L2TP Mikrotik: tautuhinga. taputapu Mikrotik

Na nui noa atu te kamupene, me o ratou manga ahu ki te whakakotahi i ki te whatunga mōhiohio kotahi, pera he tino hāngai tenei pātai. Hoki maha me te reira ki te taea ki te whakarato i tētahi whatunga mō kaimahi i hea i roto i te ao. Na ka pehea ki tika tuitui te whatunga, ka whakamārama tēnei tuhinga i te tauira o te huri i te tawhā o L2TP. Mikrotik, tautuhinga whakaahuatia nei te muri, e whakaaro ki te waiho i te kōwhiringa pai mo e rua te kāinga me te tari. Nā ki te āhuatanga lite Hap, ka taea e koe ki te kaha iti ki te mahi ki te uru mamao mo ia kaimahi. Mahinga pouara taea ki te mahi i roto i ngā tari iti, te wahi e kore e te mua o te kamupene hanga rawa nui ngā whakaritenga.

Tino maha i roto i te kupenga rohe taua ki tari me manga. mahi ratou ki te kaiwhakarato taua na ko huru afaro te tukanga hononga tohu. Me kï reira e tino maha kei peka e i te tawhiti nui i te pokapū matua me i tahi e te tahi. Te nuinga hiahiatia me hāngai i te kau i huaina he hangarau Whatunga Tūmataiti Mariko (VPN). Ka taea te whakatinana te reira i roto i ara maha. E kore e tūtohu ana ki te whakamahi i te PPTP, rite tawhito te hangarau kei te, ko OpenVPN. E kore e taea e te whakamutunga kōrero ki ngā pūrere katoa.

kawa L2TP

Nā ki te wātea whanaunga o te kawa L2TP Mikrotik, ka e kia whakaahuatia whakarerekētanga i muri, he reira e taea ki te rere i runga i maha ngā pūnaha whakahaere. Kei te whakaaro te reira i te pai mohiotia. Raruraru ki a ratou e taea e puta anake ka kei te kiritaki te muri NAT. I roto i tenei take, i te pūmanawa motuhake ka aukati ona pōkai. He huarahi ki te whakatutuki i tenei raruraru. He ona drawbacks tenei kawa.

Hei tauira, e taea te whakaaro te hunga o te L2TP rite haumarutanga me te mahi. A, no te whakamahia IPSec te ki ake i te taumata haumarutanga, heke te wae tuarua te. raraunga tenei utu haumarutanga pera-ka karanga.

Te whakatu i te tūmau

Me whai i te momo IP-wāhitau pateko te tūmau ariki. He he tona tauira: 192.168.106.246. Ko te tino nui tenei mita, no te mea e kore e puta ke te wāhitau i roto i tetahi take. Te kore, ka whai i te rangatira, me te tahi atu kaiwhakamahi ki te whakamahi i te-ingoa DNS me te raruraru koe ki ngā mahi faufaa.

Waihanga pūkete

Hei waihanga i tētahi kōtaha, e hiahia ana koe ki te haere i roto i te wāhanga PPP. "Kōtaha" He ka he tahua. I tua atu ko reira e tika ana ki te hanga i te kōtaha e e ka tono ki te momo o ngā hononga VPN, i.e. he whatunga kotahi. Me kï hoki, a ka whakauru nga kōwhiringa e whai ake nei: "Huri TCP MSS», «te whakamahi kōpeketanga", "Whakamahia Whakamuna". Ki te whakaaro ki te kōwhiringa muri, ka tangohia e te reira i te uara taunoa. tonu tatou ki te mahi tahi me te pouara Mikrotik. He tino matatini Tūmau L2TP me tautuhinga, na e hiahia ana koe ki te mataara i nga hikoinga.

Next, Me te kaiwhakamahi ki te haere ki te ripa "Atanga". He Me whakarongo ki te L2TP-tūmau. He tahua mōhiohio i roto i nei ki te pēhi i te pātene "Whakahohea". Ka te kōtaha e tīpakohia e taunoa, rite he reira ahurei ka hanga i tetahi iti mua. Ki te hiahia koe e taea e koe te huri i te momo motuhēhēnga. Otiia ki te kore e te kaiwhakamahi matau tetahi mea, he reira pai ki te waiho i te uara taunoa. kia noho unactivated kōwhiringa IPsec.

I muri i taua hiahia te kaiwhakamahi ki te haere ki te "Secrets" ka hanga i te kaiwhakamahi i runga i te whatunga. I roto i te tīwae "Tūmau" e hiahia ana koe ki te whakapūtā L2TP. Ki te hiahiatia i konei tohu te kōtaha e e ka whakamahia i roto i Mikrotik. Whirihora Tūmau L2TP me tata oti. Me te taua wāhitau tūmau Local me mamao, te rerekētanga ko to ratou i te mati e rua anake whakamutunga. Tenei uara 10.50.0.10/11 aua. Ki te tika, e hiahia ana koe ki te waihanga i ngā kaiwhakamahi atu. wāhitau Local, Heoi, e noho tonu, engari he tika te mamao ki te whakapiki ake i āta ki te uara taua.

