Zyxel OMNI ADSL LAN H [178/533] Secure gateway addr ip ipsec

Ɋɭɤɨɜɨɞɫɬɜɨ ɩɨɥɶɡɨɜɚɬɟɥɹ ɞɥɹ ɦɚɪɲɪɭɬɢɡɚɬɨɪɨɜ ɫɟɪɢɢ OMNI ADSL LAN

16-2 ɗɤɪɚɧɵ VPN

ɩɪɨɰɟɫɫɚ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ. Ɉɞɧɚɤɨ ɢɫɩɨɥɶɡɨɜɚɧɢɹ ɩɪɨɬɨɤɨɥɚ ESP ɞɨɫɬɚɬɨɱɧɨ, ɟɫɥɢ ɬɨɥɶɤɨ ɧɟ

ɬɪɟɛɭɟɬɫɹ ɚɭɬɟɧɬɢɮɢɤɚɰɢɹ ɫ ɩɨɦɨɳɶɸ ɩɪɨɬɨɤɨɥɨɜ ɛɨɥɟɟ ɜɵɫɨɤɨɝɨ ɭɪɨɜɧɹ.

Ⱦɨɩɨɥɧɢɬɟɥɶɧɵɦ ɫɜɨɣɫɬɜɨɦ ɩɪɨɬɨɤɨɥɚ ESP ɹɜɥɹɟɬɫɹ ɮɭɧɤɰɢɹ "ɡɚɩɨɥɧɢɬɟɥɹ", ɨɛɟɫɩɟɱɢɜɚɸɳɚɹ

ɞɨɩɨɥɧɢɬɟɥɶɧɭɸ ɡɚɳɢɬɭ ɨɛɦɟɧɚ ɞɚɧɧɵɦɢ, ɬɚɤ ɤɚɤ ɩɨɡɜɨɥɹɟɬ ɫɤɪɵɬɶ ɢɫɬɢɧɧɵɣ ɪɚɡɦɟɪ ɩɟɪɟɞɚɜɚɟɦɨɝɨ

ɩɚɤɟɬɚ.

Ɍɚɛɥ. 16-1 ɉɪɨɬɨɤɨɥɵ AH ɢ ESP

ESP AH

DES (ɩɨ ɭɦɨɥɱɚɧɢɸ)

Data Encryption Standard (ɋɬɚɧɞɚɪɬ ɲɢɮɪɨɜɚɧɢɹ

ɞɚɧɧɵɯ - DES) - ɷɬɨ ɲɢɪɨɤɨ ɩɪɢɦɟɧɹɟɦɵɣ ɫɩɨɫɨɛ

ɲɢɮɪɨɜɚɧɢɹ ɞɚɧɧɵɯ ɫ ɩɨɦɨɳɶɸ ɱɚɫɬɧɨɝɨ (ɫɟɤɪɟɬɧɨɝɨ)

ɤɥɸɱɚ. ȼ DES ɩɪɢɦɟɧɹɟɬɫɹ 56-ɛɢɬɨɜɵɣ ɤɥɸɱ ɤ ɤɚɠɞɨɦɭ

64-ɛɢɬɨɜɨɦɭ ɛɥɨɤɭ ɞɚɧɧɵɯ.

MD5 (ɩɨ ɭɦɨɥɱɚɧɢɸ)

MD5 (Message Digest 5) ɩɨɪɨɠɞɚɟɬ 128-

ɛɢɬɨɜɵɣ ɞɚɣɞɠɟɫɬ ɞɥɹ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ

ɩɚɤɟɬɧɵɯ ɞɚɧɧɵɯ.

3DES

ɋɬɚɧɞɚɪɬ Triple DES (3DES) ɹɜɥɹɟɬɫɹ ɪɚɡɧɨɜɢɞɧɨɫɬɶɸ

DES ɫ ɬɪɟɯɤɪɚɬɧɵɦ ɩɪɢɦɟɧɟɧɢɟɦ ɬɪɟɯ ɪɚɡɥɢɱɧɵɯ

ɤɥɸɱɟɣ (3 x 56 = 168 ɛɢɬ), ɬɚɤɢɦ ɨɛɪɚɡɨɦ ɭɞɜɚɢɜɚɸɳɢɯ

ɷɮɮɟɤɬɢɜɧɨɫɬɶ DES.

