Zyxel OMNI ADSL LAN H [177/533] Chapter 16 vpn

Zyxel OMNI ADSL LAN H [177/533] Chapter 16 vpn
Ɋɭɤɨɜɨɞɫɬɜɨ ɩɨɥɶɡɨɜɚɬɟɥɹ ɞɥɹ ɦɚɪɲɪɭɬɢɡɚɬɨɪɨɜ ɫɟɪɢɢ OMNI ADSL LAN
ɗɤɪɚɧɵ VPN 16-1
Chapter 16
ɗɤɪɚɧɵ VPN
ɋɨɞɟɪɠɚɧɢɟ ɞɚɧɧɨɣ ɝɥɚɜɵ ɩɨɡɜɨɥɹɟɬ ɩɨɥɭɱɢɬɶ ɨɛɳɟɟ ɩɪɟɞɫɬɚɜɥɟɧɢɟ ɨɛ ɷɤɪɚɧɚɯ VPN. ɋɦ.
ɝɥɚɜɭ ɨ ɠɭɪɧɚɥɚɯ ɪɟɝɢɫɬɪɚɰɢɢ ɞɥɹ ɩɨɥɭɱɟɧɢɹ ɞɨɩɨɥɧɢɬɟɥɶɧɨɣ ɢɧɮɨɪɦɚɰɢɢ ɨ ɩɪɨɫɦɨɬɪɟ
ɠɭɪɧɚɥɨɜ ɢ ɋɩɪɚɜɨɱɧɨɟ ɪɭɤɨɜɨɞɫɬɜɨ ɫ ɨɩɢɫɚɧɢɟɦ ɠɭɪɧɚɥɨɜ IPSec. ɋɨɞɟɪɠɚɧɢɟ ɞɚɧɧɨɣ
ɱɚɫɬɢ ɨɬɧɨɫɢɬɫɹ ɤ ɦɨɞɟɥɹɦ OMNI ADSL LAN H/HW.
16.1 Ɉɩɢɫɚɧɢɟ VPN/IPSec
ɉɨɥɶɡɭɣɬɟɫɶ ɩɪɢɜɟɞɟɧɧɵɦ ɜ ɞɚɧɧɨɣ ɝɥɚɜɟ ɨɩɢɫɚɧɢɟɦ ɷɤɪɚɧɨɜ ɞɥɹ ɧɚɫɬɪɨɣɤɢ ɩɪɚɜɢɥ VPN-ɫɨɟɞɢɧɟɧɢɣ
ɢ ɭɩɪɚɜɥɟɧɢɹ ɜɢɪɬɭɚɥɶɧɨɣ ɱɚɫɬɧɨɣ ɫɟɬɶɸ.
16.2 Ⱥɥɝɨɪɢɬɦɵ IPSec
ɉɪɨɬɨɤɨɥɵ ESP ɢ AH ɧɟɨɛɯɨɞɢɦɵ ɞɥɹ ɫɨɡɞɚɧɢɹ ɛɟɡɨɩɚɫɧɵɯ ɫɨɟɞɢɧɟɧɢɣ (SA) - ɨɫɧɨɜɵ IPSec VPN.
Ʌɸɛɨɟ ɛɟɡɨɩɚɫɧɨɟ ɫɨɟɞɢɧɟɧɢɟ ɧɚɱɢɧɚɟɬɫɹ ɫ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ, ɨɫɭɳɟɫɬɜɥɹɸɳɟɣɫɹ ɩɪɨɬɨɤɨɥɚɦɢ AH ɢ
ESP. ɉɟɪɜɢɱɧɨɣ ɮɭɧɤɰɢɟɣ ɭɩɪɚɜɥɟɧɢɹ ɤɥɸɱɚɦɢ ɹɜɥɹɟɬɫɹ ɭɫɬɚɧɨɜɥɟɧɢɟ ɢ ɩɨɞɞɟɪɠɤɚ ɫɨɟɞɢɧɟɧɢɹ SA
ɦɟɠɞɭ ɫɢɫɬɟɦɚɦɢ. ɉɟɪɟɞɚɱɚ ɞɚɧɧɵɯ ɧɚɱɢɧɚɟɬɫɹ, ɤɚɤ ɬɨɥɶɤɨ ɭɫɬɚɧɨɜɥɟɧɨ SA.
16.2.1 ɉɪɨɬɨɤɨɥ AH (Authentication Header - Ⱥɭɬɟɧɬɢɮɢɰɢɪɭɸɳɢɣ
ɡɚɝɨɥɨɜɨɤ)
