{"id":337808,"date":"2022-09-01T21:00:23","date_gmt":"2022-09-01T21:00:23","guid":{"rendered":"http:\/\/savepearlharbor.com\/?p=337808"},"modified":"-0001-11-30T00:00:00","modified_gmt":"-0001-11-29T21:00:00","slug":"","status":"publish","type":"post","link":"https:\/\/savepearlharbor.com\/?p=337808","title":{"rendered":"<span>\u0421\u0442\u044b\u043a\u0443\u0435\u043c UserGate c \u0437\u0430\u0440\u0443\u0431\u0435\u0436\u043d\u044b\u043c\u0438 FW: \u0431\u043e\u0435\u0432\u043e\u0439 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u0430\u0436<\/span>"},"content":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0412 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 <a href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/658377\/\"><u>\u0441\u0442\u0430\u0442\u0435\u0439<\/u><\/a> \u043c\u044b \u0438\u0441\u043a\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u0441 \u0443\u0445\u043e\u0434\u043e\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 NGFW \u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u043b\u0438 \u0441\u0445\u0435\u043c\u044b \u0431\u0435\u0437\u0431\u043e\u043b\u0435\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 UserGate. \u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0437\u0430 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043e\u0431\u043e \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c. \u0421\u0442\u0430\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0440\u0443\u0431\u0435\u0436\u043d\u044b\u0439 \u0444\u0430\u0435\u0440\u0432\u043e\u043b \u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u043d\u0430 \u044d\u0442\u043e\u043c \u0444\u043e\u043d\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b \u0441\u0442\u044b\u043a\u043e\u0432\u043a\u0438 \u0441 UG.\u00a0\u00a0<\/p>\n<p>\u0412 \u043f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0442\u0430\u0445 \u0442\u043e \u0438 \u0434\u0435\u043b\u043e \u0441\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 IPsec \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 FortiGate, \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 CheckPoint. \u041f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u0434\u043b\u044f \u0432\u0430\u0441 \u0433\u043e\u0440\u044f\u0447\u0438\u0435 \u043f\u0438\u0440\u043e\u0436\u043a\u0438 \u2014 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 CheckPoint, FortiGate, NSX Edge, MikroTik \u0438 Cisco. \u0413\u0440\u0430\u0431\u043b\u0435\u0439 \u043c\u044b \u043f\u043e\u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0433\u043e\u0442\u043e\u0432\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 IPsec.<\/p>\n<p>\u041d\u0430\u0447\u043d\u0435\u043c \u043f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443.<\/p>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 CheckPoint<\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:   <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/0a3\/40f\/254\/0a340f2547fa94de3d6f0ca90725ce53.jpg\" width=\"1256\" height=\"476\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/0a3\/40f\/254\/0a340f2547fa94de3d6f0ca90725ce53.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 CheckPoint: 10.10.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 CheckPoint: 91.107.67.228.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 CheckPoint  <\/h3>\n<ol>\n<li>\n<p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/43d\/987\/7fd\/43d9877fd95ed805783a394b1c87c10d.jpg\" alt=\"\" title=\"\" width=\"817\" height=\"191\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/43d\/987\/7fd\/43d9877fd95ed805783a394b1c87c10d.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u043c \u0431\u043b\u0435\u0439\u0434 IPsec VPN:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/070\/8b7\/362\/0708b7362fa15c6bb740d0d0cc53753c.jpg\" alt=\"\" title=\"\" width=\"752\" height=\"452\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/070\/8b7\/362\/0708b7362fa15c6bb740d0d0cc53753c.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0430\u0434\u0440\u0435\u0441 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f IPsec \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 IPsec VPN \u2014 Link Selection:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/da5\/51d\/486\/da551d486e9d6e97930fe60b6899c31b.jpg\" alt=\"\" title=\"\" width=\"747\" height=\"505\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/da5\/51d\/486\/da551d486e9d6e97930fe60b6899c31b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c VPN-\u0434\u043e\u043c\u0435\u043d \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 CheckPoint:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/071\/2a8\/238\/0712a82381c14306b6729fc4ea0cc8e9.jpg\" alt=\"\" title=\"\" width=\"748\" height=\"212\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/071\/2a8\/238\/0712a82381c14306b6729fc4ea0cc8e9.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c Interoperable Device \u0441 \u0438\u043c\u0435\u043d\u0435\u043c UserGate:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/993\/f1c\/a0c\/993f1ca0cdb09d8e9f726e9ea7c1eb37.jpg\" alt=\"\" title=\"\" width=\"1021\" height=\"225\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/993\/f1c\/a0c\/993f1ca0cdb09d8e9f726e9ea7c1eb37.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/7da\/5f2\/8ad\/7da5f28ad7cb6c0ef88e3e8e99e07547.jpg\" alt=\"\" title=\"\" width=\"1016\" height=\"455\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/7da\/5f2\/8ad\/7da5f28ad7cb6c0ef88e3e8e99e07547.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 CheckPoint \u0438 UserGate \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 Meshed \u043a\u043e\u043c\u044c\u044e\u043d\u0438\u0442\u0438:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/b3d\/c54\/ef9\/b3dc54ef9b1707548292f78f68d6ac8f.jpg\" alt=\"\" title=\"\" width=\"801\" height=\"422\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b3d\/c54\/ef9\/b3dc54ef9b1707548292f78f68d6ac8f.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044f:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ef4\/729\/873\/ef47298734040316ee48b411510bc7f7.jpg\" alt=\"\" title=\"\" width=\"706\" height=\"702\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ef4\/729\/873\/ef47298734040316ee48b411510bc7f7.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a2d\/472\/5c4\/a2d4725c4f12022f838d467bff979e4b.jpg\" alt=\"\" title=\"\" width=\"631\" height=\"517\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a2d\/472\/5c4\/a2d4725c4f12022f838d467bff979e4b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/9a7\/085\/f17\/9a7085f17fa64612b7debcc27535db94.jpg\" alt=\"\" title=\"\" width=\"557\" height=\"432\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/9a7\/085\/f17\/9a7085f17fa64612b7debcc27535db94.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/91d\/f1b\/765\/91df1b7658209724f8518810cb33529b.jpg\" alt=\"\" title=\"\" width=\"613\" height=\"502\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/91d\/f1b\/765\/91df1b7658209724f8518810cb33529b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"9\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/6af\/564\/831\/6af56483117c99b8f4c2bfc95530f44b.jpg\" alt=\"\" title=\"\" width=\"977\" height=\"87\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/6af\/564\/831\/6af56483117c99b8f4c2bfc95530f44b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 CheckPoint \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate<\/h3>\n<ol>\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0417\u043e\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e VPN \u0434\u043b\u044f Untrusted-\u0437\u043e\u043d\u044b:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/574\/2d6\/fb7\/5742d6fb79cc4d507957b5dec47f3be5.jpg\" alt=\"\" title=\"\" width=\"713\" height=\"606\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/574\/2d6\/fb7\/5742d6fb79cc4d507957b5dec47f3be5.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 VPN for Site-to-Site:<\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/751\/4cf\/14b\/7514cf14bd3f14159f2f93222cd80378.jpg\" alt=\"\" title=\"\" width=\"507\" height=\"297\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/751\/4cf\/14b\/7514cf14bd3f14159f2f93222cd80378.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u0414\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0438:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/c3c\/e3f\/5da\/c3ce3f5da1464fd27bbccb3c2169f7ea.jpg\" alt=\"\" title=\"\" width=\"506\" height=\"298\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c3c\/e3f\/5da\/c3ce3f5da1464fd27bbccb3c2169f7ea.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN. \u0412 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043e\u0431\u0449\u0438\u0439 \u043a\u043b\u044e\u0447 (pre-shared key) \u0438 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0424\u0430\u0437\u044b 1 \u0438 \u0424\u0430\u0437\u044b 2, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 CheckPoint:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/d1c\/85a\/572\/d1c85a572d8627d71bb94327de11c450.jpg\" alt=\"\" title=\"\" width=\"580\" height=\"353\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/d1c\/85a\/572\/d1c85a572d8627d71bb94327de11c450.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/b4b\/162\/1e8\/b4b1621e89c16c541ec26582f0775d95.jpg\" alt=\"\" title=\"\" width=\"572\" height=\"580\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b4b\/162\/1e8\/b4b1621e89c16c541ec26582f0775d95.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/0ec\/4e1\/b77\/0ec4e1b7720d9ce413417b9487b886be.jpg\" alt=\"\" title=\"\" width=\"567\" height=\"435\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/0ec\/4e1\/b77\/0ec4e1b7720d9ce413417b9487b886be.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u044b\u0431\u0440\u0430\u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN, \u0443\u043a\u0430\u0437\u0430\u0432 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 CheckPoint, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435) \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN: IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c. \u0414\u0430\u043b\u0435\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u0438 CheckPoint:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a94\/118\/889\/a94118889d70d26cc67aed8f85cc079f.jpg\" alt=\"\" title=\"\" width=\"752\" height=\"176\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a94\/118\/889\/a94118889d70d26cc67aed8f85cc079f.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f09\/bfe\/c36\/f09bfec36d481143dd091c83f57ddf45.jpg\" alt=\"\" title=\"\" width=\"487\" height=\"528\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f09\/bfe\/c36\/f09bfec36d481143dd091c83f57ddf45.