VPN-ka Windows waxay muujinaysaa 255.255.255.255: ma maskadu waa khalad?
Tunnel point-to-point ah, mask host-ku waa caadi. Xaqiiji qaabka interface-ka, akhri waddada host-ka fashilmayaa kadibna kala sooc DNS-ka iyo gelitaanka adeegga.
Tunnel-ka wuu xirmaa, waxaad furtaa faahfaahinta adapter-ka oo maskadu waxay muujinaysaa 255.255.255.255. Marka la barbardhigo 255.255.255.0 ee LAN-ka xafiiska waxay u ekaanaysaa mid jaban, halkaasayna khaladku inta badan ka bilaabmaa. Xiriirka point-to-point ah mask host-ku waa sharraxaadda saxda ah ee cidhifka gudaha, shabakadaha fogna waxay u yimaadaan sidii waddooyin halkii ay ahaan lahaayeen subnet ku xiran. Nidaamka hoose wuxuu kala soocaa labada su’aalood si aadan u dib u dhisin xaddiga DHCP ee shaqeeya si aad u hagaajiso qiime la muujiyay oo keliya.
Xiriirka point-to-point ma aha qayb Ethernet
Interface Ethernet wuxuu u baahan yahay mask subnet sababtoo ah cinwaan kasta oo ku jira xaddigaas waa laga yaabaa in laga gaaro isla xarigga. Tunnel qaab PPP ah wuxuu leeyahay hal peer oo keliya dhinaca kale. Ma jiro goob baahin, ma jiro ARP mana jirto sabab cinwaanka gudaha uu sharraxayo xad.
Gorgortanka cinwaanka ee qaabkaas waxaa lagu qeexay RFC 1332, taas oo daboolaysa sida labada dhinac ay ku heshiiyaan cinwaannadooda. Waxa aysan samaynaynin waa in ay macmiilka siiso LAN-ka xafiiska sidii shabakad si toos ah ku xiran. Macmiilku wuxuu bartaa halka xafiisku ku yaal isagoo rakibaya waddooyin iyada oo loo marayo xiriirka, waddooyinkaasna waa kuwa dhab ahaan go’aamiya gaaritaanka.
Tani macneheedu maaha in mask kasta oo aad aragto uu sax yahay. Macmiil si khaldan loo habbeeyay ayaa sidoo kale soo saari kara cinwaan yaab leh. Qodobku wuu cidhiidhi yahay: mask host oo ku yaal adapter-ka noocan ah waa la filayaa, marka keligiis ma aha caddayn khalad.
Tallaabo 1: xaqiiji qaabka interface-ka
Daawo waxa adapter-ku yahay ka hor inta aadan xukumin waxa uu sheegayo. Xarfaha sharraxaaddu waxay aqoonsadaan driver-ka, dhererka prefix-ka ee cinwaanka la qoondeeyayna wuxuu xaqiijinayaa waxa macmiilku ka wada hadlay:
Get-NetAdapter | Select-Object Name,InterfaceDescription,Status,ifIndex
Get-NetIPAddress -InterfaceAlias 'Corp VPN' | Select-Object IPAddress,PrefixLength,PrefixOrigin
Get-NetIPInterface -InterfaceAlias 'Corp VPN' | Select-Object AddressFamily,ConnectionState,NlMtuAmarka saddexaad ayaa ah kan xalliya inta badan doodaha. Unugga ugu sarreeya ee gudbinta oo hooseeya waa sifo xiriir la duubay, halka qiime Ethernet u eg u tilmaamayo qaab adapter macmal ah oo kale. Haddii sharraxaaddu sheegto driver PPP ama RAS oo prefix-ku yahay 32, waxaad arkeysaa isla qaabka kor lagu sharraxay waxaadna ka joojin kartaa welwelka maskada.
| Observation | What it means | Reasonable next step |
|---|---|---|
| /32 on a PPP or RAS adapter | Point-to-point endpoint addressing | Look at routes, not the mask |
| /32 on an Ethernet-like adapter | Client chose host addressing deliberately | Confirm against the server's push policy |
| Mask differs from the office LAN | Usually irrelevant to reachability | Test the destination instead |
Tallaabo 2: akhri waddada bartilmaameedka fashilmayaa
Gaaritaanka waxaa lagu go’aamiyaa bartilmaameed kasta, interface hal ku xiranina wax kama sheegayo taas. Weydii shaxda waddooyinka si toos ah cinwaanka uu isticmaaluhu dhab ahaan isku dayayo inuu gaaro:
Get-NetRoute -InterfaceAlias 'Corp VPN' | Select-Object DestinationPrefix,NextHop,RouteMetric
Find-NetRoute -RemoteIPAddress 10.24.6.15
route print -4Find-NetRoute waa jawaabta tooska ah: waxay sheegtaa interface-ka iyo cinwaanka isha ee nidaamku isticmaali lahaa bartilmaameedkaas. Haddii ay soo celiso tunnel-ka, taraafikada host-kaas waxay maraysaa tunnel-ka maskaduna waligeed ma ahayn dhibaatada.
