Shin adaftar VPN ta Windows ya kamata ta kasance keɓaɓɓiyar ko ta jama'a?
Yanke shawara ko adaftar VPN ta Windows tana cikin bayanin martaba na keɓaɓɓe da gwaje-gwaje uku: hanyar amintacciya, rarrabewa mai tsayawa, da ƙa'idojin da kuke buƙata.
Sanya adaftar VPN ta Windows zuwa Keɓaɓɓe daidai ne ga rami na kamfani kuma ba daidai ba ga abokin ciniki na VPN na kasuwanci, kuma bambancin ba na ado ba ne. Rukunin cibiyar sadarwa yana zaɓar bayanin martaba na bangon wuta, don haka sauyi ɗaya yana ba da izinin dukan ƙa'idoji a lokaci ɗaya. Na ga rubutun shiga yana sa kowace adaftar da ba a gane ba zuwa Keɓaɓɓe, wanda ya fallasa rabon fayil a hanyar sadarwar mara waya ta otal a hankali. Sharuɗɗa uku ne suke yanke amsar, kuma dukansu dole su tabbata kafin ka taɓa saitin.
Abin da rukunin yake yankewa da gaske
Network Location Awareness yana gina sa hannu ga kowace hanyar sadarwa da aka haɗa daga abin da adaftar za ta iya bayar da rahoto: adireshin ƙofar shiga da MAC, ƙarin DNS, ko mai kula da yanki yana amsawa, da ko hanyar sadarwar na iya isa intanet. Windows yana haɗa bayanin martaba da wannan sa hannu, sannan bangon wuta yana amfani da ƙa'idojin wannan bayanin. Jama'a shine madadin lokacin da ganewa ta kasa, shi ya sa rami mai aiki zai iya kasancewa da alamar hanyar sadarwa da ba a sani ba.
Adaftar TUN ko TAP yawanci tana ba da ɗan bayani kaɗan ga ganewa. Abokin ramin sau da yawa adireshi ɗaya ne maimakon ƙofa, ana iya tura DNS cikin ramin kawai, kuma adaftar ba ta da nata hanyar da aka saba. Alamar da ta fito tana bayanin shigar bangon wuta, ba lafiyar ramin ba, kuma shi ne dalilin da ƙa'idojin bayanin keɓaɓɓe suke daina dacewa a lokacin da VPN ta haɗa.
Sharaɗi na ɗaya: ramin shine hanyar amintacciya
Zaɓin Keɓaɓɓe yana iƙirarin cewa duk abin da ake iya samu ta wannan mu'amala aƙalla amintacce ne kamar LAN ɗinka, domin ganowa da ƙa'idojin shigowa za su ɗauki wannan ƙaramin cibiyar a matsayin na gida. Ga ramin kamfani zuwa ƙaramin cibiyar da ake sarrafawa da sabar fayiloli da firintoci, iƙirarin yawanci yana tsayawa. Adaftar ƙofa ce zuwa hanyar sadarwar da ƙungiyarka ke sarrafawa, kuma na'urar da ke wancan gefen an karɓe ta da manufar da ta karɓi naka.
Fitar VPN ta kasuwanci ba ta wuce wannan gwajin ba. Wasu masu biyan kuɗi suna raba ƙaramin cibiyar fitar, kuma yi mata alamar Keɓaɓɓe yana sa ganowar cibiyar sadarwa, LLMNR da warware sunan NetBIOS a kan yanki cike da baƙi. Ramin da aka raba shima zai iya kasawa: lokacin da adaftar ke ɗauke da hanyar baƙo ɗaya zuwa manhaja ɗaya, babu wata ƙaramin cibiyar amintacciya da za a yi magana a kai, kuma canjin rukuni ba ya ba ka komai.
Sharaɗi na biyu: rarrabewar tana jure sake haɗawa
Sabuwar ƙofa ko ƙarin DNS yana haifar da sabon sa hannu, kuma Windows yana yanke sabon shawara kan bayanin martaba dominsa. Don haka Set-NetConnectionProfile na lokaci ɗaya yana jurewa har zuwa sake haɗawa na gaba, ba har abada ba. Duba bayanin bayan sake haɗawa maimakon bayan haɗawa ta farko, domin a lokacin ne saitin ke komawa da kansa.
