Wechseln zu:Navigation, Suche
Wiki

UTM/VPN/IPSec-Phase1-2: Unterschied zwischen den Versionen

Aus Securepoint Wiki
(Die Seite wurde neu angelegt: „{{Set_lang}} {{#vardefine:headerIcon|spicon-utm}} {{:UTM/VPN/IPSec-Phase1-2.lang}} </div><noinclude>__NOTOC__ {| class="sptable2 pd5 Einrücken zh1" </noincl…“)
 
KKeine Bearbeitungszusammenfassung
 
(15 dazwischenliegende Versionen von 2 Benutzern werden nicht angezeigt)
Zeile 4: Zeile 4:
{{:UTM/VPN/IPSec-Phase1-2.lang}}
{{:UTM/VPN/IPSec-Phase1-2.lang}}


</div><noinclude>__NOTOC__
{{#switch: {{{IPSec|}}}
| IKEv1 RW =
{{var | IKEv1 RW ||}}
{{var | IKEv2 RW |none|none}}
{{var | IKEv1 S2S |none|none}}
{{var | IKEv2 S2S |none|none}}
{{var | IKEv1 ||}}
{{var | IKEv2 |none|none}}
{{var | not IKEv2 RW ||}}
{{var | E2S ||}}
{{var | S2S |none|none}}
| IKEv2 RW =
{{var | IKEv1 RW |none|none}}
{{var | IKEv2 RW ||}}
{{var | IKEv1 S2S |none|none}}
{{var | IKEv2 S2S |none|none}}
{{var | IKEv1 |none|none}}
{{var | IKEv2 ||}}
{{var | not IKEv2 RW |none|none}}
{{var | E2S ||}}
{{var | S2S |none|none}}
| IKEv1 S2S =
{{var | IKEv1 RW |none|none}}
{{var | IKEv2 RW |none|none}}
{{var | IKEv1 S2S ||}}
{{var | IKEv2 S2S |none|none}}
{{var | IKEv1 ||}}
{{var | IKEv2 |none|none}}
{{var | not IKEv2 RW ||}}
{{var | E2S |none|none}}
{{var | S2S ||}}
| IKEv2 S2S =
{{var | IKEv1 RW |none|none}}
{{var | IKEv2 RW |none|none}}
{{var | IKEv1 S2S |none|none}}
{{var | IKEv2 S2S ||}}
{{var | IKEv1 |none|none}}
{{var | IKEv2 ||}}
{{var | not IKEv2 RW ||}}
{{var | E2S |none|none}}
{{var | S2S ||}}
| #default =
<!--
{{var | IKEv1 RW ||}}
{{var | IKEv2 RW ||}}
{{var | IKEv1 S2S ||}}
{{var | IKEv2 S2S ||}}
-->
{{var | IKEv1 RW |none|none}}
{{var | IKEv2 RW ||}}
{{var | IKEv1 S2S |none|none}}
{{var | IKEv2 S2S |none|none}}
{{var | IKEv2 ||}}
{{var | not IKEv2 RW |none|none}}
{{var | E2S ||}}
{{var | S2S ||}}
}}
 
