Mạng riêng ảo Xây dựng mạng riêng ảo có bảo mật với IPSec trên Linux
Bạn đang xem bản rút gọn của tài liệu. Xem và tải ngay bản đầy đủ của tài liệu tại đây (1.4 MB, 37 trang )
!"
#$%&'
(
)*(
$#$$+,$-!.%/$+!0)1$2345(
#$436$+7)1$2345(
8
9:;<<9=>?)*8
#$3 @4+,$A$B4$C )1$2345D
)1$4+143$ 43@1 %12EFD
*$ GHI 43)1$2345 5I@ %E*)F
#$42JK*)
L@&4MN!.G+&O!3HP%0*)
$Q+R%&*)'
#$4+.+G+S+T42U)1$2345V
+W44@#L-O!.OX+Y V
#$G+JZ4+,$[I\;$#$$+]MN!.I36^]4L[@OW4V
Z$+]$+5_^+Y 8
`Q*E41214Q15*a$+ 1F8
!"Q*8
L@&4MN$C Q*D
b42c$)*!.$#$G+Z4+,$4+d$4+3D
#$G+JZ4+,$4+d$4+3D
b42c$)1$2345e
b42c$4f$++UGE412 41%2$+341$421Fe
Lb42c$g!.@H4 $^EhOG34+1)4 $^2$+341$421Fe
$b42c$g!.@MJK425"EhOG34+1i3212$+341$421F
`#$G+JZ4+,$)1$
`+JZ4+,$!W$+5_
`+JZ4+,$MJK+SO
`jR+k++@&4MN$C )1$'
``h3_MlaPI\%mI3n4&3$#$4+3]4L/)1$(
D
o)*pqjrpsD
)ZMlG+t$bG$+,$-!.L3_MlIl%mI3nue
+JZ4+,$MJK+SOE14v@2^@14v@2^F
23_^+ 3)1$4263a4+1@G+JZ4+,$MJK+SOu
+SO"O+T42Uu
Lw6$S!"G+S$,u
$b+k+u
2S @.xjjQ`Vyu)5z3+3
`+JU$M3_O$C HP%0)1$(
`M3_Ou(
`+JU$M3_Ou(
Q{|V
.5 5!}3HdG+#4423_$C 412144+k+mG+JZG+#G4b$R426
O&.5$.43+!3!.M %&k!W5!bM"M[OL[@ 4@. 3+
4+R43425"M3426O&I.ON4+$S+]4H,$L,$4+3]4
_$+BI&3$#$G+JZG+#G4b$RatOG+&O4f+OW4$C %mI3nJK3
4 + 5HP%0^+#33nOE324 I23! 4114v@2^FM_4+3]4IWG^6+
425"L[@OW43m $#$L6I36
k4+]^+3Id $+~Ml#u
!"#$%1O+5!~$Y4+_$YMJU$+m+3_L3]4$ZL[
!"!3n$at5%dON4+n4+BL[@OW4!.G+JZ4+,$423_^+ 34264+d$4]
+J!W5$R!3n$4+d$+3nMl#$C 1OL @lOu
• &'()$*+!
• &'()$,(-!"#
• &'()$./(01(-)2(,+! !"#
• &(3)2(,(4+! !"#5('((67
7(6$%
• 5('(8()#9277#92$%
N3%M"4.3MJU$$+3 I.O+mG+S+JH u
+JZu&8:$,*+!u3}34+3n !"^+#33nO!.$#$3 @
4+,$MJU$HP%0+3n 5
+JZu&8:$,*!"#u3}34+3nHZLN!"$#$436$+7!.$+,$
-$C )1$
+JZu;,(-(<(/(=<(>?@,!"#u2@$+JZ
.5H•42k+L.5$+343]4!"$#$4+.+G+SI36 42@)1$l4+K3
42@$+JZ.51OH•42k+L.5+mG+JZ4+,$423_^+ 3426
)1$!.$#$L3_MlIlaPI\%mI3n4&3$#$4+3]4L/+T42U)1$
+JZ`u+! !"#50A$%u3}34+3n!"I/$+HP
G+#4423_$C )1$426OR342JK3a;$#$$+JZ42k++T42U)1$+3n
5!.$#$+LJ}$423_^+ 3!}3)1$426OR342JK3a42@OR
+k+14v@2^4@14v@2^
+JZ'uB4C$u^]4#42k+I.OMl#!.+m^3++3nO4+
MJU$
2S @.xjjQ`Vyu)5z3+3
DEFG;
&H;IJ+K+!
L&8:$,*+!
}3HdG+#4423_$C 41214.5 5$+c4 $Y4+_%z%.^]4B3;42 @
M34+R43!}3+ ON4$#$+%z%.!.4+W43n5+3641214$€
$Y+m!bM"!"L[@OW4O.$+c4 $S 4tO2@4+d$4]^+3HP
%0412144+k+m4+R434•O#54f+$C $+c4 +J4+‚4f%0;
4+R43$#+t!!$SG+[3MJU$425"M3 2b4+3"42&OE2@412+ 5
H12!12FM_$Y4+_M]MJU$Mf$+!k4+]+m4+R43.52b4%zL/+142NO
k!W5!bM"Mƒ42 I.I.OH @4+R43MJU$IJ4+R 41214+J
!„G+[3M[OL[@MJU$!bM"L[@OW4;M[OL[@MJU$4f+2364J!.4+W
43n…
†‡VPN sinh ra nhằm đáp ứng nhu cầu này.
yJ}3Mt5I.+k+ORG+ˆOR+k+O&4121442@MY$Y4l4&3ON4
O&JK$+bOg4X4JU42J$+@1I
2S @.xjjQ`Vyu)5z3+3
`
"4+d$$+b4!„HP%041214+JI.ON4+&4S^+R4+_
4+3]M_425"4[34+R43)d^+#$L3n4‰Mt5I.HP%0+m
3 @4+,$M_425"4.3%mI3n!k4+]4&@6ON4O&236[@;
O.$+Š+m4+.+!3642@O&MYO}3$Y4+_42 @M34+R
43!.+3_MJU$4f+3n$C +
4&@2 ^+[-$+@I314!.)12!12$Y4+_43]G$W!}3+
I314a#$4+d$JK3%‹;OX+@#%mI3n!.[I\G+36I.O!3n$
!}3)12!12LŒ$R+n&$#C E+ 5$A~3I.$R+n
MJK+SOF
1I3$Y4+_+3_+JI.+m$@MJK236MJU$M/++J}
$#$@%1426O&41214
k+Ok++@&426M@&^‚MWOy*•I.ON41I3
$Y4+_$+3 I.O!‹H u
Ž‹4+,+b4~3I.!‹MJU$L[@!nEG2@41$41%F+ 5$A~3I.
