Ukwabelana ngesikhathi se-VPN sika-host nomuntu oyisimenywa we-VMware

Umshini wakho obonakalayo awukwazi ukufinyelela uhlelo lwangaphakathi olusebenza kahle ku-host, futhi i-host ixhunywe ngeklayenti eliphethe ithebula lokuhambisa. Ukuhlanganisa i-adaptha ebonakalayo nomhubhe ngebhuloho kubonakala kucaca futhi kwehluleka ngezizathu ezimbili ezihlukene. Okusebenzayo ukuhumusha engxenyeni yomshini womabili. Inani likhona: isimenywa ngasinye silelahlekelwa ubunikazi baso kunethiwekhi yenkampani.

Izizathu ezimbili ezenza ibhuloho lingasebenzi

I-adaptha yeklayenti ngokuvamile ithwala ikheli elilodwa, kaningi /32, futhi iklayenti libhala kabusha imizila ye-host ukuze ukuhamba okuphumayo okuvamile kukhethe umhubhe. Izinhlelo ku-host zilalela lelo thebula futhi zifinyelela uhlelo oluyimfihlo. Isimenywa esihlanganiswe nebhuloho asilifundi neze ithebula, ngoba amafreyimu aso aphuma ngeswishi engaphansi kwesendlalelo se-IP.

Ukufaka i-adaptha yomhubhe ebhulohweni bekuzoxazulula indlela ngokwethiyori, futhi umshayeli ngeke akwamukele. I-Windows 10 iphinde ivume idivayisi eyodwa kuphela yebhuloho futhi inganikezi indima yokuhambisa ebingavumela isiteshi somsebenzi ukudlulisa phakathi kwamasebunethi amabili. Okusalayo ukuhumusha komthombo. Yenza ukuhamba kwesimenywa kubonakale kuvela ku-host, futhi izinqumo ze-host ngokwayo zikuhambisa kumhubhe ngaphandle kokuba isimenywa sidinge umzila esingeke sibe nawo.

Dala ingxenye ephethwe i-host

Kuhleli lwenethiwekhi ebonakalayo, engeza inethiwekhi ye-host-only efana ne-VMnet3 esisekelweni ongasihambisi kwenye indawo, isibonelo 172.28.90.0/24. I-host ithatha u-172.28.90.1 kuleyo adaptha futhi isimenywa sixhuma kwiswishi efanayo. Vala i-DHCP ye-hypervisor kuleyo ngxenye ukuze isevisi yekheli eyodwa ibe ngumnikazi wayo.

Qinisekisa ukuthi i-Windows iyabona i-interface ngaphambi kokwakha noma yini phezu kwayo, ngoba lonke idizayini lincike ekutheni leyo adaptha ijwayelekile:

Get-NetAdapter | Format-Table Name, InterfaceDescription, Status
Get-NetIPAddress -AddressFamily IPv4 | Where-Object PrefixLength -eq 24

I-adaptha ye-host-only ivela lapho njenganoma iyiphi yomzimba. Yilo kanye umehluko ne-adaptha yomhubhe, engeke ixhunywe nanoma yini.

Humusha isisekelo sesimenywa

Vula isikhathi esiphakeme futhi uhumushe isisekelo. Qala ngokuhlola ukuthi yini esivele ikhona, ngoba izindawo zokusebenza zamakhonthena nama-hypervisor zifaka ukuhumusha kwazo futhi ukususa okungalungile kuphula omunye umkhiqizo.

Get-NetNat | Format-Table Name, InternalIPInterfaceAddressPrefix, Active
New-NetNat -Name "LabGuestEgress" -InternalIPInterfaceAddressPrefix 172.28.90.0/24

Bese uhlela isimenywa ngekheli eliqinile kuleso sisekelo, u-172.28.90.1 njengesango laso, kanye namakheli esixazululi i-hostlawuli esiwathola kumhubhe. Ukuhumusha kudlulisa amaphakethe futhi akufundisi lutho isimenywa nge-DNS, ngakho isimenywa esishiywe kurutha lendawo sixazulula amagama omphakathi futhi sehluleke kulo lonke igama langaphakathi.

Hlola ukweqa kokuqala, bese kuba yinani

Zama umngcele oseduze kakhulu ngaphambi kokuzama uhlelo lokusebenza. Umkhondo oma esangweni se-host usho ukuthi ukuhumusha akwenzeki, kanti oma ngale kwe-host usho ukuthi umhubhe uwile noma uhlangothi olukude lwenqabile ikheli elihunyushiwe.

tracert -d 172.20.31.10
nslookup intranet.corp.example
Get-NetNatSession -NatName "LabGuestEgress"

Qhathanisa nokufinyelela kwe-host ngokwayo endaweni efanayo ngenkathi umhubhe uvuliwe. Uma i-host iphumelela kanti isimenywa sehluleka, iphutha lisekuhumusheni noma ekusethweni kwesango lesimenywa, hhayi ekuxhumaneni.

Bese wamukela lokho kushintshana. Amasistimu ezenkampani manje abona ikheli elilodwa kusimenywa ngasinye, ngakho izitifiketi zedivayisi nokuhlolwa kwesimo sedivayisi ngayinye angeke zikwazi ukuzihlukanisa, futhi ezinye izinqubomgomo zikwenqabela ngokuphelele. Nquma nokuziphatha kokuwela, ngoba ukuhamba okuhunyushiwe kungawela emzileni ojwayelekile we-inthanethi lapho umhubhe wehluleka, ngaphandle uma uvimba leso sisekelo ku-firewall ye-host.