</div><div class="new_design"></div>{{Select_lang}}
<noinclude><!--
{{TOC2}}
{{Header|12.6.2|
|[[UTM/VPN/IPSec-Phase1-2_v12.5|12.5]]
[[UTM/VPN/IPSec-Phase1-2_v12.4|12.4]]
[[UTM/VPN/IPSec-Phase1-2_v12.2.4 | 12.2.4]]
[[UTM/VPN/IPSec-Phase1-2_v12.2.3 | 12.2.3]]
|{{Menu-UTM|VPN|IPSec|Verbindungen}} {{Button|Phase 1|w}} {{Button|Phase 2|w}}
}}
-->
{{#var:noinclude}}
<br clear=all>
</noinclude>
<includeonly>
{| class="sptable2 pd5 Einrücken zh1"
{| class="sptable2 pd5 Einrücken zh1"
</noinclude>
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" |  
| colspan="3" |  
==== Phase 1 ====
===== Phase 1 =====
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | <span id="{{#var:Allgemein}}_2"></span>{{Menu|VPN|IPSec|{{#var:Verbindungen}}|Phase 1|w}}{{h6|{{#var:Allgemein}} }}
| colspan="3" | {{Menu-UTM|VPN|IPSec|{{#var:Verbindungen}}|Phase 1|w}}{{h6|{{#var:Allgemein}} }}<br><br> {{Reiter|{{#var:Allgemein}} }}
<p>{{#var:Reiter}} {{Reiter|{{#var:Allgemein}} }}</p>
|-
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| class="Bild" rowspan="10" | {{Bild | {{#var:Phase1 Allgemein--Bild}}|{{#var:Phase1 Allgemein--cap}} }}
| style=display:{{#var:IKEv1 RW}} class="Bild" rowspan="10" | {{Bild| {{#var:Phase1 Allgemein IKEv1 RW--Bild}} |{{#var:Phase1 Allgemein--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
|-
| style=display:{{#var:IKEv2 RW}} class="Bild" rowspan="10" | {{Bild| {{#var:Phase1 Allgemein--Bild}} |{{#var:Phase1 Allgemein--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
| {{b|{{#var:Beliebige Remote-Adressen}} }} || {{ButtonAn|{{#var:ein}} }}<br><small>'''Default'''</small> || {{#var:Beliebige Remote-Adressen--desc}}
| style=display:{{#var:IKEv1 S2S}} class="Bild" rowspan="10" | {{Bild| {{#var:Phase1 Allgemein IKEv1 S2S--Bild}} |{{#var:Phase1 Allgemein--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
| style=display:{{#var:IKEv2 S2S}} class="Bild" rowspan="10" | {{Bild| {{#var:Phase1 Allgemein IKEv2 S2S--Bild}} |{{#var:Phase1 Allgemein--cap}}||{{#var:Phase 1 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
|- style=display:{{#var:IKEv1}}
| {{b|{{#var:Beliebige Remote-Adressen}}:}} || {{ButtonAn|{{#var:ein}} }}<br><small>'''Default'''</small> || {{#var:Beliebige Remote-Adressen--desc}}
|-
|-
| rowspan="4" | {{b|{{#var:Startverhalten}} }} || {{Button|Outgoing|dr|class=mw7}} || {{#var:Outgoing--desc}}
| rowspan="4" | {{b|{{#var:Startverhalten}}:}} || {{Button|Outgoing|dr|class=available}} || {{#var:Outgoing--desc}}
|-  
|-  
| {{Button|Incoming|dr|class=mw7}} || {{#var:incoming--desc}}
| {{Button|Incoming|dr|class=available}} <small>{{#var:Default wenn Remote Host any}}</small>|| {{#var:incoming--desc}}
|-
|- style=display:{{#var:E2S}}
| {{Button|Route|dr|class=mw7}} || {{#var:Route--desc}}