Akwai hanyoyi uku na sa ya dawwama. Mafi tsafta ita ce manufa: buɗe secpol.msc, je Network List Manager Policies ka saita nau'in wuri ga hanyar sadarwar, gami da manufar hanyar sadarwar da ba a sani ba, domin a yi amfani da bayanin ta hanyar manufa maimakon umarni. Na biyu rubutun kowace haɗawa ne ko aikin da aka tsara wanda ke gudanar da cmdlet na PowerShell bayan ramin ya tashi. Na uku tsohuwar dabarar hanya ce, wadda ke ba ganewa ƙofar da za ta bincika:
route -p add 0.0.0.0 mask 0.0.0.0 10.8.0.1 metric 50 IF 24
Get-NetConnectionProfileDabarar hanya kewayawa ce, ba rarrabewa ba. Tana karyewa lokacin da dangantakar ma'auni ta canza ko abokin ciniki na VPN ya sake rubuta hanyoyi a lokacin sake haɗawa, kuma tana canza zaɓin hanya a hankali ga duk abin da ya faɗo kan hanyar da aka saba ta biyu.
Sharaɗi na uku: kana buƙatar ƙa'idojin keɓaɓɓe
Keɓaɓɓe yawanci yana ɗauke da Rabon Fayiloli da Firintoci, Ganowar Cibiyar Sadarwa da ƙungiyoyin sarrafawa daga nesa. Idan aikin shine isa rabon SMB ko firinta ta ramin, wannan shine ainihin dalilin canza rukuni. Idan aikin shine samun fita zuwa manhaja ɗaya ta yanar gizo, rukunin ba shi da mahimmanci: rubuta ƙa'idar fita, riƙe Jama'a, ka tsaya a nan.
| Scenario | Category | Why |
|---|---|---|
| Corporate tunnel to a file server or printer | Private | Private rules carry the sharing you need |
| Commercial VPN for privacy | Public | The exit subnet is shared with strangers |
| Split tunnel with a single host route | Public | No trusted subnet and an unstable signature |
| Site-to-site tunnel to a branch LAN | Private | The far subnet is managed like the local one |
| Lab adapter you control end to end | Private | Discovery helps and nothing else is exposed |
Karanta tebur a matsayin mafari sannan ka duba waɗanne ƙa'idoji na keɓaɓɓe suke da gaske a kunne a hotonka. Hoton da aka taurare yana iya cire rabon fayiloli gaba ɗaya daga bayanin keɓaɓɓe, a irin wannan yanayi canjin rukuni ba ya cimma kome har sai ka dawo da ƙa'idar. Wannan binciken yana ɗaukar umarni ɗaya kuma yana ceton rana mai tsawo.
Yin canjin ba tare da faɗaɗa duk sauran ba
Nufa lissafin mu'amala, ba harafin maye ba, ka karanta jerin kafin da bayan:
Get-NetConnectionProfile
Set-NetConnectionProfile -InterfaceIndex 24 -NetworkCategory Private
Get-NetFirewallProfileBayanan da aka adana suna zama ƙarƙashin makullin NetworkList a cikin rijista, inda ƙimar Category ke raba cibiyoyin sadarwa na jama'a, na keɓaɓɓe da na yanki. Gyara shi yana yiwuwa kuma yana da sauƙin kuskure: dole ka canza shigarwar da ta dace da sa hannun adaftar na yanzu, ba wata tsohuwar shigarwa da wani adireshi na baya ya bari ba. Tsohuwar shigarwa tana kama daidai a cikin edita kuma ba ta yin kome a lokacin sake haɗawa.
Ko me ka yi, kada ka aika rubutun da ke sa kowace adaftar da ba a gane ba zuwa Keɓaɓɓe. Wannan shine sigar layi ɗaya ta buɗe ganowa a kan mara waya marar aminci. Idan kana buƙatar rabo da ƙaramin cibiyar rami kawai, riƙe bayanin Jama'a ka ƙara ƙayyadaddun ƙa'idojin shigowa ga kewayon adireshin nesa na ramin; ƙa'idar bangon wuta ta fi rukuni kunkuntar.
Tabbatar da rabo, ba alamar ba
Bayan canjin, gwada albarkar da kanta maimakon amincewa da alamar:
Test-NetConnection files.corp.example -Port 445
Resolve-DnsName files.corp.exampleIdan rabo har yanzu yana kasawa alhali adaftar tana nuna Keɓaɓɓe, rukuni ba shine matsalarka kuma. Warware suna, hanyar da ta ɓace ko izinin rabo za su haifar da alama ɗaya, kuma sake canza bayanin ba zai iya gyara ɗaya daga cikinsu ba. Sake haɗawa sau ɗaya ka sake gudanar da Get-NetConnectionProfile don tabbatar da saitin ya tsaya, sannan ka magance sauran gazawar a matsayin matsalar SMB ta yau da kullum.
Jerin dubawa: tabbatar ramin hanya ce da ake sarrafawa, bayanin yana jure sake haɗawa, ƙa'idojin keɓaɓɓe da kake buƙata suna kan hoton, kuma rabon yana warwarewa kuma yana amsawa a tashar 445. Idan ɗaya daga cikin ukun farko karya ne, bar adaftar a Jama'a ka magance matsalar shiga da ƙayyadaddun ƙa'ida.