[{"data":1,"prerenderedAt":1700},["ShallowReactive",2],{"navigation":3,"blogNavigation":232,"page-\u002Fblog\u002F%E6%8A%80%E6%9C%AF%E6%A0%88\u002F%E5%9B%BD%E4%BA%A7%E5%8C%96%E7%BB%88%E7%AB%AF%E5%8A%9E%E5%85%ACoa%E7%BD%91%E7%BB%9C%E5%87%86%E5%85%A5%E6%95%85%E9%9A%9C%E6%8E%92%E6%9F%A5":418,"\u002Fblog\u002F%E6%8A%80%E6%9C%AF%E6%A0%88\u002F%E5%9B%BD%E4%BA%A7%E5%8C%96%E7%BB%88%E7%AB%AF%E5%8A%9E%E5%85%ACoa%E7%BD%91%E7%BB%9C%E5%87%86%E5%85%A5%E6%95%85%E9%9A%9C%E6%8E%92%E6%9F%A5-surround":1695},[4],{"title":5,"path":6,"stem":7,"children":8,"page":57},"Docs","\u002Fdocs","docs",[9,176,184],{"title":10,"path":11,"stem":12,"children":13,"icon":16},"简单文档","\u002Fdocs\u002F简单文档","docs\u002F1.简单文档\u002F1.index",[14,17,22,58,63,166,171],{"title":15,"path":11,"stem":12,"icon":16},"入门简介","lucide-house",{"title":18,"path":19,"stem":20,"icon":21},"安装与开发","\u002Fdocs\u002F简单文档\u002Finstallation","docs\u002F1.简单文档\u002F2.installation","lucide-play",{"title":23,"path":24,"stem":25,"children":26,"page":57},"开始写作","\u002Fdocs\u002F简单文档\u002Fwriting","docs\u002F1.简单文档\u002F3.writing",[27,32,37,42,47,52],{"title":28,"path":29,"stem":30,"icon":31},"Markdown","\u002Fdocs\u002F简单文档\u002Fwriting\u002Fmarkdown","docs\u002F1.简单文档\u002F3.writing\u002F1.markdown","simple-icons:markdown",{"title":33,"path":34,"stem":35,"icon":36},"页面 frontmatter","\u002Fdocs\u002F简单文档\u002Fwriting\u002Fpages","docs\u002F1.简单文档\u002F3.writing\u002F2.pages","lucide:file-text",{"title":38,"path":39,"stem":40,"icon":41},"目录与文件命名","\u002Fdocs\u002F简单文档\u002Fwriting\u002Ffolders","docs\u002F1.简单文档\u002F3.writing\u002F3.folders","lucide:folder",{"title":43,"path":44,"stem":45,"icon":46},"单页面示例","\u002Fdocs\u002F简单文档\u002Fwriting\u002Ffull-page-example","docs\u002F1.简单文档\u002F3.writing\u002F4.full-page-example","lucide:layout-template",{"title":48,"path":49,"stem":50,"icon":51},"内容检查与测试","\u002Fdocs\u002F简单文档\u002Fwriting\u002Ftest","docs\u002F1.简单文档\u002F3.writing\u002F5.test","lucide:shield-check",{"title":53,"path":54,"stem":55,"icon":56},"在文章中使用组件","\u002Fdocs\u002F简单文档\u002Fwriting\u002Fmdc-content","docs\u002F1.简单文档\u002F3.writing\u002F6.mdc-content","lucide-blocks",false,{"title":59,"path":60,"stem":61,"icon":62},"部署服务","\u002Fdocs\u002F简单文档\u002Fdeployment","docs\u002F1.简单文档\u002F4.deployment","lucide:cloud",{"title":64,"path":65,"stem":66,"children":67,"page":57},"组件特性","\u002Fdocs\u002F简单文档\u002Fcomponents","docs\u002F1.简单文档\u002F5.components",[68,73,77,81,85,89,93,97,101,105,110,114,118,122,126,131,136,141,146,150,154,158,162],{"title":69,"path":70,"stem":71,"icon":72},"常用组件","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fapi","docs\u002F1.简单文档\u002F5.components\u002F1.API","lucide-component",{"title":74,"path":75,"stem":76},"Alert","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Falert","docs\u002F1.简单文档\u002F5.components\u002Falert",{"title":78,"path":79,"stem":80},"Badge","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fbadge","docs\u002F1.简单文档\u002F5.components\u002Fbadge",{"title":82,"path":83,"stem":84},"Button Link","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fbutton-link","docs\u002F1.简单文档\u002F5.components\u002Fbutton-link",{"title":86,"path":87,"stem":88},"Callout","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcallout","docs\u002F1.简单文档\u002F5.components\u002Fcallout",{"title":90,"path":91,"stem":92},"Card","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcard","docs\u002F1.简单文档\u002F5.components\u002Fcard",{"title":94,"path":95,"stem":96},"Card Group","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcard-group","docs\u002F1.简单文档\u002F5.components\u002Fcard-group",{"title":98,"path":99,"stem":100},"Code Group","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcode-group","docs\u002F1.简单文档\u002F5.components\u002Fcode-group",{"title":102,"path":103,"stem":104},"Code Tree","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcode-tree","docs\u002F1.简单文档\u002F5.components\u002Fcode-tree",{"title":106,"path":107,"stem":108,"icon":109},"博客与文档内容块","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fcontent-blocks","docs\u002F1.简单文档\u002F5.components\u002Fcontent-blocks","lucide-panels-top-left",{"title":111,"path":112,"stem":113},"Field","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Ffield","docs\u002F1.简单文档\u002F5.components\u002Ffield",{"title":115,"path":116,"stem":117},"Field Group","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Ffield-group","docs\u002F1.简单文档\u002F5.components\u002Ffield-group",{"title":119,"path":120,"stem":121},"File Tree","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Ffile-tree","docs\u002F1.简单文档\u002F5.components\u002Ffile-tree",{"title":123,"path":124,"stem":125},"Icon","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Ficon","docs\u002F1.简单文档\u002F5.components\u002Ficon",{"title":127,"path":128,"stem":129,"icon":130},"数据、API 与阅读交互组件","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Finteractive-blocks","docs\u002F1.简单文档\u002F5.components\u002Finteractive-blocks","lucide-table-properties",{"title":132,"path":133,"stem":134,"icon":135},"进阶组件交互演示","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Finteractive-showcase","docs\u002F1.简单文档\u002F5.components\u002Finteractive-showcase","lucide-sliders-horizontal",{"title":137,"path":138,"stem":139,"icon":140},"MDC 语法与组件注册","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fmdc-guide","docs\u002F1.简单文档\u002F5.components\u002Fmdc-guide","lucide-file-code",{"title":142,"path":143,"stem":144,"icon":145},"MDC 组件交互演示","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fmdc-showcase","docs\u002F1.简单文档\u002F5.components\u002Fmdc-showcase","lucide-mouse-pointer-click",{"title":147,"path":148,"stem":149},"Playground","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fplayground","docs\u002F1.简单文档\u002F5.components\u002Fplayground",{"title":151,"path":152,"stem":153},"Read More","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fread-more","docs\u002F1.简单文档\u002F5.components\u002Fread-more",{"title":155,"path":156,"stem":157},"Stack","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fstack","docs\u002F1.简单文档\u002F5.components\u002Fstack",{"title":159,"path":160,"stem":161},"Steps","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Fsteps","docs\u002F1.简单文档\u002F5.components\u002Fsteps",{"title":163,"path":164,"stem":165},"Tabs","\u002Fdocs\u002F简单文档\u002Fcomponents\u002Ftabs","docs\u002F1.简单文档\u002F5.components\u002Ftabs",{"title":167,"path":168,"stem":169,"icon":170},"功能与路线图","\u002Fdocs\u002F简单文档\u002F功能与路线图","docs\u002F1.简单文档\u002F6.功能与路线图","lucide:map",{"title":172,"path":173,"stem":174,"icon":175},"Nuxt Studio 现状与运维说明","\u002Fdocs\u002F简单文档\u002Fnuxt-studio-upgrade-plan","docs\u002F1.简单文档\u002F7.nuxt-studio-upgrade-plan","simple-icons:nuxtdotjs",{"title":177,"path":178,"stem":179,"children":180,"icon":183},"无人自助系统","\u002Fdocs\u002F无人自助系统","docs\u002F2.