!‹L642@E3H3%1F‹.5MJU$L[@!n$+ƒ4$+•4•I}G!W4I\
M]I}G,%0M_M[OL[@4+R43IR$+f+a#$!. 4@.
Ž‹4+,+ 3^•O43$W5+Z~3I.!‹@.3E@4H3%1F
Ž+R4+JK3m I314!.)12!12H•$Y•321v IIE4JKIP F
Q+3O.I3144+3]4IWG^]4B3!}3•321v II4+kI314G+[3$+,4+d$
MJU$5"425$WG$C YM_$Y4+_HP%0+m%/$+!0L642@
I314MJU$$b+k+M_M[OL[@2Œ4b4$[4+R43425"4[3G+[3
M3 1I^+3O.MJU$^f$++@&43"MY$Y+• I.^+3
I314M +@&4MN4+k4b4$[425$WG4•L6@.3!‹MJU$L[@!n
M"G+[3M3 •321i II3".5+ŒOI.O3[O4+3_^+[- $^12
$Y4+_M@&45"[42/$C $#$O#5$+C;+@ƒ$$#$O#54f+^+#$42@
N3LN$#$+YO)12!12
2S @.xjjQ`Vyu)5z3+3
y
*
•
h
'
Qf+3nu
uj&
huj&h
)u)12!3$12@!3%12h $^L@1p@412
MD.+!
h[@OW442@HP%03 @4+,$OX+@#MJK+SOE25G4@2 G+3$
1I32@4@$@IFM_$$bGMN 4@.$S4+3]4+ŒO-$+ƒ!3n$
L/+1I•EH@@G3F;!.a#$4+d$4+R43JK3P3;M[OL[@N3%
4+R43IR$+f+a#$!.4@.!‘
yJ}3Mt5I.$#$3 @4+,$HP%042@+3n 5u
• )1$E)1$2345FON4G+S^+R4+_4+3]$C G!(
• ))MJU$HP%042@4&@ON4O&MN$IWG+J9G1!.$[
42@!3n$L[@OW4$C i1L2@a5
• EG@344@G@3441I3G2@4@$@IFMJU$G+#4423_L‰32b4
+3"$R4542@MY$Yj3$2@H@’4;3H$@
• E 5121I32@4@$@IFMJU$G+#4423_L‰3j3$2@H@’4
!.3H$@
• E 5121I32@4@$@I12H3@F
+'N$@,>O.<#%'(<*,(-!"#P.
/(01(-(<(@,!"#<Q./N!"# +!5
0A$%
2S @.xjjQ`Vyu)5z3+3
(
DEFG;
&H;IJ+K!"RD
L&8:$,.(-S<T(N!"#$
)1$2345E)1$F^+RG+[3I.ON43 @4+,$MZI‚;O.I.ON44WG$#$3 @
4+,$!.%/$+!0$$bGON43[3G+#GL[@OW4$+@ON4O&+m3 @
4+,$!.%/$+!0.5^]4+UG!}3+ M_4&@2 +3"$Z$+]L[@!n^+#$+
h‰3!k)1$+@&4MN‰4SO&E14v@2^F;6Y$Y4+_$$bG$#$$Z
$+]L[@!n$+@Lb4^“$#$,%0+ 53 @4+,$”‰4S$ @+ZO.
^+R$S4+6OG+JZG+#GL[@OW4.@;!.MYI.ON4Mƒ$4f+2b4O&+$C
)1$) Mt5I.ON4!.3%/$+!0!.$Z$+]L[@!n$C )1$u
• jX+Y %mI3nJK3%‹M_L[@M[O4f+2364J
• s#$4+d$4f+4@.!‘4+R43$C Y343M_M[OL[@Y^+RL/
4+ 5M3426MJK425"
• h[@!n42J}$+m4b$R 3+E+J21GI 5 44 $^F
• Q+[-$+@$#$4+3]4L/$Y4+_^]4+UG!}3+m^+Y !.4+W44@#
L[@OW4$S4+3]4M_$Y4+_M#G,4+f$++UG!}3$#$MA3+ˆ3!"L[@
OW4
• $bG+ 3G+JZ4+,$L[@OW4;!W$+5_E42 HG@24F!.MJK
+SOE41IF$+@$#$O&^+#$+
MD.$($U!"#$
h‰3)1$4+d$HdI.ON44WG$#$3 @4+,$!.^•4+W4$+@6Y^+RMJU$
M/++• L‰3$#$436$+741214MZI‚+ 5!.@MY;ON44WG+UG$#$
$RLB$+f+4+,$p•Ep11H4•@2@OO14FMXMJU$%‹M_M/++•
$+@$b42c$;$#$%/$+!0!.$#$3 @4+,$$04+_HP%042@)1$jN4
42@+m436$+7 42~+b4MJU$MJ 2 H Mt5u
p•@ 6 jR4[
`e )1$2345
2$+341$421’@2
.3I3n$+f+!")1$;OR4[$b42c$!.
$#$+@&4MN$+
`e 4+143$ 43@
1 %12
/++• 3 @4+,$;MJU$HP%0M_
L[@M[O4f+4@.!‘!.^3_O42 lB$
%mI3n
`e +1H1@’j
jy'D(v34+3*)
%
jR4[4+W44@#OX+Y $+343]4MJU$HP
%0L‰33 @4+,$!.*)MJU$~3I.
L3]M3j;j1HH 1y31H4'Ejy'F
`e` +1H1@’j
)D(v34+3
*) %
jR4[4+W44@#OX+Y $+343]4MJU$HP
%0L‰33 @4+,$!.*)MJU$~3I.
L3]M3j;)1$21 H+I@234+O
2S @.xjjQ`Vyu)5z3+3
V
E)F
`e( *$ GHI 43
)1$2345 5I@ %
E*)F
jR4[3 @4+,$*)$$bG!3n$OX+Y
%mI3nON4$#$+43$W5
`e8 41214)1$2345
HH@$3 43@ %Q15
j 1O14
2@4@$@IE)QjF
/++• $#$G+JZ4+,$$+5_^+Y !.
