Zyxel OMNI ADSL LAN H Инструкция по эксплуатации онлайн [192/533] 211427

Ɋɭɤɨɜɨɞɫɬɜɨ ɩɨɥɶɡɨɜɚɬɟɥɹ ɞɥɹ ɦɚɪɲɪɭɬɢɡɚɬɨɪɨɜ ɫɟɪɢɢ OMNI ADSL LAN

16-16 ɗɤɪɚɧɵ VPN

Ɋɢɫ. 16-4 Ⱦɜɟ ɮɚɡɵ ɫɨɡɞɚɧɢɹ ɫɨɟɞɢɧɟɧɢɹ/ɫɨɝɥɚɲɟɧɢɹ ɩɨ ɛɟɡɨɩɚɫɧɨɫɬɢ SA ɩɨ IPSec

ȼ ɩɟɪɜɨɣ ɮɚɡɟ ɧɟɨɛɯɨɞɢɦɨ ɜɵɩɨɥɧɢɬɶ ɫɥɟɞɭɸɳɢɟ ɞɟɣɫɬɜɢɹ:

¾ ȼɵɛɪɚɬɶ ɪɟɠɢɦ ɫɨɝɥɚɫɨɜɚɧɢɹ.

¾ Ⱥɭɬɟɧɬɢɮɢɰɢɪɨɜɚɬɶ ɫɨɟɞɢɧɟɧɢɟ ɫ ɩɨɦɨɳɶɸ ɩɪɟɞɜɚɪɢɬɟɥɶɧɨ ɫɨɝɥɚɫɨɜɚɧɧɨɝɨ ɫɨɜɦɟɫɬɧɨ

ɢɫɩɨɥɶɡɭɟɦɨɝɨ ɤɥɸɱɚ.

¾ ȼɵɛɪɚɬɶ ɚɥɝɨɪɢɬɦ ɲɢɮɪɨɜɚɧɢɹ.

¾ ȼɵɛɪɚɬɶ ɚɥɝɨɪɢɬɦ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ.

¾ ȼɵɛɪɚɬɶ ɝɪɭɩɩɭ ɤɥɸɱɟɣ ɩɨ ɦɟɬɨɞɭ ɲɢɮɪɨɜɚɧɢɹ Ⱦɢɮɮɢ-ɏɟɥɥɦɚɧɚ ɫ ɩɨɦɨɳɶɸ ɨɬɤɪɵɬɨɝɨ

ɤɥɸɱɚ (DH1 ɢɥɢ DH2).

¾ ɍɫɬɚɧɨɜɢɬɶ ɜɪɟɦɹ ɫɭɳɟɫɬɜɨɜɚɧɢɹ ɫɨɟɞɢɧɟɧɢɹ SA ɞɥɹ ɨɛɦɟɧɚ ɤɥɸɱɚɦɢ ɩɨ ɩɪɨɬɨɤɨɥɭ IKE.

ȼ ɞɚɧɧɨɦ ɩɨɥɟ ɭɤɚɡɵɜɚɟɬɫɹ ɩɪɨɞɨɥɠɢɬɟɥɶɧɨɫɬɶ ɫɨɟɞɢɧɟɧɢɹ SA ɞɥɹ IKE, ɩɨ ɢɫɬɟɱɟɧɢɢ

ɤɨɬɨɪɨɝɨ ɨɧɨ ɩɪɟɪɵɜɚɟɬɫɹ. ɋɨɟɞɢɧɟɧɢɟ SA ɞɥɹ IKE ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɨɬɤɥɸɱɚɟɬɫɹ ɜ ɫɥɭɱɚɟ

ɩɪɟɜɵɲɟɧɢɹ ɭɫɬɚɧɨɜɥɟɧɧɨɣ ɩɪɨɞɨɥɠɢɬɟɥɶɧɨɫɬɢ ɟɝɨ ɫɭɳɟɫɬɜɨɜɚɧɢɹ. ȿɫɥɢ ɩɪɨɢɫɯɨɞɢɬ

ɨɬɤɥɸɱɟɧɢɟ SA ɞɥɹ IKE ɩɪɢ ɭɠɟ ɭɫɬɚɧɨɜɥɟɧɧɨɦ ɫɨɟɞɢɧɟɧɢɢ SA ɞɥɹ IPSec, ɩɨɫɥɟɞɧɟɟ

ɨɫɬɚɟɬɫɹ ɩɨɞɤɥɸɱɟɧɧɵɦ.

