Drive la sawiray VPN-ka goobta: DNS, SMB iyo waddada UNC
Soo-gaadhistu ma gudubto xiriir la maro waddo, laakiin waddo UNC leh magac ayaa gudubta. U jeedi DNS server-ka, fur SMB labada dhinac, ka dibna sawir drive-ka.
Bogga Shabakadda ee Explorer wuxuu muujinayaa qalabka isku dhawaaqay qaybta maxalliga ah, tunnellada la maro waddo ma qaaddo midkoodna ogeysiisyadaas. Taasi waa sababta server-ku si buuxda loo gaari karo iyada oo daaqadda hortaalla isticmaalaha ay madhan tahay. Waddada UNC ee magaca leh ma ku tiirsana soo-gaadhis gabi ahaanba, xalkuna waa in magacu xalliyo oo dekeddu ka jawaabto. Daaqadda madhan waa calaamad lakab khaldan, ma aha qayb la jabay.
Soo-gaadhis ma la mid aha gaarsiinta
Windows wuxuu helaa mishiinnada u dhow isagoo adeegsanaya borotokollo loogu talagalay domain baahin ah, ka dibna wuxuu soo bandhigaa waxa uu helay liis fududayn ah. Wax ka mid ah liiskaas lama u baahna gelitaanka faylka SMB. Macmiil yaqaan magaca server-ka oo gaari kara TCP 445 wuxuu furaa qaybta, ha ka soo muuqato mishiinku Shabakadda ama ha ka soo muuqan.
Labada lakabba si madax-bannaan ayay u guul-darraystaan, taas awgeed "ma arko" iyo "ma furi karo" waxay mudan yihiin imtixaanno kala duwan. Liiska fiirintu waxay ka sheegtaa soo-gaadhis; waddada furiddu waxay ka sheegtaa adeeg.
Magac u bixi server-ka ka hor inta aanad sawirin qaybta
Ku daabac server-ka faylka DNS-ka iyada oo leh ciwaanka uu ku leeyahay dhinaca kale, oo u jeedi goobta macmiilka resolver awood u leh inuu ka jawaabo aaggaas. Magac si buuxda u qalma wuxuu ka fogaataa ku tiirsanaanta liiska raadinta daba-galka maxalliga ah, taas oo ah sababta caadiga ah ee magac gaaban ugu shaqeeyo goob uu ku guul-darraysto mid kale.
Haddii deegaanku isticmaalo Active Directory, xallinta magacyadu sidoo kale waa qayb ka mid ah xaqiijinta: macmiilku waa inuu gaaro kontoroolka domain-ka Kerberos, saacad aad u leexatana waxay guul-darreyn doontaa is-weydaarsiga tikitada. Tan waa dhibaato ka duwan gaarsiinta SMB waxayna u egtahay khalad aqoonsi. Tijaabi kontoroolka domain-ka ka hor inta aanad mar kale qorin furaha sirta.
| Layer | What it needs | Symptom when missing |
|---|---|---|
| Name resolution | A DNS answer for the server name | Path cannot be found, ping by IP still works |
| Transport | TCP 445 open in both directions | Connection times out or is refused |
| Authentication | A reachable domain controller and correct clock | Access is denied after the port connects |
| Authorization | Share permission and filesystem permission | The share opens but the folder is inaccessible |
Waddo-maris iyo shaandhayn labada jiho
Tunnel-ka goob-ilaa-goob wuxuu u baahan yahay horgalaha fog ee shaxda waddada maxalliga ah iyo horgalaha maxalliga ah ee tan fog, derbiga dabka ee dhinac kasta waa inuu ogolaado taraafikada soo gala. Habaynta hal dhinac waxay soo saartaa xiriir furma oo aan waligiis ka jawaabin, taas oo isticmaalayaashu ku tilmaamaan qaybta oo gaabis ah. Marka hore hubi tirsannada tunnel-ka laftiisa. Haddii baakaduhu baxaan oo waxbana soo noqon, raadi waddada soo noqodka ama shaandhaha fog.
WireGuard, IP-yada la ogol yahay ee peer-ka iyo waddooyinka nidaamka hawlgalku waa inay la jaanqaadaan naqshaddaas. Tunnel-ku wuxuu qaadaa baakado; ma bixiso diiwaanno DNS ama ogolaansho qayb dhinacna.
Ku salee sharciga derbiga dabka shabakadda isha dhabta ah ee isku xiri doonta, oo qor ka-tashiga. Haddii naqshaddu ciwaannada ku tarjunto meel waddada ka mid ah, sharcigu waa inuu isticmaalo isha la tarjumay, ciwaanka asalka ah ee macmiilka lama arko dabadeed diiwaannada.
Xaqiiji, ka dibna sawir drive-ka
Kala deg lakabyada amarar halkii aad ka isticmaali lahayd daaqadda Explorer:
Resolve-DnsName -Name files.corp.example -Type A
Test-NetConnection -ComputerName files.corp.example -Port 445
net use Z: \\files.corp.example\Projects /persistent:noAmarka labaad wuxuu caddeeyaa waddada TCP, ma aha xaqa wax akhrida. Kan saddexaad waa halka xaqiijinta iyo oggolaanshaha lagu fuliyo, guul-darraduna halkaas waa inay kuu diraan ogolaanshaha qaybta iyo nidaamka faylka, ma aha dib ugu noqoshada router-ka.
Ilgaar saxeexa SMB iyo siyaasadda xaqiijinta ee jirta. Dib u shididda SMB1 ama gudbinta baahinta soo-gaadhistu tunnel-ka looma baahna waddo cad, TCP 445-na waa inuu ku sii ahaado waddada gaarka ah halkii uu ka ahaan lahaa gudbin internet-ka u jeedda. Sii isticmaalayaasha gaabin la maareeyay ama drive la sawiray magaca la ansixiyay, oo bogga Shabakadda ee madhan wax qiimo ah ma laha.