I36^]4L[@OW4
`eD +141214Q15
*a$+ 1EQ*F
jR4[3 @4+,$Q*MJU$HP%0M_I36
^]4L[@OW4!.$+5_^+Y 3m $#$4+3]4L/
42@3 @43]GL[@OW4yd 426)Qj
!.9Q*w
` +19Q*wQ15
y1412O3 43@
2@4@$@I
jR4[ON43 @4+,$$+$+@$+5_^+Y
!"# $%&
3n$423_^+ 3)1$$+Š4+d$HdLg4MS42@!.3-OSMt5jN442@
+mO0$Mf$+HP%0I}I.423_^+ 3)1$42@$#$O&236[@
E34 I23! 4114v@2^–F
2S @.xjjQ`Vyu)5z3+3
8
DEFG;
;JV&EWDP&EXE!E+X
EVY&Z;D[J!"RD
)1$$$bG$#$%3$+!0L[@OW4$+@$#$,%0!.3 @4+,$”
^+#$‰4SO&3"MY$Y+• I.)1$$$bG$#$$R$0M_$#$4+3]4
L/426O&”$Y4+_3 @43]GON4$#$+ 4@.Q+3+ 34+3]4L/OB
43]+.++m^]4B3 4@.;$+c$.3Mƒ4ON4MJK%„L[@OW43m $#$
4+3]4L/M_$Y4+_!JU4 +3"+n4+B423 ^+R 4@._M&4
MJU$M3".5;$#$4+3]4L/G+[34+d$+3n$#$$R!3n$H u
+B+b4!"4WG$#$3 @4+,$L[@OW4MJU$HP%0H @$+@^+3ON44+3]4
L/P3%mI3n‰ON4^+R%&O.4+3]4L/^+#$$Y4+_+3_MJU$
5]4M/+4+W44@#OX+Y M_OX+Y %mI3n
2 @M3^+Y M_O‰^+Y %mI3nMXMJU$OX+Y
Q+3O.$R!3n$"+@.4+.+;OT34+3]4L/G+[3HP%0$#$3 @4+,$;
G+JZ4+,$!.$#$^+Y MX4+B+b4‰426M_OX+Y %mI3n!.P3YI6
O&
'( )*+ ,$%&
2S @.xjjQ`Vyu)5z3+3
D
LD.,(-\]@,!"#$
LL!"#J$(#,E#,#^JE_
t5I.3 @4+,$$$bG$#$%/$+!0a#$+W$C )1$Y$+@G+•GJK3
+WY343$Y4+_^3_O42 lB$$C Y343;$Y4+d$HdMJU$P3L‰3
JK3P3L MS^+RY$€$+@G+•GJK3+W^3_O42 a1O$#$4+3]4
L/423 426MJK425"$Y4+ 5M3Lb4^“%mI3nk42@Y343+ 5
^+R@.32 3 @4+,$.5$$bG$Z$+]L[@!n$+BI&3+m4b
$RL[@OW4+J21GI 5 44 $^
$$bGa#$+W$+@4b4$[+ 5ON4G+SN3%$C ON4Y343LŒ
$#$+g4+6OON4+1 %12MJU$4f+4@#%d 426$#$3#42/42@Y343#$
G+S$C Y343MJU$HP%$+@!3n$4f+4@#;!.!/42f$C +1 %12G+04+N$
!.@G+JZ4+,$E!W$+5_+ 5MJK+SOF!.G+36L[HP%0E!`
+ 5!(F@&4MN$C ^+#MZ3[;Mƒ$L3n4I.MB3!}3Lb4^“3 @4+,$
.@I.O!3n$!}3L[@OW4O&)dMZ3[.5$€3B+J$#$4+W4
4@#MJU$%‹M_4f+4@#$+1$^HO+ 54+d$+3n+m^3_O42 %J4+•
a@ 5!AEpFM_G+#4+3nIT32@+m42JK+UGMY;JK3P3HP
%0ON44+W44@#$+7M_4f+$+1$^HO+@ƒ$OXp%d 426N3%
$C 43Q]4[4f+4@#H•MJU$425"M3$‹!}3%mI3nB$4}3M3_OMf$+;
‰MYIƒGI&3!3n$4f+4@#!.I@&3Lˆ43]4kO4+b5Lb4^“Hd^+R4+B
+b4.@3m 4f+4@#$C Y!.4f+4@#MJU$4+d$+3nL‰3MSl
t5$€$+f+I.\4J‰MŒH ;@&342•!3n$4+ 5!kHP%0ON4
4+W44@#MZ3[O. 3$€L3]4;HP%04+W44@#L-OMƒ$L3n4!.
ON4^+Y $04+_O.$+Š$YM3_OLg4MSElF!.M3_OMf$+L364jN4I36^]4
L[@OW4)E)1$2345HH@$3 43@F3m + 34+3]4L/$+Š2—$#$$+343]4.5;!k
!W5l!.Mf$+H•L3]4$#$+4+d$+3n!3n$4f+4@#O.4+R3˜4+3]4L/
l;4+d$+3n!3n$4f+4@#!.M75^]4[E3412345$+1$^! I1–
F!.@42@ON4+1 %12Mƒ$L3n4!}3$#$42JK^+#$M_425"M3+3]4L/
Mf$+4+d$+3n$‹ON4$R!3n$4f+4@#HP%0^+Y MJU$$+3 H‚L‰3+ 3
4+3]4L/3".5^+3]$+@4+3]4L/$Y^+[-+k4+b5Lb4^“Hd4+ 5M3
.@MB3!}3$#$42JK42@Y343B$€+J$+1$^HO;!3n$4f+4@#
^+RI.O4+ 5M3%mI3nB$)d$YOƒ4$C +1 %12$+@G+•G^3_O
42 4f+4@.!‘$C Y343;+J^+ROX+Y Y
36^]4!.HgGMƒ4Y343
3n$4f+4@#$C I.4JZ4d!}3!`!.!(jN4M3_O^+#$I.42@$Z
$b$+f+a#$HP%0M_Mƒ4+1 %12!.@42@Y343!.M_I36^]4$#$+1 %12
!}3+
• 2@!(;MJU$Mƒ4!.@42@Y343+JI.ON4+1 %12O‰
2N;4+1@H I.$#$54g$!(436$+7$+@!3n$I36^]4$#$
+1 %12O‰2NYMJU$I36^]4LŒ+1 %12G+f 42J}$EO‰2N+@ƒ$
+1 %12$+f+FMXMƒ43#42/MJU$#$+@+1 %12E'F!.@42@
42JK$C +1 %1243]G4+1@E1a41 %12F1 %12H MYH•I36^]4
2S @.xjjQ`Vyu)5z3+3
e
!}3+1 %12O‰2N^]43]G+@ƒ$+1 %12$C 4S!W$+5_HP%0
42JK1a41 %12
2@G+JZ4+,$!W$+5_;MJU$Mƒ442@+1 %12$+f+!.
ab4+3n42J}$Lb4^“+1 %12$+~Mf$+.@Ey1H43 43@9G43@HFO.
