eb. \u00c7far\u00eb ndodh deri dhe pas k\u00ebsaj varet nga \u00e7far\u00eb ndodhet pas k\u00ebtij C.C.C.C. Ne nuk kemi nj\u00eb informacion t\u00eb till\u00eb, ndaj rekomandojm\u00eb t\u00eb k\u00ebrkoni konsultime me administrator\u00ebt e nodit me adres\u00ebn C.C.C.C.<\/p>\n

Pozita e tret\u00eb<\/h3>\n

\nDhe, p\u00ebrkundrazi, n\u00ebse nga 192.168.A.1 <\/b>d\u00ebrgohet ndonj\u00eb gj\u00eb n\u00eb ndonj\u00eb port q\u00eb \u00ebsht\u00eb konfiguruar p\u00ebr t\u00eb kaluar brenda n\u00eb B.B.B.1 (p.sh., 11111), ajo gjithashtu nuk kalon n\u00ebp\u00ebr VPN, por thjesht l\u00ebshohet nga A.A.A.1<\/b> dhe shkon n\u00eb B.B.B.1<\/b>, nd\u00ebrsa ai e kalon diku tjet\u00ebr, p\u00ebr shembull, 192.168.B.2:3389<\/b>. Ai e sheh k\u00ebt\u00eb paket\u00eb jo nga 192.168.A.1<\/b>, por nga A.A.A.1<\/b>. Dhe, kur 192.168.B.2<\/b> p\u00ebrgjigjet, paketa shkon nga B.B.B.1<\/b> n\u00eb A.A.A.1,<\/b> dhe m\u00eb von\u00eb shkon te iniciatori i lidhjes \u2014 192.168.A.1<\/b>.<\/p>\n

Nj\u00eb shembull konkret:<\/p>\n

1) 192.168.A.1<\/b> i drejtohet B.B.B.1<\/b>, d\u00ebshiron t\u00eb krijoj\u00eb nj\u00eb lidhje TCP me B.B.B.1:11111<\/b>;<\/p>\n

2) 192.168.A.1<\/b> d\u00ebrgon nj\u00eb k\u00ebrkes\u00eb p\u00ebr t\u00eb krijuar lidhjen nga 192.168.A.1:55555<\/b> (k\u00ebt\u00eb num\u00ebr, ashtu si n\u00eb shembullin e kaluar, mund t\u00eb jet\u00eb i ndrysh\u00ebm) n\u00eb B.B.B.1:11111<\/b>;<\/p>\n

3) sistemi operativ q\u00eb punon n\u00eb serverin me adres\u00ebn 192.168.A.1<\/b>, vendos t\u00eb d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb n\u00eb adres\u00ebn gateway t\u00eb router-it (192.168.A.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr B.B.B.1<\/b>, prandaj, ajo e d\u00ebrgon paket\u00ebn p\u00ebrmes rrug\u00ebs p\u00ebr default (0.0.0.0\/0);<\/p>\n

4) p\u00ebr k\u00ebt\u00eb, si\u00e7 e p\u00ebrmend\u00ebm n\u00eb shembujt e m\u00ebparsh\u00ebm, ai p\u00ebrpiqet t\u00eb gjej\u00eb adres\u00ebn MAC p\u00ebr adres\u00ebn IP 192.168.A.254<\/b> n\u00eb tabel\u00ebn e cache-it t\u00eb protokollit ARP. N\u00ebse nuk e gjen, d\u00ebrgon nga adresa 192.168.A.1<\/b> nj\u00eb k\u00ebrkes\u00eb t\u00eb p\u00ebrgjithshme who-has n\u00eb rrjet 192.168.A.0\/24<\/b>. Kur 192.168.A.254<\/b> n\u00eb p\u00ebrgjigje, i d\u00ebrgon adres\u00ebn e tij MAC, sistemi d\u00ebrgon paket\u00ebn Ethernet p\u00ebr t\u00eb dhe regjistron k\u00ebt\u00eb informacion n\u00eb tabel\u00ebn e tij t\u00eb cache-it;<\/p>\n

