https://wiki.securepoint.de/index.php?action=history&feed=atom&title=UTM%2FVPN%2FIPSec_Verbindungen_bei_Multipathrouting
UTM/VPN/IPSec Verbindungen bei Multipathrouting - Versionsgeschichte
2026-04-23T14:39:47Z
Versionsgeschichte dieser Seite in Securepoint Wiki
MediaWiki 1.43.5
https://wiki.securepoint.de/index.php?title=UTM/VPN/IPSec_Verbindungen_bei_Multipathrouting&diff=90302&oldid=prev
Lauritzl: Die Seite wurde neu angelegt: „{{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{:UTM/VPN/IPSec Verbindungen bei Multipathrouting.lang}} </div><div class="new_design"></div>{{TOC2}}{{Select_lang}} {{Header|12.6.0| * {{#var:neu--rwi}} | 11.6 |{{Menu-UTM|VPN|IPSec}} }} ---- === {{#var:Einleitung}} === <div class="einrücken"> {{#var:Einleitung--desc}} <br clear=all></div> ---- <!-- === {{#var:Ausgangssituation}} === {{Bild…“
2024-02-20T13:56:50Z
<p>Die Seite wurde neu angelegt: „{{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{:UTM/VPN/IPSec Verbindungen bei Multipathrouting.lang}} </div><div class="new_design"></div>{{TOC2}}{{Select_lang}} {{Header|12.6.0| * {{#var:neu--rwi}} |<a href="/UTM/VPN/IPSec_Verbindungen_bei_Multipathrouting_v11.6" title="UTM/VPN/IPSec Verbindungen bei Multipathrouting v11.6"> 11.6</a> |{{Menu-UTM|VPN|IPSec}} }} ---- === {{#var:Einleitung}} === <div class="einrücken"> {{#var:Einleitung--desc}} <br clear=all></div> ---- <!-- === {{#var:Ausgangssituation}} === {{Bild…“</p>
<p><b>Neue Seite</b></p><div>{{Set_lang}}<br />
<br />
{{#vardefine:headerIcon|spicon-utm}}<br />
{{:UTM/VPN/IPSec Verbindungen bei Multipathrouting.lang}}<br />
<br />
</div><div class="new_design"></div>{{TOC2}}{{Select_lang}}<br />
{{Header|12.6.0|<br />
* {{#var:neu--rwi}}<br />
|[[UTM/VPN/IPSec Verbindungen bei Multipathrouting_v11.6 | 11.6]]<br />
|{{Menu-UTM|VPN|IPSec}}<br />
}}<br />
<br />
----<br />
<br />
=== {{#var:Einleitung}} ===<br />
<div class="einrücken"><br />
{{#var:Einleitung--desc}}<br />
<br clear=all></div><br />
----<br />
<br />
<!--<br />
=== {{#var:Ausgangssituation}} ===<br />
{{Bild|{{#var:Ausgangssituation--Bild}}|{{#var:Ausgangssituation--cap}}<br>{{f|Abbildung aktualisieren: § ppp0 → wan0 ; IP-Adresse: 203.0.113.113}}|class=Bild-t}}<br />
<div class="einrücken"><br />
{{#var:Ausgangssituation--desc}}<br />
<br clear=all></div><br />
----<br />
<br />
=== {{#var:Vorbereitung}} ===<br />
<div class="einrücken"><br />
{{#var:Vorbereitung--desc}}<br />
<br clear=all></div><br />
----<br />
--><br />
<br />
=== {{#var:Konfiguration einer IPSec Site-to-Site Verbindung}} ===<br />
<div class="Einrücken"><br />
{{#var:Konfiguration einer IPSec Site-to-Site Verbindung--desc}}<br />
</div><br />
<br />
<br />
==== {{#var:Einrichtungsassistent}} ====<br />
<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
===== {{Reiter|{{#var:Schritt 1 - Verbindungstyp}} }} =====<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class="Bild" rowspan="3" | {{Bild| {{#var:Schritt 1 - Verbindungstyp--Bild}} |{{#var:Einrichtungsschritt}} 1||{{#var:IPSec Verbindung hinzufügen}}|VPN|IPSec|icon=fa-close}}<br />