L @lO$#$\M/+$+~Id M3_OMf$+$B3$‹;!.42J}$+1 %12*)
E]$YF;+JH $#$+1 %12O‰2N2@G+JZ4+,$MJK
+SO;ab4+3n+JON4+1 %12O‰2N$C Y343O}3MJU$
MYY3$‹!}3Y343B$MJU$$+5_ MJK+SO
-./0$1 ,2
• 2@!`ON4G+JZ4+,$4JZ4d!}3^•4+W4I36^]4+1 %12$C
!(MJU$HP%02@ON4Y343!`;42JK3 @4+,$E2@4@$@IF
$+@L3]4Mƒ$4f+$C 3 @4+,$4S$ @+ZE+ 5yF42@Y3
43+J!W5;42JK.542ˆ4}3+1 %12^]43]GŒO42J}$4[3
+W3#42/.5!.M75Y!.@42JK1a41 %12;H MYMƒ43#42/
3 @4+,$$+@L[4+tE'F!.@42JK3 @4+,$E2@4@$@IF
3".5^+3]$+@+1 %1242ˆ4}3O.H MYI&342ˆ4}3Lb4$,
$#3kO.Y343MX42ˆ4}342J}$MYjN4ISm ;42@G+JZ4+,$
!W$+5_;+1 %12MJU$g!.@H +1 %12$+f+$C Y343
2S @.xjjQ`Vyu)5z3+3
B$2@G+JZ4+,$MJK+SO;MJU$g!.@H +1 %12G
O}3MJU$MYY3!}3Y343B$$+5_ MJK+SO
-./0$3 ,2
LQ+R%&
Q+R%&$C MJU$OR4[!.O3++~ +J42@+k+!.L[H u
642JK Qf$+4+J}$ jR4[
1a41 %12 lOHB3 @4+,$$C +1 %1243]G4+1@H y‹
M_I36^]4$#$+1 %12!}3+
5I@ %1 @MN%.3$C +1 %12a#$+W
p1H12!1% Q+RHP%0EOƒ$M/+LŒeF
) ` 3#42/L34;^]4+UG!}3M/ $+ŠMf$+!.^3_3 @
4+,$L[@OW4;+W%3n)HP%0$+@Y343
2S @.xjjQ`Vyu)5z3+3
)11$1
OL12
` jN442JKM]OMJU$^+‰34&@LŒe^+3ON4)
MJU$4&@2 3m + 34+3]4L/;!.4-%S^+3OT3Y3
43MJU$P3M3HP%0)MY3".5+W%3n
%5+b4OT3Y343426ON4)!.MJU$%‹M_
$+BI&321GI 5 44 $^LŒ$#$+-• !3n$P3
I&3$#$Y343L/M#+$gG
4+143$ 43@
y 4
23 LI1 lO^]4[$C 4+W44@#L-OEF4+d$+3nL‰3
-./2
-./2
Qf$+4+J}$$C 42JK4+143$ 43@y 4 I.L3]M3M_+T42U$#$4+W44@#
L-O!.MN%.3Y343^+#$+ N%.34$N$C YG+[3I.LN3$C
L34€+J!W5;4@.LN+1 %12G+[3I.LN3$C L34HE!}3!`F+@ƒ$LN3
$C (`L34HE!}3!(F;!k!W5LNMnO$Y4+_MJU$#4+6O!.@42JK
4+143$ 43@y 4 ]$S4+3]4
LMR,/6$C,"#$!,C,^R"!_
3 @4+,$$+ŠM[OL[@4f+4@.!‘$C %mI3n42@Y343$+,^+R
M[OL[@4f+2364J$C %mI3n3 @4+,$$C )1$$$bG$#$%/$+
!0a#$+W4f+4@.!‘$+@$#$4+3]4L/+T42U)1$%@MY$+c$Y4+_
^3_O42 $#$Y343+WMJU$$YL/4+ 5M3L‰3$#$4+3]4L/^+#$^+R5
+36MB3!}3+3",%0;Mt5$+ŠI.ON4LNG+W+ˆH@!}32g$2B34
^+R$+ŠOBL[@!nY343L/4+ 5M3L‰3$#$4+3]4L/423 ;
O.$AL[@!n$+BI&3Hd^+#Oa•4N3%Y343}3O,$3 @43]G236
4J.54+kI.^+RMCQ+3O.4+R4342@Y343I.™’@25@2151H
@I5š$+Š$YL&O}3+k4+b5MJU$;Y$Y4+_MJU$L[@!n4+6Om HP%0
*);LŒ$#$+OX+Y 4[3$#$Y343
2S @.xjjQ`Vyu)5z3+3
R!3n$$+f+$C *)I.$$bG4f+2364J$+@Y343LŒ$#$+OX
+Y $+cjN44+W44@#OX+Y ^]4+UG%mI3n42@Y343!}3ON4^+Y M_
L3]M3Y4+.+%&OX+Y ) MYMJU$MY~3I&3HP%0ON4^+R
%&Mƒ$L3n4;!.425"M]M3_OMf$+;‰MYYMJU$3[3OXHP%0$‹
ON44+W44@#426*)$€HP%0HZMla#$+W$C L[4+tY+JI.‰
;+@ƒ$Y$Y4+_HP%0^]4+UG!}3
,D.0AR"!