5) routeri virtual pranon k\u00ebt\u00eb paket\u00eb dhe vendos se ku ta d\u00ebrgoj\u00eb: ai ka t\u00eb shkruar nj\u00eb politik\u00eb, sipas s\u00eb cil\u00ebs duhet t\u00eb b\u00ebj\u00eb NAT (t\u00eb z\u00ebvend\u00ebsoj\u00eb adres\u00ebn p\u00ebrkat\u00ebse) p\u00ebr t\u00eb gjitha paketat nga 192.168.A.0\/24<\/b> p\u00ebr n\u00eb nyjat e tjera t\u00eb rrjetit Internet;<\/p>\n

6) duke qen\u00eb se kjo politik\u00eb parashikon q\u00eb adresa p\u00ebrkat\u00ebse duhet t\u00eb p\u00ebrputhet me adres\u00ebn m\u00eb t\u00eb ul\u00ebt n\u00eb nd\u00ebrfaqen p\u00ebrmes s\u00eb cil\u00ebs do t\u00eb d\u00ebrgohet kjo paket\u00eb, routeri virtual fillimisht vendos se kujt sakt\u00ebsisht t'i d\u00ebrgoj\u00eb k\u00ebt\u00eb paket\u00eb, dhe ai, si n\u00eb shembullin e m\u00ebparsh\u00ebm, duhet ta d\u00ebrgoj\u00eb n\u00eb A.A.A.254<\/b> (gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit, n\u00eb k\u00ebt\u00eb rast, jemi gjithashtu ne), sepse nuk ka rruge m\u00eb specifike p\u00ebr B.B.B.1<\/b>, se 0.0.0.0\/0;<\/p>\n

7) pra, routeri virtual nd\u00ebrron adres\u00ebn p\u00ebrkat\u00ebse t\u00eb paket\u00ebs, tani kjo \u00ebsht\u00eb nj\u00eb paket\u00eb nga A.A.A.1:44444<\/b> (numri i portit sigurisht q\u00eb mund t\u00eb jet\u00eb tjet\u00ebr) n\u00eb B.B.B.1:11111<\/b>;<\/p>\n

8) routeri virtual regjistron se \u00e7far\u00eb ka b\u00ebr\u00eb, p\u00ebr k\u00ebt\u00eb arsye, kur nga B.B.B.1:11111<\/b> p\u00ebr A.A.A.1:44444<\/b> kthehet nj\u00eb p\u00ebrgjigje, ai do t\u00eb dij\u00eb se duhet t\u00eb ndryshoj\u00eb adres\u00ebn dhe portin e marr\u00ebsit n\u00eb 192.168.A.1:55555<\/b>.<\/p>\n

9) tani duhet q\u00eb router virtual ta d\u00ebrgoj\u00eb n\u00eb rrjetin e ofruesit t\u00eb internetit p\u00ebrmes A.A.A.254<\/b>, ashtu si\u00e7 e p\u00ebrmend\u00ebm m\u00eb par\u00eb, ai gjen adres\u00ebn MAC p\u00ebr A.A.A.254 <\/b>dhe e d\u00ebrgon paket\u00ebn te gateway i ofruesit t\u00eb sh\u00ebrbimit t\u00eb internetit;<\/p>\n

10) ofruesit e internetit d\u00ebrgojn\u00eb n\u00ebp\u00ebr rrjetet e tyre nj\u00eb paket\u00eb prej A.A.A.1 n\u00eb B.B.B.1<\/b>;<\/p>\n

11) routeri n\u00eb B.B.B.1<\/b> pranon k\u00ebt\u00eb paket n\u00eb portin 11111;<\/p>\n

12) n\u00eb routerin virtual ekziston nj\u00eb rregull q\u00eb parashikon se paketat q\u00eb vijn\u00eb nga \u00e7do d\u00ebrgues n\u00eb k\u00ebt\u00eb port duhet t\u00eb d\u00ebrgohen n\u00eb 192.168.B.2:3389<\/b>;<\/p>\n