无人自助系统\u002F1.index",[181],{"title":182,"path":178,"stem":179,"icon":183},"介绍","simple-icons:opencollective",{"title":185,"path":186,"stem":187,"children":188,"icon":191},"SwitchOps 交换机巡检","\u002Fdocs\u002Fswitchops交换机巡检","docs\u002F3.SwitchOps交换机巡检\u002F1.index",[189,192,197,202,207,212,217,222,227],{"title":190,"path":186,"stem":187,"icon":191},"产品简介","lucide:house",{"title":193,"path":194,"stem":195,"icon":196},"快速开始","\u002Fdocs\u002Fswitchops交换机巡检\u002Fquick-start","docs\u002F3.SwitchOps交换机巡检\u002F2.quick-start","lucide:rocket",{"title":198,"path":199,"stem":200,"icon":201},"设备清单配置","\u002Fdocs\u002Fswitchops交换机巡检\u002Fdevice-config","docs\u002F3.SwitchOps交换机巡检\u002F3.device-config","lucide:list-tree",{"title":203,"path":204,"stem":205,"icon":206},"图形界面使用","\u002Fdocs\u002Fswitchops交换机巡检\u002Fgui-guide","docs\u002F3.SwitchOps交换机巡检\u002F4.gui-guide","lucide:monitor",{"title":208,"path":209,"stem":210,"icon":211},"命令行使用","\u002Fdocs\u002Fswitchops交换机巡检\u002Fcli-guide","docs\u002F3.SwitchOps交换机巡检\u002F5.cli-guide","lucide:square-terminal",{"title":213,"path":214,"stem":215,"icon":216},"报告与历史数据","\u002Fdocs\u002Fswitchops交换机巡检\u002Freports-history","docs\u002F3.SwitchOps交换机巡检\u002F6.reports-history","lucide:file-chart-column",{"title":218,"path":219,"stem":220,"icon":221},"高级配置","\u002Fdocs\u002Fswitchops交换机巡检\u002Fadvanced-config","docs\u002F3.SwitchOps交换机巡检\u002F7.advanced-config","lucide:settings",{"title":223,"path":224,"stem":225,"icon":226},"Windows 打包部署","\u002Fdocs\u002Fswitchops交换机巡检\u002Fwindows-deployment","docs\u002F3.SwitchOps交换机巡检\u002F8.windows-deployment","lucide:package",{"title":228,"path":229,"stem":230,"icon":231},"故障排查与安全","\u002Fdocs\u002Fswitchops交换机巡检\u002Ftroubleshooting-security","docs\u002F3.SwitchOps交换机巡检\u002F9.troubleshooting-security","lucide:shield-alert",[233],{"title":234,"path":235,"stem":236,"children":237,"page":57},"Blog","\u002Fblog","blog",[238,401,410],{"title":239,"path":240,"stem":241,"children":242,"page":57},"技术栈","\u002Fblog\u002F技术栈","blog\u002F1.技术栈",[243,248,253,258,262,267,271,276,280,284,289,294,299,303,307,311,315,319,324,328,333,338,343,347,352,357,362,367,372,376,381,386,391,396],{"title":244,"path":245,"stem":246,"icon":247},"最近给文档站补了些什么","\u002Fblog\u002F技术栈\u002Festel-docs-recent-updates","blog\u002F1.技术栈\u002F968.estel-docs-recent-updates","lucide:blocks",{"title":249,"path":250,"stem":251,"icon":252},"国产化终端能上办公网，却登录不了 OA：一次网络准入故障排查","\u002Fblog\u002F技术栈\u002F国产化终端办公oa网络准入故障排查","blog\u002F1.技术栈\u002F969.国产化终端办公OA网络准入故障排查","lucide:network",{"title":254,"path":255,"stem":256,"icon":257},"准备新的插件","\u002Fblog\u002F技术栈\u002F新的插件","blog\u002F1.技术栈\u002F970.新的插件","simple-icons:debian",{"title":259,"path":260,"stem":261,"icon":257},"防于未然，先固不破 — Debian 12 快速加固实战","\u002Fblog\u002F技术栈\u002F服务器加固实战","blog\u002F1.技术栈\u002F971.服务器加固实战",{"title":263,"path":264,"stem":265,"icon":266},"nmap高级应用技巧-实战","\u002Fblog\u002F技术栈\u002Fnmap高级应用技巧-实战","blog\u002F1.技术栈\u002F972.nmap高级应用技巧-实战","simple-icons:openstreetmap",{"title":268,"path":269,"stem":270,"icon":266},"nmap高级应用技巧-NSE","\u002Fblog\u002F技术栈\u002Fnmap高级应用技巧-nse","blog\u002F1.技术栈\u002F973.nmap高级应用技巧-NSE",{"title":272,"path":273,"stem":274,"icon":275},"部分vue组件语法预览","\u002Fblog\u002F技术栈\u002F部分组件语法展示","blog\u002F1.技术栈\u002F974.部分组件语法展示","simple-icons:vuedotjs",{"title":277,"path":278,"stem":279,"icon":175},"新的文档渲染样式","\u002Fblog\u002F技术栈\u002F新的文档渲染样式","blog\u002F1.技术栈\u002F975.新的文档渲染样式",{"title":281,"path":282,"stem":283,"icon":175},"Nuxt 微信分享接口","\u002Fblog\u002F技术栈\u002Fnuxt-微信分享接口","blog\u002F1.技术栈\u002F976.Nuxt 微信分享接口",{"title":285,"path":286,"stem":287,"icon":288},"AI复合应用 合同审查","\u002Fblog\u002F技术栈\u002Fai复合应用-合同审查","blog\u002F1.技术栈\u002F978.AI复合应用 合同审查","simple-icons:openai",{"title":290,"path":291,"stem":292,"icon":293},"Kali 安装 GVM","\u002Fblog\u002F技术栈\u002Fkali-安装-gvm","blog\u002F1.技术栈\u002F979.Kali 安装 GVM","simple-icons:kalilinux",{"title":295,"path":296,"stem":297,"icon":298},"GPT-5","\u002Fblog\u002F技术栈\u002Fgpt5","blog\u002F1.技术栈\u002F980.GPT5","simple-icons:powershell",{"title":300,"path":301,"stem":302,"icon":288},"使用 AI 守护内网安全","\u002Fblog\u002F技术栈\u002F使用-ai-守护内网安全","blog\u002F1.技术栈\u002F981.使用 AI 守护内网安全",{"title":304,"path":305,"stem":306,"icon":266},"系统安全扫描工具命令集合","\u002Fblog\u002F技术栈\u002F系统安全扫描工具命令集合","blog\u002F1.技术栈\u002F982.系统安全扫描工具命令集合",{"title":308,"path":309,"stem":310},"用 MDC 组织技术文章","\u002Fblog\u002F技术栈\u002Fmdc-article-example","blog\u002F1.技术栈\u002F983.mdc-article-example",{"title":312,"path":313,"stem":314,"icon":293},"系统安全综合评估报告","\u002Fblog\u002F技术栈\u002F系统安全综合评估报告","blog\u002F1.技术栈\u002F983.系统安全综合评估报告",{"title":316,"path":317,"stem":318},"用交互组件写一份技术说明","\u002Fblog\u002F技术栈\u002Fmdc-interactive-example","blog\u002F1.技术栈\u002F984.mdc-interactive-example",{"title":320,"path":321,"stem":322,"icon":323},"树莓派安装 Kali Linux","\u002Fblog\u002F技术栈\u002F树莓派安装-kali-linux","blog\u002F1.技术栈\u002F984.树莓派安装 Kali Linux","simple-icons:raspberrypi",{"title":325,"path":326,"stem":327,"icon":175},"Nuxt UI Pro","\u002Fblog\u002F技术栈\u002Fnuxt-ui-pro","blog\u002F1.技术栈\u002F985.Nuxt UI Pro",{"title":329,"path":330,"stem":331,"icon":332},"Supabase 阿里云短信","\u002Fblog\u002F技术栈\u002Fsupabase-阿里云短信","blog\u002F1.技术栈\u002F986.Supabase 阿里云短信","simple-icons:alibabacloud",{"title":334,"path":335,"stem":336,"icon":337},"Coolify","\u002Fblog\u002F技术栈\u002Fcoolify","blog\u002F1.技术栈\u002F987.Coolify","simple-icons:chai",{"title":339,"path":340,"stem":341,"icon":342},"Python 代码规范","\u002Fblog\u002F技术栈\u002Fpython-代码规范","blog\u002F1.技术栈\u002F988.Python 代码规范","simple-icons:python",{"title":344,"path":345,"stem":346,"icon":175},"Nuxt3 代码规范","\u002Fblog\u002F技术栈\u002Fnuxt3-代码规范","blog\u002F1.技术栈\u002F989.Nuxt3 代码规范",{"title":348,"path":349,"stem":350,"icon":351},"Linux 系统 Swap 分区配置指南","\u002Fblog\u002F技术栈\u002Flinux-系统-swap-分区配置指南","blog\u002F1.技术栈\u002F990.Linux 系统 Swap 分区配置指南","simple-icons:linux",{"title":353,"path":354,"stem":355,"icon":356},"从Supabase迁移到Appwrite","\u002Fblog\u002F技术栈\u002F从supabase迁移到appwrite","blog\u002F1.技术栈\u002F991.从Supabase迁移到Appwrite","simple-icons:supabase",{"title":358,"path":359,"stem":360,"icon":361},"AppWrite 项目资源占用情况","\u002Fblog\u002F技术栈\u002Fappwrite-项目资源占用情况","blog\u002F1.技术栈\u002F992.AppWrite 项目资源占用情况","simple-icons:appwrite",{"title":363,"path":364,"stem":365,"icon":366},"Docker 里配置hosts","\u002Fblog\u002F技术栈\u002Fdocker-里配置hosts","blog\u002F1.技术栈\u002F993.Docker 里配置hosts","simple-icons:docker",{"title":368,"path":369,"stem":370,"icon":371},"MySQL 中如何忽略表名的大小写","\u002Fblog\u002F技术栈\u002Fmysql-中如何忽略表名的大小写","blog\u002F1.技术栈\u002F994.MySQL 中如何忽略表名的大小写","simple-icons:mysql",{"title":373,"path":374,"stem":375,"icon":257},"Debian 12 安装nodejs","\u002Fblog\u002F技术栈\u002Fdebian-12-安装nodejs","blog\u002F1.技术栈\u002F995.Debian 12 安装nodejs",{"title":377,"path":378,"stem":379,"icon":380},"Dify + Supabase：打造带数据库的AI问答机器人","\u002Fblog\u002F技术栈\u002Fdify-supabase：打造带数据库的ai问答机器人","blog\u002F1.技术栈\u002F996.Dify + Supabase：打造带数据库的AI问答机器人","simple-icons:reactbootstrap",{"title":382,"path":383,"stem":384,"icon":385},"安装 VS Code到浏览器 -- Code Server","\u002Fblog\u002F技术栈\u002F安装-vs-code到浏览器-code-server-copy","blog\u002F1.技术栈\u002F996.安装 VS Code到浏览器 -- Code Server copy","simple-icons:visualstudiocode",{"title":387,"path":388,"stem":389,"icon":390},"Debian 12 云服务器初始安全设置与优化指南","\u002Fblog\u002F技术栈\u002Fdebian-12-云服务器初始安全设置与优化指南","blog\u002F1.