*)$YON4!.342JK3B+J$#$42JKHP%042@;+JY
MYY3$#$42JK4+1@ON4$#$+^+#$+ 5!k$+Š$YON4+1 %12;*)$+3
$#$42JK4+.+L 4+.+G+Su
*)1 %12L @lO+ 342JKI.)!.)11$1OL12;ab4+3n42J}$
%mI3nOX+Y /42f$C YG+04+N$!.@*)MJU$HP%042@G+JZ
4+,$.@E!W$+5_+ 5MJK+SOF
*)2 3I12hNG+W.5MJU$Mƒ4H %mI3nOX+Y YL @lOMnO%‹
M_$ +%mI3nOX+Y 42JK %%3!. %14+Y$€L @lO
42JZ1a41 %12
*)4+143$ 43@y 4 h @lOON43#42/MJU$4f+4@#4+1@$#$+
4JZ4d+J‰2JK.5MJU$HP%0^+34f+-a#$+WId $+~
$C *)MJU$4+d$+3n
Y+ 356+t%„M]$#$42JKI&3MJU$$+3 +ˆ4+.+$#$G+S
56+t4+,+b4I.%@ON4!.34+W44@#OX+Y 56$S%mI3nG+[3
MJU$OX+Y M_$Y^f$+4+J}$+b4M/+;!k!W5G+SMnOab4+3n42J}$$+,
^+RG+[3H %mI3nYI.I\%@O.G+SMnOab4+3n42@42JK*)
2 3I1256+t4+,+ 3I.42JK*)4+143$ 43@y 4 ab4+3n
236L3n4L‰3!kYMJU$HP%0M_a#$+WG+S$AI&3$C Y343OX+Y
H ^+3OX+Y 3".5$Y+• Y^+R4+_ab4+3n42@42JK*)
1 %12+ 5*)2 3I12
E>?</(63NR"!
&0A(#,#
}3!(2JK*)1 %12MJU$Mƒ4!.@42@Y343+JI.ON4+1 %12
O‰2N;43]G4+1@I.$#$54g$!(436$+7$+@I36^]4+1 %12O‰2N
2@G+JZ4+,$!W$+5_;Yab4+3n42J}$ON4+1 %12Ey1H43 43@
9G43@HFlO$#$$+~Id $+@Mf$+$B3$‹;+JH $#$+1 %12O‰2N
^+#$E]$YF2@G+JZ4+,$MJK+SO;Yab4+3n+JON4+1 %12
O‰2N$C ON4Y343O}3MJU$MYY3!}3Y343B$MJU$$+5_
MJK+SO
}3!`€+J!}3;42JK*)1 %12MJU$Mƒ4H +1 %12!`
$+72@G+JZ4+,$!W$+5_;Yab4+3nH +1 %12$C Y343
B$2@G+JZ4+,$MJK+SO;Yab4+3nH +1 %12$C Y343O}3
MJU$MYY3!}3Y343B$
2S @.xjjQ`Vyu)5z3+3
`
&0A&,C#`
2JK*)2 3I12MJU$g!.@%mI3nH•MJU$OX+Y ) MY*)H•4+d$
+3n$R!3n$OX+Y [3E4+RM3nG”y+ 5Y343MJU$MY
Y3F!.*)2 3I12M"MJU$OX+Y ;+J*)1 %124+k^+Rhb4^“
+1 %12.@ab4+3n3m *)1 %12!.4[3$€M"MJU$OX+Y
"a/%4/<b(.0AR"!J$(#,`
]4f+-a#$+W*)Id $+~MJU$HP%0;YH•MJU$4f+4@#426
4@.LN$#$Y343*)h @lO$[*)1 %12;2 3I12!. 5I@ %
2S @.xjjQ`Vyu)5z3+3
'
-./0$1 ,4%
-./0$3 ,4%
B($5R"!
Q+R%&*)!}3$#$42JK!.LNG+WMJU$OR4[ L[!.+k+H u
hNG+W 642JK Qf$+4+J}$
Eh541HF
jR4[ ‹
OX
+Y
‹
a#$
+W
2S @.xjjQ`Vyu)5z3+3
(
*)
1 %12
) ` 3#42/L34;^]4+UG!}3
M/ $+ŠMf$+!.^3_3 @
4+,$L[@OW4;+W%3n)
HP%0$+@Y343
)11$1
OL12
` jN442JKM]OMJU$^+‰3
4&@LŒe^+3ON4)MJU$
4&@2 3m + 34+3]4L/;!.
4-%S^+3OT3Y343
MJU$P3M3HP%0)MY
JU$%‹M_$+BI&3
21GI 5 44 $^
5I@ % 5I@ %
y 4
23 LI1 ymI3n4[3MJU$OX+Y L @
lOON4Y343‰4S$ @
+Z+@ƒ$Y343MY
Y3Y$Y4+_lO$#$
4+R43+T42U+J!1$4@2
^+‰34&@%‹$+@$#$
G+JZ4+,$OX+Y +b4
M/+
*)
2 3I12
%%3 23 LI1Ee
–''F
#$L541MnO4+6O!.@^+3
$S4+3]4M_OX+Y +@ƒ$
$ +I"
%14+ )BL541$C 42JK %%3
1a4
1 %12
lOHB3 @4+,$$C
+1 %1243]G4+1@H
y‹M_B3$#$+1 %12!}3
+
*)4+143$ 43@
y 4
23 LI1 h @lO^]4[4•
,%0$C 4+W44@#a#$
+W*)Id $+~
-./4%
2S @.xjjQ`Vyu)5z3+3
V
-./4%
2JK %%3MJU$HP%0^+34+W44@#OX+Y 56$SY
%%3$€MJU$HP%0M_M[OL[@42JK*)2 3I12^]44+,$‰G+&O!3
L34Hk4+];^f$+4+J}$$C 42JK*)1 %12$N!}3 5I@ %;*)
2 3I12G+[3I.LN3$C L34H2JK*)4+143$ 43@y 4 $€!W5
MD.(<(/(=(cd!"#$
ML&($.S<e(,
#$3 @4+,$!.*)4+N$$‹ON4I}G!.^+R$+Š2—$Z$+]
$+f+a#$MJU$HP%0$+@!3n$OX+Y 3".5^+3]$+c$Y^+[-
I.O!3n$ON4$#$+I3++@&4!}3$#$4+W44@#M %&!.I36^]4!}34+W4
4@#$S4+3]4 34+W44@#G+L3]MJU$%‹!}3)1$I.j1HH 1y31H4
'Ejy'F!.)1$21 H+I@234+OE)F+c$AMJU$~3I.+m
4+W44@#L-OE+ H+3FL‰3$+c+@&4MNLŒ$#$+4f+4@#ON4$R
4+,$E$ II1% + H+F%d 426%mI3nMS!.@!.ON4^+Y
MMD./(01(-:$CfP.(4>?<C24
h‰3HdI3++@&4$C )1$42@!3n$$+@G+•G$#$4+3]4L/^+#$+
5]4M/+$#$+O.$+cOB4+d$4+3L[@OW4;YMA3+ˆ3ON4!.3L3nG+#G
M_$Y4+_4+1@%—3MJU$$#$OB3I36+nL[@OW43m $#$4+3]4L/3".5
MJU$4+d$+3n42@)1$HP%0$#$$b42c$+ 5$#$$+]MNL[@OW4!.
