Azure P2S: hal Windows client ah ayaa lumiyay marinnada ka dib isbeddel VNet

Laba laptop ayaa isku xaqiijiya isla Azure point-to-site gateway, kaliya mid ayaa gaara VNet-ka cusub ee la xiray. Labaduba waxay muujinayaan Connected, marka xaqiijintu maaha farqiqa; marinnada loo socdo ee ay hayaan ayaa farqiqa. Ka bilow client-ka fashilma, isbarbar dhig hal meel, kadibna go'aanso in farqiga uu leeyahay xirmada gateway-ga ama shaxda marinnada maxalliga ah.

Ka bilow client-ka fashilma, ma aha gateway-ga

Xaqiiji qaab-dhismeedka ka hor inta aanad laptop-ka eedeyn. Hubi VNet-yada ku xiran VNet-ka gateway-ga iyo in shabakadda cusub si toos ah loo peer-gareeyay ama lagu gaaro tunnel site-to-site gaar ah. Haddii VNet-ka cusub uusan haba yaraatee ku xirnayn VNet-ka gateway-ga, ma jiro xirmo client oo u gudbi kara halkaas, laptop-ka shaqeeyana waa waxyaabaha aan caadiga ahayn ee la sharraxayo. Qor jawaabta, waayo waxay go'aaminaysaa inaad debug-gaynayso client ama gateway.

Marka qaab-dhismeedku saxan yahay, dhig labada laptop dhinac. Isla gateway, isla barkada cinwaannada, isla borotokoolka iyo isla nooca client-ka waa isbarbardhigga aad rabto; wax kasta oo kale waa doorsoome labaad oo mustaqbalka laga saarayo.

Isbarbar dhig hal meel iyadoo la isticmaalayo route print

Dooro IP kheyraad la ogolaaday oo labada laptop laba jeer isbarbar dhig: go'doonsan, kadibna xiran. Windows route print -4 wuxuu liis garayaa marinnada IPv4 oo leh horgalaha meesha, interface-ka, tallaabada xigta iyo mitirka. Qor safka dhab ahaan ku guulaysanaya meeshaas halkii aad tirin lahayd qoraallada ay ku jirto ereyga VPN.

Xulashadu waxay marka hore ku socotaa horgalaha ugu dheer, kadibna mitirka, sidaas darteed marin maxalli ah oo gaar ah ayaa ka adkaan kara marinka tunnel-ka isagoon khaldan u muuqan. Haddii meesha loogu talagalay ay ku jirto 10.24.0.0/16, client caafimaad qaba wuxuu ku muujinayaa marin u dhigma interface-ka VPN, halka client-ka fashilma uu isla cinwaanka u diraayo gateway-ga caadiga ah.

Horgale maxalli ah oo iskhilaafaya ayaa sidoo kale keeni kara calaamad isku mid ah. Ka hor inta aanad wax ku darin, go'aanso labada xaaladood kee baad haysataa: ma jiro marin tunnel haba yaraatee, ama marin tunnel ka guuldarraysta mid ka gaar ah.

TTL expired maaha bug qaybinta marinnada

Ping soo celiya TTL expired in transit waxay sheegaysaa xirmadu ay isticmaashay qoondadeeda tallaabooyinka, taasoo badanaa macnaheedu yahay wareeg gudbin ah ee maaha darawal VPN jaban. Ping-ka Windows wuxuu aqbalaa TTL ilaa 255, kor u qaadista qiimahana ma hagaajiso wareeg; waxay kaliya dib u dhigtaa isla qaladka. U qaado fariinta calaamad woqooyi ah, ma aha caddayn ku saabsan qaybinta marinnada.

Isticmaal tracert -4 10.24.1.10 si aad u aragto halka marinku soo noqnoqdo. Haddii isla labada tallaabo ay si isdaba joog ah u muuqdaan, raadi marin u diraaya taraafikada tunnel-ka u jeedda dib ugu noqda tunnel-ka ama router maxalli ah oo dib u diraaya.

Dib u abuur xirmada gateway-ga leh

Microsoft waxay diiwaangelisay in xirmooyinka client-ka Windows ay tahay in dib loo soo dejiyo oo dib loo rakibo ka dib isbeddellada qaab-dhismeedka la xiriira. Ka soo qaado xirmada hadda jirta gateway-ga Azure ee u adeega profile-kan, kadibna ku dhaqan geli hannaanka la taageeray client-kaas. Beddelka faylka fulinta ee application VPN aan xiriir la lahayn maaha isla hawlgalka dib u abuurka dejinta gaar u ah gateway-ga. Dib u soo dejinta xirmada waa jaban; qiyaasidda marinnada maxalliga ah maaha.

Dib u xiriir oo dib u akhri marinka meesha asalka ah. Kaydi safafka ka hor iyo ka dib oo la socda diiwaanka isbeddelka si natiijadu uga saxan tahay waxaan dib u rakibay client-ka.

Xaaladaha marin-u-jiidka Azure P2S waxay kala soocaan VNet-yada si toos ah loo peer-gareeyay iyo shabakadaha lagu gaaro tunnel-yo kale, xirmo cusubna ma samayn karo peer-ka mid gudbiya. Xaaladaha qaar ee Windows site-to-site ama BGP waxay sidoo kale u baahan yihiin marinnada fog oo gacan lagu habeeyay, sidaas darteed cusboonaysiinta xirmadu maaha hab caalami ah oo qaybinta marinnada.

Ku hay marin ku meel gaar ah mid ku meel gaar ah

Marin gacan lagu sameeyay ayaa go'doomin kara marinka client-ka maqan, laakiin ka dhis nashqadda dhabta ah: route add 10.24.0.0 mask 255.255.0.0 172.16.0.1 if 42, iyada oo aan lahayn calanka joogtada ah, si uu uga baxo dib u bilaabista. Dooro tusmada interface-ka iyo tallaabada xigta adapter-ka VPN ee xiran, ma aha qiyaas.

Ha uga taggin marin tijaabo ah milkiile tartan joogto ah. Cusboonaysiinta profile-ka mustaqbalka waxay ku dari karaan isla horgalaha mitir kale, markaas qoraalka gacanta ayaa aamusnaan go'aaminaya marinka guulaysanaya. Qor tallaabada ka saarista isbeddelka.

Marka marinka saxan uu firfircoon yahay, tijaabi application-ka bartilmaameedka halkii ping. Haddii xirmooyinku gaaraan Azure laakiin adeeggu wali fashilmo, hubi kooxda amniga shabakadda iyo marinka soo noqodka, waayo kuwaasi way ka duwan yihiin in laptop-ku bartay horgalaha.