Idrayivu ehlanganisiwe nge-VPN yesayithi: DNS, SMB kanye nendlela ye-UNC
Ukutholwa kwenethiwekhi akweqi isixhumanisi esigayiwe, kodwa indlela ye-UNC enegama iyeza. Qondisa i-DNS kuseva, vula i-SMB kuzinhlangothi zombili, bese uhlanganisa idrayivu.
Ikhasi lenethiwekhi ku-Explorer likhombisa amadivayisi azimemezele engxenyeni yasendaweni, futhi umhubhe ogayiwe awuthwali nasisodwa salezi zimemezelo. Yingakho iseva ingafinyeleleka ngokuphelele kuyilapho iwindi eliphambi komsebenzisi lihlala lingenalutho. Indlela ye-UNC enegama ayincikile nhlobo ekutholweni, futhi isixazululo siwukwenza igama lixazululeke kanye nechweba liphendule. Iwindi elingenalutho uphawu lwesendlalelo esingalungile, hhayi lokwabiwa okugqekeziwe.
Ukutholwa akufani nokufinyeleleka
I-Windows ithola imishini eseduze ngezivumelwano eziklanyelwe isizinda sokusakaza, bese ikhombisa lokho ekutholile njengohlu lokunethezeka. Akukho lutho kulolo hlu oludingekayo ukuze kufinyelelwe amafayela e-SMB. Iklayenti elazi igama leseva futhi elingafinyelela i-TCP 445 lizovula okwabiwe, kungakhathaliseki ukuthi umshini uyavela kuNethiwekhi noma cha.
Izingqimba zombili zehluleka ngokuzimela, yingakho "angikuboni" kanye "angikwazi ukukuvula" kufanelwe izivivinyo ezihlukene. Ukubuka uhlu kukhuluma ngokutholwa; ukuvula indlela kukhuluma ngensizakalo.
Qamba iseva ngaphambi kokuhlanganisa okwabiwe
Shicilela iseva yamafayela ku-DNS ngekheli elinalo ngaphesheya, futhi qondisa isayithi leklayenti ku-resolver ekwazi ukuphendula kuleyo zone. Igama eligcwele ngokuphelele ligwema ukuncika ohlwini lokusesha lwesijobelelo sasendaweni, okuyisizathu esivamile sokuthi igama elifushane lisebenze endaweni eyodwa futhi lihluleke kwenye.
Uma indawo isebenzisa i-Active Directory, ukuxazululwa kwamagama nakho kuyingxenye yokuqinisekisa: iklayenti kufanele lifinyelele isilawuli sesizinda se-Kerberos, futhi iwashi eliphambuke kakhulu lizokwenza ukushintshana kwamathikithi kuhluleke. Le nkinga ihlukile ekufinyelelekeni kwe-SMB futhi ibonakala njengephutha lemininingwane yokungena. Hlola isilawuli sesizinda ngaphambi kokubhala kabusha iphasiwedi.
| Layer | What it needs | Symptom when missing |
|---|---|---|
| Name resolution | A DNS answer for the server name | Path cannot be found, ping by IP still works |
| Transport | TCP 445 open in both directions | Connection times out or is refused |
| Authentication | A reachable domain controller and correct clock | Access is denied after the port connects |
| Authorization | Share permission and filesystem permission | The share opens but the folder is inaccessible |
Ukugaywa nokuhlunga kuzinhlangothi zombili
Umhubhe wesayithi-kuya-sayithi udinga isandiso esikude kuthebula lomgwaqo lasendaweni kanye nesandiso sasendaweni kuthebula elikude, futhi umthombo womlilo ohlangothini ngalunye kufanele uvume ukugcwala okufikayo. Ukuhlelwa kohlangothi olulodwa kukhiqiza uxhumano oluvulekayo futhi olungaphenduli neze, abasebenzisi abakuchaza njengokwabiwe okuhamba kancane. Qala ngokuhlola izibali zomhubhe uqobo. Uma amaphakethe ephuma futhi kungabuyi lutho, bheka indlela yokubuya noma isihlungi esikude.
Ku-WireGuard, amakheli e-IP avunyelwe we-peer kanye nemigwaqo yesistimu yokusebenza kufanele ihambisane nalowo mklamo. Umhubhe uthwala amaphakethe; awu kuhlinzeki amarekhodi e-DNS noma izimvume zokwabiwe kunhlangothi noma yiziphi.
Sekela umthetho womthombo womlilo kunethiwekhi yomthombo yangempela ezoxhuma, futhi ubhale phansi okuhlukile. Uma umklamo uhumusha amakheli endaweni ethile endleleni, umthetho kufanele usebenzise umthombo ohunyushiwe, futhi ikheli lokuqala leklayenti alisabonakali kumarekhodi.
Qinisekisa, bese uhlanganisa idrayivu
Ehlela izingqimba ngemiyalo esikhundleni sewindi le-Explorer:
Resolve-DnsName -Name files.corp.example -Type A
Test-NetConnection -ComputerName files.corp.example -Port 445
net use Z: \\files.corp.example\Projects /persistent:noUmyalo wesibili ufakazela indlela ye-TCP, hhayi ilungelo lokufunda noma yini. Owesithathu yindawo lapho ukuqinisekisa nokugunyaza kusetshenziswa khona, futhi ukwehluleka lapho kufanele kukuqondise ezimvumeni zokwabiwe kanye nohlelo lwamafayela, hhayi ukubuyela kumgwaqo.
Gcina ukusayina kwe-SMB kanye nenqubomgomo yokuqinisekisa ekhona kungashintshiwe. Ukuvula kabusha i-SMB1 noma ukudlulisela ukusakaza kokutholwa emhubheni akudingekile endleleni ecacile, futhi i-TCP 445 kufanele ihlale endleleni eyimfihlo hhayi ekudluliselweni okubheke i-inthanethi. Nika abasebenzisi isifinyezo esilawulwayo noma idrayivu ehlanganisiwe egameni eligunyaziwe, futhi ikhasi leNethiwekhi elingenalutho alisaba nokubaluleka.