Amakhodi ezinkinga ze-VPN ku-Windows: yisiphi isigaba esihlulekile, futhi yini okufanele ibhalwe
829, 703, 720, 691, 649: inombolo ngayinye isho isigaba, futhi isigaba ngasinye sinobufakazi baso. Bhala umzamo owodwa, qhathanisa ilogi yesango, shintsha isendlalelo esisodwa.
Vula ibhokisi lengxoxo le-VPN le-Windows ngemuva kokwehluleka futhi lizokunika inombolo nomusho owodwa, lapho umusho uvamise ukuba yingxenye engasizi kangako. Inombolo ikhombisa isigaba sokuxhumana esihlulekile, futhi isigaba sinquma ukuthi yiliphi ilogi, yikuphi ukulungiselela nokuthi yiliphi iqembu okufanele kubhekwe ngokulandelayo. Ukudlula ezigabeni ngokulandelana kuthatha cishe imizuzu eyishumi futhi kuvimbela ukulandelana okujwayelekile kokufaka kabusha ama-adaptha, ukushintsha amaphrothokholi nokuhlehlisa isitaki ukuze kulungiswe i-akhawunti eyayingazange ivunyelwe ukushaya ucingo.
Funda inombolo njengesigaba
Ukuxhumana komdabu kudlula ezigabeni ezine. Kufinyelela kuseva futhi kwakha isixhumanisi, kuxoxisana ngokuphepha, kuqinisekisa umsebenzisi, futhi kusebenzisa ikheli nokuqondisa. Ukwehluleka kwesinye ngasinye kushiya ubufakazi obuhlukile, futhi ikhodi yesigaba esisodwa ayisho lutho olusizayo ngezinye.
Iphutha okufanele ligwenywe ukuthatha ikhodi njengezinga lobukhulu. Ukwehluleka kwesixhumanisi nokwehluleka kwegunya kufundwa njengokuthi "akukwazanga ukuxhumana", futhi akukho okunye abakwabelanayo. Ubukhulu busho ukuthi into iphuthuma kangakanani; isigaba sisho ukuthi yini okufanele ivulwe.
| Code family | Stage | Where the evidence lives |
|---|---|---|
| 829, 703 | Link or dial completion | Client event log, remote listener reachability |
| 720 | PPP negotiation and miniport binding | Adapter state, bindings, client log detail |
| 691, 649, 812 | Identity and authorization | Gateway or authentication server decision |
| Connected, no traffic | Addressing, routing and resolution | Route table and resolver configuration |
Isigaba sokuqala: isixhumanisi nomzamo wokushaya ucingo
829 kusho ukuthi isixhumanisi esingaphansi sawa. Akusho ukuthi uhlangothi olukude lwayeka ukuphendula, idivayisi ephakathi yabulala isikhathi sokuxhumana, noma inqubomgomo kuklilenti yasivala. Ikhodi yokuqedela ukushaya ucingo efana no-703 iseyakuqala nakakhulu: umzamo awuzange ufinyelele ekubeni nesixhumanisi, okuvamise ukukhomba iphrofayili, isimo sesevisi noma inqubomgomo yendawo.
Get-VpnConnection -Name 'Corp' | Select-Object Name,ServerAddress,TunnelType,AuthenticationMethod,ConnectionStatus
Test-NetConnection -ComputerName vpn.example.net -Port 443
Get-WinEvent -LogName Application -MaxEvents 200 | Where-Object ProviderName -match 'RasClient' | Select-Object -First 15 TimeCreated,Id,MessageUmbuzo wezimo yingxenye abantu abayeqayo. Irekhodi ohlangothini lweklilenti elinesigxivizo sesikhathi negama lesikhombisi lilingana nokuningi kunebhokisi lengxoxo, ngoba lisho ukuthi umzamo washiya umshini noma cha. Akukho rekhodi futhi akukho mpendulo evela kumlaleli kusho inkinga yokufinyeleleka, futhi akukho ukuhlela kweklilenti okushintsha lokho.
Uma iphrofayili efanayo isebenza kwenye inethiwekhi, yima lapha. Ikhodi ichaza isimo sendlela hhayi iphutha lokuhlela, futhi ukuqhathanisa okulandelayo okusizayo ukuthwebula okubili hhayi okunye ukufaka kabusha.
Isigaba sesibili: PPP nokubopha kweminiporthi
720 likhona phakathi kwesixhumanisi nomsebenzisi. Umhubhe wakhuphuka, kwase kuthi isendlalelo se-PPP asikwazanga ukuxoxisana ngekheli noma iphrothokholi yokulawula, lokho okuvamise ukuba yinkinga yokubopha kuklilenti hhayi ubufakazi obunqatshiwe. Lowo mehluko uyiyo yonke inani lekhodi: isho ukuthi ubufakazi abuzange bufinyelelwe ngisho, ngakho i-akhawunti ayiyona esolwayo.
