Mainos / Advertisement:
Ero sivun ”RouterOS IPSec” versioiden välillä
Siirry navigaatioon
Siirry hakuun
| Rivi 62: | Rivi 62: | ||
var slideimages = new Array() // create new array to preload images | var slideimages = new Array() // create new array to preload images | ||
slideimages[0] = new Image() // create new instance of image object | slideimages[0] = new Image() // create new instance of image object | ||
| − | slideimages[0].src = "nakki.jpg" // set image object src property to an image's src, preloading that image in the process | + | slideimages[0].src = "http://joh.tunk.org/nakki.jpg" // set image object src property to an image's src, preloading that image in the process |
slideimages[1] = new Image() | slideimages[1] = new Image() | ||
| − | slideimages[1].src = "images | + | slideimages[1].src = "https://encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSHrvY6q3dfzismDQUjefbbsDATRNPrrvWBKzrU7ig5mXynalK5O_Xktw" |
slideimages[2] = new Image() | slideimages[2] = new Image() | ||
| − | slideimages[2].src = " | + | slideimages[2].src = "http://joh.tunk.org/nakki.jpg" |
</script> | </script> | ||
</head> | </head> | ||
<body> | <body> | ||
| − | <a href="javascript:slidelink()"><img src="nakki.jpg" id="slide" width="200" height="200" /></a> | + | <a href="javascript:slidelink()"><img src="http://joh.tunk.org/nakki.jpg" id="slide" width="200" height="200" /></a> |
<script type="text/javascript"> | <script type="text/javascript"> | ||
Versio 27. helmikuuta 2015 kello 13.08
Oletetaan että reitittimillä on jo yhteys toisiinsa. Esimerkin tiedot:
Site 1:
- WAN 10.0.0.19
- LAN 192.168.200.1
Site 2:
- WAN 10.0.0.21
- LAN 192.168.100.1
Peerin konffaus:
Site 1:
/ip ipsec peer add address=192.168.100.1/24 port=500 auth-method=pre-shared-key secret=Qwerty1
Site 2:
/ip ipsec peer add address=192.168.200.1/24 port=500 auth-method=pre-shared-key secret=Qwerty1
Policy ja Proposal konffaus:
/ip ipsec proposal print
Näemme että meillä on jo simppeli proposal valmiina. konffataan siis policy joka käyttää sitä.
Site 1:
/ip ipsec policy add src-address=192.168.200.0/24 src-port=any dst-address=192.168.100.0/24 dst-port=any sa-src-address=10.0.0.19 sa-dst-address=10.0.0.21 tunnel=yes action=encrypt proposal=default
Site 2:
/ip ipsec policy add src-address=192.168.100.0/24 src-port=any dst-address=192.168.200.0/24 dst-port=any sa-src-address=10.0.0.21 sa-dst-address=10.0.0.19 tunnel=yes action=encrypt proposal=default
Natin konffaus
Site 1:
/ip firewall nat add chain=srcnat action=accept place-before=0 src-address=192.168.200.0/24 dst-address=192.168.100.0/24
Site 2:
/ip firewall nat add chain=srcnat action=accept place-before=0 src-address=192.168.100.0/24 dst-address=192.168.200.0/24
Mainos / Advertisement:
