Aller à :navigation, rechercher
Wiki

UTM/VPN/SSL VPN-S2S

De Securepoint Wiki

































































}}











































































De.png
En.png
Fr.png









14.0.3

' VPN


Site-to-Site Server

Site-to-Site Server
S2S Server

Site-to-Site Client

Site-to-Site Client
S2S Client



1
1 S2S Server

[[Datei: ]] 1



2
2 S2S Server
[[Datei: ]]
2


3
3 S2S Server
[[Datei: ]]
3
Name: S2S-server
|| UDP ||
Port: 1194Link=
|| cs-ttt-point ||
|| » 192.168.175.0/24 ||


4
4 S2S Server
[[Datei: ]]
4
|| 192.168.190.0/24 ||
  • || 192.168.190.1/32 || rowspan="2" |
    || 192.168.190.2/24


    5
    5 S2S Server
    [[Datei: ]]
    5
    Name: S2S-client
    || .ttt-point.de ||
    || »192.168.174.0/24 ||


    S2S Server
    [[Datei: ]]
    Name: S2S-Server
    || tun0 ||
    Modus: SERVER
    || UDP (Default)
    TCP ||
    Port: 1194Link=
    || NONE (Default)
    LOCAL
    RADIUS ||
    || cs-ttt-point ||
    || class=mw11 | tls-authtls-crypt ||
    notempty
    v12.6.1
     || SSL-VPN S2S ||
    || AES-256-GCM ||
    BF-CBC DES-EDE-CBC DES-EDE3-CBC CAST5-CBC AES-128-CBC AES-192-CBC AES-256-CBC AES-128-GCM AES-192-GCM AES-256-GCM
    || Default ||
    SHA1 SHA224 SHA256 SHA384 SHA512 whirlpool
    ||     ||
    IPv4 : 192.168.190.0/24
    IPv6 :       /64
    ||     ||
    Search Domain:    
    • Renegotiation:
    1
    (Default)
    2
    4 Stunden
    8 Stunden
    12 Stunden


    S2S Server
    [[Datei: ]]
    MTU: 1500Link=
    || 1024 ||
    || ||
    || ||
    Multihome:

    || ||
    LZO:
    || ||
    Pass TOS:
    || 10Link= ||
    || 120Link= ||
    || 65536Link= Bytes ||
  • || 65536Link= Bytes ||
    || 64Link= ||
    || 15Link= ||


    S2S Server

    SSL-VPN UTMVPN SSL-VPN Log [[Datei: ]]


    SSL-VPN Server-Gegenstelle hinzufügen UTMVPNSSL-VPN [[Datei: ]]


    S2S Server

    [[Datei: ]]



    S2S Server

    [[Datei: ]]
    Name: sslvpn-S2S-Client-Network
    || VPN-Netzwerk ||
    || 192.168.174.0/24 ||
    Zone: vpn-ssl-S2S-Server
    ||     || Optional


    S2S Server

    [[Datei: ]]


    # NAT
    Dragndrop.png 9 Vpn-network.svg sslvpn-S2S-client-network Network.svg internal-network Service-group.svg default-internet Accept
    Dragndrop.png 10 Network.svg internal-network Vpn-network.svg sslvpn-S2S-client-network Service-group.svg default-internet Accept


    Routen
    Routen
    S2S Server
    [[Datei: ]]
    || tun2 ||
    || 192.168.174.0/24 || (S2S Client)



    1
    1 S2S Client

    [[Datei: ]] 1



    2
    2 S2S Client
    [[Datei: ]]
    2


    3
    3 S2S Client
    [[Datei: ]]
    3
    Name: S2S-client
    || UDP ||
  • || CC-S2S-Client-Network1 ||


    4
    4 S2S Client


    5
    5 S2S Client
    [[Datei: ]]
    5




    S2S Client
    [[Datei: ]]
    Name: S2S-client
    || tun4 ||
    Modus: CLIENT
    || UDP (Default)
    TCP ||
    || CC-S2S-Client-Network1 ||
    notempty
    v12.6.1
     || class=mw10 | tls-authtls-crypt ||
    notempty
    v12.6.1
     || SSL-VPN S2S ||
    || AES-256-GCM ||
    BF-CBC DES-EDE-CBC DES-EDE3-CBC CAST5-CBC AES-128-CBC AES-192-CBC AES-256-CBC AES-128-GCM AES-192-GCM AES-256-GCM
    || Default ||
    SHA1 SHA224 SHA256 SHA384 SHA512 whirlpool
    ||     ||
    Renegotiation:
    1
    (Default)
    2
    4
    8
    12


    S2S Client
    [[Datei: ]]
    MTU: 1500Link=
    LZO:
    || ||
    Pass TOS:
    || 10Link= ||
    || 120Link= ||
    || 65536Link= Bytes ||
    || 65536Link= Bytes ||
    || 64Link= ||
    || 15Link= ||


    S2S Client

    S2S Client
    S2S Client
    [[Datei: ]]
    Name: sslvpn-S2S-Server-Network
    || ||
    || 192.168.175.0/24 ||
    Zone: vpn-ssl-S2S-client
    ||     || Optional


    S2S Client
    S2S Client
    S2S Client

    [[Datei: ]]

    # NAT
    Dragndrop.png 5 Network.svg internal-network Vpn-network.svg sslvpn-S2S-server-network Service-group.svg default-internet Accept
    Dragndrop.png 4 Vpn-network.svg sslvpn-S2S-server-network Network.svg internal-network Service-group.svg default-internet Accept


    S2S Client Routen
    S2S Client Routen
    S2S Client
    [[Datei: ]]
    || tun4 ||
    || 192.168.175.0/24 || (S2S Server)



































    notempty
    12.6.2


    Multipath

    Multipath
    S2S Client
    openvpn get  openvpn set id $ID_DES_TUNNELS local_addr $IP_DES_INTERFACES


    UTMHTTP-Proxy

    || HTTP
    || Exclude
    || internal-network
    || name-vpn-netzwerk-objekt

















































  • '

    Connection Rate Limit.png
    Connection Rate Limit Access.png


    extc-Variable Default
    CONNECTION_RATE_LIMIT_TCP 0
    CONNECTION_RATE_LIMIT_TCP_PORTS
    CONNECTION_RATE_LIMIT_UDP 20 / 0
    CONNECTION_RATE_LIMIT_UDP_PORTS [ 1194 1195 ]

    Récupérée de « https://wiki.securepoint.de/index.php?title=UTM/VPN/SSL_VPN-S2S&oldid=95241 »