| {{Button|Route|dr|class=available}} <small>{{#var: Default wenn Remote Host benannnt}}</small> || {{#var:Route--desc}}{{Hinweis-box| {{#var:Route--Hinweis}}|g|fs__icon=em2}}
|- style=display:{{#var:S2S}}
| {{Button|Route|dr|class=available}} <small>{{#var: Default wenn Remote Host benannnt}}</small> || {{#var:Route--desc}}{{Hinweis-box| {{#var:Route--Hinweis}}|g|fs__icon=em2}}
|-
|-
| {{Button|Ignore|dr|class=mw7}} || {{#var:Ignore--desc}}
| {{Button|Ignore|dr|class=available}} || {{#var:Ignore--desc}}
|- style=display:{{#var:S2S}}
| {{b|{{#var:Verkehr generieren}}:}} <br><small>'''{{#var:Verkehr generieren--Route}}'''</small> || {{ButtonAn|{{#var:ein}} }} || {{#var:Verkehr generieren--desc}}
|-
|-
| {{b|{{#var:Dead Peer Detection}} }} || {{ButtonAn|{{#var:ein}} }} || {{#var:Dead Peer Detection--desc}}<li class="list--element__alert list--element__hint">{{#var:Dead Peer Detection--Hinweis}}</li>
| {{b|Dead Peer Detection:}} || {{ButtonAn|{{#var:ein}} }} || {{#var:Dead Peer Detection--desc}}<li class="list--element__alert list--element__hint">{{#var:Dead Peer Detection--Hinweis}}</li>
|-
|-
| {{b|{{#var:DPD Timeout}} }} <br><small>'''{{#var:Nur bei IKEv}}1'''</small>|| {{ic|30|c|class=mw7}} {{#var:Sekunden}} || {{#var:DPD Timeout--desc}}<li class="list--element__alert list--element__hint">{{#var:Timeout--Hinweis}}</li>
| {{b|DPD Timeout:}} || {{ic|30|c|class=available}} {{#var:Sekunden}} || {{#var:DPD Timeout--desc}}<li class="list--element__alert list--element__hint">{{#var:Timeout--Hinweis}}</li>
|-
|-
| {{b|{{#var:DPD Intervall}} }} || {{ic|10|c|class=mw7}} {{#var:Sekunden}} || {{#var:DPD Intervall--desc}}
| {{b|{{#var:DPD Intervall}}:}} || {{ic|10|c|class=available}} {{#var:Sekunden}} || {{#var:DPD Intervall--desc}}
|-
|-
| {{b|{{#var:Compression}} }} || {{ButtonAus|{{#var:aus}} }} || {{#var:Compression--desc}}
| {{b|Compression:}} || {{ButtonAus|{{#var:aus}} }} || {{#var:Compression--desc}}
|- class={{#var:IKEv2}}
| {{b|{{#var:MOBIKE}} }} || {{ButtonAn|{{#var:ja}} }} || {{#var:MOBIKE--desc}}  
|- class="Leerzeile"
|- class="Leerzeile"
|
|
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | {{#var:Reiter}} {{Reiter|{{#var:IKE}}}} {{#var:Identische Einstellungen}} {{h6|{{#var:IKE}} }}
| colspan="3" | {{#var:Abschnitt}} {{Reiter|IKE}} {{#var:Identische Einstellungen}} {{h6|IKE}}
|-
! {{#var:cap}} !! Default UTM !! Default NCP Client
| class="Bild {{#var:IKEv1}}" rowspan="11" | {{Bild| {{#var:Phase1 IKE1--Bild}} |{{#var:Phase1 IKE--cap}}1 }}
| class="Bild {{#var:IKEv2}}" rowspan="11" | {{Bild| {{#var:Phase1 IKE2--Bild}} |{{#var:Phase1 IKE--cap}}2 }}
|-
|-
! {{#var:Beschriftung}} !! {{#var:default-utm|Default-Werte UTM}} !! {{#var:default-ncp|Default-Werte NCP-Client}}
| {{b|{{#var:Verschlüsselung}} }} || {{ic|{{cb|aes128}}|cb|class=available}} || AES 128 Bit
| class="Bild" rowspan="12" | {{Bild | {{#var:Phase1 IKE--Bild}}|{{#var:Phase1 IKE--cap}} }}
|-
|-
