Kungani i-adaptha yakho ye-VPN ihlala kuphephileli yomlilo yomphakathi
Ukungena kusizindalwazi akuhlukanisi inethiwekhi njengesizindalwazi, futhi Okwangasese akusona esinye isikhala. Funda iphrofayela yomthetho, bese kuba umshini oyisebenzisayo.
Umhubhe uvuliwe, i-akhawunti iqinisekisiwe kusizindalwazi, kodwa i-Windows isabiza ukuxhumana njengokomphakathi. Ngakho umthetho wephephileli yomlilo obhalelwe iphrofayela yesizindalwazi awusebenzi, futhi ukwabelana ngamafayela kuhlala kungafinyeleleki. Umzamo ojwayelekile wokulungisa ukusetha i-adaptha kokwangasese, okushintsha ukuthi imiphi imithetho esebenzayo ngaphandle kokushintsha lutho ekuqinisekiseni. Kokubili uphawu nokulungisa akuqondwa kahle kabanzi, futhi ukuhlukanisa kukho kudinga imiyalo emithathu.
I-akhawunti exhumile ayisona isigaba senethiwekhi
Phakathi nokuxhumana kwe-VPN kuthathwa izinqumo ezimbili ezihlukene futhi kulula ukuzixuba. Isango linquma ukuthi i-akhawunti ingaxhumana yini. I-Windows inquma ukuthi inethiwekhi evelayo ihlukaniswa kanjani, futhi lokho kuhlukanisa kuqoka ukuthi imiphi imithetho yephephileli yomlilo esebenza kusixhumi.
Ukuqinisekiswa kwesizindalwazi okuphumelelayo esangweni kuwubufakazi ngobulungu be-akhawunti. Akusona ubufakazi bokuthi indawo yokugcina iqinisekisile inethiwekhi kusilawuli sesizindalwazi, futhi yilokho kanye isigaba sesizindalwazi esikumele.
Yingakho umshini ungaba ujoyine isizindalwazi, uxhume nge-akhawunti yesizindalwazi, futhi usabonise umphakathi. Ukuhlukanisa kuyisinqumo sasekhaya ngenethiwekhi, akusona isitatimende ngezifakazelo ezivule umhubhe. I-akhawunti ingaba semthethweni ngokuphelele kuyilapho uphawu luhlala lapho luqale khona.
Izigaba ezintathu, esisodwa ongakwazi ukusisetha
I-Windows inikeza izigaba ezintathu futhi ezimbili kuphela zazo ezinganikezwa umphathi. Eyesithathu inqunywa uhlelo lokusebenza ngemuva kokuqinisekisa inethiwekhi kusilawuli sesizindalwazi ngempumelelo.
| Category | How it is assigned | What it affects |
|---|---|---|
| Public | Default for unidentified networks, or set manually | Rules scoped to the public profile |
| Private | Set manually, or by the user on a trusted network | Rules scoped to the private profile |
| DomainAuthenticated | Determined by Windows after domain authentication | Rules scoped to the domain profile |
Get-NetConnectionProfile | Select-Object Name,InterfaceAlias,NetworkCategory,IPv4Connectivity
Set-NetConnectionProfile -InterfaceAlias 'Corp VPN' -NetworkCategory Private
Set-NetConnectionProfile -InterfaceAlias 'Corp VPN' -NetworkCategory DomainAuthenticatedUmyalo wesithathu wehluleka, futhi lokho kungukuziphatha okubhaliwe hhayi inkinga yezimvume. Incwadi yereferensi yomyalo uqobo ithi isigaba sesizindalwazi asikwazi ukunikezwa ngale ndlela, ngoba i-Windows isithola ekuqinisekisweni kwesizindalwazi. Ukubona iphutha kuyisiqinisekiso esiwusizo sokuthi isigaba siwumphumela hhayi isilungiselelo.
Funda umyalo wokuqala endaweni yokugcina okuhlulekayo ukuhamba kwayo. Ukuhlukaniswa kwesixhumi sesango uqobo akukutsheli lutho mayelana nokuthi isiteshi ngasinye sokusebenza esixhumayo sahlukanisa kanjani umhubhe waso.
Imithetho ilandela iphrofayela eyabhalelwa yona
Uma ususazi isigaba, ukungabi khona kokufinyelela ngokuvamile kuyazichaza. Wonke umthetho we-Windows Firewall unomkhawulo wephrofayela, futhi umthetho obekelwe isizindalwazi awusebenzi lapho isixhumi singesomphakathi. Imiyalo emithathu iguqula lokho kube impendulo hhayi ithiyori, futhi eyesithathu ibamba isimo lapho iphrofayela yayingakaze ibe yinkinga:
(Get-NetFirewallRule -DisplayName 'Allow File Share').Profile
Get-NetFirewallRule -DisplayName 'Allow File Share' | Get-NetFirewallAddressFilter
Get-NetFirewallProfile | Select-Object Name,Enabled,DefaultInboundActionUmyalo wesibili yiwo oguqula umbiko ongacacile ube ukulungisa. Uma umthetho ukhawulelwe ebangeni lamakheli akude elingafaki ichibi le-VPN, ukushintsha iphrofayela nakho ngeke kusize.
