I-DNS ye-Azure P2S iyahluleka lapho isisombululi siku-VNet ehlangene

Pingi i-VM futhi iyaphendula; buza igama layo futhi iklayenti lithi umsingathi akaziwa. Lapho isisombululi sikunethiwekhi ebonakalayo ehlangene hhayi kuleyo equkethe i-gateway ye-VPN, labo bumbili bemiphumela kulindelekile, futhi akukho inani lokuxazulula izinkinga kwesisombululi elingakushintsha. Okushodayo isivumelwano somzila okugcinwa yi-peering ngokuzenzakalela. Ama-topology amabili abukeka acishe afane ephepheni, futhi igebe phakathi kokusebenzayo nokuphukile iqembu lezinguqulo ze-peering ezibekwe endleleni efanele.

Cabanga nge-laptop eyenza ithumbu iye ku-gateway ku-VNet2, kuyilapho isilawuli sesizinda esisebenza i-DNS sihlezi ku-VNet1.

Ama-topology amabili, umehluko owodwa

Beka isisombululi ngaphakathi kwenethiwekhi ebonakalayo ye-gateway uqobo futhi igama lizoxazululwa ngaso leso sikhathi lapho ithumbu liphakama. Akukho silungiselelo se-peering esihlanganyelayo kulokho kusesha.

Hambisa leso sisisombululi ngaphesheya kwe-peering futhi iklayenti lisathola impendulo evela ku-VM kuyilapho igama lihlala lingaziwa. Isitifiketi, ithumbu neklayenti akushintshile. Into eyodwa kuphela eshintshile ukuthi isisombululi sihlala kuphi. I-peering yasinika umzila oya kulelo kheli, hhayi igunya lokuthi i-gateway ithwale ithrafikhi iye lapho.

Uhlangothi A: vumela ukudluliswa kwe-gateway kumnikazi we-gateway

I-peering ihlanganisa amanethiwekhi amabili abonakalayo, kodwa ukuhlanganiswa akudlulisi ithrafikhi efika nge-gateway, futhi isicelo se-point-to-site sifika kanjalo impela. Ngakho-ke i-gateway ku-VNet2 ayinalo igunya lokunikeza ukusesha ku-VNet1 kuze kube yilapho umklamo ukuvuma. Imvume iyiswishi ku-peering ephethwe inethiwekhi ene-gateway.

Setha i-Allow gateway transit ku-peering ye-VNet2 ebheke ku-VNet1. Lesi sakhiwo singesento se-peering, hhayi sokusetshenziswa kwe-gateway, ngakho-ke uyifunda futhi uyishintsha kublade ye-peering. Yilokho konke kwehlangothi A.

Uhlangothi B: sebenzisa ama-gateway akude kumlingani

Ingxenye yesibili iyisithombe sesibuko: ku-peering ye-VNet1 ebuyela ku-VNet2, nika amandla i-Use remote gateways. Ukuvula ifulegi elifanayo kuzo zombili iziphetho, noma kwesinye kuphela, kushiya umzila owakhiwe uhhafu kanye nomphumela wokuqala ungathintwanga. Kuphela inethiwekhi ene-gateway ye-VPN evumela ukudluliswa, futhi umlingani wuhlangothi olusebenzayo.

Funda zombili izakhiwo kuzo zombili izinethiwekhi esikhundleni sokuthemba iblade yengosi oyivule ekugcineni.

Get-AzVirtualNetworkPeering -ResourceGroupName rg-core -VirtualNetworkName vnet2 `
  | Format-List Name,AllowGatewayTransit,UseRemoteGateways
Get-AzVirtualNetworkPeering -ResourceGroupName rg-core -VirtualNetworkName vnet1 `
  | Format-List Name,AllowGatewayTransit,UseRemoteGateways

Ukubona iqembu lihlangene eduze kuyindlela esheshayo yokubamba isilungiselelo esihlanekezelwe. I-peering ebika i-AllowGatewayTransit false ohlangothini lwe-gateway ichaza konke ukwehluleka ngaphandle kokubamba iphakethe.

Iklayenti kufanele lisathole ini

Umzila uyadingeka futhi awanele, ngoba iphrofayela ye-point-to-site kufanele futhi inike iklayenti ikheli le-DNS eliphendula lapho ukudluliswa kusebenza. Isisombululi seplathifomu akulona lelo kheli: siphendula izindawo ze-Azure Private DNS ezixhunywe kunethiwekhi ebonakalayo, kodwa akukho lutho endaweni egcinwe kumaseva akho okuhola, futhi yilokho okusetshenziswa yilokhu kusetshenziswa. Khomba iklayenti lapho futhi amagama omphakathi azoxazululwa ngenjabulo kuyilapho umsingathi wangaphakathi ehlala engaziwa.

Buza isisombululi kusuka ku-laptop exhunyiwe ngaphambi kokushintsha enye into.

nslookup dc01.corp.example 10.1.0.4

Isikhathi sokuphela sithi umzila awukakabi khona. Impendulo enegunya ihlehlisela inkinga emuva kuklayenti, ngokuvamile isijobelelo esingakaze sengezwe, ngakho-ke amagama amafushane ahamba aye kusisombululi somphakathi esibahlulisa ngenjabulo.

Qhathanisa isivumelwano esifanayo ohlangothini lwesayithi-kuya-sayithi

Akukho kulokhu okungokwe-laptop ikakhulukazi. Shintsha iklayenti libe yigatsha kusayithi-kuya-sayithi futhi isimo sezinhlangothi ezimbili siyabuya: igatsha lifika ngqo kunethiwekhi ye-gateway, futhi isevisi ebangeni lamanye amanethiwekhi amabili isengemuva kwe-peering.

Ukudluliswa kufanele kunikezwe kuzo zombili izinhlangothi ze-peering, futhi iswishi esikunikezayo sihlala ku-peering hhayi ohlotsheni lweklayenti.

Ngaphambi kokusola i-gateway

I-Windows igcina uhlu lwezisombululi kuyi-adaptha ngayinye, ngakho-ke qinisekisa ukuthi isixhumi sethumbu sathola ini ngempela ngaphambi kokusola i-gateway.

ipconfig /all
Get-DnsClientServerAddress -AddressFamily IPv4
ipconfig /flushdns

Impendulo engeyinhle ihlala kukhishi isikhathi eside kunokulungiswa komzila, futhi uhlu lwesijobelelo oluphelelwe yisikhathi luqhubeka nokuthumela imibuzo endaweni engakaze igcine indawo. Hlanza, buza futhi, futhi qaphela ukuthi iyiphi iseva ephendulayo.

Izimo ezimbili ezincane zinquma ukuthi umzila uzohlala: izikhala zamakheli akufanele zidlulelane, futhi iqembu lokuphepha lwenethiwekhi ku-subnet yesombululi kufanele lamukele ichibi lamaklayenti, okuyindawo nje yomthombo. Kufakazele ngokuhlola umzila osebenzayo ohlangothini lwe-VM kanye nombuzo oqondile owodwa ovela kuklayenti, ukuze inkinga yendawo, inkinga yesijobelelo noma isihlungi kungaze kuthathwe njengokudluliswa okungekho.