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"6\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0434\u0432\u0443\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c Trusted \u0438 VPN for Site-to-Site \u0437\u043e\u043d. \u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u0437\u043e\u043d\u0430\u043c\u0438 Trusted \u0438 S2S:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/110\/096\/84d\/11009684dea58c0bae93270fb7415067.jpg\" alt=\"\" title=\"\" width=\"727\" height=\"202\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/110\/096\/84d\/11009684dea58c0bae93270fb7415067.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/2df\/a5e\/7e3\/2dfa5e7e364d1d868c301aaf2ecd19f6.jpg\" alt=\"\" title=\"\" width=\"922\" height=\"595\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/2df\/a5e\/7e3\/2dfa5e7e364d1d868c301aaf2ecd19f6.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/211\/324\/ff2\/211324ff28df00650af312b83994229c.jpg\" alt=\"\" title=\"\" width=\"927\" height=\"595\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/211\/324\/ff2\/211324ff28df00650af312b83994229c.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/5f2\/f1b\/fc1\/5f2f1bfc1add2d621ebb04f56b88d621.jpg\" alt=\"\" title=\"\" width=\"920\" height=\"592\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/5f2\/f1b\/fc1\/5f2f1bfc1add2d621ebb04f56b88d621.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0412\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e CheckPoint IPsec. \u041f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0437\u0435\u043b\u0435\u043d\u043e\u0433\u043e \u0446\u0432\u0435\u0442\u0430:\u00a0<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/1fc\/d13\/3f3\/1fcd133f342b7111d072688bef2d485e.jpg\" alt=\"\" title=\"\" width=\"1042\" height=\"206\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/1fc\/d13\/3f3\/1fcd133f342b7111d072688bef2d485e.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0441\u0442\u0430\u0442\u0443\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a60\/4d2\/a23\/a604d2a234401d5032c499d304a71ab8.jpg\" alt=\"\" title=\"\" width=\"1271\" height=\"215\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a60\/4d2\/a23\/a604d2a234401d5032c499d304a71ab8.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 FortiGate<\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a54\/ef2\/0ea\/a54ef20ea48db38bb1cbc91a49e18b51.jpg\" width=\"1250\" height=\"481\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a54\/ef2\/0ea\/a54ef20ea48db38bb1cbc91a49e18b51.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 tunnel3: 203.0.113.1\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 Fortigate: 10.10.1.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Fortigate: 91.107.67.228.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043d\u0430 Fortigate c \u0438\u043c\u0435\u043d\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044f UserGate: 203.0.113.2\/24.\u00a0<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate  <\/h3>\n<ol>\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0447\u0435\u0440\u0435\u0437 Template type \u2014 Custom:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/199\/352\/4be\/1993524bec861949757f30fa79ac1e62.jpg\" alt=\"\" title=\"\" width=\"586\" height=\"182\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/199\/352\/4be\/1993524bec861949757f30fa79ac1e62.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/905\/ac3\/87d\/905ac387d7bb4c416fc6be66bbaa8c24.jpg\" alt=\"\" title=\"\" width=\"647\" height=\"762\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/905\/ac3\/87d\/905ac387d7bb4c416fc6be66bbaa8c24.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/bd7\/71d\/dda\/bd771dddaca34d5ba32f015d2fbd4c3d.jpg\" alt=\"\" title=\"\" width=\"630\" height=\"201\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/bd7\/71d\/dda\/bd771dddaca34d5ba32f015d2fbd4c3d.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f1d\/c43\/4ff\/f1dc434ff294c66d4498046dd0d90d21.jpg\" alt=\"\" title=\"\" width=\"632\" height=\"220\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f1d\/c43\/4ff\/f1dc434ff294c66d4498046dd0d90d21.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a41\/88d\/4ad\/a4188d4ad9db908628ec9b91476b7232.jpg\" alt=\"\" title=\"\" width=\"627\" height=\"76\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a41\/88d\/4ad\/a4188d4ad9db908628ec9b91476b7232.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/232\/3c5\/b19\/2323c5b19366f322171a185cfdda8a01.jpg\" alt=\"\" title=\"\" width=\"642\" height=\"685\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/232\/3c5\/b19\/2323c5b19366f322171a185cfdda8a01.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 Network \u2014 Interfaces \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u2014 203.0.113.2\/32, \u0412 \u043f\u043e\u043b\u0435 Remote IP\/Netmask \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u2014 203.0.113.1\/24:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/3b6\/3cb\/1d7\/3b63cb1d767832efe41d41919f2407e4.jpg\" alt=\"\" title=\"\" width=\"528\" height=\"442\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/3b6\/3cb\/1d7\/3b63cb1d767832efe41d41919f2407e4.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0442\u044f\u043c\u0438. \u041d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441 loopback \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441 \u0434\u0432\u0443\u043c\u044f IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438: 172.21.10.1 \u0438 172.21.10.100:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/853\/587\/ec5\/853587ec5e199b79ec95c4d26c5bc5d3.jpg\" alt=\"\" title=\"\" width=\"597\" height=\"585\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/853\/587\/ec5\/853587ec5e199b79ec95c4d26c5bc5d3.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0418 \u0432\u043e\u0442 \u0441\u0430\u043c\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c FGT-UserGate. \u0410\u0434\u0440\u0435\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432:\u00a0<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>FGT-UserGate \u2014 Loopback Interface \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.<\/p>\n<\/li>\n<li>\n<p>UserGate \u2014 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/1a8\/763\/8a1\/1a87638a12f6106048134178a0e117d7.jpg\" alt=\"\" title=\"\" width=\"1318\" height=\"133\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/1a8\/763\/8a1\/1a87638a12f6106048134178a0e117d7.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ul>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<ol>\n<li>\n<p>\u0412\u0441\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0445\u043e\u0436\u0438 \u0441\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c UserGate \u2014 CheckPoint. \u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 tunnel3 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 203.0.113.1\/24:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/e09\/a94\/995\/e09a94995f0a58b45bfcf24af77d4edc.jpg\" alt=\"\" title=\"\" width=\"857\" height=\"233\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/e09\/a94\/995\/e09a94995f0a58b45bfcf24af77d4edc.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiGate S2S:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/197\/961\/30c\/19796130c0d17bc6153d8cd946326b3c.jpg\" alt=\"\" title=\"\" width=\"565\" height=\"392\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/197\/961\/30c\/19796130c0d17bc6153d8cd946326b3c.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/10c\/b82\/a7f\/10cb82a7fa36f48f93017336504e35d1.jpg\" alt=\"\" title=\"\" width=\"568\" height=\"578\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/10c\/b82\/a7f\/10cb82a7fa36f48f93017336504e35d1.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/c23\/b52\/124\/c23b52124962b6b415e8489e8ccc1b6b.jpg\" alt=\"\" title=\"\" width=\"565\" height=\"442\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c23\/b52\/124\/c23b52124962b6b415e8489e8ccc1b6b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e FortiGate IPsec \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435:<\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a98\/276\/a22\/a98276a22a4216789450714149586a5b.jpg\" alt=\"\" title=\"\" width=\"487\" height=\"528\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a98\/276\/a22\/a98276a22a4216789450714149586a5b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>\n<p>\u0412 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0437\u0430 FortiGate \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 tunnel3:\u00a0<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/347\/1b5\/f61\/3471b5f614e04032814fb31cc62793d0.JPG\" alt=\"\" title=\"\" width=\"748\" height=\"229\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u041d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443 \u043d\u0430\u0441 \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0445\u0435\u043c, \u2014 VPN S2S: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/6ae\/2dc\/d22\/6ae2dcd22bbd7ace5593edbd3da1c760.jpg\" alt=\"\" title=\"\" width=\"728\" height=\"186\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/6ae\/2dc\/d22\/6ae2dcd22bbd7ace5593edbd3da1c760.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN \u043f\u043e\u0432\u0435\u0440\u0438\u043c \u0441\u0442\u0430\u0442\u0443\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044f:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ce8\/2d9\/ea2\/ce82d9ea2624af7331e368a955c5183f.jpg\" alt=\"\" title=\"\" width=\"967\" height=\"178\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ce8\/2d9\/ea2\/ce82d9ea2624af7331e368a955c5183f.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c ping \u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ed5\/17b\/0b9\/ed517b0b93714617f321fd698597cb07.jpg\" alt=\"\" title=\"\" width=\"743\" height=\"318\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ed5\/17b\/0b9\/ed517b0b93714617f321fd698597cb07.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0421\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b FortiGate \u0442\u0430\u043a \u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u0435\u043c ping \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0441 \u0430\u0434\u0440\u0435\u0441\u043e\u043c 172.21.10.100:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/7f4\/796\/76a\/7f479676a888de5e5ab690b413a11d0d.jpg\" alt=\"\" title=\"\" width=\"571\" height=\"236\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/7f4\/796\/76a\/7f479676a888de5e5ab690b413a11d0d.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 NSX Edge  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/8bc\/93a\/d86\/8bc93ad8604ba3d5958f5173b615accb.jpg\" width=\"1256\" height=\"480\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/8bc\/93a\/d86\/8bc93ad8604ba3d5958f5173b615accb.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 NSX Edge: 192.168.1.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NSX Edge: 178.20.233.46.