|-<br />
| {{#var:Verbindungstyp}} || {{#var:Site2Site--val}} <br />
| {{#var:Site2Site--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
===== {{Reiter|{{#var:Schritt 2 - Allgemein}} }} =====<br />
|-<br />
| {{b|Name:}} || {{ic|IPSec S2S {{#var:Zweigstelle}}|class=available}} || {{#var:Name--desc}} <br />
| class="Bild" rowspan="3" | {{Bild| {{#var:Schritt 2 - Allgemein--Bild}} |{{#var:Einrichtungsschritt}} 2}}<br />
|-<br />
| {{b|IKE Version:}} || {{Button|IKE v1}}{{Button|IKE v2|class=aktiv}} <br><small>Default: IKEv2</small> || {{#var:IKE Version--desc}}<br> {{info|{{#var:IKE-Multichannel--info}} }}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
===== {{Reiter|{{#var:Schritt 3 - Lokal}} }} =====<br />
|-<br />
| {{b|Local Gateway ID:}} || {{ic|{{#var:Beliebiges Interface}}|dr|class=available}} || {{#var:Local Gateway ID--desc}}<br />
| class="Bild" rowspan="9" | {{Bild| {{#var:Schritt 3 - Lokal--Bild}} |{{#var:Einrichtungsschritt}} 3}} <br />
|-<br />
| rowspan="2"| {{b|{{#var:Authentifizierungsmethode}}:}} || {{Button|Pre-Shared Key|dr|class=available}} || {{#var:Authentifizierungsmethode--desc}}<br />
|-<br />
| {{Button|{{#var:Zertifikat}}|dr|class=available}} || {{#var:AM Zertifikat--desc}}<br />
<!--<br />
|-<br />
| {{Button|RSA|dr|class=available}}<br><small>'''{{#var:Nur bei IKEv1}}'''</small> || {{#var:AM RSA--desc}}<br />
--><br />
|-<br />
| rowspan="3" | {{b|Pre-Shared Key}}<br> <small>'''{{#var:Pre-Shared Key Hinweis}}'''</small> || {{ic||class=available}} || {{#var:Pre-Shared Key--desc}}<br />
|-<br />
| {{Button||class=fas fa-arrow-rotate-left}} || {{#var:Schlüssel erstellen--desc}}<br />
|-<br />
| {{Button||class=fas fa-copy icon}} || {{#var:Schlüssel kopieren--desc}}<br />
|-<br />
| {{b|X.509 {{#var:Zertifikat}}:}}<br> <small>'''{{#var:X.509 Zertifikat Hinweis}}'''</small> || {{Button|{{#var:Server-Zertifikat}}|dr|class=available}} || {{#var:Zertifikat--desc}} <br>{{#var:Zertifikat--Hinweis}}<br />
<!--<br />
|-<br />
| {{b|{{#var:Privater RSA-Schlüssel}} }} <br><small>'''{{#var:Privater RSA-Schlüssel Hinweis}}'''</small> || {{Button|RSA-Site2Site|dr|class=available}} || {{#var:Privater RSA-Schlüssel--desc}}<br />
--><br />
|-<br />
| {{b|{{#var:Netzwerke freigeben}}:}} || {{ic| {{cb|192.168.222.0/24}} |cb|class=available}} || {{#var:Netzwerke freigeben--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
===== {{Reiter|{{#var:Schritt 4 - Gegenstelle}} }} =====<br />
|-<br />
| {{b|Remote Gateway:}} || {{ic|192.0.2.192|dr|class=available}} || {{#var:Remote Gateway--desc}} <br />
| class="Bild" rowspan="5" | {{Bild| {{#var:Schritt 4 - Gegenstelle--Bild}} |{{#var:Einrichtungsschritt}} 4}}<br />
|-<br />
| {{b|Remote Gateway ID:}} || {{ic|192.0.2.192|dr|class=available}} || {{#var:Remote Gateway ID--desc}}<br />
<!--<br />
|-<br />
