https://wiki.ixheim.de/index.php?action=history&feed=atom&title=VPN_Astaro_zu_Linux 2026-05-15T19:30:21Z Versionsgeschichte dieser Seite in Xinux Wiki MediaWiki 1.35.1 https://wiki.ixheim.de/index.php?title=VPN_Astaro_zu_Linux&diff=4615&oldid=prev 2014-07-11T12:18:23Z

<p><span dir="auto"><span class="autocomment">Astaro-Seite (statisch)</span></span></p> <table class="diff diff-contentalign-left diff-editfont-monospace" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="de"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Nächstältere Version</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Version vom 11. Juli 2014, 12:18 Uhr</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l138" >Zeile 138:</td> <td colspan="2" class="diff-lineno">Zeile 138:</td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====Astaro-Seite (statisch)====</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>====Astaro-Seite (statisch)====</div></td></tr> <tr><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[file:astaro-dts1.jpg|750px]]</div></td><td class='diff-marker'> </td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>[[file:astaro-dts1.jpg|750px]]</div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==Linuxseite==</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*linux.p12 generieren</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*astaro VPN Signing CA als PEM runterladen </ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*nach /etc/ipsec.d/cacerts verschieben ... </ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*vpn-id der astaro steht unter IPSEC Lokaler RSA-S.....</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"></ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==Astaroseite==</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*linux.p12 hinzufügen und namen linux-cert geben </ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> linux.crt und linux-ca.crt sind nun auf der astaro seite </ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">*neues gateway erzeugen linux-gw</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">**nur antworten</ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">**lokales zertifikat linux-cert auswählen </ins></div></td></tr> <tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">**netze nach belieben ...</ins></div></td></tr> <!-- diff cache key my_wiki:diff::1.12:old-3755:rev-4615 --> </table>

192.168.244.1 https://wiki.ixheim.de/index.php?title=VPN_Astaro_zu_Linux&diff=3755&oldid=prev 2013-11-25T13:10:58Z

<p>Die Seite wurde neu angelegt: „ ==Komponenten== *1 PC *1 VM ==Zielbestimmung== VPN zwischen PC und VM die Netze dahinter Tunneln ===Muss Kriterien=== *Netzwerke über Tunnel gegenseitig err…“</p> <p><b>Neue Seite</b></p><div><br /> ==Komponenten==<br /> *1 PC<br /> *1 VM<br /> <br /> ==Zielbestimmung==<br /> <br /> VPN zwischen PC und VM die Netze dahinter Tunneln<br /> <br /> ===Muss Kriterien===<br /> <br /> *Netzwerke über Tunnel gegenseitig erreichbar<br /> <br /> ===Kann Kriterien===<br /> <br /> *PSK<br /> *Zertifikate<br /> **mit roadwarrior<br /> **ohne roadwarrior<br /> <br /> ==Umgebung==<br /> ===Software===<br /> <br /> *Astaro Release 8.102<br /> *Ubuntu 10.04.2 2.6.32-33-generic-pae<br /> <br /> ===Hardware===<br /> *Router mit 2 Netzwerk-Schnittstellen<br /> *ESXi Server (VMware)<br /> <br /> ==Funktionalität==<br /> *Ipsec implementierung muss auf Linux-Seite vorhanden sein<br /> apt-get install openswan<br /> ===PSK===<br /> ====Linux-Seite====<br /> */etc/ipsec.conf<br /> conn par-asg<br /> left=192.168.242.100<br /> leftid=192.168.242.100<br /> leftsubnet=172.23.242.0/24<br /> right=192.168.249.150<br /> rightid=192.168.249.150<br /> rightsubnet=172.30.232.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> authby=secret<br /> pfs=yes<br /> auto=start<br /> <br /> */etc/ipsec.secrets<br /> 192.168.242.100 192.168.249.150 : PSK &quot;geheim&quot;<br /> <br /> ====Astaro-Seite====<br /> *Remote Gateway einrichten<br /> ;[[file:astaro-v2-1.3.jpg|750px]]<br /> <br /> <br /> *IPsec Verbindung einrichten<br /> ;[[file:astaro-v2-2.2.jpg|750px]]<br /> <br /> ===Zertifikate einrichten===<br /> ====Zertifizierungsstelle erstellen====<br /> <br /> makepki ca<br /> <br /> ====Zertifikate erstellen====<br /> <br /> makepki cert paragon<br /> makepki cert astaro<br /> <br /> ====Zertifikate übernehmen====<br /> Auf der Zertifizierungsstelle<br /> cd /var/ssl/ca<br /> tar -cvzf paragon.tgz ca.crt ca.crl paragon.key paragon.crt<br /> scp paragon.tgz paragon:/root<br /> cp astaro.p12 /export/share/tmp<br /> =====Linux-Seite=====<br /> <br /> tar -xvzf paragon.tgz<br /> cp -v ca.crt /etc/ipsec.d/cacerts/xinux-ca.crt<br /> cp -v ca.crl /etc/ipsec.d/crls/xinux-ca.crt<br /> cp -v paragon.key /etc/ipsec.d/private/<br /> cp -v paragon.crt /etc/ipsec.d/certs/<br /> <br /> =====Astaro-Seite=====<br /> <br /> <br /> [[file:astaro-sts2.jpg|750px]]<br /> <br /> ====Linux-Seite====<br /> <br /> ===x509 static-to-static===<br /> <br /> ====Linux-Seite====<br /> */etc/ipsec.conf<br /> conn par-asg<br /> leftcert=paragon-cfg.crt<br /> left=192.168.242.100<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=technik@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> right=192.168.249.150<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=astaro, E=technik@xinux.de&quot;<br /> rightrsasigkey=%cert<br /> rightsubnet=172.30.232.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> authby=rsasig<br /> pfs=yes<br /> auto=start<br /> <br /> */etc/ipsec.secrets<br /> 192.168.242.100 : RSA paragon-cfg.key &quot;&quot;<br /> <br /> ====Astaro-Seite====<br /> [[file:astaro-sts1.jpg|750px]]<br /> ===x509 dynamic-to-static===<br /> <br /> ====Linux-Seite (dynamisch)====<br /> <br /> */etc/ipsec.conf<br /> conn par-asg<br /> leftcert=paragon-cfg.crt<br /> left=%defaultroute<br /> leftrsasigkey=%cert<br /> leftid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=paragon, E=technik@xinux.de&quot;<br /> leftsubnet=172.23.242.0/24<br /> right=192.168.249.150<br /> rightid=&quot;C=de, ST=rlp, L=zweibruecken, OU=edv, CN=astaro, E=technik@xinux.de&quot;<br /> rightrsasigkey=%cert<br /> rightsubnet=172.30.232.0/24<br /> ike=3des-md5-modp1024<br /> esp=3des-md5-96<br /> authby=rsasig<br /> pfs=yes<br /> auto=start<br /> <br /> ====Astaro-Seite (statisch)====<br /> [[file:astaro-dts1.jpg|750px]]</div>

Thomas