Question

我的笔记本电脑已加入域名，我在办公室使用PSRemoting就好了。尝试通过VPN连接办公室外时出错。我已经检查了我们的防火墙，但问题似乎是客户端或服务器，因为“Test-WSMan”成功没有问题。我已将这些机器添加到彼此的信任主机中，并尝试了许多其他事情但没有成功。请帮忙！

我是Domain Admins的成员，笔记本电脑在域名上。

Enter-PSSession : Connecting to remote server SERVERNAME failed with the following error message : WinRM cannot
process the request. The following error with errorcode 0x80090311 occurred while using Kerberos authentication: The
are currently no logon servers available to service the logon request.
 Possible causes are:
  -The user name or password specified are invalid.
  -Kerberos is used when no authentication method and no user name are specified.
  -Kerberos accepts domain user names, but not local user names.
  -The Service Principal Name (SPN) for the remote computer name and port does not exist.
  -The client and remote computers are in different domains and there is no trust between the two domains.
 After checking for the above issues, try the following:
  -Check the Event Viewer for events related to authentication.
  -Change the authentication method; add the destination computer to the WinRM TrustedHosts configuration setting or
use HTTPS transport.
 Note that computers in the TrustedHosts list might not be authenticated.
   -For more information about WinRM configuration, run the following command: winrm help config. For more
information, see the about_Remote_Troubleshooting Help topic.
At line:1 char:1
+ Enter-PSSession SERVERNAME
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : InvalidArgument: (SERVERNAME:String) [Enter-PSSession], PSRemotingTransportException
    + FullyQualifiedErrorId : CreateRemoteRunspaceFailed

Answer 1

从这个问题来看，我的理解如下：

添加可信主机时，应添加具有FQDN的服务器，如

Set-Item wsman：\ localhost \ Client \ TrustedHosts -Value Server01.Domain01.Fabrikam.com

在Enter-PSSession期间，我建议您不要将 Kerberos 用作 -Authentication ，您可以使用默认值，因为它是域管理员帐户。
我相信端口是从网络端打开的，因为你已经这样做了。但要确保交叉检查端口的状态;它的听力与否。

我相信这些要点会对你有所帮助。通常情况下，除非跳跃真的很复杂，否则VPN不会给出这么多问题。

PSRemoting通过VPN失败

1 个答案: