https://wiki.securepoint.de/index.php?action=history&feed=atom&title=UTM%2FVPN%2FCloud-Konzentrator
UTM/VPN/Cloud-Konzentrator - Versionsgeschichte
2026-06-04T06:37:10Z
Versionsgeschichte dieser Seite in Securepoint Wiki
MediaWiki 1.43.5
https://wiki.securepoint.de/index.php?title=UTM/VPN/Cloud-Konzentrator&diff=94882&oldid=prev
Maltea am 28. Februar 2025 um 10:39 Uhr
2025-02-28T10:39:36Z
<p></p>
<a href="https://wiki.securepoint.de/index.php?title=UTM/VPN/Cloud-Konzentrator&diff=94882&oldid=91781">Änderungen zeigen</a>
Maltea
https://wiki.securepoint.de/index.php?title=UTM/VPN/Cloud-Konzentrator&diff=91781&oldid=prev
Lauritzl: Die Seite wurde neu angelegt: „{{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{:UTM/VPN/Cloud-Konzentrator.lang}} </div><div class="new_design"></div>{{TOC2|limit=3}} {{Header|05.2024| |new=true |Menu={{Menu-UTM|VPN|SSL-VPN}} }} ---- === {{#var:Vorbemerkung}} === <div class="einrücken"> {{#var:Vorbemerkung--desc}} {{Bild|{{#var:Vorbemerkung--Bild}} | {{#var:Vorbemerkung--cap}} | class=noborder}} <br clear=all></div> ---- === {{#var:Konfiguration Allgemein}} === <div class="ein…“
2024-05-30T12:22:59Z
<p>Die Seite wurde neu angelegt: „{{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{:UTM/VPN/Cloud-Konzentrator.lang}} </div><div class="new_design"></div>{{TOC2|limit=3}} {{Header|05.2024| |new=true |Menu={{Menu-UTM|VPN|SSL-VPN}} }} ---- === {{#var:Vorbemerkung}} === <div class="einrücken"> {{#var:Vorbemerkung--desc}} {{Bild|{{#var:Vorbemerkung--Bild}} | {{#var:Vorbemerkung--cap}} | class=noborder}} <br clear=all></div> ---- === {{#var:Konfiguration Allgemein}} === <div class="ein…“</p>
<p><b>Neue Seite</b></p><div>{{Set_lang}}<br />
<br />
{{#vardefine:headerIcon|spicon-utm}}<br />
{{:UTM/VPN/Cloud-Konzentrator.lang}}<br />
<br />
</div><div class="new_design"></div>{{TOC2|limit=3}}<br />
{{Header|05.2024|<br />
|new=true<br />
|Menu={{Menu-UTM|VPN|SSL-VPN}}<br />
}}<br />
----<br />
<br />
=== {{#var:Vorbemerkung}} ===<br />
<div class="einrücken"><br />
{{#var:Vorbemerkung--desc}}<br />
{{Bild|{{#var:Vorbemerkung--Bild}} | {{#var:Vorbemerkung--cap}} | class=noborder}}<br />
<br clear=all></div><br />
----<br />
<br />
=== {{#var:Konfiguration Allgemein}} ===<br />
<div class="einrücken"><br />
{{#var:Konfiguration Allgemein--desc}}<br />
{| class="sptable2 pd5 zh1"<br />
| Terra-Cloud UTM || öffentliche IP: 203.0.113.203<br />
|-<br />
| Standort A || internes Netz: 192.168.174.0/24<br />
|-<br />
| Standort B || internes Netz: 192.168.173.0/24<br />
|}<br />
<br />
</div><br />
<br />
==== {{#var:Terra-Cloud UTM als S2S Server}} ====<br />
===== {{#var:Installationsassistent}} =====<br />
{{h-6| {{#var:Schritt}} 1 | 2= {{#var:Schritt}} 1 <i class="host utm">Terracloud UTM</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Server Schritt 1--desc}}<br />
| class="Bild" rowspan="2" | {{Bild|{{#var:S2S Server Schritt 1--Bild}} | {{#var:Installationsschritt}} 1||{{#var:SSL-VPN Verbindung hinzufügen}}|VPN|SSL-VPN}}<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| colspan=2 |<br />
{{h6| {{#var:Schritt}} 2 | 2= {{#var:Schritt}} 2 <i class="host utm">Terracloud UTM</i> }}<br />
|-<br />
| {{#var:S2S Server Schritt 2--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Server Schritt 2--Bild}} | {{#var:Installationsschritt}} 2}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Schritt}} 3 | 2= {{#var:Schritt}} 3 <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br />
{{#var:S2S Server Schritt 3--desc}}<br />
</div><br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="7" | {{Bild| {{#var:S2S Server Schritt 3--Bild}} | {{#var:Installationsschritt}} 3}}<br />
|-<br />
| {{b|Name:}} || {{ic|S2S}}-server || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Protokoll}}: }} || {{Button|UDP|dr|class=mw8}} || {{#var:Protokoll--desc}}<br />
