[B! ipsec] hdkINO33ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯

hdkINO33 id:hdkINO33

ipsecã«é–¢ã™ã‚‹hdkINO33ã®ãƒ–ãƒƒã‚¯ãƒžãƒ¼ã‚¯ (7)

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

${{author_name}}$
{{author_name}}{{created}}
{{ #comment }}{{ comment }}{{ /comment }}
- {{ label }}

${{author_name}}$

{{{comment_expanded}}}

{{label}}

{{#is_bookmark}}ãƒªã‚¹ãƒˆ{{/is_bookmark}}{{^is_bookmark}}ãƒªãƒ³ã‚¯{{/is_bookmark}}

Terraformã®Multiple Providersã‚’åˆ©ç”¨ã—ã¦æ±äº¬/ã‚ªãƒ¬ã‚´ãƒ³ãƒªãƒ¼ã‚¸ãƒ§ãƒ³é–“ã§VyOSã‚’åˆ©ç”¨ã—ãŸVPNã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’æ§‹ç¯‰ã™ã‚‹ | DevelopersIO
Terraformã®Multiple Providersã‚’åˆ©ç”¨ã—ã¦æ±äº¬/ã‚ªãƒ¬ã‚´ãƒ³ãƒªãƒ¼ã‚¸ãƒ§ãƒ³é–“ã§VyOSã‚’åˆ©ç”¨ã—ãŸVPNã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’æ§‹ç¯‰ã™ã‚‹ ã¯ã˜ã‚ã« ã“ã‚“ã«ã¡ã¯ã€ä¸å±±ã§ã™ã€‚ VPCã«ã¯ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢VPNæ©Ÿèƒ½ãŒã‚ã‚Šã¾ã™ã€‚VGWã¨CGWé–“ã§VPNã‚³ãƒã‚¯ã‚·ãƒ§ãƒ³ã‚’æ§‹ç¯‰ã§ãã‚‹æ©Ÿèƒ½ã§ã™ã€‚è©³ç´°ã¯ä¸‹è¨˜ã‚¨ãƒ³ãƒˆãƒªã‚’å‚ç…§ã—ã¦ãã ã•ã„ã€‚ [Amazon VPC] ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢VPNæŽ¥ç¶šã«ã¤ã„ã¦ã¾ã¨ã‚ã¦ã¿ãŸ [Amazon VPC] ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢VPNæŽ¥ç¶šã‚’è¨å®šã™ã‚‹ æ¤œè¨¼ç›®çš„ã§ãƒãƒ¼ãƒ‰ã‚¦ã‚§ã‚¢VPNç’°å¢ƒã‚’æ§‹ç¯‰ã—ã‚ˆã†ã¨è€ƒãˆãŸã®ã§ã™ãŒã€å¿…è¦ãªæ§‹æˆè¦ç´ ãŒå¤šãç’°å¢ƒã®æ§‹ç¯‰ã«æ™‚é–“ãŒæŽ›ã‚‹ã¨ã„ã†å°è±¡ãŒã‚ã‚Šã¾ã™ã€‚ä»Šå›žTerraformã®Multiple Providersã¨ã„ã†æ©Ÿèƒ½ã‚’åˆ©ç”¨ã—ã¦ã•ãã£ã¨æ¤œè¨¼ç’°å¢ƒã‚’æ§‹ç¯‰ã§ãã‚‹ã‚ˆã†ã«ã‚³ãƒ¼ãƒ‰åŒ–ã—ã¦ã¿ã¾ã—ãŸã€‚CGWã«ã¯VyOSã‚’åˆ©ç”¨ã—ã¦ã„ã¾ã™ã€‚ Multiple Providersã¨ã¯ Terra
hdkINO33 2016/07/04
aws