Whirihora i te pātūahi

I roto i te tikanga ki te mahi ki te whatunga kotahi, Me koe ki te whakatuwhera i te momo motuhake o UDP tauranga. I puhake mai te reira i matua ture, me te neke te tūranga i runga ake. Ko te ara anake ki te whakatutuki i te L2TP pai te mahi. Ko Mikrotik whirihoranga uaua, engari reira tino ki etahi kaha. I tua atu, me takiuru te PW i roto i ki te tāpiri i te NAT me te whakaahua. meatia tenei e kia e taea te kite i te rorohiko i roto i te whatunga taua.

tāpiri ara

I hanga whatu mamao i roto i te tautuhinga katoa. E Me tohua reira ara. Ko te uara whakamutunga o te tētaih ki kia 192.168.2.0/24. mahi hoki Waharoa i te wāhitau ano o te kiritaki i roto i te whatunga iho. kia rōrahi Target kotahitanga. I tenei whirihoranga tūmau mutunga katoa, koutou mau anake huringa kiritaki tawhā.

Whirihora i te kiritaki

Na roto i atu whakatikatika kia utua L2TP hangarau "Mikrotik" whirihoranga kiritaki aro nui. He mea tika ki te haere ki te wāhanga "Atanga" ka te hanga i te momo kiritaki L2TP hou. Me whakapūtā koe te wāhitau tūmau me taipitopito tuakiri. tīpakohia Whakamuna e taunoa, he tika te kōwhiringa taunoa tata te ara ki te tango i te taki whakahohenga. Ki te mahi tika, ka i muri i te tiaki i te hononga kia puta i roto i te whatunga L2TP. Mikrotik, i te mea tata oti te tatūnga, ko te kōwhiringa pai mō te whakamahi ki VPN.

tirohia tatou i te mahi o te kōpuku hanga i roto i te mātiti. tomo koe i te uara o te 192.168.1.1. kia tautuhi te hononga. reira i te mea e tika ana ki te hanga i tētahi momo ara pateko hou. Ko te momo whatu 192.168.1.0/24. Waharoa - te tūmau wāhitau whatunga mariko. Ko te "puna" he tika ki te whakapūtā te wāhitau whatunga o te kaiwhakamahi. I muri rawatanga anō rechecking kōpuku ping pera-ka karanga taea te kite i te reira e puta mai te pūhui. Heoi, rorohiko i roto i te mātiti kore ano e kite i te reira. I roto i te tikanga ki te taea a ratou ki te hono, te hanga whakaahua. kia waiho ia tino rite ki te mea kua oti kē i hanga i runga i te tūmau. Ai te atanga putanga he hononga uara VPN-momo. Ki te ki te ping puāwaitanga, ka kia mahi i nga mea katoa. hanga te kauhanga te, ka taea e te rorohiko te hono ki a mahi i roto i te mātiti. Ki te mōkihi utu here pai ngāwari whiwhi i te tere o te 50 megabits ia rua. taea taua tohu te tutuki anake i roto i te take o te kore o te hangarau (mā te whakamahi i L2TP) IPSec i Mikrotik.

I roto i tenei whirihoranga whatunga paerewa oti te. Ki te tapiritia te kaiwhakamahi hou, kia waiho ki runga ki tona pūrere ki te tāpiri i tētahi atu ara. Katahi te pūrere ka kite ia atu. Ki te tio ara i Client1 ko Client2, ka kore e hiahia ki te huri i tetahi tautuhinga i runga i te tūmau. Ka taea e koe te hanga i noa ara, a whakaturia te wāhitau kuwaha o te hoa tauwhainga whatunga.

Whirihora L2TP a IPSec i Mikrotik

Ki te hiahia koe ki te tango i te tiaki o te haumaru, kia whakamahia reira IPSec. e kore e hiahia ana koe ki te waihanga i tētahi whatunga hou, ka taea e koe te whakamahi i te tetahi tawhito. Me mōhio e me te waihanga e koe te kawa i waenganui i nga wāhitau o momo 10.50.0. Tenei ka tukua te hangarau ki te mahi, ahakoa o pehea wāhitau o te kiritaki.

Ki te kahore he he hiahia ki te hanga i te kauhanga IPSec i Mikrotik i waenganui i te tūmau me te kiritaki te wan, ka hiahia koe ki te kia e ko te muri he wāhitau waho. Ki te he akiaki ia, he mea e tika ana ki te huri i te kaupapa here kawa mā te whakamahi i ngā hōtuhi. Ki te whakahohea IPSec te i waenganui i wāhitau waho, i roto i te whānui, me te hiahia mō te L2TP ka heke ki te iti.

Tirohia mahi

Kia tino te mutunga o nga tautuhinga e hiahia ana koe ki te taki i te mahi. Ko tenei e tika ana ki te meka e ka whakamahi i L2TP / IPSec encapsulation puta i te momo-rua, i te tikanga e ko te tino taimaha te PTM. E mea pinepine, ina hanga e koe he whatunga taea te kite i te reira e makaka te tere hononga. Whakanuia i te reira na roto i te te hanga etahi 10 awa. Ka ka te pūtukatuka ka utaina tata kotahi rau ōrau. Ko te ngoikoretanga matua o te hangarau L2TP IPSec Mikrotik tenei. Ko reira ki te whara o te mahi whakarite haumaru mōrahi.

I roto i te tikanga ki te tiki i te tere pai, e hiahia ana koe ki te hoko i tētahi taumata tiketike o te tūāhua. Ka taea hoki te whakaputa mō te pouara e tautoko ana i te mahi ki te rorohiko, me RouterOS. Ki te mea ka whai ia kōwae whakamunatanga pūmārō, tino whakapiki i mahi. Kia aroha mai, e kore e taputapu cheap Mikrotik tenei hua.