Add-VpnConnection: sababta PSK u jabto iyo sababta ciwaanka u sii jiro
PowerShell waxay ballaadhisaa furaha hore loo wadaagay ee ku jira xardho laba jibaaran ka hor inta cmdlet uusan kaydin, tunnel shaqaynayana wuxuu hayaa ciwaankii hore ilaa aad dib u xidho.
Profile VPN ee Windows waa gelitaan ku jira buugga telefoonka, PowerShell-na waa mid ka mid ah siyaabaha loo tafatirto gelitaankaas. Farqigaas waxaa ka yimaada laba guuldarro: furaha hore loo wadaagay oo server-ka u yimaada isagoo hore u xumaaday, iyo ciwaanka server-ka oo u eg mid la cusboonaysiiyay laakiin aan ahayn kii tunnel-ka xiga wici doono. Labadaba way fududahay in la arko haddii aad profile-ka u tixgeliso sida xaalad la kaydiyay ee aan ahayn sida amar aad maamushay. Sharaxaaddu waxay raacdaa nidaamka wax-ka-beddelka: abuur, beddel, baaxad, dib u akhri.
Ku dhis profile-ka furaha dhabta ah
Add-VpnConnection wuxuu qaataa furaha L2TP ee hore loo wadaagay isagoo maraya -L2tpPsk. PowerShell waxay ka shaqaysaa xarigga ka hor inta cmdlet uusan helin, gudahana xardho laba jibaaran calaamadda doolarka waxay bilaabataa tixraac doorsoome halka backtick uu bilaabo escape. Furah kasta oo ka mid ah ku jira wuxuu yimaadaa mid gaaban ama calaamad kale leh, profile-kana si guul leh ayaa loo abuuraa sir qaldan.
Ka dib guuldarraddu waxay ka muuqataa xaqiijinta IPsec, halkaas oo tunnel-ku diido inuu kaco. Taasi waa sababta khalad xardho loo sheego marar badan sida dhibaato dhanka server-ka ah: profile-ku wuu jiraa, magacu waa sax, sirta-na si aamusan ayay qaldan tahay.
| How you write it | What PowerShell does | Result |
|---|---|---|
| "p@ss$word!42" | Expands $word as a variable | Stored key is truncated |
| Double-quoted with an escape character | Consumes the next character as an escape | One character disappears |
| 'p@ss$word!42' | Keeps the literal characters | Stored key matches the secret |
Xardho keliya ayaa xal ah, waana inay hareeraysaa qiimaha oo dhan. Haddii gelitaanku hore ugu jiro furaha xun, -Force wuu beddelaa, ama ka saar oo dib u abuur profile-ka kadibna ku tijaabi xiriir cusub:
Add-VpnConnection -Name "Contoso-L2TP" -ServerAddress vpn.contoso.example -TunnelType L2tp -L2tpPsk 'n3w$ecret!2026' -AuthenticationMethod Pap -RememberCredential -ForceSirta dhabta ah ka fogee taariikhda shell-ka iyo scripts-ka la wadaago. Ku akhri waqtiga socodka kaydka la ansixiyay oo gudbi doorsoome halkii qiimaha dhabta ah, taas oo si buuxda uga fogaata dhibaatada xardho.
Beddel ciwaanka, kadibna dib u xidh
Set-VpnConnection wuxuu qaataa halbeegyada bannaan ku kala soocan, ma aha qaabka dhigista. Qorista -ServerAddress = "203.0.113.10" waxay gudbisaa token dheeraad ah, cmdlet-kuna wuu khaldamaa ama kaydiyaa wax aadan u qasdin. Qaabka saxda ah waa -Name "Office L2TP" -ServerAddress 203.0.113.10.
Xitaa qaabka sax, isbeddelku ma gaaro tunnel hore u kacay. Xiriir la aasaasay wuxuu hayaa ciwaankii uu wacay ilaa laga gooyo, sidaas darteed tijaabinta isla fadhikaas wax kama caddaynayso qiimaha cusub. Gooy, tafatir, dib u xidh, oo xaqiiji ciwaanka dhigaha faahfaahinta xiriirka.
Qaar ka mid ah sifooyinka lama beddeli karo meesha. Marka cmdlet-ku diido, qor halbeegyada jira, tir profile-ka oo dib u abuur qiimaha la saxsan, oo hay dhigmaha asalka ah ee tunnel-ka iyo xaqiijinta. Script uun u baahan inuu beddelo lambarka telefoonka ayaa tafatiri kara gelitaanka buugga telefoonka iyada oo loo marayo RAS API halkii ay dib u abuuri lahayd wax kasta. Waddo kasta oo aad qaadato, kadib xaqiiji qiimaha la kaydiyay halkii aad aamini lahayd aamusnaanta amarka.
Ogow buugga telefoonka ee aad tafatirtay
Profile-ka isticmaale kasta wuxuu ku nool yahay galka xiriirada shabakada isticmaalahaas, profile-ka isticmaalayaasha oo dhan-na wuxuu ku nool yahay galka mashiinka oo dhan ee hoos yimaada geedka xogta barnaamijka. Kuwani waa gelitaanno kala duwan oo baaxad kala duwan leh, tafatirka midna wuxuu ka tagaa kan kale isagoo aan la taaban.
Taasi waa sababta isbeddelku u ekaan karo mid lumay: script-ku wuxuu ku shaqeeyay akoon, tijaabaduna mid kale. Isticmaal -AllUserConnection marka profile-ku ka tirsan yahay mashiinka, oo hubi isla baaxadda marka aad dib u akhrinayso.
Dib u akhri profile-ka ka hor tijaabinta
Weydii Windows waxa uu kaydiyay, ma aha waxa aad gudbisay:
Get-VpnConnection -Name "Office L2TP" | Select-Object Name, ServerAddress, TunnelType, AuthenticationMethodIsbarbardhig soo-saarkaas iyo ujeeddada, kadibna bilow xiriir cusub. Haddii wicitaanku guuldarro, ka hor inta aadan mar kale beddelin profile-ka eeg diiwaanka macmiilka RAS ee Event Viewer, sababtoo ah diiwaanku wuxuu magacaabaa marxaladda guuldarraystay.
Hay dhismaha xaqiijinta isagoo aan dhaqaaqin inta aad tafatirto. Amarka beddela ciwaanka laakiin tuura shahaadada ama habaynta EAP wuxuu keenaa guuldarro u eg mid aan xiriir la lahayn tafatirka, dhoofinta profile-ka shaqeeya ka hor-na waxay ku siinaysaa wax lagu soo celiyo halkii mala-awaal.