I-VPN ye-Windows ayixhumanisi? Fanisa ikhodi ne-log yezigameko

NgoLwesihlanu kwakusebenza. NgoMsombuluko iklayenti elifanayo le-Windows liphendula ngengxoxo ethi umzamo wokuxhuma wehlulekile, futhi umusho ongaphansi kwayo uwona osewukubonile ngezinkinga eziyishumi nambili ezingahlobene. Leyo ngxoxo iwukuphela kochungechunge, hhayi ukuqala kwalo. I-Windows ifihla isigaba lapho umzamo wafa khona ngempela, futhi ubufakazi obubili obuncane buyisho ngegama: ikhodi yomphumela eyinombolo kanye nomcimbi owodwa we-RasClient kusukela kulo lo mzuzu. Lona uhlelo engilisebenzisayo — qinisa umzamo, funda ikhodi, thatha umcimbi, bese ushintsha ungqimba olulodwa ngqo.

Umbhalo wengxoxo uyisinyathelo sokugcina, hhayi imbangela

Umusho oyifundayo ukhethwa ngemuva kokuba umzamo usuvulekile. "Uxhumano lwanqanyulwa ikhompyutha ekude ngaphambi kokuba uxhumano lusungulwe" luvela lapho iseva ilahla ucingo phakathi nokuxoxisana, lapho i-IPsec yehluleka ngaphambi kokuba igama lakho lomsebenzisi lithunyelwe, noma lapho inqubomgomo inqaba ngqo umhubhe. Abanikazi abathathu abehlukene, umusho owodwa. Thatha amagama njengesigaba sezimpawu futhi ungavumeli ukuthi kuqondise noma yini kuze kube yilapho ikhodi ivumelana nayo.

Okusengakwazi ukuqinisa umzamo uqobo. Bhala igama lokuxhuma, uhlobo lomhubhe olugcinwe kuphrofayela — PPTP, L2TP/IPsec, SSTP noma IKEv2 —, isikhathi kuze kufike kusekhondi, kanye nekhodi. Uma ungaqinisekile ukuthi iyiphi iphrothokholi eyasebenza ngempela, vula i-%APPDATA%\Microsoft\Network\Connections\Pbk\rasphone.pbk bese ufunda okufakiwe esikhundleni sokuthemba inkumbulo; iphrofayela esetshenziswe kabusha ngephrothokholi entsha igcina igama layo lokubonisa elidala.

Funda inombolo ngaphambi kokufunda amagama

Amakhodi awela ezigabeni ezintathu, futhi isigaba sibaluleke kakhulu kunamagama anembile: ukushintshana kokuqinisekisa okwafinyelelwa futhi kwanqatshwa, iseva engaphendulanga neze, noma ukuxoxisana okuwohloka ngemva kokuba isixhumanisi sikhuphuke. 691 uhlobo lokuqala — ukuhlolwa kobufakazi kwaqhubeka futhi kwehluleka, kungaba ngenxa yephasiwedi engalungile, i-akhawunti evaliwe noma ephelelwe yisikhathi, noma iphrothokholi yokuqinisekisa iseva engayamukeli. 812 nakho kuwukwenqaba, kodwa ngobufakazi obusemthethweni: inqubomgomo kuseva yokufinyelela kude yanquma ngokumelene nawe. I-Microsoft igcina uhlu lwamakhodi amaphutha okuxhuma ngocingo naku-VPN ejwayelekile, futhi kufanelekile ukufunda inombolo yakho lapho ngaphambi kokusesha umbhalo womlayezo.

809 isigaba esiphambene: akukho okwabuya. Lena inkinga yendlela — i-TCP 443 ihlungiwe nge-SSTP, i-GRE ivinjiwe nge-PPTP, i-UDP 500 ne-4500 noma i-ESP ilahliwe ngokudlula kwe-IPsec. Iphasiwedi entsha ayikwazi ukukulungisa futhi nesitifiketi esisha asikwazi. 720 kusho ukuthi isixhumanisi sakhuphuka futhi i-PPP ayizange iqede ukuxoxisana, okukhomba ekungafanini kwephrothokholi noma kuseva engakwazanga ukwaba ikheli. 789, noma 13801 ku-IKEv2, ubunikazi ngaphakathi kwe-IPsec: isitifiketi esingafani nesihloko kanye negama olidayela, uchungechunge olungathembekile, noma ukhiye owabiwe ngaphambili ohlukile phakathi kwemikhawulo emibili.

Thatha umcimbi we-RasClient walowo mzuzu

Kusibuki sezehlakalo, i-Windows Logs > Application ehlungiwe ngomthombo RasClient iyindawo yokuqala okufanele ibhekwe. Umbhalo we-Microsoft mayelana nephutha 720 ukhomba umcimbi 20227 kulelo logi. Umhlinzeki ofanayo ukhipha ezinye izihlonzi zeminye imiphumela, ngakho funda umlayezo kanye nekhodi yomphumela efakwe kuwo esikhundleni sokuthatha i-ID njengokuxilonga; ingxoxo ejwayelekile kanye no-20227 ophethe u-720 sekuyindaba encane kakhulu.

