I-tunnel yakho ehlukanisiwe ifinyelela uhlelo lokusebenza kodwa hhayi iseva yayo ye-DNS
I-tunnel ehlukanisiwe ingahamba i-subnet yohlelo lokusebenza futhi ishiye isixazululi esiseduze nayo. Engeza umzila we-host, bese uhlola ukuthi iyiphi iseva i-Windows ekhetha ngempela.
Ukuhamba kwe-subnet yohlelo lokusebenza ingxenye ecacile ye-tunnel ehlukanisiwe, futhi akusiwona wonke umsebenzi. Isixazululi ngokuvamile sihlala ekhelini elihlukile kuhlelo lokusebenza elilusebenzelayo, ngakho i-tunnel esebenzayo ingasashiya ukusesha ngaphandle kwayo. Iphrofayela ethwala i-10.80.0.0/16 futhi ingekho enye into ithumela umbuzo we-10.90.0.53 ngokusebenzisa isixhumi sangaphakathi, lapho kungekho khona indawo yangasese. Engeza indlela yokuxazulula, bese ubheka ingxenye yesibili yenkinga: iyiphi iseva iklayenti eliyikhetha ngempela.
Inkolelo: umzila owodwa uhlanganisa yonke insizakalo
I-tunnel ehlukanisiwe iwuhlu lwezindawo eziya ngokuxhumana, hhayi incazelo yensizakalo. I-subnet yohlelo lokusebenza nekheli lesixazululi yizindawo ezimbili, futhi iphrofayela ingathwala enye ngaphandle kwenye. Lapho lokho kwenzeka, uhlelo lokusebenza lufinyeleleka ngekheli kodwa igama lalo lihluleka, okubonakala njengokonakala kwe-DNS hhayi igebe lokuhamba.
I-subnet ezungeze isixazululi nayo ayimbozwa ngokuzenzakalela. Umzila we-host owuya ekhelini elilodwa wanele kuleso sixazululi futhi awuvuli omakhelwane baso. Yilokho okushiwo umzila we-host: mncane ngokwakhiwa, futhi kulula ukhohlwe lapho insizakalo elandelayo ivela ku-subnet efanayo.
Izinto ezintathu kufanele ziqine ukuze ukusesha kusebenze: iklayenti lihamba ikheli lesixazululi nge-tunnel, isango lamukela futhi lidlulise leso sicelo, futhi isixazululi samukela umthombo esiwutholayo. Impendulo nayo kufanele ibuya ngendlela ekuvunyelwene ngayo. Uma kukhona okushodayo, uphawu luyafana, ngakho kufanele kubhalwe ithebula lamakheli ngaphambi kokuthinta ukucushwa.
Nquma ukuthi iphrofayela kufanele ithwale amakheli ephi
Bhala izindawo ngokulandelana: inethiwekhi yohlelo lokusebenza, ikheli lesixazululi kanye nephoyinti lokugcina lomphakathi eliphetha i-tunnel ugobo. Eyesithathu akufanele neze ihambiswe ngaphakathi kwe-tunnel, ngoba ukuxhumana kwangaphandle kudinga indlela ekhona ngaphambi kwe-tunnel.
| Destination | Coverage this example needs |
|---|---|
| Application network | 10.80.0.0/16 through the VPN |
| Private resolver | 10.90.0.53/32 through the VPN |
| Public VPN endpoint | Normal internet path, outside the tunnel |
Faka kokubili i-UDP ne-TCP ku-DNS, ngoba ukusetshenziswa kulindeleke ukuthi kusekele i-TCP eceleni kwe-UDP, futhi indlela ye-TCP evinjiwe iletha ukwehluleka okunensayo, okuyingxenye esikhundleni kokuhlanzekile. Uma indawo yangasese isetshenziswa futhi nge-IPv6, ukukhululeka kwe-host okulinganayo kusebenzisa ikheli ne-premix ye-IPv6 futhi kuwukufakwa okuhlukile.
Bhala lokho iphrofayela esikuhlanganisile ngaphambi kokwengeza noma yini. Umzila ophindwe kabili awunangozi, kepha umzila okhona ongalindelekile ukutshela ukuthi iphrofayela yakhelwe uhlelo lwamakheli oluhlukile kunalolo oyinikiwe.
