I-VPN ye-Windows ithatha yonke i-traffic yakho? Susa umzila wayo ophansi

Uxhuma ku-VPN yasehhovisi futhi wonke ikhasi kusiphequluli uqala ukudlula kuleyo nethiwekhi: iseva yamafayela iyashesha, konke okunye kuyahamba kancane, kuhlungiwe noma akusekho. Iklayenti alenzi iphutha; iphrofayela icele umhubhe ogcwele. Isishintshi esikuvimbayo iyibhokisi lokuhlola elilodwa kudayalogi uhlelo lwesimanjemanje lwezilungiselelo olungayibonisi, futhi i-gateway iphinde ibe nezwi ekuxhumaneni ngakunye. Lo mhlahlandlela ulandela ukulandelana okwethulwa ngempela yisixhumi sesevisi se-Windows, bese uhlanganisa izihlolo ezisahluleka ngisho ngemva kokuba ithebula lemizila libonakala lilungile.

Qala kuzici ze-adaptha, hhayi kuzilungiselelo

Uhlelo lwezilungiselelo lufaka iphrofayela ngaphansi kweNethiwekhi ne-Inthanethi, bese kuthi i-VPN, kodwa lubonisa kuphela izinketho ezijwayelekile. Isinqumo nge-gateway ephansi sihlala ku-adaptha. Vula uhlu lwakudala lwama-adaptha nge-Win+R ne-ncpa.cpl, chofoza kwesokudla kuxhumano lwe-VPN, khetha Izici, khetha Iphrothokholi ye-Inthanethi inguqulo 4, khetha Izici futhi bese kuthi Okuthuthukile. Susa ukumaka ku-Sebenzisa i-gateway ephansi kunethiwekhi ekude bese uqinisekisa ukuphuma kuzo zontathu izinkulumo.

Xhuma futhi ngaphambi kokuhlola, ngoba ibhokisi lokuhlola lisebenza lapho kusungulwa umhubhe futhi iseshini ekhona igcina ithebula eliyakhile. Uma i-adaptha ingekho ngenkathi iklayenti linqanyuliwe, xhuma kanye bese uvula kabusha iwindi. Iklayenti lomhlinzeki elifaka i-adaptha ye-TAP noma ye-Wintun ngaphandle kwekhasi lezici ze-IPv4 alinayo nhlobo le nkulumo; kulabo, isinqumo esifanayo iyinketho yomhubhe ohlukanisiwe kuzilungiselelo zeklayenti uqobo, futhi ibhokisi lokuhlola le-adaptha iyindawo engalungile yokucinga.

Ushintsho olufanayo kusuka ku-PowerShell

Kuyiphrofayela edalwe kusitore ye-VPN ye-Windows, isilungiselelo singabhalwa nge-script, okuyikho okufunayo uma umshini wakhiwa kabusha kaningi:

Set-VpnConnection -Name "Office" -SplitTunneling $true
Get-VpnConnection -Name "Office" | Select-Object Name,SplitTunneling

Leyo cmdlet ifinyelela kuphela amaphrofayela akuleso sitore. Uxhumano olwengezwe yiklayenti lenkampani yangaphandle ngeke luvakele, futhi umyalo uhluleka ngephutha legama elifundeka njengephutha lokuprinta. Qaphela futhi lokho isishintshi esingakwenzi: sivimbela iklayenti ekufakeni umzila ophansi, kodwa asisusi imizila i-gateway eyiphushayo ngesikhathi sokuxhumanisa, ngakho isigaba esilandelayo sisadingeka kumanethiwekhi amaningi.

