{"id":89276,"date":"2020-07-21T13:42:28","date_gmt":"2020-07-21T11:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1"},"modified":"2026-07-05T10:59:44","modified_gmt":"2026-07-05T08:59:44","slug":"kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","title":{"rendered":"Jak se dostat k IPVPN Beeline p\u0159es IPSec. \u010c\u00e1st 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ahoj! V <a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/498450\/\" rel=\"nofollow\">p\u0159edchoz\u00edm p\u0159\u00edsp\u011bvku<\/a> jsem popsal fungov\u00e1n\u00ed na\u0161\u00ed slu\u017eby MultiSIM v oblasti <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/rezervirovanie-internet-soedineniia\/?utm_source=habr\" rel=\"nofollow\">rezervace<\/a> a <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/obedinenie-mobilnih-setey\/?utm_source=habr\" rel=\"nofollow\">vyv\u00e1\u017een\u00ed<\/a> kan\u00e1l\u016f. Jak ji\u017e bylo zm\u00edn\u011bno, klienty k s\u00edti p\u0159ipojujeme p\u0159es VPN, a dnes v\u00e1m \u0159eknu trochu v\u00edce o VPN a na\u0161ich mo\u017enostech v t\u00e9to oblasti.<\/p>\n<p>Za\u010dn\u011bme s t\u00edm, \u017ee jako poskytovatel telekomunika\u010dn\u00edch slu\u017eeb m\u00e1me svou obrovskou MPLS s\u00ed\u0165, kter\u00e1 je pro klienty pevn\u00fdch \u0159ad rozd\u011blena na dva hlavn\u00ed segmenty \u2014 ten, kter\u00fd se pou\u017e\u00edv\u00e1 p\u0159\u00edmo pro p\u0159\u00edstup k s\u00edti Internet, a ten, kter\u00fd se pou\u017e\u00edv\u00e1 pro vytv\u00e1\u0159en\u00ed izolovan\u00fdch s\u00edt\u00ed \u2014 a pr\u00e1v\u011b t\u00edmto segmentem MPLS proch\u00e1z\u00ed provoz IPVPN (L3 OSI) a VPLAN (L2 OSI) pro na\u0161e firemn\u00ed klienty.<\/p>\n<p><a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\" rel=\"nofollow\"><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/b5b3d5c28266d1916b7ac93e94d2fe5b.jpg\" alt=\"Jak se dostat k IPVPN Beeline p\u0159es IPSec. \u010c\u00e1st 1\" \/><\/a><a rel=\"nofollow\" name=\"habracut\"><\/a><br \/>\nObvykle je p\u0159ipojen\u00ed klienta realizov\u00e1no n\u00e1sleduj\u00edc\u00edm zp\u016fsobem.<\/p>\n<p>K kancel\u00e1\u0159i klienta je zaji\u0161t\u011bna p\u0159\u00edstupov\u00e1 linka z nejbli\u017e\u0161\u00edho bodu p\u0159\u00edtomnosti s\u00edt\u011b (uzlu MEN, P\u0420L, BSSS, FTTB atd.) a d\u00e1le, kan\u00e1l je zak\u00f3dov\u00e1n v transportn\u00ed s\u00edti k odpov\u00eddaj\u00edc\u00edmu RE-MPLS sm\u011brova\u010di, na kter\u00e9m ho vyvedeme do speci\u00e1ln\u011b vytvo\u0159en\u00e9ho pro klienta VRF se zohledn\u011bn\u00edm profilov\u00e9ho provozu, kter\u00fd je pro klienta pot\u0159ebn\u00fd (zna\u010dky profilu se vyb\u00edraj\u00ed pro ka\u017ed\u00fd p\u0159\u00edstupov\u00fd port na z\u00e1klad\u011b hodnotiprecedence 0,1,3,5).<\/p>\n<p>Pokud z n\u011bjak\u00e9ho d\u016fvodu nem\u016f\u017eeme pln\u011b zorganizovat posledn\u00ed m\u00edli pro klienta, nap\u0159\u00edklad pokud se kancel\u00e1\u0159 klienta nach\u00e1z\u00ed v business centru, kde je v priorit\u011b jin\u00fd poskytovatel, nebo v bl\u00edzkosti prost\u011b nen\u00ed na\u0161e p\u0159\u00edtomnost, pak d\u0159\u00edve klienti museli vytv\u00e1\u0159et n\u011bkolik IPVPN s\u00edt\u00ed u r\u016fzn\u00fdch poskytovatel\u016f (nejsou to zrovna cenov\u011b v\u00fdhodn\u00e9 architektury) nebo se sami sna\u017eit vy\u0159e\u0161it probl\u00e9my s organizac\u00ed p\u0159\u00edstupu k jejich VRF p\u0159es Internet.