Kungani ukwengeza i-prefix ye-Azure VPN kunqamula ukuxhumana

I-prefix engezwe ku-Azure object engalungile yenza ukuxhumana okubika i-Connected futhi okungadlulisi lutho, futhi lolu uhlobo lwephutha olubiza kakhulu kule stakhi. Izinsiza ezintathu ziyabandakanyeka futhi eyodwa kuphela yazo iphethe indawo yamakheli ekude: igethiwe yenethiwekhi ebonakalayo, igethiwe yenethiwekhi yendawo echaza uhlangothi olukude, nokuxhumana okuzihlanganisayo. I-prefix ingeyegethiwe yenethiwekhi yendawo, ukuxhumana kufanele kwakhiwe kabusha ukuze ushintsho lusebenze, futhi igethiwe ngokwayo ivamise ukushiywa ingathintekile. Ukulandelana akuxoxiswani ngakho, futhi iphothali ibonisa ingxenye yako kuphela.

Izinto ezintathu, enye yazo iphethe i-prefix

Indawo yamakheli yenethiwekhi ebonakalayo iphendula umbuzo ohlukile: yini ehlala ngaphakathi kwe-Azure. Ukwengeza i-prefix ekude lapho akuhambisi ithrafikhi lapho, kwandisa kuphela isikhala ipulatifomu ecabanga ukuthi ingeyayo, okungase kungqubuzane nebanga langempela elikude. Igethiwe yenethiwekhi yendawo iyona nto ephethe ama-prefix akude, futhi ukuxhumana kubhekisela kuwo womabili amagethiwe kanye nokhiye owabiwe kusengaphambili.

Kunesimo sesithathu okufanele sikhunjulwe. GatewaySubnet isingatha izimo zegethiwe eziphethwe, kufanele ibe nalelo gama ngqo, futhi kuma-SKU angewona awase-Basic kulindeleke ukuthi okungenani abe ngu-/27.

Akukho okunye okungokwesabneti leyo, futhi ushintsho lwe-prefix alunasizathu sokuyithinta. I-prefix engekho egethiwe yenethiwekhi yendawo ayifinyeleleki noma isimo sokuxhumana sithini, ngoba igethiwe ihlinzeka kuphela ngama-prefix eyatshelwa wona ngesikhathi ixoxisana ngomhubhe. Yingakho uphawu lungalingani: umhubhe uphakeme, inhlangano yezokuphepha ilungile, futhi isabneti eyodwa ayikaze ivele kuzikhethi zethrafikhi. Uma ibanga elikude elilodwa lingekho kuyilapho omakhelwane basebenza, yeka ukubheka umhubhe bese ufunda igethiwe yenethiwekhi yendawo.

Kungani kususwa ukuxhumana uqobo

Into yokuxhumana ibophela ukulungiselelwa okuxoxiwe kukho kukho konke ukuphila kwayo. Yingakho inqubo ebhaliwe isusa kuqala ukuxhumana, ibuyekeza igethiwe yenethiwekhi yendawo, bese iphinda idale ukuxhumana ngokhiye ofanayo owabiwe. Izimo zegethiwe azakhiwanga kabusha ngoshintsho lwe-prefix kuphela, okubeka ukuphazamiseka ekuhlakazweni kokuxhumana esikhundleni sokuthunyelwa kabusha kwegethiwe.

Lokho kususa ukuphazamiseka uqobo, ngakho kuphathe njengoshintsho oluhleliwe olunokuqala nokuphela okulindelekile esikhundleni sokuhlela okusheshayo. Ku-PowerShell ukulandelana kufushane: Remove-AzVirtualNetworkGatewayConnection -Name Conn1 -ResourceGroupName RG1 -Force, bese Set-AzLocalNetworkGateway nge--AddressPrefix array entsha, bese New-AzVirtualNetworkGatewayConnection nge--SharedKey efanayo kanye namagethiwe afanayo. Ukusebenzisa kabusha ukhiye kubalulekile, ngoba uhlangothi olukude alulungiselelwanga kabusha futhi ukhiye omusha usho ukuxhumanisa nomnikazi wedivayisi ekude. Uma elinye ithimbi lisebenzisa leyo divayisi, vumelana nayo ngewindi lesikhathi ngaphambi kokususa noma yini.

