Kungani i-VPN yakho ye-Windows ibulala iphrinta yasendaweni nokuthi unqamule kanjani

Xhuma i-VPN bese iphrinta inyamalala, ukwabelana kwe-NAS kuyayeka ukuvuleka, futhi isikhathi sokuhlangana kwe-Desktop ekude siya emshinini oseduze kwakho siyaphela. Akukho okwaphuka. Iklayenti lengeze umzila ozenzakalelayo futhi manje liphethe yonke indawo i-laptop engayisho, kuhlanganise lezo eziqhele ngamamitha amathathu. Yiyo yonke indlela yokusebenza, futhi ukuyibiza ngokuthi iphutha le-VPN yikho okuguqula ukulungiswa komugqa owodwa kube yicala losekelo.

Qala ngokufunda ithebula lemizila

Ngaphambi kokushintsha noma yini, thatha ithebula le-IPv4 nge-route print -4 bese ugcina umphumela. Xhuma, thatha futhi, bese uqhathanisa imigqa 0.0.0.0: umzila ozenzakalelayo osebenzayo usho isixhumanisi, futhi uma leso sixhumanisi kuyithambeka, ukuphrinta nokuphequlula kwasendaweni kuthunyelwa ehhovisi kuqala.

Inombolo yesixhumanisi kukholomu yesibili yiyo okufanele umzila unomphela uwubhekisele kuyo kamuva, ngakho yibhale phansi ngesikhathi ithambeka lisebenza. Futhi iyona nani elishintshayo lapho i-adaptha yakhiwa kabusha, yingakho imizila eboshwe kulo ingadlula ngokuthula ekusizeni kwayo.

Susa umzila ozenzakalelayo, ngezindlela ezintathu

Kufrofayela ye-Windows eyakhelwe ngaphakathi, isilawuli iyibhokisi lokumaka. Vula izici zoxhumano, IPv4, bese Kuthuthukile, futhi susa Use default gateway on remote network umaka; uhlelo lokusebenza lwezilungiselelo olusha lufihla ingxoxo efanayo ngongqimba olulodwa olujulile. Kusuka kusikhombisi sentanethi esikhuliswe, ushintsho olufanayo yi-cmdlet eyodwa:

Set-VpnConnection -Name "Corp" -SplitTunneling $true

Iprofayela OpenVPN lisebenza ngendlela ehlukile, yingakho ukuziphatha kwalo kudida abantu abalindele ibhokisi lokumaka. Umyalelo walo redirect-gateway def1 awuwushintshi neze umzila ozenzakalelayo; ufaka imizila emibili yengxenye, 0.0.0.0/1 kanye 128.0.0.0/1, ehlangene inqobe owokuqala ngaphandle kokuwususa. Njengoba owasekuqaleni esekhona, ukwengeza isiqalo esibheke net_gateway kubuyisela kuphela leso siqalo kumzila wasendaweni. Leyo mininingwane ichaza ukuthi kungani ukulungiswa kwefrofayela ye-def1 kuwumzila wesiqalo hhayi ibhokisi lokumaka okungekho muntu ongalithola.

Faka kabusha kuphela okungokomsebenzi

Ngaphandle komzila ozenzakalelayo ithambeka alithwali lutho, ngakho iziqalo zomsebenzi kufanele zishiwo ngokucacile. I-cmdlet ehlanganisa isiqalo noxhumano iphephile kunomzila unomphela, ngoba ifakwa kuphela ngesikhathi lowo xhumano usebenza futhi ayincikile enombolweni yesixhumanisi:

Add-VpnConnectionRoute -ConnectionName "Corp" -DestinationPrefix 172.20.0.0/16

Indlela endala isasebenza futhi isekhona kuhlu ngalunye lokuhlola: route -p add 172.20.0.0 mask 255.255.0.0 172.20.0.1 if 14, ngenkomba yesixhumanisi nekhasi lesango lethambeka ngokwalo. Ihlala ikhona phakathi kokuqala kabusha, okuyiyo inhloso kanye nengozi, ngoba inkomba ingase ibe ngenye into ekuqaleni okulandelayo.

Okunye kunqunywa amamethrikhi. Uma kokubili i-adaptha yenyama neyethambeka zifuna umzila wesiqalo esifanayo, amamethrikhi aphansi ayawina, futhi ukukhulisa amamethrikhi ethambeka wukulawula okusemthethweni ohlangothini lweklayenti hhayi ukuhaha.

Lapho iseva inquma esikhundleni sakho

Iklayenti elingayinaki ibhokisi lakho lokumaka ngokuvamile lilandela inqubomgomo. Amafrofayela e-Cisco aphethe isilungiselelo Allow Local LAN Access, futhi i-headend ingase idudule inqubomgomo ye-tunnel-all edlula noma yini iklayenti engayithanda; ekusetshenzisweni kwethambeka okuphoqelekile akukho sixhumi sasendaweni sokuphendula. Funda ilogi yeklayenti ngenxa yemizila nemigqa yenqubomgomo eduduliwe esikhundleni sokuphinda uhlole ingxoxo efanayo.

Bese ubheka ukuxazululwa kwamagama, okuyisixhumi esihlukile ekuhambiseni imizila. Ithambeka elihlukanisiwe lisekugcina ukuthola isixazululi sangaphakathi kanye nesijobelelo sokusesha, ngakho idivayisi yasendaweni iyafinyeleleka ngekheli futhi ayitholakali ngegama kuze kube yilapho uhlangothi lwe-DNS nalo lulungisiwe.

Ukuxabana kwenye indawo kuyinkinga ehlukile

Uma i-LAN yasekhaya ne-LAN yasehhovisi zabelana ngesiqalo esinjenge-192.168.0.0/24, awekho umzila ongazihlukanisa. Wonke amaphakethe kulelo banga anomphumela owodwa wokusesha, futhi ukulungiswa ukuphinda kubhalwe inombolo yolunye uhlangothi noma ukufinyelela ehhovisi ngekheli elihunyushwe kusuka echibini. Ukwengeza imizila eqondile kudlulisa kuphela ukuthi yiluphi uhlangothi olwephuka.

Qeda ngokuqinisekisa okukodwa esikhundleni sokuhlanu: xhuma, bese usebenzisa i-tracert ngokumelene nesikhungo sangaphakathi nesikhungo somphakathi. Ukugxuma kokuqala kufanele kwehluke, futhi uma kungahlukani, ukwahlukanisa akusebenzi noma ngabe iklayenti libika ini. Bese uphinda uxhume kanye futhi uqhubeke, ngoba imizila eduduliwe iyabuya ngasikhathi ngasinye.