Azure P2S: iklayenti elilodwa le-Windows lilahlekelwe imizila ngemva koshintsho lwe-VNet

Amalaphuthophi amabili azibonakalisa ku-gateway eyodwa ye-Azure point-to-site, futhi lilodwa kuphela elifinyelela i-VNet esanda kuxhumana. Womabili akhombisa i-Connected, ngakho ukuqinisekisa akusona umehluko; imizila yendawo ekuyiwo iyona mehluko. Qala ngeklayenti elihlulekayo, qhathanisa indawo eyodwa, bese kuthi ngemva kwalokho unqume ukuthi isikhala singesephakethe le-gateway noma sithebula lemizila yasendaweni.

Qala ngeklayenti elihlulekayo, hhayi nge-gateway

Qinisekisa ukwakheka kwenethiwekhi ngaphambi kokusola ilaphuthophi. Hlola ukuthi imiphi i-VNet exhunywe ku-VNet ye-gateway nokuthi inethiwekhi entsha yenziwe i-peer ngqo noma ifinyelelwa nge-tunnel ehlukile ye-site-to-site. Uma i-VNet entsha ingaxhunywanga neze ku-VNet ye-gateway, alikho iphakethe leklayenti elingayiqondisa lapho, futhi ilaphuthophi elisebenzayo yilona elingavamile okufanele kuchazwe. Bhala impendulo, ngoba yiyo enquma ukuthi ulungisa iklayenti noma i-gateway.

Uma ukwakheka kwenethiwekhi kulungile, beka amalaphuthophi amabili eceleni komunye. I-gateway efanayo, ichibi lamakheli elifanayo, iphrothokholi efanayo kanye nohlobo lweklayenti olufanayo ukugqamisa okufunayo; okunye kunguphawu lwesibili okuzofanele ukususele ngemuva.

Qhathanisa indawo eyodwa nge-route print

Khetha i-IP yensiza evunyelwe bese uqhathanisa womabili amalaphuthophi kabili: engaxhunyiwe, bese exhunyiwe. Ku-Windows, i-route print -4 ibala imizila ye-IPv4 ngesiqalo sendawo, i-interface, igxathu elilandelayo kanye nemethrikhi. Bhala umugqa ozowina ngempela kuleyo ndawo esikhundleni sokubala amarekhodi anegama elithi VPN.

Ukukhetha kuqala ngesiqalo eside kakhulu, bese kuba imethrikhi, ngakho umzila wasendaweni oqondile kakhulu ungahlula umzila we-tunnel ngaphandle kokubonakala ungeyona. Uma indawo ehlosiwe ingaphakathi kwe-10.24.0.0/16, iklayenti elinempilo libonisa umzila ohambisanayo ku-interface ye-VPN, kuyilapho iklayenti elihlulekayo lithumela ikheli elifanayo ku-gateway yalo ezenzakalelayo.

Isiqalo sasendaweni esiphikisanayo singaveza uphawu olufanayo. Ngaphambi kokwengeza noma yini, nquma ukuthi yikuphi kulezi zimo ezimbili onakho: awukho neze umzila we-tunnel, noma umzila we-tunnel ohlulwa ngowondile kakhulu.

I-TTL expired ayilona iphutha lokusatshalaliswa kwemizila

I-ping ebuyisela i-TTL expired in transit ithi iphakethe liphelelwe isabelo saso samagxathu, okujwayelekile ukusho umjikelezo wokudlulisa hhayi idrayiva ye-VPN ephukile. I-ping ye-Windows yamukela i-TTL efika ku-255, futhi ukunyusa inani akulungisi umjikelezo; kuhlehlisa iphutha elifanayo kuphela. Thatha umyalezo njengophawu lwendlela, hhayi njengobufakazi mayelana nokusatshalaliswa kwemizila.

Sebenzisa i-tracert -4 10.24.1.10 ukubona lapho indlela iphinda khona. Uma amagxathu amabili afanayo evela njalo, funa umzila othumela ithrafikhi eqonde ku-tunnel ibuyele ku-tunnel noma kumruotha wasendaweni oyibuyisela emuva.

Yakha kabusha iphakethe ku-gateway elingumnikazi wale

I-Microsoft ibhala phansi ukuthi amaphakethe eklayenti le-Windows kufanele alandwe futhi afakwe kabusha ngemva kwezinguquko zokwakheka kwenethiwekhi ezifanele. Thatha iphakethe lamanje ku-gateway ye-Azure esebenzela le phrofayela, bese ulisebenzisa ngenqubo esekelwayo yalelo klayenti. Ukushintsha ifayela elisebenzayo lohlelo lwe-VPN olungahlobene akusona isenzo esifanayo nokwakha kabusha izilungiselelo eziqondene ne-gateway. Ukulanda iphakethe kabusha kushibhile; ukuqagela imizila yasendaweni akusiyo.

Xhuma kabusha futhi ufunde kabusha umzila wendawo yokuqala. Gcina imigqa yangaphambi nangemva kanye nerekhodi loshintsho ukuze umphumela ube nembe kakhulu kunokuthi ngifake kabusha iklayenti.

Izimo zokuhlela imizila ze-Azure P2S zihlukanisa ama-VNet enziwe i-peer ngqo kumanethiwekhi afinyelelwa ngamanye ama-tunnel, futhi iphakethe elisha alikwazi ukwenza i-peer idlule. Ezinye izimo ze-Windows site-to-site noma ze-BGP zidinga futhi imizila ekude elungiswe ngesandla, ngakho ukuvuselela iphakethe akusona indlela yonke yokusabalalisa imizila.

Shiya umzila wesikhashana uyisikhashana

Umzila wesandla ungahlukanisa umzila weklayenti ongazingekho, kodwa wakhe kusukela ekwakhiweni kwangempela: route add 10.24.0.0 mask 255.255.0.0 172.16.0.1 if 42, ngaphandle kwefulegi elihlala njalo, ukuze unyamalale lapho kuqalwa kabusha. Khetha inkomba ye-interface negxathu elilandelayo ku-adaptha ye-VPN exhunyiwe, hhayi emcabangweni.

Ungashiyi umzila wokuhlola njengomnikazi oqhudelanayo unomphela. Izibuyekezo zephrofayela zesikhathi esizayo zingengeza isiqalo esifanayo ngemethrikhi ehlukile, bese umugqa wesandla unquma buthule ukuthi iyiphi indlela ewina. Bhala isinyathelo sokususa kushintsho.

Uma umzila ofanele usebenza, hlola uhlelo oluhlosiwe esikhundleni se-ping. Uma amaphakethe efika ku-Azure kodwa insiza isehluleka, hlola iqembu lokuphepha kwenethiwekhi kanye nendlela yokubuya, ngoba lezi zihlukile ekutheni ilaphuthophi lisifundile isiqalo.