Setha i-DNS ku-adaptha ye-VPN ye-Windows nge-PowerShell, bese uqinisekisa

Ukuxhumana kwe-VPN kwe-Windows akugcini amaseva e-DNS kuphrofayili oyihlela kuzilungiselelo. Lapho umhubhe uphuma, iklayenti lixoxisana ngokucushwa kwe-IP nesango, isango lithumela uhlu lwezixazululi, futhi i-Windows ikusebenzisa ku-adaptha yomhubhe. Leyo adaptha iyisixhumi esihlukile kwi-Wi-Fi noma i-Ethernet yakho, futhi uhlu lungolwesixhumi, hhayi lwephrofayili. Uma usazi ukuthi iyiphi into ephethe inani, ukuyibhala kabusha ku-PowerShell umyalo owodwa; ukwenza ukubhala kabusha kumelane nokuxhumana kabusha yingxenye edinga isinqumo.

Iyiphi into ephethe ikheli

I-RAS idala i-adaptha yomhubhe lapho ukuxhumana kuphumelela futhi iyisusa lapho ukuxhumana kuphahlazeka. Amaseva e-DNS owabona ku-ipconfig /all afika ngesikhathi salolo shintsho lokucushwa, eceleni kwamakheli e-IPv4 ne-IPv6 kanye nemizila. Njengoba inani linamathele esixhumini, i-Set-DnsClientServerAddress ibhala entweni ekhona kuphela ngesikhathi ukuxhumana kukhona.

Lelo qiniso elilodwa lichaza ingxenye enkulu yokudideka mayelana ne-DNS ye-VPN. Iphrofayili ingahlolwa ngenkathi ungaxhunyiwe, kodwa asikho isixhumi okungakhonjiswa kuso, ngakho umbhalo wokungena obiza i-cmdlet ngokumelene ne-alias ye-VPN uyahluleka ngaphambi kokuthi noma ubani axhume. Kubuye kuchaze ushintsho olubonakala lubuyela emuva: akukho okwabuyela emuva, isixhumi sachithwa futhi sakhiwa kabusha ngamanani athunyelwa isango.

Thola i-alias ngaphambi kokuthinta i-DNS

Igama lephrofayili ne-alias yesixhumi ngokuvamile iwuchungechunge olufanayo, kodwa awuyona into efanayo. I-Get-VpnConnection ibala amaphrofayili; i-Get-NetAdapter ibala izixhumi i-Windows enazo ngempela. Ama-cmdlet e-DNS afuna eyesibili, futhi lezi zimbili zihluka kaningi kunalokho abantu abakulindele, ikakhulukazi lapho iklayenti lengeza incazelo efana no-"(RAS)" egameni le-adaptha.

Uma iphrofayili ingekho, i-PowerShell ingakha ukufakwa komdabu. Uhlobo lomhubhe nokuqinisekisa kufanele kuhambisane nalokho okunikezwa isango, ngoba ukungafani kuvela ngesikhathi sokuxhumana hhayi ngesikhathi sokudala:

Add-VpnConnection -Name "Corporate" -ServerAddress vpn.example.net `
  -TunnelType Ikev2 -EncryptionLevel Required `
  -AuthenticationMethod Eap -AllUserConnection

Xhumana kanye, bese ufunda i-alias yangempela ngaphambi kokubhala noma yimuphi umyalo we-DNS:

rasdial.exe "Corporate"
Get-NetAdapter | Where-Object InterfaceDescription -like "*VPN*"
Get-DnsClientServerAddress -InterfaceAlias "Corporate"

Sebenzisa ukubhala kabusha ngokulandelana okufanele

Ukulandelana kubaluleke kakhulu kunombhalo womyalo. I-adaptha kufanele iphakame, i-alias kufanele ixazululwe, futhi i-akhawunti kufanele ivunyelwe ukushintsha izilungiselelo zesixhumi. Ukuxhumana komsebenzisi ngamunye ngokuvamile kwamukela ushintsho oluvela kumsebenzisi ongene; ukuxhumana kwabo bonke abasebenzisi okwenziwe nge--AllUserConnection ngokuvamile kudinga isheli ephakanyisiwe.

