{"id":91210,"date":"2020-08-10T01:42:13","date_gmt":"2020-08-09T23:42:13","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii"},"modified":"2020-08-10T01:42:13","modified_gmt":"2020-08-09T23:42:13","slug":"1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii","status":"publish","type":"post","link":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii","title":{"rendered":"1.5 schemes for domestic IPsec VPN. Testing demo versions","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/34026e07ff4a1fd64227224ca4c96f0d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<\/p>\n<h3>Situation<\/h3>\n<p>\nI received a demo version of S-Terra VPN products version 4.3 for three months. I want to figure out if my engineering life will be easier after transitioning to the new version.<\/p>\n<p>Today it\u2019s easy, one packet of 3-in-1 instant coffee should be enough. I'll explain how to obtain demo versions. I will try to compile GRE-over-IPsec and IPsec-over-GRE schemes.<br \/>\n<noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<h3>How to obtain a demo version<\/h3>\n<p>\n<img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/0c5482e01684b8c7b3e35fb9c473b475.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nAccording to the diagram, to obtain a demo version you need to:<\/p>\n<ul>\n<li>Write an email to presale@s-terra.ru from a corporate address;<\/li>\n<li>In the email, specify your organization's TIN;<\/li>\n<li>List the products and their quantities.<\/li>\n<\/ul>\n<p>\nDemo versions are valid for three months. The vendor does not restrict their functionality. <\/p>\n<h3>Deploying the image<\/h3>\n<p>\nThe demo version of the security gateway is a virtual machine image. I use VMWare Workstation. A complete list of supported hypervisors and virtualization environments is available on the vendor's website. <\/p>\n<p>Before starting active actions, please note that the virtual machine image does not have any network interfaces by default: <\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/b1ffa5f27aae9744fc24a91b709794d6.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nThe logic is clear, the user must add as many interfaces as needed. I will add four right away:<\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/626f2e1ba04babd37373298d650b210d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nNow I am starting the virtual machine. Immediately after launching, the gateway requires a login and password. <\/p>\n<blockquote><p>In S-Terra Gateway, there are several consoles with different accounts. I will count their number in a separate article. For now:<br \/>\n<code>Login as: administrator<br \/>\nPassword: s-terra<\/code><\/p><\/blockquote>\n<p>\nI initialize the gateway. Initialization is a sequence of actions: entering the license, configuring the biological random number generator (the keyboard trainer \u2013 my record is 27 seconds) and creating a network interface map.<\/p>\n<h3>Network interface map. It has become easier<\/h3>\n<p>\nVersion 4.2 greeted active users with messages:<\/p>\n<p><code>Starting IPsec daemon... failed<br \/>\nERROR: Could not establish connection with daemon<\/code><\/p>\n<p><i>An active user (according to an anonymous engineer) is a user who is able to set anything up quickly and without documentation.