VPN na cikin Windows ba ya isa ƙofar SSL ta mai sayarwa: dalili

Windows yana zuwa da nau’ikan rami huɗu, kuma ƙofar SSL ta mai sayarwa ba ɗaya ce daga cikinsu. Ka nuna bayanin da ke ciki zuwa irin wannan, kuma haɗin zai kasa kafin neman bayanan shiga, yawanci da saƙon cewa tsarin na gida ya ƙare haɗin. Wannan rubutun alama ce ta rashin daidaituwa, ba ganewar asali ba. Dole nau’in bayanin da abokin ciniki da ke da mallakar ƙa’idar su daidaita, kuma ɗaya daga cikinsu ya ɓace.

Nau’i huɗu da taga tattaunawa ɗaya

Kowane bayani da aka ajiye yana ɗauke da nau’in rami. Abokin ciniki na ciki yana karɓar PPTP, L2TP, IKEv2 da SSTP, tare da yanayin atomatik da ke gwada su bi da bi. Babu wani shigarwa na gama-gari na SSL VPN, kuma babu yadda za a ƙara ɗaya ta taga tattaunawa. Ƙofar mai sayarwa tana magana da ƙa’idar aikace-aikacen ta kanta a kan TLS, wadda kawai abokin ciniki na wannan mai sayarwa ke aiwatarwa.

Jerin yana nesa da umarni ɗaya, kuma ya dace a gudanar da shi kafin kowace warwarewar matsala, domin yana ɗaukar daƙiƙa ɗaya kuma yana kawar da aji gabaɗaya na zato marasa kyau:

Get-VpnConnection | Select-Object Name, ServerAddress, TunnelType, SplitTunneling
Get-VpnConnection -Name "Office" | Format-List

Idan bayanin ya ce SSTP kuma ƙofar ba uwar garken RRAS ba ce, an riga an tabbatar da rashin daidaituwa. Babu aikin takardar shaida ko katangar wuta da zai canza shi.

SSTP da TLS na mai sayarwa suna kama da juna a tashar 443

SSTP yana naɗe zaman PPP cikin TLS kuma yana tafiya a kan TCP 443. A cikin tsarin Microsoft, RRAS ne ke ƙare shi, wanda ke gabatar da takardar shaidar uwar garke da abokin ciniki ke tabbatarwa. Na’urar Fortinet, Citrix ko Pulse ma tana ƙare TLS a 443, kuma tashar ta tana buɗewa a kowane mai bincike ba tare da ƙorafi ba.

Wannan gwajin mai bincike yana tabbatar da isarwa, ba daidaituwa ba. Ƙa’idar zaman da ke bayan tashar ta mai sayarwa ce, kuma abokin ciniki na ciki ba shi da wani aiwatarwa nata. Ko mai sayarwa yana bayar da nasa abokin ciniki yana gaya maka wane rabin rashin daidaituwa kake fuskanta.

Kishiyantar rikicewar ma tana faruwa. Bayanin da aka saita a matsayin SSTP gaba da ingantaccen uwar garken RRAS na iya kasawa a tabbatar da takardar shaida yayin da tashar ke lafiya, kuma wannan matsalar takardar shaida ce ba matsalar ƙa’ida ba.

Kurakurai da ke bayyana kafin rami ya wanzu

Ana ba da rahoton lambobin jerin 800 kafin a kafa kowane rami, shi ya sa dokokin katangar wuta ba su cika motsa su ba. Kuskure 812 manufa ce ta gefen uwar garke da ke ƙin hanyar tabbatarwa da abokin ciniki ya bayar. Sauran a cikin kewayon daga mai kula da haɗin gida suke zuwa, ba daga hanyar sadarwa ba.

Kunna bin diddigin kafin ka sake gina wani abu. Bin diddigin yana ambaton matakin da ya kasa, kuma sunan mataki ya fi rubutun taga tattaunawa daraja:

netsh ras set tracing * enable
Get-ChildItem "$env:windir\tracing" | Sort-Object LastWriteTime -Descending | Select-Object -First 5

Bayan diddigin suna sauka a ƙarƙashin babban ɗakin diddigi kuma suna zama a can har sai ka share su, don haka kashe bin diddigin bayan haka maimakon barin shi yana aiki tsawon makonni.

Bayanin da aka haɗa zai iya lalata komai har yanzu

Bayanin da ke haɗawa sannan ya lalata bincike, rabo na gida ko injin kwantena yana da matsalar hanya, ba matsalar rami ba. Ƙofar da aka saba ta koma cikin ramin, don haka kowane manufa yanzu yana wucewa ta abokin da watakila ba zai bi da ita ba.

Sarrafawa biyu ne ke yanke wannan. Ɗaya ita ce sifar raba rami a kan bayanin. Ɗayan kuma shine zaɓin kowane adafta na amfani da ƙofar da aka saba a cibiyar sadarwa mai nisa, wanda ke ƙarƙashin saitunan IPv4 na ci gaba.

Set-VpnConnection -Name "Office" -SplitTunneling $true
Add-VpnConnectionRoute -ConnectionName "Office" -DestinationPrefix 10.20.0.0/16

Kunna raba rami ba tare da ƙara hanyoyi ba yana haifar da ramin da ke haɗawa kuma bai isa ko’ina ba. Kashe shi ba tare da duba DNS ba yana haifar da sunayen ciki waɗanda ke warwarewa zuwa amsoshin jama’a, domin ba a amfani da ƙarin sunan adaftar da uwar garken nasa.

Tabbatar da bututun, sannan nau’in

Yi aiki a wannan tsari, kuma tsaya idan mataki ya kasa maimakon daidaita komai lokaci ɗaya:

Test-NetConnection vpn.example.net -Port 443
Get-VpnConnection -Name "Office" | Format-List TunnelType, ServerAddress, DnsSuffix
netsh interface ipv4 show route
rasdial Office

Umarni na farko yana raba isarwa daga ƙa’ida. Na biyu yana tabbatar da abin da bayanin ke da’awa. Jadawalin hanya yana nuna ko ramin ya kama hanyar da aka saba. Umarnin buga waya yana ba da rahoton kuskuren mai kula da haɗin kansa, wanda sau da yawa ya fi taga tattaunawa bayyana.

Yi rikodin nau’in ramin, kayan ƙofar da ainihin kuskuren a cikin tikitin. Sai mutum na gaba ya san cikin minti ɗaya ko rashin daidaituwar ƙa’ida ne, gazawar takardar shaida ko shawarar hanya, maimakon fara daga “VPN ɗin ba ya aiki”.