[21전국] 2과제 2. S2S VPN 구성

LEFT-R1, RIGHT-R1, FW

※powershell 실행

Install-WindowsFeature routing -IncludeManagementTools

※rrasmgmt.msc 실행

 

 

 

※services.msc 실행

 

 

 

 

 

LEFT-R1

※powershell 실행

 

$proposal1 = New-NetIPsecAuthProposal -Machine -PreSharedKey "Skill39"

$set1 = New-NetIPsecPhase1AuthSet -DisplayName set1 -proposal $proposal1

$proposal2 = New-NetIPsecMainModeCryptoProposal -Encryption DES3 –Hash SHA256 -KeyExchange DH14

$set2 = New-NetIPsecMainModeCryptoSet -DisplayName set2 –proposal $proposal2

$rule1 = New-NetIPsecMainModeRule -DisplayName rule1 -MainModeCryptoSet $set2.Name –phase1authset $set1.name

$proposal3 = New-NetIPsecQuickModeCryptoProposal -Encapsulation ESP -ESPHash SHA256 -Encryption DES3

$set3 = New-NetIPsecQuickModeCryptoSet -DisplayName set3 -Proposal $proposal3

New-NetIPsecRule -displayname IPsec -mode Tunnel -LocalAddress 192.168.1.0/24, 27.0.0.1/32 -RemoteAddress 192.168.2.0/24, 37.0.0.1/32 -LocalTunnelEndpoint 27.0.0.1 -RemoteTunnelEndpoint 37.0.0.1 -InboundSecurity Require -OutboundSecurity Require –ipsecrulename $rule1.name -QuickModeCryptoSet $set3.Name

 

RIGHT-R1

※powershell 실행

$proposal1 = New-NetIPsecAuthProposal -Machine -PreSharedKey "Skill39"

$set1 = New-NetIPsecPhase1AuthSet -DisplayName set1 -Proposal $proposal1

$proposal2 = New-NetIPsecMainModeCryptoProposal -Encryption DES3 –Hash SHA256 -KeyExchange DH14

$set2 = New-NetIPsecMainModeCryptoSet -DisplayName set2 –proposal $proposal2

$rule1 = New-NetIPsecMainModeRule -DisplayName rule1 -MainModeCryptoSet $set2.Name –phase1authset $set1.name

$proposal3 = New-NetIPsecQuickModeCryptoProposal -Encapsulation ESP -ESPHash SHA256 -Encryption DES3

$set3 = New-NetIPsecQuickModeCryptoSet -DisplayName set3 -Proposal $proposal3

New-NetIPsecRule -displayname IPsec -mode Tunnel -LocalAddress 192.168.2.0/24, 37.0.0.1/32  -RemoteAddress 192.168.1.0/24, 27.0.0.1/32 -LocalTunnelEndpoint 37.0.0.1 -RemoteTunnelEndpoint 27.0.0.1 -InboundSecurity Require -OutboundSecurity Require –ipsecrulename $rule1.name  -QuickModeCryptoSet $set3.Name

 

LEFT-R2

※cmd 실행

route add 192.168.2.0/24 192.168.1.254 -p

 

RIGHT-R2

※cmd 실행

route add 192.168.1.0/24 192.168.2.254 -p