I36^]4L[@OW4;!.L‰3$#$G+JZ+J}H›$YM"42 @M34+R43I36^]4
L[@OW4
2S @.xjjQ`Vyu)5z3+3
8
MgD1(4($)2(,
_42 @M34+R43MXMJU$OX+Y 3m + 34+3]4L/;$+c$S$Y^+[
-$+3 H‚$#$^+Y $S$+@!3n$3[3OX4+R43+c$€$SON4$#$+
M_42 @M34+R43I36^]4L[@OW42@)1$;ON43 @4+,$$$bG
+m^+[-.5~3I.41214Q15*a$+ 1EQ*F
)1$$€3B+J+3"4WG3 @4+,$O&L[@OW4;%d 426^+#3
3nO$+3 H‚LfOW4 34+3]4L/OBP34+R43ON4$#$+ 4@.HP%0
OX+Y !.3[3OXY%‹ON4O743O.$+Š$#$4+3]4L/O}3L3]4hb4^“ 3
^+RMJU$$+3 H‚LfOW4;$Y^+[--$+ƒ4+R43+J^+R4+_
M~$E]*)MJU$%‹M_OX+Y 4[3F+ 5$ 4+3nGE]HP%0FMJU$
4+R43O.^+RL/G+#4+3n2J}$^+3$[+ 5*)MJU$HP%0;!3n$
42 @M3LfOW43m + 34+3]4L/I.2b4$S4+3]4M_L[4+t$#$3 @4+,$L[@
OW4H•HP%03 @4+,$+T42U$+C5]MJU$HP%0$+@O0$Mf$+.542@
)1$$+f+I.Q*
Q*MJU$M/++• 42@$+7p•`eD
MhBR^##B#R%(,#_
,&8:$,*BR
j0$Mf$+$C Q*I.$+@G+•G$#$4+3]4L/42 @M34+R43MA3+ˆ3$+@^]4B3
L[@OW4YL @lO$#$^+Y OW4OXMJU$HP%0M_OX+Y 4+R43a#$
+W!.4+d$+3nOX+Y 4[3Q*4+d$+3nL‰3$#$4+3]4L/+T42U)1$M_
42 @M3$#$I36^]4L[@OW4E)1$2345HH@$3 43@FŒO42@$ZH‰%mI3n
I36^]4L[@OW4E)yF)yMJU$HP%0$+@!3n$42 @M3$#$Y343
4@.!}33 @4+,$!.*)
Q*MJU$$@3+JON43 @4+,$I 3L‰3Y^]4+UG$#$$+,$-!.L 3 @
4+,$^+#$S436I.3 @4+,$[I\^+Y !.I36^]4L[@OW441214
E41214)1$2345HH@$3 43@ %Q15j 1O142@4@$@I–)QjF
3 @4+,$.5$$bGON4$Z$b42 @M3$#$^+Y OX+Y !.4+R43I36
^]4L[@OW4
)QjI.ON43 @4+,$4+N$I}G+T42U+3"G+JZ4+,$42 @M3^+Y
^+#$+ 2@Q*;$Z$b)QjMJU$HP%0+J"4[$C
G+JZ4+,$42 @M3^+Y $04+_M_^]4+UG$#$4f+-4•+ 3G+JZ4+,$
42 @M3^+Y u
9Q*wjR4[ON4$Z$b$+343]4$+@!3n$42 @M3^+Y 4+R !RHB$#$
G+JZ4+,$42 @M3^+Y S+]4$#$#42k+42 @M3^+Y Q*M"%d
4269Q*w
)Q*j*jR4[ON4$Z$b42 @M3^+Y ^+#$!}39Q*wQ*HP%0ON4
!.34f+-4•)Q*j*;L @lOG+JZ4+,$OX+Y ^+Y GLI3$!.4f+
-4&@^+Y + +
2S @.xjjQ`Vyu)5z3+3
D
E>?@,BR
Q*^+R4+d$+3n+@.4@.$#$G+JZ4+,$9Q*w+ 5
)Q*j*O.$+ŠIb52 ON4!.34f+-M_4&@6G+JZ4+,$236$C
Ok+HP%0)Qjh‰3$#$$+,$-Q*ŒO42@$Z$b$C
)Qj;6$#$+@&4MN$C Y%d 426#42k+%.a]G $#$3 3
M@&$C )Qjh @lO+ 33 3M@&u
)Qj+ H13 3M@&MS436I.$.3Mƒ4^+$[+‰MY+ 34+3]4
L/4+B+b4!}3+ $#$+M_42 @M34+R43ON4$#$+ 4@.)d%.a]G
3m + 3MZ!/4&@6ON4I36^]4L[@OW4$+@)QjE)Qj)F
36^]4L[@OW4.5H MYMJU$HP%0M_42 @M3ON4$#$+ 4@.42@
3 3M@&
)Qj+ H12@3 3M@&.5;)Qj)4+3]4IWG42@3 3
M@&MJU$HP%0M_4&@2 $#$I36^]4L[@OW4$+@$#$3 @4+,$L[@OW4
^+#$+R4+JKMt5I.Z3$#$4+ OHB$+@I36^]4)4+d$$+@$#$3 @
4+,$!.*)%.a]G!}3+
36^]4)Qj)%.a]G42@3 3M@&L @lOHd%.a]G+m
4+N$4f+H HP%0$+@#42k+%.a]G43]G4+1@u
jN44+W44@#OX+Y ;+JI.+7OX+Y %mI3nEy 4 *$25G43@
)4 % 2%–y*)F
jN44+W44@#L-OEjy'+ 5);HP%0L‰3+ 5*)F
jN4G+JZ4+,$a#$+W;+Ja#$+WHP%0$#$^+Y $+3 H‚
jN4+YOy3’’311IIO
gDi$j!"RD<./($1(-((
gLD./(01(-((
56+t$+f+^+3]$+@)1$O&++J!W5I.L‰3Y$$bG
L[@OW4$+@;I."4[$+@4b4$[$#$G+JZ4+,$”^+#$hŒ
$#$+L[@!n;Y$€L[@!n4B4O~34+,^+#$42@”bM"
