Waa kee interface-ka goobta RRAS ee uu tunnel soo-galayaashu doorto?
RRAS waxay doorataa interface-ka goobta ee soo-galayaasha iyadoo ku salaysan cinwaanka peer-ka, magaca isticmaalaha ama mawduuca shahaadada, sidaas darteed akhri furahaas si gooni ah marka loo eego xaaladaha la hawlgeliyeen iyo xiriirka.
Server Windows oo leh dhowr interface oo goob-ilaa-goob ah, sumadda console-ka ma aha oo kaliya qoraal loogu talagalay dadka. RRAS waxay isticmaashaa goob gaar ah oo ka mid ah xiriirka soo-galayaasha si ay u go'aansato interface-ka macquulka ah ee ka jawaabaya, goobtaasna way is beddelaa iyadoo la raacayo habka xaqiijinta. Haddii aad furaha khalad ku qaadato, waxaad beddeli doontaa magacyada interface-yada ilaa wax si nasiib ah u xirmaan. Qaanuunka doorashada, xaaladda maamulka iyo xaaladda fadhiga waa saddex xaqiiqo oo kala duwan, midkoodna wuxuu ku saabsan yahay magacaabista.
Khuraafaadka: interface magac beddelan ayaa la jaanqaadi doona wax kasta
Xallinta soo jiidashada leh marka laan aysan xiriiri karin waa in la abuuro ama magaca interface goob la beddelo ilaa ay u ekaato kan wacaya. Taasi waxay ku shaqaysaa hal hab xaqiijin waxayna aamusnaan ku guuldareysataa kuwa kale, taasina waa sababta isla nidaamkaas loo gudbiyo natiijooyin is-khilaafsan. Interface-ka goobtu waa shay xiriir macquul ah oo leh meeshiisa, prefix-yo la ilaaliyay iyo xaalad. Ma aha adapter-ka jirka ee qaada baakadaha sirta ah, sidaas darteed fiirinta adapter-yada shabakadda waxba kama sheegayso shayga goobta ee la doortay.
Doorashada wax xiriir ah lama laha isticmaalayaasha caadiga ah ee gelitaanka fog. Haddii macaamiisha VPN ee shaqaaluhu soo wacaan, door kale bay leeyihiin, magacyadoodana lagama qaybgalo khariidaddan. Xaqiiji doorka uu wacaya ku jiro ka hor intaadan wax ka akhriyin magac caan ah.
Saddex qaab oo xaqiijin, saddex fure oo doorasho
Fure horay loo wadaago, cinwaanka meesha loo socdo ee interface-ka ayaa la barbardhigaa cinwaanka peer-ka soo-galayaasha. Sumaddu wax kasta bay noqon kartaa, sababtoo ah cinwaanku waa kan qaada go'aanka. Marka la isticmaalayo xaqiijinta ku salaysan magaca isticmaalaha, magaca interface-ka ayaa la barbardhigaa magaca isticmaalaha ee uu soo bandhigo wacaya. Halkan sumaddu waa furaha, taasina waa sababta magac beddelku ugu ekaan karo mid hagaajinaya hal goob oo jebinaya mid kale.
Shahaadooyinka, magaca interface-ka ayaa la barbardhigaa magaca mawduuca ee shahaadada la soo bandhigay. Magacu waa inuu u dhigmaa mawduucaas, sumad quruxsan oo hawlwadeenku hindisayna ma filnaan doonto.
Waxaa ka soo baxa laba cawaaqib. Habka fure horay loo wadaago, hal interface oo keliya ayaa la hawlgeliyaa meel gaar ah, sidaas darteed laba laan oo wadaaga hal cinwaan dadweyne oo la arkay labadaba laguma adeegi karo gelinno labanlaab ah. Oo waxaa lagu shaqeeyaa habka aad dhab ahaan habaysay, wax kasta oo console-ku soo jeediyo.
| Authentication in use | The field RRAS compares | Symptom when the two disagree |
|---|---|---|
| Pre-shared key | The peer address in the incoming connection against the interface destination | Renaming the interface changes nothing; a destination that does not match the caller stays unused |
| Username | The caller login against the interface name | A site with a friendly label never answers, while a differently named site may answer instead |
| Certificate | The subject name in the presented certificate against the interface name | An interface named after the office rather than the subject CN is never selected |
La hawlgeliyeen ma aha xiriir
Xaaladda maamulka waxay sheegtaa in interface-ka macquulka ah loo oggol yahay inuu shaqeeyo. Xaaladda xiriirka waxay sheegtaa in fadhi hadda jiro. Interface la hawlgeliyeen oo aan fadhi lahayn waa xaalad nasasho caadi ah oo loogu talagalay xiriirka baahida ku waca, sheegistana cillad ahaan waxay dadka u diraa daba-galka hakad aan jirin.