| {{b| {{#var: Verschlüsselung| Verschlüsselung: }} }} || {{Button| aes128 |dr|class=mw7}} || AES 128 Bit
| {{b|{{#var:Authentifizierung}} }} || {{ic|{{cb|sha2_256}}|cb|class=available}} || Hash: SHA2 256 Bit
|-
|-
| {{b| {{#var: Authentifizierung| Authentifizierung: }} }} || {{Button| sha2_256 |dr|class=mw7}} || Hash: SHA2 256 Bit
| {{b|{{#var:Diffie-Hellman Group}} }} || {{ic|{{cb|ecp521}}|cb|class=available}} || IKE DH-Gruppe: DH2 (modp1024)
|-
|-
| {{b| Diffie-Hellman Group: }} || {{Button| modp2048 |dr|class=mw7}} || IKE DH-Grupe: DH2 (modp1024)
| {{b|Aktuelle Kombinationen:}} || colspan="2" | {{ic|aes128-sha2_256-ecp521|c=blau-font|bc=blau-bg||bdc=blau-bg|class=available}}
|- class="Leerzeile"
|- class="Leerzeile"
|
|
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | {{#var:Reiter}} {{Reiter|{{#var:IKE}}}} {{#var:Weitere Einstellungen}}:
| colspan="3" | {{#var:Abschnitt}} {{Reiter|IKE}} {{#var:Weitere Einstellungen}}:
|-
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
|-
|-
| rowspan="2" | {{b| Strict: }} || {{ButtonAus|{{#var:aus}} }} || {{#var:Strict-aus--desc}}
| rowspan="2" | {{b|Strict:}} || {{ButtonAus|{{#var:aus}} }} || {{#var:Strict-aus--desc}}
|-
|-
| {{ButtonAn|{{#var:ein}} }} || {{#var:Strict-ein--desc}}
| {{ButtonAn|{{#var:ein}} }} || {{#var:Strict-ein--desc}}
|- class={{#var:IKEv2}}
| {{b|{{#var:IKE Lifetime}} }} || {{ButtonAus|{{#var:Aus}} }} {{ic|3|c|class=mw7}} {{#var:Stunden}} || {{#var:IKE Lifetime--desc}}<br> {{#var:IKE Lifetime--info}}
|- class={{#var:IKEv1}}
| {{b|{{#var:IKE Lifetime}} }} || {{Button|1 {{#var:Stunde}}|dr|class=available}} || {{#var:IKE Lifetime--desc}}
|- class={{#var:IKEv2}}
| rowspan="2" | {{b|IKE Rekeytime:}} || {{ic|2|c|class=available}} {{#var:Stunden}} || {{#var:IKE Rekeytime--desc}}
|- class={{#var:IKEv2}}
| colspan="2" | {{Hinweis-box| {{#var: Rekeying Default Änderung}} {{info|{{#var:Rekeying Default Änderung--info}} <br><br>{{#var:Beispiel}}<br>{{#var:Aktive Version}}<br>ike_lifetime &#61; 2<br>ike_rekeytime &#61; 0<br><br>{{#var:Nach Update}}<br>ike_lifetime &#61; 0<br>ike_rekeytime &#61; 2<br><br>----<br><br>{{#var:Aktive Version}}<br>ike_lifetime &#61; 2<br>ike_rekeytime &#61; 1<br><br>{{#var:Nach Update}} {{#var:ohne Änderung}}<br>ike_lifetime &#61;2<br>ike_rekeytime &#61; 1}} }}
|-
|-
| {{b|{{#var:IKE Lifetime}}}} || {{Button| 1 Stunde |dr|class=mw7}} || {{#var:IKE Lifetime--desc}}
| {{b|Rekeying:}} || {{Button|{{#var:Rekeying--val}} |dr|class=available}} || {{#var:Rekeying--desc}} {{info|1={{#var:Rekeying--info}} }}
|-
| {{b|{{#var:Rekeying}}}} || {{Button| {{#var:Rekeying--val}}|dr|class=mw13}} || {{#var:Rekeying--desc}} {{info|{{#var:Rekeying--info}} }}
|-
|-
|- class="Leerzeile"
|- class="Leerzeile"
|
|
|- class="Leerzeile"
|- class="Leerzeile"
|  colspan="2" | <br>
|  colspan="2" |  
==== Phase 2 ====
===== Phase 2 =====