<\/i><\/p>\n<p>Something was going wrong, even before attempts to configure the IP address on the interface. It all comes down to the network interface map. I needed to perform:<\/p>\n<p><code>\/bin\/netifcfg enum &gt; \/home\/map<br \/>\n\/bin\/netifcfg map \/home\/map<br \/>\nservice networking restart<\/code><\/p>\n<p>As a result, a network interface map is created, which contains the mapping of physical interface names (0000:02:03.0) to their logical designations in the operating system (eth0) and Cisco-like console (FastEthernet0\/0):<\/p>\n<p><code>#Unique ID iface type OS name Cisco-like name<\/p>\n<p>0000:02:03.0 phye eth0 FastEthernet0\/0<\/code><\/p>\n<p>Logical designations of interfaces are called aliases. Aliases are stored in the file \/etc\/ifaliases.cf. <br \/>\nIn version 4.3, when the virtual machine is first launched, the interface map is created automatically. If you change the number of network interfaces in the virtual machine, please recreate the interface map:<\/p>\n<p><code>\/bin\/netifcfg enum &gt; \/home\/map<br \/>\n\/bin\/netifcfg map \/home\/map<br \/>\nsystemctl restart networking<\/code><\/p>\n<h3>Diagram 1: GRE-over-IPsec<\/h3>\n<p>\nI am deploying two virtual gateways and connecting them as shown in the figure:<\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/bf3b085f6874d04043511ef262979a39.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Step 1. Configuring IP addresses and routes<\/b><\/p>\n<pre><code class=\"plaintext\">VG1(config) #\ninterface fa0\/0\nip address 172.16.1.253 255.255.255.0\nno shutdown\ninterface fa0\/1\nip address 192.168.1.253 255.255.255.0\nno shutdown\nip route 0.0.0.0 0.0.0.0 172.16.1.254<\/code><\/pre>\n<p><\/p>\n<pre><code class=\"plaintext\">VG2(config) #\ninterface fa0\/0\nip address 172.16.1.254 255.255.255.0\nno shutdown\ninterface fa0\/1\nip address 192.168.2.254 255.255.255.0\nno shutdown\nip route 0.0.0.0 0.0.0.0 172.16.1.253<\/code><\/pre>\n<p>\nChecking IP connectivity:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# ping 172.16.1.254 -c 4\nPING 172.16.1.254 (172.16.1.254) 56(84) bytes of data.\n64 bytes from 172.16.1.254: icmp_seq=1 ttl=64 time=0.545 ms\n64 bytes from 172.16.1.254: icmp_seq=2 ttl=64 time=0.657 ms\n64 bytes from 172.16.1.254: icmp_seq=3 ttl=64 time=0.687 ms\n64 bytes from 172.16.1.254: icmp_seq=4 ttl=64 time=0.273 ms\n\n--- 172.16.1.254 ping statistics ---\n4 packets transmitted, 4 received, 0% packet loss, time 3005ms\nrtt min\/avg\/max\/mdev = 0.273\/0.540\/0.687\/0.164 ms<\/code><\/pre>\n<p><b>Step 2. Configuring GRE<\/b><\/p>\n<p>I will take the GRE configuration example from the official scripts. I create the gre1 file in the \/etc\/network\/interfaces.d directory with the following content.<\/p>\n<p>For VG1:<\/p>\n<pre><code class=\"plaintext\">auto gre1\niface gre1 inet static\naddress 1.1.1.1\nnetmask 255.255.255.252\npre-up ip tunnel add gre1 mode gre remote 172.16.1.254 local 172.16.1.253 key 1 ttl 64 tos inherit\npre-up ethtool -K gre1 tx off &gt; \/dev\/null\npre-up ip link set gre1 mtu 1400\npost-down ip link del gre1<\/code><\/pre>\n<p>\nFor VG2:<\/p>\n<pre><code class=\"plaintext\">auto gre1\niface gre1 inet static\naddress 1.1.1.2\nnetmask 255.255.255.252\npre-up ip tunnel add gre1 mode gre remote 172.16.1.253 local 172.16.1.254 key 1 ttl 64 tos inherit\npre-up ethtool -K gre1 tx off &gt; \/dev\/null\npre-up ip link set gre1 mtu 1400\npost-down ip link del gre1<\/code><\/pre>\n<p>\nBringing the interface up in the system:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# ifup gre1\nroot@VG2:~# ifup gre1<\/code><\/pre>\n<p>\nChecking:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# ip address show\n8: gre1@NONE:  mtu 1400 qdisc noqueue state UNKNOWN group default qlen 1\n    link\/gre 172.16.1.253 peer 172.16.1.254\n    inet 1.1.1.1\/30 brd 1.1.1.3 scope global gre1\n       valid_lft forever preferred_lft forever\n\nroot@VG1:~# ip tunnel show\ngre0: gre\/ip remote any local any ttl inherit nopmtudisc\ngre1: gre\/ip remote 172.16.1.254 local 172.16.1.253 ttl 64 tos inherit key 1<\/code><\/pre>\n<p>\nIn the C-Terra Gateway, there is a built-in packet sniffer \u2014 tcpdump. I will record a traffic dump into a pcap file:<\/p>\n<pre><code class=\"plaintext\">root@VG2:~# tcpdump -i eth0 -w \/home\/dump.pcap<\/code><\/pre>\n<p>\nStarting ping between GRE interfaces:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# ping 1.1.1.2 -c 4\nPING 1.1.1.2 (1.1.1.2) 56(84) bytes of data.