技术栈\u002F997.Debian 12 云服务器初始安全设置与优化指南","lucide-server",{"title":392,"path":393,"stem":394,"icon":395},"Iperf3 万兆网络打流测试指南","\u002Fblog\u002F技术栈\u002Fiperf3-万兆网络打流测试指南","blog\u002F1.技术栈\u002F998.Iperf3 万兆网络打流测试指南","lucide-network",{"title":397,"path":398,"stem":399,"icon":400},"GROK3 and Deepseek","\u002Fblog\u002F技术栈\u002Fgrok3-and-deepseek","blog\u002F1.技术栈\u002F999.GROK3-and-Deepseek","lucide-brain",{"title":402,"path":403,"stem":404,"children":405,"page":57},"AI","\u002Fblog\u002Fai","blog\u002F2.AI",[406],{"title":407,"path":408,"stem":409,"icon":337},"AI最佳实践","\u002Fblog\u002Fai\u002Fai","blog\u002F2.AI\u002F01.AI",{"title":411,"path":412,"stem":413,"children":414,"page":57},"生活","\u002Fblog\u002F生活","blog\u002F3.生活",[415],{"title":411,"path":416,"stem":417,"icon":337},"\u002Fblog\u002F生活\u002F生活","blog\u002F3.生活\u002F01.生活",{"id":419,"title":249,"body":420,"category":1684,"date":1685,"description":1686,"draft":57,"extension":1687,"icon":1684,"img":1688,"links":1684,"meta":1689,"navigation":1690,"path":250,"rawbody":1691,"readingMinutes":1692,"seo":1693,"stem":251,"tags":1684,"updated":1684,"__hash__":1694},"blog\u002Fblog\u002F1.技术栈\u002F969.国产化终端办公OA网络准入故障排查.md",{"type":421,"value":422,"toc":1671},"minimark",[423,427,430,433,445,450,453,456,459,462,465,468,472,475,478,481,484,487,497,500,503,506,510,513,516,519,522,525,528,531,534,538,541,544,547,550,553,556,559,567,570,574,577,580,583,591,594,597,614,617,620,624,627,630,636,639,642,645,648,651,654,657,660,665,669,672,675,680,683,1168,1171,1552,1555,1560,1564,1567,1570,1573,1576,1579,1582,1586,1589,1592,1595,1598,1601,1604,1607,1612,1615,1618,1622,1625,1628,1631,1634,1637,1659,1662,1665,1668],[424,425,426],"p",{},"最近处理了一起比较有代表性的终端故障。",[424,428,429],{},"一台国产化办公电脑，基础网络正常，内部办公网可以正常访问，但某办公 OA 等部分业务系统始终无法登录。乍一看像是网络问题，实际排查下来，却牵扯到了国产操作系统、Windows 虚拟化、安全桌面、网络准入以及 IP 地址识别等多个环节。",[424,431,432],{},"整个过程还是比较有意思的，简单记录一下。",[434,435,436],"blockquote",{},[424,437,438,439,444],{},"如果你遇到的是类似问题，只想直接看解决办法，可以直接跳到本文第六部分",[440,441,443],"a",{"href":442},"#%E5%85%AD%E8%B0%83%E6%95%B4%E7%BD%91%E7%BB%9C%E7%BB%93%E6%9E%84","「调整网络结构」","。",[446,447,449],"h2",{"id":448},"一故障现象","一、故障现象",[424,451,452],{},"设备操作系统为银河麒麟。用户反馈：",[424,454,455],{},"办公网可以正常访问，但某办公 OA 系统无法正常登录，部分新增安全准入要求的业务系统也存在类似情况。",[424,457,458],{},"首先做了几个基础判断。",[424,460,461],{},"在其他电脑上使用同一账号登录某办公 OA，可以正常使用，因此基本可以排除用户账号权限异常。",[424,463,464],{},"办公网访问正常，也说明终端到内部网络的基础链路整体没有问题。",[424,466,467],{},"问题范围逐渐缩小到了这台国产化终端自身。",[446,469,471],{"id":470},"二先说一下这台电脑的特殊之处","二、先说一下这台电脑的特殊之处",[424,473,474],{},"银河麒麟属于国产 Linux 操作系统。",[424,476,477],{},"为了兼容大量 Windows 专用办公软件，部分国产化终端会通过虚拟化技术，在 Linux 系统底层运行一套 Windows 环境，同时借助“融合桌面”技术，把 Windows 软件直接展示在国产系统桌面中。",[424,479,480],{},"从普通用户的角度看，Word、浏览器以及其他 Windows 软件似乎只是麒麟系统中的普通应用。",[424,482,483],{},"但从技术角度来看，并不是这么回事。",[424,485,486],{},"底层实际上仍然存在两套彼此独立的操作系统：",[488,489,490,494],"ul",{},[491,492,493],"li",{},"一套是银河麒麟 Linux；",[491,495,496],{},"另一套是运行在虚拟化环境中的 Windows。",[424,498,499],{},"两套系统的内核不同、网络栈不同、虚拟网卡不同，IP 地址通常也不同。",[424,501,502],{},"因此，在排查网络问题时，完全可以把虚拟化 Windows 理解成局域网里的“另外一台电脑”。",[424,504,505],{},"这一点，后来成为了解决问题的关键。",[446,507,509],{"id":508},"三问题开始指向安全准入","三、问题开始指向“安全准入”",[424,511,512],{},"近期，相关单位正在统一部署新版终端安全桌面及网络准入系统。",[424,514,515],{},"而该安全软件主要面向 Windows 环境，无法直接安装在银河麒麟 Linux 系统中。",[424,517,518],{},"于是现场尝试将安全桌面安装到虚拟化 Windows 环境中。",[424,520,521],{},"安装虽然能够完成，但随即出现了新的问题：",[424,523,524],{},"安全客户端始终无法正常认证，并提示无法正确识别办公地点。",[424,526,527],{},"与此同时，浏览器访问某办公 OA 时，也会弹出准入检测页面，提示终端未满足相关安全要求。",[424,529,530],{},"到这里，基本可以判断：",[424,532,533],{},"问题并不是单纯的“某办公 OA 打不开”，而是终端没有顺利通过新部署的网络准入认证。",[446,535,537],{"id":536},"四现场排查","四、现场排查",[424,539,540],{},"到现场后，首先重新访问某办公 OA 系统。",[424,542,543],{},"页面随即弹出准入检查提示，一方面提示缺少相关准入组件，另一方面还检测到当前用户密码安全等级不足。",[424,545,546],{},"先按照要求修改了用户密码，将原密码调整为符合复杂度要求的强密码。",[424,548,549],{},"重启电脑后再次测试。",[424,551,552],{},"问题依旧。",[424,554,555],{},"随后重新安装安全桌面客户端。",[424,557,558],{},"客户端启动后要求进行用户认证，但始终认证失败，其中一个比较关键的提示是：",[434,560,561],{},[424,562,563],{},[564,565,566],"strong",{},"无法识别当前办公地点。",[424,568,569],{},"看到这个提示后，开始把排查重点转向 IP 地址。",[446,571,573],{"id":572},"五找到关键原因ip-不对","五、找到关键原因：IP 不对",[424,575,576],{},"重新检查虚拟化 Windows 的网络配置后发现：",[424,578,579],{},"虚拟 Windows 当时通过虚拟网卡获取网络地址，使用的并不是单位正常分配的办公网 IP。",[424,581,582],{},"也就是说：",[488,584,585,588],{},[491,586,587],{},"银河麒麟宿主系统拥有正规的办公 IP；",[491,589,590],{},"而真正运行安全桌面和浏览器的 Windows 虚拟环境，使用的却是另外一个虚拟网络地址。",[424,592,593],{},"这在普通网络访问场景下未必有问题。",[424,595,596],{},"但安全准入系统往往不仅判断“网络通不通”，还可能综合判断：",[488,598,599,602,605,608,611],{},[491,600,601],{},"终端 IP 所属地址段；",[491,603,604],{},"办公区域；",[491,606,607],{},"终端身份；",[491,609,610],{},"安全客户端状态；",[491,612,613],{},"账号认证信息。",[424,615,616],{},"这样一来问题就比较清楚了。",[424,618,619],{},"安全桌面虽然安装在 Windows 中，但安全系统看到的 Windows IP 并不属于预期的办公地址范围，于是无法正确判断办公地点，最终导致认证失败。",[446,621,623],{"id":622},"六调整网络结构","六、调整网络结构",[424,625,626],{},"确认思路后，对网络配置进行了调整。",[424,628,629],{},"首先，将银河麒麟宿主系统原先占用的办公 IP 调整出去。",[424,631,632,633,444],{},"随后把 Windows 虚拟机的网络模式由原来的虚拟网络方式调整为",[564,634,635],{},"桥接模式",[424,637,638],{},"桥接之后，Windows 虚拟机不再只是通过宿主机间接访问网络，而是可以像局域网中的一台独立物理电脑一样直接接入办公网络。",[424,640,641],{},"最后，将原本分配给银河麒麟宿主机的正规办公 IP，手动配置到了 Windows 虚拟环境中。",[424,643,644],{},"重新加载网络。",[424,646,647],{},"再次打开安全桌面。",[424,649,650],{},"认证通过。",[424,652,653],{},"办公地点识别正常。",[424,655,656],{},"随后重新访问某办公 OA 系统，准入检测恢复正常，业务系统也随之可以正常使用。",[424,658,659],{},"至此，故障解决。",[434,661,662],{},[424,663,664],{},"调整静态 IP 前，应先确认地址分配、交换机端口策略和准入平台的绑定关系，避免产生 IP 冲突或绕过既有安全策略。",[446,666,668],{"id":667},"七问题到底出在哪里","七、问题到底出在哪里？",[424,670,671],{},"回头来看，这次问题其实并不复杂。",[424,673,674],{},"核心原因可以概括成一句话：",[424,676,677],{},[564,678,679],{},"安全桌面运行在虚拟 Windows 中，但虚拟 Windows 使用的 IP 地址不符合网络准入系统的办公地址识别规则。",[424,681,682],{},"原来的网络关系大致可以理解为：",[424,684,685],{},[686,687,699,703,1145,1159],"svg",{"ariaRoleDescription":688,"className":690,"id":692,"role":693,"style":694,"viewBox":695,"width":696,"xmlns":697,"xmlnsXLink":698},[689],"flowchart-v2",[691],"flowchart","mermaid-0","graphics-document document","max-width: 204px;","0 0 204 590","100%","http:\u002F\u002Fwww.w3.org\u002F2000\u002Fsvg","http:\u002F\u002Fwww.w3.org\u002F1999\u002Fxlink",[700,701,702],"style",{},"#mermaid-0{font-family:arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-0 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-0 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-0 .error-icon{fill:#552222;}#mermaid-0 .error-text{fill:#552222;stroke:#552222;}#mermaid-0 .edge-thickness-normal{stroke-width:1px;}#mermaid-0 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-0 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-0 .