|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | <span id="{{#var:Allgemein}}_3"></span>{{Menu|VPN|IPSec|{{#var:Verbindungen}}|Phase 2|w}}  {{h6|{{#var:Allgemein}} }}
| colspan="3" | {{Menu-UTM|VPN|IPSec|{{#var:Verbindungen}}|Phase 2|w}}  {{h6|{{#var:Allgemein}} }}
<p>{{#var:Reiter}} {{Reiter|{{#var:Allgemein}} }}: {{#var:Identische Einstellungen}}</p>
<p>{{#var:Abschnitt}} {{Reiter|{{#var:Allgemein}} }} {{#var:Identische Einstellungen}}</p>
|-
|-
! {{#var:Beschriftung}} !! {{#var:default-utm|Default-Werte UTM}} !! {{#var:default-ncp|Default-Werte NCP-Client}}
! {{#var:cap}} !! Default UTM !! Default NCP Client
| class="Bild width75" rowspan="12" | {{Bild | {{#var:Phase2 bearbeiten--Bild}}|{{#var:Phase2 bearbeiten--cap}} }}
| class="Bild {{#var:IKEv1 RW}}" rowspan="10" | {{Bild| {{#var:Phase2 bearbeiten IKEv1 RW--Bild}} |{{#var:Phase2 bearbeiten--cap}} / IKEv1 / Roadwarrior||{{#var:Phase 2 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
| class="Bild {{#var:IKEv2 RW}}" rowspan="10" | {{Bild| {{#var:Phase2 bearbeiten IKEv2 RW--Bild}} |{{#var:Phase2 bearbeiten--cap}} / IKEv2 / Roadwarrior||{{#var:Phase 2 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
| class="Bild {{#var:IKEv1 S2S}}" rowspan="10" | {{Bild| {{#var:Phase2 bearbeiten IKEv1 S2S--Bild}} |{{#var:Phase2 bearbeiten--cap}} / IKEv1 / S2S||{{#var:Phase 2 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
| class="Bild {{#var:IKEv2 S2S}}" rowspan="10" | {{Bild| {{#var:Phase2 bearbeiten IKEv2 S2S--Bild}} |{{#var:Phase2 bearbeiten--cap}} / IKEv2 / S2S||{{#var:Phase 2 bearbeiten}}|VPN|IPSec|icon=fa-floppy-disk-circle-xmark|icon2=fa-close}}
|-
|-
| {{b| {{#var:Verschlüsselung}} }} || {{Button| aes128 |dr|class=mw7}} || AES 128 Bit
| {{b|{{#var:Verschlüsselung}} }} || {{ic|{{cb|aes128}}|cb|class=available}} || AES 128 Bit
|-
|-
| {{b| {{#var:Authentifizierung}}  }} || {{Button| sha2_256 |dr|class=mw7}} || SHA2 256 Bit
| {{b|{{#var:Authentifizierung}}  }} || {{ic|{{cb|sha2_256}}|cb|class=available}} || SHA2 256 Bit
|- class="{{#var:S2S}}"
| {{b|{{#var:Diffie-Hellman Group}} }} || {{ic|{{cb|ecp521}}|cb|class=available}} || IKE DH-Gruppe: DH2 (modp1024)
|- class="{{#var:E2S}}"
| {{b| {{#var:Diffie-Hellman Group}} }} || {{ic|{{cb|ecp521}}|cb|class=available}} || IKE DH-Gruppe: DH2 (modp1024)
|-
|-
| {{b| DH-Gruppe (PFS): }} || {{Button| modp2048 |dr|class=mw7}} || keine
| {{b|Aktuelle Kombinationen:}} || colspan="2" | {{ic|aes128-sha2_256-ecp521|c=blau-font|bc=blau-bg||bdc=blau-bg}}
|-
|-
| {{b| {{#var: Schlüssel-Lebensdauer| Schlüssel-Lebensdauer: }} }} || {{Button| 8 {{#var: Stunden}} |dr|class=mw7}} || {{#var:Schlüssel-Lebensdauer--desc}}
| {{b|{{#var:Schlüssel-Lebensdauer}}:}} || {{Button|8 {{#var: Stunden}}|dr|class=available}} || {{#var:Schlüssel-Lebensdauer--desc}}
|-
|-
| {{#var: Austausch-Modus| Austausch-Modus }} || Main Mode ({{#var: nonkonfig| nicht konfigurierbar }}) || Agressive Mode (IKEv1)<li class="list--element__alert list--element__warning">{{#var:Agressive Mode--Hinweis}}</li>
