I-VPN ixhuma ekhaya kodwa iphelelwa yisikhathi ku-Wi-Fi yasehhotela
I-laptop efanayo, i-akhawunti efanayo, inethiwekhi ehlukile. Funda ikhodi yephutha njengesigaba, hlola igama, bese ubamba iphakethe langaphandle ngaphambi kokushintsha noma yisiphi isilungiselelo.
I-laptop ijoyina i-Wi-Fi yasekhaya, iklayenti ixhuma ngemizuzwana emithathu, futhi iphrofayili efanayo yehluleka ehhotela ngemuva kwehora. Phakathi kwalokho akukho okwalungiswa. Ukuhamba nalokhu neklayenti eliphambi kwakho kumayelana nokwazi ukuthi yiliphi iphutha elingesigaba sini, ngoba ulwazi olusizayo lusekhodi ekhipha iklayenti, hhayi eqinisweni lokuthi yehlulekile. Yenza izinyathelo ezine ezingezansi ngokulandelana futhi uzokwazi ukuthi igama, iphakethe, imbobo noma inqubomgomo yikuphi okwenqabile.
Funda ikhodi yephutha njengesigaba, hhayi isinqumo
Iklayenti lifinyelela izigaba ezintathu ezihlukene ngaphambi kokuba umhubhe ube khona. Lixazulula igama leseva, lithola impendulo kokuthile kunethiwekhi, futhi lixoxa ngesivumelwano sokuphepha. Isigaba ngasinye sinomlayezo waso wokwehluleka, futhi ikakhulukazi i-Windows inesandla esivulekile ngamakhodi ahlukene uma usazi ukuthi angesigaba sini.
| What the client says | Stage that failed | First thing to run |
|---|---|---|
| 868, name did not resolve | DNS, before any packet leaves for the server | Resolve-DnsName vpn.example.net |
| 721 or 806, remote computer did not respond | Outer protocol filtered, typically GRE or UDP | A capture on the local interface |
| 809, server not responding | A device in the path is dropping the outer flow | The same capture, from a second network |
| 789, security layer error | The security exchange started and was rejected | Certificate and proposal settings on both ends |
Amakhodi amabili kulawo asho ukuthi inethiwekhi ayinacala. U-789 usho ukuthi amaphakethe ayekhona futhi iziphetho zombili azivumelananga ngokubethela, okuyinkinga yokulungiselelwa ongayilungisa ekhaya. U-868 usho ukuthi akukho phakethe okwakudingeka liphume, ngakho ukuklanywa komhubhe akubalulekile kuze kuxazululwe igama. Ukuhlukanisa ikhodi ngesigaba esifanele konga isikhathi esiningi kunanoma yikuphi ukubamba, ngoba kukutshela ukuthi yisiphi isinyathelo kwezintathu ezilandelayo okufanele usitshiye.
Qaphela ngokufanele uma iklayenti lingeyona i-Windows. Amaklayenti ezinkampani zangaphandle ahlanganisa iningi lalokhu abe "uxhumano lwehlulekile", yingakho izinyathelo ezimbili ezilandelayo zingathembeli nhlobo kumlayezo.
Hlola igama ngaphambi kokusola umhubhe
Amanethiwekhi asehhotela nasesikhumulweni sezindiza avimba i-DNS njalo, futhi isixazululi esiphendula ngekheli lengosi sidala ukwehluleka okubukeka njengeseva efile. Qhathanisa lokho okusho isixazululi sasendaweni nalokho okusho isixazululi somphakathi:
Resolve-DnsName vpn.example.net -Type A
nslookup vpn.example.net 1.1.1.1
ipconfig /all | findstr /i "DNS Servers"Uma izimpendulo ezimbili zihluka, uyaqondiswa futhi ukuxilonga okusele kuyize kuze kuxazululwe lokho. Ikakhulukazi ikheli lengosi lizokwamukela ngokuzimisela uxhumano lwe-TCP bese liyama, yingakho kungabukeka njengokuvinjelwa kwesihlangu somlilo uma uhlola ngesiphequluli.
Manje qinisekisa ukuthi ikheli ofuna ukulifinyelela yilona elisetshenziswayo. Amanye amaklayenti agcina ukuxazululwa kwangaphambilini isikhathi sokuphila kwephrofayili yonke, ngakho ukuxhuma kabusha ngemva koshintsho lwe-DNS kusaya ekhelini elidala. Vala iklayenti ngokuphelele ngaphambi kokuphinda uhlole, esikhundleni sokucindezela ukunqamula nokuxhuma efasiteleni elilodwa.