ȼɨ ɜɬɨɪɨɣ ɮɚɡɟ ɧɟɨɛɯɨɞɢɦɨ ɜɵɩɨɥɧɢɬɶ ɫɥɟɞɭɸɳɢɟ ɞɟɣɫɬɜɢɹ:

¾ ȼɵɛɪɚɬɶ ɩɪɨɬɨɤɨɥ, ɤɨɬɨɪɵɣ ɛɭɞɟɬ ɢɫɩɨɥɶɡɨɜɚɬɶɫɹ ɞɥɹ ɨɛɦɟɧɚ ɤɥɸɱɚɦɢ (ESP ɢɥɢ AH).

¾ ȼɵɛɪɚɬɶ ɚɥɝɨɪɢɬɦ ɲɢɮɪɨɜɚɧɢɹ.

¾ ȼɵɛɪɚɬɶ ɚɥɝɨɪɢɬɦ ɚɭɬɟɧɬɢɮɢɤɚɰɢɢ

¾ ȼɵɛɪɚɬɶ ɩɨɞɞɟɪɠɤɭ "ɢɞɟɚɥɶɧɨɣ ɩɪɹɦɨɣ ɛɟɡɨɩɚɫɧɨɫɬɢ" (Perfect Forward Secrecy, PFS)

ɩɭɬɟɦ ɩɪɢɦɟɧɟɧɢɹ ɦɟɬɨɞɚ ɲɢɮɪɨɜɚɧɢɹ Ⱦɢɮɮɢ-ɏɟɥɥɦɚɧɚ ɫ ɨɬɤɪɵɬɵɦ ɤɥɸɱɨɦ – ɫɦ.

ɪɚɡɞɟɥ 16.10.3. Ⱦɥɹ ɨɬɤɥɸɱɟɧɢɹ ɮɭɧɤɰɢɢ PFS - ɜɵɛɪɚɬɶ None (ɡɚɞɚɧɧɭɸ ɩɨ ɭɦɨɥɱɚɧɢɸ).

¾ ȼɵɛɪɚɬɶ ɪɟɠɢɦ Tunnel (ɬɭɧɧɟɥɶɧɵɣ) ɢɥɢ Transport (ɬɪɚɧɫɩɨɪɬɧɵɣ) .

¾ ɍɫɬɚɧɨɜɢɬɶ ɜɪɟɦɹ ɫɭɳɟɫɬɜɨɜɚɧɢɹ ɫɨɟɞɢɧɟɧɢɹ SA ɞɥɹ ɨɛɦɟɧɚ ɤɥɸɱɚɦɢ ɩɨ ɩɪɨɬɨɤɨɥɭ

IPSec. ȼ ɞɚɧɧɨɦ ɩɨɥɟ ɭɤɚɡɵɜɚɟɬɫɹ ɩɪɨɞɨɥɠɢɬɟɥɶɧɨɫɬɶ ɫɨɟɞɢɧɟɧɢɹ SA ɞɥɹ IPSec, ɩɨ

ɢɫɬɟɱɟɧɢɢ ɤɨɬɨɪɨɝɨ ɨɧɨ ɩɪɟɪɵɜɚɟɬɫɹ. OMNI ADSL ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɩɨɜɬɨɪɹɟɬ

ɫɨɝɥɚɫɨɜɚɧɢɟ SA ɞɥɹ IPSec ɩɪɢ ɧɚɥɢɱɢɢ ɬɪɚɮɢɤɚ ɜ ɫɥɭɱɚɟ ɩɪɟɜɵɲɟɧɢɹ ɩɟɪɢɨɞɚ

ɫɭɳɟɫɬɜɨɜɚɧɢɹ SA ɞɥɹ IPSec. OMNI ADSL ɬɚɤɠɟ ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɩɨɜɬɨɪɹɟɬ ɫɨɝɥɚɫɨɜɚɧɢɟ

SA ɞɥɹ IPSec, ɜ ɫɥɭɱɚɟ ɜɤɥɸɱɟɧɢɹ ɮɭɧɤɰɢɢ ɩɨɞɞɟɪɠɚɧɢɹ ɫɨɟɞɢɧɟɧɢɣ ɧɚ ɨɛɨɢɯ