Me ya sa RDP ke daskarewa lokacin da kwamfutar nesa ta haɗa da VPN

Kana cikin tagar RDP, tebur ɗin yana kan allo, kuma kana danna Connect a cikin abokin ciniki na VPN da ke aiki a wannan na'urar nesa. Bayan wasu daƙiƙa tagar tana daskarewa sannan ta rufe. Ramin ya tashi, wanda shi ne ainihin abin da log ɗin VPN zai bayar, kuma wannan shi ne mafi ƙarancin amfani bayani a dukan lamarin. Zaman ya mutu saboda na'urar da kake magana da ita ta canza yadda take amsa maka, don haka duba hanyar dawowa kafin ka taɓa ramin.

Yi lura da ƙarshen wurin da zamanka yake amfani da shi a zahiri

Adireshin da aka buga a cikin abokin ciniki na RDP ba lallai ne ya zama adireshin da kwamfutar nesa take amsawa a kansa ba. NAT, RD Gateway, ko mai daidaita nauyi a gaban mai masaukin na iya sake rubuta shi, kuma hanyar dawowa ana ƙaddara ta adireshin tushen da na'urar nesa take gani a kan haɗin da aka kafa. Idan ka yi kuskure a nan, za ka nemi hanyar da ba ta taɓa shiga ba.

A kan kwamfutar nesa, kafin a haɗa VPN, lissafa zama-zaman da aka kafa kuma karanta adireshin abokin gaba daga teburin. Sannan rubuta shi wani wuri a wajen wannan na'urar, domin ba za ka iya karanta shi ba bayan zaman ya faɗi.

Get-NetTCPConnection -LocalPort 3389 -State Established |
  Select-Object LocalAddress, RemoteAddress, RemotePort

Dauki wannan adireshin a matsayin abin da dole ne ya kasance ana iya isa gare shi. Idan adireshi ne na sirri a kan VLAN na gudanarwa, ramin dole ya bar wannan hanyar kawai. Idan adireshi ne na jama'a, amsar dole ta fita ta hanyar muƙala ɗaya da ta shigo da buƙatar ciki.

Karanta hanyar da take amsa wa wannan ƙarshen wuri

Windows yana zaɓar muƙala ga kowace manufa, kuma Find-NetRoute yana nuna shawarar da zai yanke yanzu. Gudanar da shi a kan adireshin abokin gaba kafin haɗawa, sannan kuma da ramin a buɗe, kuma kwatanta fihirisar muƙala da matakin gaba a cikin amsoshin biyu. Canjin muƙala shi ne dukan kuskure a cikin layi ɗaya na fitarwa.

Find-NetRoute -RemoteIPAddress 203.0.113.24
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Sort-Object RouteMetric
Get-VpnConnection -Name "Work VPN" | Select-Object SplitTunneling, Routes

Bayanin cikakken rami yana shigar da hanyar da aka saba ta cikin ramin, kamar yadda jagorar Windows kan hanyoyin VPN ta bayyana, don haka kowace amsa yanzu tana fita ta VPN kuma ta dogara da ko ɓangaren da ke gaba yana bin hanyar komawa zuwa abokin cinikinka. Bayanin ramin da aka raba ya fi aminci a misali amma ba shi da kariya, saboda takamaiman hanya da ta rufe adireshin abokin gaba tana iya cin nasara kan hanyar da aka saba ta zahiri. Ko ta yaya, tambayar ɗaya ce: bayan ramin ya tashi, shin adireshin abokin gaba har yanzu yana warware zuwa muƙalar da ta shigo da zaman ciki?

Idan ba haka ba, gyaran yana cikin bayanin ko a cikin takamaiman hanyar keɓewa da mai manufar VPN ya amince da ita. Gyara teburin hanyoyi da hannu a kan mai masaukin samarwa a lokacin lamari shi ne yadda wani magani na wucin gadi ya zama tsarin da ba a rubuta ba.

Kula da canjin bayanin katangar wuta

Ana rarraba sabuwar muƙala lokacin da ta bayyana, kuma rarrabuwar ita ce ke yanke waɗanne bayanin katangar wuta ne za a yi wa zirga-zirgarta hukunci da shi. Adaftar rami da ta faɗa cikin rukunin Public na iya tsayar da RDP mai shigowa cikin shiru ko da teburin hanyoyi ya yi kama da cikakke. Wannan shi ne yanayin gazawa na biyu, kuma yana haifar da wata alama daban: hanyar daidai ce, fakiti suna isowa, kuma mai masaukin ya ƙi haɗin.

Get-NetConnectionProfile
Get-NetFirewallProfile | Select-Object Name, Enabled
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select-Object Name, Enabled, Profile

Kwatanta bayanin da ke manne da muƙalar ramin da bayanan da aka keɓe dokokin Remote Desktop gare su. Dokar da aka kunna don Domain da Private kawai ba ta yin komai ga muƙalar da aka rarraba a matsayin Public, kuma babu wani gyaran hanya da zai canza hakan. Wasu abokan ciniki na VPN kuma suna takaita shiga yankin cibiyar sadarwa na gida bisa ƙira, wanda ke haifar da irin wannan gazawar daga wata hanya ta dabaru.

Gwada canjin daga wani wuri da za ka iya dawowa

Yi dukan jerin daga wata na'urar kula ta waje ko wata hanyar gudanarwa ta biyu, a wannan tsari: tabbatar da zaman da ke akwai, haɗa VPN, buɗe sabon zaman, sannan ka yanke VPN kuma ka buɗe wani. Kowace mataki tana gwada wani canji daban, kuma na farkon da ya kasa shi ne zai gaya maka wace hanya ce ke da alhakin.

Tsara komawa baya kafin ka fara, alal misali aikin da aka tsara wanda ke gudanar da rasdial "Work VPN" /disconnect bayan wani tazara da aka ƙayyade. Wannan yana mai da ɓataccen zaman ya zama tsayawa na minti biyar maimakon ziyara zuwa wurin, kuma shi ne mafi arha inshora a dukan tsarin.

Sake shiga lokacin da zaman ya riga ya tafi

Idan mai masaukin ya riga ya kasa isa, daina ƙoƙarin sabbin haɗin RDP daga wannan abokin ciniki kuma yi amfani da tashar farfadowa da yanayin ke da ita riga: RD Gateway, na'urar kula ta hypervisor, ko muƙalar gudanarwa ta waje. Ka ce wa wanda ke da damar kula ya gudanar da umarnin guda ɗaya Find-NetRoute da Get-NetConnectionProfile, domin shaidar ta rayu bayan farfadowa.

Sannan ka yanke shawara kan tsarin dindindin maimakon mafi sauri. Ko dai bayanin VPN ya kiyaye hanyar gudanarwa a bayyane, ko kuma gudanarwa ta koma wata tashar da ba ta dogara da hanyar da aka saba ta mai masaukin ba. Dukansu ana iya kare su; hanyar mai masauki da ƙofar da aka yi hasashe ba haka ba ce. Rubuta wanda ka zaɓa, kuma rubuta adireshin abokin gaban da ya kamata ya rayu.