I-tunnel yedivayisi ku-Windows Pro? Hlola i-matrix yezinhlelo
Iphrofayela esetshenzisiwe ayibona ubufakazi bokufaneleka. Qhathanisa i-matrix yezinhlelo, i-CSP node nezimfuneko zangaphambi kokungena ngaphambi kokulungisa i-tunnel.
Iphrofayela ifika kukhompyutha ephathekayo, ikhasi lezilungiselelo ze-VPN liyibonisa, futhi i-tunnel yedivayisi ayikaze ixhumane esikrinini sokungena. Ku-Windows Pro lokhu ngokuvamile akulona iphutha lokucushwa. I-tunnel yedivayisi yemvelo inikezwa ilayisense ngokohlelo, futhi i-tunnel yomsebenzisi esebenza ngemva kokungena ifakazela ikhono elihlukile. Funda imfuneko ngaphambi kokulungisa isitifiketi.
Isibonakaliso sivela ngaphambi kokuba noma ubani angene
I-tunnel yomsebenzisi ixhumana kumongo womsebenzisi ngemva kokungena, yingakho isebenza ngokujwayelekile ku-Pro. I-tunnel yedivayisi kufanele isungule ukuxhumana komshini ngaphambi kokuba noma yimuphi umsebenzisi angene, isebenzisa isitifiketi somshini ne-IKEv2. Lezi izigaba ezihlukene zomjikelezo wokuphila, hhayi amagama amabili ephrofayela eyodwa.
Kuhlelo olungafaneleki iphrofayela isengasetshenziswa futhi ifakwe ohlwini, kodwa ukuxhumana kwangaphambi kokungena akubonakali. Ngemva kokungena i-tunnel yomsebenzisi ingase isebenze kahle, okwenza ukusetshenziswa kubonakale kunempilo kukho konke ukuhlola okwenziwa umnikazi we-akhawunti. Ukwehluleka akubonakali ngaphakathi kweseshini esivele ingene.
Ukwenza iphrofayela itholakale kubo bonke abasebenzisi kushintsha ukuthi ubani angayisebenzisa. Akushintshi umongo wokuqinisekisa usizebenzisi uye emshinini, ngakho akukwazi ukuguqula i-tunnel yomsebenzisi ibe i-tunnel yedivayisi. Umehluko umongo wokuqinisekisa, hhayi ukubonakala kwephrofayela.
Funda i-matrix, hhayi i-CSP node kuphela
I-matrix yezici ze-Windows 11 yakwa-Microsoft ibala i-tunnel yedivayisi ye-Always On VPN yemvelo ye-Enterprise ne-Education. Umhlinzeki wensizakalo yokucushwa ye-VPNv2 ubhala ngokwahlukile i-DeviceTunnel node okusetshenziswa kwayo kuhlanganisa i-Pro, futhi lowo mugqa uvame ukucashunwa njengobufakazi bokuthi isici siyasebenza. Indawo yokucushwa nelayisense yesici ziphendula imibuzo ehlukene: enye ithi isilungiselelo singavezwa, enye ithi uhlelo lunelungelo lelo khono.
Qinisekisa uhlelo lwangempela kanye ne-build esikhundleni sokuthembela kurekhodi lokuthenga. Ukusebenza okulawulwayo, ukuthuthukiswa okuqhubekayo noma isithombe esakhiwe kabusha kungashiya umshini kuhlelo oluhlukile kunalolo olushiwo ohlwini lwempahla:
winver
DISM /online /get-currentedition
Get-ComputerInfo | Select-Object WindowsProductName, WindowsEditionId, OsBuildNumberUma okukhiphayo kuthi Pro, i-tunnel yedivayisi yemvelo ingaphandle kwesethi yezici ebhaliwe yalowo mshini. Leso siphetho asidingi ukushintsha kwephrofayela futhi ngeke silungiswe ngakho. Bhala lokho okutholakele ngaphambi kokushintsha noma yini enye.
