I-VPN ye-Windows ikhombisa u-255.255.255.255: ingabe imaski ayilungile?
Kumhubhe we-point-to-point, imaski ye-host ivamile. Qinisekisa imodeli ye-interface, funda umzila we-host ehlulekayo bese uhlukanisa i-DNS nokufinyelela kwesevisi.
Umhubhe uyaxhuma, uvula imininingwane ye-adapter futhi imaski ikhombisa 255.255.255.255. Uma iqhathaniswa ne-255.255.255.0 ye-LAN yasehhovisi ibonakala iphukile, futhi yilapho iphutha livamise ukuqala khona. Kumhubhe we-point-to-point imaski ye-host iyincazelo efanele yendawo yokugcina yendawo, futhi amanethiwekhi akude afika njengemizila esikhundleni sesubneti exhunyiwe. Inqubo engezansi ihlukanisa imibuzo emibili ukuze ungakhi kabusha isimo se-DHCP esisebenzayo ukuze ulungise inani elibonisiwe.
Umhubhe we-point-to-point awusona isigaba se-Ethernet
I-interface ye-Ethernet idinga imaski ye-subneti ngoba ikheli ngalinye kulelo banga lingase lifinyeleleke kuyo yona intambo efanayo. Umhubhe wesitayela se-PPP unomlingani oyedwa kuphela kwelinye iqede. Asikho isizinda sokusakaza, akukho i-ARP futhi asikho isizathu sokuthi ikheli lendawo lichaze ibanga.
Ukuxoxisana ngamakheli kuleyo modeli kuchazwe ku-RFC 1332, okubandakanya indlela izinhlangothi ezimbili ezivumelana ngayo ngamakheli azo. Engakwenzi ukunikeza iklayenti i-LAN yasehhovisi njengenethiwekhi exhunywe ngqo. Iklayenti lifunda lapho ihhovisi likhona ngokufaka imizila ngomhubhe, futhi yileyo mizila enquma ngempela ukufinyeleleka.
Lokhu akusho ukuthi yonke imaski oyibonayo ilungile. Iklayenti elilungiselelwe ngokungalungile lingakhiqiza nokukhetha okuxakile. Iphuzu lincane: imaski ye-host kuleli hlobo le-adapter ilindelekile, ngakho ngokwayo ayibona ubufakazi bephutha.
Isinyathelo 1: qinisekisa imodeli ye-interface
Bheka ukuthi iyini i-adapter ngaphambi kokwahlulela okushoyo. Uchungechunge lwencazelo lukhomba umshayeli, futhi ubude be-prefix ekhelini elinikeziwe buqinisekisa lokho iklayenti elikuxoxile:
Get-NetAdapter | Select-Object Name,InterfaceDescription,Status,ifIndex
Get-NetIPAddress -InterfaceAlias 'Corp VPN' | Select-Object IPAddress,PrefixLength,PrefixOrigin
Get-NetIPInterface -InterfaceAlias 'Corp VPN' | Select-Object AddressFamily,ConnectionState,NlMtuUmyalo wesithathu yiwona owengamela izingxoxo eziningi. Iyunithi ephezulu yokudlulisela ephansi iyisici somhubhe ohlanganisiwe, kuyilapho inani elifana ne-Ethernet likhombisa imodeli ye-adapter ebonakalayo ehlukile. Uma incazelo isho umshayeli we-PPP noma we-RAS futhi i-prefix ingu-32, ubona kahle ukwakheka okuchazwe ngenhla futhi ungaqeda ukukhathazeka ngemaski.
| Observation | What it means | Reasonable next step |
|---|---|---|
| /32 on a PPP or RAS adapter | Point-to-point endpoint addressing | Look at routes, not the mask |
| /32 on an Ethernet-like adapter | Client chose host addressing deliberately | Confirm against the server's push policy |
| Mask differs from the office LAN | Usually irrelevant to reachability | Test the destination instead |
Isinyathelo 2: funda umzila wendawo ehlulekayo
Ukufinyeleleka kunqunywa ngendawo ngayinye, futhi i-interface eyodwa exhunyiwe ayikutsheli lutho ngalokho. Buza ithebula lemizila ngqo ikheli umsebenzisi azama ngempela ukulifinyelela:
Get-NetRoute -InterfaceAlias 'Corp VPN' | Select-Object DestinationPrefix,NextHop,RouteMetric
Find-NetRoute -RemoteIPAddress 10.24.6.15
route print -4Find-NetRoute iyimpendulo eqondile: isho i-interface nekheli lomthombo uhlelo olungayisebenzisa kuleyo ndawo. Uma ibuyisela umhubhe, ithrafikhi eya kuleyo host ihamba ngomhubhe futhi imaski yayingeyona inkinga.