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-0 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-0 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-0 .marker{fill:#333333;stroke:#333333;}#mermaid-0 .marker.cross{stroke:#333333;}#mermaid-0 svg{font-family:arial,sans-serif;font-size:16px;}#mermaid-0 p{margin:0;}#mermaid-0 .label{font-family:arial,sans-serif;color:#333;}#mermaid-0 .cluster-label text{fill:#333;}#mermaid-0 .cluster-label span{color:#333;}#mermaid-0 .cluster-label span p{background-color:transparent;}#mermaid-0 .label text,#mermaid-0 span{fill:#333;color:#333;}#mermaid-0 .node rect,#mermaid-0 .node circle,#mermaid-0 .node ellipse,#mermaid-0 .node polygon,#mermaid-0 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-0 .rough-node .label text,#mermaid-0 .node .label text,#mermaid-0 .image-shape .label,#mermaid-0 .icon-shape .label{text-anchor:middle;}#mermaid-0 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-0 .rough-node .label,#mermaid-0 .node .label,#mermaid-0 .image-shape .label,#mermaid-0 .icon-shape .label{text-align:center;}#mermaid-0 .node.clickable{cursor:pointer;}#mermaid-0 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-0 .arrowheadPath{fill:#333333;}#mermaid-0 .edgePaths .path{stroke:#333333;stroke-width:1px;}#mermaid-0 .flowchart-link{stroke:#333333;fill:none;}#mermaid-0 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-0 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-0 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-0 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-0 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-0 .cluster text{fill:#333;}#mermaid-0 .cluster span{color:#333;}#mermaid-0 .node .collapsed-indicator{fill:#aaaa33;stroke:none;opacity:0.6;}#mermaid-0 .node .collapsed-separator{stroke:#aaaa33;stroke-width:0.75px;}#mermaid-0 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-0 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-0 rect.text{fill:none;stroke-width:0;}#mermaid-0 .icon-shape,#mermaid-0 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-0 .icon-shape p,#mermaid-0 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-0 .icon-shape .label rect,#mermaid-0 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-0 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-0 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-0 .node .neo-node{stroke:#9370DB;}#mermaid-0 [data-look=\"neo\"].node rect,#mermaid-0 [data-look=\"neo\"].cluster rect,#mermaid-0 [data-look=\"neo\"].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-0 [data-look=\"neo\"].swimlane.cluster rect{filter:none;}#mermaid-0 [data-look=\"neo\"].node path{stroke:#9370DB;stroke-width:1px;}#mermaid-0 [data-look=\"neo\"].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-0 [data-look=\"neo\"].node .neo-line path{stroke:#9370DB;filter:none;}#mermaid-0 [data-look=\"neo\"].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-0 [data-look=\"neo\"].node circle .state-start{fill:#000000;}#mermaid-0 [data-look=\"neo\"].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-0 [data-look=\"neo\"].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-0 :root{--mermaid-font-family:arial,sans-serif;}",[704,705,706,723,732,746,756,765,773,781,789,802,809,821,830],"g",{},[707,708,716],"marker",{"className":709,"id":710,"markerHeight":711,"markerUnits":712,"markerWidth":711,"orient":713,"refX":714,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-pointEnd","8","userSpaceOnUse","auto","5","0 0 10 10",[717,718],"path",{"className":719,"d":721,"style":722},[720],"arrowMarkerPath","M 0 0 L 10 5 L 0 10 z","stroke-width: 1; stroke-dasharray: 1, 0;",[707,724,728],{"className":725,"id":726,"markerHeight":711,"markerUnits":712,"markerWidth":711,"orient":713,"refX":727,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-pointStart","4.5",[717,729],{"className":730,"d":731,"style":722},[720],"M 0 5 L 10 10 L 10 0 z",[707,733,741],{"className":734,"id":735,"markerHeight":736,"markerUnits":712,"markerWidth":737,"orient":713,"refX":738,"refY":739,"viewBox":740},[689,707],"mermaid-0_flowchart-v2-pointEnd-margin","14","10.5","11.5","7","0 0 11.5 14",[717,742],{"className":743,"d":744,"style":745},[720],"M 0 0 L 11.5 7 L 0 14 z","stroke-width: 0; stroke-dasharray: 1, 0;",[707,747,751],{"className":748,"id":749,"markerHeight":736,"markerUnits":712,"markerWidth":738,"orient":713,"refX":750,"refY":739,"viewBox":740},[689,707],"mermaid-0_flowchart-v2-pointStart-margin","1",[752,753],"polygon",{"className":754,"points":755,"style":745},[720],"0,7 11.5,14 11.5,0",[707,757,761],{"className":758,"id":759,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":760,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-circleEnd","11",[762,763],"circle",{"className":764,"cx":714,"cy":714,"r":714,"style":722},[720],[707,766,770],{"className":767,"id":768,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":769,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-circleStart","-1",[762,771],{"className":772,"cx":714,"cy":714,"r":714,"style":722},[720],[707,774,778],{"className":775,"id":776,"markerHeight":736,"markerUnits":712,"markerWidth":736,"orient":713,"refX":777,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-circleEnd-margin","12.25",[762,779],{"className":780,"cx":714,"cy":714,"r":714,"style":745},[720],[707,782,786],{"className":783,"id":784,"markerHeight":736,"markerUnits":712,"markerWidth":736,"orient":713,"refX":785,"refY":714,"viewBox":715},[689,707],"mermaid-0_flowchart-v2-circleStart-margin","-2",[762,787],{"className":788,"cx":714,"cy":714,"r":714,"style":745},[720],[707,790,797],{"className":791,"id":793,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":794,"refY":795,"viewBox":796},[689,707,792],"cross","mermaid-0_flowchart-v2-crossEnd","12","5.2","0 0 11 11",[717,798],{"className":799,"d":800,"style":801},[720],"M 1,1 l 9,9 M 10,1 l -9,9","stroke-width: 2; stroke-dasharray: 1, 0;",[707,803,806],{"className":804,"id":805,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":769,"refY":795,"viewBox":796},[689,707,792],"mermaid-0_flowchart-v2-crossStart",[717,807],{"className":808,"d":800,"style":801},[720],[707,810,816],{"className":811,"id":812,"markerHeight":794,"markerUnits":712,"markerWidth":794,"orient":713,"refX":813,"refY":814,"viewBox":815},[689,707,792],"mermaid-0_flowchart-v2-crossEnd-margin","17.7","7.5","0 0 15 15",[717,817],{"className":818,"d":819,"style":820},[720],"M 1,1 L 14,14 M 1,14 L 14,1","stroke-width: 2.5;",[707,822,826],{"className":823,"id":824,"markerHeight":794,"markerUnits":712,"markerWidth":794,"orient":713,"refX":825,"refY":814,"viewBox":815},[689,707,792],"mermaid-0_flowchart-v2-crossStart-margin","-3.5",[717,827],{"className":828,"d":819,"style":829},[720],"stroke-width: 2.5; stroke-dasharray: 1, 