<\/p>\n<p>Mnoz\u00ed to d\u011blali pomoc\u00ed instalace IPVPN internetov\u00e9ho br\u00e1ny \u2014 instalovali hrani\u010dn\u00ed sm\u011brova\u010d (hardwarov\u00fd nebo jak\u00e9koli \u0159e\u0161en\u00ed zalo\u017een\u00e9 na Linuxu), p\u0159ipojovali k n\u011bmu jedn\u00edm portem IPVPN kan\u00e1l a druh\u00fdm \u2014 internetov\u00fd kan\u00e1l, spou\u0161t\u011bli na n\u011bm sv\u016fj <a href=\"https:\/\/prohoster.info\/cs\/vpn\/\">VPN server<\/a> a p\u0159ipojovali u\u017eivatele prost\u0159ednictv\u00edm sv\u00e9ho vlastn\u00edho VPN br\u00e1ny. P\u0159irozen\u011b, takov\u00fd syst\u00e9m p\u0159in\u00e1\u0161\u00ed i z\u00e1t\u011b\u017ee: podobnou infrastrukturu je t\u0159eba um\u011bt budovat a, co je nejm\u00e9n\u011b pohodln\u00e9 \u2014 provozovat a rozv\u00edjet.<\/p>\n<p>Aby usnadnit \u017eivot naszym klient\u016fm, z\u0159\u00eddili jsme centralizovan\u00fd VPN hub a organizovali podporu p\u0159ipojen\u00ed p\u0159es internet pomoc\u00ed IPSec. Klienti nyn\u00ed pot\u0159ebuj\u00ed pouze nastavit sv\u016fj router pro pr\u00e1ci s na\u0161\u00edm VPN hubem skrze IPSec tunel p\u0159es jak\u00fdkoli ve\u0159ejn\u00fd internet, a my p\u0159evedeme provoz tohoto klienta do jeho VRF.<\/p>\n<h2>Komu se to hod\u00ed<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li>T\u011bm, kte\u0159\u00ed ji\u017e maj\u00ed velkou IPVPN s\u00ed\u0165 a pot\u0159ebuj\u00ed nov\u00e9 p\u0159ipojen\u00ed v kr\u00e1tk\u00e9m \u010dase.<\/li>\n<li>V\u0161em, kdo z n\u011bjak\u00e9ho d\u016fvodu cht\u011bj\u00ed p\u0159esunout \u010d\u00e1st provozu z ve\u0159ejn\u00e9ho internetu do IPVPN, ale d\u0159\u00edve \u010delili technick\u00fdm omezen\u00edm spojen\u00fdm s n\u011bkolika poskytovateli slu\u017eeb.<\/li>\n<li>T\u011bm, kte\u0159\u00ed v sou\u010dasnosti maj\u00ed n\u011bkolik odd\u011blen\u00fdch VPN s\u00edt\u00ed u r\u016fzn\u00fdch oper\u00e1tor\u016f. Existuj\u00ed klienti, kte\u0159\u00ed \u00fasp\u011b\u0161n\u011b organizovali IPVPN jak od Beeline, tak od MegaFonu, i od Rostelekomu atd. Aby to bylo jednodu\u0161\u0161\u00ed, mohou z\u016fstat pouze na na\u0161em jednotn\u00e9m, <a href=\"https:\/\/prohoster.info\/cs\/vpn\/\">VPN<\/a>, v\u0161echny ostatn\u00ed kan\u00e1ly jin\u00fdch oper\u00e1tor\u016f p\u0159epnout na internet, po \u010dem\u017e se p\u0159ipoj\u00ed k IPVPN Beeline p\u0159es IPSec a internet od t\u011bchto oper\u00e1tor\u016f.<\/li>\n<li>T\u011bm, kte\u0159\u00ed ji\u017e maj\u00ed IPVPN s\u00ed\u0165, p\u0159ekr\u00fdvaj\u00edc\u00ed se s Internetem.