Ingabe i-adaptha ye-VPN ye-Windows kufanele ibe yeyangasese noma yomphakathi?
Nquma ngezivivinyo ezintathu ukuthi i-adaptha ye-VPN ye-Windows ingaphansi kwephrofayili yangasese: indlela ethembekile, ukuhlukaniswa okuzinzile kanye nemithetho oyidinga ngempela.
Ukusetha i-adaptha ye-VPN ye-Windows kokuthi Okwangasese kulungile kumhubhe webhizinisi futhi akulungile kuklayenti ye-VPN yezentengiselwano, futhi umehluko awona wokubukeka nje. Isigaba senethiwekhi sikhetha iphrofayili yodonga lomlilo, ngakho ukushintsha okukodwa kwamukela isethi yonke yemithetho ngasikhathi sinye. Ngike ngabona umbhalo wokungena ubangela ukuthi yonke i-adaptha engaziwa ibe ngeyangasese, okwadalulwa buthule ukwabelana ngamafayela kunethiwekhi engenantambo yasehhotela. Izimo ezintathu zininquma impendulo, futhi kufanele zonke zibe yiqiniso ngaphambi kokuthi uthinte isilungiselelo.
Isigaba sinquma ngempela ini
I-Network Location Awareness yakha isiginesha kunethiwekhi ngayinye exhunyiwe ngokusho lokho i-adaptha engakubika: ikheli lesango ne-MAC, isijobelelo se-DNS, nokuthi kasikhulume yini isilawuli sesizinda nokuthi ingena ku-inthanethi yini inethiwekhi. I-Windows ihlanganisa iphrofayili naleso siginesha, bese udonga lomlilo lusebenzisa isethi yemithetho yaleyo phrofayili. Okomphakathi kuyisimo esiyisipele lapho ukuhlonza kuhluleka, yingakho umhubhe osebenzayo usengasebenza uphawulwe njenge-nethiwekhi engaziwa.
I-adaptha ye-TUN noma ye-TAP ivamise ukunikeza ukuhlonza ulwazi oluncane kakhulu. Umlingani womhubhe uvamise ukuba yikheli elilodwa esikhundleni sesango, i-DNS ingase ithunyelwe ngaphakathi komhubhe kuphela, futhi i-adaptha ayinayo indlela yayo yokuzenzakalela. Ilebula elivelayo lichaza okokufaka kodonga lomlilo, hhayi impilo yomhubhe, futhi yingakho imithetho yephrofayili yangasese iyeka ukuvumelana ngesikhathi i-VPN ixhuma.
Isimo sokuqala: umhubhe uyindlela ethembekile
Ukukhetha Okwangasese kusho ukuthi konke okufinyeleleka ngalolu xhumo okungenani kuthembekile njenge-LAN yakho, ngoba ukuthola kanye nemithetho engenayo kuzothatha leyo subnet njengeyendawo. Emhubheni webhizinisi oya ku-subnet ephethwe enamaserver amafayela namaphrinta, lesi simemezelo sivamise ukusebenza. I-adaptha iwumnyango wokungena kunethiwekhi elawulwa yinhlangano yakho, futhi umshini ongakolunye uhlangothi wamukelwe ngomgomo ofanayo nowamukela owakho.
Indlela yokuphuma ye-VPN yezentengiselwano ayiphumeleli lesi sivivinyo. Abanye ababhalisile babelana nge-subnet yokuphuma, futhi ukuyiphawula ngokuthi Okwangasese kubeka ukutholwa kwenethiwekhi, i-LLMNR kanye nokuxazululwa kwamagama e-NetBIOS esigabeni esigcwele abantu ongabazi. Umhubhe ohlukanisiwe nawo ungahluleka: lapho i-adaptha ithwala indlela eyodwa yomsingathi eya kuhlelo olulodwa, akukho subnet ethembekile okukhulunywa ngayo, futhi ukushintsha isigaba akukuni lutho.
Isimo sesibili: ukuhlukaniswa kuhlala ngemva kokuxhuma kabusha
Isango elisha noma isijobelelo se-DNS esisha sikhiqiza isiginesha esisha, futhi i-Windows yenza isinqumo esisha sephrofayili ngaso. Ngakho i-Set-NetConnectionProfile yesikhathi esisodwa ihlala kuze kube ukuxhuma kabusha okulandelayo, hhayi unomphela. Hlola iphrofayili ngemva kokuxhuma kabusha hhayi ngemva kokuxhuma kokuqala, ngoba yilapho isilungiselelo sibuyela khona sodwa.
