Saita DNS a kan adaftan VPN na Windows da PowerShell, sannan a tabbatar

Haɗin VPN na Windows ba ya ajiye sabar DNS a cikin bayanin da kake gyara a Saituna. Sa'ad da ramin ya tashi, abokin ciniki yana tattaunawa kan tsarin IP da ƙofar, ƙofar tana aika jerin masu warwarewa, kuma Windows yana amfani da shi a kan adaftan ramin. Wannan adaftan wata hanya ce daban daga Wi-Fi ko Ethernet ɗinka, kuma jerin na hanyar ne, ba na bayanin ba. Da zarar ka san wane abu ne ya mallaki ƙimar, sake rubuta ta a PowerShell umarni ɗaya ne; sa ƙin sake rubutawa ya jimre da sake haɗi shi ne ɓangaren da ke buƙatar shawara.

Wane abu ne ya mallaki adireshin

RAS yana ƙirƙirar adaftan ramin sa'ad da haɗin ya yi nasara kuma yana cire shi sa'ad da haɗin ya faɗi. Sabar DNS da kake gani a cikin ipconfig /all suna zuwa a lokacin wannan musayar tsari, tare da adiresoshin IPv4 da IPv6 da hanyoyi. Domin ƙimar tana manne da hanyar, Set-DnsClientServerAddress yana rubuta zuwa wani abu da yake wanzuwa kawai muddin haɗin yana wanzuwa.

Wannan gaskiya ɗaya tana bayyana mafi yawan ruɗani game da DNS na VPN. Ana iya duba bayani yayin da ba ka haɗe ba, amma babu hanyar da za a nuna, don haka rubutun shiga da ke kiran cmdlet a kan sunan VPN zai kasa kafin kowa ya haɗa. Har ila yau yana bayyana canjin da ya ke kamar yana komawa baya: babu abin da ya koma, an lalata hanyar kuma an sake gina ta da ƙimar da ƙofar ta tura.

Nemo sunan kafin ka taɓa DNS

Sunan bayani da sunan hanyar yawanci igiya ɗaya ne, amma ba abu ɗaya ba ne. Get-VpnConnection yana lissafta bayanai; Get-NetAdapter yana lissafta hanyoyin da Windows ke da su a zahiri. Cmdlet ɗin DNS suna son na biyu, kuma su biyun suna rabuwa fiye da yadda mutane suke tsammani, musamman sa'ad da abokin ciniki ya ƙara bayanin kamar "(RAS)" a sunan adaftan.

Idan babu bayanin, PowerShell na iya ƙirƙirar shigar asali. Nau'in rami da tabbatarwa dole su dace da abin da ƙofar ke bayarwa, domin rashin daidaituwa yana bayyana a lokacin haɗi ba a lokacin ƙirƙira ba:

Add-VpnConnection -Name "Corporate" -ServerAddress vpn.example.net `
  -TunnelType Ikev2 -EncryptionLevel Required `
  -AuthenticationMethod Eap -AllUserConnection

Haɗa sau ɗaya, sannan ka karanta ainihin sunan kafin ka rubuta kowace umarnin DNS:

rasdial.exe "Corporate"
Get-NetAdapter | Where-Object InterfaceDescription -like "*VPN*"
Get-DnsClientServerAddress -InterfaceAlias "Corporate"

Yi amfani da sake rubutawa a cikin tsari daidai

Tsari ya fi muhimmanci fiye da tsarin rubutu. Adaftan dole ya tashi, sunan dole ya warware, kuma dole a ba asusun izinin canza saitunan hanyar. Haɗin kowane mai amfani yawanci yana karɓar canjin daga mai amfani da ya shiga; haɗin duk masu amfani da aka ƙirƙira da -AllUserConnection gabaɗaya yana buƙatar harsashi mai girma.