13) routeri gjen n\u00eb tabel\u00ebn e rrug\u00ebs rrjetin 192.168.B.0\/24<\/b> dhe e d\u00ebrgon at\u00eb menj\u00ebher\u00eb te 192.168.B.2<\/b>, pasi ka nj\u00eb nd\u00ebrfaqe 192.168.B.254\/24<\/b>;<\/p>\n

14) p\u00ebr k\u00ebt\u00eb router virtual gjen adres\u00ebn MAC p\u00ebr 192.168.B.2<\/b> dhe ia d\u00ebrgon k\u00ebt\u00eb paket\u00eb p\u00ebrmes nj\u00eb rrjeti virtual Ethernet;<\/p>\n

15) 192.168.B.2<\/b> merr k\u00ebt\u00eb paket n\u00eb portin 3389, pranon t\u00eb vendos\u00eb lidhjen dhe formon paket\u00ebn n\u00eb p\u00ebrgjigje nga 192.168.B.2:3389<\/b> n\u00eb A.A.A.1:44444<\/b>;<\/p>\n

16) sistemi i tij e d\u00ebrgon k\u00ebt\u00eb paket n\u00eb adres\u00ebn e port\u00ebs s\u00eb routerit (192.168.B.254<\/b> n\u00eb rastin ton\u00eb), sepse nuk ka rute m\u00eb specifike p\u00ebr A.A.A.1<\/b>, nuk ka, dhe p\u00ebr k\u00ebt\u00eb arsye duhet t\u00eb d\u00ebrgoj\u00eb paket\u00ebn p\u00ebrmes rrug\u00ebs standarde (0.0.0.0\/0);<\/p>\n

17) ashtu si\u00e7 ndodhi n\u00eb rastet e m\u00ebparshme, sistemi q\u00eb funksionon n\u00eb kompjuterin me adres\u00eb 192.168.B.2<\/b>, gjen adres\u00ebn MAC 192.168.B.254<\/b>, pasi ajo ndodhet n\u00eb t\u00eb nj\u00ebjtin rrjet me nd\u00ebrfaqen e saj 192.168.B.2\/24<\/b>;<\/p>\n

18) routeri pranon k\u00ebt\u00eb paket. Duhet theksuar se ai mban mend se e mori n\u00eb B.B.B.1:11111<\/b> paket\u00ebn nga A.A.A.1 <\/b>dhe i ka ndryshuar adres\u00ebn dhe portin e marr\u00ebsit n\u00eb 192.168.B.2:3389<\/b>, prandaj, p\u00ebr paket\u00ebn nga 192.168.B.2:3389<\/b> p\u00ebr A.A.A.1:44444<\/b> ai e ndryshon adres\u00ebn e d\u00ebrguesit n\u00eb B.B.B.1:11111<\/b>;<\/p>\n

19) routeri vendos se kujt t'ia d\u00ebrgoj\u00eb k\u00ebt\u00eb paket. Ai e d\u00ebrgon at\u00eb n\u00eb, p\u00ebr shembull, B.B.B.254 <\/b>(portin e ofruesit t\u00eb internetit, adres\u00ebn e sakt\u00eb t\u00eb cilit ne nuk e dim\u00eb), sepse nuk ka rrug\u00eb m\u00eb specifike p\u00ebr A.A.A.1<\/b>, se 0.0.0.0\/0;<\/p>\n

20) ofruesit e internetit d\u00ebrgojn\u00eb n\u00ebp\u00ebr rrjetet e tyre nj\u00eb paket\u00eb me B.B.B.1<\/b> n\u00eb A.A.A.1<\/b>;<\/p>\n

