PowerShell - 如何 ping DirectAccess IPSec 隧道端点？

Question

Greetings fellow recipient,

This is my first question here, after a long time lurker. I'm new to PowerShell, and one of the things that I'm currently working on is to create a script that will get system information, mapped drives, network configuration, etc. I want to be able to get the IPv6 address from DirectAccess IPSec Tunnel Endpoint and ping it. I'd like if you could shed light at this for me, please

This is what I've got so far:

##----------------------------------------------------------
## Variables
##----------------------------------------------------------
$Command = {[PSCustomObject]@{
    'computerSystem' = get-wmiobject Win32_ComputerSystem
    'computerMappedDrives' = Get-WmiObject -Class Win32_MappedLogicalDisk | Select-Object name,providername
    'computerEventErrorsApp' = Get-EventLog -LogName Application -EntryType Error -Newest 10 | Select-Object timegenerated,source,message 
    'computerEventErrorsSys' = Get-EventLog -LogName System -EntryType Error -Newest 10 | Select-Object timegenerated,source,message
    'computerDAClient' = Get-DAClientExperienceConfiguration
    'computerDAStatus' = Get-DAConnectionStatus
    'computerOfflineFiles' = Get-WmiObject -Class win32_OfflineFilesCache
}}
$data = Invoke-Command -ScriptBlock $Command

Logging -Text ("HOSTNAME              : " + $env:COMPUTERNAME) -LogFile $logfile
Logging -Text ("USER LOGGED IN        : " + $data.computerSystem.UserName) -LogFile $logfile
Logging -Text ("DIRECT ACCESS NAME    : " + $data.computerDAClient.FriendlyName) -LogFile $logfile
Logging -Text ("DIRECT ACCESS STATUS  : " + $data.computerDAStatus.Status) -LogFile $logfile
Logging -Text ("OFFLINE FILES         : " + ($data.computerOfflineFiles | Select-Object Enabled)) -LogFile $logfile

##----------------------------------------------------------
## Network Drives
##----------------------------------------------------------
foreach ($mappeddrive in $data.computerMappedDrives)
{    
    Logging -Text ("NETWORK DRIVES MAPPED : " + $mappeddrive.name + " -> " + $mappeddrive.providername) -LogFile $logfile
}

Write-Host "-NETWORK DRIVES COLLECTED-" -ForegroundColor Green

This is the result of executing this command

$data.computerdaclient



Description                      : DA Client Settings
CorporateResources               : {HTTP:http://directaccess-WebProbeHost.xxx, HTTP:http://directaccess-webprobehost.xxx/}
IPsecTunnelEndpoints             : {PING:fd51:3db1:xxxx:xxxx::1, PING:fd51:3db1:xxxx:xxxx::2, PING:fd45:4035:xxxx:xxxx::1, PING:fd45:4035:xxxx:xxxx::2}
CustomCommands                   : 
PreferLocalNamesAllowed          : True
UserInterface                    : True
PassiveMode                      : False
SupportEmail                     : DA_support@xxxx
FriendlyName                     : Direct Access
ManualEntryPointSelectionAllowed : True
GslbFqdn                         :
ForceTunneling                   : Default

Any idea on how can I extract the value from IPSecTunnelEndpoint and execute ping afterwards? Thanking you in advance, Cheers, Gonzalo

Answer 1

I think that I've got it working now:

(Get-DAClientExperienceConfiguration).IPsecTunnelEndpoints | ForEach-Object{

    If($_ -like '*PING:*'){
        $ipsec= $_.replace('PING:','')
        Write-Host ("TEST CONNECTION TO: " + $ipsec)
        Test-Connection $ipsec
    }
}

The results are:

TEST CONNECTION TO: fd45:4035:xxxx:1000::2

Pinging fd45:4035:xxxx:1000::2 with 32 bytes of data:
Reply from fd45:4035:xxxx:1000::2: time=6ms 
Reply from fd45:4035:xxxx:1000::2: time=9ms 
Reply from fd45:4035:xxxx:1000::2: time=13ms 
Reply from fd45:4035:xxxx:1000::2: time=14ms 

Ping statistics for fd45:4035:xxxx:1000::2:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 6ms, Maximum = 14ms, Average = 10ms