| {{b|{{#var:Austausch-Modus}}:}} || Main Mode ({{#var:nicht konfigurierbar}}) || Aggressive Mode (IKEv1)<li class="list--element__alert list--element__warning">{{#var:Aggressive Mode--Hinweis}}</li>
|-
| {{b|{{#var:Neustart nach Abbruch}}:}} || {{ButtonAus|{{#var:nein}} }} || {{#var:Neustart nach Abbruch--desc}}
|- style=display:{{#var:IKEv2}}
| {{b|{{#var: Subnetzkombinationen gruppieren}} }}
| {{ButtonAn|{{#var:ja}} }}<br> <li class="list--element__alert list--element__warning">{{#var:Gegenstelle unterstützt keine Subnetzkombinationen--Hinweis}}</li>  || {{#var:Subnetzkombinationen gruppieren--desc}}
|-
| {{b|DHCP:}} || {{ButtonAus|{{#var:Aus}} }} || {{#var:DHCP--desc}}
|- class="Leerzeile"
|- class="Leerzeile"
|
|
|}
<div style=display:{{#var:IKEv2 RW}}>
{| class="sptable2 pd5 zh1 einrücken"
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | <p>{{#var:Reiter}} {{Reiter|{{#var:Allgemein}}}}: {{#var:Weitere Einstellungen}}</p>
| colspan="3" | {{h6|{{#var:Adress-Pool}} }} {{Reiter|{{#var:Adress-Pool}} }}
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}  
| class="Bild" rowspan="3" | {{Bild| {{#var:Adress-Pool--Bild}} |{{#var:Adress-Pool--cap}} }}
|-
|-
! {{#var:cap}} !! {{#var:val}} !! {{#var:desc}}
| {{b|{{#var:Lokales Netzwerk}}:}} || {{ic|192.168.250.0/24|class=available}} || {{#var:Lokales Netzwerk--desc}}
|-
|-
| {{b| {{#var: Neustart}}}} || {{ButtonAus|{{#var:aus}} }} || {{#var:Neustart--desc}}<li class="list--element__alert list--element__hint">{{#var:Neustart--Hinweis}}</li>
| {{b|{{#var:Adress-Pool}} }}<br> <small class=bold>{{#var:Adress-Pool--Hinweis}}</small> || {{ic|192.168.22.35/24|class=available}} || {{#var:Adress-Pool--desc}}
|-
|-
| {{b|{{#var: Subnetzkombinationen gruppieren}} }} <br><small>'''{{#var:Nur bei IKEv}}2'''</small>
|}
| {{ButtonAn|{{#var:ein}} }}  || {{#var:Subnetzkombinationen gruppieren--desc}}
</div>
<div style=display:{{#var:not IKEv2 RW}}>
{| class="sptable2 pd5 zh1 einrücken"
|- class="Leerzeile"
|- class="Leerzeile"
| colspan="3" | {{h6|{{#var:Subnetze}} }}<br>{{#var:Reiter}} {{Reiter|{{#var:Subnetze}}}} <small>'''{{#var:Nur bei IKEv}}2'''</small>
| colspan="3" | {{h6|{{#var:Subnetze}} }}<br> {{#var:Abschnitt}} {{Reiter|{{#var:Subnetze}} }}
|- class="Leerzeile"
|- class="Leerzeile"
| rowspan="2" | || colspan="2" | {{#var:Szenario}} '''{{#var:Subnetze alle}}'''
| rowspan="2" | || colspan="2" | {{#var:Szenario}} '''{{#var:Subnetze alle}}'''
<p><li class="list--element__alert list--element__hint">{{#var:Subnetze alle--desc}}</li>
<p><li class="list--element__alert list--element__hint">{{#var:Subnetze alle--desc}}</li>
{{Einblenden|{{#var:Beispiel mit root-Login}}|{{#var:hide}}|dezent}}
{{Einblenden| {{#var:Beispiel mit root-Login}} | {{#var:hide}} |dezent}}
{{#var:Beispiel mit root-Login--desc}}<br>
{{#var:Beispiel mit root-Login--desc}}<br>
{{#var:Mit Subnetzkombinationen}}
{{#var:Mit Subnetzkombinationen}} {{ButtonAn|{{#var:ein}} }}


