I-ping isebenza ohlangothini olulodwa: kungani i-Windows ilahla i-echo yeseva

Iklayenti lakho lishaya i-ping kwiseva, iseva ayikwazi ukushaya i-ping kwiklayenti, futhi umhubhe ngokusobala uthwala amaphakethe kuyo yomibili leyo misho. Okuhlukile akulona igxathu kodwa yiphakethe lokuqala lokuhlola ngakunye: elilodwa liyimpendulo kumgelezo i-Windows esevele iwulandelela, elinye liyisicelo esisha esingenayo imithetho eyamukele. Lowo mehluko uchaza iningi lemibiko ye-ping yohlangothi olulodwa futhi ukhomba ngqo kumthetho okufanele uwubhale. Ukuhlola okubili ezinhlangothini eziphambene kuhlukanisa lezo zimo cishe ngomzuzu.

Izinhlangothi ezimbili, izinqumo ezimbili ezahlukene

Lapho iklayenti lithumela isicelo se-echo, i-firewall ye-Windows ibona uxhumano oluphumayo eselinqume ukuluvumela. Impendulo ibuya ngaphakathi kwalowo mgelezo osewusunguliwe, ngakho umshini olandelela isimo uyayivumela ngaphandle kokubuza noma yimuphi umthetho wokungena we-ICMP. Yilokho okushiwo ukuhlunga okusekelwe esimweni ngokoqobo, futhi umthetho ongabhalwanga muntu awuhileleki. Ngakho impumelelo yeklayenti ayisho lutho mayelana nenqubomgomo yokungena.

Lapho iseva ithumela isicelo kuqala, asikho isimo esihambisana naso. I-Windows ithatha iphakethe njengoxhumano olusha olungena futhi ibuza inqubomgomo yokungena, leyo ngokuzenzakalela engahleleli lutho izicelo ze-echo ezivela emithonjeni engahlelekile.

Ngakho impumelelo yeklayenti yafakazela ukuthi i-ICMP ephumayo kanye negxathu lokubuya kuyasebenza. Ayikaze ihlole isinqumo sokungena, futhi isiphetho esingokwemvelo, sokuthi i-firewall ilungile, sinengqondo kodwa asilungile. Yingakho leli phutha liphinda emathikithini asevele anobufakazi.

Landela iphakethe laze lanyamalala

Qinisekisa amakheli ngaphambi kokushintsha noma yini: sebenzisa ikheli lomhubhe iklayenti elinalo ngempela, futhi uhlole ukuthi iseva ihamba ngqo kulo hhayi ekhelini le-LAN elingemuva kweklayenti. Ukwehluleka kokubili kubonakala kufana ngqo kusuka kumkhombandlela weseva, ngoba kokubili kuphetha ngesikhathi esiphelile. Lapho iphakethe lifele khona yiqiniso elilodwa elinquma ukuthi yini okufanele ishintshwe.

Uma isicelo sifinyelela isixhumanisi somhubhe futhi akukho lutho oluphumayo, i-firewall yasendaweni iyisizathu esingenzeka. Uma singafinyeleli neze esixhumanisini, impendulo isezingeni eliphezulu: igxathu kuseva, inqubomgomo ephumayo, noma ukulethwa kontanga kwe-VPN uqobo.

Thwebula esixhumanisini somhubhe weklayenti ngenkathi iseva ishaya i-ping. Ukubona isicelo sifika ngaphandle kwempendulo eceleni kwaso ubufakazi obuthethelela ukubhala umthetho we-Windows. Ukungaboni lutho kukuthumela phezulu, futhi umthetho owengezwa kuleso simo wenza umshini uvumeleke kakhulu iphakethe elingazange lifike. Kuzo zombili izimo ukuthwebula kubiza kancane kunokuqagela okuthatha indawo yako.