Hlola futhi isenzo sokungena esizenzakalelayo. Kumshini lapho ukungena kuvinjiwe ngokwezigaba, umthetho wemvume ongekho ukhiqiza ukuthula esikhundleni sokwenqaba. Ngasohlangothini lwekhasimende lokho kubonakala kufana nokuhluleka komzila, yingakho amathikithi amaningi anjalo eqala ngokucabanga okungalungile.
Thola ukuthi yimuphi umshini osebenzisa umthetho
Ngaphambi kokushintsha isigaba, thola lapho ukuvinjwa kwenzeka khona. Iseva ephethe ukwabelana ingaba nephephileli yayo yomlilo, futhi imithetho yayo isebenza kuthrafikhi evela echibini le-VPN kungakhathalekile ukuthi ikhasimende labiza kanjani i-adaptha yalo. Ukwenqaba lapho akubonakali kunoma yimuphi umyalo wasekhaya oyisebenzisayo, futhi uhlangothi lwekhasimende lubika kuphela ukuthi insiza ayitholakali. Hlola imithetho yendawo ekuyiwa kuyo uqobo ngaphambi kokuthinta ukuhlukaniswa kwekhasimende.
Hlola kusuka kwekhasimende kuya embobeni ethile, bese uqhathanisa nokuhlolwa okuvela kwenye ingqalasizinda kuleyo VPN efanayo. Uma kokubili kwehluleka, inkinga isendaweni ekuyiwa kuyo noma emzileni. Uma kweyodwa kwehluleka, umehluko ungowasekhaya kulo mshini, futhi isigaba sephrofayela siba yimbangela enokwenzeka.
Khumbula nokuqondiswa. Umthetho ovumela i-SMB engenayo awenzi lutho kukhasimende omthetho waso wokuphuma uvimba ukuthrafikhi efanayo. Kusuka efasiteleni lesiphequluli samafayela ukwehluleka okubili akukwazi ukuhlukaniswa, ngakho hlola ukuqondiswa ngakunye ngokwehlukana ngaphambi kokuhlela noma yini.
Yini okufanele uyenze esikhundleni sokuphinda ufake uphawu kukho konke
Ukwenza inethiwekhi engaziwa ibe Okwangasese ukuze kwenelise umthetho obanzi ushintsho lwangempela olunemiphumela yangempela. Iphrofayela yangasese ivamise ukuvumela ukutholakala okwengeziwe nethrafikhi engenayo eyengeziwe kuneyomphakathi.
Uma inhloso iwukuvumela insizakalo ethile ukuthi ifinyelele amakhasimende e-VPN, khawulela umthetho ngekheli elikude hhayi ngephrofayela. Lokho kuveza inhloso ngokunembile, kusebenza kungakhathalekile ukuhlukaniswa, futhi akuncikile ekutheni i-Windows iqagela kahle nge-adaptha ebonakalayo. Futhi kuyasinda ekubuyekezweni kwekhasimende okuhlukanisa kabusha isixhumi. Bhala ichibi emthethweni futhi umuntu olandelayo uzokwazi ukufunda inhloso ngaphandle kokubuza.
Uma isigaba sesizindalwazi silindeleke ngempela futhi singaveli neze, lokho kuwuphenyo oluhlukile. Hlola ukuthi umshini ujoyine isizindalwazi, uyakwazi ukufinyelela isilawuli sesizindalwazi ngomhubhe, futhi isiteshi esiphephile siphilile. Lezo zinto ezintathu ziyaphendula ngaphandle kokuhlela irejista nakanye:
Get-CimInstance Win32_ComputerSystem | Select-Object PartOfDomain,Domain
Test-ComputerSecureChannel -Verbose
nltest /dsgetdc:corp.example.comLezo zintathu ziphendula ukuthi ingabe indawo yokugcina yayingakwazi ukuqinisekisa inethiwekhi nhlobo. Uma ingakwazi ukufinyelela isilawuli, isigaba sesizindalwazi ngeke sinikezwe neze, kungakhathalekile ukuthi i-adaptha ihlelwa kabusha kangaki. Umthetho wephephileli yomlilo owawuwulandela wawungakaze ube yinkinga yangempela, futhi uphawu lwaluwuphawu lomzila ophukile hhayi imbangela.