\n64 bytes from 1.1.1.2: icmp_seq=1 ttl=64 time=0.918 ms\n64 bytes from 1.1.1.2: icmp_seq=2 ttl=64 time=0.850 ms\n64 bytes from 1.1.1.2: icmp_seq=3 ttl=64 time=0.918 ms\n64 bytes from 1.1.1.2: icmp_seq=4 ttl=64 time=0.974 ms\n\n--- 1.1.1.2 ping statistics ---\n4 packets transmitted, 4 received, 0% packet loss, time 3006ms\nrtt min\/avg\/max\/mdev = 0.850\/0.915\/0.974\/0.043 ms<\/code><\/pre>\n<p>\nThe GRE tunnel is active and functioning:<\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/0b56c02e36d1dd17b42e3fadcffb6193.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\n<b>Step 3. Encrypting GRE with GOST<\/b><\/p>\n<p>Setting the identification type \u2014 by address. Authentication using a predefined key (according to the Rules of Use, digital certificates should be used):<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\ncrypto isakmp identity address\ncrypto isakmp key KEY address 172.16.1.254<\/code><\/pre>\n<p>\nSetting IPsec Phase I parameters:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\ncrypto isakmp policy 1\nencr gost\nhash gost3411-256-tc26\nauth pre-share\ngroup vko2<\/code><\/pre>\n<p>\nSetting IPsec Phase II parameters:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\ncrypto ipsec transform-set TSET esp-gost28147-4m-imit\nmode tunnel<\/code><\/pre>\n<p>\nCreating an access list for encryption. Target traffic \u2014 GRE:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\nip access-list extended LIST\npermit gre host 172.16.1.253 host 172.16.1.254<\/code><\/pre>\n<p>\nCreating a crypto map and binding it to the WAN interface:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\ncrypto map CMAP 1 ipsec-isakmp\nmatch address LIST\nset transform-set TSET\nset peer 172.16.1.253\ninterface fa0\/0\n  crypto map CMAP<\/code><\/pre>\n<p>\nFor VG2, the configuration is mirrored, differences:<\/p>\n<pre><code class=\"plaintext\">VG2(config)#\ncrypto isakmp key KEY address 172.16.1.253\nip access-list extended LIST\npermit gre host 172.16.1.254 host 172.16.1.253\ncrypto map CMAP 1 ipsec-isakmp\nset peer 172.16.1.254<\/code><\/pre>\n<p>\nChecking:<\/p>\n<pre><code class=\"plaintext\">root@VG2:~# tcpdump -i eth0 -w \/home\/dump2.pcap<\/code><\/pre>\n<pre><code class=\"plaintext\">root@VG1:~# ping 1.1.1.2 -c 4\nPING 1.1.1.2 (1.1.1.2) 56(84) bytes of data.\n64 bytes from 1.1.1.2: icmp_seq=1 ttl=64 time=1128 ms\n64 bytes from 1.1.1.2: icmp_seq=2 ttl=64 time=126 ms\n64 bytes from 1.1.1.2: icmp_seq=3 ttl=64 time=1.07 ms\n64 bytes from 1.1.1.2: icmp_seq=4 ttl=64 time=1.12 ms\n\n--- 1.1.1.2 ping statistics ---\n4 packets transmitted, 4 received, 0% packet loss, time 3006ms\nrtt min\/avg\/max\/mdev = 1.077\/314.271\/1128.419\/472.826 ms, pipe 2\n<\/code><\/pre>\n<p>\nISAKMP\/IPsec statistics:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# sa_mgr show\nISAKMP sessions: 0 initiated, 0 responded\n\nISAKMP connections:\nNum Conn-id (Local Addr,Port)-(Remote Addr,Port) State Sent Rcvd\n1 1 (172.16.1.253,500)-(172.16.1.254,500) active 1086 1014\n\nIPsec connections:\nNum Conn-id (Local Addr,Port)-(Remote Addr,Port) Protocol Action Type Sent Rcvd\n1 1 (172.16.1.253,*)-(172.16.1.254,*) 47 ESP tunn 480 480<\/code><\/pre>\n<p>\nThere are no GRE packet entries in the traffic dump:<\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/cf96619cb4224cbf4da7c15db73587c7.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nConclusion: the GRE-over-IPsec scheme is working correctly.<\/p>\n<h3>Diagram 1.5: IPsec-over-GRE<\/h3>\n<p>\nI do not plan to use IPsec-over-GRE in the network. I'm assembling it just because I want to. <\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/98909280d82184278e23f2c38b90947d.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nTo deploy the GRE-over-IPsec scheme backwards, you need to:<\/p>\n<ul>\n<li>Correct the access list for encryption \u2013 target traffic from LAN1 to LAN2 and vice versa;<\/li>\n<li>Set up routing through GRE;<\/li>\n<li>Bind the crypto map to the GRE interface.