Izimfuneko ezine ngemva kwefulegi lesici
Uhlelo luyisango, futhi ezinye izimfuneko zichaza ukuthi kungani umshini okuhlelweni okufanelekile uhluleka noma kunjalo. Zihlole ngokulandelana, ngoba ngayinye ingaveza umphumela othulile ofanayo. Ukweqa umugqa kuchitha umzamo owenziwe emigqeni engaphansi kwayo. Uhlelo luza kuqala ngesizathu.
| Prerequisite | How to verify | Common failure |
|---|---|---|
| Edition and build | DISM /online /get-currentedition | Pro image with an Enterprise asset record |
| Join state | Domain membership in system information | Microsoft Entra join treated as domain join |
| Machine certificate | Certificate store in the local machine context | Certificate issued to the user store |
| Profile context | Provisioned through the machine channel | Delivered as a user tunnel profile |
Ukuhlolwa kwesitifiketi yikho abantu abakweqayo. Ukhiye oyimfihlo kufanele ube khona esitolo somshini futhi usebenziseke kumongo wesistimu ngaphambi kokungena, okuyisitolo esihlukile kuleso umsebenzisi asibona embhalweni wakhe wesitifiketi:
Get-ChildItem Cert:\LocalMachine\My | Where-Object { $_.HasPrivateKey } | Select-Object Subject, NotAfterIsitifiketi esibonakala silungile esitolo somsebenzisi singase singabikho nhlobo esitolo somshini. Khona-ke i-tunnel yedivayisi ihluleka ukuqinisekisa ngaphambi kokuba isikrini sokungena sivele, futhi akukho ukungeniswa kabusha kwephrofayela okushintshayo. Hlola isitolo esisetshenziswa yinsizakalo, hhayi leso umsebenzisi asibonayo.
Umsebenzi ohleliwe njenge-SYSTEM awusona leso sici
Kukhona ikhambi elizungezayo eliqalisa iphrofayela ye-VPN kusuka kumsebenzi ohleliwe osebenza njenge-SYSTEM, okwenza i-tunnel ivele ngokushesha ngemva kokuqalisa. Akuyona i-tunnel yedivayisi yemvelo. Injini yemisebenzi iqala ngesinye isikhathi, ukuxhumana kuyiphrofayela yemodi yomsebenzisi eqalwe i-akhawunti yensizakalo, futhi umjikelezo wokuphila awuhambisani ne-tunnel eqinisekiswe umshini okufanele ibe khona esikrinini sokungena.
Ingase idlule ukuhlolwa okungaphezulu ngoba i-tunnel isivele isebenza lapho othile engena futhi ehlola. Lokho kuphumelela kulinganisa ukubambezeleka phakathi kokuqalisa nomsebenzi, hhayi ukuxhumana ngaphambi kokungena, futhi kushiya umshini ungena i-tunnel ngesikhathi isici okwakufanele sisikhawulele.
Thatha ikhambi njengelingasekelwe ekukhiqizeni. Uma idizayini incike kulo, imfuneko cishe ukuxhumana ngaphambi kokungena, okubuyisela ingxoxo ekufanelekeni kohlelo.
Khetha imfuneko ngaphambi kobuchwepheshe
Bhala imfuneko ngomusho owodwa: idivayisi kufanele ifinyelele isinsiza esiqanjwe ngaphambi kokuba noma yimuphi umsebenzisi angene, noma umsebenzisi udinga ukufinyelela ngemva kokungena. Uma umusho wesibili uyiqiniso, i-tunnel yomsebenzisi ye-Always On ku-Pro iyidizayini esekelwayo futhi i-tunnel yedivayisi inkimbinkimbi engadingekile.
Uma umusho wokuqala uyiqiniso, uhlelo luyisango eliqinile. Khetha uhlelo olufanelekile noma indlela yangaphambi kokungena ebhaliwe esekelwa yinhlangano, futhi hlela ushintsho lwelayisense ngaphambi kokwakha amaphrofayela nezitifiketi eduze kwekhono umshini ongakwazi ukulisebenzisa.
Bhala uhlelo, isimo sokujoyina, indawo yesitifiketi kanye nesiteshi sokuhlinzeka kumanothi okusetshenziswa. Khona-ke unjiniyela olandelayo uzokwazi ukuqinisekisa ukufaneleka ngemizuzu embalwa esikhundleni sokuphinda ukuxazulula iphrofayela efanayo kumshini owawungeke uxhumane.