21) routerin virtual n\u00eb A.A.A.1 <\/b>pranon k\u00ebt\u00eb paket\u00eb dhe kujton se, kur ai ndihmoi paket\u00ebn nga 192.168.A.1:55555<\/b> p\u00ebr B.B.B.1:11111<\/b>, ai ndryshoi adres\u00ebn dhe portin e d\u00ebrguesit n\u00eb A.A.A.1:44444<\/b>. K\u00ebshtu, kjo \u00ebsht\u00eb p\u00ebrgjigja q\u00eb duhet d\u00ebrguar n\u00eb 192.168.A.1:55555<\/b> (n\u00eb t\u00eb v\u00ebrtet\u00eb, ashtu si\u00e7 e p\u00ebrmend\u00ebm n\u00eb shembullin e m\u00ebparsh\u00ebm, ka edhe disa kontrollime t\u00eb tjera, por k\u00ebt\u00eb her\u00eb ne nuk do t\u00eb thellohemi n\u00eb to);<\/p>\n

22) ai e kupton se duhet ta transferoj\u00eb drejtp\u00ebrdrejt n\u00eb 192.168.A.1<\/b>, pasi ai \u00ebsht\u00eb n\u00eb t\u00eb nj\u00ebjt\u00ebn rrjet, do t\u00eb thot\u00eb q\u00eb ai ka nj\u00eb rekord p\u00ebrkat\u00ebs n\u00eb tabel\u00ebn e routing-ut q\u00eb e b\u00ebn at\u00eb t\u00eb d\u00ebrgoj\u00eb paketa p\u00ebr t\u00eb gjith\u00eb 192.168.A.0\/24<\/b> direkt;<\/p>\n

23) router-i gjen adres\u00ebn MAC p\u00ebr 192.168.A.1<\/b> dhe i d\u00ebrgon atij k\u00ebt\u00eb paket\u00eb;<\/p>\n

24) sistemi operativ n\u00eb serverin me adres\u00ebn 192.168.A.1<\/b> pranon paket\u00ebn nga B.B.B.1:1111<\/b>1 p\u00ebr 192.168.A.1:55555 <\/b>dhe nisin hapat e ardhsh\u00ebm p\u00ebr t\u00eb vendosur nj\u00eb lidhje TCP.<\/p>\n

Po ashtu, si\u00e7 ndodhi n\u00eb rastin e m\u00ebparsh\u00ebm, n\u00eb k\u00ebt\u00eb rast serveri me adres\u00eb 192.168.A.1<\/b> nuk di asgj\u00eb p\u00ebr kompjuterin me adres\u00ebn 192.168.B.1<\/b>, ai komunikon vet\u00ebm me B.B.B.1<\/b>. Kompjuteri me adres\u00ebn 192.168.B.1<\/b> as nuk e di asgj\u00eb p\u00ebr serverin me adres\u00ebn 192.168.A.1<\/b>. Ai beson se \u00ebsht\u00eb lidhur nga adresa A.A.A.1<\/b>, dhe gjith\u00eb e kaluar \u00ebsht\u00eb e fshehur prej tij.<\/p>\n

