基于Windows2003实现网关-网关虚拟专用网络

水深无声 2022-11-21 14:57 263阅读 0赞

一、VPN概述  
1.**VPN** : Virtual Private NetWork(虚拟专用网络)  
2.功能 : VPN在因特网(Internet)上开辟一条**安全的隧道**，以保证两个端点（或两个局域网）之间的安全通信。  
3.分类(按应用场合)  
(1)远程访问VPN  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center]  
(2)网关-网关VPN  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 1]

> 本文基于windows2003实现网关-网关VPN

二、实现过程  
1.网络架构  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 2]  
故VirtualBox需新建5台虚拟机：  
ClientA、ServerA、Router、ServerB、ClientB；如下图所示：  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 3]  
2.创建4个虚拟网卡并配置1  
![在这里插入图片描述][2020110213073224.png_pic_center]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 4]  
3.5台虚拟机分别分配虚拟网卡、配置IP地址、子网掩码、默认网关等  
(1)以ClientA为例  
①启动系统前，分配虚拟网卡  
![在这里插入图片描述][20201102132148812.png_pic_center]

②启动系统后，开始->控制面板->网络连接->本地连接->属性  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 5]  
②双击红色箭头所指(即 : Internet 协议)  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 6]

> 注意：默认网关通过“高级”进行配置

(2)其他4台虚拟机配置情况  
**ServerA** :  
①分配虚拟网卡  
![在这里插入图片描述][20201102132257751.png_pic_center]

②本地连接  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 7]  
③本地连接2  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 8]  
**Router** :  
①分配虚拟网卡  
![在这里插入图片描述][20201102132349417.png_pic_center]  
②本地连接  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 9]  
③本地连接2  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 10]  
**ServerB** :  
①分配虚拟网卡  
![在这里插入图片描述][20201102132424250.png_pic_center]  
②本地连接![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 11]  
③本地连接2  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 12]  
**ClientB** :  
①分配虚拟网卡  
![在这里插入图片描述][20201102132522583.png_pic_center]  
②配置默认网关  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 13]  
(3)正确完成上述配置，4个局域网内的计算机可互相ping同

4.创建ServerA和ServerB的IPSec策略  
5.配置远程访问VPN服务器  
6.验证结果  
![在这里插入图片描述][20201102134441462.png_pic_center]  
![在这里插入图片描述][20201102134447485.png_pic_center]  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 14]

> 4~6，为USTC《网络安全》第4章PDF内容

三、扩展阅读

--------------------

1.  [理解host-only模式][host-only] ↩︎

[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center]: /images/20221120/59045a57cf5248d994d298c3b51a6768.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221120/ef52a975c1074972ac601e864689dfc5.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221120/b7781100d7994c90899b737193ffe4e3.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20221120/55f58fcc738d4955b5e691a5b22d8e91.png
[2020110213073224.png_pic_center]: /images/20221120/9e47382931e44379bac7a406e539e898.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 4]: /images/20221120/1e4f797591804fff97a7ab1dbfc5bf6e.png
[20201102132148812.png_pic_center]: /images/20221120/8eb4e3a4e74144ffbb7cf061c3f28680.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 5]: /images/20221120/2c7c14de9d14480fa40ffd852eea3402.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 6]: /images/20221120/827d71398f1d481ea21d7213c4b27b7a.png
[20201102132257751.png_pic_center]: /images/20221120/79b7b1e5d0bb45f0a5ace9f12ad2f732.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 7]: /images/20221120/21ae8a3a0bcc4389ae464a34c226cefc.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 8]: /images/20221120/93d5610a1f1c46c1bfcf8841cbda02a8.png
[20201102132349417.png_pic_center]: /images/20221120/2ce6522375944a2abbb5f37abf4ba0fb.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 9]: /images/20221120/f5b77f8aa5c643b6b87f2cb60361765e.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 10]: /images/20221120/f2f4919e238440789fcde853ec4a14c7.png
[20201102132424250.png_pic_center]: /images/20221120/9e6e2322afb140fa8f1345033fa07133.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 11]: /images/20221120/68d80e92b07d4c33a743d323cf159320.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 12]: /images/20221120/e90bfe057a0e4ac7a1488dea67d1eedb.png
[20201102132522583.png_pic_center]: /images/20221120/79c367919c504bcc8a9a77d7a71f7d98.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 13]: /images/20221120/4ffa59eb27fa4b3a91471949fcbede54.png
[20201102134441462.png_pic_center]: /images/20221120/3b405b82863d49c5908d519820f5075f.png
[20201102134447485.png_pic_center]: /images/20221120/b85cfede5a7b45ed922b4b61d1b47931.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl8zNzQ3NzAwOQ_size_16_color_FFFFFF_t_70_pic_center 14]: /images/20221120/f8ba9d34e8b149a094db707294dc8bf1.png
[host-only]: https://blog.51cto.com/13648313/2164314