\u00a0<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 NSX Edge  <\/h3>\n<ol>\n<li>\n<p>\u0418\u0434\u0435\u043c \u0432 vCloud Director \u2014 Networking \u2014 EDGE \u2014 Services \u2014 VPN \u2014 IPsec VPN Sites. \u0412\u043e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 (\u0434\u0430\u0432\u0430\u043b\u0438 \u0432 \u043d\u0430\u0448\u0435\u0439 <a href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/454004\/\"><u>\u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435<\/u><\/a>):   <\/p>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<th>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<td>\n<p align=\"left\"><strong>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"left\"><strong>\u0417\u043d\u0430\u0447\u0435\u043d\u0438\u0435<\/strong><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Enabled<\/p>\n<\/td>\n<td>\n<p align=\"left\">True<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">PFS<\/p>\n<\/td>\n<td>\n<p align=\"left\">False<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Local ID \u0438 Local Endpoint<\/p>\n<\/td>\n<td>\n<p align=\"left\">178.20.233.46<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Local Subnets<\/p>\n<\/td>\n<td>\n<p align=\"left\">192.168.1.0\/24<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Peer ID \u0438 Peer Endpoint<\/p>\n<\/td>\n<td>\n<p align=\"left\">91.107.67.230<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Peer Subnets<\/p>\n<\/td>\n<td>\n<p align=\"left\">172.21.10.0\/24<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Encryption Algorithm<\/p>\n<\/td>\n<td>\n<p align=\"left\">AES256<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Authentication<\/p>\n<\/td>\n<td>\n<p align=\"left\">PSK<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Pre-Shared Key<\/p>\n<\/td>\n<td>\n<p align=\"left\">**********<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Diffie-Hellman Group<\/p>\n<\/td>\n<td>\n<p align=\"left\">DH14<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Digest Algorithm<\/p>\n<\/td>\n<td>\n<p align=\"left\">SHA-256<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">IKE Option<\/p>\n<\/td>\n<td>\n<p align=\"left\">IKEv1<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Session Type<\/p>\n<\/td>\n<td>\n<p align=\"left\">Policy Based Session<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/67a\/c4b\/1b4\/67ac4b1b400f0583293fee5ae5ebb4c6.jpg\" alt=\"\" title=\"\" width=\"587\" height=\"258\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/67a\/c4b\/1b4\/67ac4b1b400f0583293fee5ae5ebb4c6.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/fb0\/f35\/307\/fb0f3530797393fb5a01f6ea352b2035.jpg\" alt=\"\" title=\"\" width=\"532\" height=\"502\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/fb0\/f35\/307\/fb0f3530797393fb5a01f6ea352b2035.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/386\/d4a\/ea6\/386d4aea6d02fedda44a0d5fb079e681.jpg\" alt=\"\" title=\"\" width=\"531\" height=\"457\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/386\/d4a\/ea6\/386d4aea6d02fedda44a0d5fb079e681.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/b4b\/aed\/046\/b4baed046002cb09fba779a29e74d4b4.jpg\" alt=\"\" title=\"\" width=\"560\" height=\"601\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b4b\/aed\/046\/b4baed046002cb09fba779a29e74d4b4.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/614\/de8\/21c\/614de821c96d701056b5da9eacc5faa3.jpg\" alt=\"\" title=\"\" width=\"842\" height=\"207\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/614\/de8\/21c\/614de821c96d701056b5da9eacc5faa3.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/276\/262\/488\/27626248873d48475a020ac71f81d064.jpg\" alt=\"\" title=\"\" width=\"567\" height=\"123\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/276\/262\/488\/27626248873d48475a020ac71f81d064.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 NSX Edge \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0432 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 CheckPoint, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043c\u0438\u043d\u0433\u043e\u0432 \u0444\u0430\u0437 IPsec. \u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u0448\u0438\u0442\u044b \u0432 NSX Edge \u0438 \u043d\u0435 \u043f\u043e\u0434\u043b\u0435\u0436\u0430\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e.<\/p>\n<p>\u0418\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:<\/p>\n<p>ikelifetime = 28800s,\u00a0<\/p>\n<p>type = tunnel,\u00a0<\/p>\n<p>lifetime = 3600s,\u00a0<\/p>\n<p>dpddelay = 30,\u00a0<\/p>\n<p>dpdaction = restart. <\/p>\n<ol>\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/29e\/b06\/284\/29eb06284d2aba68b86ea293d77ae848.jpg\" alt=\"\" title=\"\" width=\"563\" height=\"352\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/29e\/b06\/284\/29eb06284d2aba68b86ea293d77ae848.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/90b\/6cb\/e5e\/90b6cbe5e73402f82e8142022f246ad5.jpg\" alt=\"\" title=\"\" width=\"562\" height=\"577\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/90b\/6cb\/e5e\/90b6cbe5e73402f82e8142022f246ad5.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/338\/295\/cbe\/338295cbe53596cd8d71eea6385839a9.jpg\" alt=\"\" title=\"\" width=\"566\" height=\"448\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/338\/295\/cbe\/338295cbe53596cd8d71eea6385839a9.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u044b\u0431\u0440\u0430\u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN, \u0443\u043a\u0430\u0437\u0430\u0432 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NSX Edge, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435) \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN: IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c. \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u0438 NSX Edge, \u0442\u0440\u0430\u0444\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u043b\u0436\u0435\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u043c:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f91\/481\/a31\/f91481a311a6ad58a0000de06b168e13.jpg\" alt=\"\" title=\"\" width=\"637\" height=\"561\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f91\/481\/a31\/f91481a311a6ad58a0000de06b168e13.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u041f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044e \u0441 CheckPoint:   <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/733\/c49\/627\/733c49627176cea08e3571b09ee56869.jpg\" alt=\"\" title=\"\" width=\"672\" height=\"188\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/733\/c49\/627\/733c49627176cea08e3571b09ee56869.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u041d\u0443 \u0438 \u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0437\u0430 NSX Edge: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/445\/2ab\/41f\/4452ab41fb386783deaf72d18e50d074.jpg\" alt=\"\" title=\"\" width=\"780\" height=\"248\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/445\/2ab\/41f\/4452ab41fb386783deaf72d18e50d074.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u044f. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0437\u0435\u043b\u0435\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/d30\/0a9\/f3b\/d300a9f3b17f4f9fa69534a3f9375f8a.jpg\" alt=\"\" title=\"\" width=\"1030\" height=\"260\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/d30\/0a9\/f3b\/d300a9f3b17f4f9fa69534a3f9375f8a.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN \u0441\u043c\u043e\u0442\u0440\u0438\u043c: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/86b\/0ad\/ba1\/86b0adba14e3ae141dcb0d5f175f4ba5.jpg\" alt=\"\" title=\"\" width=\"987\" height=\"175\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/86b\/0ad\/ba1\/86b0adba14e3ae141dcb0d5f175f4ba5.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 MikroTik  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/598\/a06\/803\/598a06803a395b504e2cd71f27d9134a.jpg\" width=\"1576\" height=\"582\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/598\/a06\/803\/598a06803a395b504e2cd71f27d9134a.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 MikroTik: 192.168.21.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 MikroTik: 91.107.67.229.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 MikroTik<\/h3>\n<ol>\n<li>\n<p>IP \u2014 Addresses \u2014 \u0417\u0430\u0434\u0430\u0435\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044e:\u00a0<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>ether1 \u2014 WAN-\u043f\u043e\u0440\u0442,\u00a0<\/p>\n<\/li>\n<li>\n<p>bridge1 \u2014 LAN:<\/p>\n<\/li>\n<\/ul>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/17b\/4e8\/8f4\/17b4e88f4396b546a5d211b66663c1ee.jpg\" alt=\"\" title=\"\" width=\"357\" height=\"232\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/17b\/4e8\/8f4\/17b4e88f4396b546a5d211b66663c1ee.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0432 Interfaces \u2014 IP Tunnel, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 MikroTik \u0438 UserGate \u0432 Local \u0438 Remote Address \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/2bf\/5a0\/78a\/2bf5a078a7abc4c565c06791781c65e0.jpg\" alt=\"\" title=\"\" width=\"502\" height=\"451\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/2bf\/5a0\/78a\/2bf5a078a7abc4c565c06791781c65e0.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 IPsec. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 peer \u0432 IP \u2014 IPsec \u2014 Peer:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ddb\/d5e\/1d0\/ddbd5e1d0549e4f7caa6fb5c4b8e4907.jpg\" alt=\"\" title=\"\" width=\"607\" height=\"377\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ddb\/d5e\/1d0\/ddbd5e1d0549e4f7caa6fb5c4b8e4907.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u041f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c PSK-\u043a\u043b\u044e\u0447 \u0432 IP \u2014 IPsec \u2014 Identities: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f8d\/1b9\/a82\/f8d1b9a828859d917111eafd9a290cf4.jpg\" alt=\"\" title=\"\" width=\"608\" height=\"452\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f8d\/1b9\/a82\/f8d1b9a828859d917111eafd9a290cf4.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Profile \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437\u044b 1 \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0432 default-\u043f\u0440\u043e\u0444\u0438\u043b\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/fa6\/b6a\/211\/fa6b6a211a8342772f00f7ee585e0ec9.jpg\" alt=\"\" title=\"\" width=\"418\" height=\"592\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/fa6\/b6a\/211\/fa6b6a211a8342772f00f7ee585e0ec9.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"6\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Proposals \u043f\u043e\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437\u044b 2:   <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f3c\/28e\/0f5\/f3c28e0f5c52c273f3caf970e4d3a913.jpg\" alt=\"\" title=\"\" width=\"387\" height=\"467\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f3c\/28e\/0f5\/f3c28e0f5c52c273f3caf970e4d3a913.