Siyakwamukela esifundweni 8. Isifundo sibaluleke kakhulu, ngoba... Lapho usuqedile, uzokwazi ukumisa ukufinyelela kwe-inthanethi kwabasebenzisi bakho! Kumelwe ngivume ukuthi abantu abaningi bayayeka ukusetha kuleli phuzu π Kodwa akuwona omunye wabo! Futhi sisenezinto eziningi ezithakazelisayo ezizayo. Futhi manje esihlokweni sesifundo sethu.
Njengoba mhlawumbe usuqagele, namuhla sizokhuluma nge-NAT. Nginesiqiniseko sokuthi wonke umuntu obuka lesi sifundo uyazi ukuthi iyini i-NAT. Ngakho-ke, ngeke sichaze ngokuningiliziwe ukuthi isebenza kanjani. Ngizophinda futhi futhi ukuthi i-NAT iwubuchwepheshe bokuhumusha ikheli obasungulelwa ukonga βimali emhlophe,β i.e. ama-IP omphakathi (lawo makheli ahanjiswa ku-inthanethi).
Esifundweni esedlule, cishe usubonile ukuthi i-NAT iyingxenye yenqubomgomo Yokulawula Ukufinyelela. Lokhu kunengqondo impela. Ku-SmartConsole, izilungiselelo ze-NAT zibekwe kuthebhu ehlukile. Nakanjani sizobheka lapho namuhla. Ngokuvamile, kulesi sifundo sizoxoxa ngezinhlobo ze-NAT, silungise ukufinyelela kwe-inthanethi futhi sibheke isibonelo sakudala sokudlulisa imbobo. Labo. ukusebenza okuvame ukusetshenziswa ezinkampanini. Ake siqale.
Izindlela ezimbili zokumisa i-NAT
I-Check Point isekela izindlela ezimbili zokumisa i-NAT: I-NAT ezenzakalelayo ΠΈ I-NAT eyenziwe ngesandla. Ngaphezu kwalokho, ngayinye yalezi zindlela kunezinhlobo ezimbili zokuhumusha: Fihla i-NAT ΠΈ I-NAT engashintshi. Ngokuvamile kubonakala sengathi lesi sithombe:
Ngiyaqonda ukuthi cishe yonke into ibonakala iyinkimbinkimbi kakhulu manje, ngakho-ke ake sibheke uhlobo ngalunye ngokuningiliziwe okwengeziwe.
I-NAT ezenzakalelayo
Lena indlela eshesha kakhulu futhi elula. Ukulungisa i-NAT kwenziwa ngokuchofoza kabili nje. Odinga ukukwenza nje ukuvula izakhiwo zento oyifunayo (kungaba isango, inethiwekhi, umsingathi, njll.), iya kuthebhu ye-NAT bese uhlola okuthi βEngeza imithetho yokuhumusha ikheli ngokuzenzakalelayo" Lapha uzobona inkambu - indlela yokuhumusha. Kukhona, njengoba kushiwo ngenhla, ezimbili zazo.
1. Aitomatic Fihla NAT
Ngokuzenzakalelayo ithi Fihla. Labo. kulokhu, inethiwekhi yethu "izocasha" ngemuva kwekheli le-IP lomphakathi. Kulokhu, ikheli lingathathwa ku-interface yangaphandle yesango, noma ungacacisa elinye. Lolu hlobo lwe-NAT luvame ukubizwa ngokuthi i-dynamic noma abaningi-kuya-koyedwa, ngoba Amakheli amaningana angaphakathi ahunyushwa kwelilodwa langaphandle. Ngokwemvelo, lokhu kungenzeka ngokusebenzisa izimbobo ezahlukene lapho usakaza. Fihla i-NAT isebenza kuphela ohlangothini olulodwa (kusuka ngaphakathi kuye ngaphandle) futhi ilungele amanethiwekhi endawo lapho udinga nje ukunikeza ukufinyelela ku-inthanethi. Uma ithrafikhi iqalwa kunethiwekhi yangaphandle, i-NAT ngokwemvelo ngeke isebenze. Kuvele kube ukuvikela okwengeziwe kwamanethiwekhi angaphakathi.
