bạn cũng sẽ cần phải bao gồm ID giao diện (ví dụ, ping fe80:: d1ff: d166: 7888:2 fd6 12%). ID giao diện được thảo luận sau trong bài học này. Cũng lưu ý rằng lệnh này hoạt động bởi vì bạn ping một địa chỉ liên kết địa phương trong cùng một máy tính. | Currently connected to Internet and Corporate access Open Network and Sharing Center FIGURE 10-3 The Internet and Corporate Access message As you learned earlier DirectAccess clients use digital certificates to authenticate with the DirectAccess server. If a computer does not have a valid computer certificate issued by a certificate authority CA that the DirectAccess server is configured to trust for the purpose of DirectAccess authentication it cannot connect successfully. DirectAccess clients and the DirectAccess server almost always receive their certificates from an Active Directory Certificate Services Certificate Authority that is integrated into the domain. This ensures that both client and server trust each other s certificates. To verify that a computer certificate is present and valid on a client running Windows 7 perform the following actions 1. Open a blank Microsoft Management Console by typing mmc into the In The Search Programs And Files text box. 2. Add the Certificates snap-in for the local Computer account. 3. Navigate to the Certificates Local Computer Personal Certificates node and verify that the computer has enrolled a certificate for the intended purposes of Client Authentication and Server Authentication as shown in Figure 10-4. FIGURE 10-4 Verifying the DirectAccess client certificate You can verify the current DirectAccess configuration using several command-line utilities. To verify the DirectAccess client s settings for 6to4 issue the command Netsh interface 6to4 show relay When the client is assigned DirectAccess configuration through Group Policy this command displays one of the public IPv4 addresses assigned to the Direct Access server as the relay address. If the relay setting is set to Default the DirectAccess Group Policy has not 520 CHAPTER 10 DirectAccess and VPN Connections been applied properly. Similarly when DirectAccess configuration is applied through Group Policy you should see one of the two public addresses assigned to .