Kunezindlela ezintathu zokukwenza kuhlale njalo. Okucwebe kakhulu umgomo: vula i-secpol.msc, iya ku-Network List Manager Policies futhi usethe uhlobo lwendawo yenethiwekhi, kuhlanganise nomgomo wenethiwekhi engaziwa, ukuze iphrofayili isetshenziswe umgomo hhayi umyalo. Okwesibili umbhalo wokuxhumana ngakunye noma umsebenzi ohleliwe osebenzisa i-cmdlet ye-PowerShell ngemva kokuba umhubhe ukhuphukile. Okwesithathu iqhinga lendlela lakudala, elinikeza ukuhlonza isango elizohlolwa:
route -p add 0.0.0.0 mask 0.0.0.0 10.8.0.1 metric 50 IF 24
Get-NetConnectionProfileIqhinga lendlela liwukuchezuka, hhayi ukuhlukaniswa. Liyaphuka lapho ubudlelwano be-metric bushintsha noma iklayenti le-VPN libhala kabusha izindlela lapho ixhuma kabusha, futhi lishintsha buthule ukukhethwa kwendlela kukho konke okuwela endleleni yesibili yokuzenzakalela.
Isimo sesithathu: udinga isethi yemithetho yangasese
Okwangasese ngokuvamile kufaka Ukwabelana Ngamafayela Namaphrinta, Ukutholwa Kwenethiwekhi kanye namaqembu okuphatha okude. Uma umsebenzi kuwukufinyelela ukwabelana kwe-SMB noma iphrinta ngomhubhe, yileso isizathu sangempela sokushintsha isigaba. Uma umsebenzi kuwukufinyelela okuphumayo kuwohlelo olulodwa lwewebhu, isigaba asisho lutho: bhala umthetho ophumayo, gcina Okomphakathi futhi ume lapho.
| Scenario | Category | Why |
|---|---|---|
| Corporate tunnel to a file server or printer | Private | Private rules carry the sharing you need |
| Commercial VPN for privacy | Public | The exit subnet is shared with strangers |
| Split tunnel with a single host route | Public | No trusted subnet and an unstable signature |
| Site-to-site tunnel to a branch LAN | Private | The far subnet is managed like the local one |
| Lab adapter you control end to end | Private | Discovery helps and nothing else is exposed |
Funda ithebula njengendawo yokuqala, bese uhlola ukuthi yimiphi imithetho yangasese evuliwe ngempela esithombeni sakho. Isithombe esiqinisiwe kungenzeka sisuse ukwabelana ngamafayela ngokuphelele kuphrofayili yangasese, futhi lapho ukushintsha kwesigaba akufinyeleli lutho kuze kube yilapho ubuyisela umthetho. Lokho kuhlola kuthatha umyalo owodwa futhi konga intambama ende.
Yenza ushintsho ngaphandle kokwandisa konke okunye
Khombisa inkomba yoxhumo, hhayi uphawu lokufanisa, futhi ufunde uhlu ngaphambi nangemva:
Get-NetConnectionProfile
Set-NetConnectionProfile -InterfaceIndex 24 -NetworkCategory Private
Get-NetFirewallProfileAmaphrofayili agciniwe ahlala ngaphansi kokhiye i-NetworkList kurejista, lapho inani le-Category lihlukanisa khona amanethiwekhi omphakathi, angasese nawesizinda. Ukulihlela kuyenzeka futhi kulula ukwenza iphutha: kufanele ushintshe okufakiwe okuhambisana nesiginesha yamanje ye-adaptha, hhayi okufakiwe okudala okushiywe ikheli langaphambili. Okufakiwe okuphelelwe yisikhathi kubonakala kulungile kuhleli futhi akwenzi lutho lapho kuxhunywa kabusha.
Noma yini oyenzayo, ungakhiphi umbhalo obeka yonke i-adaptha engaziwa kokuthi Okwangasese. Leyo yinguqulo yomugqa owodwa yokuvula ukutholwa kunethiwekhi engenantambo engathembekile. Uma udinga ukwabelana kuphela nge-subnet yomhubhe, gcina iphrofayili ingeyomphakathi futhi wengeze imithetho engenayo ekhawulelwe ebangeni lamakheli akude omhubhe; umthetho wodonga lomlilo mncane kunesigaba.
Qinisekisa ukwabelana, hhayi ilebula
Ngemva koshintsho, hlola isinsiza ngokwaso esikhundleni sokuthemba ilebula:
Test-NetConnection files.corp.example -Port 445
Resolve-DnsName files.corp.exampleUma ukwabelana kusahluleka ngesikhathi i-adaptha ikhombisa Okwangasese, isigaba akuseyona inkinga yakho. Ukuxazululwa kwamagama, indlela engekho noma izimvume zokwabelana kuzokhiqiza uphawu olufanayo, futhi ukushintsha iphrofayili futhi akukwazi ukulungisa lutho kulokho. Xhuma kabusha kanye futhi usebenzise i-Get-NetConnectionProfile futhi ukuze uqinisekise ukuthi isilungiselelo sahlala, bese uphatha ukwehluleka okusele njengenkinga evamile ye-SMB.
Uhlu lokuhlola: qinisekisa ukuthi umhubhe uyindlela ephethwe, iphrofayili ihlala ngemva kokuxhuma kabusha, imithetho yangasese edingekayo ikhona esithombeni futhi ukwabelana kuxazululeka futhi kuphendula kuphothi 445. Uma okukodwa kwezintathu zokuqala kungelona iqiniso, shiya i-adaptha kukho Okomphakathi futhi uxazulule inkinga yokufinyelela ngomthetho okhawulelwe.