<code>root@firewall:~# swanctl --list-conns
<code>root@firewall:~# swanctl --list-conns
Zeile 140: Zeile 251:
</code>
</code>
</div></span></p>
</div></span></p>
| class="Bild" rowspan="2" | {{Bild | {{#var:Subnetze alle--Bild}}|{{#var:Subnetze alle--cap}} }}
| class="Bild" rowspan="2" | {{Bild| {{#var:Subnetze alle--Bild}} |{{#var:Subnetze alle--cap}} }}
|- class="Leerzeile"
|- class="Leerzeile"
|
|
|- class="Leerzeile"
|- class="Leerzeile"
| || colspan="2" | {{#var:Szenario}} '''{{#var:Subnetz teilweise}}'''
| || colspan="2" | {{#var:Szenario}} '''{{#var:Subnetz teilweise}}'''
<p>{{#var:Subnetz teilweise--desc}}</p>{{Hinweis-neu| ! {{#var:IKE-Multichannel--Netzwerkhinweis}} }}
<p>{{#var:Subnetz teilweise--desc}}</p>{{Hinweis-box| {{#var:IKE-Multichannel--Netzwerkhinweis}} }}
{{Hinweis-neu| ! {{#var:IKE-Multichannel--Portfilter--Hinweis}} | gr}}
{{Hinweis-box| {{#var:IKE-Multichannel--Portfilter--Hinweis}} | gr}}
{{Einblenden|{{#var:Beispiel mit root-Login}}|{{#var:hide}}|dezent}}
{{Einblenden| {{#var:Beispiel mit root-Login}} | {{#var:hide}} |dezent}}
{{#var:Beispiel mit root-Login--desc}}<br>
{{#var:Beispiel mit root-Login--desc}}<br>
{{#var:Mit Subnetzkombinationen}}
{{#var:Mit Subnetzkombinationen}} {{ButtonAn|{{#var:ein}} }}
<code>root@firewall:~# swanctl --list-conns
<code>root@firewall:~# swanctl --list-conns
IPSec$20S2S: IKEv2, reauthentication every 3060s, no rekeying, dpd delay 10s
IPSec$20S2S: IKEv2, reauthentication every 3060s, no rekeying, dpd delay 10s
Zeile 183: Zeile 294:
</code>
</code>
</div></span>
</div></span>
| class="Bild" rowspan="2" | {{Bild | {{#var:Subnetz teilweise--Bild}}|{{#var:Subnetz teilweise--cap}} }}
| class="Bild" rowspan="2" | {{Bild| {{#var:Subnetz teilweise--Bild}} |{{#var:Subnetz teilweise--cap}} }}
|- class="Leerzeile"
|- class="Leerzeile"
|
|
<noinclude>|}</noinclude>
|- class="Leerzeile"
|
|}
 
</div>  
----
<div class="einrücken">
===== Troubleshooting =====
<div class="einrücken">
{{#var:Troubleshooting--desc}}
</div></div>
</includeonly>

Aktuelle Version vom 3. April 2024, 11:24 Uhr

























































{{var | DH-Gruppe (PFS) | DH-Gruppe (PFS): | DH-Group (PFS):




























De.png
En.png
Fr.png

Konfiguration der Phase 1 und 2 für IPSec-Verbindungen.
Der Inhalt dieser Seite wird hier angezeigt:



Abgerufen von „https://wiki.securepoint.de/index.php?title=UTM/VPN/IPSec-Phase1-2&oldid=90852“