Mainos / Advertisement:
Ero sivun ”PPTP-serveri” versioiden välillä
Siirry navigaatioon
Siirry hakuun
| Rivi 1: | Rivi 1: | ||
| − | + | Tehdään cisco 2821 routterista pptp serveri. | |
| − | pptp | ||
| − | + | ==== Perustietoa ==== | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | Meillä on käytössä cisco 2821 ja clienttinä windows 8.1. | |
| + | |||
| + | hostname Reititin | ||
| − | + | username johannes password Qwerty1 | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | + | enable secret Qwerty1 | |
| − | + | interface FastEthernet0/0 | |
| + | description WAN | ||
| + | ip address 10.5.26.205 255.255.255.0 | ||
| + | ip nat outside | ||
| + | ip virtual-reassembly | ||
| + | no shutdown | ||
| + | interface FastEthernet0/1 | ||
| + | description LAN | ||
| + | ip address 10.0.0.1 255.255.255.0 | ||
| + | ip nat inside | ||
| + | ip virtual-reassembly | ||
| + | no shutdown | ||
| − | ==== | + | ==== Sitten pptp kuntoon ==== |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
aaa new-model | aaa new-model | ||
| − | + | ||
| − | |||
aaa authentication login default local | aaa authentication login default local | ||
aaa authentication ppp default local | aaa authentication ppp default local | ||
aaa authorization network default local | aaa authorization network default local | ||
| − | + | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
vpdn enable | vpdn enable | ||
| − | |||
vpdn-group PPTP | vpdn-group PPTP | ||
| − | + | accept-dialin | |
| − | + | protocol pptp | |
| − | + | virtual-template 1 | |
| − | + | exit | |
| − | + | ||
| − | + | Määritellään että hyväksytään sisääntulevat pptp protokollaa käyttävät vpn yhteydenotot ja ohjataan ne Virtual-Template 1. | |
| − | + | ||
| − | + | Määritellään Virtual-template 1 interfacen esimerkiksi salaus ja ip pooli | |
| − | + | ||
| − | + | interface Virtual-template 1 | |
| − | + | ip unnumbered FastEthernet0/1 | |
| − | + | ip nat inside | |
| − | + | ip virtual-reassembly | |
| − | + | peer default ip address pool PPTPPOOL | |
| − | + | compress mppc | |
| − | + | ppp encrypt mppe auto | |
| − | + | ppp authentication ms-chap-v2 | |
| − | + | ||
| − | + | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | interface Virtual- | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
ip local pool PPTPPOOL 10.255.255.200 10.255.255.254 | ip local pool PPTPPOOL 10.255.255.200 10.255.255.254 | ||
| − | + | ||
| − | + | ==== Natti reitittimelle: ==== | |
| − | + | ||
| − | |||
| − | |||
| − | |||
ip nat inside source list NAT interface FastEthernet0/0 overload | ip nat inside source list NAT interface FastEthernet0/0 overload | ||
| − | + | ||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
ip access-list extended NAT | ip access-list extended NAT | ||
| − | + | deny ip 10.0.0.0 0.0.0.255 10.255.255.0 0.0.0.255 | |
| − | + | permit ip 10.255.255.0 0.0.0.255 any | |
| − | + | permit ip 10.0.0.0 0.0.0.255 any | |
| − | + | permit tcp any host 10.5.26.205 eq 22 | |
| − | + | permit tcp any host 10.5.26.205 eq 1723 | |
| − | + | permit udp any host 10.5.26.205 eq isakmp | |
| − | + | permit esp any host 10.5.26.205 | |
| − | + | permit gre any host 10.5.26.205 | |
| − | + | permit icmp any host 10.5.26.205 | |
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
| − | |||
Versio 17. marraskuuta 2014 kello 11.47
Tehdään cisco 2821 routterista pptp serveri.
Perustietoa
Meillä on käytössä cisco 2821 ja clienttinä windows 8.1.
hostname Reititin
username johannes password Qwerty1
enable secret Qwerty1
interface FastEthernet0/0 description WAN ip address 10.5.26.205 255.255.255.0 ip nat outside ip virtual-reassembly no shutdown
interface FastEthernet0/1 description LAN ip address 10.0.0.1 255.255.255.0 ip nat inside ip virtual-reassembly no shutdown
Sitten pptp kuntoon
aaa new-model
aaa authentication login default local aaa authentication ppp default local aaa authorization network default local
vpdn enable vpdn-group PPTP accept-dialin protocol pptp virtual-template 1 exit
Määritellään että hyväksytään sisääntulevat pptp protokollaa käyttävät vpn yhteydenotot ja ohjataan ne Virtual-Template 1.
Määritellään Virtual-template 1 interfacen esimerkiksi salaus ja ip pooli
interface Virtual-template 1 ip unnumbered FastEthernet0/1 ip nat inside ip virtual-reassembly peer default ip address pool PPTPPOOL compress mppc ppp encrypt mppe auto ppp authentication ms-chap-v2
ip local pool PPTPPOOL 10.255.255.200 10.255.255.254
Natti reitittimelle:
ip nat inside source list NAT interface FastEthernet0/0 overload
ip access-list extended NAT deny ip 10.0.0.0 0.0.0.255 10.255.255.0 0.0.0.255 permit ip 10.255.255.0 0.0.0.255 any permit ip 10.0.0.0 0.0.0.255 any permit tcp any host 10.5.26.205 eq 22 permit tcp any host 10.5.26.205 eq 1723 permit udp any host 10.5.26.205 eq isakmp permit esp any host 10.5.26.205 permit gre any host 10.5.26.205 permit icmp any host 10.5.26.205
Mainos / Advertisement:
