I-Windows VPN trigger yohlelo lokusebenza ngayinye ngokumelene ne-tunnel ehlukanisiwe: yini ehlukanisayo
Iphrofayela ye-Windows VPN eqalwa uhlelo lokusebenza ivula kuphela umhubhe. I-tunnel ehlukanisiwe enemizila inquma okungena kuyo, futhi ngakunye kwehluleka ngendlela ehlukile kuhlelo olulodwa.
Amasethingi amabili e-Windows abukeka efana kumasethingi futhi awaziphathi ngokufanayo nhlobo. Elinye iphrofayela ye-VPN ekhoshiwe ene-trigger yohlelo lokusebenza, ngakho ukuqala kwefayela elilodwa elisebenzayo kukhuphula umhubhe. Elinye iphrofayela ye-tunnel ehlukanisiwe uhlu lwayo lwemizila ngengozi luhlanganisa lokho uhlelo lokusebenza lolo olukhuluma nakho. Eyokuqala iphendula ukuthi umhubhe ukhona nini. Eyesibili iphendula ukuthi yimaphi amaphakethe angena kuwo, futhi eyesibili kuphela ishiya ingxenye esele yomshini kuxhumano lomzimba ngesikhathi uhlelo lokusebenza luhlala luxhunyiwe.
I-trigger iwumthetho womjikelezo wokuphila, hhayi umthetho womzila
Add-VpnConnectionTriggerApplication ixhumanisa indlela yefayela elisebenzayo negama lephrofayela. Lapho leyo nqubo iqala, i-Remote Access Connection Manager ishayela iphrofayela, futhi lapho isimo se-trigger siphela, uxhumano lungawa. Akukho lutho kulokho kushintshana okuhlola ama-socket. I-cmdlet idinga i-shell ephakanyisiwe, indlela egcwele eya kubhinari, futhi -Force lapho ushintsha ukufakwa okukhona. Qinisekisa ukuthi ukuxhumana kwasinda nge Get-VpnConnectionTrigger esikhundleni sokuthemba isikhombisi; isithenjwa se-Add-VpnConnectionTriggerApplication sibala amapharamitha nezibonelo.
Imikhawulo emibili ichaza iningi lemibiko yokuthi „i-trigger ayenzi lutho”. Ama-trigger akhiwe azungeze amaphrofayela abasebenzisi bonke, ngakho ubukhulu bephrofayela yinto yokuqala okufanele icaciswe, futhi indlela yohlelo lokusebenza kufanele ihambisane nebhinari elisebenza ngempela, hhayi isinqamuleli noma isiqalisi esidala inqubo yesibili. Omunye umkhawulo wenzelwe: kunethiwekhi i-Windows eyichaza njengokuthembekile, i-trigger ihlala ingasebenzi, ngoba iphrofayela yenzelwe ukusebenza ngaphandle kwehhovisi.
Add-VpnConnectionTriggerApplication -Name "APP_VPN" -ApplicationID "C:\Program Files\Vendor\app.exe" -Force
Get-VpnConnectionTrigger -Name "APP_VPN" | Format-List *
Get-VpnConnection -Name "APP_VPN" | Format-List Name,ConnectionStatus,SplitTunneling,AllUserConnectionI-tunnel ehlukanisiwe inquma okunqamula umhubhe
Uma i-tunnel ehlukanisiwe icishiwe, i-Windows ifaka umzila ozenzakalelayo osuselwe ekilasini onemethrikhi ephansi kusixhumi se-VPN. Yonke i-socket iwulandela, kuhlanganise isiphequluli nensiza yokubuyekeza, ngakho i-trigger kulokho kulungiselelwa ihambisa umshini wonke ngesikhathi iphrofayela ixhunyiwe. I-trigger iseyiwumthetho womjikelezo wokuphila kuphela; ubukhulu bomthelela bavela emzileni.
Uma i-tunnel ehlukanisiwe ivuliwe, iphrofayela ithwala kuphela iziqalo ezicindezelwa yisango noma ozifaka kusixhumi se-VPN. Konke okunye kuqhubeka kusebenzisa umzila ozenzakalelayo womzimba. Yilokho kuhlelo abantu abavame ukukusho nge-„uhlelo olulodwa ngomfula ohlukile”, futhi kuyisinqumo somzila kusukela ekuqaleni kuze kube sekugcineni.
Set-VpnConnection -Name "APP_VPN" -SplitTunneling $true
Get-VpnConnection -Name "APP_VPN" | Select-Object SplitTunneling
Get-NetRoute -InterfaceAlias "APP_VPN" | Sort-Object DestinationPrefixLapho ukwehlukaniswa okunemizila kuyeka ukuhlukanisa uhlelo lwakho
Ukwehluleka okuvamile yindawo okungeke ivele ohlwini lwemizila yomhubhe. Uhlelo lokusebenza olungena ngokumelene nekheli elilodwa bese lusakaza kusuka ku-CDN, noma luxazulula ishumi lamaphoyinti okugcina ajikelezayo, luzobeka okunye ukuxhumana kusixhumi se-VPN futhi okunye ku-Wi-Fi. I-IPv6 iyithebula elihlukile, ngakho iphrofayela ecindezela kuphela iziqalo ze-IPv4 ingabukeka ilungile ngesikhathi ithrafikhi ye-IPv6 yohlelo lokusebenza ihlala yasekhaya.
