http://www.qbsd.ru/index.php?action=history&feed=atom&title=%D0%9D%D0%BE%D0%B2%D0%BE%D0%B5_IPSec_howto 2026-05-13T13:35:06Z История изменений этой страницы в вики MediaWiki 1.35.2 http://www.qbsd.ru/index.php?title=%D0%9D%D0%BE%D0%B2%D0%BE%D0%B5_IPSec_howto&diff=107&oldid=prev 2013-05-26T14:57:42Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 14:57, 26 мая 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l32" >Строка 32:</td> <td colspan="2" class="diff-lineno">Строка 32:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Аутентификация по X.509 сертификатам также поддерживается. Сертификаты могут быть созданы программой [http://www.openbsd.org/cgi-bin/man.cgi?query=ikectl ikectl].</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Аутентификация по X.509 сертификатам также поддерживается. Сертификаты могут быть созданы программой [http://www.openbsd.org/cgi-bin/man.cgi?query=ikectl ikectl].</div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Категория:Howto]]</ins></div></td></tr> </table>

172.16.0.1 http://www.qbsd.ru/index.php?title=%D0%9D%D0%BE%D0%B2%D0%BE%D0%B5_IPSec_howto&diff=78&oldid=prev 2013-05-26T06:59:52Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 06:59, 26 мая 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Строка 1:</td> <td colspan="2" class="diff-lineno">Строка 1:</td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2"> </td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== IPsec и IKE ==</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== IPsec и IKE ==</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'>−</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Данная статья <del class="diffchange diffchange-inline">100</del>% копипаст с [http://www.openbsd.ru www.openbsd.ru]</div></td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Данная статья <ins class="diffchange diffchange-inline">100 </ins>% копипаст с [http://www.openbsd.ru www.openbsd.ru]</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== ISAKMP/Oakley ===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== ISAKMP/Oakley ===</div></td></tr> </table>

172.16.0.1 http://www.qbsd.ru/index.php?title=%D0%9D%D0%BE%D0%B2%D0%BE%D0%B5_IPSec_howto&diff=15&oldid=prev 2013-05-25T10:55:24Z

<p></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 10:55, 25 мая 2013</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l1" >Строка 1:</td> <td colspan="2" class="diff-lineno">Строка 1:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== IPsec и IKE ==</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>== IPsec и IKE ==</div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Данная статья 100% копипаст с [http://www.openbsd.ru www.openbsd.ru]</ins></div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== ISAKMP/Oakley ===</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== ISAKMP/Oakley ===</div></td></tr> </table>

172.16.0.1 http://www.qbsd.ru/index.php?title=%D0%9D%D0%BE%D0%B2%D0%BE%D0%B5_IPSec_howto&diff=14&oldid=prev 2013-05-25T10:48:24Z

<p>Новая страница: « == IPsec и IKE == === ISAKMP/Oakley === Страницы руководств: [http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec.conf ipsec.conf] [http://ww…»</p> <p><b>Новая страница</b></p><div><br /> == IPsec и IKE ==<br /> <br /> === ISAKMP/Oakley ===<br /> <br /> Страницы руководств: [http://www.openbsd.org/cgi-bin/man.cgi?query=ipsec.conf ipsec.conf] [http://www.openbsd.org/cgi-bin/man.cgi?query=ipsecctl ipsecctl] [http://www.openbsd.org/cgi-bin/man.cgi?query=isakmpd isakmpd]<br /> <br /> === IKEv2 ===<br /> <br /> <br /> Поддержка протокола IKEv2, решающего ряд проблем ISAKMP/Oakley, реализована в [http://www.openbsd.org/cgi-bin/man.cgi?query=iked iked ] начиная с OpenBSD 5.1. Конфигурация сервера производится редактированием файла &#039;&#039;/etc/iked.conf&#039;&#039;. Например, для того чтобы произвести доступ к частной сети 10.0.0.0/16 по IPsec с использованием PSK аутентификации необходимо сконфигурировать сервер (172.23.61.134) для доступа клиентов (172.23.61.0/24):<br /> <br /> &lt;source lang=c&gt;<br /> ikev2 &quot;test&quot; esp from 10.0.0.0/16 to any \<br /> peer 172.23.61.0/24 local 172.23.61.134 \<br /> psk humppa<br /> &lt;/source&gt;<br /> <br /> и клиент (172.23.61.156):<br /> &lt;source lang=c&gt;<br /> ikev2 &quot;test&quot; active esp from any to 10.0.0.0/16 \<br /> peer 172.23.61.134 local 172.23.61.156 \<br /> psk humppa<br /> &lt;/source&gt;<br /> <br /> Протестировать конфигурацию можно запустив [http://www.openbsd.org/cgi-bin/man.cgi?query=iked iked ] в режиме отладки:<br /> <br /> # iked -dv<br /> <br /> Дополнительную отладочную печать можно получить, указав два или три ключа &#039;&#039;-v&#039;&#039;.<br /> <br /> Аутентификация по X.509 сертификатам также поддерживается. Сертификаты могут быть созданы программой [http://www.openbsd.org/cgi-bin/man.cgi?query=ikectl ikectl].</div>

172.16.0.1