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"7\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Policies \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>Src.Adress=192.168.21.0\/24 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c MikroTik),<\/p>\n<\/li>\n<li>\n<p>Dst.Address=172.21.1 0.0\/24 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c UserGate).<\/p>\n<\/li>\n<\/ul>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/e0c\/e24\/08f\/e0ce2408fe382c91e1425772a0c4fb53.jpg\" alt=\"\" title=\"\" width=\"391\" height=\"306\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/e0c\/e24\/08f\/e0ce2408fe382c91e1425772a0c4fb53.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/b5a\/471\/8b2\/b5a4718b230cbcc06879dc7f0c3dc448.jpg\" alt=\"\" title=\"\" width=\"391\" height=\"306\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/b5a\/471\/8b2\/b5a4718b230cbcc06879dc7f0c3dc448.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"8\">\n<li>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c IP \u2014 Firewall \u2014 Filter Rules, \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0430\u0432\u0438\u043b.\u00a0<\/p>\n<p>\u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438:<\/p>\n<ul>\n<li>\n<p>Src.Address=172.21.10.0\/24,<\/p>\n<\/li>\n<li>\n<p>Dst.Address=192.168.21.0\/24,\u00a0<\/p>\n<\/li>\n<li>\n<p>Chain=forward Action=accept.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ecc\/81d\/3b7\/ecc81d3b711dbefb4df68cdacccc2aaa.jpg\" alt=\"\" title=\"\" width=\"618\" height=\"280\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ecc\/81d\/3b7\/ecc81d3b711dbefb4df68cdacccc2aaa.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/5c1\/8f2\/65c\/5c18f265c04c7685550a008ea6d24a1c.jpg\" alt=\"\" title=\"\" width=\"620\" height=\"278\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/5c1\/8f2\/65c\/5c18f265c04c7685550a008ea6d24a1c.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"9\">\n<li>\n<p>\u0414\u043b\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f IPsec \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u043f\u043e\u0440\u0442\u044b UDP 500, 4500 \u0438 ipsec-esp \u043d\u0430 WAN-\u043f\u043e\u0440\u0442\u0435:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/38b\/c5c\/527\/38bc5c52724fec9295442fda1ffe8f06.jpg\" alt=\"\" title=\"\" width=\"617\" height=\"277\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/38b\/c5c\/527\/38bc5c52724fec9295442fda1ffe8f06.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/3e5\/e53\/92c\/3e5e5392c91c352e616805ef924367f5.jpg\" alt=\"\" title=\"\" width=\"622\" height=\"268\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/3e5\/e53\/92c\/3e5e5392c91c352e616805ef924367f5.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/fe2\/756\/3b5\/fe27563b521e0a8b80ec29f5d0dfdf62.jpg\" alt=\"\" title=\"\" width=\"622\" height=\"275\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/fe2\/756\/3b5\/fe27563b521e0a8b80ec29f5d0dfdf62.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/c0b\/9e9\/e27\/c0b9e9e270fa69993e485f4e30118f2a.jpg\" alt=\"\" title=\"\" width=\"617\" height=\"273\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/c0b\/9e9\/e27\/c0b9e9e270fa69993e485f4e30118f2a.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/7d2\/9b1\/9bb\/7d29b19bb0d58cc5675a581d2e493eb1.jpg\" alt=\"\" title=\"\" width=\"677\" height=\"147\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/7d2\/9b1\/9bb\/7d29b19bb0d58cc5675a581d2e493eb1.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"10\">\n<li>\n<p>\u0412 IP \u2014 Firewall \u2014 Raw \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0440\u0435\u0440\u043e\u0443\u0442\u0438\u043d\u0433\u0430:\u00a0<\/p>\n<\/li>\n<\/ol>\n<p>Src.Address=172.21.10.0\/24.\u00a0<\/p>\n<p>Dst.Address=192.168.21.0\/24.\u00a0<\/p>\n<p>Chain=prerouting.\u00a0<\/p>\n<p>Action=accept. <\/p>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/563\/eb3\/04e\/563eb304e817abe2027c102fe77c262e.jpg\" alt=\"\" title=\"\" width=\"387\" height=\"336\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/563\/eb3\/04e\/563eb304e817abe2027c102fe77c262e.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/05d\/947\/8a6\/05d9478a6df58ecfa67334139b984c0f.jpg\" alt=\"\" title=\"\" width=\"385\" height=\"267\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/05d\/947\/8a6\/05d9478a6df58ecfa67334139b984c0f.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/fba\/70d\/8ed\/fba70d8edaf623d2ca60b257db406add.jpg\" alt=\"\" title=\"\" width=\"532\" height=\"145\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/fba\/70d\/8ed\/fba70d8edaf623d2ca60b257db406add.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"11\">\n<li>\n<p>\u0412 IP \u2014 Firewall \u2014 NAT \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u0442\u0440\u0430\u0444\u0438\u043a\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 MikroTik \u043d\u0435 \u043d\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 UserGate:<\/p>\n<\/li>\n<\/ol>\n<p>Src.Address=192.168.21.0\/24.\u00a0<\/p>\n<p>Dst.Address=172.21.10.0\/24.\u00a0<\/p>\n<p>Chain=forward.\u00a0<\/p>\n<p>Action=accept. <\/p>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/18b\/579\/d74\/18b579d74f15a71de2e6f53a3fe531e8.jpg\" alt=\"\" title=\"\" width=\"493\" height=\"270\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/18b\/579\/d74\/18b579d74f15a71de2e6f53a3fe531e8.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/593\/5d1\/16c\/5935d116c4fe43981f5a96fa37ff2823.jpg\" alt=\"\" title=\"\" width=\"491\" height=\"276\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/593\/5d1\/16c\/5935d116c4fe43981f5a96fa37ff2823.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/9cd\/f1f\/46a\/9cdf1f46a32c0e93ca1d272eec04d306.jpg\" alt=\"\" title=\"\" width=\"527\" height=\"121\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/9cd\/f1f\/46a\/9cdf1f46a32c0e93ca1d272eec04d306.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"12\">\n<li>\n<p>\u00a0\u0414\u0430\u043b\u0435\u0435 \u0432 IP \u2014 Routes \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c UserGate \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441:   <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/9b3\/1a2\/9cb\/9b31a29cbde67d7b6a1a753fa3fec548.jpg\" alt=\"\" title=\"\" width=\"722\" height=\"351\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/9b3\/1a2\/9cb\/9b31a29cbde67d7b6a1a753fa3fec548.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 MikroTik \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<ol>\n<li>\n<p>\u0412 \u0421\u0435\u0442\u044c \u2014 \u0417\u043e\u043d\u044b \u043d\u0430 \u0437\u043e\u043d\u0435 Untrusted \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c VPN-\u0441\u0435\u0440\u0432\u0438\u0441:   <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a04\/ecf\/a75\/a04ecfa7518244f983a17f811cd252a4.jpg\" alt=\"\" title=\"\" width=\"697\" height=\"597\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a04\/ecf\/a75\/a04ecfa7518244f983a17f811cd252a4.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 UserGate \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/5a4\/d13\/a6e\/5a4d13a6e2f4acd534413b31f01664db.jpg\" alt=\"\" title=\"\" width=\"870\" height=\"486\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/5a4\/d13\/a6e\/5a4d13a6e2f4acd534413b31f01664db.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0412 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c MikroTik S2S:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/09a\/4f2\/f34\/09a4f2f345987ac5b5b4f0accbd7f5e5.jpg\" alt=\"\" title=\"\" width=\"712\" height=\"688\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/09a\/4f2\/f34\/09a4f2f345987ac5b5b4f0accbd7f5e5.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/4c5\/c2b\/fb8\/4c5c2bfb8f9c3897c48b699f8d7577ad.jpg\" alt=\"\" title=\"\" width=\"572\" height=\"587\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/4c5\/c2b\/fb8\/4c5c2bfb8f9c3897c48b699f8d7577ad.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/167\/103\/0cc\/1671030cc3d2515303a89fae6c75472f.JPG\" alt=\"\" title=\"\" width=\"570\" height=\"441\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0412 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e MikroTik IPsec.\u00a0\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435: \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441=tunnel2, \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430=\u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0430\u0434\u0440\u0435\u0441 MikroTik, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN=IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0438 \u043d\u0430\u0448\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0442\u0438:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/da5\/ae8\/5a1\/da5ae85a178470654f9843a395c39eda.jpg\" alt=\"\" title=\"\" width=\"622\" height=\"643\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/da5\/ae8\/5a1\/da5ae85a178470654f9843a395c39eda.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d, \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 Trusted \u0438 VPN for Site-to-Site \u0437\u043e\u043d\u0430\u043c\u0438:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/bae\/f90\/d7e\/baef90d7ef8f1e5e7eff2edd6f188f5b.jpg\" alt=\"\" title=\"\" width=\"980\" height=\"190\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/bae\/f90\/d7e\/baef90d7ef8f1e5e7eff2edd6f188f5b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0421\u0435\u0442\u044c \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u2014 \u0421\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c Mikrotik \u0447\u0435\u0440\u0435\u0437 tunnel2: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/238\/74d\/e5c\/23874de5c87220d6679579bbd9662b33.jpg\" alt=\"\" title=\"\" width=\"985\" height=\"637\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/238\/74d\/e5c\/23874de5c87220d6679579bbd9662b33.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043c\u043e\u0436\u043d\u043e \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u043c ping \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Trusted-\u0437\u043e\u043d\u044b \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 MikroTik:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/374\/a62\/f5d\/374a62f5d942c918122fb6b8e698b191.jpg\" alt=\"\" title=\"\" width=\"1062\" height=\"343\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/374\/a62\/f5d\/374a62f5d942c918122fb6b8e698b191.