2. I-Automatic Static NAT
Fihla i-NAT ilungele wonke umuntu, kodwa mhlawumbe udinga ukunikeza ukufinyelela kusuka kunethiwekhi yangaphandle kuya kwenye iseva yangaphakathi. Isibonelo, kuseva ye-DMZ, njengesibonelo sethu. Kulokhu, i-Static NAT ingasisiza. Kulula futhi ukusetha. Kwanele ukushintsha indlela yokuhumusha ibe yi-Static kuzinto zento futhi ucacise ikheli lasesizindeni se-inthanethi elizosetshenziselwa i-NAT (bona isithombe esingenhla). Labo. uma othile ovela kunethiwekhi yangaphandle efinyelela leli kheli (kunoma iyiphi imbobo!), isicelo sizodluliselwa kuseva ene-IP yangaphakathi. Ngaphezu kwalokho, uma iseva ngokwayo iya ku-inthanethi, i-IP yayo izophinde ishintshele ekhelini esilishilo. Labo. Lena yi-NAT kuzo zombili izinkomba. Ibizwa nangokuthi ngakunye futhi kwesinye isikhathi isetshenziselwa amaseva omphakathi. Kungani βngezinye izikhathiβ? Ngoba ine-drawback eyodwa enkulu - ikheli le-IP lomphakathi ligcwele ngokuphelele (wonke amachweba). Awukwazi ukusebenzisa ikheli elilodwa lomphakathi kumaseva angaphakathi ahlukene (anezimbobo ezihlukene). Isibonelo, i-HTTP, i-FTP, i-SSH, i-SMTP, njll. I-NAT ye-Manual ingaxazulula le nkinga.
I-NAT eyenziwe ngesandla
Okukhethekile kwe-Manual NAT ukuthi udinga ukuzidalela imithetho yokuhumusha ngokwakho. Kuthebhu efanayo ye-NAT kokuthi Inqubomgomo Yokulawula Ukufinyelela. Ngesikhathi esifanayo, i-Manual NAT ikuvumela ukuthi udale imithetho eyinkimbinkimbi yokuhumusha. Izinkambu ezilandelayo ziyatholakala kuwe: Umthombo Wangempela, Indawo Yoqobo, Amasevisi Oqobo, Umthombo Ohunyushiwe, Indawo Ehunyushwa Ngayo, Amasevisi Ahunyushiwe.
Kukhona futhi izinhlobo ezimbili ze-NAT ezingenzeka lapha - Fihla futhi I-Static.
1. Fihla i-NAT ngesandla
Fihla i-NAT kulokhu ingasetshenziswa ezimweni ezahlukene. Izibonelo ezimbalwa:
- Lapho ufinyelela insiza ethile evela kunethiwekhi yendawo, ufuna ukusebenzisa ikheli lokusakaza elihlukile (elihlukile kunalelo elisetshenziselwa zonke ezinye izimo).
- Kunenani elikhulu lamakhompyutha kunethiwekhi yendawo. I-Automatic Fihla i-NAT ngeke isebenze lapha, ngoba... Ngalokhu kusetha, kungenzeka ukusetha ikheli le-IP lomphakathi elilodwa kuphela, ngemuva kwalokho amakhompyutha "azocasha". Kungenzeka kungabi nezimbobo ezanele zokusakaza. Kukhona, njengoba ukhumbula, kancane kuka 65 ayizinkulungwane. Ngaphezu kwalokho, ikhompuyutha ngayinye ingakwazi ukukhiqiza amakhulukhulu amaseshini. I-Manual Fihla i-NAT ikuvumela ukuthi usethe inqwaba yamakheli e-IP omphakathi kunkambu yomthombo ohunyushiwe. Ngaleyo ndlela kwandisa inani lokuhumusha okungenzeka kwe-NAT.
2.I-Manual Static NAT
I-NAT emile isetshenziswa kaningi uma udala imithetho yokuhumusha. Isibonelo sakudala ukudlulisa ngembobo. Isimo lapho ikheli le-IP lomphakathi (elingase libe ngelosango) lifinyelelwa kunethiwekhi yangaphandle echwebeni elithile futhi isicelo sihunyushwa kusisetshenziswa sangaphakathi. Emsebenzini wethu waselabhorethri, sizodlulisela ichweba elingu-80 kuseva ye-DMZ.
Isifundo sevidiyo
Hlala ubukele ukuze uthole okwengeziwe futhi ujoyine yethu π
Source: www.habr.com