Ukuhlelwa kwesayithi ye-AD noma ukugxilisa isilawuli sesizinda sabathengi be-VPN

Abathengi bokufinyelela kude echibini le-VPN bangagcina sekukhuluma nesilawuli sesizinda esingaphesheya komhlaba, futhi lokho kungalungiswa ngezindlela ezimbili: chaza ichibi njenge-subnet ye-Active Directory ehlanganiswe nesayithi esinezilawuli ezifanele, noma ugxilise iklayenti noma uhlelo kusilawuli esisodwa esithile. Eyokuqala isitatimende sokwakheka komhlaba i-DC Locator engasebenza ngaso. Eyesibili ukushintshwa kohlelo ngalunye okungayinaki ngokuphelele indlela yokwakheka. Zibiza izinto ezihlukene, futhi ukubamba okusheshayo namuhla yikho okwenza iqembu lekhabethe ligcine ngokunakekela kokubili.

Into eshintshwa yileyo ndlela ngayinye

Into ye-subnet iyirekhodi ekhabetheni elisho ukuthi uhla lwamakheli lungolwesiphi isayithi. Ngemojula ye-Active Directory nesayithi esivele sikhona, umsebenzi mncane ngokwanele ukuthi ungabukwa kuqala:

New-ADReplicationSubnet -Name "10.90.0.0/24" -Site "Remote-Access-Hub" -WhatIf
Get-ADReplicationSubnet -Filter * | Select-Object Name,Site

-WhatIf ibuka ukubhalwa kwekhabethe kuqala. Ayidali into futhi ayihloli ukuthi iklayenti elikulolo hla lingakwazi yini ukufinyelela okuthile, futhi yilokho abantu abakulindele. I-DC Locator ifunda imodeli yesayithi lapho ixazulula amarekhodi ensizakalo, ngakho into ye-subnet enembile ishintsha okunikezwa iklayenti.

Ukugxilisa kusebenza kwelinye ungqimba. Igama lesilawuli elingaguquki kukho konke ukuhlelwa kohlelo, umucu we-LDAP onomsingathi ngaphakathi, noma inani lerejista elisho iseva ethandwayo, konke kususa ukuthola endleleni. Uhlelo lukhuluma naleso silawuli kuze kube umuntu ushintsha isilungiselelo, futhi ukushintsha lapho kuhluleka yikho okwenziwa yilolo hlelo ngokwalo.

Lapho ukuhlelwa kwe-subnet kunqoba khona

Ukuhlela ichibi kuchaza indawo yenethiwekhi kanye, kukho konke iklayenti elisebenzisa i-DC Locator. Lapho ichibi likhula lisuka ku /24 eyodwa liye kwemithathu, imodeli ishintsha ezintweni ezimbili noma ezintathu esikhundleni sohlu lwezinhlelo. Leyo yinyuzi yonke, futhi inkulu lapho inani lamaklayenti lingekho ngaphansi kokulawula kwakho.

Inkinga iwukuthi into kufanele ihambisane nekheli isilawuli esilibona ngempela. Uma isango le-VPN lihumusha iklayenti ngalinye libe yikheli lesikhungo, ukwengeza ichibi elingahumushiwe kuchaza indawo yenethiwekhi okungekho silawuli esike sayibona. Thatha isinqumo kusenesikhathi ukuthi ingabe umklamo ugcina ikheli lomthombo weklayenti, futhi uma ungakugcini, hlela uhla oluhumushiwe esikhundleni sechibi olilihlele kuseva ye-VPN.

Umkhawulo wesibili: imodeli yesayithi iwukuthanda kanye nesitatimende sokwakheka komhlaba. Ayenzi isilawuli sifinyeleleke futhi ayiniki umsebenzisi lutho. Ukufinyeleleka kwenziwa imizila nenqubomgomo yodonga lomlilo; ukugunyazwa kwenziwa inqubomgomo yama-akhawunti.

