I-Always On VPN akuwona ukufinyelela kwe-LAN: uhlu lokuhlola izinsiza

I-Always On umjikelezo wempilo woxhumano: iphrofayili ixhuma ngesikhathi sokungena noma ngaphambi kwako, futhi ixhuma kabusha ngaphandle kokuthi umsebenzisi acindezele lutho. Lokho akusho ukuthi yonke indawo eyimfihlo, iphrothokholi nomsebenzisi kuvunyelwe. Umbuzo wangempela ukuthi yiziphi izinsiza iphrofayili esetshenzisiwe ezinikeza ngempela, futhi leyo mpendulo idinga ukuhlolwa kwesiza ngasinye, hhayi ukubheka ibheji ethi Connected.

Isinyathelo 1: Bhala isiza ngaphambi kokusihlola

Qala ngerekhodi elifushane kuhlelo lokusebenza ngalunye, elithathwe endaweni yangempela: igama, isiqalo sendawo, isevisi nechweba, indima yethuneli, iqembu lobunikazi kanye nendlela yesixazululi.

Name: portal.corp.example
Destination: 10.20.5.0/24
Service: HTTPS 443
Tunnel role: user access after sign-in
Identity: assigned employee group
Resolver: corporate private DNS

Irekhodi liphoqa imibuzo emine ehlukene. Umzila unquma ukuthi ikheli liya kuphi; inqubomgomo ye-DNS inquma ukuthi iklayenti lilifunda kanjani ikheli; isihlungi sethrafikhi sinquma ukuthi lowo msebenzi ungasebenzisa uxhumano yini; ukudilika komlilo kanye nezimvume zohlelo endaweni yokufika kunquma ukuthi isicelo siyamukelwa yini. Akukho kulezi zine okuvela ethunelini elixhunyiwe.

Isinyathelo 2: Thola ukuthi iyiphi ithuneli okufanele iyithwale

I-Windows Always On VPN inethuneli yedivayisi kanye nethuneli yomsebenzisi, ezilungiselelwe njengamaphrofayili ahlukene anezitifiketi nemikhawulo ehlukene. Ithuneli yedivayisi ivamise ukuthwala kuphela ingqalasizinda edingekayo ngaphambi kokungena, njengokuphathwa kanye nezinsizakalo zesizinda; ukufinyelela okubanzi kwezinhlelo zabasebenzi kungokwethuneli yomsebenzisi.

Izihlungi zethrafikhi ziyisici sethuneli yedivayisi, yingakho isibonelo se-Microsoft sizisebenzisa kuthrafikhi yokuphatha. Ukukopisha leso sibonelo kuphrofayili evamile yezinsiza kunikeza ithuneli exhumayo kodwa ethwala iqoqo elingalungile. Qinisekisa uxhumano olusebenzayo nge-Get-VpnConnection bese uhlola ngaphansi kwalowo xhumano.

Isinyathelo 3: Qinisekisa umzila wekheli langempela

Susa igama kanye, bese uhlola umzila: i-Find-NetRoute -RemoteIPAddress 10.20.5.10 ibika isixhumi esikhethiwe, ukweqa okulandelayo nekheli lomthombo. Uma isixhumi siyisikhangisi somzimba, isiqalo asikho eqoqweni lemizila yethuneli noma iklayenti lisikhiphile ngethuneli ehlukanisiwe. Qhathanisa nencazelo yephrofayili esikhundleni sokwengeza umzila wasekhaya.

I-route add yasekhaya ingenza isivivinyo sidlule bese inyamalala ekuhlaziyweni kwenqubomgomo okulandelayo, ngakho ushintsho lungolwephrofayili ephethwe. Hlola isiqalo kuphrofayili yomsebenzisi neyedivayisi, futhi uhlole isilungiselelo sethuneli ehlukanisiwe: ithuneli ephelele ayidingi umzila wesiqalo ngasinye, ehlukanisiwe idinga eyodwa kusiqalo ngasinye esiyimfihlo esisithwalayo.

Isinyathelo 4: Hlola ukuxazululwa kwamagama ayimfihlo ngokwahlukile

Amagama ayimfihlo anendlela yawo yenqubomgomo. Iphrofayili inganikeza imithetho ye-NRPT kanye nohlu lokusesha lwesijobelelo se-DNS, okusebenza ngesikhathi ithuneli imile. Funda nge-Get-DnsClientNrptPolicy ukuthi iklayenti lathola ini ngempela, bese uhlola igama nekheli kuseshini efanayo. Uma amagama ehluleka kuyilapho amakheli esebenza, isixazululi siyimbangela; uma kokubili kuhluleka, umzila.

Igama lingase futhi lixazululeke libe ikheli elingaphandle kwemizila yethuneli, lokho okuhlanganisa impumelelo nokuphelelwa isikhathi. Qhathanisa ikheli elibuyisiwe nesiqalo esiserekhodini yakho; uma kuhlukene, indawo eyimfihlo iphendula ngekheli lomphakathi noma elinye futhi umzila ohambisanayo awuwona owaklanywa.

Isinyathelo 5: Hlola izihlungi, ubunikazi kanye nesango lohlelo lokusebenza uqobo

Izihlungi zethrafikhi zikhawulela ukuthi yimaphi amaphrothokholi namachweba angasebenzisa ithuneli yedivayisi, futhi iqoqo elincane lingavimbela isiza umzila obuzosithwala. Iphrofayili inikeza uxhumano eqenjini, kodwa isiza sinemvume yaso: umsebenzisi ongaxhuma akamukelwa ngokuzenzakalela yiseva yamafayela.

Shintsha iphrofayili ephethwe ngumnikazi wayo, kungaba i-Intune, ukusetshenziswa kwe-ProfileXML noma iskripthi sokusebenza, bese uphinda uhlole ngemva kokuxhuma kabusha okuvamile nangemva kokuqalisa kabusha: ukwehluleka okuvamile umzila wasekhaya ophelelwe yisikhathi noma iphrofayili esetshenziswe kanye kuphela. Gcina inguqulo yephrofayili eceleni komphumela wokuhlola.