Kusukela ku-PowerShell, ngaphandle kokuchofoza ku-GUI:

Get-WinEvent -FilterHashtable @{
  LogName      = 'Application'
  ProviderName = 'RasClient'
  StartTime    = (Get-Date).AddMinutes(-15)
} | Format-List TimeCreated, Id, Message

Umphumela ongenalutho unolwazi. Ngokuvamile kusho ukuthi ukudayela akuzange kufinyelele kude ngokwanele ukuthi i-RAS ibhale okuthile, noma ukuthi isofthiwe ehlulekile akuyona neze iklayenti lomdabu — amaklayenti enkampani yangaphandle agcina ukuxilonga kwawo futhi ngokuvamile awabhali lutho kulogi ye-Application. Hlola ilogi yomthengisi ngaphambi kokuphetha ngokuthi ukubhalwa kwezehlakalo kudiliziwe.

Akha umugqa wesikhathi owodwa esikhundleni senqwaba yezehlakalo

Imijikelezo yokuzama kabusha idala umsindo. Ukuxhuma kabusha okuzenzakalelayo kwezihlanu kushiya iqoqo lezehlakalo, futhi isilingo siwukuzifunda njengokulandelana okukodwa okunembangela eyodwa. Kuyimizamo emihlanu ehlukene, futhi imvamisa kuphela eyafinyelela kuseva. Thatha iwindi lemizuzu emibili noma emithathu, igama lokuxhuma elilodwa, bese ufaka uhlu lomcimbi ngamunye nekhodi yawo ngaphambi kokuhumusha noma yini.

Bese ubuza ukuthi umzamo wama kuphi. Uma isango noma ingemuva lokuqinisekisa lingenalo irekhodi laleso siginesha sesikhathi, iklayenti alizange lifinyelele kulo, futhi ubheka inkinga yokufinyeleleka. Uma ingemuva likhombisa isicelo nokwenqaba, isinqumo sathathwa lapho, futhi isigaba sobufakazi noma senqubomgomo siyasebenza. Qhathanisa amawashi ngaphambi kokuqhathanisa izikhathi: amaklayenti abika isikhathi sasendaweni, amasango amaningi abhala nge-UTC, futhi umehluko uzokwenza ababili abahlobene ngokuphelele babonakale bengahambisani.

Ukuze uthole ukuthwebula okuphindwayo, dayela kusukela kumugqa womyalo futhi uyeke iphrinte umphumela:

rasdial "Office VPN"
rasdial "Office VPN" /disconnect

Ikhonsoli ikhombisa inombolo i-GUI eyifihla ngemuva kombhalo onobungane, futhi ukuyisebenzisa kabili kukutshela ukuthi ikhodi izinzile noma iyavela ngezikhathi ezithile.

Isigaba ngasinye sithi ushintshe ini

Ukuqamba isigaba kusiza kuphela uma kunciphisa isethi yezinguquko ibe ungqimba olulodwa:

• 691 — ukuqinisekisa: indlela ye-EAP enikezwa iklayenti ngokuqhathaniswa naleyo eyamukelwa iseva, isimo se-akhawunti, ukuphela kwephasiwedi, imvume yokudayela.
• 812 — inqubomgomo yeseva: inqubomgomo yokufinyelela kude noma umthetho we-NPS ohambisana nalo msebenzisi kanye nalesi sikhathi.
• 809 — ukufinyeleleka: imithetho yodonga lomlilo endleleni, i-NAT nokudlula kwephrothokholi, imbobo edingwa uhlobo lomhubhe olukhethiwe.
• 720 — ukuxoxisana kwe-PPP: ukungafani kwephrothokholi yokuqinisekisa, ukwabiwa kwekheli, isilungiselelo se-PPP ohlangothini lweseva.
• 789 / 13801 — ubunikazi be-IPsec: isihloko sesitifiketi ngokuqhathaniswa negama olidayela, uchungechunge lokuthembela, ukhiye owabiwe ngaphambili.

Shintsha okukodwa kwalokho, hlola kabusha iphrofayela efanayo, bese ubhala ikhodi entsha. Ikhodi ehlukile ngemva koshintsho iyintuthuko hhayi ukuphikisana: ushintshile ukwehluleka waya esigabeni sakamuva, futhi yileyo indlela ukulungiswa kokuxhawulana kwezigaba eziningi okubonakala ngayo. Okungafanele ukwenze ukushintsha udonga lomlilo, isitifiketi nephasiwedi ngasikhathi sinye bese unika udumo kulokho okuza kwokugcina.

Yabelana ngobufakazi, hhayi indawo ezungezile

Imilayezo yezehlakalo icebe kunalokho ebonakala ngakho. Ithwala igama lokuxhuma, i-akhawunti, imvamisa igama noma ikheli langaphakathi lesango, futhi ngezinye izikhathi isigxivizo somunwe sesitifiketi. Gcina okwangempela lapho kufanele khona, futhi wakhe ikhophi ehleliwe ehlukile kunoma ubani omunye; ukuphinda ubhale umugqa wesikhathi kusukela enkumbulweni kulahlekelwa yileyo mininingwane eyenza ube usizo.

Ukudluliswa okuzosebenziwa kudinga izinkambu ezinhlanu: ikhodi, isigaba esikuyo, iklayenti kanye nohlobo lomhubhe, isiginesha sesikhathi kanye nesifunda saso sesikhathi, nokuthi isango lasibona yini isicelo. Konke okunye kungukuzikhethela. Ngalokho okuhlanu, umuntu olandelayo angahlukanisa impikiswano yobufakazi kuleyo yomzila ngaphandle kokuphinda uphenyo.

Ngaphambi kokuthi uvale noma yini, phinda udlale umzamo kuphrofayela efanayo bese uqinisekisa ukuthi ikhodi isihlala kuphi manje. Impumelelo iyikuqeda; ukwehluleka okuhlukile kusho ukuthi isigaba sokuqala silungisiwe futhi esilandelayo sisesandleni sakho.