Nganginomsebenzi - ukushicilela isevisi kumzila we-D-Link DFL ekhelini le-IP elingaboshiwe kusixhumi esibonakalayo se-wan. Kodwa angikwazanga ukuthola imiyalelo ku-inthanethi engaxazulula le nkinga, ngakho ngabhala eyami.
Idatha yokuqala (wonke amakheli athathwa njengesibonelo)
Iseva yewebhu kunethiwekhi yangaphakathi ene-IP: 192.168.0.2 (ichweba 8080).
Iqoqo lamakheli amhlophe angaphandle anikezwe umhlinzeki: , isango lomhlinzeki: 5.255.255.1, amakheli βethuβ asele 5.255.255.2-14.
Vumela amakheli 5.255.255.2-10 siyisebenzisela i-NAT nezinye izidingo. Isixhumanisi somhlinzeki sixhunywe embobeni wan1. Ukuze interface wan1 ikheli lixhunyiwe 5.255.255.2.
Umsebenzi: shicilela iseva yewebhu yangaphakathi ekhelini lomphakathi 5.255.255.11, ethekwini 80.
Isixazululo sifushane
Ukuze ushicilele isevisi ku-IP engahambisani nekheli lesixhumi esibonakalayo uzodinga:
- Khombisa kumzila ukuthi i-ip eshicilelwe kufanele iseshwe ngaphakathi kusetshenziswa .
- Ukushicilelwa ukuze i-router iphendule komakhelwane ukuthi ikheli elishicilelwe lingelalo.
- umthetho we-firewall (), okungaphakathi kwe-router ezoshintsha ikheli lendawo ekhelini leseva yokugcina.
- Umthetho we-Firewall (Vumela), ozovumela uxhumo olusuka kusixhumi esibonakalayo sangaphandle luye ekhelini elishicilelwe ngaphakathi komzila
Futhi manje okwengeziwe mayelana nephuzu ngalinye
Training
I. Okokuqala, ake sidale "Izinto" zazo zonke izidingo zethu (manje ngizobonisa inqubo ye-interface yewebhu, ngicabanga ukuthi labo abasebenza nge-console bazokwazi ukudlulisa izenzo ukuze baduduze imiyalo).
1. Engeza amakheli amabili e-ipv4 ebhukwini lamakheli:
iseva yewebhu = 192.168.0.2
iseva yewebhu yomphakathi = 5.255.255.11
2. Bese sengeza izimbobo ohlwini lwezinsizakalo:
int_http = isiqephu:8080
Imbobo isiqephu:80 isivele ikhona ohlwini lwezinsizakalo, ebizwa http, inomkhawulo ku 2000 amaseshini, umkhawulo ungashintshwa.
ohKuvele ukuthi asikho isidingo sokwengeza imbobo yeseva kunethiwekhi yangaphakathi, kodwa ngiyishiya ngoba... isibonelo singadingeka echwebeni lomphakathi, kodwa zengezwe ngendlela efanayo
II. Masiqhubekele ngqo esixazululweni.
Isigaba 1 ΠΈ 2 zingahlanganiswa, ngoba Uma ungeza umzila omile, kungenzeka ukuthi unikeze i-ARP ngokushesha. Ukukhuluma iqiniso, angizange ngilibone ngokushesha leli thuba futhi ngisethe ukushicilelwa ngesandla;
1. Ngakho-ke, uma ungakawadali inqwaba yamatafula omzila nemithetho yawo, khona-ke konke kungenziwa etafuleni eliyinhloko lomzila, libizwa ngokuthi. main.
Ithebula mainkuzoba nendlela ezenzakalelayo eya kunethiwekhi 5.255.255.0/28 nge-interface ngayinye wan1... KANYE yalo mzila ifana nemethrikhi ecaciswe kuzilungiselelo zokusebenzelana (ngokuzenzakalelayo 100).
Ukuze uvimbele isango ekuthumeleni amaphakethe emuva kusixhumi esibonakalayo wan1, udinga ukudala umzila ongashintshi oya ekhelini iseva yewebhu yomphakathi kusixhumi esibonakalayo core nge-metric encane 100 (imethrikhi yokusebenzelana encane wan1) - khona-ke isango lizolibheka "ngaphakathi kwalo".
2. Lapho, lapho udala umzila, ungalungisa i-Proxy ARP ukuze isango liphendule izicelo ze-ARP. Kuthebhu ye-Proxy ARP, engeza isixhumi esibonakalayo se-WAN.
dala umzila, kodwa ungachofozi okuthi KULUNGILE, kodwa hamba kuthebhu yesibili ye-ARP yommeleli:
ARP, engeza isixhumi esibonakalayo wan1:
3.Ekugcineni, siqhubekela phambili ekusetheni i-NAT kanye ne-firewall (lokhu sekuchazwe ngemininingwane eyanele ).
Sakha umthetho we-SAT ukuze kuphakethe kusuka kusixhumi esibonakalayo wan1 nekheli okuyiwa kulo iseva yewebhu yomphakathi ichweba lalapho uya khona http, esiyilungisele umzila wesixhumi esibonakalayo core, esikhundleni sekheli okuyiwa kulo ufake ikheli langaphakathi leseva yethu iseva yewebhu futhi itheku livuliwe 8080.
4. Futhi isinyathelo esilandelayo siwukuvumela iphakethe elinjalo - dala umthetho we-Vumela onemingcele efanayo (kulula ukukopisha umthetho we-SAT bese ubuyisela isenzo ngokuthi Vumela).
inothiKulokhu, imithetho kufanele ibe ngale ndlela: okokuqala SAT, bese uvumela:
Khumbula ukuthi umthetho we-SAT kumele ube ngaphezu komthetho wokuvumela. Lokhu kungenxa yokuthi iphakethe, uma liwela emthethweni ovumela noma ophikayo, aliqhubeki phambili ngethebula elithi "Imithetho".
Kulesi simo, umthetho wokuvumela uyadalelwa futhi ichweba lomphakathi nekheli:
Sicela uqaphele ukuthi iphrothokholi, isixhumi esibonakalayo kanye nemingcele yenethiwekhi kumthetho wokuvumela kuyafana nomthetho ngesenzo esithi βSATβ.
Kwakubonakala kimi ukuthi iphakethe lase licutshungulwe kakade umthetho we-SAT umugqa ngaphambili, futhi ikheli lendawo kanye nechweba bekukusha, kodwa cha, kubonakala sengathi ukushintshwa kwenzeka esikhathini esithile ngemva kokuba yonke eminye imithetho isicutshunguliwe.
Π Ukusebenza kwe-SAT kwembulwa ngokujulile; Umgomo wami kwakuwukuhlanganisa udaba olungahlanganiswanga kulo myalelo nakweminye imiyalelo. Ngithemba ukuthi imiyalelo izoba usizo futhi iqondakale.
Source: www.habr.com