| {{b|{{#var:Öffentlicher RSA-Schlüssel}} }} <br><small>'''{{#var:Privater RSA-Schlüssel Hinweis}}'''</small> || {{Button|RSA-Site2Site|dro|class=available}} || {{#var:Öffentlicher RSA-Schlüssel--desc}}<br />
--><br />
|-<br />
| {{b|{{#var:Netzwerke freigeben}}:}} || {{ic| {{cb|192.168.192.0/24}} |cb|class=available}} || {{#var:Netzwerke freigeben--desc}}<br />
|-<br />
|- class="Leerzeile"<br />
| colspan="3" | {{#var:Beenden}}<br />
|- class="Leerzeile"<br />
| colspan="3" | <li class="list--element__alert list--element__hint">{{#var:Phase2 bearbeiten--desc}}</li><br />
|- class="Leerzeile"<br />
|<br />
|}<br />
----<br />
<br />
=== {{#var:Anwendungsfall 1: Weitere PPPoE-Leitung}} ===<br />
{{Bild | {{#var:Anwendungsfall1--Bild}}|{{#var:Anwendungsfall1--cap}} |class=Bild-t width100 noborder}}<br />
<div class="einrücken"><br />
{{#var:Anwendungsfall 1--desc}}<br />
<br clear=all></div><br />
<br />
==== {{#var:Konfiguration mit ADSL}} ====<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=3 | {{#var:ADSL Netzwerkkonfiguration--desc}}<br />
| class=Bild noborder | {{Bild|{{#var:ADSL Netzwerkkonfiguration--Bild}}|{{#var:ADSL Netzwerkkonfiguration--cap}}||{{#var:Netzwerkkonfiguration}}|{{#var:Netzwerk}}|icon=fa-save}}<br />
|-<br />
| class=noborder colspan=3 | {{#var:Phase 1--desc}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class=Bild rowspan=9 | {{Bild|{{#var:ADSL Phase 1--Bild}}|{{#var:ADSL Phase 1--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|-<br />
| {{b|IKE Version:}} || {{ic|ikev2|tr-odd|class=available}} || {{#var:IKE Version--desc}}<br />
|-<br />
| {{b|Local Gateway:}} || {{ic|wan0|dr|class=available}} || {{#var:Local Gateway--desc}}<br />
|-<br />
| {{b|Local Gateway ID:}} || {{ic|wan0|dr|class=available}} || {{#var:Local Gateway ID--desc}}<br />
|-<br />
| {{b|Remote Host / Gateway:}} || {{ic|ipsec.ttt-point.de|dr|class=available}} || {{#var:Remote Host/Gateway--desc}}<br />
|-<br />
| {{b|Remote Host / Gateway ID:}} || {{ic|ipsec.ttt-point.de|dr|class=available}} || {{#var:Remote Host/Gateway ID--desc}}<br />
|-<br />
| {{b|{{#var:Lokale Authentifizierungsmethode}}:}} || {{Button|Pre-Shared Key|dr|class=available}} || {{#var:Lokale Authentifizierungsmethode--desc}}<br />
|-<br />
| {{b|{{#var:Startverhalten}}:}} || {{Button|Outgoing|dr|class=available}} || {{#var:Startverhalten--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
----<br />
<br />
=== {{#var:Anwendungsfall 2: Weitere SDSL-Leitung}} ===<br />
{{Bild | {{#var:Anwendungsfall2--Bild}}|{{#var:Anwendungsfall2--cap}} |class=Bild-t width100 noborder}}<br />
<div class="Einrücken">{{#var:Anwendungsfall 2--desc}}</div><br />
<br />
==== {{#var:Konfiguration mit SDSL}} ====<br />
{| class="sptable2 pd5 zh1 Einrücken"<br />
| class=noborder colspan=3 | {{#var:SDSL Netzwerkkonfiguration--desc}}<br />
| class=Bild noborder | {{Bild|{{#var:SDSL Netzwerkkonfiguration--Bild}}|{{#var:SDSL Netzwerkkonfiguration--cap}}||{{#var:Netzwerkkonfiguration}}|{{#var:Netzwerk}}|icon=fa-save}}<br />