<\/li>\n<\/ul>\n<p>\nBy default, there is no GRE interface in the Cisco-like gateway console. It only exists in the operating system. <\/p>\n<p>Adding the GRE interface to the Cisco-like console. For this, I edit the file \/etc\/ifaliases.cf:<\/p>\n<pre><code class=\"plaintext\">interface (name=\"FastEthernet0\/0\" pattern=\"eth0\")\ninterface (name=\"FastEthernet0\/1\" pattern=\"eth1\")\ninterface (name=\"FastEthernet0\/2\" pattern=\"eth2\")\ninterface (name=\"FastEthernet0\/3\" pattern=\"eth3\")\ninterface (name=\"Tunnel0\" pattern=\"gre1\")\ninterface (name=\"default\" pattern=\"*\")<\/code><\/pre>\n<p>\nwhere gre1 is the name of the interface in the operating system, Tunnel0 is the name of the interface in the Cisco-like console.<\/p>\n<p>Recalculating the file hash:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# integr_mgr calc -f \/etc\/ifaliases.cf\n\nSUCCESS:  Operation was successful.<\/code><\/pre>\n<p>\nNow the Tunnel0 interface has appeared in the Cisco-like console:<\/p>\n<pre><code class=\"plaintext\">VG1# show run\ninterface Tunnel0\nip address 1.1.1.1 255.255.255.252\nmtu 1400<\/code><\/pre>\n<p>\nCorrecting the access list for encryption:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\nip access-list extended LIST\npermit ip 192.168.1.0 0.0.0.255 192.168.3.0 0.0.0.255<\/code><\/pre>\n<p>\nConfiguring routing through GRE:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\nno ip route 0.0.0.0 0.0.0.0 172.16.1.254\nip route 192.168.3.0 255.255.255.0 1.1.1.2<\/code><\/pre>\n<p>\nRemoving the crypto card from Fa0\/0 and binding it to the GRE interface:<\/p>\n<pre><code class=\"plaintext\">VG1(config)#\ninterface Tunnel0\ncrypto map CMAP<\/code><\/pre>\n<p>\nFor VG2, similarly.<\/p>\n<p>Checking:<\/p>\n<pre><code class=\"plaintext\">root@VG2:~# tcpdump -i eth0 -w \/home\/dump3.pcap<\/code><\/pre>\n<p><\/p>\n<pre><code class=\"plaintext\">root@VG1:~# ping 192.168.2.254 -I 192.168.1.253 -c 4\nPING 192.168.2.254 (192.168.2.254) from 192.168.1.253 : 56(84) bytes of data.\n64 bytes from 192.168.2.254: icmp_seq=1 ttl=64 time=492 ms\n64 bytes from 192.168.2.254: icmp_seq=2 ttl=64 time=1.08 ms\n64 bytes from 192.168.2.254: icmp_seq=3 ttl=64 time=1.06 ms\n64 bytes from 192.168.2.254: icmp_seq=4 ttl=64 time=1.07 ms\n\n--- 192.168.2.254 ping statistics ---\n4 packets transmitted, 4 received, 0% packet loss, time 3006ms\nrtt min\/avg\/max\/mdev = 1.064\/124.048\/492.972\/212.998 ms<\/code><\/pre>\n<p>ISAKMP\/IPsec statistics:<\/p>\n<pre><code class=\"plaintext\">root@VG1:~# sa_mgr show\nISAKMP sessions: 0 initiated, 0 responded\n\nISAKMP connections:\nNum Conn-id (Local Addr,Port)-(Remote Addr,Port) State Sent Rcvd\n1 2 (172.16.1.253,500)-(172.16.1.254,500) active 1094 1022\n\nIPsec connections:\nNum Conn-id (Local Addr,Port)-(Remote Addr,Port) Protocol Action Type Sent Rcvd\n1 2 (192.168.1.0-192.168.1.255,*)-(192.168.2.0-192.168.2.255,*) * ESP tunn 352 352<\/code><\/pre>\n<p>\nIn the traffic dump, ESP packets encapsulated in GRE:<\/p>\n<p><img decoding=\"async\" alt=\"1.5 schemes for domestic IPsec VPN. Testing demo versions\" src=\"\/wp-content\/uploads\/2020\/08\/068865544de126a1673c6fb7b6367ffd.jpeg\" style=\"display:block;margin: 0 auto;\" \/><br \/>\n<br \/>\nOutput: IPsec-over-GRE is functioning correctly.<\/p>\n<h3>Summary<\/h3>\n<p>\nOne cup of coffee was enough. I drafted an instruction for obtaining a demo version. Configured GRE-over-IPsec and deployed it in reverse.<\/p>\n<p>The network interface map in version 4.3 is automatic! Testing further.