Lapho i-gateway iphusha umzila ophansi futhi

Funda ithebula kuqala. Imibhalo emibili ephansi enemethrikhi ehlukene isho ukuthi ushintsho lwephrofayela lusebenzile futhi umzila ophushiwe wawuthatha indawo yawo noma kunjalo:

route print -4
Get-NetRoute -DestinationPrefix 0.0.0.0/0 | Sort-Object RouteMetric
Get-NetAdapter | Select-Object Name,ifIndex

Susa umzila ophansi womhubhe bese ugcina lowo wangempela. Sebenzisa inkomba yesixhumi sesevisi kusuka kumyalo wesithathu, hhayi igama lesibizo le-adaptha, ngoba ama-script adlulisa igama lesibizo ayaphuka ngokushesha lapho igama elibonakalayo lishintsha:

Remove-NetRoute -DestinationPrefix 0.0.0.0/0 -InterfaceIndex 21 -Confirm:$false
route delete 0.0.0.0 10.8.0.1

Ukususa kuhamba nehhovisi, ngakho engeza kabusha izandulela zebhizinisi nge-gateway yomhubhe. Lona umugqa abantu abawudlulayo, futhi yisizathu esenza ukuthi «i-VPN yayeka ukusebenza» kulandele ushintsho oluyimpumelelo lomhubhe ohlukanisiwe:

route add 10.0.0.0 mask 255.0.0.0 10.8.0.1 metric 5 if 21

Akukho kulokhu okusinda ekuxhumaneni kabusha, okuwukuziphatha okuqotho hhayi iphutha: i-adaptha yakhiwa kabusha futhi iklayenti lisebenzisa futhi lokho okwavunyelwana ngaphrofayela ne-gateway. Uma umzila ophansi ubuya njalo, i-gateway ilungiselwe ukwenqaba umhubhe ohlukanisiwe futhi izoqhubeka nokuwuphusha, noma inqamule iseshini. Leyo inqubomgomo yomqhubi wenethiwekhi, futhi isicelo sifanele lapho hhayi ku-script yasendaweni elwa nayo kanye ekuxhumaneni ngakunye.

Hlola futhi i-DNS, i-IPv6 kanye namamethrikhi ngemva kokuxhuma kabusha kanye

Ukususa umzila ophansi we-IPv4 akufakazeli lutho ngomunye umndeni noma ngokuxazululwa kwamagama. Umhubhe ungathwala i-IPv6 kuyilapho lowo ophansi we-IPv4 uhlala endaweni, futhi uhlu lwezixazululi olubhaliwe lungagcina amagama angaphakathi esebenza kuyilapho imibuzo ewusebenzisayo ihamba ngomunye umzila. Hlola zontathu ngaphambi kokusho ukuthi kuphelile:

Get-NetRoute -DestinationPrefix ::/0
Get-DnsClientServerAddress -InterfaceAlias "Office"
Get-DnsClientNrptPolicy

Uma isimo sibuya ekuxhumaneni ngakunye, hambisa imiyalo esenzweni sokuxhumana ngakunye esikhundleni sokuhlela ithebula ngesandla: umsebenzi ohleliwe oqalwa umcimbi wokuxhumana, noma isilungiselelo somhubhe ohlukanisiwe sekilayenti uqobo lapho sikhona. Gcina inkomba yesixhumi sesevisi kusigezo bese uyifuna ngesikhathi sokusebenza, ngoba ingashintsha lapho ama-adaptha engezwa noma esuswa.

Nquma ukuthi washiya ini

I-traffic ye-Inthanethi yasendaweni ayisahlolwa noma ihlungwa yihhovisi, futhi noma yini eshicilelwa kuphela ngomhubhe manje idinga umzila wayo. Ezinye izinhlangano zithatha umhubhe ohlukanisiwe njengokwephula inqubomgomo, ngakho qinisekisa lokho ngaphambi kokushintsha idivayisi ephethwe; okungaphansi okubhaliwe ngezinye izikhathi kuwumshini wokuphoqelela hhayi ingozi. Idokhumenti ye-Set-VpnConnection ibala ipharamitha yomhubhe ohlukanisiwe kanye nezinhlobo zephrofayela okusebenza kuzo.

Bese uqinisekisa ngokulandelana okungaguquki: ubani ongumnikazi womzila ophansi, ukuphequlula okuvamile, isiphakeli esisodwa sebhizinisi ngekheli, igama elilodwa langaphakathi, kanye nalawo mane ngemva kokuxhuma kabusha kanye. Uma ukuphequlula kusebenza kanti isiphakeli sebhizinisi sihluleka, okungekho umzila wezandulela hhayi lowo ophansi owususile, futhi ukulungisa lokho kushibhe kakhulu kunokwakha kabusha iphrofayela.