Nini igethiwe ngokwayo kufanele yakhiwe kabusha

Impendulo yesibili ezungeza le nkinga ithi igethiwe kufanele idalwe kabusha futhi ukhiye ushintshwe futhi. Lokho kulungile kweqoqo elihlukile lemisebenzi: ukushintsha uhlobo lwegethiwe noma i-SKU, ukudlula phakathi kwe-point-to-site ne-site-to-site, noma ukulungisa igethiwe elinokulungiselelwa kwalo okungalungile. Lezo zinguquko ziyayishintsha ngempela insiza yegethiwe, ngakho ukwakhiwa kabusha kudingeka ngempela.

Igethiwe eyenzelwe i-point-to-site ayikwazi ukunikwa nje ukuxhumana kwe-site-to-site. Ukulungiselelwa kwe-point-to-site kufanele kususwe futhi igethiwe idalwe kabusha, lokho futhi kukhiqiza ukhiye omusha owabiwe kanye nephakethe elisha leklayenti.

Iphakethe le-point-to-site lifanelwe umbhalo walo ngoba liphelelwa yisikhathi. Iphothali ikhiqiza ifayela elinempilo emfushane, ngakho indlela esebenzayo ukulanda kanye nokukusabalalisa kanye nesitifiketi seklayenti esikhundleni sokuthumela abasebenzisi isixhumanisi sephothali esizobe sesifile lapho bechofoza. Mayelana nombuzo we-prefix, akukho kulokhu okusebenzayo. Ukuhlukanisa izinqubo ezimbili yikho konke ukuqeqeshwa: ama-prefix ushintsho lwezinga lokuxhumana, futhi izici zegethiwe ushintsho lwezinga legethiwe.

Funda isimo, hhayi ibheji yephothali

Funda isimo kusuka kunsiza esikhundleni sebheji esephothalini. Get-AzVirtualNetworkGatewayConnection -Name Conn1 -ResourceGroupName RG1 ibuyisela ConnectionStatus kanye nezibali zamabhayithi angenayo naphumayo, futhi izibali yizo ezihlukanisa umhubhe oxhunyiwe ongathwali lutho kuleyo engakaze isungulwe.

Izibali eziyeka ukukhula phakathi nokudluliswa zikhomba endleleni hhayi ekuqinisekiseni. Izibali ezinganyakazi nhlobo zikhomba eqoqweni lama-prefix noma kukhiye owabiwe.

Izikhathi zichaza isigaba sokuqanyangelwa okubekwa i-VPN icala ngokungalungile. Isilinganisi somthwalo se-Azure sivala ukuhamba okungenzi lutho ngemva kwesikhathi esilungiselelwe, imizuzu emine ngokuzenzakalela ngesikhathi kubhalwa lawa manothi futhi kungalungiselelwa phezulu, ngakho iseva ye-OpenVPN ku-VM engena-keepalive ingawa njalo ngemva kwemizuzu embalwa kuyilapho konke okunye kubonakala kuphilile. Igethiwe ipulatifomu eyiqalisa kabusha ngomjikelezo nayo ingase iphazamise ukuxhumana kwe-VNet ne-Web App, futhi lokho kwehluleka kusohlangothini lwepulatifomu hhayi ekulungiselelweni kweklayenti. Inkomba ukuthi ukuqanyangelwa kulandela isikhathi esinqunyiwe noma ushintsho owenze lona.

Gcina izinto ezintathu kanye namagugu azo kurekhodi elilodwa: indawo yamakheli yenethiwekhi ebonakalayo, uhlu lwama-prefix lwegethiwe yenethiwekhi yendawo, kanye nereferensi yokhiye owabiwe wokuxhumana. isihloko se-PowerShell se-site-to-site sibhala imiyalo yegethiwe yenethiwekhi yendawo kanye nokulandelana okufanele ibe kukho. Ukuqhathanisa ushintsho lwe-prefix nenkumbulo yiyo indlela umhubhe osebenzayo owakhiwa kabusha ngayo kabili.

Bese uqinisekisa ngokulandelana okushintshile: igethiwe yenethiwekhi yendawo ibonisa uhlu olusha lwama-prefix, ukuxhumana kubuyela ku-Connected, futhi izibali ziyanyakaza lapho uthumela ithrafikhi kumsingathi ebangeni elisha. Uma isinyathelo sesithathu sehluleka kuyilapho ezimbili zokuqala zidlula, uhlangothi olukude alukamukeli isikhethi esisha sethrafikhi futhi idivayisi ekude idinga ukufakwa kwesigaba 2 okuhambisanayo. Lokho kuyingxoxo nomhlandla womhubhe, hhayi olunye ushintsho ku-Azure.