Sababta RDP uu u qaboobo marka kombuyuutarka fog uu ku xirmo VPN

Waxaad ku jirtaa daaqadda RDP, desktop-ku wuu ku yaal shaashadda, oo waxaad riixdaa Connect-ka client-ka VPN ee ku shaqeynaya mishiinkaas fog. Dhowr il-biriqsi kadib daaqaddu way qaboobaa oo markaas way xirmaa. Tunnel-ku wuu soo baxay, taas ayaa log-ga VPN uu soo sheegi doonaa, oo taas ayaa ah xaqiiqada ugu faa'iidada yar dhacdada oo dhan. Fadhigu wuu dhintay sababtoo ah mishiinkii aad la hadlaysay wuxuu beddelay qaabka uu kaaga jawaabo, sidaas darteed fiiri marinka soo-noqodka ka hor inta aadan taaban tunnel-ka.

Diiwaan geli barta dhammaadka ee fadhigaagu runtii isticmaalo

Cinwaanka lagu qoray client-ka RDP ma aha daruuri cinwaanka kombuyuutarka fog ka jawaabo. NAT, RD Gateway ama isku-dheellitirka culeyska ee host-ka hortiisa ayaa dib u qori kara, marinka soo-noqodka waxaa qeexaya cinwaanka isha ee mishiinka fog uu ku arko xiriirka la sameeyay. Haddii aad halkan qaldanto, waxaad raadin doontaa marin aan waligiis ku lug lahayn.

Kombuyuutarka fog, ka hor inta VPN aan la xirmin, liis soo bandhig fadhiyada la sameeyay oo ka akhri cinwaanka peer-ka shaxda. Kadib meel ka baxsan mishiinkaas ku qor, sababtoo ah ma awoodi doontid inaad akhrido marka fadhigu dhaco.

Get-NetTCPConnection -LocalPort 3389 -State Established |
  Select-Object LocalAddress, RemoteAddress, RemotePort

U tixgeli cinwaankaas inuu yahay waxa ay tahay inuu la sii ahaado mid la gaari karo. Haddii uu yahay cinwaan gaar ah oo ku yaal VLAN maamul, tunnel-ku waa inuu marinkaas iska daayo. Haddii uu yahay cinwaan dadweyne, jawaabtu waa inay ka soo baxdo isla interface-kii soo galay codsiga.

Akhri marinka ka jawaaba bartaas dhammaadka

Windows wuxuu u doortaa interface goob kasta, oo Find-NetRoute wuxuu muujinayaa go'aanka uu hadda qaadan lahaa. Ku orod cinwaanka peer-ka ka hor inta aadan xirmin, kadib mar kale tunnel-ku sarreeyo, oo isbarbardhig index-ka interface-ka iyo boodka xiga labada jawaab. Isbeddelka interface-ka waa dhammaan cilladda hal saf oo soo-saaris ah.

Find-NetRoute -RemoteIPAddress 203.0.113.24
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Sort-Object RouteMetric
Get-VpnConnection -Name "Work VPN" | Select-Object SplitTunneling, Routes

Profile-ka tunnel buuxa wuxuu dhigaa marin caadi ah oo tunnel-ka mara, sida hagaha Windows ee marin-u-jiidka VPN uu sharraxayo, sidaas darteed jawaab kastaa hadda waxay ka baxdaa VPN-ka oo waxay ku xiran tahay in dhinaca kale uu dib ugu jiido client-kaaga. Profile-ka tunnel-ka qaybsan ayaa caadi ahaan ammaan badan laakiin ma aha mid difaac leh, sababtoo ah marin gaar ah oo daboolaya cinwaanka peer-ka ayaa weli ka adkaan kara marinka caadiga ah ee jireed. Si kastaba ha ahaatee su'aashu waa isku mid: ka dib marka tunnel-ku soo baxo, cinwaanka peer-ka weli ma u xallimaa interface-kii soo geliyay fadhiga?

Haddii kale, sixitaanku waxa uu ku jiraa profile-ka ama marin ka-reebitaan cad oo uu ansixiyay milkiilaha siyaasadda VPN. Inaad gacanta ku wax ka beddesho shaxda marin-u-jiidka host wax-soo-saar leh inta dhacdadu socoto waa sida xal ku-meel-gaar ah uu u noqdo qaabayn aan la diiwaan gelin.

La soco isbeddelka profile-ka firewall-ka

Interface cusub ayaa la kala saaraa marka uu soo baxo, kala-saariduna waxay go'aansataa profile-ka firewall-ka ee gaadiidkiisa lagu qiimeeyo. Adapter-ka tunnel-ka ee ku dhaca qaybta Public ayaa si aamusan u joojin kara RDP-ga soo-gala inkasta oo shaxda marin-u-jiidka ay u ekaato mid qumman. Tani waa qaabka labaad ee guuldarrada, waxayna soo saartaa calaamad kale: marinku waa sax, baakaduhu way yimaadaan, host-kuna wuu diidaa xiriirka.

Get-NetConnectionProfile
Get-NetFirewallProfile | Select-Object Name, Enabled
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select-Object Name, Enabled, Profile

Isbarbardhig profile-ka ku xiran interface-ka tunnel-ka iyo profile-yada ay xeerarka Remote Desktop u jeedaan. Xeerka loo daawoon oo kaliya Domain iyo Private waxba kama qabto interface lagu kala saaray Public, oo wax sixitaan marin ah ma beddelaan taas. Qaar ka mid ah client-yada VPN waxay sidoo kale naqshad ahaan xaddidaan gelitaanka subnet-ka maxalliga ah, taas oo soo saarta isla qaabkaas guuldarrada oo ka imanaya kontorool kale.

Tijaabi kala-guurka meel aad ka soo noqon karto

Samee isku-xirka oo dhan console-ka dibadda ama marin maamul oo labaad, sidan: xaqiiji fadhiga jira, xir VPN-ka, fur fadhi cusub, kadib gooy VPN-ka oo fur mid kale. Tallaabo kastaa waxay tijaabisaa kala-guur kale, oo tan ugu horreysa ee guuldareysata ayaa kuu sheegta kontoroolka mas'uulka ah.

Qorshee dib-u-noqodka ka hor inta aadan bilaabin, tusaale ahaan hawsha qorsheysan ee orodda rasdial "Work VPN" /disconnect muddo cayiman kadib. Taasi waxay fadhiga lumay u beddelaa hakad shan daqiiqo ah halkii booqasho goob ah, waana caymiska ugu jaban habka oo dhan.

Dib u soo gal marka fadhigu horey u tagay

Haddii host-ku horey u gaari karin, jooji isku dayga xiriiro RDP cusub isla client-ka oo isticmaal kanaalka soo-kabashada ee deegaanku horey u leeyahay: RD Gateway, console hypervisor ama interface maamul oo dibadda ah. Weydii qofka gelitaanka console-ka leh inuu ordo isla Find-NetRoute iyo Get-NetConnectionProfile amarrada, si caddayntu uga badbaaddo soo-kabashada.

Kadib go'aanso habka joogtada ah ee aan ahayn kan ugu dhaqsiyaha badan. Ama marinka maamulka ayaa si cad loogu ilaaliyo profile-ka VPN, ama maamulku wuxuu u guuraa kanaal aan ku xirneyn marinka caadiga ah ee host-ka. Labadaba waa la difaaci karaa; marin host oo leh gateway la qiyaasay maaha. Qor midkaad dooratay, oo diiwaan geli cinwaanka peer-ka ee ah inuu badbaado.