<\/p>\n<p><i>Anonymous Engineer<br \/>\nt.me\/anonimous_engineer<\/i><br \/>\n<br \/>Source: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/post\/514190\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u0421\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u042f \u043f\u043e\u043b\u0443\u0447\u0438\u043b \u0434\u0435\u043c\u043e\u0432\u0435\u0440\u0441\u0438\u044e \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u043e\u0432 \u0421-\u0422\u0435\u0440\u0440\u0430 VPN \u0432\u0435\u0440\u0441\u0438\u0438 4.3 \u043d\u0430 \u0442\u0440\u0438 \u043c\u0435\u0441\u044f\u0446\u0430. \u0425\u043e\u0447\u0443 \u0440\u0430\u0437\u043e\u0431\u0440\u0430\u0442\u044c\u0441\u044f, \u0441\u0442\u0430\u043d\u0435\u0442 \u043b\u0438 \u043c\u043e\u044f \u0438\u043d\u0436\u0435\u043d\u0435\u0440\u043d\u0430\u044f \u0436\u0438\u0437\u043d\u044c \u043b\u0435\u0433\u0447\u0435 \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0430 \u043d\u0430 \u043d\u043e\u0432\u0443\u044e \u0432\u0435\u0440\u0441\u0438\u044e. \u0421\u0435\u0433\u043e\u0434\u043d\u044f \u043d\u0435 \u0441\u043b\u043e\u0436\u043d\u043e, \u043e\u0434\u043d\u043e\u0433\u043e \u043f\u0430\u043a\u0435\u0442\u0438\u043a\u0430 \u0440\u0430\u0441\u0442\u0432\u043e\u0440\u0438\u043c\u043e\u0433\u043e \u043a\u043e\u0444\u0435 3 \u0432 1 \u0434\u043e\u043b\u0436\u043d\u043e \u0445\u0432\u0430\u0442\u0438\u0442\u044c. \u0420\u0430\u0441\u0441\u043a\u0430\u0436\u0443, \u043a\u0430\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u0432\u0435\u0440\u0441\u0438\u0438. \u041f\u043e\u043f\u0440\u043e\u0431\u0443\u044e \u0441\u043e\u0431\u0440\u0430\u0442\u044c \u0441\u0445\u0435\u043c\u044b GRE-over-IPsec \u0438 IPsec-over-GRE. \u041a\u0430\u043a \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u0434\u0435\u043c\u043e\u0432\u0435\u0440\u0441\u0438\u044e \u0418\u0437 \u0440\u0438\u0441\u0443\u043d\u043a\u0430 \u0441\u043b\u0435\u0434\u0443\u0435\u0442, \u0447\u0442\u043e\u0431\u044b \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":91211,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-91210","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.2 - aioseo.com -->\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.2\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd471.5 \u0441\u0445\u0435\u043c\u044b \u043d\u0430 \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c IPsec VPN. \u0422\u0435\u0441\u0442\u0438\u0440\u0443\u044e \u0434\u0435\u043c\u043e\u0432\u0435\u0440\u0441\u0438\u0438 | ProHoster\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-08-09T23:42:13+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-08-09T23:42:13+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd471.5 schemes on domestic IPsec VPN. Testing demo versions | ProHoster","description":"","canonical_url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"en_US","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd471.5 \u0441\u0445\u0435\u043c\u044b \u043d\u0430 \u043e\u0442\u0435\u0447\u0435\u0441\u0442\u0432\u0435\u043d\u043d\u043e\u043c IPsec VPN. \u0422\u0435\u0441\u0442\u0438\u0440\u0443\u044e \u0434\u0435\u043c\u043e\u0432\u0435\u0440\u0441\u0438\u0438 | ProHoster","og:url":"https:\/\/prohoster.info\/en\/blog\/administrirovanie\/1-5-shemy-na-otechestvennom-ipsec-vpn-testiruyu-demoversii","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-08-09T23:42:13+00:00","article:modified_time":"2020-08-09T23:42:13+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"91210","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 12:32:22","updated":"2022-09-28 01:47:27","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/91210","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/comments?post=91210"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/posts\/91210\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media\/91211"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/media?parent=91210"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/categories?post=91210"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/en\/wp-json\/wp\/v2\/tags?post=91210"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}