Add-VpnConnection: kungani i-PSK iphuka futhi kungani ikheli lihlala likhona
I-PowerShell inweba ukhiye owabiwe ngaphambili ngaphakathi kwezimpawu zokucaphuna ezimbili ngaphambi kokuba i-cmdlet iwugcine, futhi umhubhe osebenzayo ugcina ikheli elidala uze uphinde uxhumane.
Iphrofayela ye-VPN ye-Windows iyingxenye yencwadi yocingo, futhi i-PowerShell ingenye yezindlela zokuhlela leyo ngxenye. Kulowo mehluko kuvela izinto ezimbili ezingaphumeleli: ukhiye owabiwe ngaphambili ofika kuseva usuwonakele, nekheli leseva elibonakala selibuyekeziwe kodwa okungewona umhubhe olandelayo ozoshayela kulo. Kokubili kubonakala kalula uma uthatha iphrofayela njengesimo esigciniwe hhayi njengomyalo oyisebenzisile. Incazelo ilandela ukulandelana kokuhlelwa: dala, shintsha, ubukhulu, funda futhi.
Yakha iphrofayela ngokhiye oqondile
Add-VpnConnection yamukela ukhiye L2TP owabiwe ngaphambili nge--L2tpPsk. I-PowerShell icubungula intambo ngaphambi kokuba i-cmdlet iyithole, futhi ngaphakathi kwezimpawu zokucaphuna ezimbili uphawu lwedola luqala ukubhekisela okuguquguqukayo kuyilapho i-backtick iqala i-escape. Ukhiye oqukethe okunye kwalokhu ufika umfishane, noma unophawu oluhlukile, futhi iphrofayela idalwa ngempumelelo ngemfihlo engalungile.
Ngemva kwalokho ukwehluleka kubonakala ekuqinisekiseni i-IPsec, lapho umhubhe unqaba ukuphakama. Yingakho iphutha lezimpawu zokucaphuna libikwa kaningi njengenkinga yohlangothi lweseva: iphrofayela ikhona, igama lilungile, futhi imfihlo ingalungile ngokuthula.
| How you write it | What PowerShell does | Result |
|---|---|---|
| "p@ss$word!42" | Expands $word as a variable | Stored key is truncated |
| Double-quoted with an escape character | Consumes the next character as an escape | One character disappears |
| 'p@ss$word!42' | Keeps the literal characters | Stored key matches the secret |
Izimpawu zokucaphuna ezingeziwe ziyisixazululo, futhi kumele zihlanganise lonke inani. Uma ingxenye isivele ikhona ngokhiye ongemuhle, i--Force iyayishintsha, noma susa bese wakha iphrofayela futhi bese uhlola ngokuxhumana okusha:
Add-VpnConnection -Name "Contoso-L2TP" -ServerAddress vpn.contoso.example -TunnelType L2tp -L2tpPsk 'n3w$ecret!2026' -AuthenticationMethod Pap -RememberCredential -ForceGcina imfihlo yangempela ngaphandle komlando we-shell nemibhalo eyabiwe. Yifunde ngesikhathi sokusebenza endaweni yokugcina evunyelwe futhi udlulise okuguquguqukayo esikhundleni senani eliqondile, okugwema ngokuphelele inkinga yezimpawu zokucaphuna.
Shintsha ikheli, bese uphinde uxhumane
Set-VpnConnection yamukela amapharamitha ahlukaniswe isikhala, hhayi uhlelo lokwabela. Ukubhala i--ServerAddress = "203.0.113.10" kudlulisa ithokheni eyengeziwe, futhi i-cmdlet iyaphutha noma igcine into obungayihlosile. Ifomu elifanele yi--Name "Office L2TP" -ServerAddress 203.0.113.10.
Ngisho nangohlelo olufanele, ushintsho alufinyeleli kumhubhe osevele uphakeme. Ukuxhumana okusunguliwe kugcina ikheli elishayelwe kuze kube kuyanqanyulwa, ngakho ukuhlola isikhathi esifanayo akufakazi lutho mayelana nenani elisha. Nqanyula, hlela, phinda uxhumane, futhi uqinisekise ikheli lozakwenu emininingwaneni yokuxhumana.
Ezinye izici azikwazi ukushintshwa endaweni. Uma i-cmdlet inqaba, bhala amapharamitha akhona, susa iphrofayela bese uyenza futhi ngamanani alungisiwe, futhi gcina izilungiselelo zokuqala zomhubhe nokuqinisekisa. Umbhalo odinga ukushintsha inombolo yocingo kuphela ungahlela ingxenye yencwadi yocingo nge-RAS API esikhundleni sokuphinda kwakhe konke. Noma yiluphi uhlangothi olukhethayo, qinisekisa amanani agciniwe ngemuva kwalokho ungathembeli ekuthuleni komyalo.
Yazi ukuthi yiphi incwadi yocingo oyihlelile
Iphrofayela yomsebenzisi ngamunye ihlala kufolda yokuxhumana kwenethiwekhi yalowo msebenzisi, futhi iphrofayela yabo bonke abasebenzisi ihlala kufolda yomshini wonke ngaphansi kwesihlahla sedatha yohlelo. Lezi zingxenye ezahlukene ezinobukhulu obuhlukene, futhi ukuhlela enye kushiya enye ingathintekile.
Yingakho ushintsho lungabonakala sengathi lwanyamalala: umbhalo wagijima ngaphansi kwe-akhawunti eyodwa, futhi ukuhlolwa ngaphansi kwenye. Sebenzisa i--AllUserConnection uma iphrofayela ingeyomshini, futhi uhlole ubukhulu obufanayo uma uyifunda futhi.
Funda iphrofayela futhi ngaphambi kokuhlola
Buza i-Windows ukuthi yagcina ini, hhayi ukuthi wadlulisa ini:
Get-VpnConnection -Name "Office L2TP" | Select-Object Name, ServerAddress, TunnelType, AuthenticationMethodQhathanisa lokho okukhishiwe nenhloso, bese uqala ukuxhumana okusha. Uma ukushayela kwehluleka, bheka ilogi yeklayenti le-RAS ku-Event Viewer ngaphambi kokushintsha iphrofayela futhi, ngoba ilogi isho isigaba esihlulekile.
Gcina umklamo wokuqinisekisa ungaphazamisekile ngenkathi uhlela. Umyalo oshintsha ikheli kodwa ushiya isitifiketi noma ukulungiselelwa kwe-EAP uletha ukwehluleka okubonakala kungahlobene nokuhlelwa, futhi ukukhipha iphrofayela esebenzayo kusengaphambili kukunikeza into ongayibuyisela esikhundleni sokuqagela.