Lapho ukugxilisa kunqoba khona

Ukugxilisa yimpendulo efanele lapho ukuthola kungasebenzi: uhlelo oludala oluxazulula isilawuli ngegama ongakwazi ukulishintsha, isihlungi esivumela ikheli elilodwa lesilawuli, noma iqoqo elingaguquki lamaseva lapho isilawuli siyingxenye yomklamo wohlelo. Kulezo zimo ukugxilisa kuwumbhalo womkhawulo wangempela, hhayi indlela emfushane.

Izindleko zako ziphambene nokuhlelwa. Igama eligxilisiwe alilandeli ichibi, alishintshi lapho kuhluleka ngaphandle uma uhlelo lwazi kanjani, futhi aliphili ekushintsheni igama noma ekukhishweni kwesilawuli emsebenzini ngaphandle kokuhlolwa kohlu lwempahla. Kubuye kufihle izinkinga zokwakheka komhlaba, ngoba wonke iklayenti eligxilisayo libonakala liphilile kuyilapho imodeli yesayithi ibola buthule.

Ukushintsha amarekhodi akheli avamile esizinda ngeseva eyodwa ethandwayo akuyona indlela yesithathu. Kuyaphula wonke umsebenzisi olindele iqoqo elivamile lokuthola, futhi akusalawuli ukuthi iklayenti elazi ikhabethe likhetha kanjani isayithi.

Khetha ngezimiso ezintathu

Zibuze ngalolu hlelo futhi isinqumo ngokuvamile sizithathela sodwa. Okokuqala, ingabe uhlelo lusebenzisa i-DC Locator nhlobo, noma seluvele luthwala ikheli lesilawuli? Okwesibili, ingabe isilawuli sibona ikheli lechibi, noma elihumushiwe? Okwesithathu, ichibi lishintsha kangaki uma kuqhathaniswa nokuthi zingaki izindawo ukugxilisa okufanele kukhuliswe kuzo?

Izinhlelo ezazi ikhabethe kanye nomzila ogcina umthombo kanye nechibi elishintshayo: hlela i-subnet. Uhlelo olungakwazi ukuthola, noma isihlungi esamukela ikheli elilodwa: lugxilise, futhi ubhale ukuthi kungani. Konke okunye yicala lokulungisa ukwakheka komhlaba, hhayi lokwengeza okunye ukushintshwa.

Qinisekisa kusuka kuklayenti ye-VPN futhi ugcine izivumelwano zehlukene

Hlola kusuka emzileni wangempela wokude, hhayi kusuka esiteshini sokusebenza se-LAN esivele sisendaweni. Umbono weklayenti uqobo kuphela obalulekile:

nltest /dsgetsite
nltest /dsgetdc:corp.example.com /force
echo %LOGONSERVER%

Uma isayithi esibikiwe kuyileso okuhlele, into iyavumelana. Uma iklayenti lingabiki sayithi, ikheli elilivezayo aliweli kuyo yonke into ye-subnet, okumvamisa kusho ukuhumusha noma isiqalo esidala. Bese uqinisekisa ukuthi isilawuli esikhethiwe yisona obukade usifuna ngaphambi kokucabanga ukuthi ukuhlelwa kwehlulekile, ngoba amaklayenti agcina imiphumela yokuthola, futhi ukushintsha lapho kuhluleka kungakhetha esinye isilawuli ngokusemthethweni.

Gcina izivumelwano ezintathu encwadini eyodwa: ichibi kanye nezinto zalo ze-subnet, izilawuli ezifinyeleleka emzileni we-VPN, kanye nenqubomgomo enquma ukuthi umsebenzisi ongenile angenza ini. Isayithi akuwona umthetho wodonga lomlilo futhi akusona umngcele wokuvimbela, futhi ushintsho olulandelayo lwechibi luzohlukanisa buthule abasebenzisi bakude emodelini yenethiwekhi yekhabethe uma ukuhlelwa, imizila nezinye izindlela ezibhalwe phansi kungahambi ndawonye.