<\/li>\n<\/ul>\n<p>Pokud v\u0161e zprovozn\u00edme u n\u00e1s, klienti z\u00edskaj\u00ed plnou podporu VPN, v\u00fdznamnou rezervaci infrastruktury a standardn\u00ed nastaven\u00ed, kter\u00e1 budou fungovat na jak\u00e9mkoli obvykl\u00e9m routeru (a\u0165 u\u017e je to Cisco nebo Mikrotik, hlavn\u011b aby podporoval IPSec\/IKEv2 se standardizovan\u00fdmi metodami autentizace). Mimochodem, co se t\u00fd\u010de IPSec \u2014 v tuto chv\u00edli podporujeme pouze ten, ale pl\u00e1nujeme spustit plnou podporu tak\u00e9 pro OpenVPN a Wireguard, aby klienti nebyli z\u00e1visl\u00ed na protokolu a mohli snadno p\u0159esunout v\u0161e k n\u00e1m, a tak\u00e9 chceme za\u010d\u00edt p\u0159ipojovat klienty z po\u010d\u00edta\u010d\u016f a mobiln\u00edch za\u0159\u00edzen\u00ed (integrovan\u00e1 \u0159e\u0161en\u00ed v OS, Cisco AnyConnect a strongSwan a podobn\u00e9). P\u0159i takov\u00e9m p\u0159\u00edstupu lze de facto v\u00fdstavbu infrastruktury s jistotou sv\u011b\u0159it oper\u00e1torovi, ponech\u00e1vaj\u00edc pouze nastaven\u00ed CPE nebo hostitele.<\/p>\n<p>Jak prob\u00edh\u00e1 proces p\u0159ipojen\u00ed pro re\u017eim IPSec:<\/p>\n<ol>\n<li>Klient zas\u00edl\u00e1 \u017e\u00e1dost sv\u00e9mu mana\u017eerovi, ve kter\u00e9 uv\u00e1d\u00ed po\u017eadovanou rychlost p\u0159ipojen\u00ed, profil provozu a parametry IP adresace pro tunel (v\u00fdchoz\u00ed pods\u00ed\u0165 s maskou \/30) a typ sm\u011brov\u00e1n\u00ed (statick\u00e9 nebo BGP). Pro p\u0159enos sm\u011brov\u00e1n\u00ed do lok\u00e1ln\u00edch s\u00edt\u00ed klienta v p\u0159ipojen\u00e9 kancel\u00e1\u0159i se pou\u017e\u00edvaj\u00ed mechanismy IKEv2 f\u00e1ze protokolu IPSec pomoc\u00ed odpov\u00eddaj\u00edc\u00edch nastaven\u00ed na klientsk\u00e9m routeru, nebo jsou inzerov\u00e1ny prost\u0159ednictv\u00edm BGP v MPLS z uveden\u00e9ho soukrom\u00e9ho BGP AS klientem. T\u00edmto zp\u016fsobem je informace o sm\u011brov\u00e1n\u00ed klientsk\u00fdch s\u00edt\u00ed pln\u011b kontrolov\u00e1na klientem prost\u0159ednictv\u00edm nastaven\u00ed klientsk\u00e9ho routeru.<\/li>\n<li>V odpov\u011bdi od sv\u00e9ho mana\u017eera obdr\u017e\u00ed klient \u00fa\u010detn\u00ed \u00fadaje pro p\u0159ipojen\u00ed do sv\u00e9ho VRF ve form\u00e1tu:\n<ul>\n<li>IP adresa VPN-HUB<\/li>\n<li>U\u017eivatelsk\u00e9 jm\u00e9no<\/li>\n<li>Heslo pro autentizaci<\/li>\n<\/ul>\n<\/li>\n<li>Nastavuje SRV, n\u00ed\u017ee, pro p\u0159\u00edklad dva varianty z\u00e1kladn\u00ed konfigurace:<b class=\"spoiler_title\">Varianta pro Cisco:<\/b><br \/>\ncrypto ikev2 keyring BeelineIPsec_keyring<br \/>\npeer Beeline_VPNHub<br \/>\naddress 62.141.99.183 <i> \u2013VPN koncentr\u00e1tor Beeline<\/i><br \/>\npre-shared-key<br \/>\n!<br \/>\n<i>Pro variantu se statick\u00fdm sm\u011brov\u00e1n\u00edm mohou b\u00fdt sm\u011bry do s\u00edt\u00ed dostupn\u00fdch p\u0159es Vpn-hub nastaveny v konfiguraci IKEv2 a automaticky se objev\u00ed jako statick\u00e9 sm\u011bry v tabulce sm\u011brov\u00e1n\u00ed SRV. Tato nastaven\u00ed je tak\u00e9 mo\u017en\u00e9 prov\u00e9st standardn\u00edm zp\u016fsobem zad\u00e1v\u00e1n\u00ed statick\u00fdch sm\u011brov\u00e1n\u00ed (viz n\u00ed\u017ee).<\/i><\/p>\n<p>crypto ikev2 authorization policy FlexClient-author<\/p>\n<p><i>Sm\u011br do s\u00edt\u00ed za SRV routerem \u2013 povinn\u00e9 nastaven\u00ed p\u0159i statick\u00e9m sm\u011brov\u00e1n\u00ed mezi SRV a PE. P\u0159enos dat sm\u011brov\u00e1n\u00ed na PE se prov\u00e1d\u00ed automaticky p\u0159i spu\u0161t\u011bn\u00ed tunelu prost\u0159ednictv\u00edm interakce IKEv2.