Engeza umzila we-host ngokusebenzisa umnikazi wokuxhumana
Kumaphrofayela e-Windows omdabu aphethwe endaweni, umzila ungowokuxhumana hhayi ithebula lokuhamba lomhlaba lomshini. Qala ubone ukwengezwa, bese ukusebenzisa ngesilinganiso esifanayo esisetshenziswa iphrofayela.
Add-VpnConnectionRoute -ConnectionName 'Office VPN' -DestinationPrefix '10.90.0.53/32' -WhatIf Get-VpnConnection -Name 'Office VPN' | Select-Object -ExpandProperty Routes
Umyalo wokuqala ubonisa ukushintsha ngaphambi kokufaka noma yini, futhi owesibili ubalula imizila iphrofayela eyithwalayo manje. Isithenjwa se-Add-VpnConnectionRoute se-Microsoft sibhala amabanga omsebenzisi ngamunye nawo wonke abasebenzisi; iphrofayela yabo bonke abasebenzisi idinga ipharamitha yayo yebanga, futhi umyalo womsebenzisi ngamunye ngokumelene nephrofayela yabo bonke abasebenzisi uyehluleka noma uhlale endaweni engalungile.
Uma iphrofayela iphethwe noma ivela kuklayenti yomthengisi, ukushintsha kungokwalowo mnikazi. Ukugcwalisa umzila wesistimu unomphela phezu kwenqubomgomo yokuxhumana kusebenza kuze kube yilapho inqubomgomo isetshenziswa futhi umzila unyamalala, lokho okuvame ukwenzeka phakathi nocingo lokusekelwa hhayi phakathi nokuhlola. Lokho kwehluleka kuthule: umzila unyamalala, igama liyeka ukuxazululeka, futhi akekho oxhumanisa izehlakalo ezimbili. Faka ushintsho kurekhodi lomnikazi uqobo ukuze ukusetshenziswa okulandelayo kuyithwale esikhundleni sokuyisusa.
Ngemva kokusebenzisa, xhuma iphrofayela futhi esikhundleni sokucabanga ukuthi umzila ususebenzile. Izinguquko zomzila kuxhumano oluphilayo azitholakali njalo, futhi ukuxhuma kabusha kuphinda kukhiqize isimo abasebenzisi bakho abayoba naso ngempela.
Hlola ukuthi yisiphi isixazululi iklayenti elisisebenzisile ngempela
Umzila ulawula amaphakethe aqondiswe kusixazululi. Awunqumi ukuthi yimaphi amagama okufanele athunyelwe lapho, futhi lokho kukhetha kuyindlela ehlukile. Ku-Windows, imithetho esebenzayo yendawo yamagama ingakhetha isixazululi ngedomaini ngayinye, kuyilapho izilungiselelo ze-DNS zephrofayela zinikeza okuzenzakalelayo. Lezi zinto ezimbili zingavumelani ngaphandle kokukhiqiza iphutha, ngakho umbuzo oqondile uyingxenye yobufakazi kuphela.
Get-DnsClientNrptPolicy Resolve-DnsName app.svc.example -Server 10.90.0.53 -Type A
Umyalo wokuqala uprinta inqubomgomo yendawo yamagama esebenzayo, futhi owesibili ubuza isixazululi sangasese ngqo ngegama lohlelo lokusebenza. Impendulo eqondile ifakazela ukuthi indlela nesixazululi ziyasebenza; ayifakazeli ukuthi ukusesha kohlelo lokusebenza ngokwako kwakhetha leyo seva. Qhathanisa nokusesha okuvamile kwegama elifanayo kanye nempendulo etholwa uhlelo lokusebenza.
Cabanga ngezinqwaba kanye ne-DNS ephephile ezingeni lesiphequluli, engadlula ngokuphelele isixazululi sesistimu samagama ashaywe umsebenzisi. Isijobelelo sokusesha singomunye umkhondo okhohlisayo: sinweba igama elifushane libe igama eliqinisekisiwe ngokuphelele futhi akuhlangene nalutho nokuthi iyiphi iseva ephendulayo.
Qeda ngokuxhuma futhi uphinda ukusesha okuvamile, bese uqinisekisa ukuthi ukuphequlula okuvamile kusalandela inqubomgomo yako evunyelwe. Ukufaka esikhundleni isixazululi sangasese ngesomphakathi ukuze igama elingahlobene lixazululwe akulona ukulungisa, futhi kuhambisa ngokuthula imibuzo yangasese endaweni ababengafanele baye kuyo.