Ukuhlola kokugeleza kwe-IP kwe-Azure kuthi kuvunyelwe, kodwa i-VPN isehluleka

Umhubhe wendawo-kuya-endaweni uxhumekile, i-VM inempilo, kodwa iklayenti lendawo alitholi lutho. Uvula i-Network Watcher, usebenzisa ukuhlola kokugeleza kwe-IP, futhi kuthi Access allowed, ngakho ithikithi livalwa njengenkinga ye-VPN. Leso siphumo asisho lokho okubonakala, ngoba ukuhlola kokugeleza kwe-IP kuhlola imithetho yokuphepha yokugeleza oyichazile futhi akukaze kuhlole ukuthi i-Azure inomzila oya kusihloko sakho sendawo.

Umbuzo wokuhlunga nombuzo womzila wehlukile, futhi i-Network Watcher iwaphendula ngamathuluzi ahlukene. Ukwazi ukuthi uwubuza muphi ingxenye enkulu yokuxilonga.

Ukuhlola kokugeleza kwe-IP kunquma ini ngempela

Ukuhlola kokugeleza kwe-IP kuthatha i-VM, isixhumi senethiwekhi, indlela, amanani ayisihlanu kanye nephrothokholi, bese kubika isinqumo somthetho we-NSG nowomphathi wokuphepha walokho kugeleza. Kusebenza ku-TCP naku-UDP, ngakho akusona isihloli somthetho we-ICMP futhi i-ping evinjiwe ayifakazi lutho ngensizakalo yakho. Yinike ukugeleza kwangempela esikhundleni sokuqagela. Ukuxhumana okungena kusuka endaweni kuya embobeni yesisekelo sedatha incazelo ehlukile kunokuxhumana okuphumayo okuqalwa yi-VM.

Uma isango lihumusha amakheli, sebenzisa ikheli lomthombo elifinyelela umngcele owuhlolayo, hhayi lelo elisekhelini leklayenti. Funda nesiphumo njengoba sinjalo. I-Access allowed isho ukuthi isendlalelo sokuhlunga sizovumela iphakethe uma lifika, futhi akukho okunye.

Engakwazi ukukutshela umzila i-Azure ewukhethile, ukuthi ingabe i-firewall yesivakashi ivumela umbobo, noma ukuthi kukhona okulalelayo. Lokho kuhlala kwezinye izendlalelo.

Ukugxuma okulandelayo nemizila esebenzayo kunezela ini

Ukugxuma okulandelayo kuphendula umbuzo wokudlulisa: kule ndawo okuyiwa kuyo, hlobo luni lokugxuma okulandelayo i-Azure elukhethayo, kukheli lini, kusuka kuthebula lini lomzila. Imizila esebenzayo ibala lokho i-NIC enakho ngempela. Sebenzisa kokubili futhi uthola indlela yohlangothi lwe-Azure evunyelwa yisihloli esiluhlaza sokugeleza kwe-IP ukuthi isale ingenalutho.

Uhlolojikelele lokuhlola kokugeleza kwe-IP lwe-Microsoft lusho ububanzi bokuhlunga ngqo, kuyilapho amakhasi okugxuma okulandelayo nokuxilongwa komzila ehlanganisa uhlangothi lokudlulisa. Caphuna ikhasi elifanele lapho ubhala okutholakele.

Imiyalo mifushane ngokwanele ukuthi isetshenziswe kusuka ku-shell. az network nic show-effective-route-table ibala imizila esetshenziswe kusixhumi. az network watcher show-next-hop nomthombo nendawo okuyiwa kuyo ibuyisela ukugxuma okukhethiwe. Qhathanisa isihloko osikhathazayo nalelo thebula, bese uqinisekisa ukuthi iyiphi ingeno ewina.

Hamba indlela yokubuya kusuka ku-NIC ye-VM

Kwenze lokhu kusuka ku-NIC ye-VM okuyiwa kuyo, ngesihloko seklayenti lendawo, hhayi se-inthanethi. Indlela yokubuya yilapho iziphambeko zendawo-kuya-endaweni zicashe khona, ngoba ukuhlolwa kwesimo somhubhe kubika kuphela ukuthi izinhlangano zokuphepha ziphakamile.

Uma umzila obulindelekile ungekho, hlola izihloko ezikude ezinikezwa ukusethwa kwesango, umklamo wokuxhumana we-VNet kanye nanoma yikuphi ukusethwa kokusabalalisa umzila. Into yesango lenethiwekhi yendawo ichaza uhlangothi lwendawo; ukuba khona kwayo akufakazi ukuthi yonke isihloko esidingekayo sikhona futhi sithandwa ku-NIC. Lokho kungamaqiniso ahlukene, futhi kunye kuphela kukho okuvela kusifinyezo sephothali.

Funda uhlobo lokugxuma okulandelayo esikhundleni sokukopisha isibonelo

Indlela yesango le-VPN elawulwayo ngokuvamile ikhombisa VirtualNetworkGateway njengohlobo lokugxuma okulandelayo. VirtualAppliance ichaza umklamo wokudlulisa ohlukile, ngokuvamile i-firewall noma idivayisi yenethiwekhi ebonakalayo.

Ungakhi umzila wedivayisi oqondiswe endaweni yokugcina ye-VPN eqagelwe ngoba impendulo endala yeforamu yasebenzisa lolo hlobo. Uma umzila ochazwe umsebenzisi uqaqa indlela ehlosiwe, thola umnikazi neningi lakho ngaphambi kokuwushintsha. I-NIC yesibili nayo ingashintsha ukuthi isivakashi sisebenzisa isixhumi sini, futhi ukuyisusa kungaphula enye insizakalo esikhundleni sokulungisa lo mzila.

Dlulela emngceleni osahlulekayo

Lapho ukuhlunga nomzila kubili kuhambisana nomklamo, iphutha likwenye indawo. Hlola ithebula lomzila lesivakashi uqobo, i-firewall yaso nokuthi umlaleli uboshelwe ekhelini obulindelekile. Bese uhlola izikhethi zethrafikhi ezivikelwe ze-VPN kanye nendlela yokuphendula yendawo. Ngakunye kukho kuwukuhlolwa okuhlukile okunesiphumo esihlukile.

Qeda ngesicelo sohlelo lokusebenza esivunyelwe kanye nokubonwa okuvela kuzinhlangothi zombili. Umphumela we-allow nokugxuma okulandelayo okulungile kuyizingcezu ezimbili zobufakazi, hhayi ubufakazi bokuthi ukuxhumana kuphumelele.