ɉɪɨɬɨɤɨɥ AH (RFC 2402) ɛɵɥ ɪɚɡɪɚɛɨɬɚɧ ɞɥɹ ɨɛɟɫɩɟɱɟɧɢɹ ɰɟɥɨɫɬɧɨɫɬɢ, ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɢ
ɧɟɩɪɟɪɵɜɧɨɫɬɢ ɩɨɫɥɟɞɨɜɚɬɟɥɶɧɨɫɬɢ (ɡɚɳɢɬɚ ɨɬ ɩɨɜɬɨɪɧɨɝɨ ɜɨɫɩɪɨɢɡɜɟɞɟɧɢɹ), ɚ ɬɚɤɠɟ ɡɚɳɢɬɵ ɨɬ
ɨɬɤɚɡɨɜ, ɨɞɧɚɤɨ ɷɬɨɬ ɩɪɨɬɨɤɨɥ ɧɟ ɪɟɲɚɟɬ ɩɪɨɛɥɟɦɭ ɤɨɧɮɢɞɟɧɰɢɚɥɶɧɨɫɬɢ ɢɧɮɨɪɦɚɰɢɢ, ɜ ɨɬɥɢɱɢɟ ɨɬ
ɩɪɨɬɨɤɨɥɚ ESP.
ȼ ɬɟɯ ɩɪɢɥɨɠɟɧɢɹɯ, ɝɞɟ ɤɨɧɮɢɞɟɧɰɢɚɥɶɧɨɫɬɶ ɧɟ ɬɪɟɛɭɟɬɫɹ ɢɥɢ ɧɟ ɩɪɨɞɢɤɬɨɜɚɧɚ ɨɮɢɰɢɚɥɶɧɨ
ɭɫɬɚɧɨɜɥɟɧɧɵɦɢ ɨɝɪɚɧɢɱɟɧɢɹɦɢ ɩɨ ɲɢɮɪɨɜɚɧɢɸ ɞɚɧɧɵɯ, ɞɥɹ ɨɛɟɫɩɟɱɟɧɢɹ ɰɟɥɨɫɬɧɨɫɬɢ ɞɨɫɬɚɬɨɱɧɨ
ɢɫɩɨɥɶɡɨɜɚɬɶ ɩɪɨɬɨɤɨɥ AH. Ⱦɚɧɧɚɹ ɪɟɚɥɢɡɚɰɢɹ ɧɟ ɦɨɠɟɬ ɩɪɟɞɨɬɜɪɚɬɢɬɶ ɪɚɡɝɥɚɲɟɧɢɟ ɢɧɮɨɪɦɚɰɢɢ,
ɨɞɧɚɤɨ ɭɱɢɬɵɜɚɟɬ ɜɨɡɦɨɠɧɨɫɬɶ ɩɪɨɜɟɪɤɢ ɰɟɥɨɫɬɧɨɫɬɢ ɢɧɮɨɪɦɚɰɢɢ ɢ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɢɫɬɨɱɧɢɤɚ.
16.2.2 ɉɪɨɬɨɤɨɥ ESP (Encapsulating Security Payload - ɂɧɤɚɩɫɭɥɹɰɢɹ
ɡɚɲɢɮɪɨɜɚɧɧɵɯ ɞɚɧɧɵɯ)
ɉɪɨɬɨɤɨɥ ESP (RFC 2406) ɨɫɭɳɟɫɬɜɥɹɟɬ ɲɢɮɪɨɜɚɧɢɟ ɞɚɧɧɵɯ, ɚ ɬɚɤɠɟ ɪɟɚɥɢɡɭɟɬ ɧɟɤɨɬɨɪɵɟ ɭɫɥɭɝɢ
ɩɪɨɬɨɤɨɥɚ AH. ȼɨɡɦɨɠɧɨɫɬɢ ɩɪɨɬɨɤɨɥɚ ESP ɜ ɱɚɫɬɢ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ ɹɜɥɹɸɬɫɹ ɨɝɪɚɧɢɱɟɧɧɵɦɢ ɩɨ
ɫɪɚɜɧɟɧɢɸ ɫ ɩɪɨɬɨɤɨɥɨɦ AH, ɩɨɫɤɨɥɶɤɭ ɢɦ ɧɟ ɢɫɩɨɥɶɡɭɟɬɫɹ ɢɧɮɨɪɦɚɰɢɹ ɡɚɝɨɥɨɜɤɚ IP ɜɯɨɞɟ

Содержание

Скачать