I-cmdlet ngokwayo iwumugqa owodwa, kubhalwe ku-incwadi yereferensi ye-Set-DnsClientServerAddress yakwa-Microsoft:

Set-DnsClientServerAddress -InterfaceAlias "Corporate" -ServerAddresses 10.20.0.53,10.20.0.54
Get-DnsClientServerAddress -InterfaceAlias "Corporate" -AddressFamily IPv4

Izindlela ezimbili zokwehluleka kufanele zibonakale ngamehlo. I-alias engalungile ikhiqiza iphutha elivela ku-cmdlet, futhi lowo umphumela omuhle, ngoba ukuthula kungaba kubi kakhulu. I-cmdlet elungile engenamphumela obonakalayo ngokuvamile isho ukuthi ubheka i-adaptha engalungile: i-adaptha yomhubhe esele evela kwelinye iklayenti, ikhadi lenethiwekhi elibonakalayo elinencazelo efanayo, noma i-adaptha yesibili ebonakalayo eyakhiwe yithuluzi lenethiwekhi endaweni ekhawulelwe.

Kungani ukuxhumana kabusha kungabuyisa ushintsho

Ukubhala kabusha kungokwesimo esisodwa sesixhumi. Lapho iklayenti lidiliza i-adaptha futhi liyakhayo kabusha ekuxhumaneni okulandelayo, amanani athunyelwe asetshenziswa futhi futhi uhlu lwakho luyanyamalala. Amanye amaklayenti akha isixhumi kabusha kukho konke ukuxhumana; amanye asisebenzisa isikhathi sonke sesikhathi. Qhathanisa inkomba yesixhumi ku-Get-NetAdapter phakathi kokuxhumana okubili futhi uzokwazi ukuthi yikuphi ukuziphatha onakho.

Kunezimpendulo ezintathu eziqinile, futhi ukuzistacka kwenza amaphutha azo. Isijobelelo se-DNS esiqondene nokuxhumana kanye nomthetho we-NRPT kuthumela kuphela indawo yamagama yangaphakathi kusixazululi sangaphakathi futhi kushiye amagama omphakathi. Isilungiselelo se-Group Policy noma se-MDM esisetshenziswe ekuxhumaneni kwe-VPN sibeka i-DNS ngesikhathi sokuxhumana ngaphandle kwanoma yimuphi umbhalo. Umsebenzi ohleliwe osebenza ngomcimbo wokuxhumana futhi uphinde usebenzise i-cmdlet iyindlela eqinile, kodwa iyasebenza futhi ishiya ilogi. Khetha umnikazi oyedwa we-DNS bese ubhala ukuthi ngumuphi.

Amagama angaphakathi anelebula elilodwa nawo adinga uhlu lokusesha isijobelelo. I-Set-DnsClientGlobalSetting -SuffixSearchList isebenza kumshini wonke, ngakho ishintsha ukuxazululwa kwayo yonke i-adaptha kukhompyutha, kuhlanganise ne-Ethernet. Yihlole kumshini waselebhu ngaphambi kokuthi ingene kusithombe.

Qinisekisa ukuxazululwa, hhayi isilungiselelo kuphela

Isixazululi esibalwe ku-adaptha sifakazela kuphela ukuthi inani labhalwa. Buza iseva ehlosiwe ngqo, bese ubuza ngendlela evamile:

Resolve-DnsName server01.corp.example -Server 10.20.0.53
Resolve-DnsName server01.corp.example

Ukuhlukaniswa kukutshela ukuthi iphutha likuphi. Umbuzo oqondile uyaphendula kanti umbuzo ovamile uyahluleka: isilungiselelo se-adaptha noma uhlu lwesijobelelo awusebenzi. Kokubili kuyahluleka: isixazululi asifinyeleleki ngomhubhe, ngakho bheka imizila nemithetho yodonga lomlilo ngaphambi kokuthinta i-DNS futhi. Umbuzo oqondile uyahluleka kanti ovamile uphendula kwenye indawo: i-DNS ehlukanisiwe ayilungiswanga kahle futhi igama langaphakathi liphendulwa isixazululi somphakathi, okuyinkinga yenqubomgomo ngaphambi kokuba kube inkinga yokuxhumana.

Gijimisa isivivinyo kabili, kanye ngokushesha ngemva kokuxhumana futhi kanye ngemva kokunqamuka nokuxhumana kabusha, bese uqhathanisa okukhiphayo kwe-Get-DnsClientServerAddress kukho kokubili. Uma inani elithunyelwe libuyile ekuxhumaneni kwesibili, ukubhala kabusha kwaphila futhi kwafa ne-adaptha, futhi kuzosala kuphela umthetho we-NRPT noma umzila wenqubomgomo osesigabeni esedlule. Gcina zombili izinqophamazwi kanye nezimpawu zesikhathi zokuxhumana; zixazulula umbuzo wokuthi kuhlala yini ngokushesha kunomunye umjikelezo wezinguqulo.