P\u00ebrfundim<\/h3>\n

\nK\u00ebshtu ndodhin gj\u00ebrat n\u00eb lidhjet brenda tunelit VPN midis zyr\u00ebs s\u00eb klientit dhe mjedisit n\u00eb cloud, si dhe n\u00eb lidhjet jasht\u00eb tunelit VPN. N\u00ebse keni pyetje ose keni nevoj\u00eb p\u00ebr ndihm\u00ebn ton\u00eb p\u00ebr zgjidhjet n\u00eb cloud, na kontaktoni 24\/7.<\/a><\/noindex>
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0418\u0437 \u043f\u0438\u0441\u0435\u043c \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Tucha \u0440\u043e\u0436\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438. \u0422\u0430\u043a, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043a \u043d\u0430\u043c \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043c\u0435\u0436\u0434\u0443 \u043e\u0444\u0438\u0441\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0441\u0440\u0435\u0434\u043e\u0439 \u0432 \u043e\u0431\u043b\u0430\u043a\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 \u0432\u043d\u0435 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u044f. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0435\u0441\u044c \u0442\u0435\u043a\u0441\u0442, \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u043d\u0438\u0436\u0435, \u2014 \u044d\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":53573,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-53572","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47\u00c7far\u00eb ndodh gjat\u00eb lidhjeve brenda dhe jasht\u00eb VPN-tunelit | ProHoster","description":"Nga mesazhet n\u00eb sh\u00ebrbimin e mb\u00ebshtetjes teknike Tucha lindin artikuj t\u00eb v\u00ebrtet\u00eb. S\u00eb fundi, nj\u00eb klient na k\u00ebrkoi t\u00eb sqarojm\u00eb se \u00e7far\u00eb ndodh gjat\u00eb lidhjeve brenda VPN-tunelit midis zyr\u00ebs s\u00eb p\u00ebrdoruesit dhe ambientit n\u00eb re, si dhe gjat\u00eb lidhjeve jasht\u00eb VPN-tunelit. Prandaj, i gjith\u00eb teksti i renditur m\u00eb posht\u00eb \u00ebsht\u00eb nj\u00eb let\u00ebr reale q\u00eb i d\u00ebrguam nj\u00ebrit prej klient\u00ebve tan\u00eb n\u00eb p\u00ebrgjigje t\u00eb","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-proishodit-pri-soedineniyah-vnutri-i-vne-vpn-tunnelya","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0427\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 \u0438 \u0432\u043d\u0435 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u044f | ProHoster","og:description":"\u0418\u0437 \u043f\u0438\u0441\u0435\u043c \u0432 \u0441\u043b\u0443\u0436\u0431\u0443 \u0442\u0435\u0445\u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0438 Tucha \u0440\u043e\u0436\u0434\u0430\u044e\u0442\u0441\u044f \u043d\u0430\u0441\u0442\u043e\u044f\u0449\u0438\u0435 \u0441\u0442\u0430\u0442\u044c\u0438. \u0422\u0430\u043a, \u043d\u0435\u0434\u0430\u0432\u043d\u043e \u043a \u043d\u0430\u043c \u043e\u0431\u0440\u0430\u0442\u0438\u043b\u0441\u044f \u043a\u043b\u0438\u0435\u043d\u0442 \u0441 \u0437\u0430\u043f\u0440\u043e\u0441\u043e\u043c \u0440\u0430\u0437\u044a\u044f\u0441\u043d\u0438\u0442\u044c, \u0447\u0442\u043e \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u043f\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 \u0432\u043d\u0443\u0442\u0440\u0438 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043c\u0435\u0436\u0434\u0443 \u043e\u0444\u0438\u0441\u043e\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0438 \u0441\u0440\u0435\u0434\u043e\u0439 \u0432 \u043e\u0431\u043b\u0430\u043a\u0435, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0438 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u044f\u0445 \u0432\u043d\u0435 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u044f. \u041f\u043e\u044d\u0442\u043e\u043c\u0443 \u0432\u0435\u0441\u044c \u0442\u0435\u043a\u0441\u0442, \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0439 \u043d\u0438\u0436\u0435, \u2014 \u044d\u0442\u043e \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0435 \u043f\u0438\u0441\u044c\u043c\u043e, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u043c\u044b \u043e\u0442\u043f\u0440\u0430\u0432\u0438\u043b\u0438 \u043e\u0434\u043d\u043e\u043c\u0443 \u0438\u0437 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0432 \u043e\u0442\u0432\u0435\u0442 \u043d\u0430","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/chto-proishodit-pri-soedineniyah-vnutri-i-vne-vpn-tunnelya","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-12-04T21:00:00+00:00","article:modified_time":"2020-02-18T11:01:29+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"53572","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 15:17:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 20:22:50","updated":"2026-02-04 15:17:19"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53572","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=53572"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53572\/revisions"}],"predecessor-version":[{"id":156714,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/53572\/revisions\/156714"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/53573"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=53572"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=53572"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=53572"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}