Isticmaal raadin magac leh ama raadinta domain-ka marin-u-jiidka ee la diiwaangeliyay, laakiin ma aha labada parameter wada, oo ku socodsii xaaladda server-ka loogu talagalay. Haddii interface-ka aad filayso uusan ku jirin liiska koowaad, dhibaatadu waxay ka horraysaa xaaladda: waxba lama dooran.
Akhri lammaanaha wada halkii aad gooni u akhrin lahayd. Xiriirka loogu talagalay inuu sii ahaado mid dhisan oo u muuqda mid go'ay waa mudan baaritaan, halka xiriirka firfircoon ee baahida ku xirma uu u dhaqmo sida loo qorsheeyay. Dhanka kale interface si maamul ahaan loo joojiyay wuu madoobaan doonaa, inta ay dhanka kale router-kooda dib u bilaabaan.
Midkoodna qiimayaasha ma caddeeyo in xaqiijintu guulaysatay, in ilaalinta la wadaagay ay is waafaqto, in waddooyin la rakibay ama in barnaamijka gaarka ah la oggol yahay. Kuwaasi waa afar su'aalood oo kala duwan iyo afar jawaabood oo kala duwan.
Get-VpnS2SInterface | Select-Object Name, Destination, AdminStatus, ConnectionState
Get-VpnS2SInterface -Name 'Branch-A' | Format-List Name, Destination, AdminStatus, ConnectionStateAkhri macaamilka aqoonsiga ka hor intaadan wax hawlgelin
Marka wacaya soo-galayaasha lagu khariideeyo interface aadan filayn, caddaynta faa'iidada leh waa aqoonsiga uu soo bandhigay, ma aha liiska interface-yada la joojiyay. Soo bixi dhacdooyinka gelitaanka fog ee dhawaanahan oo akhri cinwaanka wacaya, natiijada xaqiijinta iyo magaca interface-ka la doortay. Interface la joojiyay waxa uu noqon karaa goob si ula kac ah loo fariistay ama lamaanaha la mamnuucay. In la hawlgeliyaa si loo arko haddii hal khalad gelitaan uu baaba'o waa isbeddel habayn oo leh cawaaqib marin-u-jiid iyo gelitaan, sidaas darteed go'aanka u mar milkiilaha xiriirka goobtaas, oo ay la socdaan meeshiisa, prefix-yadiisa la ilaaliyay iyo siyaasaddiisa.
Haddii khariidadda runtii khaldan tahay, hagaaji furaha ma aha calaamadda: hagaaji mawduuca shahaadada ama magaca interface-ka xaaladda magaca isticmaalaha, iyo meesha loo socdo xaaladda furaha horay loo wadaago. Kadib hal mar dib u xiriir oo xaqiiji in isla wacaya uu hadda dooranayo shayga loogu talagalay.
Get-WinEvent -LogName Application -MaxEvents 50 | Where-Object { $_.ProviderName -like '*RemoteAccess*' }Xir wareegga iyadoo la isticmaalayo hawl la oggol yahay
Xaalad cagaar ma aha aqbalid. Marka interface-ka saxda ah la doorto, soo saar taraafikada ay nashqaddu oggoshahay, laga bilaabo martigeliyaha ku jira hal prefix la ilaaliyay ilaa martigeliyaha ku jira kan kale, oo xaqiiji in jawaabtu soo noqoto isla marinkaas. Samee isla isku dayga martigeliyaha ay tahay in la diido, adigoo isticmaalaya Test-NetConnection -ComputerName 10.44.2.10 -Port 445 ka soo horjeeda adeeg ay nashqaddu ka reebtay, oo dib u akhri dhacdooyinka gelitaanka fog. Xiriirka goobta ee qaada wax ka badan prefix-yadiisa loogu talagalay, ama ka jawaaba adeeg ay siyaasaddu ka reebtay, waa khalad marin-u-jiid oo aan wax baaritaan xaaladeed muujin doonin.
Diiwaangeli habka xaqiijinta, furaha doorashada iyo prefix-yada la oggol yahay si wada jir ah buug-gacmeedka hawlgalka goobta. Injineerka xiga wuxuu la kulmi doonaa isla shaxda saddexda qiimaha leh, oo caadada magacaabistu waxay macne yeelataa marka xaaladdaas la qoro.