{"id":1692,"date":"2012-03-23T22:15:28","date_gmt":"2012-03-23T14:15:28","guid":{"rendered":"http:\/\/blog.pmail.idv.tw\/?p=1692"},"modified":"2012-03-23T22:15:28","modified_gmt":"2012-03-23T14:15:28","slug":"fortigate-60b-%e8%a8%ad%e5%ae%9a%e6%92%a5%e6%8e%a5%e5%bc%8fvpn","status":"publish","type":"post","link":"https:\/\/blog.pmail.idv.tw\/?p=1692","title":{"rendered":"Fortigate 60B \u8a2d\u5b9a\u64a5\u63a5\u5f0fVPN"},"content":{"rendered":"<p>\u60f3\u4f86\u8a2d\u5b9a\u5728\u516c\u53f8\u6216\u662f\u5728\u5916\u9762\u53ef\u4ee5\u9023\u7dda\u81f3\u5bb6\u4e2d\u7684\u7db2\u8def\u56e0\u56e0\u70bafortigate \u6709\u63d0\u5de5vpn client \u7684\u8edf\u9ad4<br \/>\u6240\u4ee5\u60f3\u8aaa\u4f86\u8a2d\u5b9a\u770b\u770bipsec vpn,\u53c3\u8003\u5b98\u65b9\u6587\u4ef6\u5f8c<\/p>\n<p><!--more--><\/p>\n<p>&nbsp;<\/p>\n<p>\u6211\u7684\u8a2d\u5b9a\u6b65\u9a5f\u5982\u4e0b<br \/>1.\u8a2d\u5b9aIPSEC<\/p>\n<p>\u5728web\u4ecb\u9762&#8211;&gt;VPN&#8211;&gt;IPSEC&#8211;&gt; \u9edeauto key(IKE) \u4f86\u5efa\u7acbphase 1 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn1.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn1\" border=\"0\" alt=\"fg60-vpn1\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn1_thumb.jpg\" width=\"244\" height=\"179\"><\/a> <\/p>\n<p>1. \u81ea\u8a02\u540d\u7a31 (\u6211\u8a2d\u5b9avpn-1\uff09<br \/>2. \u8a2d\u5b9a\u9060\u7a0b\u7db2\u8def\u9598\u9078&#8221;\u9023\u63a5\u7528\u6236\u7aef&#8221;<br \/>3. \u672c\u5730\u4ecb\u9762\uff1a\u56e0\u70ba\u6211\u76ee\u524d\u67092\u689d\u7dda\u8def\u6211\u9078WAL1\u9023\u9023VPN<br \/>4. \u6a21\u5f0f:\u9078\u91ce\u883b\u6a21\u5f0f<br \/>6. Pre-shared Key : \u8acb\u81ea\u8a02<br \/>7.pree option : \u9078\u64c7 &#8220;\u63a5\u53d7 \u4efb\u4f55 peer ID&#8221; <\/p>\n<p>\u9032\u968e\u9078\u9805 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn2.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn2\" border=\"0\" alt=\"fg60-vpn2\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn2_thumb.jpg\" width=\"244\" height=\"205\"><\/a> <\/p>\n<p>1.\u52a0\u5bc6\u6f14\u7b97\u78bc: \u9078 3DE SHA1 MD5<br \/>2.DH \u7d44 : \u9078 5<br \/>3.\u5bc6\u9470\u9031\u671f:28800<br \/>4.XAuth : \u9078\u555f\u52d5\u505a\u70ba\u7d42\u7aef<br \/>5.\u7528\u6236\u540d\u7a31\u5bc6\u78bc:\u81ea\u8a02<br \/>6.Nat-traversal : \u6253\u52fe<br \/>7.\u4fdd\u6301\u9023\u7dda\u983b\u7387\uff1a\u53ef\u81ea\u8a02<br \/>8.Dead Peer Detection : \u52fe\u555f\u7528<\/p>\n<p>\u5efa\u7acb phase 2 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn3.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn3\" border=\"0\" alt=\"fg60-vpn3\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn3_thumb.jpg\" width=\"244\" height=\"88\"><\/a> <\/p>\n<p>1.\u540d\u7a31\u81ea\u8a02<br \/>2. phase 1 \u9078\u5df2\u7d93\u8a2d\u5b9a\u7684phase 1 \u5373\u53ef <\/p>\n<p>2. \u8a2d\u5b9apoylic <\/p>\n<p>\u5728\u9632\u706b\u7246&#8211;&gt;\u4f4d\u7f6e\u4e2d \u6211\u5148\u8a2d\u5b9a\u4e00\u500bFG-LAN \uff08 \u4e5f\u5c31\u662f\u6211\u5bb6\u5167\u90e8\u7684\u7db2\u6bb5\uff09 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn4.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn4\" border=\"0\" alt=\"fg60-vpn4\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn4_thumb.jpg\" width=\"244\" height=\"58\"><\/a> <\/p>\n<p>\u8a2d\u5b9apoylic <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn5.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn5\" border=\"0\" alt=\"fg60-vpn5\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn5_thumb.jpg\" width=\"244\" height=\"151\"><\/a> <\/p>\n<p>\u4f86\u6e90\u4ecb\u9762\uff1a\u9078internal<br \/>\u4f86\u6e90\u4f4d\u7f6e : \u5167\u90e8\u7db2\u8def(FG-LAN )<br \/>\u76ee\u7684\u4ecb\u9762 : WAN1<br \/>\u76ee\u7684\u4f4d\u7f6e: ALL<br \/>\u63a1\u53d6\u884c\u52d5: ipsec<br \/>VPN \u901a\u9053 : \u9078\u4e0a\u9762\u8a2d\u5b9aVPN-1 \u5373\u53ef \u4e26\u52feAllow inbound<br \/>\u4ee5\u4e0a\u662fFortigate 60B\u8a2d\u5b9a <\/p>\n<p>2. Clinet \u8a2d\u5b9a<br \/>\u5148\u5b89\u88ddFortiClient\u8edf\u9ad4\u5728<br \/>\u958b\u555fForticlient \u8edf\u9ad4\u5982\u4e0b\u5716 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn6.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn6\" border=\"0\" alt=\"fg60-vpn6\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn6_thumb.jpg\" width=\"244\" height=\"198\"><\/a> <\/p>\n<p>\u9ede\u9078\u9ad8\u7d1a&#8211;&gt;\u65b0\u589e <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn7.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn7\" border=\"0\" alt=\"fg60-vpn7\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn7_thumb.jpg\" width=\"244\" height=\"132\"><\/a> <\/p>\n<p>\u9078\u624b\u52d5\u5c07IP\u8cc7\u8a0a\u8f38\u5165 <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn8.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn8\" border=\"0\" alt=\"fg60-vpn8\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn8_thumb.jpg\" width=\"244\" height=\"180\"><\/a> <\/p>\n<p>\u8f38\u5165\u5f8c\u9078\u9ad8\u7d1a\u5c07xauth \u6253\u52fe <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn9.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn9\" border=\"0\" alt=\"fg60-vpn9\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn9_thumb.jpg\" width=\"230\" height=\"244\"><\/a> <\/p>\n<p>\u5728\u6aa2\u67e5\u4e00\u4e0b\u5982\u4e0b\u5716\u8a2d\u5b9a <\/p>\n<p><a href=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn10.jpg\" target=\"_blank\"><img loading=\"lazy\" decoding=\"async\" style=\"background-image: none; border-bottom: 0px; border-left: 0px; padding-left: 0px; padding-right: 0px; display: inline; border-top: 0px; border-right: 0px; padding-top: 0px\" title=\"fg60-vpn10\" border=\"0\" alt=\"fg60-vpn10\" src=\"https:\/\/blog.pmail.idv.tw\/wp-content\/uploads\/2012\/03\/fg60-vpn10_thumb.jpg\" width=\"220\" height=\"244\"><\/a><\/p>\n<div class=\"21cd169d3c0f71e95b84db320302cb4a\" data-index=\"1\" style=\"float: right; margin:10px 0 10px 10px;\">\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-8711325745898650\"\r\n     crossorigin=\"anonymous\"><\/script>\n<\/div>\n\n<div style=\"font-size: 0px; height: 0px; line-height: 0px; margin: 0; padding: 0; clear: both;\"><\/div>","protected":false},"excerpt":{"rendered":"<p>\u60f3\u4f86\u8a2d\u5b9a\u5728\u516c\u53f8\u6216\u662f\u5728\u5916\u9762\u53ef\u4ee5\u9023\u7dda\u81f3\u5bb6\u4e2d\u7684\u7db2\u8def\u56e0\u56e0\u70bafortigate \u6709\u63d0\u5de5vp &hellip; <a href=\"https:\/\/blog.pmail.idv.tw\/?p=1692\">\u95b1\u8b80\u5168\u6587 <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"ngg_post_thumbnail":0,"footnotes":""},"categories":[56],"tags":[],"class_list":["post-1692","post","type-post","status-publish","format-standard","hentry","category-fg"],"_links":{"self":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1692"}],"version-history":[{"count":0,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=\/wp\/v2\/posts\/1692\/revisions"}],"wp:attachment":[{"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pmail.idv.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}