Cmdlet ɗin kansa layi ɗaya ne, an rubuta shi a cikin bayanin Set-DnsClientServerAddress na Microsoft:

Set-DnsClientServerAddress -InterfaceAlias "Corporate" -ServerAddresses 10.20.0.53,10.20.0.54
Get-DnsClientServerAddress -InterfaceAlias "Corporate" -AddressFamily IPv4

Hanyoyi biyu na gazawa sun cancanci a gane su da ido. Sunan da ba daidai ba yana haifar da kuskure daga cmdlet, kuma wannan shi ne sakamako mai kyau, domin shiru zai fi muni. Cmdlet daidai marar tasiri da ake gani yawanci yana nufin kana kallon adaftan da ba daidai ba: adaftan ramin da ya ragu daga wani abokin ciniki, katin cibiyar sadarwa na zahiri mai kwatankwacin bayani, ko adaftan kama-da-wane na biyu da kayan aikin sadarwa a cikin yanayi mai keɓe ya ƙirƙira.

Me ya sa sake haɗi zai iya soke canjin

Sake rubutawa na misalin hanyar ɗaya ne kawai. Sa'ad da abokin ciniki ya rushe adaftan kuma ya sake gina shi a haɗi na gaba, ana sake amfani da ƙimar da aka tura kuma jerinka ya ɓace. Wasu abokan ciniki suna sake ƙirƙirar hanyar a kowane haɗi; wasu suna amfani da ita tsawon zaman. Kwatanta fihirisar hanyar a cikin Get-NetAdapter tsakanin haɗi biyu kuma za ka san wace ɗabi'a kake da ita.

Akwai amsoshi uku masu dorewa, kuma tara su yana haifar da kurakurai nasa. Ƙarin DNS na musamman ga haɗin tare da ka'idar NRPT yana aika yankin suna na ciki kawai zuwa mai warwarewa na ciki kuma yana barin sunayen jama'a. Saitin Group Policy ko MDM da aka yi amfani da shi a haɗin VPN yana saita DNS a lokacin haɗi ba tare da wani rubutu ba. Aikin da aka tsara wanda ke amsa abin da ya faru na haɗi kuma ya sake gudanar da cmdlet shi ne zaɓi mara hankali, amma yana aiki kuma yana barin log. Zaɓi mai mallakar DNS ɗaya kuma ka rubuta wanne ne.

Sunayen ciki masu alama ɗaya suma suna buƙatar jerin bincike na ƙari. Set-DnsClientGlobalSetting -SuffixSearchList na dukan na'urar ne, don haka yana canza warwarewa ga kowane adafta a kan kwamfutar, har da Ethernet. Gwada shi a kan na'urar dakin gwaji kafin ya shiga cikin hoto.

Tabbatar da warwarewa, ba saitin kawai ba

Mai warwarewa da aka lissafta a kan adafta yana tabbatar da cewa an rubuta ƙima kawai. Tambayi sabar da aka nufa kai tsaye, sannan ka tambaya ta hanyar da aka saba:

Resolve-DnsName server01.corp.example -Server 10.20.0.53
Resolve-DnsName server01.corp.example

Rabin yana gaya maka inda kuskuren yake. Tambayar kai tsaye tana amsawa kuma tambayar ta yau da kullum tana gazawa: saitin adaftan ko jerin ƙari ba ya aiki. Dukansu suna gazawa: ba a iya isa ga mai warwarewa ta cikin ramin, don haka duba hanyoyi da ka'idodin tacewar wuta kafin ka sake taɓa DNS. Tambayar kai tsaye tana gazawa yayin da ta yau da kullum tana amsawa daga wani wuri: DNS da aka raba ba daidai ba ne kuma mai warwarewa na jama'a yana amsa sunan ciki, wanda matsalar manufa ce kafin ta zama matsalar haɗi.

Gudanar da gwajin sau biyu, sau ɗaya kai tsaye bayan haɗi da sau ɗaya bayan cirewa da sake haɗawa, kuma kwatanta fitar Get-DnsClientServerAddress daga gudanarwa biyu. Idan ƙimar da aka tura ta dawo a haɗi na biyu, sake rubutawa ya rayu kuma ya mutu tare da adaftan, kuma ka'idar NRPT ko hanyar manufa daga sashen da ya gabata kawai za ta ci gaba. Ajiye rubuce-rubucen biyu da tambarin lokaci na haɗin; suna warware tambayar ko zai ci gaba da sauri fiye da wani zagaye na gyare-gyare.