0;",[704,831,834,838,885,969],{"className":832},[833],"root",[704,835],{"className":836},[837],"clusters",[704,839,842,857,864,871,878],{"className":840},[841],"edgePaths",[717,843],{"className":844,"d":848,"style":849,"dataEdge":850,"dataEt":851,"dataId":852,"dataLook":853,"dataPoints":854,"id":855,"markerEnd":856},[845,845,846,846,847],"edge-pattern-solid","edge-thickness-normal","flowchart-link","M102,62L102,66.167C102,70.333,102,78.667,102,86.333C102,94,102,101,102,104.5L102,108",";","true","edge","L_A_B_0","classic","W3sieCI6MTAyLCJ5Ijo2Mn0seyJ4IjoxMDIsInkiOjg3fSx7IngiOjEwMiwieSI6MTEyfV0=","mermaid-0-L_A_B_0","url(#mermaid-0_flowchart-v2-pointEnd)",[717,858],{"className":859,"d":860,"style":849,"dataEdge":850,"dataEt":851,"dataId":861,"dataLook":853,"dataPoints":862,"id":863,"markerEnd":856},[845,845,846,846,847],"M102,166L102,170.167C102,174.333,102,182.667,102,190.333C102,198,102,205,102,208.5L102,212","L_B_C_0","W3sieCI6MTAyLCJ5IjoxNjZ9LHsieCI6MTAyLCJ5IjoxOTF9LHsieCI6MTAyLCJ5IjoyMTZ9XQ==","mermaid-0-L_B_C_0",[717,865],{"className":866,"d":867,"style":849,"dataEdge":850,"dataEt":851,"dataId":868,"dataLook":853,"dataPoints":869,"id":870,"markerEnd":856},[845,845,846,846,847],"M102,270L102,274.167C102,278.333,102,286.667,102,294.333C102,302,102,309,102,312.5L102,316","L_C_D_0","W3sieCI6MTAyLCJ5IjoyNzB9LHsieCI6MTAyLCJ5IjoyOTV9LHsieCI6MTAyLCJ5IjozMjB9XQ==","mermaid-0-L_C_D_0",[717,872],{"className":873,"d":874,"style":849,"dataEdge":850,"dataEt":851,"dataId":875,"dataLook":853,"dataPoints":876,"id":877,"markerEnd":856},[845,845,846,846,847],"M102,374L102,378.167C102,382.333,102,390.667,102,398.333C102,406,102,413,102,416.5L102,420","L_D_E_0","W3sieCI6MTAyLCJ5IjozNzR9LHsieCI6MTAyLCJ5IjozOTl9LHsieCI6MTAyLCJ5Ijo0MjR9XQ==","mermaid-0-L_D_E_0",[717,879],{"className":880,"d":881,"style":849,"dataEdge":850,"dataEt":851,"dataId":882,"dataLook":853,"dataPoints":883,"id":884,"markerEnd":856},[845,845,846,846,847],"M102,478L102,482.167C102,486.333,102,494.667,102,502.333C102,510,102,517,102,520.5L102,524","L_E_F_0","W3sieCI6MTAyLCJ5Ijo0Nzh9LHsieCI6MTAyLCJ5Ijo1MDN9LHsieCI6MTAyLCJ5Ijo1Mjh9XQ==","mermaid-0-L_E_F_0",[704,886,889,913,927,941,955],{"className":887},[888],"edgeLabels",[704,890,893],{"className":891},[892],"edgeLabel",[704,894,898],{"className":895,"transform":897,"dataId":852},[896],"label","translate(0, 0)",[899,900,902],"foreignObject",{"height":901,"width":901},"0",[903,904,909],"div",{"style":905,"xmlns":906,"className":907},"display: table-cell; white-space: nowrap; line-height: 1.5; max-width: 200px; text-align: center;","http:\u002F\u002Fwww.w3.org\u002F1999\u002Fxhtml",[908],"labelBkg",[910,911],"span",{"className":912},[892],[704,914,916],{"className":915},[892],[704,917,919],{"className":918,"transform":897,"dataId":861},[896],[899,920,921],{"height":901,"width":901},[903,922,924],{"style":905,"xmlns":906,"className":923},[908],[910,925],{"className":926},[892],[704,928,930],{"className":929},[892],[704,931,933],{"className":932,"transform":897,"dataId":868},[896],[899,934,935],{"height":901,"width":901},[903,936,938],{"style":905,"xmlns":906,"className":937},[908],[910,939],{"className":940},[892],[704,942,944],{"className":943},[892],[704,945,947],{"className":946,"transform":897,"dataId":875},[896],[899,948,949],{"height":901,"width":901},[903,950,952],{"style":905,"xmlns":906,"className":951},[908],[910,953],{"className":954},[892],[704,956,958],{"className":957},[892],[704,959,961],{"className":960,"transform":897,"dataId":882},[896],[899,962,963],{"height":901,"width":901},[903,964,966],{"style":905,"xmlns":906,"className":965},[908],[910,967],{"className":968},[892],[704,970,973,1010,1037,1064,1091,1118],{"className":971},[972],"nodes",[704,974,980,991],{"className":975,"transform":978,"dataLook":853,"id":979},[976,977],"default","node","translate(102, 35)","mermaid-0-flowchart-A-0",[981,982],"rect",{"className":983,"height":986,"style":987,"width":988,"x":989,"y":990},[984,985],"basic","label-container","54","","172","-86","-27",[704,992,995,997],{"className":993,"transform":994,"style":987},[896],"translate(-56, -12)",[981,996],{},[899,998,1001],{"height":999,"width":1000},"24","112",[903,1002,1003],{"style":905,"xmlns":906},[910,1004,1007],{"className":1005},[1006],"nodeLabel",[424,1008,1009],{},"银河麒麟宿主机",[704,1011,1015,1020],{"className":1012,"transform":1013,"dataLook":853,"id":1014},[976,977],"translate(102, 139)","mermaid-0-flowchart-B-1",[981,1016],{"className":1017,"height":986,"style":987,"width":1018,"x":1019,"y":990},[984,985],"143.5625","-71.78125",[704,1021,1024,1026],{"className":1022,"transform":1023,"style":987},[896],"translate(-41.78125, -12)",[981,1025],{},[899,1027,1029],{"height":999,"width":1028},"83.5625",[903,1030,1031],{"style":905,"xmlns":906},[910,1032,1034],{"className":1033},[1006],[424,1035,1036],{},"正规办公 IP",[704,1038,1042,1047],{"className":1039,"transform":1040,"dataLook":853,"id":1041},[976,977],"translate(102, 243)","mermaid-0-flowchart-C-3",[981,1043],{"className":1044,"height":986,"style":987,"width":1045,"x":1046,"y":990},[984,985],"124","-62",[704,1048,1051,1053],{"className":1049,"transform":1050,"style":987},[896],"translate(-32, -12)",[981,1052],{},[899,1054,1056],{"height":999,"width":1055},"64",[903,1057,1058],{"style":905,"xmlns":906},[910,1059,1061],{"className":1060},[1006],[424,1062,1063],{},"虚拟网络",[704,1065,1069,1074],{"className":1066,"transform":1067,"dataLook":853,"id":1068},[976,977],"translate(102, 347)","mermaid-0-flowchart-D-5",[981,1070],{"className":1071,"height":986,"style":987,"width":1072,"x":1073,"y":990},[984,985],"177.359375","-88.6796875",[704,1075,1078,1080],{"className":1076,"transform":1077,"style":987},[896],"translate(-58.6796875, -12)",[981,1079],{},[899,1081,1083],{"height":999,"width":1082},"117.359375",[903,1084,1085],{"style":905,"xmlns":906},[910,1086,1088],{"className":1087},[1006],[424,1089,1090],{},"Windows 虚拟机",[704,1092,1096,1101],{"className":1093,"transform":1094,"dataLook":853,"id":1095},[976,977],"translate(102, 451)","mermaid-0-flowchart-E-7",[981,1097],{"className":1098,"height":986,"style":987,"width":1099,"x":1100,"y":990},[984,985],"111.5625","-55.78125",[704,1102,1105,1107],{"className":1103,"transform":1104,"style":987},[896],"translate(-25.78125, -12)",[981,1106],{},[899,1108,1110],{"height":999,"width":1109},"51.5625",[903,1111,1112],{"style":905,"xmlns":906},[910,1113,1115],{"className":1114},[1006],[424,1116,1117],{},"虚拟 IP",[704,1119,1123,1128],{"className":1120,"transform":1121,"dataLook":853,"id":1122},[976,977],"translate(102, 555)","mermaid-0-flowchart-F-9",[981,1124],{"className":1125,"height":986,"style":987,"width":1126,"x":1127,"y":990},[984,985],"188","-94",[704,1129,1132,1134],{"className":1130,"transform":1131,"style":987},[896],"translate(-64, -12)",[981,1133],{},[899,1135,1137],{"height":999,"width":1136},"128",[903,1138,1139],{"style":905,"xmlns":906},[910,1140,1142],{"className":1141},[1006],[424,1143,1144],{},"安全桌面认证失败",[1146,1147,1148],"defs",{},[1149,1150,1153],"filter",{"height":1151,"id":1152,"width":1151},"130%","mermaid-0-drop-shadow",[1154,1155],"feDropShadow",{"dx":1156,"dy":1156,"floodColor":1157,"floodOpacity":1158,"stdDeviation":901},"4","#000000","0.06",[1146,1160,1161],{},[1149,1162,1165],{"height":1163,"id":1164,"width":1163},"150%","mermaid-0-drop-shadow-small",[1154,1166],{"dx":1167,"dy":1167,"floodColor":1157,"floodOpacity":1158,"stdDeviation":901},"2",[424,1169,1170],{},"调整后变成：",[424,1172,1173],{},[686,1174,1180,1183,1538,1545],{"ariaRoleDescription":1175,"className":1176,"id":1177,"role":693,"style":1178,"viewBox":1179,"width":696,"xmlns":697,"xmlnsXLink":698},[689],[691],"mermaid-1","max-width: 276px;","0 0 276 614",[700,1181,1182],{},"#mermaid-1{font-family:arial,sans-serif;font-size:16px;fill:#333;}@keyframes edge-animation-frame{from{stroke-dashoffset:0;}}@keyframes dash{to{stroke-dashoffset:0;}}#mermaid-1 .edge-animation-slow{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 50s linear infinite;stroke-linecap:round;}#mermaid-1 .edge-animation-fast{stroke-dasharray:9,5!important;stroke-dashoffset:900;animation:dash 20s linear infinite;stroke-linecap:round;}#mermaid-1 .error-icon{fill:#552222;}#mermaid-1 .error-text{fill:#552222;stroke:#552222;}#mermaid-1 .edge-thickness-normal{stroke-width:1px;}#mermaid-1 .edge-thickness-thick{stroke-width:3.5px;}#mermaid-1 .edge-pattern-solid{stroke-dasharray:0;}#mermaid-1 .edge-thickness-invisible{stroke-width:0;fill:none;}#mermaid-1 .edge-pattern-dashed{stroke-dasharray:3;}#mermaid-1 .edge-pattern-dotted{stroke-dasharray:2;}#mermaid-1 .marker{fill:#333333;stroke:#333333;}#mermaid-1 .marker.cross{stroke:#333333;}#mermaid-1 svg{font-family:arial,sans-serif;font-size:16px;}#mermaid-1 p{margin:0;}#mermaid-1 .label{font-family:arial,sans-serif;color:#333;}#mermaid-1 .cluster-label text{fill:#333;}#mermaid-1 .cluster-label span{color:#333;}#mermaid-1 .cluster-label span p{background-color:transparent;}#mermaid-1 .label text,#mermaid-1 span{fill:#333;color:#333;}#mermaid-1 .node rect,#mermaid-1 .node circle,#mermaid-1 .node ellipse,#mermaid-1 .node polygon,#mermaid-1 .node path{fill:#ECECFF;stroke:#9370DB;stroke-width:1px;}#mermaid-1 .rough-node .label text,#mermaid-1 .node .label text,#mermaid-1 .image-shape .label,#mermaid-1 .icon-shape .label{text-anchor:middle;}#mermaid-1 .node .katex path{fill:#000;stroke:#000;stroke-width:1px;}#mermaid-1 .rough-node .label,#mermaid-1 .node .label,#mermaid-1 .image-shape .label,#mermaid-1 .icon-shape .label{text-align:center;}#mermaid-1 .node.clickable{cursor:pointer;}#mermaid-1 .root .anchor path{fill:#333333!important;stroke-width:0;stroke:#333333;}#mermaid-1 .arrowheadPath{fill:#333333;}#mermaid-1 .edgePaths .path{stroke:#333333;stroke-width:1px;}#mermaid-1 .flowchart-link{stroke:#333333;fill:none;}#mermaid-1 .edgeLabel{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-1 .edgeLabel p{background-color:rgba(232,232,232, 0.8);}#mermaid-1 .edgeLabel rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-1 .labelBkg{background-color:rgba(232, 232, 232, 0.5);}#mermaid-1 .cluster rect{fill:#ffffde;stroke:#aaaa33;stroke-width:1px;}#mermaid-1 .cluster text{fill:#333;}#mermaid-1 .cluster span{color:#333;}#mermaid-1 .node .collapsed-indicator{fill:#aaaa33;stroke:none;opacity:0.6;}#mermaid-1 .node .collapsed-separator{stroke:#aaaa33;stroke-width:0.75px;}#mermaid-1 div.mermaidTooltip{position:absolute;text-align:center;max-width:200px;padding:2px;font-family:arial,sans-serif;font-size:12px;background:hsl(80, 100%, 96.2745098039%);border:1px solid #aaaa33;border-radius:2px;pointer-events:none;z-index:100;}#mermaid-1 .flowchartTitleText{text-anchor:middle;font-size:18px;fill:#333;}#mermaid-1 rect.text{fill:none;stroke-width:0;}#mermaid-1 .icon-shape,#mermaid-1 .image-shape{background-color:rgba(232,232,232, 0.8);text-align:center;}#mermaid-1 .icon-shape p,#mermaid-1 .image-shape p{background-color:rgba(232,232,232, 0.8);padding:2px;}#mermaid-1 .icon-shape .label rect,#mermaid-1 .image-shape .label rect{opacity:0.5;background-color:rgba(232,232,232, 0.8);fill:rgba(232,232,232, 0.8);}#mermaid-1 .label-icon{display:inline-block;height:1em;overflow:visible;vertical-align:-0.125em;}#mermaid-1 .node .label-icon path{fill:currentColor;stroke:revert;stroke-width:revert;}#mermaid-1 .node .neo-node{stroke:#9370DB;}#mermaid-1 [data-look=\"neo\"].node rect,#mermaid-1 [data-look=\"neo\"].cluster rect,#mermaid-1 [data-look=\"neo\"].node polygon{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-1 [data-look=\"neo\"].swimlane.cluster rect{filter:none;}#mermaid-1 [data-look=\"neo\"].node path{stroke:#9370DB;stroke-width:1px;}#mermaid-1 [data-look=\"neo\"].node .outer-path{filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-1 [data-look=\"neo\"].node .neo-line path{stroke:#9370DB;filter:none;}#mermaid-1 [data-look=\"neo\"].node circle{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-1 [data-look=\"neo\"].node circle .state-start{fill:#000000;}#mermaid-1 [data-look=\"neo\"].icon-shape .icon{fill:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-1 [data-look=\"neo\"].icon-shape .icon-neo path{stroke:#9370DB;filter:drop-shadow(1px 2px 2px rgba(185, 185, 185, 1));}#mermaid-1 :root{--mermaid-font-family:arial,sans-serif;}",[704,1184,1185,1192,1199,1206,1213,1220,1227,1234,1241,1248,1255,1262,1269],{},[707,1186,1189],{"className":1187,"id":1188,"markerHeight":711,"markerUnits":712,"markerWidth":711,"orient":713,"refX":714,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-pointEnd",[717,1190],{"className":1191,"d":721,"style":722},[720],[707,1193,1196],{"className":1194,"id":1195,"markerHeight":711,"markerUnits":712,"markerWidth":711,"orient":713,"refX":727,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-pointStart",[717,1197],{"className":1198,"d":731,"style":722},[720],[707,1200,1203],{"className":1201,"id":1202,"markerHeight":736,"markerUnits":712,"markerWidth":737,"orient":713,"refX":738,"refY":739,"viewBox":740},[689,707],"mermaid-1_flowchart-v2-pointEnd-margin",[717,1204],{"className":1205,"d":744,"style":745},[720],[707,1207,1210],{"className":1208,"id":1209,"markerHeight":736,"markerUnits":712,"markerWidth":738,"orient":713,"refX":750,"refY":739,"viewBox":740},[689,707],"mermaid-1_flowchart-v2-pointStart-margin",[752,1211],{"className":1212,"points":755,"style":745},[720],[707,1214,1217],{"className":1215,"id":1216,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":760,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-circleEnd",[762,1218],{"className":1219,"cx":714,"cy":714,"r":714,"style":722},[720],[707,1221,1224],{"className":1222,"id":1223,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":769,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-circleStart",[762,1225],{"className":1226,"cx":714,"cy":714,"r":714,"style":722},[720],[707,1228,1231],{"className":1229,"id":1230,"markerHeight":736,"markerUnits":712,"markerWidth":736,"orient":713,"refX":777,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-circleEnd-margin",[762,1232],{"className":1233,"cx":714,"cy":714,"r":714,"style":745},[720],[707,1235,1238],{"className":1236,"id":1237,"markerHeight":736,"markerUnits":712,"markerWidth":736,"orient":713,"refX":785,"refY":714,"viewBox":715},[689,707],"mermaid-1_flowchart-v2-circleStart-margin",[762,1239],{"className":1240,"cx":714,"cy":714,"r":714,"style":745},[720],[707,1242,1245],{"className":1243,"id":1244,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":794,"refY":795,"viewBox":796},[689,707,792],"mermaid-1_flowchart-v2-crossEnd",[717,1246],{"className":1247,"d":800,"style":801},[720],[707,1249,1252],{"className":1250,"id":1251,"markerHeight":760,"markerUnits":712,"markerWidth":760,"orient":713,"refX":769,"refY":795,"viewBox":796},[689,707,792],"mermaid-1_flowchart-v2-crossStart",[717,1253],{"className":1254,"d":800,"style":801},[720],[707,1256,1259],{"className":1257,"id":1258,"markerHeight":794,"markerUnits":712,"markerWidth":794,"orient":713,"refX":813,"refY":814,"viewBox":815},[