VPN na Windows yana ɗaukar duk zirga-zirgarka? Cire hanyar da aka saba

Kana haɗawa da VPN na ofis kuma kowane shafi a burauza ya fara wucewa ta wannan cibiyar sadarwa: uwar garken fayil tana da sauri, duk sauran suna jinkiri, an tace su ko sun ɓace. Abokin ciniki ba ya yin kuskure; bayanin martaba ya nemi cikakken rami. Maɓallin da zai hana shi shine akwatin zaɓi ɗaya a cikin tattaunawa da sabon manhajar Saiti ba ta nuna, kuma ƙofar tana da wani abu ta faɗa a kowane haɗi. Wannan jagorar tana bin tsarin da Windows key yake gabatarwa da gaske, sannan ta rufe gwaje-gwajen da har yanzu suke gazawa bayan teburin hanyoyi ya yi kama da daidai.

Fara a cikin kaddarorin adaftan, ba a Saiti ba

Manhajar Saiti tana lissafin bayanin a ƙarƙashin Cibiyar sadarwa da Intanet, sannan VPN, amma tana bayyana zaɓuɓɓukan gama gari kawai. Shawarar ƙofar da aka saba tana kan adaftan. Buɗe jerin adaftan gargajiya da Win+R da ncpa.cpl, danna dama akan haɗin VPN, zaɓi Kaddarori, zaɓi ka'idar Intanet siga 4, sake zaɓi Kaddarori sannan Na ci gaba. Cire alamar Yi amfani da ƙofar da aka saba a cibiyar sadarwa mai nisa kuma tabbatar da fita daga duka tattaunawa uku.

Sake haɗawa kafin gwaji, domin ana amfani da akwatin zaɓi lokacin da aka kafa rami kuma zaman da ke akwai yana riƙe teburin da ya gina. Idan adaftan ba ya nan yayin da abokin ciniki a cire, haɗa sau ɗaya kuma sake buɗe taga. Abokin ciniki na mai siyarwa wanda ke girka adaftar TAP ko Wintun ba tare da shafin kaddarorin IPv4 ba shi da wannan tattaunawa kwata-kwata; a gare su, wannan shawara ita ce zaɓin rami raba a cikin saitunan abokin ciniki kansa, kuma akwatin zaɓi na adaftan shine wurin da bai dace ba don nema.

Irin wannan canji daga PowerShell

Don bayanin da aka ƙirƙira a cikin ajiyar VPN na Windows, ana iya rubuta saitin da script, wanda shine abin da kake so idan ana sake gina na'urar sau da yawa:

Set-VpnConnection -Name "Office" -SplitTunneling $true
Get-VpnConnection -Name "Office" | Select-Object Name,SplitTunneling

Wannan cmdlet yana isa ga bayanai a cikin wannan ajiya kawai. Haɗin da abokin ciniki na ɓangare na uku ya ƙara ba zai bayyana ba, kuma umarnin yana gazawa da kuskuren suna wanda yake kama da kuskuren rubutu. Ka lura kuma abin da maɓallin ba ya yi: yana hana abokin ciniki girka hanyar da aka saba, amma ba ya cire hanyoyin da ƙofar ke turawa lokacin haɗawa, don haka sashe na gaba yana da bukata a yawancin cibiyoyin sadarwa.

Lokacin da ƙofar ta sake tura hanyar da aka saba

Fara karanta teburin. Shigarwar da aka saba guda biyu da ma'auni daban-daban suna nufin canjin bayanin ya yi aiki kuma hanyar da aka tura ta maye gurbinsa duk da haka:

route print -4
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Sort-Object RouteMetric
Get-NetAdapter | Select-Object Name,ifIndex

Goge hanyar da aka saba da ta ramin kuma ka riƙe ta zahiri. Yi amfani da firikwensin fuska daga umarni na uku, ba laƙabin adaftan ba, domin scripts da suke ba da laƙabi suna karyewa da zarar sunan nuni ya canza:

Remove-NetRoute -DestinationPrefix 0.0.0.0/0 -InterfaceIndex 21 -Confirm:$false
route delete 0.0.0.0 10.8.0.1

Gogewa tana ɗaukar ofis tare da ita, don haka sake ƙara gaban kamfani ta ƙofar rami. Wannan shine layin da mutane suke tsallakewa, kuma shine dalilin da yasa «VPN ya daina aiki» ke biyo bayan nasarar canjin rami raba:

route add 10.0.0.0 mask 255.0.0.0 10.8.0.1 metric 5 if 21

Babu ɗaya daga cikin waɗannan da ke tsira daga sake haɗawa, wanda halin gaskiya ne ba kuskure ba: ana sake gina adaftan kuma abokin ciniki yana sake amfani da abin da bayanin da ƙofar suka amince. Idan hanyar da aka saba ta sake bayyana kowace lokaci, an saita ƙofar don ƙin rami raba kuma za ta ci gaba da turawa, ko ta yanke zaman. Wannan manufar ma'aikacin cibiyar sadarwa ce, kuma buƙatar ta can ce ba a cikin script na gida da ke yaƙi da ita sau ɗaya a kowane haɗi ba.

Sake duba DNS, IPv6 da ma'auni bayan sake haɗawa ɗaya

Cire hanyar da aka saba ta IPv4 ba ya tabbatar da komai game da ɗayan iyali ko game da warware sunaye. Rami na iya ɗaukar IPv6 yayin da IPv4 na da ya kasance na gida, kuma jerin masu warwarewa da aka tura na iya riƙe sunayen ciki suna aiki yayin da tambayoyin da ke amfani da shi ke bin wata hanya dabam. Duba duka uku kafin ka kira shi an gama:

Get-NetRoute -DestinationPrefix ::/0
Get-DnsClientServerAddress -InterfaceAlias "Office"
Get-DnsClientNrptPolicy

Idan yanayin yana komawa a kowane haɗi, matsa umarnin zuwa aikin kowane haɗi maimakon gyara teburin da hannu: aikin da aka tsara wanda ke farawa da abin da ya faru na haɗi, ko saitin rami raba na abokin ciniki kansa inda yake da shi. Riƙe firikwensin fuska a cikin mai canzawa kuma nemi shi a lokacin gudana, domin yana iya canzawa idan an ƙara ko an cire adaftoci.

Yanke shawara abin da ka bar

Ofis ba ta sake bincika ko tace zirga-zirgar intanet na gida ba, kuma duk abin da aka buga ta rami kawai yanzu yana bukatar hanyarsa. Wasu ƙungiyoyi suna ɗaukar rami raba a matsayin cin zarafin manufa, don haka tabbatar da hakan kafin canza na'urar da ake sarrafawa; hanyar da aka saba da aka tura wani lokaci ita ce hanyar tilastawa ba hatsari ba. Takar Set-VpnConnection tana lissafin sigar rami raba da nau'ikan bayanan da ta shafi.

Sannan tabbatar a cikin tsari tabbatacce: wanene ya mallaki hanyar da aka saba, burauzar yau da kullum, uwar garken kamfani ɗaya ta adireshi, sunan ciki ɗaya, da waɗannan huɗu bayan sake haɗawa ɗaya. Idan burauza tana aiki kuma uwar garken kamfani ta gazawa, gaban hanyar ne ya ɓace ba hanyar da aka saba da ka cire ba, kuma gyara hakan ya fi sauƙin kuɗi fiye da sake gina bayanin.