|-<br />
| {{b|Port:}} || {{ic|1194|c}} || {{#var:Port--desc}}<br />
|-<br />
| {{b|{{#var:Serverzertifikat}}: }} || {{Button|cs-ttt-point|dr|class=available}} || {{#var:Serverzertifikat--desc}}<br />
|-<br />
| {{b|{{#var:Servernetzwerke freigeben}}: }} || {{ic| {{cb| 192.168.173.0/24}} |cb}} || {{#var:Netzwerk Standort B freigeben--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
|}<br />
<br />
{{h6| {{#var:Schritt}} 4 | 2= {{#var:Schritt}} 4 <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br />
{{#var:S2S Server Schritt 4--desc}}<br />
</div><br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="5" | {{Bild| {{#var:S2S Server Schritt 4--Bild}} | {{#var:Installationsschritt}} 4}}<br />
|-<br />
| {{b|{{#var:Transfer-Netzwerk}}: }} || {{ic|192.168.190.0/24|class=available}} || {{#var:Transfer-Netzwerk--desc}}<br />
|-<br />
| {{b|{{#var:Server-Tunneladresse}}:}} || {{ic|192.168.190.1/32|class=available}} || rowspan="2" | {{#var:Server-Tunneladresse--desc}}<br />
|-<br />
| {{b|{{#var:IPv4 Client-Tunneladresse}}: }} || {{ic|192.168.190.2/24|class=available}} <br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Schritt}} 5 | 2= {{#var:Schritt}} 5 <i class="host utm">Terracloud UTM</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="6" | {{Bild| {{#var:S2S Server Schritt 5--Bild}} |{{#var:Installationsschritt}} 5}}<br />
|-<br />
| {{b|Name:}} || {{ic|S2S-client|tr-odd|class=available|tr-odd}} || {{#var:Name-S2S Server Schritt 5--desc}}<br />
|-<br />
| {{b|{{#var:Client-Zertifikat}}:}} || {{Button|ssl-vpn-ClientA|dr|class=available}} || {{#var:Client-Zertifikat--desc}}<br />
|-<br />
| {{b|{{#var:Clientnetzwerke freigeben}}: }} || {{ic| {{cb|192.168.174.0/24}} |cb|class=available}} || {{#var:Netzwerk Standort A freigeben--desc}}<br />
|- class="Leerzeile"<br />
| colspan="3" | {{Hinweis-box|{{#var:Zertifikat Hinweis}} |g|c=graul|fs__icon=em2}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
==== {{#var:UTM Standort A als S2S Client}} ====<br />
===== {{#var:Installationsassistent}} =====<br />
{{h-6| {{#var:Schritt}} 1 | 2= {{#var:Schritt}} 1 <i class="host utm">Standort A</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 1--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 1--Bild}} |{{#var:Installationsschritt}} 1||{{#var:SSL-VPN Verbindung hinzufügen}}|VPN|SSL-VPN}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 2 | 2= {{#var:Schritt}} 2 <i class="host utm">Standort A</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 2--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 2--Bild}} |{{#var:Installationsschritt}} 2}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 3 | 2= {{#var:Schritt}} 3 <i class="host utm">Standort A</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=4 | {{#var:S2S Client Schritt 3--desc}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="5" | {{Bild| {{#var:S2S Client Schritt 3--Bild}} |{{#var:Installationsschritt}} 3}}<br />
|-<br />
| {{b|Name:}} || {{ic|S2S}}-client || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Protokoll}}: }} || {{Button|UDP|dr|class=available}} || {{#var:Protokoll--desc}} <li class="list--element__alert list--element__hint">{{#var:S2S Client Protokoll-Hinweis}}</li><br />
|-<br />
| {{b|{{#var:Client-Zertifikat}}: }} || {{Button|ssl-vpn-ClientA|dr|class=mw6}} || {{#var:S2S Client-Zertifikat--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 4 | 2= {{#var:Schritt}} 4 <i class="host utm">Standort A</i> }}<br />
<div class="Einrücken"><br />
{{#var:Dieser Installationsschritt entfällt}}<br />
</div><br />
<br />
<br />