689,707,792],"mermaid-1_flowchart-v2-crossEnd-margin",[717,1260],{"className":1261,"d":819,"style":820},[720],[707,1263,1266],{"className":1264,"id":1265,"markerHeight":794,"markerUnits":712,"markerWidth":794,"orient":713,"refX":825,"refY":814,"viewBox":815},[689,707,792],"mermaid-1_flowchart-v2-crossStart-margin",[717,1267],{"className":1268,"d":819,"style":829},[720],[704,1270,1272,1275,1309,1382],{"className":1271},[833],[704,1273],{"className":1274},[837],[704,1276,1278,1285,1291,1297,1303],{"className":1277},[841],[717,1279],{"className":1280,"d":1281,"style":849,"dataEdge":850,"dataEt":851,"dataId":852,"dataLook":853,"dataPoints":1282,"id":1283,"markerEnd":1284},[845,845,846,846,847],"M138,62L138,66.167C138,70.333,138,78.667,138,86.333C138,94,138,101,138,104.5L138,108","W3sieCI6MTM4LCJ5Ijo2Mn0seyJ4IjoxMzgsInkiOjg3fSx7IngiOjEzOCwieSI6MTEyfV0=","mermaid-1-L_A_B_0","url(#mermaid-1_flowchart-v2-pointEnd)",[717,1286],{"className":1287,"d":1288,"style":849,"dataEdge":850,"dataEt":851,"dataId":861,"dataLook":853,"dataPoints":1289,"id":1290,"markerEnd":1284},[845,845,846,846,847],"M138,190L138,194.167C138,198.333,138,206.667,138,214.333C138,222,138,229,138,232.5L138,236","W3sieCI6MTM4LCJ5IjoxOTB9LHsieCI6MTM4LCJ5IjoyMTV9LHsieCI6MTM4LCJ5IjoyNDB9XQ==","mermaid-1-L_B_C_0",[717,1292],{"className":1293,"d":1294,"style":849,"dataEdge":850,"dataEt":851,"dataId":868,"dataLook":853,"dataPoints":1295,"id":1296,"markerEnd":1284},[845,845,846,846,847],"M138,294L138,298.167C138,302.333,138,310.667,138,318.333C138,326,138,333,138,336.5L138,340","W3sieCI6MTM4LCJ5IjoyOTR9LHsieCI6MTM4LCJ5IjozMTl9LHsieCI6MTM4LCJ5IjozNDR9XQ==","mermaid-1-L_C_D_0",[717,1298],{"className":1299,"d":1300,"style":849,"dataEdge":850,"dataEt":851,"dataId":875,"dataLook":853,"dataPoints":1301,"id":1302,"markerEnd":1284},[845,845,846,846,847],"M138,398L138,402.167C138,406.333,138,414.667,138,422.333C138,430,138,437,138,440.5L138,444","W3sieCI6MTM4LCJ5IjozOTh9LHsieCI6MTM4LCJ5Ijo0MjN9LHsieCI6MTM4LCJ5Ijo0NDh9XQ==","mermaid-1-L_D_E_0",[717,1304],{"className":1305,"d":1306,"style":849,"dataEdge":850,"dataEt":851,"dataId":882,"dataLook":853,"dataPoints":1307,"id":1308,"markerEnd":1284},[845,845,846,846,847],"M138,502L138,506.167C138,510.333,138,518.667,138,526.333C138,534,138,541,138,544.5L138,548","W3sieCI6MTM4LCJ5Ijo1MDJ9LHsieCI6MTM4LCJ5Ijo1Mjd9LHsieCI6MTM4LCJ5Ijo1NTJ9XQ==","mermaid-1-L_E_F_0",[704,1310,1312,1326,1340,1354,1368],{"className":1311},[888],[704,1313,1315],{"className":1314},[892],[704,1316,1318],{"className":1317,"transform":897,"dataId":852},[896],[899,1319,1320],{"height":901,"width":901},[903,1321,1323],{"style":905,"xmlns":906,"className":1322},[908],[910,1324],{"className":1325},[892],[704,1327,1329],{"className":1328},[892],[704,1330,1332],{"className":1331,"transform":897,"dataId":861},[896],[899,1333,1334],{"height":901,"width":901},[903,1335,1337],{"style":905,"xmlns":906,"className":1336},[908],[910,1338],{"className":1339},[892],[704,1341,1343],{"className":1342},[892],[704,1344,1346],{"className":1345,"transform":897,"dataId":868},[896],[899,1347,1348],{"height":901,"width":901},[903,1349,1351],{"style":905,"xmlns":906,"className":1350},[908],[910,1352],{"className":1353},[892],[704,1355,1357],{"className":1356},[892],[704,1358,1360],{"className":1359,"transform":897,"dataId":875},[896],[899,1361,1362],{"height":901,"width":901},[903,1363,1365],{"style":905,"xmlns":906,"className":1364},[908],[910,1366],{"className":1367},[892],[704,1369,1371],{"className":1370},[892],[704,1372,1374],{"className":1373,"transform":897,"dataId":882},[896],[899,1375,1376],{"height":901,"width":901},[903,1377,1379],{"style":905,"xmlns":906,"className":1378},[908],[910,1380],{"className":1381},[892],[704,1383,1385,1407,1438,1465,1492,1515],{"className":1384},[972],[704,1386,1390,1393],{"className":1387,"transform":1388,"dataLook":853,"id":1389},[976,977],"translate(138, 35)","mermaid-1-flowchart-A-0",[981,1391],{"className":1392,"height":986,"style":987,"width":988,"x":989,"y":990},[984,985],[704,1394,1396,1398],{"className":1395,"transform":994,"style":987},[896],[981,1397],{},[899,1399,1400],{"height":999,"width":1000},[903,1401,1402],{"style":905,"xmlns":906},[910,1403,1405],{"className":1404},[1006],[424,1406,1009],{},[704,1408,1412,1419],{"className":1409,"transform":1410,"dataLook":853,"id":1411},[976,977],"translate(138, 151)","mermaid-1-flowchart-B-1",[981,1413],{"className":1414,"height":1415,"style":987,"width":1416,"x":1417,"y":1418},[984,985],"78","260","-130","-39",[704,1420,1423,1425],{"className":1421,"transform":1422,"style":987},[896],"translate(-100, -24)",[981,1424],{},[899,1426,1429],{"height":1427,"width":1428},"48","200",[903,1430,1432],{"style":1431,"xmlns":906},"display: table; white-space: break-spaces; line-height: 1.5; max-width: 200px; text-align: center; width: 200px;",[910,1433,1435],{"className":1434},[1006],[424,1436,1437],{},"Windows 虚拟机桥接到办公网络",[704,1439,1443,1448],{"className":1440,"transform":1441,"dataLook":853,"id":1442},[976,977],"translate(138, 267)","mermaid-1-flowchart-C-3",[981,1444],{"className":1445,"height":986,"style":987,"width":1446,"x":1447,"y":990},[984,985],"244.921875","-122.4609375",[704,1449,1452,1454],{"className":1450,"transform":1451,"style":987},[896],"translate(-92.4609375, -12)",[981,1453],{},[899,1455,1457],{"height":999,"width":1456},"184.921875",[903,1458,1459],{"style":905,"xmlns":906},[910,1460,1462],{"className":1461},[1006],[424,1463,1464],{},"Windows 获得正规办公 IP",[704,1466,1470,1475],{"className":1467,"transform":1468,"dataLook":853,"id":1469},[976,977],"translate(138, 371)","mermaid-1-flowchart-D-5",[981,1471],{"className":1472,"height":986,"style":987,"width":1473,"x":1474,"y":990},[984,985],"252","-126",[704,1476,1479,1481],{"className":1477,"transform":1478,"style":987},[896],"translate(-96, -12)",[981,1480],{},[899,1482,1484],{"height":999,"width":1483},"192",[903,1485,1486],{"style":905,"xmlns":906},[910,1487,1489],{"className":1488},[1006],[424,1490,1491],{},"安全桌面正确识别办公地点",[704,1493,1497,1500],{"className":1494,"transform":1495,"dataLook":853,"id":1496},[976,977],"translate(138, 475)","mermaid-1-flowchart-E-7",[981,1498],{"className":1499,"height":986,"style":987,"width":1045,"x":1046,"y":990},[984,985],[704,1501,1503,1505],{"className":1502,"transform":1050,"style":987},[896],[981,1504],{},[899,1506,1507],{"height":999,"width":1055},[903,1508,1509],{"style":905,"xmlns":906},[910,1510,1512],{"className":1511},[1006],[424,1513,1514],{},"认证成功",[704,1516,1520,1523],{"className":1517,"transform":1518,"dataLook":853,"id":1519},[976,977],"translate(138, 579)","mermaid-1-flowchart-F-9",[981,1521],{"className":1522,"height":986,"style":987,"width":1126,"x":1127,"y":990},[984,985],[704,1524,1526,1528],{"className":1525,"transform":1131,"style":987},[896],[981,1527],{},[899,1529,1530],{"height":999,"width":1136},[903,1531,1532],{"style":905,"xmlns":906},[910,1533,1535],{"className":1534},[1006],[424,1536,1537],{},"业务系统恢复访问",[1146,1539,1540],{},[1149,1541,1543],{"height":1151,"id":1542,"width":1151},"mermaid-1-drop-shadow",[1154,1544],{"dx":1156,"dy":1156,"floodColor":1157,"floodOpacity":1158,"stdDeviation":901},[1146,1546,1547],{},[1149,1548,1550],{"height":1163,"id":1549,"width":1163},"mermaid-1-drop-shadow-small",[1154,1551],{"dx":1167,"dy":1167,"floodColor":1157,"floodOpacity":1158,"stdDeviation":901},[424,1553,1554],{},"真正解决问题的，并不是重新安装多少遍软件，而是搞清楚：",[424,1556,1557],{},[564,1558,1559],{},"安全客户端究竟运行在哪个操作系统里，它看到的又究竟是哪一个 