利用PowerShell自动化配置 VPN 连接的详细步骤和命令是什么？

Get-VpnConnection | Format-Table Name, ServerAddress, ConnectionStatus

# 输出示例：
# Name      ServerAddress    ConnectionStatus
# ----      ------------    ---------------
# OfficeVPN vpn.company.com  Connected

# 创建名为"SalesVPN"的L2TP连接（技术栈：PowerShell + netsh）
$vpnName = "SalesVPN"
$serverIP = "203.0.113.10"
$sharedKey = "MySecureKey123"

# 使用netsh添加VPN接口
netsh advfirewall firewall add rule name="Allow L2TP" dir=in action=allow protocol=17 localport=1701,500,4500

# 创建VPN连接并设置预共享密钥
Add-VpnConnection -Name $vpnName -ServerAddress $serverIP `
    -TunnelType L2tp -L2tpPsk $sharedKey -RememberCredential $true `
    -AuthenticationMethod MSChapv2 -Force

# 验证配置是否成功
if (Get-VpnConnection -Name $vpnName -ErrorAction SilentlyContinue) {
    Write-Host "✅ VPN连接创建成功" -ForegroundColor Green
} else {
    throw "配置失败，请检查管理员权限"
}

# 使用CredentialManager模块安全存储密码（需预先安装）
Install-Module -Name CredentialManager -Force
$cred = Get-Credential -UserName "vpnuser" -Message "输入VPN账户密码"

# 将凭证绑定到指定VPN连接
cmdkey /generic:$vpnName /user:$cred.UserName /pass:$cred.GetNetworkCredential().Password

# 触发VPN连接测试（技术栈：Rasdial命令）
rasdial $vpnName $cred.UserName $cred.GetNetworkCredential().Password
Start-Sleep -Seconds 5
if ((Get-VpnConnection -Name $vpnName).ConnectionStatus -eq "Connected") {
    Write-Host "🔗 VPN成功连接至服务器" -ForegroundColor Cyan
} else {
    Write-Warning "连接失败，请检查网络状态或防火墙设置"
}

# 检查RasMan服务状态（技术栈：WMI查询）
$service = Get-Service -Name RasMan
if ($service.Status -ne "Running") {
    Start-Service RasMan -PassThru | Wait-Process -Timeout 30
    Set-Service -Name RasMan -StartupType Automatic
}

# 测试VPN服务器端口可达性（技术栈：Test-NetConnection）
$portCheck = Test-NetConnection -ComputerName $serverIP -Port 1723 -InformationLevel Quiet
if (-not $portCheck) {
    throw "⚠️ 无法访问VPN服务器的1723端口，请检查防火墙规则"
}