Zyxel OMNI ADSL LAN H [198/533] Security parameter index spi

Zyxel OMNI ADSL LAN H [198/533] Security parameter index spi
Ɋɭɤɨɜɨɞɫɬɜɨ ɩɨɥɶɡɨɜɚɬɟɥɹ ɞɥɹ ɦɚɪɲɪɭɬɢɡɚɬɨɪɨɜ ɫɟɪɢɢ OMNI ADSL LAN
16-22 ɗɤɪɚɧɵ VPN
Ɍɚɛɥ. 16-8 ɋɨɝɥɚɫɨɜɚɧɢɟ ɨɛɦɟɧɚ ɤɥɸɱɚɦɢ VPN: ɞɨɩɨɥɧɢɬɟɥɶɧɚɹ ɧɚɫɬɪɨɣɤɚ
ɉɈɅȿ ɈɉɂɋȺɇɂȿ
SA Life Time
(Seconds)
(ɉɪɨɞɨɥɠɢɬɟɥɶɧɨɫ
ɬɶ SA (ɜ
ɫɟɤɭɧɞɚɯ))
ȼ ɷɬɨɦ ɩɨɥɟ ɧɟɨɛɯɨɞɢɦɨ ɭɤɚɡɚɬɶ ɜɪɟɦɹ, ɤɨɬɨɪɨɟ ɞɨɥɠɧɨ ɩɪɨɣɬɢ ɞɨ ɬɨɝɨ, ɤɚɤ
ɚɜɬɨɦɚɬɢɱɟɫɤɢ ɧɚɱɧɟɬɫɹ ɫɨɝɥɚɫɨɜɚɧɢɟ ɧɨɜɨɝɨ SA-ɫɨɟɞɢɧɟɧɢɹ ɞɥɹ IKE. ȿɦɭ
ɦɨɠɟɬ ɛɵɬɶ ɩɪɢɫɜɨɟɧɨ ɡɧɚɱɟɧɢɟ ɜ ɩɪɟɞɟɥɚɯ ɨɬ 60 ɞɨ 3000000 ɫɟɤɭɧɞ (ɩɨɱɬɢ 35
ɞɧɟɣ).
Ɇɚɥɨɟ ɜɪɟɦɹ SA Life Time ɩɨɜɵɲɚɟɬ ɛɟɡɨɩɚɫɧɨɫɬɶ, ɬɚɤ ɤɚɤ ɲɥɸɡɚɦ VPN
ɩɪɢɯɨɞɢɬɫɹ ɱɚɳɟ ɨɛɧɨɜɥɹɬɶ ɲɢɮɪɭɸɳɢɟ ɢ ɚɭɬɟɧɬɢɮɢɰɢɪɭɸɳɢɟ ɤɥɸɱɢ. Ɉɞɧɚɤɨ
ɩɪɢ ɨɛɧɨɜɥɟɧɢɢ ɫɨɝɥɚɫɨɜɚɧɢɹ ɩɨ ɫɨɡɞɚɧɢɸ ɬɭɧɧɟɥɹ VPN ɜɫɟ ɩɨɥɶɡɨɜɚɬɟɥɢ,
ɢɦɟɸɳɢɟ ɜ ɷɬɨɬ ɦɨɦɟɧɬ ɞɨɫɬɭɩ ɤ ɭɞɚɥɟɧɧɵɦ ɪɟɫɭɪɫɚɦ, ɛɭɞɭɬ ɜɪɟɦɟɧɧɨ
ɨɬɤɥɸɱɟɧɵ.
Encapsulation
(ɂɧɤɚɩɫɭɥɹɰɢɹ)
ȼɵɛɟɪɢɬɟ ɢɡ ɪɚɫɤɪɵɜɚɸɳɟɝɨɫɹ ɫɩɢɫɤɚ ɪɟɠɢɦ Tunnel ɢɥɢ ɪɟɠɢɦ Transport.
Perfect Forward
Secrecy
(PFS)(ɂɞɟɚɥɶɧɚɹ
ɩɪɹɦɚɹ
ɛɟɡɨɩɚɫɧɨɫɬɶ)
ȼɨ ɜɬɨɪɨɣ ɮɚɡɟ ɫɨɡɞɚɧɢɹ SA-ɫɨɟɞɢɧɟɧɢɹ ɞɥɹ IPSec ɮɭɧɤɰɢɹ Perfect Forward
Secrecy (PFS) ɩɨ ɭɦɨɥɱɚɧɢɸ ɨɬɤɥɸɱɟɧɚ (None). ɗɬɨ ɩɨɡɜɨɥɹɟɬ ɭɜɟɥɢɱɢɬɶ
ɫɤɨɪɨɫɬɶ ɫɨɡɞɚɧɢɹ IPSec, ɨɞɧɚɤɨ ɫɧɢɠɚɟɬ ɛɟɡɨɩɚɫɧɨɫɬɶ. ȼɵɛɟɪɢɬɟ DH1 ɢɥɢ