IP。",[446,1561,1563],{"id":1562},"八还留下了一个小问题","八、还留下了一个“小问题”",[424,1565,1566],{},"Windows 虚拟环境使用了原来的正规办公 IP 后，银河麒麟宿主系统自然也就不能继续同时占用这个地址。",[424,1568,1569],{},"那么，银河麒麟本身怎么办？",[424,1571,1572],{},"和用户沟通以后发现，实际日常办公过程中，大部分 Windows 专用业务软件、浏览器和办公软件本来就主要运行在虚拟 Windows 环境中，用户很少直接使用银河麒麟宿主系统访问相关业务。",[424,1574,1575],{},"所以在当前场景下，这种调整基本能够满足实际使用需求。",[424,1577,1578],{},"当然，从长期来看，这并不是最理想的最终方案。",[424,1580,1581],{},"国产操作系统、Windows 兼容环境以及统一安全准入系统之间，仍然需要在产品层面进一步解决兼容和适配问题。",[446,1583,1585],{"id":1584},"九一个容易被误判的问题","九、一个容易被误判的问题",[424,1587,1588],{},"近期类似现象并非个例。",[424,1590,1591],{},"部分国产化终端都出现过：",[424,1593,1594],{},"基础内部网络可以访问，但接入新版安全准入体系后，部分业务系统无法使用。",[424,1596,1597],{},"由于普通用户看不到底层的虚拟化网络结构，很容易把这种现象简单理解为：",[424,1599,1600],{},"“国产系统不好用。”",[424,1602,1603],{},"但实际上，这次故障恰恰说明，问题未必出在国产操作系统本身。",[424,1605,1606],{},"它更像是一个典型的系统集成问题：",[424,1608,1609],{},[564,1610,1611],{},"操作系统本身正常，虚拟化环境也正常，安全客户端也能安装，但三个系统对“终端身份”和“网络身份”的理解没有完全对齐。",[424,1613,1614],{},"单独看每一部分都没有明显故障，组合到一起却出现了问题。",[424,1616,1617],{},"这也是国产化终端运维过程中比较值得关注的一类场景。",[446,1619,1621],{"id":1620},"十排障的一点体会","十、排障的一点体会",[424,1623,1624],{},"这次排查最有价值的地方，并不是记住“把虚拟机改成桥接”这个操作。",[424,1626,1627],{},"因为换一个单位、换一种准入系统，解决办法可能完全不同。",[424,1629,1630],{},"更重要的是建立一个思路：",[424,1632,1633],{},"当国产化终端中同时存在 Linux、Windows 虚拟环境、安全客户端以及网络准入系统时，不要只盯着桌面上看到的那个“软件”。",[424,1635,1636],{},"应该继续往下追：",[488,1638,1639,1644,1649,1654],{},[491,1640,1641],{},[564,1642,1643],{},"程序实际运行在哪个系统？",[491,1645,1646],{},[564,1647,1648],{},"这个系统实际使用哪块网卡？",[491,1650,1651],{},[564,1652,1653],{},"安全系统看到的源 IP 是什么？",[491,1655,1656],{},[564,1657,1658],{},"准入平台到底根据什么判断终端身份和办公地点？",[424,1660,1661],{},"把这几层关系理清楚，很多看起来莫名其妙的“国产系统兼容问题”，往往就能找到真正原因。",[424,1663,1664],{},"目前，该问题也已经反馈给相关技术人员。",[424,1666,1667],{},"据反馈，后续版本将进一步优化国产化终端与安全桌面之间的兼容适配。",[424,1669,1670],{},"有时候，所谓复杂故障，不过是多个“都正常”的系统，彼此没有完全理解对方。",{"title":987,"searchDepth":1672,"depth":1672,"links":1673},2,[1674,1675,1676,1677,1678,1679,1680,1681,1682,1683],{"id":448,"depth":1672,"text":449},{"id":470,"depth":1672,"text":471},{"id":508,"depth":1672,"text":509},{"id":536,"depth":1672,"text":537},{"id":572,"depth":1672,"text":573},{"id":622,"depth":1672,"text":623},{"id":667,"depth":1672,"text":668},{"id":1562,"depth":1672,"text":1563},{"id":1584,"depth":1672,"text":1585},{"id":1620,"depth":1672,"text":1621},null,"2026-09-04","记录一次银河麒麟终端中 Windows 虚拟环境因 IP 地址不符合网络准入规则，导致安全桌面认证和办公 OA 登录失败的完整排查过程。","md","\u002Fimages\u002Fdefault-blog.jpg",{},{"icon":252},"---\ntitle: 国产化终端能上办公网，却登录不了 OA：一次网络准入故障排查\ndescription: 记录一次银河麒麟终端中 Windows 虚拟环境因 IP 地址不符合网络准入规则，导致安全桌面认证和办公 OA 登录失败的完整排查过程。\ndate: 2026-09-04\nimg: \u002Fimages\u002Fdefault-blog.jpg\nnavigation:\n  icon: lucide:network\n---\n\n最近处理了一起比较有代表性的终端故障。\n\n一台国产化办公电脑，基础网络正常，内部办公网可以正常访问，但某办公 OA 等部分业务系统始终无法登录。乍一看像是网络问题，实际排查下来，却牵扯到了国产操作系统、Windows 虚拟化、安全桌面、网络准入以及 IP 地址识别等多个环节。\n\n整个过程还是比较有意思的，简单记录一下。\n\n> 如果你遇到的是类似问题，只想直接看解决办法，可以直接跳到本文第六部分[「调整网络结构」](#六调整网络结构)。\n\n## 一、故障现象\n\n设备操作系统为银河麒麟。用户反馈：\n\n办公网可以正常访问，但某办公 OA 系统无法正常登录，部分新增安全准入要求的业务系统也存在类似情况。\n\n首先做了几个基础判断。\n\n在其他电脑上使用同一账号登录某办公 OA，可以正常使用，因此基本可以排除用户账号权限异常。\n\n办公网访问正常，也说明终端到内部网络的基础链路整体没有问题。\n\n问题范围逐渐缩小到了这台国产化终端自身。\n\n## 二、先说一下这台电脑的特殊之处\n\n银河麒麟属于国产 Linux 操作系统。\n\n为了兼容大量 Windows 专用办公软件，部分国产化终端会通过虚拟化技术，在 Linux 系统底层运行一套 Windows 环境，同时借助“融合桌面”技术，把 Windows 软件直接展示在国产系统桌面中。\n\n从普通用户的角度看，Word、浏览器以及其他 Windows 软件似乎只是麒麟系统中的普通应用。\n\n但从技术角度来看，并不是这么回事。\n\n底层实际上仍然存在两套彼此独立的操作系统：\n\n- 一套是银河麒麟 Linux；\n- 另一套是运行在虚拟化环境中的 Windows。\n\n两套系统的内核不同、网络栈不同、虚拟网卡不同，IP 地址通常也不同。\n\n因此，在排查网络问题时，完全可以把虚拟化 Windows 理解成局域网里的“另外一台电脑”。\n\n这一点，后来成为了解决问题的关键。\n\n## 三、问题开始指向“安全准入”\n\n近期，相关单位正在统一部署新版终端安全桌面及网络准入系统。\n\n而该安全软件主要面向 Windows 环境，无法直接安装在银河麒麟 Linux 系统中。\n\n于是现场尝试将安全桌面安装到虚拟化 Windows 环境中。\n\n安装虽然能够完成，但随即出现了新的问题：\n\n安全客户端始终无法正常认证，并提示无法正确识别办公地点。\n\n与此同时，浏览器访问某办公 OA 时，也会弹出准入检测页面，提示终端未满足相关安全要求。\n\n到这里，基本可以判断：\n\n问题并不是单纯的“某办公 OA 打不开”，而是终端没有顺利通过新部署的网络准入认证。\n\n## 四、现场排查\n\n到现场后，首先重新访问某办公 OA 系统。\n\n页面随即弹出准入检查提示，一方面提示缺少相关准入组件，另一方面还检测到当前用户密码安全等级不足。\n\n先按照要求修改了用户密码，将原密码调整为符合复杂度要求的强密码。\n\n重启电脑后再次测试。\n\n问题依旧。\n\n随后重新安装安全桌面客户端。\n\n客户端启动后要求进行用户认证，但始终认证失败，其中一个比较关键的提示是：\n\n> **无法识别当前办公地点。**\n\n看到这个提示后，开始把排查重点转向 IP 地址。\n\n## 五、找到关键原因：IP 不对\n\n重新检查虚拟化 Windows 的网络配置后发现：\n\n虚拟 Windows 当时通过虚拟网卡获取网络地址，使用的并不是单位正常分配的办公网 IP。\n\n也就是说：\n\n- 银河麒麟宿主系统拥有正规的办公 IP；\n- 而真正运行安全桌面和浏览器的 Windows 虚拟环境，使用的却是另外一个虚拟网络地址。\n\n这在普通网络访问场景下未必有问题。\n\n但安全准入系统往往不仅判断“网络通不通”，还可能综合判断：\n\n- 终端 IP 所属地址段；\n- 办公区域；\n- 终端身份；\n- 安全客户端状态；\n- 账号认证信息。\n\n这样一来问题就比较清楚了。\n\n安全桌面虽然安装在 Windows 中，但安全系统看到的 Windows IP 并不属于预期的办公地址范围，于是无法正确判断办公地点，最终导致认证失败。\n\n## 六、调整网络结构\n\n确认思路后，对网络配置进行了调整。\n\n首先，将银河麒麟宿主系统原先占用的办公 IP 调整出去。\n\n随后把 Windows 虚拟机的网络模式由原来的虚拟网络方式调整为**桥接模式**。\n\n桥接之后，Windows 虚拟机不再只是通过宿主机间接访问网络，而是可以像局域网中的一台独立物理电脑一样直接接入办公网络。\n\n最后，将原本分配给银河麒麟宿主机的正规办公 IP，手动配置到了 Windows 虚拟环境中。\n\n重新加载网络。\n\n再次打开安全桌面。\n\n认证通过。\n\n办公地点识别正常。\n\n随后重新访问某办公 OA 系统，准入检测恢复正常，业务系统也随之可以正常使用。\n\n至此，故障解决。\n\n> 调整静态 IP 前，应先确认地址分配、交换机端口策略和准入平台的绑定关系，避免产生 IP 冲突或绕过既有安全策略。\n\n## 七、问题到底出在哪里？\n\n回头来看，这次问题其实并不复杂。\n\n核心原因可以概括成一句话：\n\n**安全桌面运行在虚拟 Windows 中，但虚拟 Windows 使用的 IP 地址不符合网络准入系统的办公地址识别规则。**\n\n原来的网络关系大致可以理解为：\n\n```mermaid\nflowchart TD\n  A[银河麒麟宿主机] --> B[正规办公 IP]\n  B --> C[虚拟网络]\n  C --> D[Windows 虚拟机]\n  D --> E[虚拟 IP]\n  E --> F[安全桌面认证失败]\n```\n\n调整后变成：\n\n```mermaid\nflowchart TD\n  A[银河麒麟宿主机] --> B[Windows 虚拟机桥接到办公网络]\n  B --> C[Windows 获得正规办公 IP]\n  C --> D[安全桌面正确识别办公地点]\n  D --> E[认证成功]\n  E --> F[业务系统恢复访问]\n```\n\n真正解决问题的，并不是重新安装多少遍软件，而是搞清楚：\n\n**安全客户端究竟运行在哪个操作系统里，它看到的又究竟是哪一个 IP。**\n\n## 八、还留下了一个“小问题”\n\nWindows 虚拟环境使用了原来的正规办公 IP 后，银河麒麟宿主系统自然也就不能继续同时占用这个地址。\n\n那么，银河麒麟本身怎么办？\n\n和用户沟通以后发现，实际日常办公过程中，大部分 Windows 专用业务软件、浏览器和办公软件本来就主要运行在虚拟 Windows 环境中，用户很少直接使用银河麒麟宿主系统访问相关业务。\n\n所以在当前场景下，这种调整基本能够满足实际使用需求。\n\n当然，从长期来看，这并不是最理想的最终方案。\n\n国产操作系统、Windows 兼容环境以及统一安全准入系统之间，仍然需要在产品层面进一步解决兼容和适配问题。\n\n## 九、一个容易被误判的问题\n\n近期类似现象并非个例。\n\n部分国产化终端都出现过：\n\n基础内部网络可以访问，但接入新版安全准入体系后，部分业务系统无法使用。\n\n由于普通用户看不到底层的虚拟化网络结构，很容易把这种现象简单理解为：\n\n“国产系统不好用。”\n\n但实际上，这次故障恰恰说明，问题未必出在国产操作系统本身。\n\n它更像是一个典型的系统集成问题：\n\n**操作系统本身正常，虚拟化环境也正常，安全客户端也能安装，但三个系统对“终端身份”和“网络身份”的理解没有完全对齐。**\n\n单独看每一部分都没有明显故障，组合到一起却出现了问题。\n\n这也是国产化终端运维过程中比较值得关注的一类场景。\n\n## 十、排障的一点体会\n\n这次排查最有价值的地方，并不是记住“把虚拟机改成桥接”这个操作。\n\n因为换一个单位、换一种准入系统，解决办法可能完全不同。\n\n更重要的是建立一个思路：\n\n当国产化终端中同时存在 Linux、Windows 虚拟环境、安全客户端以及网络准入系统时，不要只盯着桌面上看到的那个“软件”。\n\n应该继续往下追：\n\n- **程序实际运行在哪个系统？**\n- **这个系统实际使用哪块网卡？**\n- **安全系统看到的源 IP 是什么？**\n- **准入平台到底根据什么判断终端身份和办公地点？**\n\n把这几层关系理清楚，很多看起来莫名其妙的“国产系统兼容问题”，往往就能找到真正原因。\n\n目前，该问题也已经反馈给相关技术人员。\n\n据反馈，后续版本将进一步优化国产化终端与安全桌面之间的兼容适配。\n\n有时候，所谓复杂故障，不过是多个“都正常”的系统，彼此没有完全理解对方。\n",6,{"title":249,"description":1686},"Gs_l24zk7QD0RtHfM2u5oykOYqkwuyXmD-SNUU28nQU",[1696,1698],{"title":244,"path":245,"stem":246,"description":1697,"icon":247,"children":-1},"修好首页的巡检文档入口，更新依赖和发布检查，再用几个实际例子看看新增的 MDC 组件。",{"title":254,"path":255,"stem":256,"description":1699,"icon":257,"children":-1},"增加一些新的渲染，如脑图等",1791307025260]