42~Mƒ42 I.$+f+a#$G+[3I.O4+].@M_g)1$42@YON4!.3
G+JZ4+,$4+d$4+3M_423_^+ 3)1$+cM&3%3n$+@+m$#$+^+#$
+ O.)1$$Y4+_4+ 5M3OR+k+$b42c$44+_”E$#$I 512F
+1@p•`e;L $b42c$4+d$4+3^+#$+ MXMJU$M/++• $+@
)1$b42c$MJU$HP%0G+04+N$!.@2b4+3"5]4B;L @lO$[
G+36L[MJU$HP%0E!`+ 5G!(F;56$S$C ,%0;œ.$+C
5]%d 426!3n$)1$MJU$IWG42k+4264b4$[$#$O#5$+C42@O&+ 5
^+R;+ 5$+Š426ON4!.3LNM/+45]a#$M/++ 5ON4!.34+3]4L/42
3 ^+#$t5I.5]4M/+4+3]4^]%d 42656$S$C O&u
• +d$+3n426O#5$+C$B3E*%@H4Fuƒ4)1$!.@4b4$[$#$
4+3]4L/O#5$+C$$bGHdI3++@&4!.MNL[@OW44B4+b4Y
$$bG^+[-L[@OW41%4@1%3m + 34+3]4L/Lb4^“426
O&5+3642@O&$.+3"O#5$+C4+kMNG+,$4&G
2S @.xjjQ`Vyu)5z3+3
e
$€4-;O,$MN$R!3n$H•+3"+Z^+34+d$4+3)1$426LN
M/+45]
• +d$+3n426LNM/+45]Ep@412Fud $+~.53[O4+3_
^+B3IJU$R!3n$G+[34+d$+3nL‰3$+Š!3n$4+ 5M3426ON4
!.3LNM/+45]4+ 5!k+.42-O+ 5+.+kO#5^+#$+Y
$+Š$$bG$Z$+]L[@!n3m $#$$ƒGLNM/+45]4+d$4+3
)1$;+JM3".5I.MC!}3+m,%0+b4M/++JI.
H
gMDi$j!"#$
h $b42c$^+#$+ MJU$M/++• +ŒOOR4[$#$G+JZ4+,$
I.O4+].@M_g)1$!.@42@3 @4+,$”u4f$++UG;g!.@H4 $^;
!.g!.@%t5%„
,Di$jb((d/^#,#J(#$#_
2@$#$4k++BI\4J‰;$+c4 H•4f$++UG$#$3 @4+,$!.
4f+-$C )1$42d$43]G!.@I}Gt5I.ON43[3G+#G4B3JL‰3Y
$+@G+•G4b4$[$#$4f+-!.G+JZ4+,$L[@OW4$C )1$MJU$$$bG
ON4$#$+%z%.+JMB3!}34+R4+JKO.^+R$S4+6OON44S
$b42c$+ 5G+S$,.@
G!(MJU$4+3]4^]M_+T42U)1$k!W5YI.ON4Id $+~4+d$43z;
$Y4+_G+#4423_MJU$$+@$#$O#5$+C+ 5$#$LNM/+45]B3!}3G!`;Hd
4f$++UGMA3+ˆ34&@2 +J4+ 5M3MB3!}3#42k+4+d$4+3426OT3
4+3]4L/;!.M3".5I.^+R4+d$4]
Di$ja<6,2^k$/(#",2J(#$#_
2@^•4+W4g!.@H4 $^Eh)F;)1$$+f+I.ON44S$b42c$
2362•ŒO3m 4SO&!.4SI36^]4%mI3nEy 4 3^F
)1$$+ƒY343 ^+3$+c MJU$ $+5_ H4 $^3 @4+,$
”;$$bG$+]MNL[@OW4;!.$+5_$+c 4S% 4 I3^
2S @.xjjQ`Vyu)5z3+3
56!7$'%
+WIU3$C ^•4+W4.5I.)1$$Y4+_MJU$42 L/$+@Lb4^“4+3]4
L/.@L‰3$#$$+,$-$C )1$I.MN$IWG!}33_OLb4IU3$+f+I.
]H@!}3$b42c$4f$++UG4+k$SbGMR3lId$h)4+JKMJU$HP
%0$+@$#$O#5$+CG!`
Di$ja<>0A$*^k$/(#l#J(#$#_
2@G+JZ4+,$g!.@MJK425";$+c4 g4+6OON44+3]4
L/G+S$,$Y$$bG$#$%/$+!0)1$f%0;3[HP$+c4 $YON4
$R45$Y+ 3M/ M3_O^+#$+ jT3Z3M"$YON4O&I36^]4!}3O&
41214HP%0ON4LNM/+45]^+R$Y$#$$+,$-)1$+c4 $Y
4+_Mƒ4;a1ON44+3]4L/)1$Mƒ$L3n4!.@3m LNM/+45]!.O&
41214‰$[+ 3M/ M3_O+m4+3]4L/.5H•$+ƒ$#$Y343M32 ;g
4+6O$Z$+]L[@!n)1$$+@$+c;!.$+5_4+.+$#$Y343M]
2S @.xjjQ`Vyu)5z3+3
56!7$'8
€+Jh)$+@G+•Gg)1$!.@$#$O#5$+C^]4+• ;hi$Y
4+_42 L/$+@$#$LNM/+45]^+R$Y)1$+ŒO$$bG+mIU3
f$+L[@OW43_OLb4IU3‰Mt5I.MNG+,$4&G!.$+3G+f$ @
hD./(01(-!"#
)dId $+~$b42c$4+d$4+3;$€+J5]4M/+4+d$4+3426$#$O#5
$+CMS$B3+ 5LNM/+45];[++J‰2b4+3"M]+@&4MN$C
)1$JK34 MXM/++• + 3G+JZ4+,$$04+_I36 M]+m
$b42c$.5$+@)1$I.!W$+5_E! 9*!/&F!.MJK+SO
E&/&F
#$G+JZ4+,$)1$$€I36 OW44+3]4!}3+ 33 @4+,$$B4I—3I.