<\/i><\/p>\n<p>route set remote ipv4 10.1.1.0 255.255.255.0 <i> \u2013Lok\u00e1ln\u00ed s\u00ed\u0165 kancel\u00e1\u0159e<\/i><br \/>\n!<br \/>\ncrypto ikev2 profile BeelineIPSec_profile<br \/>\nidentity local <u><br \/>\nauthentication local pre-share<br \/>\nauthentication remote pre-share<br \/>\nkeyring local BeelineIPsec_keyring<br \/>\naaa authorization group psk list group-author-list FlexClient-author<br \/>\n!<br \/>\ncrypto ikev2 client flexvpn BeelineIPsec_flex<br \/>\npeer 1 Beeline_VPNHub<br \/>\nclient connect Tunnel1<br \/>\n!<br \/>\ncrypto ipsec transform-set TRANSFORM1 esp-aes 256 esp-sha256-hmac<br \/>\nmode tunnel<br \/>\n!<br \/>\ncrypto ipsec profile default<br \/>\nset transform-set TRANSFORM1<br \/>\nset ikev2-profile BeelineIPSec_profile<br \/>\n!<br \/>\ninterface Tunnel1<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013Adresa tunelu<\/i><br \/>\ntunnel source GigabitEthernet0\/2 <i> \u2013Rozhran\u00ed pro p\u0159\u00edstup k Internetu<\/i><br \/>\ntunnel mode ipsec ipv4<br \/>\ntunnel destination dynamic<br \/>\ntunnel protection ipsec profile default<br \/>\n!<br \/>\n<i>Sm\u011bry do soukrom\u00fdch s\u00edt\u00ed klienta, dostupn\u00e9 p\u0159es VPN koncentr\u00e1tor Beeline, lze nastavit staticky.<\/i><\/p>\n<p>ip route 172.16.0.0 255.255.0.0 Tunnel1<br \/>\nip route 192.168.0.0 255.255.255.0 Tunnel1<\/p>\n<p><b class=\"spoiler_title\">Varianta pro Huawei (ar160\/120):<\/b><br \/>\nike local-name <u><br \/>\n#<br \/>\nacl name ipsec 3999<br \/>\npravidlo 1 povolit ip zdroj 10.1.1.0 0.0.0.255 <i> \u2013Lok\u00e1ln\u00ed s\u00ed\u0165 kancel\u00e1\u0159e<\/i><br \/>\n#<br \/>\naaa<br \/>\nslu\u017eba-schemat IPSEC<br \/>\ncesta nastavit acl 3999<br \/>\n#<br \/>\nipsec n\u00e1vrh ipsec<br \/>\nesp autentiza\u010dn\u00ed-algoritmus sha2-256<br \/>\nesp \u0161ifrovac\u00ed-algoritmus aes-256<br \/>\n#<br \/>\nike n\u00e1vrh default<br \/>\n\u0161ifrovac\u00ed-algoritmus aes-256<br \/>\ndh group2<br \/>\nautentiza\u010dn\u00ed-algoritmus sha2-256<br \/>\nautentiza\u010dn\u00ed-metoda pre-share<br \/>\nintegritn\u00ed-algoritmus hmac-sha2-256<br \/>\nprf hmac-sha2-256<br \/>\n#<br \/>\nike peer ipsec<br \/>\npre-shared-key jednoduch\u00e9<br \/>\nlocal-id-type fqdn<br \/>\nremote-id-type ip<br \/>\nvzd\u00e1len\u00e1-adresa 62.141.99.183 <i> \u2013VPN koncentr\u00e1tor Beeline<\/i><br \/>\nslu\u017eba-schemat IPSEC<br \/>\nconfig-exchange po\u017eadavek<br \/>\nconfig-exchange nastav p\u0159ijmout<br \/>\nconfig-exchange nastav poslat<br \/>\n#<br \/>\nipsec profil ipsecprof<br \/>\nike-peer ipsec<br \/>\nn\u00e1vrh ipsec<br \/>\n#<br \/>\nrozhran\u00ed Tunnel0\/0\/0<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013Adresa tunelu<\/i><br \/>\ntunnel-protocol ipsec<br \/>\nzdroj GigabitEthernet0\/0\/1 <i> \u2013Rozhran\u00ed pro p\u0159\u00edstup k Internetu<\/i><br \/>\nipsec profil ipsecprof<br \/>\n#<br \/>\n<i>Trasy k priv\u00e1tn\u00edm s\u00edt\u00edm klienta, dostupn\u00e9 p\u0159es VPN koncentr\u00e1tor Billa, lze zadat staticky<\/i><\/p>\n<p>ip statick\u00e1 cesta 192.168.0.0 255.255.255.0 Tunnel0\/0\/0<br \/>\nip statick\u00e1 cesta 172.16.0.0 255.255.0.0 Tunnel0\/0\/0<\/li>\n<\/ol>\n<p>Vytvo\u0159en\u00e1 sch\u00e9ma spojen\u00ed vypad\u00e1 p\u0159ibli\u017en\u011b takto:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/8083e9190bdcdd816ac3014d7b7f5de4.jpg\" alt=\"Jak se dostat k IPVPN Beeline p\u0159es IPSec. \u010c\u00e1st 1\" \/><\/p>\n<p>Pokud klient nem\u00e1 \u017e\u00e1dn\u00e9 p\u0159\u00edklady z\u00e1kladn\u00ed konfigurace, obvykle mu pom\u00e1h\u00e1me je vytvo\u0159it a zp\u0159\u00edstupnit pro ostatn\u00ed.<\/p>\n<p>Zb\u00fdv\u00e1 p\u0159ipojit CPE k Internetu, prov\u00e9st ping na c\u00edlovou \u010d\u00e1st VPN tunelu a na n\u011bjak\u00fd hostitel uvnit\u0159 VPN, a v\u0161e, m\u016f\u017eeme pova\u017eovat za \u00fasp\u011b\u0161n\u00e9 p\u0159ipojen\u00ed.<\/p>\n<p>V p\u0159\u00ed\u0161t\u00edm \u010dl\u00e1nku se pod\u011bl\u00edme o to, jak jsme tuto sch\u00e9ma zkombinovali s IPSec a MultiSIM Z\u00e1lohov\u00e1n\u00edm pomoc\u00ed CPE Huawei: nainstalujeme na\u0161im klient\u016fm na\u0161e CPE Huawei, ve kter\u00e9m lze vyu\u017e\u00edt nejen kabelov\u00fd internet kan\u00e1l, ale i 2 r\u016fzn\u00e1 SIM karty, a CPE automaticky rekonstruuje IPSec tunel bu\u010f p\u0159es kabelov\u00fd WAN, nebo p\u0159es r\u00e1dio (LTE#1\/LTE#2), \u010d\u00edm\u017e dos\u00e1hneme vysok\u00e9 odolnosti kone\u010dn\u00e9 slu\u017eby.<\/p>\n<p>Zvl\u00e1\u0161tn\u00ed pod\u011bkov\u00e1n\u00ed za p\u0159\u00edpravu tohoto \u010dl\u00e1nku (a vlastn\u011b autor\u016fm t\u011bchto technick\u00fdch \u0159e\u0161en\u00ed) koleg\u016fm z na\u0161eho RnD!<\/p>\n<p>Zdroj: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"cs_CZ\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-21T11:42:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-05T08:59:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Jak se dostat do IPVPN Billa p\u0159es IPSec. \u010c\u00e1st 1 | ProHoster","description":"Ahoj!","canonical_url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"cs_CZ","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442!","og:url":"https:\/\/prohoster.info\/cs\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-21T11:42:28+00:00","article:modified_time":"2026-07-05T08:59:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:13:28","updated":"2022-09-30 17:39:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/89276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/comments?post=89276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/89276\/revisions"}],"predecessor-version":[{"id":182465,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/posts\/89276\/revisions\/182465"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media\/89277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/media?parent=89276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/categories?post=89276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/cs\/wp-json\/wp\/v2\/tags?post=89276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}