Ishadi le-SMB lehluleka kuphela nge-VPN: inkinga yokufaka isiginesha noma ukungqubuzana kwe-subnet?

Idrayivu esemephini esebenza ehhovisi kodwa ephelelwa isikhathi ekhaya ayikunikezi cishe nolwazi olusizayo ngokwayo. Umhubhe ngokusobala uthwala amaphakethe, ngaphandle kwalokho akukho okungafinyelela kuseva. Okwehlulekile kungesinye sezingqimba ezintathu: igama lixazululwe ekhilifwini elingalungile, iklayenti lenqabile ukusayina isikhathi, noma isikhathi esidala siphelele ngaphezu kokuxhumana okwasithwala. Okukodwa kunokunye kunesilungiso esihlukile, futhi ezimbili kwezintathu zisehlangothini leklayenti.

Ukwehluleka okuthathu kugqoke iphutha elifanayo

Incwadi yedrayivu ayisho ukuthi yikuphi ukungqimba okuphukile, futhi umbhalo wephutha uvamise ukuba ubanzi ngokwanele ukuhambisana nakho konke ukuthathu. Hlukanisa ngemibuzo emibili esheshayo: ingabe iseva iyaphendula kukhilifu layo le-IP, futhi ingabe iphothi 445 iyakwamukela ukuxhumana?

Lezo zimpendulo ziletha ithebula lesinqumo esikhundleni sokuqagela. Uma i-IP isebenza kodwa igama lingasebenzi, lokho kukhombisa ukuxazululwa kwegama. Uma kokubili kusebenza kodwa ukungena kunqatshwa, lokho kukhombisa isiginesha. Uma kokubili kusebenza kodwa ukufundwa kwefayela kuma ngemva kokuphazamiseka komhubhe, lokho kukhombisa isikhathi esidala.

Zisebenze ngokulandela lokho kuhlelo, ngoba igama elixazululwa kumsingathi ongalungile lenza konke ukuhlola okulandelayo kungabi nasizathu.

Xazulula igama ngaphambi kokuthinta ishadi

Uma iseva iphendula kukhilifu layo futhi igama leshadi liphela isikhathi, umhubhe wenza umsebenzi wawo futhi iklayenti libheka endaweni engalungile. Ekufinyeleleni kude, izimbangela ezimbili zichaza ingxenye enkulu yalokhu.

Okokuqala ukunqamleza kwamakhilifu. Lapho ihhovisi lisebenzisa i-192.168.70.0/24 futhi iwutha yasekhaya inikeza ububanzi obufanayo, igama lomsingathi elixazululwa ku-192.168.70.20 lingakhomba idivayisi yasendaweni esikhundleni se-seva engemva komhubhe. I-Windows ingase ithumele isicelo sasendaweni, yenqabe umzila, noma ixazululele kuphrinta enekhilifu lelo ngengozi. Isilungiso siwukubhalisa kabusha uhlangothi olulodwa, hhayi ukwengeza omunye umzila.

Okwesibili ububanzi be-DNS. I-adaptha ye-VPN engenawo iseva ye-DNS yangaphakathi, noma enesiseva esingafinyeleleki ngomhubhe, ishiya amagama amafushane eya kusixazululi somphakathi. Funda amabhizinisi e-DNS e-adaptha futhi ubuze igama langaphakathi ngqo ngaphambi kokuthinta ishadi:

> ipconfig /all | findstr /i "DNS Servers"
> nslookup files.corp.internal
Server: 10.90.0.2
Address: 10.90.0.2
Name: files.corp.internal
Address: 10.90.0.15

Uma lolo mbuzo ubuyisela ikhilifu obekulindelekile, ukuxazululwa kwegama sekucacile futhi inkinga iphezulu kusitaki.

Funda imfuneko yesiginesha kuzo zombili iziphetho

Iseva efinyelelekayo enqaba konke ukungena iwuphawu lokungavumelani kwemigomo hhayi ukwehluleka kwenethiwekhi. I-Windows ingaphoqa isiginesha ye-SMB kuklayenti, futhi iseva noma i-NAS engasayini ayikwazi ukuqeda isikhathi, kungakhathaliseki ukuthi umhubhe uphilile kangakanani.

Ungafunda isethingi yeklayenti ngaphandle kokucinga kuhleli lomgomo:

> Get-SmbClientConfiguration | Select-Object RequireSecuritySignature
RequireSecuritySignature
-------------------------
True
> Get-SmbConnection

Inani elihambisanayo ohlangothini lweseva lisekumisweni kwe-SMB yeseva, futhi womabili kufanele avumelane. Kwenye icala elibikiwe, iklayenti lalinemfuneko ivuliwe ngomgomo wasendaweni kuyilapho iseva yayingasayini nakancane; ukuyivala nokusebenzisa i-gpupdate /force kubuyisele ishadi ngokushesha. Leso yisinyathelo sokuxilonga ukuqinisekisa imbangela, hhayi isilungiso saphakade.

Khetha ukuvula isiginesha kuzo zombili iziphetho lapho iseva isekela khona. Ukushintsha isethingi yezokuphepha ukuze ishadi lisebenze kufanele kubhalwe kanye nenani langaphambilini nesizathu, ukuze kungabikho oyedinga ukuthola kabusha ekuhloleni okulandelayo.

Sula isikhathi esidala ngaphambi kokulungisa izikhathi

Ishadi elimaa kuphela ngemva kokuwa nokuxhumana kabusha kwe-VPN ngokuvamile libambe isikhathi iseva esivele isilahle. Iseva ivala izikhathi ze-SMB ezingasebenzi ngokwesikhathi sebanga le-Autodisconnect ngaphansi kwe-LanmanServer\Parameters, okuyi-15 imizuzu ngokuzenzakalela, kuyilapho iklayenti linesikhathi salo se-SessTimeout ngaphansi kwe-LanmanWorkstation\Parameters. Ukuphazamiseka okude kunalezo zindinganiso kushiya uhlangothi ngalunye nombono ohlukile wesikhathi.

Phinda ukhiqize ngokulandela ukuhlelo okugxilile ukuze umphumela ube nencazelo: xhuma umhubhe, vula ishadi, nqamula umhubhe imizuzu emibili, wubuyisele, bese uzama ukufunda ifayela. Uma ukugxunyekwa kuzilulama ngokwako, shiya izikhathi. Uma kuma kuze kube yilapho ugxunyeka kabusha, xhuma ishadi kabusha ngemva kokuthi umhubhe umile esikhundleni sokuligxunyeka ngaphambi kokuba libe khona, futhi uhlole ukuthi umsizi wokugxunyeka uyazama yini futhi.

Ukwenyusa izikhathi zokuphela kuyisinyathelo sokugcina esinengqondo kuxhumano olungazinzi, kodwa kwelapha uphawu. Iklayenti elilinda isikhathi eside ngesikhathi esikhohlwa yiseva lisalinda.

Qeda ngokufunda ifayela elilodwa ngokugxunyekwa, bese unqamula futhi ubuyisele umhubhe futhi. Lokho kuhlolwa kokwamukela kuhlanganisa zonke izingqimba ezintathu ngesikhathi esisodwa, futhi ukuphela kokuhlolwa okuhambisana nalokho okwenziwa umsebenzisi ngempela.