Kungani i-RDP iba lukhuni lapho ikhompyutha ekude ixhuma ku-VPN

I-VPN iyaphumelela kanti ideskithophu iyabanda: umhubhe ushintshe indlela yokubuya yesikhathi sakho. Qala ngokuqopha ikheli le-peer, umzila kanye nephrofayela ye-firewall.

Ungaphakathi kwewindi le-RDP, ideskithophu isesikrinini, futhi ucindezela u-Connect kumklami we-VPN osebenza kuleyo mshini ekude. Ngemva kwemizuzwana embalwa iwindi liyabanda bese livaleka. Umhubhe unyuke, yilokho kanye okuzobikwa yilog ye-VPN, futhi lelo yiqiniso elingasizi neze kuso sonke isigameko. Isikhathi sifa ngoba umshini obukhuluma nawo ushintshe indlela akuphendula ngayo, ngakho hlola indlela yokubuya ngaphambi kokuthinta umhubhe.

Qopha indawo yokugcina esetshenziswa isikhathi sakho ngempela

Ikheli olibhala kumklami we-RDP akusilo ngempela ikheli ikhompyutha ekude ephendula kulo. I-NAT, i-RD Gateway noma isilinganisi somthwalo esingaphambi komsingathi kungayibhala kabusha, futhi indlela yokubuya ichazwa yikheli lomthombo umshini ekude olibonayo kuxhumano olusunguliwe. Uma wehluleka lapha, uzofuna umzila ongakaze uhlanganyele.

Kukhompyutha ekude, ngaphambi kokuxhuma i-VPN, bala izikhathi ezisunguliwe bese ufunda ikheli le-peer etafuleni. Bese ulibhala endaweni ethile ngaphandle kwaleyo mshini, ngoba ngeke ukwazi ukulifunda ngemva kokuwa kwesikhathi.

Get-NetTCPConnection -LocalPort 3389 -State Established |
  Select-Object LocalAddress, RemoteAddress, RemotePort

Thatha lelo kheli njengento okufanele ihlale ifinyeleleka. Uma liyikheli langasese ku-VLAN yokuphatha, umhubhe kufanele ushiye lowo mzila. Uma liyikheli lomphakathi, impendulo kufanele iphume ngesixhumi esifanayo esilethe isicelo ngaphakathi.

Funda umzila ophendula leyo ndawo yokugcina

I-Windows ikhetha isixhumi sendawo ngayinye, futhi Find-NetRoute ikhombisa isinqumo ebesizosithatha manje. Yisebenzise ekhelini le-peer ngaphambi kokuxhuma, bese uphinda uma umhubhe usuphezulu, futhi uqhathanise inkomba yesixhumi kanye negxathu elilandelayo kuzo zombili izimpendulo. Ukushintsha kwesixhumi yiyo yonke iphutha emgqeni owodwa wokuphuma.

Find-NetRoute -RemoteIPAddress 203.0.113.24
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Sort-Object RouteMetric
Get-VpnConnection -Name "Work VPN" | Select-Object SplitTunneling, Routes

Iphrofayela yomhubhe ogcwele ifaka umzila ozenzakalelayo ngomhubhe, njengoba incwadi ye-Windows yomzila we-VPN ichaza, ngakho manje yonke impendulo iphuma nge-VPN futhi incike ekutheni uhlangothi olunye luhambisa ngomzila yini libuyela kumklami wakho. Iphrofayela yomhubhe ohlukanisiwe ivikelekile ngokuzenzakalela kodwa ayinakuvikela ngokuphelele, ngoba umzila othile ohlanganisa ikheli le-peer usengakwazi ukunqoba umzila ozenzakalelayo womzimba. Noma kunjalo umbuzo uyafana: ngemva kokunyuka komhubhe, ingabe ikheli le-peer lisaxazululwa laya kusixhumi esaletha isikhathi ngaphakathi?

