Always On VPN ba shiga LAN ba ne: jerin duba albarkatu

Always On tsarin rayuwar haɗi ne: bayanin martaba yana haɗawa lokacin shiga ko kafinsa, kuma yana sake haɗawa ba tare da mai amfani ya danna komai ba. Wannan ba yana nufin kowane sirri manufa, ka’ida da mai amfani an yarda da shi ba. Tambaya ta aiki ita ce waɗanne albarkatu ne bayanin da aka tura yake bayarwa da gaske, kuma amsar tana bukatar dubawa ga kowane albashi, ba kallon alamar Connected ba.

Mataki 1: Rubuta albarkar kafin gwada ta

Fara da ɗan gajeren rikodi ga kowace manhaja, wanda aka ɗauko daga ainihin yanayi: suna, prefix ɗin manufa, sabis da tashar, aikin rami, ƙungiyar shaida da hanyar mai warwarewa.

Name: portal.corp.example
Destination: 10.20.5.0/24
Service: HTTPS 443
Tunnel role: user access after sign-in
Identity: assigned employee group
Resolver: corporate private DNS

Rikodin yana tilasta tambayoyi huɗu daban. Hanya tana yanke shawarar inda adireshin zai je; manufar DNS tana yanke shawarar yadda abokin ciniki zai san adireshin; matatar zirga-zirga tana yanke shawarar ko wannan zirga-zirgar na iya amfani da haɗin; tacewar wuta ta manufa da izinin manhaja suna yanke shawarar ko za a karɓi buƙatar. Babu ɗaya daga cikin huɗun da ke fitowa daga ramin da aka haɗa.

Mataki 2: Tabbatar wane rami zai ɗauke shi

Windows Always On VPN yana da ramin na’ura da ramin mai amfani, waɗanda aka saita a matsayin bayanan martaba daban-daban da takaddun shaida da iyaka daban. Ramin na’ura yawanci yana ɗaukar kawai kayan more rayuwa da ake bukata kafin shiga, kamar gudanarwa da ayyukan yanki; faɗaɗɗen shiga manhajoji na ma’aikata na cikin ramin mai amfani.

Matatun zirga-zirga siffa ce ta ramin na’ura, shi ya sa misalin Microsoft yake amfani da su ga zirga-zirgar gudanarwa. Kwafin wannan misali cikin bayanin albarkatu na gama-gari yana ba da ramin da ke haɗawa amma yana ɗaukar saitin da ba daidai ba. Tabbatar da haɗin da ke aiki da Get-VpnConnection sannan ka gwada ƙarƙashin wannan haɗin.

Mataki 3: Tabbatar da hanya ga ainihin adireshin

Warware sunan sau ɗaya, sannan duba hanyar: Find-NetRoute -RemoteIPAddress 10.20.5.10 yana nuna muƙamin da aka zaɓa, tsalle na gaba da adireshin tushe. Idan muƙamin shine adaftan jiki, prefix ɗin ba ya cikin saitin hanyoyin ramin ko abokin ciniki ya cire shi ta hanyar raba rami. Kwatanta da ma’anar bayanin martaba maimakon ƙara hanyar gida.

Na gida route add na iya sa gwajin ya wuce sannan ya ɓace a sabunta manufa na gaba, saboda haka canjin na cikin bayanin da ake sarrafawa. Duba prefix ɗin a bayanin mai amfani da na’ura, kuma duba saitin raba rami: cikakken rami baya bukatar hanya ga kowane prefix, raba rami yana bukatar ɗaya ga kowane sirri prefix.

Mataki 4: Gwada warware sunaye na sirri daban

Sunaye na sirri suna da hanyar manufa ta kansu. Bayanin zai iya bayar da dokokin NRPT da jerin neman suffix na DNS, waɗanda ke aiki muddin ramin yana nan. Karanta da Get-DnsClientNrptPolicy abin da abokin ciniki ya samu da gaske, sannan ka gwada suna da adireshi a cikin zama ɗaya. Idan sunaye sun kasa yayin da adireshi ke aiki, mai warwarewa ne; idan duka biyu sun kasa, hanya ce.

Suna kuma na iya warware zuwa adireshin da ke wajen hanyoyin ramin, wanda ke haɗa nasara da ƙarewar lokaci. Kwatanta adireshin da aka dawo da shi da prefix ɗin da ke cikin rikodinka; idan sun bambanta, yankin sirri yana amsawa da adireshin jama’a ko madadi kuma hanyar da ta dace ba ita ce aka tsara ba.

Mataki 5: Duba matatu, shaida da ƙofar manhajar kanta

Matatun zirga-zirga suna iyakance waɗanne ka’idoji da tashoshi za su iya amfani da ramin na’ura, kuma ƙaramin saiti na iya toshe albashin da hanya za ta ɗauka. Bayanin yana ba da haɗin ga ƙungiya, amma albashin yana da izininsa: mai amfani da zai iya haɗawa ba a karɓe shi kai tsaye daga uwar garken fayil ba.

Canza bayanin da ake sarrafawa ta hannun mai shi, ko Intune ne, tura ProfileXML ko rubutun ayyuka, sannan ka sake gwadawa bayan sake haɗawa na al’ada da bayan sake kunnawa: gazawar da aka saba ita ce tsohuwar hanyar gida ko bayanin da aka yi amfani da shi sau ɗaya. Riƙe sigar bayanin kusa da sakamakon gwajin.