Imiphumela emibili emincane ibaluleke ngokulinganayo. Ukufana kwesiqalo eside kunqoba, ngakho umzila othile we-on-link oqondile kakhulu, i-/32 ecindezelwa umphathi womsingathi, noma isubneti yesixhumi sesibili kungahlula i-tunnel ngqo ngekheli olikhathazayo. Ukuxazululwa kwamagama nakho kwenzeka ngaphambi komzila: ngaphandle uma amaseva e-DNS ephrofayela noma umthetho we-NRPT uhlanganisa igama, uhlelo lokusebenza lungaxazulula ngesixhumi somzimba bese lushaya ikheli elingakaze libe ngaphakathi kweziqalo ezifakwe kumhubhe.
Izinhlobo ezintathu, nokuthi ngayinye ithenga ini
Ithebula ingxenye engingayinamathisela odongeni, ngoba isinqumo simayelana nobukhulu bomthelela hhayi izici. Uma izindawo zohlelo lokusebenza ziyiziqalo eziqinile ongazibala, ukwehlukaniswa okunemizila kunikeza ukuhlukaniswa ngomkhondo omncane kakhulu. Uma kungenjalo, iphrofayela yomzila ozenzakalelayo ngemuva kwe-VM noma idivayisi yesibili igcina ukwehlukaniswa kuthembekile ngezindleko zokuhambisa ngaphezu kwenqubo eyodwa.
| Shape | What starts the tunnel | What enters it | Pick it when |
|---|---|---|---|
| Trigger plus routed split | Process start | Only pushed or added prefixes | The app's endpoints are stable prefixes and the host should stay direct |
| Trigger plus default route | Process start | Everything, machine-wide | You need one exit for all traffic and accept the wider scope |
| Separate VM or device | Guest boot or login | Everything inside that guest | The app's destinations rotate, or the host must keep its own public address |
Okungekho kulezi nhlobo ukubopha ezingeni le-socket kumsingathi. Iklayenti le-VPN lakudala le-Windows alinawo umthetho othi le nqubo kufanele isebenzise leso sixhumi; ama-trigger nezihlungi zemizila zihlala ezingxenyeni ezihlukile, futhi ungqimba olukhetha isixhumi yithebula lemizila. Uma umhlahlandlela uthembisa ukuphoqelelwa kohlelo ngalunye kuphela kwiphrofayela ekhoshiwe, buza ukuthi yimuphi umzila noma yisiphi isihlungi esenza umsebenzi.
Qinisekisa ipheya ngokuhamba okukodwa
Hlola umjikelezo wokuphila nomzila ngokwahlukana, ngalolo hlelo. Vala uhlelo lokusebenza, qinisekisa ukuthi iphrofayela ibika i-Disconnected, bese uqala uhlelo lokusebenza futhi uhlole ukuthi isimo sashintsha. Kuphela lapho i-tunnel isikhuphukile kufanele ubuze ukuthi iyiphi indawo ethile iya kuphi, futhi kufanele usebenzise ikheli uhlelo lokusebenza olushaya ngempela esikhundleni sokuqagela.
$app = Get-Process app | Select-Object -First 1
Get-VpnConnection -Name "APP_VPN" | Select-Object ConnectionStatus
Get-NetTCPConnection -OwningProcess $app.Id -State Established | Select-Object RemoteAddress,RemotePort
Find-NetRoute -RemoteIPAddress 203.0.113.10Find-NetRoute ibiza isixhumi nomhlahlandlela olandelayo ongathwala leyo ndawo. I-alias yomzimba lapho isho ukuthi i-tunnel ikhuphukile futhi ayinamsebenzi kulokho kugeleza: hlola iziqalo ezicindezelwe, bese imizila eqondile kakhulu, bese i-IPv6. Uma isimo singashintshi nhlobo, i-trigger ayizange iqhume, futhi indlela yefayela elisebenzayo, ubukhulu bephrofayela kanye nelogi yokusebenza yeklayenti le-VPN yizindawo ezintathu okufanele ubheke kuzo.
Hlanza kahle ukuze ukuhlolwa okulandelayo kube ngokweqiniso
Susa ngokulandelana okuphambene nalokho owakhe: kuqala i-trigger yohlelo lokusebenza, bese iphrofayela. Ukususa iphrofayela ngesikhathi i-trigger isasele kushiya ukuxhumana okulengayo okwenza umzamo olandelayo udideke, futhi Remove-VpnConnection -Force akuhlanzi ngaso sonke isikhathi ukufakwa kwencwadi yocingo okwenziwe ngaphandle kwama-cmdlet.
Ukufakwa kumsebenzisi ngamunye kukuyi- rasphone.pbk yomsebenzisi ngaphansi kwephrofayela ye-Roaming; ukufakwa kwabo bonke abasebenzisi kungaphansi kwe-ProgramData. Hlola isitolo esihambisana nobukhulu bephrofayela, xhuma kabusha iphrofayela oyigcinile, futhi uqinisekise ukuthi imizila yayo ne-DNS kusasebenza, ukuze ukuhlolwa kwakamuva kulinganise ushintsho olwenze hhayi isimo esisele.
- I-tunnel iqala lapho inqubo iqala, hhayi lapho ungena khona.
- Kuphela iziqalo ezihlosiwe ezivela kusixhumi se-VPN.
- Ikheli langempela elikude lohlelo lokusebenza lixazululeka ku-alias ye-VPN.
- Akukho trigger elengayo esele ngemuva kokususwa kwephrofayela.