{{h6| {{#var:Schritt}} 5 | 2= {{#var:Schritt}} 5 <i class="host utm">Standort A</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 5--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 5--Bild}} |{{#var:Installationsschritt}} 5}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
===== {{#var:Netzwerkobjekte und Paketfilterregeln erstellen}} =====<br />
{{h6| {{#var:Netzwerkobjekte}} | 2= {{#var:Netzwerkobjekte}} <i class="host utm">Standort A</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=4 | {{#var:Netzwerkobjekte-Pfad}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="7" | {{Bild| {{#var:Client Netzwerkobjekt ClientB--Bild}} |{{#var:Netzwerkobjekte hinzufügen--cap}}||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientB-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}: }} || {{Button|{{#var:VPN-Netzwerk}} |dr|class=available}} || {{#var:Regelwerk-Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.173.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse Client B--desc}}<br>{{#var:Regelwerk-Adresse--desc}}<br />
{{Einblenden3| {{#var:Hinweis bei mehreren Servernetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Servernetzwerken--desc}}</span></div><br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-S2S-client|dr|class=available}} || {{#var:Regelwerk-Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}:}} || {{ic| |class=available}} || Optional<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Paketfilterregeln}} | 2= {{#var:Paketfilterregeln}} <i class="host utm">Standort A</i> }}<br />
<div class="einrücken"><br />
{{#var:Paketfilterregeln-Pfad}}<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1 nonoborder"<br />
|- class="bold small no1cell"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || style="min-width:12em;"| {{#var:Quelle}} || style="min-width:12em;"| {{#var:Ziel}} || style="min-width:12em;"| {{#var:Dienst}} || style="min-width:6em;"| NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} ||style="min-width:5em;"|<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|network|o|-}} internal-network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientB-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientB-Network || {{spc|network|o|-}} internal-network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|}<br />
<br clear=all></div><br />
----<br />
<br />
=== {{#var:Konfiguration Szenario S2S}} ===<br />
==== {{#var:Terracloud UTM Konfiguration anpassen}} ====<br />
{{h5 | {{#var:Zweiten Client hinzufügen}} | {{#var:Zweiten Client hinzufügen}} {{host|Terracloud UTM}} }}<br />
<div class="einrücken"><br />
{{#var:Zweiten Client hinzufügen--desc}}<br />
<br clear=all></div><br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="8" | {{Bild| {{#var:Zweiten Client hinzufügen--Bild}}|2=<i class="host utm">Terracloud UTM</i>|4={{#var:SSL-VPN Client-Gegenstelle hinzufügen}}|5=VPN|6=SSL-VPN|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|S2S-B}}-client || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Client-Zertifikat}}:}} || {{Button|ssl-vpn-ClientB|dr|class=available}} || {{#var:Client-Zertifikat--desc}}<br />
|-<br />
| {{b|{{#var:IPv4 Tunnel Adresse}}:}} || {{ic|192.168.190.3|rechts|icon=/24 |iconw=x|class=mw11}} || {{#var:IPv4 Tunnel Adresse--desc}}<br />
|-<br />
| {{b|{{#var:Servernetzwerke freigeben}}: }} || {{ic| {{cb|192.168.174.0/24}} |cb|class=available}} || {{#var:Netzwerk Standort A freigeben--desc}}<br />
|-<br />
| {{b|{{#var:Clientnetzwerke freigeben}}: }} || {{ic| {{cb|192.168.173.0/24}} |cb|class=available}} || {{#var:Netzwerk Standort B freigeben--desc}}<br />
|- class="Leerzeile"<br />
| colspan="3" | {{Hinweis-box|{{#var:Zertifikat Hinweis}} |g|c=graul|fs__icon=em2}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
===== {{#var:Netzwerkobjekte und Paketfilterregeln erstellen}} =====<br />
