I-VPN ku-Windows: hlanganisa iklayenti nephrofayela

I-Windows ibika ukuthi umhubhe uxhumekile kuyilapho ikhasi le-intranet lisaphelelwa isikhathi, futhi iphrofayela ivela kumuntu oseke wahamba. Amaphutha amabili ahlukene alele ngemuva kwaleso simo: iklayenti elingalungile lefayela, kanye nokulindela okungalungile mayelana nalokho okumbozwa umhubhe. Ukuhlukanisa lawa mabili kudinga izimiso ezimbalwa futhi konga ukufakwa kabusha. Akukho nakunye okulungiswa ngokuqalisa kabusha.

Iklayenti elakhelwe ngaphakathi lingenisa izinhlobo zalo kuphela

I-Windows iza neklayenti le-VPN eliqonda izinhlobo ezithile zokuxhumana, futhi ngeke lingenise ifayela le-OpenVPN noma ukulungiselelwa kwe-WireGuard, noma lingakanani igama lefayela. Lezo zidinga isofthiwe yazo, efakwe kusuka kukhasi lokulanda eliqinisekisiwe lomhlinzeki. Umugqa ojwayelekile kumenyu yenethiwekhi awusona ubufakazi bokuthi iseva iyayisekela, futhi iphrofayela eqanjwe kabusha ngesandiso esijwayelekile iseyifayela elingalungile. Uhlobo lokuxhumana kufanele luhambisane nalokho okunikezwe umqhubi, hhayi nalokho okunikezwa imenyu ngengozi.

Ngokuxhumana komdabu, kungeza ngokusebenzisa izilungiselelo zenethiwekhi futhi uthayiphe ngqo amanani owanikwa wona. I-IKEv2 esekelwe esitifiketini nendawo yokungena yegama lomsebenzisi nephasiwedi kuyizilungiselelo ezahlukene ngisho zombili zingena ngaphansi kwesihloko esisodwa. Uma idivayisi ephethwe isivele inikeza ukuxhumana, sebenzisa lokho esikhundleni sokwakha okwesibili eceleni kwakho.

Izinyathelo zokungena azishintshani

Ukuxhumana kungadinga igama lomsebenzisi nephasiwedi, isitifiketi sekilayenti, isicelo esisebenzisanayo noma ezimbalwa zazo ngokulandelana. Igama lokuvikela lokhiye lwangasese livula ukhiye futhi akulona iphasiwedi yesevisi, ngisho zombili zithayipha kudayalogi eyodwa. Isexwayiso sesitifiketi simayelana nobunikazi noma ukwethemba, hhayi ukuthi igama le-akhawunti libhalwe ngendlela efanele. Ukufunda ukuthi yikuphi kokuthathu okwehlulekile kuyanquma isinyathelo esilandelayo.

Funda ukwenqatshwa esikhundleni sokuphindaphinda. Ukwehluleka kokuqinisekisa nokwehluleka kokwethemba kubukeka kufana efasiteleni lesimo futhi akukho okuhlanganyelwayo ngaphansi: okokuqala kudinga ubufakazi bokuqinisekisa, okwesibili kudinga uchungechunge iklayenti elikwamukelayo.

Gcina ubufakazi bokuqinisekisa nempahla yesitifiketi kude nezithombe zesikrini. Isithombe sekhasi lezilungiselelo singadalula ikheli leseva negama lomsebenzisi eligciniwe ngasikhathi sinye, futhi intambo yokusekelwa iyidokhumenti yomphakathi kaningi kunalokho abantu abakulindele. Fihla ngaphambi kokuthumela, hhayi ngemva kokuba othile esekucaphile.

Ku-PowerShell, i-Get-VpnConnection ibala lokho i-Windows ethi kulungisiwe, kuhlanganise nemigqa iwindi lezilungiselelo eliyigcina isendleleni yokubona. Kusuka kumkhombandlela we-cmd, i-rasdial ixhuma ngegama lokuxhumana futhi i-ipconfig /all ibonisa lokho i-adaptha ekutholile ngempela. Amashelu womabili awabelani umhlaziyi oyedwa, ngakho namathisela umugqa ngamunye kwelilungile.

Get-VpnConnection
Get-VpnConnection -Name "Office" | Format-List Name,ServerAddress,AuthenticationMethod

rasdial "Office"
ipconfig /all

Kunquma ithebula lomzila, hhayi isithonjana se-adaptha

Umhubhe wenkampani ungahamba kuphela izindawo zasehhovisi, ushiya ukuphequlula okuvamile ekuxhumaneni kwendawo, kuyilapho iphrofayela yomhubhe ogcwele yenza okuphambene. Vula insiza yangempela ngaphambi kokunquma ukuthi okunye kokubili lokhu kuziphatha akulungile. Isithonjana sibika isimo se-adaptha, futhi impendulo isethebuleni lomzila. Lokhu kubili akuvumelani kaningi kunalokho iwindi lesimo elikuvumayo.

Imigqa ethile eqondile ingathumela isethi encane kumhubhe kuyilapho umzila ozenzakalelayo uhlala ngaphandle, futhi umhubhe ohlukanisiwe kufanele ubukeke kanjalo. Umugqa ongekho ngomunye umphumela ojwayelekile, futhi kusuka kusiphequluli ubukeka ufana nomhubhe owile. Qhathanisa isandulela ongakwazi ukusifinyelela nethebula hhayi nesithonjana. Yingakho isithonjana nethebula kungavumelani kuyilapho kokubili kukhuluma iqiniso ngezinto ezahlukene.

Ungasusi imizila ngoba ithebula linezinto ezingaziwa zama-adaptha. Umshini wamanga, umshayeli wesihlungi noma iklayenti lesibili kungangeza elilodwa lilinye, futhi ukulisusa kuphula into ebilapho ibisebenza.

route print -4
nslookup intranet.corp.internal

Amagama angasese adinga isixazululi senhlangano

Amagama angasese adinga isixazululi senhlangano, futhi isiphequluli esine-DNS yaso evikekile singadlula ngokuphelele isilungiselelo sohlelo. Lokhu kudala isimo esididayo lapho ukusesha komugqa womyalo kubuyisela ikheli khona igama elifanayo lisehluleka kusiphequluli.

Hlola ukuthi iyiphi i-adaptha enikeze ukulungiselelwa kwe-DNS kwamanje ngaphambi kokushintsha noma yini. Gcina isixazululi senhlangano samagama angasese esikhundleni sokusifaka esikhundleni ngensiza yomphakathi. Ukufaka isixazululi somphakathi ngokuvamile kulungisa igama lomphakathi futhi kuhlukanisa wonke amagama angaphakathi, okuwukwehluleka okubi kunalokho owaqala ngakho. Uma ukuxhumana kubika impumelelo futhi lutho lusebenza, daba ngokudluliswa ne-DNS ngaphambi kokusetha kabusha isitaki senethiwekhi.

Get-DnsClientServerAddress -AddressFamily IPv4
Resolve-DnsName intranet.corp.internal

Imibhalo ye-Microsoft mayelana nezinhlobo zokuxhumana ze-VPN ku-Windows nezenezelwa iyireferensi yokuthi iyiphi iklayenti ephethe uhlobo luni, futhi akukho ilebula kumenyu elikutshela lokho. Xhuma futhi ngemva kwanoma yiluphi ushintsho bese uphinda uhlole uhlelo lokusebenza lwangempela esikhundleni sesithonjana sesimo. Gcina iphrofayela esebenzayo endaweni ongayithola futhi kuyo, futhi ubhale phansi isixazululi nomzila okwenze yasebenza, ngoba umshini olandelayo uzodinga kokubili.