Darajar rajistar NAT-T ta Windows: fara duba yanayin hanyar sadarwa

Haɗin VPN na Windows ya kasa, bincike ya dawo da darajar rajista, kuma ana saka darajar tare da sake yi. Wannan jerin wani lokaci yana aiki kuma ba ya taɓa bayyana komai. Saitin da ake magana a kai yana amsa tambaya ɗaya game da inda uwar garken take dangane da na'urar NAT, kuma ba shi da ma'ana har sai kun san wace ƙa'ida ta kasa kuma a wane mataki.

Abin da darajar take zaɓa a haƙiƙa

AssumeUDPEncapsulationContextOnSendRule yana ƙayyade ko aiwatar da IPsec na Windows zai yi ƙoƙarin ƙulla alaƙa da abokin tarayya a bayan na'urar NAT. Tsohuwar ƙima ta 0 ba ta yarda da wannan yanayin ba, 1 yana yarda da shi lokacin da uwar garken ita ce gefen da ke bayan NAT, kuma 2 ya ƙunshi yanayin da ake fassara ɓangarorin biyu. Waɗannan maganganu ne game da yanayin wuri—wanene a ina.

Idan aka karanta su a matsayin jeri, lambobin suna bayyana ƙarin fassara a hankali, ba ƙarin dogaro a hankali ba. Sanya 2 a cibiyar sadarwa da ba a fassara komai a cikinta ba ba ya sa haɗin ya fi sauri ko kwanciyar hankali, kuma ba ya gyara gazawar tabbatarwa. Na jagorar NAT ta Microsoft don L2TP/IPsec yana rubuta manufar da yanayin dandali na tarihi. Kwatanta wannan yanayi da sigar Windows da rawar da kuke gudanarwa a zahiri, domin takardar da ta tsira daga bugu da yawa ba magana ba ce game da kowane ginin yanzu.

Daidaita yanayin hanyar sadarwa kafin lambar

Zana hanyar kuma nuna wuraren fassara: shin abokin ciniki yana bayan na'urar sadarwa ta gida, shin uwar garken tana bayan mai daidaita nauyi ko wutar bango da ke sake rubuta adireshi, kuma shin ɗayan ƙarshen yana bayan fassarar mai ɗaukar kaya da ba ku sarrafa shi. Bayan wannan zanen ne kawai za ku iya yanke shawara ko darajar ta shafi, kuma ga wane ƙarshe.

Da'awar cewa sigogin Windows Server na yanzu suna zuwa kawai da NAT traversal a kashe ya fi girma da za a yi aiki da shi. Abin da ke da muhimmanci shi ne manufar da ke kan tsarinku, yanayin da ke gabansa da musayar da ta kasa, a wannan tsari. Idan ɓangarorin biyu suna da adireshin jama'a, saitin ba shine matsalarku ba. Duba shawara, takardar shaida ko asusu maimakon, kuma bar rajistar.

Fara duba matakin gazawar

L2TP/IPsec yana haifar da aƙalla gazawa uku daban-daban: ba a isa abokin tarayya ba, ba a iya kafa kariyar IPsec ba, kuma ana ƙin tabbatar da mai amfani na PPP bayan ramin ya wanzu. Ba a gyara asusun da aka ƙi ta hanyar canza manufar NAT ba, kuma ba a gyara rashin daidaituwar shawara ta hanyar sake yi ba.

Get-VpnConnection -Name "Corp L2TP" | Format-List Name, ServerAddress, TunnelType, EncryptionLevel
Get-WinEvent -LogName System -MaxEvents 40 | Where-Object Id -in 20227,20226,20274
netsh interface ipv4 show interfaces

Lokaci ya ƙare ba tare da mai amsawa ba yana nuna isarwa ko tacewa maimakon manufa. Ƙin da sauri tare da saƙon shawara yana nuna algorithms. Gazawa bayan ramin ya tashi ta shafi matakin tabbatarwa, wanda ke da wani mai shi da wani magani.

SSTP a kan HTTPS da IKEv2 na asali suna da nasu logs da nasu sarrafawa. Babu ɗayansu da ya zama batun NAT-traversal kawai saboda suna gudana a Windows kuma.

Yi canjin tare da hanyar dawowa

Idan manufar da aka rubuta da yanayin da aka lura duka sun buƙaci hakan, rubuta darajar da ta gabata, yi amfani da canjin ta hanyar tsarin da aka sarrafa maimakon script na kowane bayani, kuma shirya sake yi. A uwar garken da ke tallafawa sauran ayyuka, wannan ba gyara marar lahani ba ne.

Dole ne na'urar NAT har yanzu ta ɗauki jigilar da aka lulluɓe da zirga-zirgar dawowa. Darajar rajista ba ta ƙirƙirar ƙa'idar turawa, ba ta daidaita shawara kuma ba ta tabbatar da wani asali, don haka haɗin da ya fara aiki bayan canjin yana iya yin aiki saboda wani dalili daban. Sake gwada ƙa'idar asali da yanayin asali, sannan rubuta wane mataki ya kasa da kuma me ya sa ake tsammanin darajar za ta magance shi. Wannan jimlar ita ce ke mai da jita-jitar intanet ya zama tsari da za ku iya karewa.