{{h6| {{#var:Netzwerkobjekte}} |2={{#var:Netzwerkobjekte}} <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br><br />
{{#var:Netzwerkobjekte Allgemein--desc}}<br />
<br />
<br></div><br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class=Bild rowspan="7" | {{Bild| {{#var:Netzwerkobjekt Client A--Bild}}| ||{{#var:Netzwerkobjekte hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientA-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}:}} || {{Button|VPN-Netzwerk|dr|class=available}} || {{#var:Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.174.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse--desc}}<br><br />
{{Einblenden3| {{#var:Hinweis bei mehreren Clientnetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Clientnetzwerken--desc}}</span></div><br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-S2S-server|dr|class=available}} || {{#var:Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}: }} || {{ic| |class=available}} || Optional<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientB-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
| class=Bild rowspan="3" | {{Bild|{{#var:Server Netzwerkobjekt Client B--Bild}}| ||{{#var:Netzwerkobjekte hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.173.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse Client B--desc}}<br><br />
{{Einblenden3| {{#var:Hinweis bei mehreren Clientnetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Clientnetzwerken--desc}}</span></div><br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Paketfilterregeln}} |2={{#var:Paketfilterregeln}} <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br />
{{#var:Portfilterregeln--desc}}<br />
<br clear=all></div><br />
<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1 nonoborder Einrücken"<br />
|- class="bold small no1cell"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || style="min-width:12em;"| {{#var:Quelle}} || style="min-width:12em;"| {{#var:Ziel}} || style="min-width:12em;"| {{#var:Dienst}} || style="min-width:6em;"| NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} ||style="min-width:5em;"|<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientB-Network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientB-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|}<br />
<br />
==== {{#var:UTM Standort B als S2S Client}} ====<br />
{{h-5| {{#var:Installationsassistent}} | {{#var:Installationsassistent}} {{host| {{#var:Standort}} B}} }}<br />
{{h-6| {{#var:Schritt}} 1 | 2= {{#var:Schritt}} 1 }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 1--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 1--Bild}} |{{#var:Installationsschritt}} 1||{{#var:SSL-VPN Verbindung hinzufügen}}|VPN|SSL-VPN}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 2 | 2= {{#var:Schritt}} 2 <i class="host utm">Standort B</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 2--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 2--Bild}} |{{#var:Installationsschritt}} 2}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 3 | 2= {{#var:Schritt}} 3 <i class="host utm">Standort B</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=4 | {{#var:S2S Client Schritt 3--desc}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="5" | {{Bild| {{#var:S2S ClientB Schritt 3--Bild}} |{{#var:Installationsschritt}} 3}}<br />
|-<br />
| {{b|Name:}} || {{ic|S2S}}-client || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Protokoll}}: }} || {{Button|UDP|dr|class=available}} || {{#var:Protokoll--desc}} <li class="list--element__alert list--element__hint">{{#var:S2S Client Protokoll-Hinweis}}</li><br />
|-<br />
| {{b|{{#var:Client-Zertifikat}}: }} || {{Button|ssl-vpn-ClientB|dr|class=mw6}} || {{#var:S2S Client-Zertifikat--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