terraform

vyos

ipsec
ãƒªãƒ³ã‚¯
Azureã®VNETã¨AWSã‚’VyOSã§ã¤ãªã
ãªã‚“ã¨ãªããŠè”µå…¥ã‚Šã—ã¦ãŸãƒã‚¿ã‚’å¼•ã£å¼µã‚Šã ã—ã¦ãã¾ã—ãŸã€‚ Azureã®VNETã¨å‹•çš„ã‚²ãƒ¼ãƒˆã‚¦ã‚§ã‚¤ã¨ã€AWSä¸Šã®VyOSãªVPN ãƒ«ãƒ¼ã‚¿ãƒ¼ã‚’ä½¿ã£ã¦VPNæŽ¥ç¶šã—ã‚ˆã†ã¨ã„ã†ãƒã‚¿ã§ã™ã€‚å‡ºæ¥ä¸ŠãŒã‚‹ç’°å¢ƒã¯ã“ã‚“ãªæ„Ÿã˜ã€‚ IPã‚¢ãƒ‰ãƒ¬ã‚¹ã¨ã‹ã¯ä¾‹ã§ã™ã€‚ã‚ã¨æ•°ã‹æœˆä»¥ä¸Šå‰ã®ãƒã‚¿ãªã®ã§ã¡ã‚‡ã£ã¨å¤‰ã‚ã£ã¦ã‚‹ç®‡æ‰€ã‚ã‚‹ã‹ã‚‚ï¼ˆVyOSã®AMIã®ãƒãƒ¼ã‚¸ãƒ§ãƒ³ã¨ã‹ï¼‰ã—ã‚Œã¾ã›ã‚“ãŒé©å®œèªã¿æ›¿ãˆã¦ãã ã•ã„ã€‚ãã‚Œã‹ã‚‰ç°¡æ˜“ãªæŽ¥ç¶šãªã®ã§æœ¬é‹ç”¨ã¨ã‹ã«ã¯ä½¿ã‚ãªã„æ–¹ãŒã„ã„ã‹ã‚‚ã§ã™ãã€‚ãªã‚“ã«ã›ã‚ˆè‡ªå·±è²¬ä»»ã§ã€‚ Azureå´ã¯ã“ã‚“ãªæ„Ÿã˜ã®è¨å®šã‚’æƒ³å®šã—ã¦ã¾ã™ã€‚ ä»®æƒ³ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚¢ãƒ‰ãƒ¬ã‚¹ç©ºé–“ 172.16.0.0/16 ã‚µãƒ–ãƒãƒƒãƒˆ 172.16.0.0/24 ä»®æƒ³ãƒžã‚·ãƒ³ã‚¤ãƒ³ã‚¹ã‚¿ãƒ³ã‚¹ 172.16.0.4 â€»DHCPã§æŒ¯ã‚‰ã‚Œã‚‹IPã‚¢ãƒ‰ãƒ¬ã‚¹ Windows Server 2012 R2 ã‚’æƒ³å®š ä»®æƒ³ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯ ã‚²ãƒ¼ãƒˆã‚¦ã‚§ã‚¤ å‹•çš„ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚° AWSå´ã¯ã“ã‚“ãªæ„Ÿã˜
hdkINO33 2015/12/10
vyos

ipsec
ãƒªãƒ³ã‚¯
http://lc.linux.or.jp/lc2009/slide/CP-01.pdf
hdkINO33 2015/12/10
ipsec
ãƒªãƒ³ã‚¯
Cisco IOS ã‚»ã‚ãƒ¥ãƒªãƒ†ã‚£ ã‚³ãƒ³ãƒ•ã‚£ã‚®ãƒ¥ãƒ¬ãƒ¼ã‚·ãƒ§ãƒ³ ã‚¬ ã‚¤ãƒ‰ï¼šSecure Connectivity - IPsec ä»®æƒ³ãƒˆãƒ³ãƒãƒ« ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ã‚¤ã‚¹ - Cisco Systems
hdkINO33 2015/12/03
ipsec
ãƒªãƒ³ã‚¯
IPsec Virtual Tunnel Interfaces (VTIs)
ã‚¿ã‚¹ã‚¯ R2ã¨R4é–“ã§IPsec VTIãƒˆãƒ³ãƒãƒ«ã‚’å¼µã‚Šã€BB2ã¨BB3é–“ã®ç–Žé€šãŒå–ã‚Œã‚‹ã‚ˆã†ã«ã™ã‚‹ã€‚ ãƒ¡ãƒ¢ ãƒ»ãƒšã‚¤ãƒãƒ¼ãƒ‰ã‚’ç›´æŽ¥ESPã§ã‚«ãƒ—ã‚»ãƒ«åŒ–ã™ã‚‹ãŸã‚ã€GRE over IPsecã‚ˆã‚Šã‚‚ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ãŒå°‘ãªã„ GRE over IPsecã®tunnel modeã‚ˆã‚Š24bytesåˆ†ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ãŒå°‘ãªã„ GRE over IPsecã®transport modeã‚ˆã‚Š4bytesåˆ†ã‚ªãƒ¼ãƒãƒ¼ãƒ˜ãƒƒãƒ‰ãŒå°‘ãªã„ ãƒ»ãƒˆãƒ³ãƒãƒ«å†…ã«IPä»¥å¤–ã®ãƒ‘ã‚±ãƒƒãƒˆã‚’æµã™ã“ã¨ã¯ã§ããªã„ï¼ˆIPsecã¯IPã—ã‹ã‚«ãƒ—ã‚»ãƒ«åŒ–ã§ããªã„ãŸã‚ï¼‰ ãƒ»tunnel modeã«ipv4ã¾ãŸã¯ipv6ã‚’ä½¿ã†ï¼ˆgreã§ã¯ãªã„ï¼‰ ãƒ»transf orm setã¯tunnel modeãŒå¿…é ˆ ãƒ»ãƒˆãƒ³ãƒãƒ«ã‚¤ãƒ³ã‚¿ãƒ¼ãƒ•ã‚§ãƒ¼ã‚¹ã®MTUã«ESPãƒ˜ãƒƒãƒ€ãƒ¼åˆ†ã‚’å·®ã—å¼•ã„ãŸå€¤ãŒè‡ªå‹•çš„ã«ã‚»ãƒƒãƒˆã•ã‚Œã‚‹ï¼ˆgreã§ã¯æ˜Žç¤ºçš„ã«è¨å®šã™ã‚‹å¿…è¦ãŒã‚ã‚‹ï¼‰ ä»Šå›žã®æš—å·åŒ–/ãƒãƒƒã‚·ãƒ¥ã®çµ„ã¿åˆ
hdkINO33 2015/11/13
ipsec