DH2 ɢɡ ɪɚɫɤɪɵɜɚɸɳɟɝɨɫɹ ɫɩɢɫɤɚ ɞɥɹ ɜɤɥɸɱɟɧɢɹ ɩɪɨɬɨɤɨɥɚ PFS. DH1 ɨɡɧɚɱɚɟɬ
ɝɪɭɩɩɭ Ⱦɢɮɮɢ-ɏɟɥɥɦɚɧɚ 1: 768-ɛɢɬɨɜɨɟ ɫɥɭɱɚɣɧɨɟ ɱɢɫɥɨ. DH2 ɨɡɧɚɱɚɟɬ ɝɪɭɩɩɭ
Ⱦɢɮɮɢ-ɏɟɥɥɦɚɧɚ 2: 1024-ɛɢɬɧɨɟ (1 Ʉɛ) ɫɥɭɱɚɣɧɨɟ ɱɢɫɥɨ (ɛɨɥɟɟ ɛɟɡɨɩɚɫɧɨ, ɧɨ
ɪɚɛɨɬɚɟɬ ɦɟɞɥɟɧɧɟɟ).
Apply (ɉɪɢɦɟɧɢɬɶ)
ɓɟɥɤɧɢɬɟ ɩɨ Apply (ɉɪɢɦɟɧɢɬɶ)ɞɥɹ ɫɨɯɪɚɧɟɧɢɹ ɢɡɦɟɧɟɧɢɣ ɜ ɧɚɫɬɪɨɣɤɟ OMNI
ADSL ɢ ɜɨɡɜɪɚɬɚ ɤ ɷɤɪɚɧɭ VPN IKE.
Cancel (Ɉɬɦɟɧɚ)
ɓɟɥɤɧɢɬɟ ɩɨ Cancel (Ɉɬɦɟɧɚ) ɞɥɹ ɜɨɡɜɪɚɬɚ ɤ ɷɤɪɚɧɭ VPN IKE ɛɟɡ ɫɨɯɪɚɧɟɧɢɹ
ɢɡɦɟɧɟɧɢɣ ɧɚɫɬɪɨɣɤɢ.
16.12 Ɋɭɱɧɚɹ ɧɚɫɬɪɨɣɤɚ ɤɥɸɱɟɣ
Ɋɭɱɧɨɟ ɭɩɪɚɜɥɟɧɢɟ ɤɥɸɱɚɦɢ ɦɨɠɟɬ ɛɵɬɶ ɩɨɥɟɡɧɨ ɜ ɫɥɭɱɚɟ, ɟɫɥɢ ɜɨɡɧɢɤɚɸɬ ɤɚɤɢɟ-ɥɢɛɨ ɩɪɨɛɥɟɦɵ ɩɪɢ
ɢɫɩɨɥɶɡɨɜɚɧɢɢ ɭɩɪɚɜɥɟɧɢɹ IKE.
16.12.1 ɂɧɞɟɤɫ ɩɚɪɚɦɟɬɪɚ ɛɟɡɨɩɚɫɧɨɫɬɢ (Security Parameter Index,
SPI)
SPI ɢɫɩɨɥɶɡɭɟɬɫɹ ɞɥɹ ɬɨɝɨ, ɱɬɨɛɵ ɪɚɡɥɢɱɚɬɶ ɫɨɟɞɢɧɟɧɢɹ SA ɫ ɨɞɧɢɦ ɢ ɬɟɦ ɠɟ ɚɞɪɟɫɚɬɨɦ ɢ
ɢɫɩɨɥɶɡɭɸɳɢɟ ɨɞɢɧ ɢ ɬɨɬ ɠɟ ɩɪɨɬɨɤɨɥ IPSec. ɗɬɨɬ ɩɚɪɚɦɟɬɪ ɞɨɩɭɫɤɚɟɬ ɨɛɴɟɞɢɧɟɧɢɟ ɧɟɫɤɨɥɶɤɢɯ
ɫɨɟɞɢɧɟɧɢɣ SA ɜ ɨɞɧɨɦ ɲɥɸɡɟ. Ɂɧɚɱɟɧɢɟ SPI (Security Parameter Index) ɜɦɟɫɬɟ ɫ IP-ɚɞɪɟɫɨɦ
ɧɚɡɧɚɱɟɧɢɹ ɭɧɢɤɚɥɶɧɵɦ ɨɛɪɚɡɨɦ ɢɞɟɧɬɢɮɢɰɢɪɭɟɬ ɤɨɧɤɪɟɬɧɨɟ ɫɨɟɞɢɧɟɧɢɟ ɜ ɪɚɦɤɚɯ ɫɨɝɥɚɲɟɧɢɹ ɩɨ
ɛɟɡɨɩɚɫɧɨɫɬɢ (Security Association, SA). Ɂɧɚɱɟɧɢɟ SPI ɩɟɪɟɞɚɟɬɫɹ ɨɬ ɭɞɚɥɟɧɧɨɝɨ ɲɥɸɡɚ VPN

Содержание

Скачать