D-Link防火墙售后配置资料精品.pptVIP

Testing Result 应用示例7-2 VPN Configuration-L2TP/IPsec 应用示例7-2 Exercise 7-2- VPN Configuration-L2TP/IPsec Internal LAN1 IP: /24 Internal LAN2 IP: /24 Internal LAN3 IP: /24 WAN1 DHCP IP DFL-1600 L2TP/IPsec Client VPN Tunnel Goal: Configure L2TP/IPsec server Use Windows client to Dial-up L2TP/Ipsec Ping the IP address of LAN in firewall 应用示例7-3 VPN Configuration- IPsec Network topology Internal LAN1 IP: /24 Internal LAN2 IP: /24 Internal LAN3 IP: /24 WAN1 Static IP: 0/24 DFL-1600 DFL-1600 Remote LAN Internal LAN IP: /24 WAN1 IP: 1/24 VPN Tunnel Objectives Two firewalls communicate to each other by IPsec tunnel . The client of local-net ping to the client of remote-net Configuration of logic Create VPN Object( pre-shared key) Configure IPsec tunnel Create the IP rule for IPsec tunnel 应用示例7-3 VPN Configuration-IPsec Used to authenticate VPN tunnels 2 types of method to enter PSK – ASCII and HEX ASCII – type in passphrase HEX – type in passphrase and use “generate” to cipher passphrase 应用示例7-3 VPN Configuration- IPsec VPN Objects – Pre Shared Keys For secured authentication to established over VPN, CA need to be downloaded to LDAP Server 应用示例7-3 VPN Configuration- IPsec VPN Objects – LDAP The Concept of ID Lists is to manage and control accessibility of the VPN clients and gateways Mobile clients can be restricted from accessing Internal networks which is not permissible to them 应用示例7-3 VPN Configuration- IPsec ID Lists Predefined IKE IPSec Algorithms by default High – Very Secured Medium – Secured You can defined your own algorithms 应用示例7-3 VPN Configuration- IPsec IKE/IPsec Algorithms Create objects for IP address of remote IP address and network Click “Address” in Objects Key in correct IP address 1 2 3 4 5 应用示例7-3 VPN Configuration- IPsec 6 Create the pre-shared key for IPsec tunnel Click “Pre-Share Keys ” in VPN Objects Key in the correct value 1 2 3 4 5 应用示例7-3 VPN Configuration- IPsec 6 应用示例6 Traffic Shaping Create object of the POP3 inpu