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0422\u0430\u043a \u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u0435\u043c ping \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 Mikrotik \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 UserGate:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/d5c\/a78\/206\/d5ca782064e9791716f2837d21a4d7bc.jpg\" alt=\"\" title=\"\" width=\"522\" height=\"427\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/d5c\/a78\/206\/d5ca782064e9791716f2837d21a4d7bc.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 Cisco ASR1002-X  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/0a5\/fb6\/0d3\/0a5fb60d330fa331a40137229c11d62b.jpg\" width=\"1007\" height=\"468\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/0a5\/fb6\/0d3\/0a5fb60d330fa331a40137229c11d62b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 tunnel4: 172.21.10.254\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 Cisco: 172.22.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Cisco: 91.107.67.229.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 Cisco  <\/h3>\n<ol>\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b 1-\u0439 \u0444\u0430\u0437\u044b:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>crypto isakmp policy 235,<\/p>\n<\/li>\n<li>\n<p>encr aes,<\/p>\n<\/li>\n<li>\n<p>authentication pre-share,<\/p>\n<\/li>\n<li>\n<p>group 14.<\/p>\n<\/li>\n<\/ul>\n<ol start=\"2\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c pre-shared key:  <\/p>\n<p>crypto isakmp key &lt;PSK \u043a\u043b\u044e\u0447> address 91.107.67.230.<\/p>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b 2-\u0439 \u0444\u0430\u0437\u044b:<\/p>\n<p>crypto ipsec transform-set UserGate_TEST esp-aes 256 esp-sha256-hmac<\/p>\n<p>mode tunnel.<\/p>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0444\u0438\u043b\u044c\u0442\u0440 \u0434\u043b\u044f \u0441\u0435\u0442\u0435\u0439, \u043c\u0435\u0436\u0434\u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u043c\u0438 \u0431\u0443\u0434\u0435\u0442 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0442\u0440\u0430\u0444\u0438\u043a (src\/dst):<\/p>\n<p>ip access-list extended UserGate_TEST<\/p>\n<p>permit ip 172.22.10.0 0.0.0.255 172.21.10.0 0.0.0.255.<\/p>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0430\u043c\u0443 \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u0430\u0440\u0442\u0443, \u043a\u043e\u0442\u043e\u0440\u0443\u044e \u0431\u0443\u0434\u0435\u043c \u0432\u0435\u0448\u0430\u0442\u044c \u043d\u0430 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441:<\/p>\n<p>crypto map IPSEC 100 ipsec-isakmp<\/p>\n<p>description UserGate_TEST<\/p>\n<p>set peer 91.107.67.230<\/p>\n<p>set transform-set UserGate_TEST<\/p>\n<p>match address UserGate_TEST.<\/p>\n<\/li>\n<li>\n<p>\u042d\u043c\u0443\u043b\u044f\u0446\u0438\u044f \u0432\u043d\u0443\u0442\u0440\u0435\u043d\u043d\u0435\u0439 \u0441\u0435\u0442\u0438:<\/p>\n<p>interface Port-channel1.3970<\/p>\n<p>description UserGate_TEST<\/p>\n<p>encapsulation dot1Q 3970<\/p>\n<p>ip address 172.22.10.1 255.255.255.0.<\/p>\n<\/li>\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0434\u043e \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0437\u0430 \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u043c UserGate:<\/p>\n<p>ip route 172.21.10.0 255.255.255.0 91.107.67.225.<\/p>\n<\/li>\n<li>\n<p>\u0412\u0435\u0448\u0430\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u0443\u044e \u043a\u0440\u0438\u043f\u0442\u043e\u043a\u0430\u0440\u0442\u0443 \u043d\u0430 \u0438\u0441\u0445\u043e\u0434\u044f\u0449\u0438\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441:<\/p>\n<p>interface Port-channel1.100<\/p>\n<p>crypto map IPSEC.<\/p>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 Cisco \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430. <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate<\/h3>\n<ol>\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2013 \u0417\u043e\u043d\u044b \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u043c VPN \u043d\u0430 \u0437\u043e\u043d\u0435 Untrusted:<\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/4eb\/ebd\/b68\/4ebebdb68e51faaa8da5a1cb6fb71e38.jpg\" alt=\"\" title=\"\" width=\"698\" height=\"598\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/4eb\/ebd\/b68\/4ebebdb68e51faaa8da5a1cb6fb71e38.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2013 \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 tunnel4 \u0438 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044e \u0438\u0437 \u043f\u0443\u043b\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0441 \u0430\u0434\u0440\u0435\u0441\u043e\u043c 172.21.10.254:<\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f8a\/3b5\/2e4\/f8a3b52e47d1685b17f20c0d8242a285.jpg\" alt=\"\" title=\"\" width=\"177\" height=\"223\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f8a\/3b5\/2e4\/f8a3b52e47d1685b17f20c0d8242a285.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/df1\/159\/1ca\/df11591ca5ea7eb29ee5231c88b7257b.jpg\" alt=\"\" title=\"\" width=\"493\" height=\"281\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/df1\/159\/1ca\/df11591ca5ea7eb29ee5231c88b7257b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/829\/2ae\/cd4\/8292aecd48ba425b290e9e3b9571659a.jpg\" alt=\"\" title=\"\" width=\"502\" height=\"282\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/829\/2ae\/cd4\/8292aecd48ba425b290e9e3b9571659a.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/670\/b78\/4fa\/670b784fa40e4513a0234a69da68b639.jpg\" alt=\"\" title=\"\" width=\"852\" height=\"392\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/670\/b78\/4fa\/670b784fa40e4513a0234a69da68b639.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2013 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN<strong> <\/strong>\u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>IKEv1, main mode,<\/p>\n<\/li>\n<li>\n<p>PSK auth,<\/p>\n<\/li>\n<li>\n<p>Phase1,<\/p>\n<\/li>\n<li>\n<p>\u0433\u0440\u0443\u043f\u043f\u0430 Diffie-Hellman 14,<\/p>\n<\/li>\n<li>\n<p>\u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u044e\u0447\u0430 \u2014 24 \u0447\u0430\u0441\u0430,<\/p>\n<\/li>\n<li>\n<p>DPD 120 \u0441\u0435\u043a, 5 \u043f\u043e\u043f\u044b\u0442\u043e\u043a,<\/p>\n<\/li>\n<li>\n<p>sha256-aes256,<\/p>\n<\/li>\n<li>\n<p>Phase2,<\/p>\n<\/li>\n<li>\n<p>\u0432\u0440\u0435\u043c\u044f \u0436\u0438\u0437\u043d\u0438 \u043a\u043b\u044e\u0447\u0430 \u2014 1 \u0447\u0430\u0441, no volume limit,<\/p>\n<\/li>\n<li>\n<p>sha256-aes256.<\/p>\n<\/li>\n<\/ul>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/1d3\/d85\/011\/1d3d8501130a11d9c8e06be8dc6c087a.jpg\" alt=\"\" title=\"\" width=\"572\" height=\"337\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/1d3\/d85\/011\/1d3d8501130a11d9c8e06be8dc6c087a.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/552\/3aa\/da0\/5523aada0df811280c48b2586059cd0d.jpg\" alt=\"\" title=\"\" width=\"567\" height=\"585\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/552\/3aa\/da0\/5523aada0df811280c48b2586059cd0d.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/f6c\/2e1\/d8a\/f6c2e1d8abafbc3998f3b37c913e2131.jpg\" alt=\"\" title=\"\" width=\"571\" height=\"338\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/f6c\/2e1\/d8a\/f6c2e1d8abafbc3998f3b37c913e2131.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e CISCO IPsec, \u0432\u044b\u0431\u0440\u0430\u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435, \u0443\u043a\u0430\u0437\u0430\u0432 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Cisco) \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN \u2014 IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c.  <\/p>\n<\/li>\n<li>\n<p>\u041e\u0431\u043e\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435) \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u0438 Cisco:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/7e2\/14e\/e1a\/7e214ee1a483ee8d88cc1ea4ecfb1231.jpg\" alt=\"\" title=\"\" width=\"487\" height=\"527\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/7e2\/14e\/e1a\/7e214ee1a483ee8d88cc1ea4ecfb1231.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/a58\/ce2\/a96\/a58ce2a96968af586b61c7f72024617c.jpg\" alt=\"\" title=\"\" width=\"940\" height=\"196\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/a58\/ce2\/a96\/a58ce2a96968af586b61c7f72024617c.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0421\u0435\u0442\u044c \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e<strong> <\/strong>\u043f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u043a \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco \u0447\u0435\u0440\u0435\u0437 tunnel4<strong>:<\/strong><\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/829\/0af\/ec8\/8290afec874502e9c575412b19cc923b.jpg\" alt=\"\" title=\"\" width=\"955\" height=\"297\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/829\/0af\/ec8\/8290afec874502e9c575412b19cc923b.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u041d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c Trusted \u0438 VPN S2S \u0437\u043e\u043d:  <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/ec4\/f3f\/674\/ec4f3f674243563d3a8b204e5bbab5ae.jpg\" alt=\"\" title=\"\" width=\"1005\" height=\"192\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/ec4\/f3f\/674\/ec4f3f674243563d3a8b204e5bbab5ae.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0422\u0435\u043f\u0435\u0440\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u044c \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u041e\u0442\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c icmp \u0441 Trusted-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 Cisco: <\/p>\n<figure class=\"full-width\"><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/habrastorage.org\/r\/w780q1\/getpro\/habr\/upload_files\/e1c\/38a\/aa0\/e1c38aaa0d901317cc05a823d3cf133f.jpg\" alt=\"\" title=\"\" width=\"977\" height=\"336\" data-src=\"https:\/\/habrastorage.org\/getpro\/habr\/upload_files\/e1c\/38a\/aa0\/e1c38aaa0d901317cc05a823d3cf133f.jpg\" data-blurred=\"true\"\/><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<p>\u041d\u0430 \u044d\u0442\u043e\u043c \u0432\u0441\u0435.<\/p>\n<p>\u041c\u043d\u043e\u0433\u0438\u0435 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0435 \u043c\u043e\u0433\u0443\u0442 \u0438\u043b\u0438 \u043d\u0435 \u0445\u043e\u0442\u044f\u0442 \u0432\u043e\u0437\u0438\u0442\u044c\u0441\u044f \u0441 FW, \u0431\u0435\u0440\u0443\u0442 \u0443 \u043d\u0430\u0441 UG \u0432 \u043e\u0431\u043b\u0430\u043a\u0435 \u043a\u0430\u043a \u0441\u0435\u0440\u0432\u0438\u0441. \u0422\u0430\u043a\u0436\u0435 \u0431\u044b\u0432\u0430\u044e\u0442 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438, \u043a\u043e\u0433\u0434\u0430 \u0437\u0430\u043a\u0430\u0437\u0447\u0438\u043a\u0443 \u043d\u0443\u0436\u043d\u0430 \u043f\u043e\u043c\u043e\u0449\u044c \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 \u0444\u0430\u0435\u0440\u0432\u043e\u043b\u0430 \u043d\u0430 \u0435\u0433\u043e \u043f\u043b\u043e\u0449\u0430\u0434\u043a\u0435. \u0412 \u044d\u0442\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043c\u044b \u0442\u043e\u0436\u0435 \u0433\u043e\u0442\u043e\u0432\u044b \u043e\u043a\u0430\u0437\u0430\u0442\u044c \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443.