Inani lerejista ye-NAT-T ku-Windows: hlola i-topology kuqala

Ukuxhumana kwe-VPN ku-Windows kuyahluleka, usesho lubuyisa inani lerejista, futhi lelo nani lifakwa kanye nokuqalisa kabusha. Lokho kulandelana kwesinye isikhathi kuyasebenza futhi akukaze kuchaze lutho. Isilungiselelo okukhulunywa ngaso siphendula umbuzo owodwa wokuthi iseva itholakala kuphi maqondana nedivayisi ye-NAT, futhi asinanjongo kuze kube yilapho wazi ukuthi iyiphi iphrothokholi ehlulekile nokuthi kusiphi isigaba.

Inani likhetha ngempela ini

I-AssumeUDPEncapsulationContextOnSendRule inquma ukuthi ukusetshenziswa kwe-IPsec ku-Windows kuzozama ukwakha ubudlelwano nozakwethu ongemuva kwedivayisi ye-NAT yini. Inani elingokwezinto ezibhaliwe elingu-0 alikuvumeli lokho, u-1 uyakuvumela lapho iseva inguhlangothi olungemuva kwe-NAT, futhi u-2 uhlanganisa ukuhunyushwa kwazo zombili iziphetho. Lezi izitatimende ze-topology zokuthi ubani ukuphi.

Uma lifundwa njengokulandelana, izinombolo zichaza ukuhunyushwa okwandayo, hhayi ukuthembeka okwandayo. Ukusetha u-2 kunethiwekhi lapho kungahunyushwa lutho akukwenzi ukuxhumana kusheshe noma kuzinze, futhi akulungisi ukwehluleka kokuqinisekisa. Umhlahlandlela we- NAT wakwa-Microsoft we-L2TP/IPsec ubhala inqubomgomo kanye nomongo wayo wangaphambili wepulatifomu. Qhathanisa lowo mongo nenguqulo neqhaza le-Windows oyisebenzisayo ngempela, ngoba idokhumenti edlule ezinguqulweni ezimbalwa ayisona isitatimende ngakho konke ukwakhiwa kwamanje.

Qondanisa i-topology ngaphambi kwenombolo

Dweba indlela futhi umake izindawo zokuhunyushwa: ngabe iklayenti lingemuva kwerutha yasekhaya, ngabe iseva ingemuva kwesilinganisi somthwalo noma udonga lomlilo olubhala kabusha amakheli, futhi ngabe olunye uhlangothi lungemuva kokuhunyushwa komhlinzeki ongakulawuli. Kuphela ngemuva kwalowo mfanekiso ongakwazi ukunquma ukuthi inani liyasebenza yini, nokuthi kuluphi uhlangothi.

Isimangalo sokuthi izinguqulo zamanje ze-Windows Server zivele zifike ne-NAT traversal ivaliwe sibanzi kakhulu ukuthi singasetshenziswa. Okubalulekile inqubomgomo ohlelweni lwakho, i-topology engaphambi kwayo kanye nokushintshana okuhlulekile, ngalokho kulandelana. Uma zombili iziphetho zinamakheli omphakathi, isilungiselelo akusona inkinga yakho. Kunalokho bheka isiphakamiso, isitifiketi noma i-akhawunti, futhi ushiye irejista.

Hlola isigaba sokwehluleka kuqala

L2TP/IPsec ikhiqiza okungenani ukwehluleka okuthathu okuhlukene: uzakwethu akafinyeleleki, ukuvikelwa kwe-IPsec akukwazi ukusungulwa, futhi ukuqinisekiswa komsebenzisi we-PPP kwenqatshwa ngemuva kokuba umhubhe ukhona. I-akhawunti enqatshiwe ayikwazi ukulungiswa ngokushintsha inqubomgomo ye-NAT, futhi ukungafani kweziphakamiso akukwazi ukulungiswa ngokuqalisa kabusha.

Get-VpnConnection -Name "Corp L2TP" | Format-List Name, ServerAddress, TunnelType, EncryptionLevel
Get-WinEvent -LogName System -MaxEvents 40 | Where-Object Id -in 20227,20226,20274
netsh interface ipv4 show interfaces

Isikhathi esiphela ngaphandle komphenduli sibonisa ukufinyeleleka noma ukuhlunga hhayi inqubomgomo. Ukwenqatshwa okusheshayo ngomlayezo wesiphakamiso kukhomba kuma-algorithm. Ukwehluleka ngemuva kokukhuphuka komhubhe kungokwesigaba sokuqinisekisa, okuwumnikazi ohlukile nekhambi elihlukile.

I-SSTP phezu kwe-HTTPS ne-IKEv2 yemvelo zinezingosi zazo nezingawo zokulawula. Akukho okukodwa okuba yicala le-NAT-traversal ngoba nje kusebenza naku-Windows.

Yenza ushintsho ngendlela yokubuyela emuva

Uma inqubomgomo ebhaliwe kanye ne-topology ebonwe kudinga kokubili, bhala phansi inani langaphambilini, sebenzisa ushintsho ngokuhlelelwa okuphathwayo hhayi ngeskripthi sephrofayela ngayinye, futhi uhlele ukuqalisa kabusha. Kuseseva esekela eminye imithwalo yomsebenzi, lokhu akulona ukuhlela okungenabungozi.

Idivayisi ye-NAT kusamele ithwale ukuthutha okufakiwe kanye nokuhamba okubuyayo. Inani lerejista alidali umthetho wokudlulisa, alihlanganisi ziphakamiso futhi aliqinisekisi ubunikazi, ngakho ukuxhumana okuqala ukusebenza ngemuva koshintsho kungenzeka kusebenza ngesizathu esihluke ngokuphelele. Hlola kabusha iphrothokholi yasekuqaleni nge-topology yasekuqaleni, bese ubhala phansi ukuthi yisiphi isigaba esihlulekile nokuthi kungani bekulindelekile ukuthi inani likulungise lokho. Yiso leso sigwebo esiphendula udaba lwe-inthanethi lube ukuhlelelwa ongakuvikela.