<br />
{{h6| {{#var:Schritt}} 4 | 2= {{#var:Schritt}} 4 <i class="host utm">Standort B</i> }}<br />
<div class="Einrücken"><br />
{{#var:Dieser Installationsschritt entfällt}}<br />
</div><br />
<br />
<br />
{{h6| {{#var:Schritt}} 5 | 2= {{#var:Schritt}} 5 <i class="host utm">Standort B</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:S2S Client Schritt 5--desc}}<br />
| class="Bild" rowspan="2" | {{Bild| {{#var:S2S Client Schritt 5--Bild}} |{{#var:Installationsschritt}} 5}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
===== {{#var:Netzwerkobjekte und Paketfilterregeln erstellen}} =====<br />
{{h6| {{#var:Netzwerkobjekte}} | 2= {{#var:Netzwerkobjekte}} <i class="host utm">Standort B</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=4 | {{#var:Netzwerkobjekte-Pfad}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="7" | {{Bild| {{#var:Client Netzwerkobjekt Client A--Bild}} |{{#var:Netzwerkobjekte hinzufügen--cap}}||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientA-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}: }} || {{Button|{{#var:VPN-Netzwerk}} |dr|class=available}} || {{#var:Regelwerk-Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.174.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse Client A--desc}}<br>{{#var:Regelwerk-Adresse--desc}}<br />
{{Einblenden3| {{#var:Hinweis bei mehreren Servernetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Servernetzwerken--desc}}</span></div><br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-S2S-client|dr|class=available}} || {{#var:Regelwerk-Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}:}} || {{ic| |class=available}} || Optional<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Paketfilterregeln}} | 2= {{#var:Paketfilterregeln}} <i class="host utm">Standort B</i> }}<br />
<div class="einrücken"><br />
{{#var:Paketfilterregeln-Pfad}}<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1 nonoborder"<br />
|- class="bold small no1cell"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || style="min-width:12em;"| {{#var:Quelle}} || style="min-width:12em;"| {{#var:Ziel}} || style="min-width:12em;"| {{#var:Dienst}} || style="min-width:6em;"| NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} ||style="min-width:5em;"|<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|network|o|-}} internal-network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|network|o|-}} internal-network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|}<br />
<br clear=all></div><br />
----<br />
<br />
=== {{#var:Konfiguration Szenario S2E}} ===<br />
==== {{#var:Terracloud UTM Konfiguration anpassen}} ====<br />
===== {{#var:Netzwerkobjekte und Paketfilterregeln erstellen}} =====<br />
{{h6| {{#var:Netzwerkobjekte}} |2={{#var:Netzwerkobjekte}} <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br><br />
{{#var:Netzwerkobjekte Allgemein--desc}}<br />
<br />
<br></div><br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class=Bild rowspan="7" | {{Bild| {{#var:Netzwerkobjekt Client A--Bild}}| ||{{#var:Netzwerkobjekte hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientA-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}:}} || {{Button|VPN-Netzwerk|dr|class=available}} || {{#var:Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.174.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse--desc}}<br><br />
{{Einblenden3| {{#var:Hinweis bei mehreren Clientnetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Clientnetzwerken--desc}}</span></div><br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-S2S-server|dr|class=available}} || {{#var:Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}: }} || {{ic| |class=available}} || Optional<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| {{b|Name:}} || {{ic|Roadwarrior-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