SHA1

SHA1 (Secure Hash Algorithm/Ⱥɥɝɨɪɢɬɦ

ɛɟɡɨɩɚɫɧɨɝɨ ɯɷɲɢɪɨɜɚɧɢɹ) ɩɨɪɨɠɞɚɟɬ 160-

ɛɢɬɨɜɵɣ ɞɚɣɞɠɟɫɬ ɞɥɹ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ

ɩɚɤɟɬɧɵɯ ɞɚɧɧɵɯ.

ȼɵɛɟɪɢɬɟ DES, ɟɫɥɢ ɧɟɨɛɯɨɞɢɦɨ ɨɛɟɫɩɟɱɢɬɶ

ɦɢɧɢɦɚɥɶɧɭɸ ɡɚɳɢɬɭ, ɢ 3DES - ɞɥɹ ɦɚɤɫɢɦɚɥɶɧɨɣ.

Ⱦɥɹ ɧɚɫɬɪɨɣɤɢ ɬɭɧɧɟɥɹ ɛɟɡ ɲɢɮɪɨɜɚɧɢɹ ɜɵɛɟɪɢɬɟ

NULL.

ȼɵɛɟɪɢɬɟ MD5 ɞɥɹ ɦɢɧɢɦɚɥɶɧɨɣ ɡɚɳɢɬɵ ɢ

SHA-1 - ɞɥɹ ɦɚɤɫɢɦɚɥɶɧɨɣ.

16.3 ɋɨɛɫɬɜɟɧɧɵɣ IP-ɚɞɪɟɫ

ȼɩɨɥɟMy IP Addr ɭɤɚɠɢɬɟ IP-ɚɞɪɟɫ OMNI ADSL ɜ ɝɥɨɛɚɥɶɧɨɣ ɫɟɬɢ. ȿɫɥɢ ɨɫɬɚɜɢɬɶ ɜ ɷɬɨɦ ɩɨɥɟ

0.0.0.0, ɬɨ ɞɥɹ ɭɫɬɚɧɨɜɤɢ ɬɭɧɧɟɥɹ VPN OMNI ADSL ɛɭɞɟɬ ɢɫɩɨɥɶɡɨɜɚɬɶ ɬɟɤɭɳɢɣ IP-ɚɞɪɟɫ OMNI

ADSL ɜ ɝɥɨɛɚɥɶɧɨɣ ɫɟɬɢ (ɫɬɚɬɢɱɟɫɤɢɣ ɢɥɢ ɞɢɧɚɦɢɱɟɫɤɢɣ). ȿɫɥɢ ɡɧɚɱɟɧɢɟ ɜ ɩɨɥɟ My IP Addr

ɦɟɧɹɟɬɫɹ ɩɨɫɥɟ ɧɚɫɬɪɨɣɤɢ, OMNI ADSL ɛɭɞɟɬ ɜɵɧɭɠɞɟɧ ɩɟɪɟɫɬɪɚɢɜɚɬɶ ɬɭɧɧɟɥɶ VPN.

16.4 Ⱥɞɪɟɫ ɛɟɡɨɩɚɫɧɨɝɨ ɲɥɸɡɚ

Secure Gateway Addr - ɷɬɨ IP-ɚɞɪɟɫ ɜ ɝɥɨɛɚɥɶɧɨɣ ɫɟɬɢ ɢɥɢ ɢɦɹ ɞɨɦɟɧɚ ɭɞɚɥɟɧɧɨɝɨ ɦɚɪɲɪɭɬɢɡɚɬɨɪɚ

IPSec (ɛɟɡɨɩɚɫɧɨɝɨ ɲɥɸɡɚ).