Thola ukuthi yiliphi iphakethe langaphandle elahlekayo
Umhubhe unokugeleza kwangaphandle okungokwaphelele kwendlela ephakathi kwakho neseva, futhi yikho lokho kugeleza okuhlukaniswa futhi kulahlwe amabhokisi aphakathi. Kubambe kuklayenti, bese uqhathanisa inethiwekhi esebenzayo naleyo ehlulekayo. Ku-Windows ukubamba okwakhelwe ngaphakathi kwanele ukubuka kokuqala:
pktmon filter remove
pktmon filter add -p 500 -t UDP
pktmon start --capture --pkt-size 128
pktmon stop
pktmon etl2txt PktMon.etlLokho ofuna ukukubona ukuthi amaphakethe akho ayaphuma yini, nokuthi kukhona yini okubuya. Amaphakethe aphumayo ngaphandle kokubuya asho ukuthi indlela noma isiphetho esikude siyawalahla; uma kungaphumi lutho, iklayenti alikaze lifinyelele ekuthumeleni, okukhomba emuva ekuxazululweni kwamagama noma kunqubomgomo yesihlangu somlilo sendaweni.
Phinda ukuhlola okufanayo ku-hotspot yocingo. Lokhu ukuphela kokuqhathanisa okunolwazi oluningi onakho, ngoba kususa yonke ibhokisi ehhotela endleleni ngenkathi i-laptop, iklayenti nemininingwane yokungena kusafana. Uma umhubhe ukhuphuka ku-hotspot, yeka ukubuka iseva. Uma wehluleka lapho futhi, unezinkinga zeklayenti noma ze-akhawunti inethiwekhi engakaze ibe imbangela yazo.
Shintsha indlela eyodwa yokuhamba bese uphinda uhlole
Uma usazi ukuthi ukugeleza kwangaphandle kuyalahlwa, umbuzo ongokoqobo ukuthi yikuphi ukugeleza inethiwekhi ekugunyazayo. Iningi lamanethiwekhi anomkhawulo avumela i-TCP 443 ephumayo ngoba ngaphandle kwalokho awakwazi ukusebenza, ngakho ukuhambisa isilaleli lapho iyimpendulo evamile. Ku-OpenVPN lokhu kuyiswishi ohlangothini lweklayenti kuze kushintshwe iseva:
openvpn --config corp.ovpn --proto tcp-client --remote vpn.example.net 443 --verb 4Amaklayenti e-IPsec aneswishi efanayo kumaphaneli awo ezilungiselelo, ngokuvamile okuchazwa ngokuthi i-IPsec phezu kwe-TCP noma ukudlula kwe-NAT. Ukushintsha kwayo nakho kuwukuxilonga: uma umhubhe ukhuphuka phezu kwe-TCP bese ufa phezu kwe-UDP, ukhombisile ukuthi inethiwekhi ihlunga i-UDP, futhi uthole nesilungiselelo ozosidinga njalo uma uvakashela leyo ndawo.
Melana nokulingeka kokucisha izici ze-router ekuzameni kokuqala. Ukucisha ukuhlolwa kwesimo noma ukuvikelwa kwezikhukhula kunethiwekhi yasehhotela akukho etholakalayo kuwe noma kunjalo, futhi kumadivayisi akho kushintshanisa ukuvikelwa kwangempela nge-laptop eyodwa. Bhala ukuthi yisiphi isilungiselelo esishintshe umphumela, bese usibuyisela futhi ufune indlela yokuhamba inethiwekhi eseyivumela.
Qinisekisa iphrofayili efanayo kunethiwekhi yesibili
Ngaphambi kokuvala ithikithi, khombisa ukuthi ushintsho lwasinda ngemva kokuphuma esakhiweni. Xhuma kabusha kunethiwekhi yasekuqaleni ngezilungiselelo zasekuqaleni, bamba imizuzwana engamashumi amathathu yokuqala, futhi uqinisekise ukuthi iklayenti lifinyelela isimo esifanayo nasesikufinyelele ku-hotspot:
pktmon filter add -p 443 -t TCP
pktmon start --capture
Get-VpnConnection -Name "Corp" | Select-Object ConnectionStatus, TunnelType, ServerAddressUmehluko ovezwa umyalo wokugcina ufanele ugcinwe: iphrofayili ingabika umhubhe oxhunyiwe ngenkathi ukuhlelwa kwangaphakathi kungalungile, futhi lokho kudala "i-VPN ivuliwe kodwa akukho okusebenzayo", okuyisihloko esinye. Uma uhlobo lomhubhe lushintshile ngemva kokuhlela kwakho, iphrofayili akuyona leyo oyihlolile.
Bese ubhala okutholakele endaweni lapho umuntu olandelayo ezobuka khona. "Iphrofayili yenkampani idinga i-TCP 443 kule ndawo; i-UDP 500 ihlungwa yihhotela" umusho ozosebenza kuwo uzakwethu. "I-VPN ayizinzi emahhotela" akusiwona, futhi iqinisekisa ukuthi ihora elifanayo lizosetshenziswa futhi inyanga ezayo.