Uma kungenjalo, ukulungiswa kungokwephrofayela noma kungokomzila okhethekile wokuhlukumeza ogunyazwe umnikazi wenqubomgomo ye-VPN. Ukuhlela itafula lomzila ngesandla kumsingathi wokukhiqiza ngesikhathi sesigameko yiyo indlela isisombululo sesikhashana esiba ukuhlelwa okungabhalwanga.

Bheka ushintsho lwephrofayela ye-firewall

Isixhumi esisha sihlukaniswa uma sivela, futhi ukuhlukaniswa kunquma ukuthi ithrafikhi yaso ihlulelwa ngaphansi kwephrofayela iphi ye-firewall. I-adaptha yomhubhe ewela esigabeni esithi Public ingamisa ngokuthule i-RDP engenayo nakuba itafula lomzila libukeka liphelele. Lona umkhuba wesibili wokwehluleka, futhi uveza uphawu oluhlukile: umzila ulungile, amaphakethe ayafika, futhi umsingathi unqaba ukuxhumana.

Get-NetConnectionProfile
Get-NetFirewallProfile | Select-Object Name, Enabled
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Select-Object Name, Enabled, Profile

Qhathanisa iphrofayela eboshelwe kusixhumi somhubhe namaphrofayela imithetho ye-Remote Desktop eqondiswe kuwo. Umthetho ovulelwe i-Domain ne-Private kuphela awenzi lutho kusixhumi esihlukaniswe njenge-Public, futhi akukho kulungiswa komzila okushintsha lokho. Amanye amaklayenti e-VPN futhi akhawulela ukufinyelela kusubnet yasendaweni ngokomklamo, okukhipha uhlobo olufanayo lokwehluleka oluvela komunye umlawuli.

Hlola ukushintsha usuka endaweni ongabuya kuyo

Yenza ukulandelana konke kusukela kukhonkolo yangaphandle noma kumzila wesibili wokuphatha, ngalokhu kulandelana: qinisekisa isikhathi esikhona, xhumanisa i-VPN, vula isikhathi esisha, bese unqamula i-VPN futhi uvule esinye. Isinyathelo ngasinye sihlola ukushintsha okuhlukile, futhi esokuqala esihlulekayo sikutshela ukuthi imuphi umlawuli onesibopho.

Hlela ukuhlehla ngaphambi kokuqala, isibonelo umsebenzi ohleliwe osebenzisa rasdial "Work VPN" /disconnect ngemva kwesikhawu esimisiwe. Lokho kuguqula isikhathi esilahlekile kube ukuphazamiseka kwemizuzu emihlanu esikhundleni sokuvakasha endaweni, futhi yikho ukuphepha okushibhe kakhulu kunakho konke inqubo.

Buyela ngaphakathi uma isikhathi sesivele sasehla

Uma umsingathi usingafinyeleleki, yeka ukuzama ukuxhumana okusha kwe-RDP kusuka kumklami ofanayo futhi usebenzise itshaneli yokubuyisela okhona kakade endaweni: i-RD Gateway, ikhonkolo ye-hypervisor noma isixhumi sokuphatha sangaphandle. Cela umuntu onokufinyelela kukhonkolo ukuthi asebenzise imiyalo efanayo Find-NetRoute kanye Get-NetConnectionProfile, ukuze ubufakazi buphelele ngemva kokubuyiswa.

Bese unquma ukuhlelwa okuhlala njalo hhayi okusheshayo. Kuhle umkoqo wokuphatha ugcinwa ngokucacile iphrofayela ye-VPN, noma ukuphatha kudluliselwa etsheni elinganciki kumzila ozenzakalelayo womsingathi. Kokubili kuyavikeleka; umzila womsingathi onesango eliqanjiwe awunjalo. Bhala ukuthi ukhethe okukuphi, futhi uqophe ikheli le-peer obekufanele liphile.

Izihloko ezihlobene