Haddii ay soo celiso adapter-ka jireed, isbarbar dhig labada waddo ee suurtagalka ah iyo cabbirkooda. Waddo gudaha ah oo gaar ah, hadhaagii macmiil kale ama cabbir hoose oo ku yaal waddada jireed dhammaantood waxay ka guuleystaan waddo tunnel ballaaran. Natiijada la arki karo waa kheyraad aan la gaari karin inta wax walba kale shaqeeyaan. Prefix-yada dhaadheer had iyo jeer guuleysta, sidaas darteed guuleystaha inta badan waa waddo host oo qof ku daray bilo ka hor oo uu illoobay.
Sidoo kale hubi labada jiho inta aad halkan joogto. Waddo u socota dhinaca server-ka waa lagama maarmaan laakiin kuma filna, sababtoo ah jawaabtu waa in ay sidoo kale tunnel-ka ku soo noqotaa. Marka hal host gudaha uu shaqeeyo mid kalena uusan shaqeyn, farqigu inta badan wuxuu ku jiraa shaxdan ee kuma jiro habaynta adapter-ka.
Tallaabo 3: kala sooc xallinta magacyada iyo gelitaanka adeegga
Barnaamij ku guuldareysta inuu furo qayb wuxuu ku guuldareysan karaa mid ka mid ah laba marxaladood oo aad u kala duwan. Xalli magaca, kadibna gaar cinwaanka. Haddii tan koowaad guuldareysato tan labaadna shaqeyso, tunnel-ku wuu fiican yahay xalliyuhuna ma fiicna:
Resolve-DnsName files.corp.example.internal
Get-DnsClientServerAddress -InterfaceAlias 'Corp VPN'
Test-NetConnection -ComputerName 10.24.6.15 -Port 445Imtixaan cinwaan oo guuleystay oo la socda imtixaan magac oo guuldareystay wuxuu caddeeyaa dhibaatada in ay ku jirto xallinta, amarka labaadna wuxuu muujinayaa haddii interface-ka tunnel-ku uu helay server haba yaraatee. Macmiillo badan ayaa riixa DNS sida qayb ka mid ah habaynta tunnel-ka, profile iska indhatiraya doorashooyinkaas la riixayna wuxuu mishiinka uga tagayaa isticmaalka xalliye aan arkin aagga gaarka ah.
Ha u qaadan cinwaan shaqeeya sidii xal joogto ah. Ku xiridda cinwaan ayaa dhaafi karta xallinta magacyada waxayna wiiqi kartaa xaqiijinta aqoonsiga server-ka ee barnaamijku haddii kale samayn lahaa. Taasi waa dib u dhac amni oo lagu qariyay xal ku meel gaar ah. U isticmaal inaad ogaato khaladka, kadibna hagaaji xallinta.
Dib u noqod: ha dib u dhisin DHCP sababtoo ah qiime la muujiyay
Haddii aad hore u bilowday inaad beddelto adeegga cinwaanka, istaag oo hubi haddii wax ka mid ah waxa aad beddeshay ay tahay mid lagama maarmaan ah. Dib u abuurista xad, dib u soo saarista leases ama guurinta barkada waxay beddelaysaa xaalad ay macmiillo kale ku tiirsan yihiin, waxna ka mid ah taas laguma caddeeyo mask host oo ku yaal adapter point-to-point.
Get-DnsClientServerAddress -InterfaceAlias 'Corp VPN'
Find-NetRoute -RemoteIPAddress 10.24.6.15
Test-NetConnection -ComputerName files.corp.example.internal -Port 445Socodsii saddexdan ka dib isbeddel kasta oo bartilmaameed ah oo la barbar dhig socodkii hore. Natiijada faa’iidada leh waa waddo la diiwaangeliyay oo loo maro kheyraadka, ma aha adapter maskadiisu u eg tahay LAN-ka xafiiska.
Kadib qor waxa maskadu dhab ahaan ka dhigan tahay, sababtoo ah qofka xiga wuxuu furi doonaa isla wada-hadalkaas wuxuuna gaari doonaa isla gabagabada khaldan. Hal jumlad oo ku jirta qoraallada profile-ka, oo sheegaysa in tunnel-ku yahay point-to-point iyo in subnets-ka fog ay u yimaadaan sidii waddooyin, waxay badbaadinaysaa baaritaanka oo dhan marka xigta.