Uma ibuyisela i-adapter ebonakalayo, qhathanisa imizila emibili elinganiselwe kanye nezilinganiso zayo. Umzila wendawo oqondile kakhulu, okusalile kwelinye iklayenti noma isilinganiso esiphansi endleleni ebonakalayo konke kuyanqoba umzila womhubhe obanzi. Umphumela obonakalayo ingcebo engafinyeleleki ngenkathi konke okunye kusebenza. Ama-prefix amade ahlala enqoba, ngakho owinileyo uvamise ukuba umzila we-host owasongezwa othile ezinyangeni ezedlule wakhohlwa.
Hlola nezinhlangothi zombili ngenkathi ulapha. Umzila oya ohlangothini lweseva uyadingeka kodwa awanele, ngoba impendulo kufanele iphinde ibuye ngomhubhe. Uma i-host eyodwa yangaphakathi isebenza kanti enye ingasebenzi, umehluko uvamise ukuba kuleli thebula hhayi ekulungiselelweni kwe-adapter.
Isinyathelo 3: hlukanisa ukuxazululwa kwamagama nokufinyelela kwesevisi
Uhlelo lokusebenza olungavuli isabelo lungahluleka kwesinye sezigaba ezimbili ezihluke kakhulu. Sombulula igama, bese ufinyelela ikheli. Uma okokuqala kuhluleka futhi okwesibili kusebenza, umhubhe ulungile futhi isombululi asilungile:
Resolve-DnsName files.corp.example.internal
Get-DnsClientServerAddress -InterfaceAlias 'Corp VPN'
Test-NetConnection -ComputerName 10.24.6.15 -Port 445Ukuhlolwa kwekheli okuphumelelayo kanye nokuhlolwa kwegama okuhlulekile kubonisa inkinga ekuxazululeni, futhi umyalo wesibili ukhombisa ukuthi i-interface yomhubhe ithole iseva yini nhlobo. Amaklayenti amaningi ashukumisa i-DNS njengengxenye yokulungiselelwa komhubhe, futhi iphrofayili engazinaki lezo zinketho ezishukunyisiwe izosho ukuthi umshini usebenzisa isombululi esingasiboni isizinda esiyimfihlo.
Ungathathi ikheli elisebenzayo njengokulungisa unomphela. Ukuxhuma ngekheli kudlula ukuxazululwa kwamagama futhi kungaphazamisa ukuqinisekiswa kobuwena besiseva obekungenziwa uhlelo lokusebenza. Lokho kuwukuhlehla kwezokuphepha okugqanyisiwe njengekhambi lesikhashana. Kusebenzise ukubona iphutha, bese ulungisa ukuxazululwa.
Ukubuyisela emuva: ungakhi kabusha i-DHCP ngenxa yenani elibonisiwe
Uma usuqalile ukushintsha isevisi yamakheli, yima futhi uhlole ukuthi kukhona yini okushintshile okubalulekile. Ukwakha kabusha isimo, ukukhipha kabusha ama-lease noma ukuhambisa iphuli kushintsha isimo amanye amaklayenti ancike kuso, futhi akukho kulokho okufakazelwa yimaski ye-host ku-adapter ye-point-to-point.
Get-DnsClientServerAddress -InterfaceAlias 'Corp VPN'
Find-NetRoute -RemoteIPAddress 10.24.6.15
Test-NetConnection -ComputerName files.corp.example.internal -Port 445Sebenzisa lezi zintathu ngemva kwanoma yiluphi ushintsho oqondiwe bese uqhathanisa nokugijima kwangaphambili. Umphumela owusizo indlela ebhaliwe eya kungcebo, hhayi i-adapter enemaski efana ne-LAN yasehhovisi.
Bese ubhala phansi ukuthi imaski yayisho ukuthini ngempela, ngoba umuntu olandelayo uzovula ingxoxo efanayo futhi afinyelele isiphetho esifanayo esingalungile. Umshwana owodwa kumanothi ephrofayili, othi umhubhe yi-point-to-point futhi ama-subneti akude afika njengemizila, wonga uphenyo lonke ngokuzayo.