<\/p>\n<p>\u0412 \u0437\u0430\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0441\u043a\u0430\u0436\u0435\u043c, \u0447\u0442\u043e UserGate \u0432\u043f\u043e\u043b\u043d\u0435 \u0445\u043e\u0440\u043e\u0448, \u043d\u0443\u0436\u043d\u043e \u043f\u0440\u043e\u0441\u0442\u043e \u0443\u043c\u0435\u0442\u044c \u0435\u0433\u043e \u0433\u043e\u0442\u043e\u0432\u0438\u0442\u044c. \u041f\u0440\u043e\u0431\u0443\u0439\u0442\u0435, \u0434\u0435\u0440\u0437\u0430\u0439\u0442\u0435, \u0435\u0441\u043b\u0438 \u0447\u0442\u043e \u2014 \u043f\u0438\u0448\u0438\u0442\u0435, \u043f\u043e\u0434\u0441\u043a\u0430\u0436\u0435\u043c.<\/p>\n<\/p>\n<\/div>\n<\/div>\n<\/div>\n<div class=\"v-portal\" style=\"display:none;\"><\/div>\n<\/div>\n<p> <!----> <!----><br \/> \u0441\u0441\u044b\u043b\u043a\u0430 \u043d\u0430 \u043e\u0440\u0438\u0433\u0438\u043d\u0430\u043b \u0441\u0442\u0430\u0442\u044c\u0438 <a href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/685940\/\"> https:\/\/habr.com\/ru\/company\/dataline\/blog\/685940\/<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<div><\/div>\n<div id=\"post-content-body\">\n<div>\n<div class=\"article-formatted-body article-formatted-body article-formatted-body_version-2\">\n<div xmlns=\"http:\/\/www.w3.org\/1999\/xhtml\">\n<p>\u0412 \u043e\u0434\u043d\u043e\u0439 \u0438\u0437 \u043f\u0440\u043e\u0448\u043b\u044b\u0445 <a href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/658377\/\"><u>\u0441\u0442\u0430\u0442\u0435\u0439<\/u><\/a> \u043c\u044b \u0438\u0441\u043a\u0430\u043b\u0438 \u0432\u044b\u0445\u043e\u0434 \u0438\u0437 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u0438 \u0441 \u0443\u0445\u043e\u0434\u043e\u043c \u0432\u0435\u043d\u0434\u043e\u0440\u043e\u0432 NGFW \u0438\u0437 \u0420\u043e\u0441\u0441\u0438\u0438 \u0438 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u043b\u0438 \u0441\u0445\u0435\u043c\u044b \u0431\u0435\u0437\u0431\u043e\u043b\u0435\u0437\u043d\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 UserGate. \u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0437\u0430 \u044d\u0442\u043e \u0432\u0440\u0435\u043c\u044f \u043e\u0441\u043e\u0431\u043e \u043d\u0435 \u0438\u0437\u043c\u0435\u043d\u0438\u043b\u0430\u0441\u044c. \u0421\u0442\u0430\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u0441 \u0437\u0430\u0434\u0430\u0447\u0435\u0439 \u0437\u0430\u043c\u0435\u043d\u0438\u0442\u044c \u0437\u0430\u0440\u0443\u0431\u0435\u0436\u043d\u044b\u0439 \u0444\u0430\u0435\u0440\u0432\u043e\u043b \u0438\u043b\u0438 \u043f\u0440\u043e\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439, \u043d\u0430 \u044d\u0442\u043e\u043c \u0444\u043e\u043d\u0435 \u043f\u043e\u044f\u0432\u0438\u043b\u0438\u0441\u044c \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b \u0441\u0442\u044b\u043a\u043e\u0432\u043a\u0438 \u0441 UG.\u00a0\u00a0<\/p>\n<p>\u0412 \u043f\u0440\u043e\u0444\u0438\u043b\u044c\u043d\u044b\u0445 \u0447\u0430\u0442\u0430\u0445 \u0442\u043e \u0438 \u0434\u0435\u043b\u043e \u0441\u043f\u0440\u0430\u0448\u0438\u0432\u0430\u044e\u0442 \u043f\u0440\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 IPsec \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 FortiGate, \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 CheckPoint. \u041f\u0440\u0438\u0433\u043e\u0442\u043e\u0432\u0438\u043b\u0438 \u0434\u043b\u044f \u0432\u0430\u0441 \u0433\u043e\u0440\u044f\u0447\u0438\u0435 \u043f\u0438\u0440\u043e\u0436\u043a\u0438 \u2014 \u043f\u043e\u043b\u043d\u043e\u0446\u0435\u043d\u043d\u044b\u0435 \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u0438 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 VPN-\u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439 \u043c\u0435\u0436\u0434\u0443 UserGate \u0438 CheckPoint, FortiGate, NSX Edge, MikroTik \u0438 Cisco. \u0413\u0440\u0430\u0431\u043b\u0435\u0439 \u043c\u044b \u043f\u043e\u0441\u043e\u0431\u0438\u0440\u0430\u043b\u0438 \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u0438 \u0442\u0435\u043f\u0435\u0440\u044c \u0433\u043e\u0442\u043e\u0432\u044b \u043f\u043e\u0434\u0435\u043b\u0438\u0442\u044c\u0441\u044f \u043e\u043f\u044b\u0442\u043e\u043c \u0441 \u0442\u0435\u043c\u0438, \u043a\u0442\u043e \u0442\u043e\u043b\u044c\u043a\u043e \u043d\u0430\u0447\u0438\u043d\u0430\u0435\u0442 \u0440\u0430\u0437\u0431\u0438\u0440\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044f\u0445 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 IPsec.<\/p>\n<p>\u041d\u0430\u0447\u043d\u0435\u043c \u043f\u043e \u043f\u043e\u0440\u044f\u0434\u043a\u0443.<\/p>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 CheckPoint<\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:   <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 CheckPoint: 10.10.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 CheckPoint: 91.107.67.228.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 CheckPoint  <\/h3>\n<ol>\n<li>\n<p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0441\u0435\u0442\u0435\u0432\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0410\u043a\u0442\u0438\u0432\u0438\u0440\u0443\u0435\u043c \u0431\u043b\u0435\u0439\u0434 IPsec VPN:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0412\u044b\u0431\u0438\u0440\u0430\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0430\u0434\u0440\u0435\u0441 \u0434\u043b\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f IPsec \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 IPsec VPN \u2014 Link Selection:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c VPN-\u0434\u043e\u043c\u0435\u043d \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 CheckPoint:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c Interoperable Device \u0441 \u0438\u043c\u0435\u043d\u0435\u043c UserGate:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0442\u043e\u043f\u043e\u043b\u043e\u0433\u0438\u044e \u043e\u0431\u044a\u0435\u043a\u0442\u043e\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0421\u0435\u0442\u0435\u0432\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 CheckPoint \u0438 UserGate \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0432 Meshed \u043a\u043e\u043c\u044c\u044e\u043d\u0438\u0442\u0438:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044f:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"9\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0434\u043b\u044f \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u0435\u0433\u043c\u0435\u043d\u0442\u043e\u0432:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 CheckPoint \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate<\/h3>\n<ol>\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0417\u043e\u043d\u044b \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e VPN \u0434\u043b\u044f Untrusted-\u0437\u043e\u043d\u044b:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0438\u043b\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 VPN for Site-to-Site:<\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u0414\u0430\u043d\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0438\u0440\u0443\u0435\u043c\u043e\u0439 \u0441\u0435\u0442\u0438:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN. \u0412 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043e\u0431\u0449\u0438\u0439 \u043a\u043b\u044e\u0447 (pre-shared key) \u0438 \u0432\u043e \u0432\u043a\u043b\u0430\u0434\u043a\u0435 \u0411\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c \u0437\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0424\u0430\u0437\u044b 1 \u0438 \u0424\u0430\u0437\u044b 2, \u0437\u0430\u0434\u0430\u043d\u043d\u044b\u0435 \u043d\u0430 CheckPoint:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u044b\u0431\u0440\u0430\u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN, \u0443\u043a\u0430\u0437\u0430\u0432 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 CheckPoint, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435) \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN: IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c. \u0414\u0430\u043b\u0435\u0435 \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u043d\u044b\u0435 \u043f\u043e\u0434\u0441\u0435\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u0438 CheckPoint:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"6\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0434\u0432\u0443\u0441\u0442\u043e\u0440\u043e\u043d\u043d\u0435\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u0443\u043a\u0430\u0437\u0430\u043d\u0438\u0435\u043c Trusted \u0438 VPN for Site-to-Site \u0437\u043e\u043d. \u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u0437\u043e\u043d\u0430\u043c\u0438 Trusted \u0438 S2S:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0412\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u043e CheckPoint IPsec. \u041f\u0440\u0438 \u0443\u0441\u043f\u0435\u0448\u043d\u043e\u043c \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0438 \u0441\u0442\u0430\u0442\u0443\u0441 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0437\u0435\u043b\u0435\u043d\u043e\u0433\u043e \u0446\u0432\u0435\u0442\u0430:\u00a0<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u044f\u0435\u043c \u0441\u0442\u0430\u0442\u0443\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 FortiGate<\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 tunnel3: 203.0.113.1\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 Fortigate: 10.10.1.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Fortigate: 91.107.67.228.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u043d\u0430 Fortigate c \u0438\u043c\u0435\u043d\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044f UserGate: 203.0.113.2\/24.\u00a0<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate  <\/h3>\n<ol>\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0447\u0435\u0440\u0435\u0437 Template type \u2014 Custom:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 Network \u2014 Interfaces \u043f\u0440\u0438\u0441\u0432\u0430\u0438\u0432\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 \u2014 203.0.113.2\/32, \u0412 \u043f\u043e\u043b\u0435 Remote IP\/Netmask \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 \u0430\u0434\u0440\u0435\u0441 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u2014 203.0.113.1\/24:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u043c\u0435\u0436\u0434\u0443 \u0441\u0435\u0442\u044f\u043c\u0438. \u041d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u044c\u044e \u0431\u0443\u0434\u0435\u0442 \u0432\u044b\u0441\u0442\u0443\u043f\u0430\u0442\u044c \u0430\u0434\u0440\u0435\u0441 loopback \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 \u0441 \u0434\u0432\u0443\u043c\u044f IP-\u0430\u0434\u0440\u0435\u0441\u0430\u043c\u0438: 172.21.10.1 \u0438 172.21.10.100:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0418 \u0432\u043e\u0442 \u0441\u0430\u043c\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u0441 \u0438\u043c\u0435\u043d\u0435\u043c FGT-UserGate. \u0410\u0434\u0440\u0435\u0441\u0430 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432:\u00a0<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>FGT-UserGate \u2014 Loopback Interface \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438.