Add-VpnConnection: me ya sa PSK ke karyewa kuma me ya sa adireshi ke zama
PowerShell na fadada maɓallin da aka riga aka raba a cikin waƙafi biyu kafin cmdlet ya adana shi, kuma rami da ke aiki yana riƙe da tsohon adireshi har sai ka sake haɗawa.
Bayanan martaba na VPN na Windows wata shiga ce a cikin littafin waya, kuma PowerShell wata hanya ce ta gyara wannan shigar. Daga wannan bambancin akwai gazawa biyu: maɓallin da aka riga aka raba wanda ya isa uwar garke a riga an lalata shi, da adireshin uwar garke wanda ya yi kama da an sabunta amma ba shi ne wanda rami na gaba zai buga ba. Dukansu suna da sauƙin gani idan ka ɗauki bayanin a matsayin yanayin da aka adana ba a matsayin umarnin da ka yi ba. Bayanin yana bin tsarin gyare-gyaren: ƙirƙira, canza, iyaka, sake karantawa.
Gina bayanin da maɓalli na zahiri
Add-VpnConnection yana karɓar L2TP maɓallin da aka riga aka raba ta -L2tpPsk. PowerShell na sarrafa igiyar kafin cmdlet ya karɓe ta, kuma cikin waƙafi biyu alamar dala tana fara maganar maɓalli yayin da backtick ke fara tserewa. Maɓallin da ke ɗauke da ɗaya daga cikinsu yana zuwa a takaice, ko da wata alama dabam, kuma ana ƙirƙirar bayanin cikin nasara da sirrin da ba daidai ba.
Sannan gazawar tana bayyana a tabbatarwar IPsec, inda ramin ya ƙi tashi. Shi ya sa ake ba da rahoton kuskuren waƙafi a matsayin matsala daga bangaren uwar garke: bayanin yana nan, sunan daidai ne, kuma sirrin a hankali ba daidai ba ne.
| How you write it | What PowerShell does | Result |
|---|---|---|
| "p@ss$word!42" | Expands $word as a variable | Stored key is truncated |
| Double-quoted with an escape character | Consumes the next character as an escape | One character disappears |
| 'p@ss$word!42' | Keeps the literal characters | Stored key matches the secret |
Waƙafi ɗaya shine magani, kuma dole su rufe dukkan darajar. Idan shigar tana nan da mummunan maɓalli, -Force yana maye gurbinsa, ko cire ka sake ƙirƙirar bayanin sannan ka gwada da sabuwar haɗi:
Add-VpnConnection -Name "Contoso-L2TP" -ServerAddress vpn.contoso.example -TunnelType L2tp -L2tpPsk 'n3w$ecret!2026' -AuthenticationMethod Pap -RememberCredential -ForceKa riƙe ainihin sirrin daga tarihin shell da rubutun da aka raba. Karanta shi a lokacin aiki daga ma ajiyar da aka amince da ita kuma ka ba da maɓalli maimakon na zahiri, wanda ke guje wa matsalar waƙafi gaba ɗaya.
Canza adireshin, sannan sake haɗawa
Set-VpnConnection yana karɓar sigogi da aka raba da sarari, ba tsarin sanyawa ba. Rubuta -ServerAddress = "203.0.113.10" yana ba da ƙarin token, kuma cmdlet ko dai yana kuskure ko yana adana abin da ba ka nufa ba. Siffar da ta dace ita ce -Name "Office L2TP" -ServerAddress 203.0.113.10.
Ko da da madaidaicin tsari, canjin ba ya isa ramin da ya riga ya tashi. Haɗin da aka kafa yana riƙe da adireshin da ya buga har sai an katse shi, don haka gwada wannan zaman bai tabbatar da komai ba game da sabuwar darajar. Katse, gyara, sake haɗawa, kuma tabbatar da adireshin abokin tarayya a cikin bayanan haɗin.
Wasu halaye ba za a iya canza su a wuri ba. Lokacin da cmdlet ya ƙi, rubuta sigogin da suke akwai, share bayanin kuma sake ƙirƙirarsa da gyaran darajojin, kuma ka riƙe ainihin saitunan rami da tabbatarwa. Rubutun da ke buƙatar canza lambar waya kawai zai iya gyara shigar littafin waya ta RAS API maimakon sake ƙirƙirar komai. Ko wace hanya ka bi, tabbatar da darajojin da aka adana bayan haka maimakon dogara ga shirun umarnin.
San wace littafin waya ka gyara
Bayanin kowane mai amfani yana zama a cikin jagorar haɗin cibiyar sadarwar wannan mai amfani, kuma bayanin duk masu amfani yana zama a cikin babbar jagora ta na urar a ƙarƙashin bishiyar bayanan shirye-shirye. Shigodi ne daban-daban da iyakoki daban-daban, kuma gyara ɗaya yana barin ɗayan ba a taɓa ba.
Shi ya sa canji zai iya zama kamar ya ɓace: rubutun ya gudana a ƙarƙashin wani asusu, kuma gwajin a wani. Yi amfani da -AllUserConnection lokacin da bayanin na na urar ne, kuma duba wannan iyaka lokacin da kake sake karantawa.
Sake karanta bayanin kafin ka gwada
Tambayi Windows abin da ya adana maimakon abin da ka ba shi:
Get-VpnConnection -Name "Office L2TP" | Select-Object Name, ServerAddress, TunnelType, AuthenticationMethodKwatanta wannan fitar da manufar, sannan fara sabuwar haɗi. Idan bugawa ta kasa, duba log ɗin abokin ciniki na RAS a Event Viewer kafin ka sake canza bayanin, domin log ɗin yana ambaton matakin da ya kasa.
Ka riƙe tsarin tabbatarwa cikakke yayin gyara. Umarnin da ke canza adireshin amma ya watsar da takardar shaidar ko tsarin EAP yana haifar da gazawa da ke kama da ba ta da alaƙa da gyaran, kuma fitar da bayanin da ke aiki tukuna yana ba ka abin da za ka dawo da shi maimakon zato.