|-<br />
| class=noborder colspan=3 | {{#var:Phase 1--desc}}<br />
|-<br />
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}<br />
| class=Bild rowspan=9 | {{Bild|{{#var:SDSL Phase 1--Bild}}|{{#var:SDSL Phase 1--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}<br />
|-<br />
| {{b|IKE Version:}} || {{ic|ikev2|tr-odd|class=available}} || {{#var:IKE Version--desc}}<br />
|-<br />
| {{b|Local Gateway:}} || {{ic|LAN3|dr|class=available}} || {{#var:Local Gateway--desc}}<br />
|-<br />
| {{b|Local Gateway ID:}} || {{ic|203.0.113.0|dr|class=available}} || {{#var:Local Gateway ID--desc}}<br />
|-<br />
| {{b|Remote Host / Gateway:}} || {{ic|ipsec.ttt-point.de|dr|class=available}} || {{#var:Remote Host/Gateway--desc}}<br />
|-<br />
| {{b|Remote Host / Gateway ID:}} || {{ic|ipsec.ttt-point.de|dr|class=available}} || {{#var:Remote Host/Gateway ID--desc}}<br />
|-<br />
| {{b|{{#var:Lokale Authentifizierungsmethode}}:}} || {{Button|Pre-Shared Key|dr|class=available}} || {{#var:Lokale Authentifizierungsmethode--desc}}<br />
|-<br />
| {{b|{{#var:Startverhalten}}:}} || {{Button|Outgoing|dr|class=available}} || {{#var:Startverhalten--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
----<br />
<br />
=== {{#var:Regelwerk}} ===<br />
<div class="einrücken"><br />
{{#var:Regelwerk--desc}}<br />
</div><br />
<br />
{| class="sptable2 pd5 zh1 einrücken"<br />
|- class="Leerzeile"<br />
| colspan="3" | {{#var:Implizite Regeln--desc}}<br />
| class="Bild" | {{Einblenden2| {{#var:Implizite Regeln--cap}} | {{#var:hide}} |dezent|true| {{Bild| {{#var:Implizite Regeln--Bild}} |{{#var:Implizite Regeln}}||{{#var:Implizite Regeln}}|Firewall|icon=fa-save}} }}<br />
|- class="Leerzeile"<br />
| colspan="3" | {{Hinweis-box|{{#var:Freigabe-Hinweis}}|fs__icon=em2}}<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
==== {{#var:Netzwerkobjekt anlegen}} ====<br />
{{#var:Netzwerkobjekt anlegen--Menü}}<br><br />
<li class="list--element__alert list--element__warning">{{#var:Netzwerkobjekt anlegen--multi}}</li><br />
|-<br />
| {{b|Name:}} || {{ic|IPSec-S2S|class=available}} || {{#var:Name für das IPSec-S2S-Netzwerkobjekt}} <br />
| class="Bild" rowspan="6" | {{Bild| {{#var:Netzwerkobjekt anlegen--Bild}} |{{#var:Netzwerkobjekt}}||{{#var:Netzwerkobjekt hinzufügen}}|Firewall|{{#var:Netzwerkobjekte}}|icon=fa-save|icon2=fa-floppy-disk-circle-xmark|icon3=fa-close}}<br />
|-<br />
| {{b|{{#var:Typ}}: }} || {{ic|{{#var:VPN-Netzwerk}}|dr|class=available}} || {{#var:VPN-Netzwerk--desc}}<br />
|-<br />
| {{b|{{#var:Adresse}}: }} || {{ic|192.168.192.0/24|class=available}} || {{#var:Adresse--desc}}<br />
|-<br />
| {{b|Zone:}} || {{Button|vpn-ipsec|dr|class=available}} || {{#var:Zone--desc}}<br />
|-<br />
| {{b| {{#var:Gruppe}}: }} || {{ic| |cb|class=available}} || {{#var:Gruppe--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| colspan="3" | <br />
==== {{#var:Paketfilter Regeln}} ====<br />