<\/p>\n<\/li>\n<li>\n<p>UserGate \u2014 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441.<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ul>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 FortiGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<ol>\n<li>\n<p>\u0412\u0441\u0435 \u043f\u043e\u0434\u0433\u043e\u0442\u043e\u0432\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u0441\u0445\u043e\u0436\u0438 \u0441\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0435\u043c UserGate \u2014 CheckPoint. \u041d\u0438\u0436\u0435 \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u043c \u0442\u043e\u043b\u044c\u043a\u043e \u043e\u0442\u043b\u0438\u0447\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0421\u0435\u0442\u044c \u2014 \u0418\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043d\u0430\u0437\u043d\u0430\u0447\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u043c\u0443 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0443 tunnel3 \u0441\u0432\u043e\u0431\u043e\u0434\u043d\u044b\u0439 IP-\u0430\u0434\u0440\u0435\u0441 \u0438\u0437 \u043d\u0435\u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u043c\u043e\u0433\u043e \u0434\u0438\u0430\u043f\u0430\u0437\u043e\u043d\u0430 203.0.113.1\/24:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 FortiGate S2S:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e FortiGate IPsec \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044f \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u043e\u0433\u043e \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435:<\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"4\">\n<li>\n<p>\u0412 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u0430\u0445 \u0432\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0437\u0430 FortiGate \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 tunnel3:\u00a0<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u041d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d, \u043a\u043e\u0442\u043e\u0440\u043e\u0435 \u0443 \u043d\u0430\u0441 \u0443\u0436\u0435 \u0431\u044b\u043b\u043e \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u043e \u0441 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0438\u0445 \u0441\u0445\u0435\u043c, \u2014 VPN S2S: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN \u043f\u043e\u0432\u0435\u0440\u0438\u043c \u0441\u0442\u0430\u0442\u0443\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044f:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u0412\u044b\u043f\u043e\u043b\u043d\u0438\u043c ping \u0438 \u0443\u0431\u0435\u0434\u0438\u043c\u0441\u044f \u0432 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0421\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b FortiGate \u0442\u0430\u043a \u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u0435\u043c ping \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0441 \u0430\u0434\u0440\u0435\u0441\u043e\u043c 172.21.10.100:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 NSX Edge  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 NSX Edge: 192.168.1.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NSX Edge: 178.20.233.46.\u00a0<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 NSX Edge  <\/h3>\n<ol>\n<li>\n<p>\u0418\u0434\u0435\u043c \u0432 vCloud Director \u2014 Networking \u2014 EDGE \u2014 Services \u2014 VPN \u2014 IPsec VPN Sites. \u0412\u043e\u0442 \u043e\u043f\u0438\u0441\u0430\u043d\u0438\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u043e\u0432 (\u0434\u0430\u0432\u0430\u043b\u0438 \u0432 \u043d\u0430\u0448\u0435\u0439 <a href=\"https:\/\/habr.com\/ru\/company\/dataline\/blog\/454004\/\"><u>\u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u0439 \u0441\u0442\u0430\u0442\u044c\u0435<\/u><\/a>):   <\/p>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<th>\n<div>\n<div class=\"table\">\n<table>\n<tbody>\n<tr>\n<td>\n<p align=\"left\"><strong>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440<\/strong><\/p>\n<\/td>\n<td>\n<p align=\"left\"><strong>\u0417\u043d\u0430\u0447\u0435\u043d\u0438\u0435<\/strong><\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Enabled<\/p>\n<\/td>\n<td>\n<p align=\"left\">True<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">PFS<\/p>\n<\/td>\n<td>\n<p align=\"left\">False<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Local ID \u0438 Local Endpoint<\/p>\n<\/td>\n<td>\n<p align=\"left\">178.20.233.46<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Local Subnets<\/p>\n<\/td>\n<td>\n<p align=\"left\">192.168.1.0\/24<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Peer ID \u0438 Peer Endpoint<\/p>\n<\/td>\n<td>\n<p align=\"left\">91.107.67.230<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Peer Subnets<\/p>\n<\/td>\n<td>\n<p align=\"left\">172.21.10.0\/24<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Encryption Algorithm<\/p>\n<\/td>\n<td>\n<p align=\"left\">AES256<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Authentication<\/p>\n<\/td>\n<td>\n<p align=\"left\">PSK<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Pre-Shared Key<\/p>\n<\/td>\n<td>\n<p align=\"left\">**********<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Diffie-Hellman Group<\/p>\n<\/td>\n<td>\n<p align=\"left\">DH14<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Digest Algorithm<\/p>\n<\/td>\n<td>\n<p align=\"left\">SHA-256<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">IKE Option<\/p>\n<\/td>\n<td>\n<p align=\"left\">IKEv1<\/p>\n<\/td>\n<\/tr>\n<tr>\n<td>\n<p align=\"left\">Session Type<\/p>\n<\/td>\n<td>\n<p align=\"left\">Policy Based Session<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n<\/div>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0438\u0442\u043e\u0433\u0435 \u043f\u043e\u043b\u0443\u0447\u0430\u0435\u043c: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 NSX Edge \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u043f\u0440\u0430\u043a\u0442\u0438\u0447\u0435\u0441\u043a\u0438 \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u044b \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430\u043c \u0432 \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0438 \u0441 CheckPoint, \u0437\u0430 \u0438\u0441\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435\u043c \u0442\u0430\u0439\u043c\u0438\u043d\u0433\u043e\u0432 \u0444\u0430\u0437 IPsec. \u0414\u0435\u043b\u043e \u0432 \u0442\u043e\u043c, \u0447\u0442\u043e \u0434\u0430\u043d\u043d\u044b\u0435 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0437\u0430\u0448\u0438\u0442\u044b \u0432 NSX Edge \u0438 \u043d\u0435 \u043f\u043e\u0434\u043b\u0435\u0436\u0430\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044e.<\/p>\n<p>\u0418\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:<\/p>\n<p>ikelifetime = 28800s,\u00a0<\/p>\n<p>type = tunnel,\u00a0<\/p>\n<p>lifetime = 3600s,\u00a0<\/p>\n<p>dpddelay = 30,\u00a0<\/p>\n<p>dpdaction = restart. <\/p>\n<ol>\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0432\u044b\u0431\u0440\u0430\u0432 \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN, \u0443\u043a\u0430\u0437\u0430\u0432 \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430 (IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 NSX Edge, \u0447\u0435\u0440\u0435\u0437 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u043e\u0438\u0441\u0445\u043e\u0434\u0438\u0442 \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435) \u0438 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN: IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c. \u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0442\u0438 \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b UserGate \u0438 NSX Edge, \u0442\u0440\u0430\u0444\u0438\u043a \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0434\u043e\u043b\u0436\u0435\u043d \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0434\u0430\u043d\u043d\u044b\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u043c:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u041f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d \u0430\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u043e \u0441\u0446\u0435\u043d\u0430\u0440\u0438\u044e \u0441 CheckPoint:   <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u041d\u0443 \u0438 \u043d\u0435 \u0437\u0430\u0431\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c \u0437\u0430 NSX Edge: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u044f. \u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0432 \u043d\u043e\u0440\u043c\u0430\u043b\u044c\u043d\u043e\u043c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0438 \u0434\u043e\u043b\u0436\u0435\u043d \u0431\u044b\u0442\u044c \u0437\u0435\u043b\u0435\u043d\u044b\u0439 \u0438\u043d\u0434\u0438\u043a\u0430\u0442\u043e\u0440:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN \u0441\u043c\u043e\u0442\u0440\u0438\u043c: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 MikroTik  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:\u00a0<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 MikroTik: 192.168.21.0\/24.\u00a0<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 MikroTik: 91.107.67.229.