Khawulela umthetho owodwa esikhundleni sokuvula i-ICMP

Khomba i-adaptha nesigaba sayo samanje ngaphambi kokubhala noma yini, ngoba kokubili kuvela ebangeni ozolibeka. Leyo mbizane yigama lesixhumanisi se-Windows, okungenakudingeka ukuthi ibe igama lephrofayela ye-VPN oyifakile. Imiyalo engezansi ibala abakukhona, bese ibonisa umbono wangaphambili womthetho okhawulelwe ngaphandle kokuwusebenzisa.

Get-NetConnectionProfile
Get-NetAdapter | Where-Object Status -eq 'Up'
New-NetFirewallRule -DisplayName "VPN server echo" -Direction Inbound -Protocol ICMPv4 -IcmpType 8 -RemoteAddress 10.63.0.1 -InterfaceAlias "Office VPN" -Profile Private -Action Allow -WhatIf

I-ICMPv4 uhlobo 8 isicelo se-echo, umlayezo oyedwa iseva edinga impendulo yawo. Khawulela ekhelini lomhubhe weseva nasesixhumanisini somhubhe, futhi shiya iphrofayela njengoba i-adaptha injalo ngempela. Ukuqamba kabusha inethiwekhi ukuze ihambisane nesibonelo wushintsho oluhlukile olunemiphumela yalo.

Lokho umthetho ongakuhlanganisi

I-echo ye-IPv6 iphrothokholi ehlukile enohlobo lomlayezo ohlukile, ngakho umthetho we-ICMPv4 akasho lutho ngayo, futhi umhubhe othwala imindeni yomibili udinga umthetho wawo ngokwawo komunye. Lo mthetho futhi awuvuli enye into: i-RDP, ukwabelana ngamafayela kanye nayo yonke enye isevisi kusathembele kunqubomgomo yayo. Yikho konke okushiwo ukukhawulela umthetho owodwa omncane esikhundleni sokuvula imvume ye-ICMP ebanzi. Imvume ebanzi iyisixazululo esilula futhi esihlala isikhathi eside, ngoba ngemuva kwalokho akekho oyinakayo.

Kudivayisi ephethwe, umthetho ungashintshwa ekuhlaziyweni kwenqubomgomo okulandelayo, ngakho umnikazi wenqubomgomo kufanele enze ushintsho olulinganayo hhayi umlawuli wendawo. Bhala inhloso ethikithini kanye nomyalo, ngoba ukuhlaziya kuzosusa umyalo kushiye imfuneko injalo. Kokubili akuyona into eyodwa, futhi kusinda eyodwa kuphela.

Funda umphumela ohlangothini olufanele

Ngemuva kokuthi umthetho usebenze, shaya i-ping usuka kuseva futhi uqinisekise ukuthi impendulo ifinyelela kuklayenti, bese ushaya i-ping usuka emthonjeni okufanele usahlulwa futhi uqinisekise ukuthi awufinyeleli. Phinda ukuhlola kokufinyeleleka komunye umndeni wamakheli uma umhubhe uwuthwalayo.

Get-NetFirewallRule -DisplayName "VPN server echo" | Get-NetFirewallAddressFilter
ping 10.63.4.17
ping -6 fd00:63::17

Ukuphrinta umthetho osebenza manje kunenzuzo ukwedlula ukwethemba umyalo owawudala, ngoba umbono wangaphambili nomthetho osetshenzisiwe kuyizimo ezimbili ezihlukene. Uma isihlungi samakheli sibonisa umthombo owawuhlosile futhi umthombo okhishiwe usaphelela ngesikhathi, umthetho wenza ngqo lokho okushiwo ububanzi bawo. I-ping ephumelelayo evela kuklayenti yayingeke neze ikubonise lokho, yingakho uhlangothi lokuhlola ngakunye lusethikithini eceleni komphumela walo. Gcina izinhlangothi zombili ethikithini, ngaphandle kwalokho umfundi olandelayo uzophinda ukuhlola okungeke kwehluleke.