Get-NetAdapter -IncludeHidden | Where-Object InterfaceDescription -match 'WAN Miniport' | Select-Object Name,Status,ifIndex
Get-NetAdapterBinding | Where-Object ComponentID -match 'ms_pptp|ms_l2tp|ms_sstp|ms_agile' | Select-Object Name,ComponentID,EnabledUkufunda leyo miphumela emibili kunikeza ulwazi oluningi kunokuhlehlisa noma yini. Iminiporthi ekhona kodwa engaqaliwe, noma ukubopha kwephrothokholi okuvalwe esinye isofthiwe, kukhiqiza kahle ukwehluleka kwalesi sigaba. Kokubili kungalungiswa ngaphandle kokuthinta ingxenye esele yesitaki. Ngokuphambene, ukuhlehlisa okugcwele kususa ikheli nesimo sokuhlunga obekungahlobene nakho nokwehluleka.
Isigaba sesithathu: ubunikazi negunya
691 kusho ukuthi ubufakazi banqatshiwe. 649 kusho ukuthi i-akhawunti ayivunyelwe ukushaya ucingo, futhi 812 kusho ukuthi inqubomgomo yokufinyelela kude yenqaba ukuxhumana. Lezi izinqumo, hhayi izinkinga zokuthutha, futhi iklilenti lingakwazi kuphela ukuzibika.
Ubufakazi busohlangothini olunye. Cela umqhubi wesango umzamo kuleso sigxivizo sikhathi nenqubomgomo efanayo; buza umnikazi wencwadi yokuhola ukuthi i-akhawunti inemvume yokushaya ucingo nokuthi ikwiqembu elidingwa inqubomgomo. Ukushintsha uhlobo lomhubhe noma ukufaka kabusha iklilenti akukwazi ukushintsha isinqumo esathathwa ngobunikazi.
Umkhuba osizayo kulesi sigaba ukubhala kuthikithi umucu wokulingana we-akhawunti, kufaka phakathi noma yisiphi isiqalo sesizinda. Inani elimangazayo lamacala ka-691 ubufakazi obugcinelwe isizinda esingalungile, futhi lokho kubonakala emucwini we-akhawunti hhayi kuzilungiselelo zephrothokholi.
Isigaba sesine: kuxhunyiwe, futhi akukho okusebenzayo
Ukuxhumana kungaqedwa futhi kuhlale kungenamsebenzi. Kunesimo sekheli, iklilenti libika impumelelo, futhi zonke izicelo zohlelo lokusebenza ziphelelwa isikhathi. Akukho ebhokisini lengxoxo okubonisa lokho, futhi akukho khodi yokubheka. Ngaleso sikhathi ibhokisi lengxoxo seliphelile futhi ubufakazi obusizayo bakwenye indawo.
Get-NetRoute -DestinationPrefix 10.24.0.0/16 | Select-Object DestinationPrefix,NextHop,InterfaceAlias
Resolve-DnsName files.corp.example.internal
Test-NetConnection -ComputerName 10.24.6.15 -Port 445Uma indlela ingekho, iseva ayizange iyiphuse noma iklilenti yayilahla. Uma indlela ikhona futhi igama lihluleka, inkinga isekuxazululeni. Uma kokubili kusebenza futhi uhlelo lokusebenza lusahluleka, usudlule umhubhe futhi usemisebeni yohlelo lokusebenza uqobo.
Gcina izinguquko kusendlalelo esisodwa ngokuhlolwa ngakunye. Noma yikuphi ukuhlela okwenziwe ngaphambi komzamo olandelayo kuba yingxenye yomongo wekhodi elandelayo, futhi ikhodi echaza ukuhlela kwakho kokugcina ibi kakhulu kunokungabi nakhodi nhlobo.
Umzamo owodwa, ushintsho olulodwa, irekhodi elilodwa
Noma yisiphi isigaba, irekhodi kufanele libe nekhodi, umlayezo, igama lephrofayili, isigxivizo sesikhathi nenethiwekhi obukuyo. Izinkambu ezinhlanu, futhi ngayinye yazo isivele iphambi kwakho ebhokisini lengxoxo noma kulogi yeklilenti. Lelo qoqo lincane ngokwanele ukuba linanyathiselwe kuthikithi futhi licacile ngokwanele ukuthi omunye umuntu angakwazi ukukwenza futhi.
Bese ubeka leso sigxivizo sikhathi eceleni kwerekhodi ohlangothini olunye. Ithebula eliseduze nengxenye ephezulu yaleli khasi lisho ukuthi yisiphi isigaba esiphethe ukungafani ngakunye. Ngaphandle kwerekhodi lesibili ikhodi inciphisa kuphela ukusesha; nalo, isigaba siyanqunywa. Ukuqhathanisa yikho okushintsha inombolo ibe ukuxilonga hhayi ukuqagula.
Lowo mkhuba uhlanganisa cishe zonke izinkinga zomdabu ze-VPN ku-Windows, futhi akekho ugatsha oludinga ukufaka kabusha noma yini. Ibhokisi lengxoxo lalihlale likutshela ukuthi yikuphi okunakho; umsebenzi ukwenqaba ukuthatha konke njengenkinga eyodwa.