!.*)[+ 3G+JZ4+,$.5M"$$bG$Z$+]L[@!nLŒ$#$+
g4+6OON4MS43E$Y4+_I.ON442JK^+#$FL @lO$#$4+R43L[@
OW4!.@Y3433n$Id $+~$#$G+JZ4+,$^+R[++J‰M]$#$+
G+#4H3+$#$MS43;O.Mc+ZI.4+ 5M3+mG+S$04+_.@$C
Y343MJU$L[@!n!.$#$+1 %12MJU$HgGa]G+J4+].@M_4+d$+3n
MJU$M3".5"L[$+b4$#$G+JZ4+,$4+d$HdOR4[;$+,^+RG+[3
2 In+;$#$+O.!.*)4+d$+3n$R!3n$$C $+cYI."4[
$+@!3n$M/++• $#$$b42c$^+#$+J$#$I36^]4L[@OW4E)F
hL!(01(-($)
2@G+JZ4+,$!W$+5_;3 @4+,$L[@!nY343MJU$$+5_4•
4S!W$+5_M]4SY343MJU$aPI\L‰3ON4+@ƒ$$[+ 33 @4+,$
!.*);!.MS43G+‹+UGMJU$g!.@42J}$MS43!W$+5_Ey
+@ƒ$F3]GMYMS43H•MJU$g!.@42J}$L‰33 @4+,$
2S @.xjjQ`Vyu)5z3+3
+R4+JK4S!W$+5_MYY3%mI3n425"M3!.P3Y$+@
4SB3!}34S;43$C 4S!W$+5_$+f+I.4[3$C Y343Q+3
HP%0G+JZ4+,$!W$+5_;MS43)1$$+ŠMJU$,%04264[3
.5;$+,^+RG+[3426MS43#$MS43!.*)ŒO3m 4[3!.
MS43B$
2:# *;,<=
hM!(01(->0A(=
2@G+JZ4+,$MJK+SO;)1$MJU$HP%0M_L[@!nON4Y3
43MXMJU$MYY3+@.4@.H ^+3MS43MJU$~34}3S43
)1$ŒO42J}$MS43B$;43]G4+1@MYON4MS43O}3H•MJU$g
!.@42J}$MS43)1$Y4+_Y34@.LNY343B$MJU$L[@!n!.MY
Y342@ON4Y343^+#$
$Y4+_4+b5MJU$Hd^+#$+ 3m + 3G+JZ4+,$)1$;G+JZ
4+,$MJK+SOL[@!nY343B$ON4$#$+4@.LNE+1 %12 % IIF42@
^+3G+JZ4+,$!W$+5_4+k^+Ry@MY4+,4d$#$+1 %12$€^+#$
+ u
2S @.xjjQ`Vyu)5z3+3
`
• +JZ4+,$!W$+5_uMS43;$#$MS43)1$E %”@2
*)F;4[3EL @lO$[MS43!W$+5_F
• +JZ4+,$MJK+SOuMS43O}3;$#$MS43)1$E
%”@2*)F;MS43$€;4[3
2:# *;,>+
t5I.$#$++kMZ3[+Y !"$#$+at5%d$#$Y343)1$;426
4+d$4]4+kG+,$4&G+Z+3"#$+$+f+a#$O.$#$MS43MJU$HgGa]G
42@ON4Y343)1$42@$[+ 3G+JZ4+,$!W$+5_!.MJK+SO
G+04+N$!.@G+36L[.@MJU$HP%0!(HP%0+mMS43O‰
2N!.G+[3MJU$HgGa]G4+1@ON4$#$+$04+_^+3)1$MJU$HP%03n$
HgGa]G+1 %12$€G+04+N$!.@3 @4+,$)1$.@MJU$HP%0;+ 5
*) 5]$[+ 33 @4+,$$‹MJU$HP%04+kMS43IRIRMƒ4
42J}$MS43*)k!W5$YL L3]!.4#OHd^]4+UG$ZL[!"G+JZ4+,$
2S @.xjjQ`Vyu)5z3+3
'
E!W$+5_+ 5MJK+SOF;G+36L[E!`+ 5!(F!.3 @4+,$E
+ 5*)F
+JZ4+,$!W$+5_MA3+ˆ3)1$MJU$4f$++UG42@;L‰3!k
”*)G+[3MJU$~3^+3#42k+MYY3B$MJU$4+d$+3n426Y3
43$C 4S!W$+5_t5IRI.HdId $+~$+@!3n$4+d$4+3O.MA3+ˆ3
L[@OW4MS$B34}3MS$B3!}3$#$O#5$+C$+&542d$43]G)1$+JZ
4+,$MJK+SOO364[HdMYY342@Hd^]4+UG!}3)1$k!W5
YG+‹+UG!}3$#$$b42c$4+d$4+3h)!.hi;‰MY)1$MJU$~3H
^+3MXaPI\a@$#$Y343‰4S$ @+Z!.MXg4+6O$#$MS43$C
Y+JZ4+,$MJK+SOI.ON4HdId $+~G+L3]$+@423_^+ 3;
%d 4264&@MJK+SO$+@$#$Y343a56 ON4O&^+R 4@.
+J41214
hg5('((>?@,!"#
3n 5)1$MJU$#G%02b4+3"42@4+d$4]426+m+nM3"+.+
^+#$+ ;$€+J$#$$#$+4+,$^]4B3^+#$+
5+36$+@%‹HP%0+k+4+,$.@4+kON4^]4B3)1$IRG+[3M[O
L[@+mLJ}$4+d$4+3+JH u
%;?@ABCD$%&
2S @.xjjQ`Vyu)5z3+3
TCP Layer
TCP Layer
IPSec Driver
IPSec Driver
TCP Layer
TCP Layer
IPSec Driver
IPSec Driver
Encrypted IP Packets
Encrypted IP Packets
3
3
Internet Key Exchange
(IKE) Negotiation
Internet Key Exchange
(IKE) Negotiation
2
2
IPSec Policy
IPSec Policy
IPSec Policy
IPSec Policy
1
1
SPD
SPD