vpn
ãƒªãƒ³ã‚¯
IPsecãƒˆãƒ³ãƒãƒ«é–“ã§ã®ãƒ€ã‚¤ãƒŠãƒŸãƒƒã‚¯ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ï¼ˆIPsec VTIï¼‰ - ãƒãƒƒãƒˆãƒ¯ãƒ¼ã‚¯å‚™å¿˜éŒ²
IPsecãƒˆãƒ³ãƒãƒ«é–“ã¯ãƒ¦ãƒ‹ã‚ãƒ£ã‚¹ãƒˆé€šä¿¡ã—ã‹é€šã•ãªã„ãŸã‚ãƒ€ã‚¤ãƒŠãƒŸãƒƒã‚¯ãƒ«ãƒ¼ãƒ†ã‚£ãƒ³ã‚°ã‚’ä½¿ã†å ´åˆã¯ã€GRE over IPsecã§GREãƒˆãƒ³ãƒãƒ«ã‚’å¿…ãšä½¿ã†ã¨æ€ã£ã¦ãŸã‘ã©ãã‚Œä»¥å¤–ã®æ–¹æ³•ã§ã‚‚å‡ºæ¥ã‚‹ã¨çŸ¥ã£ãŸã®ã§ãƒ¡ãƒ¢ æ§‹æˆã¯ä¸Šè¨˜ã‚±ãƒ¼ã‚¹ã§æ¤œè¨¼ï¼ˆ1812Jï¼‰ ã¾ãšã¯ã€GRE over IPsecã®å ´åˆã®Config #R1&R2ã®ãƒ«ãƒ¼ãƒ—ãƒãƒƒã‚¯ã‚¢ãƒ‰ãƒ¬ã‚¹ã®ã‚»ã‚°ãƒ¡ãƒ³ãƒˆã®åºƒå‘Šã§ç¢ºèª R1 fa0â†’10.1.1.1/24 tun0â†’172.16.1.1/24 loop0â†’192.168.1.1/24 R2 fa0â†’10.1.1.2/24 tun0â†’172.16.1.2/24 loop0â†’192.168.2.1/24 ï¼œR1ï¼ž crypto isakmp policy 1 authentication pre-share group 2 crypto isakmp key cisco address 10.1.1.2 !
hdkINO33 2015/11/12
vpn

ipsec
ãƒªãƒ³ã‚¯
ã‚½ãƒ•ãƒˆã‚¦ã‚§ã‚¢ãƒ«ãƒ¼ã‚¿Vyattaã¨VyOSã‚’ç”¨ã„ã¦SoftLayerã¨ã‚ªãƒ•ã‚£ã‚¹ã‚’IPsec VPNæŽ¥ç¶šã™ã‚‹ #softlayer - ã‚¯ãƒªã‚¨ãƒ¼ã‚·ãƒ§ãƒ³ãƒ©ã‚¤ãƒ³æ ªå¼ä¼šç¤¾
hdkINO33 2015/11/10
vpn

ipsec

vyos

instruction
ãƒªãƒ³ã‚¯
1