| class=Bild rowspan="3" | {{Bild|{{#var:Server Netzwerkobjekt Roadwarrior--Bild}}| ||{{#var:Netzwerkobjekte hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.173.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse Client B--desc}}<br><br />
{{Einblenden3| {{#var:Hinweis bei mehreren Clientnetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Clientnetzwerken--desc}}</span></div><br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Paketfilterregeln}} |2={{#var:Paketfilterregeln}} <i class="host utm">Terracloud UTM</i> }}<br />
<div class="Einrücken"><br />
{{#var:Portfilterregeln--desc}}<br />
<br clear=all></div><br />
<br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1 nonoborder Einrücken"<br />
|- class="bold small no1cell"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || style="min-width:12em;"| {{#var:Quelle}} || style="min-width:12em;"| {{#var:Ziel}} || style="min-width:12em;"| {{#var:Dienst}} || style="min-width:6em;"| NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} ||style="min-width:5em;"|<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} Roadwarrior-Network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|vpn-network|o|-}} Roadwarrior-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|}<br />
<br />
<br />
==== {{#var:UTM Standort B als Roadwarrior}} ====<br />
{{h-5| {{#var:Installationsassistent}} | {{#var:Installationsassistent}} {{host| Roadwarrior}} }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{h-6| {{#var:Schritt}} 1 | 2= {{#var:Schritt}} 1 }}<br />
|-<br />
| {{#var:RW Schritt 1--desc}}<br />
| class="Bild" rowspan="2" | {{Bild|{{#var:RW Schritt 1--Bild}} |{{#var:Einrichtung Schritt}} 1||{{#var:SSL-VPN Verbindung hinzufügen}}|VPN|SSL-VPN}}<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| {{h6| {{#var:Schritt}} 2 | 2= {{#var:Schritt}} 2 <i class="host utm">Roadwarrior</i> }}<br />
|-<br />
| {{#var:RW Schritt 2--desc}}<br />
| class="Bild" rowspan="2" | {{Bild|{{#var:RW Schritt 2--Bild}} |{{#var:Einrichtung Schritt}} 2}}<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| {{h6| {{#var:Schritt}} 3 | 2= {{#var:Schritt}} 3 <i class="host utm">Roadwarrior</i> }}<br />
|-<br />
| {{#var:RW Schritt 3--desc}}<br />
|-<br />
| colspan=2 |<br />
{| class="sptable2 pd5 zh1 nonoborder"<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="6" | {{Bild|{{#var:RW Schritt 3--Bild}} |{{#var:Einrichtung Schritt}} 3}}<br />
|-<br />
| {{b|Name:}} || {{ic|Roadwarrior}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Protokoll}} }} || {{Button|UDP|dr}} || {{#var:Protokoll--desc}}<br />
|-<br />
| {{b|Port:}} || {{ic|1194|c}} || {{#var:Port--desc}}<br />
|-<br />
| {{b|{{#var:Serverzertifikat}}:}} || {{Button|Roadwarrior|dr}} || {{#var:Serverzertifikat--desc}}<br />
|-<br />
| {{b|{{#var:Servernetzwerke freigeben}} }} || {{ic| {{cb|192.168.173.0/24}} |cb|class=mw8}} || {{#var:Netzwerk Standort A freigeben--desc}}<br />
|}<br />
|-<br />
| {{h6| {{#var:Schritt}} 4 | 2= {{#var:Schritt}} 4 <i class="host utm">Roadwarrior</i> }}<br />
|-<br />
| {{#var:RW Schritt 4--desc}}<br />
| class="Bild" rowspan="2" | {{Bild|{{#var:RW Schritt 4--Bild}} |{{#var:Einrichtung Schritt}} 4}}<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
| {{h6| {{#var:Schritt}} 5 | 2= {{#var:Schritt}} 5 <i class="host utm">Roadwarrior</i> }}<br />
|-<br />
| {{#var:RW Schritt 5--desc}}<br />
| class="Bild" rowspan="2" | {{Bild|{{#var:RW Schritt 5--Bild}} |{{#var:Einrichtung Schritt}} 5}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
===== Regelwerk =====<br />
{{h6| {{#var:Implizite Regeln}} | 2= {{#var:Implizite Regeln}} <i class="host utm">Roadwarrior</i> }}<br />
