Amaklayenti e-VPN e-RRAS adinga ichibi lawo le-IPv4 kanye nendlela yokubuyela

Iklayenti le-VPN lixhuma futhi lithola ikheli, kodwa umsingathi we-LAN eliwudingayo awukakwazi ukuliphendula. Ku-Windows Routing and Remote Access, ikheli langaphakathi lamaklayenti e-VPN livela echibini elilungiselelwe ngokuhlukile kusuka kusihlanganisi se-LAN seseva, futhi uhlangothi lwe-LAN ludinga indlela yokubuyela kulelo chibi. Izinguquko ezimbili, hhayi eyodwa, futhi zihluleka ngezindlela ezihlukile. Zisebenze ngokulandelana ukuze uhlelo lwamakheli nendlela yokubuyela kuqinisekiswe ngaphambi kokuhoxiswa kwamabanga amadala.

Beka ibanga eceleni ngaphambi kokuvula ikhonsoli

Khetha isiqalo esingahlangani ne-LAN, amanye amabanga e-VPN noma noma yini ehambiswa esikweni. I-/24 iwusayizi olula wokuhlola, futhi ingxenye yokuqala esebenzisekayo inganikezwa amaklayenti kuyilapho okusele kukhululekile ekukhuleni. Kuyibhale phansi nenjongo yayo nomnikazi wayo ngaphambi kokuyithayipha kukhonsoli. Shiya isikhala emaphethelweni womabili ebhuloki ukuze ukuhlukaniswa kwakamuva kungaphoqi ukufakwa kwezinombolo kabusha.

Uhlelo lwamakheli oluhlala kuphela kukhonsoli lusendaweni eyodwa yokwakhiwa kabusha ukusuka ekungqubuzaneni. Futhi luvame ukukhula: othile wengeza ibanga lesibili kamuva futhi akekho ohlola elokuqala. Gcina uhlelo eduze kwemibhalo yeseva, hhayi kungxoxo.

Isihlanganisi se-LAN seseva asichazi leli chibi. Ukushintsha isilaleli somphakathi noma ukwengeza isihlanganisi ku-LAN kwenza enye into ngokuphelele. Yingakho amaklayenti engaxhuma futhi athole ikheli endaweni engalungile. Ichibi lihlala ezimisweni ze-IPv4 zeseva, hhayi ohlwini lwezihlanganisi.

Ukushintsha indlela akukona ukwengeza ibanga

I-RRAS inendlela yokwaba kanye neqoqo lamabanga. Ukusuka ku-DHCP ukuya echibini elimile ukushintsha kwendlela. Ukwengeza elinye ibhuloki ngenkathi ichibi elimile selivele lisebenza ukushintsha kwebanga.

Buka kokubili ukusebenza ngaphambi kokwenza noma yikuphi, futhi ufunde okuhambisana nesimo samanje seseva:

Set-VpnIPAddressAssignment -IPAssignmentMethod StaticPool -IPAddressRange '10.250.50.10','10.250.50.100' -WhatIf
Add-VpnIPAddressRange -IPAddressRange '10.250.50.110','10.250.50.150' -WhatIf

I-cmdlet yesibili iyahluleka noma ikhiqiza ichibi elingasebenziseki uma iseva isekwabeni lwe-DHCP. Eyokuqala ithatha indawo yendlela esikhundleni sokunweba ichibi elikhona. Akukho ukubuka kuqala okusebenzisa noma yini, ngakho sebenzisa okuhambisanayo, bese uqinisekisa ichibi elivelayo kukhonsoli. Uma ungqinisekile ukuthi iseva isesimweni sini, funda indlela yokwaba ekhasini lezimo ze-IPv4 bese ubalula amabanga alungiselelwe:

Get-VpnIPAddressRange

Indlela ye-DHCP enohlu lwamabanga olungenalutho isho ukuthi ukubuka kuqala kokuqala kuyasebenza. Ichibi lamakheli elimile elinebanga elikhona lisho ukuthi eyesibili iyasebenza.

Cabangela ukuqalwa kabusha kwesevisi okungase kudingwe yisilungiselelo, futhi ungacabangi ukuthi amaklayenti axhunyiwe azofakwa izinombolo kabusha ngokushesha. Iklayenti eligcina ikheli lalo elidala ize iphinde ixhumane liziphatha ngokujwayelekile. Hlela ushintsho ngesikhathi lapho ukuphinda kuxhunyaniswe kwamukelekayo.