|- class="Leerzeile"<br />
| colspan="3" | {{#var:Portfilter Regeln--desc}}<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| '''{{#var:Erste Regel}}'''<br />
|-<br />
| {{b|{{#var:Quelle}}:}} || {{ic|internal-network|class=available}} || {{#var:Quelle--desc}}<br />
| class="Bild" rowspan="6" | {{Bild| {{#var:Paketfilter Regeln--Bild}} |{{#var:Paketfilter Regeln--cap}}||{{#var:Paketfilter}}|Firewall|icon=fa-play|icon-text=Regeln aktualisieren}}<br />
|-<br />
| {{b|{{#var:Ziel}}:}} || {{ic|{{#var:IPSec-Netzwerk}}|class=available}} || {{#var:Ziel--desc}}<br />
|-<br />
| {{b|{{#var:Dienst}}:}} || {{ic|benötigter Dienst|class=available}} || {{#var:Dienst--desc}}<br />
|-<br />
| {{b|NAT:}} || {{Button|Hidenat Exclude|dr|class=mw10}} ||<br />
|-<br />
| {{b|{{#var:Netzwerkobjekte}}:}} || {{Button|external-interface|dr|class=available}} ||<br />
|- class="Leerzeile"<br />
|<br />
|- class="Leerzeile"<br />
| '''{{#var:Zweite Regel}}'''<br />
|-<br />
| {{b|{{#var:Quelle}}:}} || {{ic|{{#var:IPSec-Netzwerk}}|class=available}} || {{#var:Quelle--desc}}<br />
|-<br />
| {{b|{{#var:Ziel}}:}} || {{ic|internal-network|class=available}} || {{#var:Ziel}}<br />
|-<br />
| {{b|{{#var:Dienst}}:}} || {{ic|benötigter Dienst|class=available}} || {{#var:Dienst--desc}}<br />
|-<br />
| {{b|NAT:}} || || {{#var:Kein NAT}}<br />
|- class="Leerzeile"<br />
|<br />
|}<br />
----<br />
<br />
<br />
=== {{#var:Konfiguration des zweiten Gateways}} ===<br />
<div class="einrücken"><br />
{{Hinweis-box|{{#var:Gleiche IKE-Version--Hinweis}} }}<br />
</div><br />
<br />
<br />
==== {{#var:Verwendung einer Securepoint UTM}} ====<br />
<div class="einrücken"><br />
{{#var:Gegenstelle Hinweise}}<br />
</div><br />
<br />
<br />
===== {{#var:Gegenstelle Schritt2}} =====<br />
<div class="einrücken"><br />
{{#var:Gegenstelle Schritt2--desc}}<br />
</div><br />
<br />
<br />
===== {{#var:Gegenstelle Schritt3}} =====<br />
<div class="einrücken"><br />
{{#var:Gegenstelle Schritt3--desc}}<br />
</div><br />
<br />
<br />
===== {{#var:Gegenstelle Schritt4}} =====<br />
<div class="einrücken"><br />
{{#var:Gegenstelle Schritt4--desc}}<br />
</div><br />
<br />
<br />
===== {{#var:Gegenstelle Netzwerkobjekt}} =====<br />
<div class="einrücken"><br />
{{#var:Gegenstelle Netzwerkobjekt--desc}}<br />
<br clear=all></div><br />
----<br />
<br />
<br />
=== {{#var:Hinweise}} ===<br />
<div class="einrücken"><br />
{{Bild| {{#var:Der transparente HTTP-Proxy--Bild}} | {{#var:Der transparente HTTP-Proxy--cap}}||{{#var:Transparente Regel hinzufügen}}|{{#var:Anwendungen}}|HTTP-Proxy|icon=fa-floppy-disk-circle-xmark|icon2=fa-close|class=Bild-t }}<br />
</div><br />
<br />
==== {{#var:Der transparente HTTP-Proxy}} ====<br />
<div class="einrücken"><br />
{{#var:Der transparente HTTP-Proxy--desc}}<br />
<br clear=all></div><br />
----<br />
<br />
=== Troubleshooting ===<br />
<div class="einrücken"><br />
{{#var:Troubleshooting--desc}}<br />
</div></div>
Lauritzl