La wadaagidda fadhiga VPN ee martigeliyaha iyo martida VMware

Mashiinkaaga fadhiga ah ma gaaro nidaam gudaha ah oo si fiican uga shaqeeya martigeliyaha, martigeliyahana waxa uu ku xiran yahay macmiilka haysta shaxda dariiqa. Adabtar-ka fadhiga ah ku xidhka tunnel-ka buundo ahaan waxa uu u muuqdaa mid cad oo ku guuldareysta laba sababood oo kala duwan. Waxa shaqeeya waa tarjumaadda qayb ay labada mishiin leeyihiin. Qiimuhu waa dhab: marti kastaa waxa ay lumisaa aqoonsigeeda shabakadda shirkadda.

Laba sababood oo buundada u shaqayn karin

Adabtar-ka macmiilka waxa uu inta badan qaataa hal cinwaan, inta badan /32, macmiilkuna waxa uu dib u qoraa dariiqyada martigeliyaha si gaadiidka caadiga ah ee baxa uu u doorbido tunnel-ka. Barnaamijyada martigeliyaha waxa ay adeecaan shaxdaas oo gaadhaan nidaamka gaarka ah. Martida buundo lagu xidhay waligeed ma akhrido shaxda, sababtoo ah fareemkeeda waxa ay ka baxaan switch ka hooseeya lakabka IP.

Adabtar-ka tunnel-ka gelinta buundo ayaa dariiqa aragti ahaan xallin lahaa, laakiin darawalku ma aqbali doono. Windows 10 waxa kale oo uu ogolaadaa hal qalab oo buundo ah oo keliya oo ma bixiyo doorka dariiqa ee u ogolaan lahaa saldhig shaqo in uu u gudbiyo laba shabakadood oo hoose. Waxa hadha waa tarjumaadda isha. Ka dhig gaadiidka martida mid u muuqda in uu ka imanayo martigeliyaha, go’aamada martigeliyaha laftiisuna waxa ay ku gudbiyaan tunnel-ka iyada oo aan martidu u baahnayn dariiq ay yeelan karin.

Samee qayb uu martigeliyuhu leeyahay

Tafatiraha shabakadda fadhiga ah, ku dar shabakad host-only ah sida VMnet3 oo ku taal horgale aadan meel kale ka marin, tusaale ahaan 172.28.90.0/24. Martigeliyuhu waxa uu qaataa 172.28.90.1 adabtar-kaas, martiduna waxa ay ku xidhantaa isla switch-kaas. Dam shidka DHCP ee hypervisor-ka qaybtaas, si hal adeeg cinwaan uu u leeyahay.

Xaqiiji in Windows uu arko interface-ka ka hor inta aadan wax ku dul dhisin, sababtoo ah naqshadda oo dhan waxa ay ku xidhan tahay in adabtar-kaas uu caadi yahay:

Get-NetAdapter | Format-Table Name, InterfaceDescription, Status
Get-NetIPAddress -AddressFamily IPv4 | Where-Object PrefixLength -eq 24

Adabtar host-only ah waxa uu halkaas uga muuqdaa sida adabtar jireed kasta. Taasi waa farqiga ugu saxan ee adabtar-ka tunnel-ka, oo aan waxba lagu xidhi karin.

Turjun horgalaha martida

Fur fadhi awood sare leh oo turjun horgalaha. Marka hore hubi waxa hore u jiray, sababtoo ah deegaannada socodka konteenarada iyo hypervisor-yada waxa ay rakidaan tarjumaadooda, tirtiridda khaladkana waxa ay jebisaa badeeco kale.

Get-NetNat | Format-Table Name, InternalIPInterfaceAddressPrefix, Active
New-NetNat -Name "LabGuestEgress" -InternalIPInterfaceAddressPrefix 172.28.90.0/24

Kadib u habee martida cinwaan joogto ah oo ku yaal horgalahaas, 172.28.90.1 oo ah iridkeeda, iyo cinwaannada xalliyaha ee tunnel-ku siiyo martigeliyaha. Tarjumaaddu waxa ay gudbisaa baakadaha mana barayso martida wax ku saabsan DNS, sidaas darteed marti lagu dayday router-ka maxalliga ah waxa ay xalliso magacyo dadweyne oo ku guuldareysta magac kasta oo gudaha ah.

Hubi boodhka koowaad, kadib qiimaha

Tijaabi xadka ugu dhow ka hor inta aadan tijaabin barnaamij. Raad ka joogsada iridda martigeliyaha waxa uu ka dhigan yahay in tarjumaaddu aysan dhicin, halka mid ka joogsada martigeliyaha shisheedkiisa uu ka dhigan yahay in tunnel-ku daman yahay ama dhinaca kale uu diiday cinwaanka la turjumay.

tracert -d 172.20.31.10
nslookup intranet.corp.example
Get-NetNatSession -NatName "LabGuestEgress"

La barbardhig helitaanka martigeliyaha laftiisa ee isla meesha inta tunnel-ku shaqaynayo. Haddii martigeliyuhu guuleysto martiduna ay guuldareysato, khaladku waxa uu ku jiraa tarjumaadda ama habaynta iridda martida, ma aha xidhiidhka.

Kadib aqbal is-weydaarsiga. Nidaamyada shirkaddu hadda waxa ay arkaan hal cinwaan marti kasta, sidaas darteed shahaadooyinka qalabka iyo hubinta xaaladda qalab kastaa ma kala saari karaan, siyaasadahana qaarkood si buuxda ayay u mamnuucaan. Go’aanso hab-dhaqanka dhicitaanka sidoo kale, sababtoo ah gaadiidka la turjumay waxa uu ku dhici karaa dariiqa internet-ka caadiga ah marka tunnel-ku guuldareysto, haddii aadan horgalahaas ku xannibin firewall-ka martigeliyaha.