I-LAN idinga indlela yokubuyela

Ake sithi i-LAN ingu-10.60.0.0/24 futhi iseva ye-RRAS ingu-10.60.0.10 kuyo. Umsingathi kuleyo LAN ophendula iklayenti ku-10.250.50.0/24 udinga indlela eya echibini ngokusebenzisa iseva ye-RRAS. Ngaphandle kwaleyo ndlela isicelo siyafika futhi impendulo iyafa.

Uma isango elizenzakalelayo lomsingathi kuyi-router enye, leyo router idinga indlela yokubuyela yesiqalo se-VPN. Indlela emile kuseva ye-RRAS ayisizi lapha; indlela yokubuyela kufanele ibe khona kudivayisi engumnikazi wesango le-LAN, ngakho yengeze kuthebula lokuhamba noma kunqubo yokuhamba eguquguqukayo, kuye ngokuthi isayithi isebenzisa ini.

Hlola futhi udonga lomlilo lomsingathi nanoma yimithetho yokufinyelela inethiwekhi ebhekene nebanga lomthombo elisha. Imithetho ebhalelwe ibanga lamaklayenti elidala iyenqaba elisha ngisho noma ukwaba kuphumelele. Izindlela zeklayenti eziya e-LAN nokuxazululwa kwe-DNS yizidingo ezihlukile, futhi kokubili kungahluleka ngenkathi ithuluzi libonakala liphilile. Hlola ngakunye ngokwehlukana.

Qinisekisa ichibi elisha kudivayisi eyodwa ngaphambi kokuhoxisa elidala

Thatha imvume eyodwa oyilawulayo, phinda uxhume bese ufunda ikheli lechibi elitholwe yiklayenti. Leyo nombolo eyodwa ihlukanisa ukwaba nokuhamba. Bese uzama uhlelo olubiziwe, ubheka ithrafikhi ebuyayo, futhi uzame indawo okufanele ihlale yenqabiwe. Ukubona okuthathu, izindlela ezintathu zokuhluleka.

Ukuxazululwa kwamagama kufanele kuhlolwe ngokwako: ukufinyelela nge-IP kungase kusebenze ngenkathi i-DNS yeklayenti isakhomba kusixazululi elingakwazi ukusifinyelela. Iseva ye-DNS ku-LAN ifinyeleleka kuphela uma iklayenti linendlela eya kuyo futhi iseva yamukela imibuzo evela ebangeni elisha. Kokubili kuyizinto ezivame ukweqiwa lapho ichibi lihamba.

Hoxisa amabanga amadala kanye nezihlukile zazo kuphela ngemva kokucabangela amaseshini asebenzayo kanye nenqubo yokunakekela. Iklayenti elixhunyiwe elinekheli elisha liqinisekisa ukwaba, hhayi inqubomgomo yokufinyelela. Gcina ibanga elidala libhalwe kuze kuphele iseshini yokugcina eyalisebenzisa.

Hlola umphumela ngokubona okuthathu

Ukwamukelwa kudinga amaqiniso amathathu: iklayenti linekheli elivela echibini elisha, umsingathi we-LAN angalifinyelela futhi athole impendulo, futhi indawo enqabiwe iseyenqabiwe. Ngakunye kunokuhlola kwako, ngakho ukuhluleka kukhomba ekwabeni, ekuhambeni noma kunqubomgomo. Zisebenzise ngalolo hambo.

Kusukela kuklayenti, qinisekisa ikheli nendlela eya kumsingathi oyedwa we-LAN:

ipconfig | findstr /i "IPv4"
route print -4

Kusukela kumsingathi we-LAN, qinisekisa indlela yempendulo nenqubomgomo ngokuhamba okukodwa. Uma i-ping ihluleka kodwa uhlelo lusebenza, ingxenye engekho cishe umthetho we-ICMP hhayi indlela. Uma kokubili kuhluleka, funda indlela kumsingathi ngaphambi kokuhlela i-VPN. Bhala imiphumela emithathu kuthikithi yoshintsho ukuze umuntu olandelayo aqale ebufakazini.