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 MikroTik<\/h3>\n<ol>\n<li>\n<p>IP \u2014 Addresses \u2014 \u0417\u0430\u0434\u0430\u0435\u043c \u0430\u0434\u0440\u0435\u0441\u0430\u0446\u0438\u044e:\u00a0<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>ether1 \u2014 WAN-\u043f\u043e\u0440\u0442,\u00a0<\/p>\n<\/li>\n<li>\n<p>bridge1 \u2014 LAN:<\/p>\n<\/li>\n<\/ul>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"2\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0432 Interfaces \u2014 IP Tunnel, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u0432\u043d\u0435\u0448\u043d\u0438\u0435 \u0430\u0434\u0440\u0435\u0441\u0430 MikroTik \u0438 UserGate \u0432 Local \u0438 Remote Address \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"3\">\n<li>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0435 IPsec. \u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u043e\u0432\u044b\u0439 peer \u0432 IP \u2014 IPsec \u2014 Peer:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u041f\u0440\u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c PSK-\u043a\u043b\u044e\u0447 \u0432 IP \u2014 IPsec \u2014 Identities: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Profile \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437\u044b 1 \u0432 \u0434\u0430\u043d\u043d\u043e\u043c \u0441\u043b\u0443\u0447\u0430\u0435 \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u043c \u0432 default-\u043f\u0440\u043e\u0444\u0438\u043b\u0435 \u0441\u043e \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u043c\u0438 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u043c\u0438:  <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"6\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Proposals \u043f\u043e\u043f\u0440\u0430\u0432\u043b\u044f\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0444\u0430\u0437\u044b 2:   <\/p>\n<\/li>\n<\/ol>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"7\">\n<li>\n<p>\u0412 IP \u2014 IPsec \u2014 Policies \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u043e\u043b\u0438\u0442\u0438\u043a\u0443 \u0434\u043b\u044f \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0442\u0440\u0430\u0444\u0438\u043a\u0430, \u0443\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>Src.Adress=192.168.21.0\/24 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c MikroTik),<\/p>\n<\/li>\n<li>\n<p>Dst.Address=172.21.1 0.0\/24 (\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0441\u0435\u0442\u044c UserGate).<\/p>\n<\/li>\n<\/ul>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<ol start=\"8\">\n<li>\n<p>\u041f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043c \u043a \u0444\u0430\u0439\u0440\u0432\u043e\u043b\u044c\u043d\u044b\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u0430\u043c IP \u2014 Firewall \u2014 Filter Rules, \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0430\u0432\u0438\u043b.\u00a0<\/p>\n<p>\u0420\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u0442\u0440\u0430\u0444\u0438\u043a \u043c\u0435\u0436\u0434\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u043c\u0438 \u0441\u0435\u0442\u044f\u043c\u0438:<\/p>\n<ul>\n<li>\n<p>Src.Address=172.21.10.0\/24,<\/p>\n<\/li>\n<li>\n<p>Dst.Address=192.168.21.0\/24,\u00a0<\/p>\n<\/li>\n<li>\n<p>Chain=forward Action=accept.<\/p>\n<\/li>\n<\/ul>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"9\">\n<li>\n<p>\u0414\u043b\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f IPsec \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c \u043f\u043e\u0440\u0442\u044b UDP 500, 4500 \u0438 ipsec-esp \u043d\u0430 WAN-\u043f\u043e\u0440\u0442\u0435:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"10\">\n<li>\n<p>\u0412 IP \u2014 Firewall \u2014 Raw \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u043f\u0440\u0435\u0440\u043e\u0443\u0442\u0438\u043d\u0433\u0430:\u00a0<\/p>\n<\/li>\n<\/ol>\n<p>Src.Address=172.21.10.0\/24.\u00a0<\/p>\n<p>Dst.Address=192.168.21.0\/24.\u00a0<\/p>\n<p>Chain=prerouting.\u00a0<\/p>\n<p>Action=accept. <\/p>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"11\">\n<li>\n<p>\u0412 IP \u2014 Firewall \u2014 NAT \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e, \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u044e\u0449\u0435\u0435 \u0442\u0440\u0430\u0444\u0438\u043a\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 MikroTik \u043d\u0435 \u043d\u0430\u0442\u0438\u0440\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 UserGate:<\/p>\n<\/li>\n<\/ol>\n<p>Src.Address=192.168.21.0\/24.\u00a0<\/p>\n<p>Dst.Address=172.21.10.0\/24.\u00a0<\/p>\n<p>Chain=forward.\u00a0<\/p>\n<p>Action=accept. <\/p>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<figure class=\"\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<ol start=\"12\">\n<li>\n<p>\u00a0\u0414\u0430\u043b\u0435\u0435 \u0432 IP \u2014 Routes \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c UserGate \u0447\u0435\u0440\u0435\u0437 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u044b\u0439 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441:   <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 MikroTik \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate  <\/h3>\n<ol>\n<li>\n<p>\u0412 \u0421\u0435\u0442\u044c \u2014 \u0417\u043e\u043d\u044b \u043d\u0430 \u0437\u043e\u043d\u0435 Untrusted \u0440\u0430\u0437\u0440\u0435\u0448\u0430\u0435\u043c VPN-\u0441\u0435\u0440\u0432\u0438\u0441:   <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"2\">\n<li>\n<p>\u041f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u043e\u0432 UserGate \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0412 VPN \u2014 \u041f\u0440\u043e\u0444\u0438\u043b\u0438 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 VPN \u0434\u043e\u0431\u0430\u0432\u0438\u043c \u043d\u043e\u0432\u044b\u0439 \u043f\u0440\u043e\u0444\u0438\u043b\u044c MikroTik S2S:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0412 VPN \u2014 \u041a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u0438\u0435 \u043f\u0440\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e MikroTik IPsec.\u00a0\u0423\u043a\u0430\u0437\u044b\u0432\u0430\u0435\u043c \u043f\u0440\u043e\u0444\u0438\u043b\u044c \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438, \u0441\u043e\u0437\u0434\u0430\u043d\u043d\u044b\u0439 \u043d\u0430 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u0448\u0430\u0433\u0435: \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441=tunnel2, \u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0440\u0432\u0435\u0440\u0430=\u0432\u043d\u0435\u0448\u043d\u0438\u0439 \u0430\u0434\u0440\u0435\u0441 MikroTik, \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b VPN=IPsec-\u0442\u0443\u043d\u043d\u0435\u043b\u044c \u0438 \u043d\u0430\u0448\u0438 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0441\u0435\u0442\u0438:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"5\">\n<li>\n<p>\u0421\u043e\u0437\u0434\u0430\u0435\u043c \u043f\u0440\u0430\u0432\u0438\u043b\u043e \u041c\u042d, \u0440\u0430\u0437\u0440\u0435\u0448\u0438\u0432 \u0432\u0437\u0430\u0438\u043c\u043e\u0434\u0435\u0439\u0441\u0442\u0432\u0438\u0435 \u043c\u0435\u0436\u0434\u0443 Trusted \u0438 VPN for Site-to-Site \u0437\u043e\u043d\u0430\u043c\u0438:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"6\">\n<li>\n<p>\u0412 \u0421\u0435\u0442\u044c \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u044b \u2014 \u0412\u0438\u0440\u0442\u0443\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u2014 \u0421\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u044b \u0434\u043e\u0431\u0430\u0432\u043b\u044f\u0435\u043c \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442 \u0432 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0443\u044e \u0441\u0435\u0442\u044c Mikrotik \u0447\u0435\u0440\u0435\u0437 tunnel2: <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"7\">\n<li>\n<p>\u041f\u0440\u043e\u0432\u0435\u0440\u0438\u0442\u044c \u0441\u043e\u0441\u0442\u043e\u044f\u043d\u0438\u0435 \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043c\u043e\u0436\u043d\u043e \u0432 \u0440\u0430\u0437\u0434\u0435\u043b\u0435 \u0414\u0438\u0430\u0433\u043d\u043e\u0441\u0442\u0438\u043a\u0430 \u0438 \u043c\u043e\u043d\u0438\u0442\u043e\u0440\u0438\u043d\u0433 \u2014 VPN. \u041e\u0442\u043f\u0440\u0430\u0432\u0438\u043c ping \u0447\u0435\u0440\u0435\u0437 \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Trusted-\u0437\u043e\u043d\u044b \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u043a\u043b\u0438\u0435\u043d\u0442\u0441\u043a\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 MikroTik:<\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<ol start=\"8\">\n<li>\n<p>\u0422\u0430\u043a \u0436\u0435 \u0441\u0434\u0435\u043b\u0430\u0435\u043c ping \u0441\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 Mikrotik \u0432 \u0441\u0442\u043e\u0440\u043e\u043d\u0443 \u0442\u0435\u0441\u0442\u043e\u0432\u043e\u0433\u043e \u0445\u043e\u0441\u0442\u0430 \u0437\u0430 UserGate:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<\/li>\n<\/ol>\n<p>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 UserGate \u0437\u0430\u0432\u0435\u0440\u0448\u0435\u043d\u0430.  <\/p>\n<\/div>\n<\/details>\n<h2>\u0421\u0432\u044f\u0437\u043a\u0430 UserGate \u0438 Cisco ASR1002-X  <\/h2>\n<p>\u0421\u0445\u0435\u043c\u0430:  <\/p>\n<figure class=\"full-width\"><figcaption><\/figcaption><\/figure>\n<p>\u0410\u0434\u0440\u0435\u0441\u0430:<\/p>\n<ul>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 UserGate: 172.21.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 UserGate: 91.107.67.230.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0442\u0443\u043d\u043d\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 tunnel4: 172.21.10.254\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0441\u0435\u0442\u0438 \u0437\u0430 Cisco: 172.22.10.0\/24.<\/p>\n<\/li>\n<li>\n<p>IP-\u0430\u0434\u0440\u0435\u0441 \u0432\u043d\u0435\u0448\u043d\u0435\u0433\u043e \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u0430 Cisco: 91.107.67.229.<\/p>\n<\/li>\n<\/ul>\n<details class=\"spoiler\">\n<summary>\u041f\u043e\u043b\u043d\u0430\u044f \u0438\u043d\u0441\u0442\u0440\u0443\u043a\u0446\u0438\u044f<\/summary>\n<div class=\"spoiler__content\">\n<h3>\u041d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0430 \u043d\u0430 \u0441\u0442\u043e\u0440\u043e\u043d\u0435 Cisco  <\/h3>\n<ol>\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b 1-\u0439 \u0444\u0430\u0437\u044b:<\/p>\n<\/li>\n<\/ol>\n<ul>\n<li>\n<p>crypto isakmp policy 235,<\/p>\n<\/li>\n<li>\n<p>encr aes,<\/p>\n<\/li>\n<li>\n<p>authentication pre-share,<\/p>\n<\/li>\n<li>\n<p>group 14.<\/p>\n<\/li>\n<\/ul>\n<ol start=\"2\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c pre-shared key:  <\/p>\n<p>crypto isakmp key &lt;PSK \u043a\u043b\u044e\u0447> address 91.107.67.230.<\/p>\n<\/li>\n<\/ol>\n<ol start=\"3\">\n<li>\n<p>\u0417\u0430\u0434\u0430\u0435\u043c \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u044b 2-\u0439 \u0444\u0430\u0437\u044b:<\/p>\n<p>crypto ipsec transform-set UserGate_TEST esp-aes 256 esp-sha256-hmac<\/p>\n<p>mode tunnel.<\/p>\n<\/li>\n<\/ol>\n<ol start=\"4\">\n<li>\n<p>\u0421\u043e\u0437<\/p>\n<\/li>\n<\/ol>\n<\/div>\n<\/details>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[],"tags":[],"class_list":["post-337808","post","type-post","status-publish","format-standard","hentry"],"_links":{"self":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/337808","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=337808"}],"version-history":[{"count":0,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=\/wp\/v2\/posts\/337808\/revisions"}],"wp:attachment":[{"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=337808"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=337808"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/savepearlharbor.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=337808"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}