{| class="sptable2 pd5 zh1 Einrücken noborder"<br />
| {{#var:Implizite Regeln--desc}}<br />
| class="Bild" rowspan="3" | {{Bild| {{#var:Implizite Regeln--Bild}} | {{#var:Implizite Regeln--cap}}||{{#var:Implizite Regeln}}|Firewall|icon=fa-save}}<br />
|-<br />
| <li class="list--element__alert list--element__hint">{{#var:Implizite Regeln--Hinweis--Portänderung}}</li> <br clear=all></div><br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Netzwerkobjekte}} | 2= {{#var:Netzwerkobjekte}} <i class="host utm">Roadwarrior</i> }}<br />
<div class="Einrücken"><br />
{{#var:RW Netzwerkobjekte--desc}}<br />
</div><br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
! {{#var:cap}} || {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="7" | {{Bild|{{#var:RW Netzwerkobjekte--Bild}} |{{#var:Netzwerkobjekte hinzufügen--cap}}||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|SSL-VPN-RW-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}:}} || {{Button|{{#var:VPN-Netzwerk}}|dr|class=available}} || {{#var:RW-Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}:}} || {{ic|192.168.192.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:RW-Adresse--desc}}<br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-Roadwarrior|dr|class=available}} || {{#var:RW-Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}:}} || {{ic| |cb|class=available}} || Optional<br />
|- class="Leerzeile"<br />
| colspan="3" | {{#var:Speichern--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="7" | {{Bild| {{#var:RW Netzwerkobjekt Client A--Bild}} |{{#var:Netzwerkobjekte hinzufügen--cap}}||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|Name:}} || {{ic|sslvpn-S2S-ClientA-Network|class=available}} || {{#var:Eindeutiger Name}}<br />
|-<br />
| {{b|{{#var:Typ}}: }} || {{Button|{{#var:VPN-Netzwerk}} |dr|class=available}} || {{#var:Regelwerk-Typ--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.174.0|rechts|icon=/24 |iconw=x|class=available}} || {{#var:Adresse Client A--desc}}<br>{{#var:Regelwerk-Adresse--desc}}<br />
{{Einblenden3| {{#var:Hinweis bei mehreren Servernetzwerken}} |ausblenden|true|dezent}} <br />
{{#var:Hinweis bei mehreren Servernetzwerken--desc}}</span></div><br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ssl-Roadwarrior|dr|class=available}} || {{#var:RW-Zone--desc}}<br />
|-<br />
| {{b|{{#var:Gruppen}}:}} || {{ic| |class=available}} || Optional<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
<br />
{{h6| {{#var:Paketfilterregeln}} | 2= {{#var:Paketfilterregeln}} <i class="host utm">Roadwarrior</i> }}<br />
<div class="einrücken"><br />
{{#var:RW Paketfilterregeln--desc}}<br />
</div><br />
{| class="sptable2 Paketfilter pd5 tr--bc__white zh1 nonoborder Einrücken"<br />
|- class="bold small no1cell"<br />
| class="noborder bc__default" | || || <nowiki>#</nowiki> || style="min-width:12em;"| {{#var:Quelle}} || style="min-width:12em;"| {{#var:Ziel}} || style="min-width:12em;"| {{#var:Dienst}} || style="min-width:6em;"| NAT || Logging || {{#var:Aktion}} || {{#var:Aktiv}} ||style="min-width:5em;"|<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|network|o|-}} SSL-VPN-RW-Network || {{spc|network|o|-}} internal-network || {{spc|tcp|o|-}} ms-rdp || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|network|o|-}} internal-network || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|-<br />
| class="bc__default" | || {{spc|drag|o|-}} || || {{spc|vpn-network|o|-}} sslvpn-S2S-ClientA-Network || {{spc|network|o|-}} internal-network || {{spc|dienste|o|-}} default-internet || || {{Logging-Slider}} || {{Kasten|Accept|grün}} || {{ButtonAn|{{#var:ein}} }} || {{Button||w|fs=14}}{{Button||trash|fs=14}}{{Button||copy|fs=14}}<br />
|}</div>
Lauritzl