{"id":35161,"date":"2019-10-31T22:02:40","date_gmt":"2019-10-31T19:02:40","guid":{"rendered":"https:\/\/prohoster.info\/blog\/sozdanie-ipsec-gre-tunnelya-mezhdu-mikrotik-hex-s-i-juniper-srx-cherez-usb-modem\/"},"modified":"2019-10-31T22:02:40","modified_gmt":"2019-10-31T19:02:40","slug":"sozdanie-ipsec-gre-tunnelya-mezhdu-mikrotik-hex-s-i-juniper-srx-cherez-usb-modem","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sozdanie-ipsec-gre-tunnelya-mezhdu-mikrotik-hex-s-i-juniper-srx-cherez-usb-modem","title":{"rendered":"IPSec GRE tunnel loomine Mikrotik hEX S ja Juniper SRX vahel USB modemiga","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

\u0426\u0435\u043b\u044c<\/h4>\n

\n\u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c VPN Tunnel \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Mikrotik \u0438 Juniper \u043b\u0438\u043d\u0435\u0439\u043a\u0438 SRX.<\/p>\n

\u0427\u0442\u043e \u0438\u043c\u0435\u0435\u043c<\/h4>\n

\n\u0418\u0437 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u043e\u0432 \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430 \u0432\u0438\u043a\u0438, \u043c\u043e\u0434\u0435\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IPSec, \u043d\u0430 \u043d\u0430\u0448 \u0432\u0437\u0433\u043b\u044f\u0434 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u0430\u044f \u0438 \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0430\u044f, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e Mikrotik hEXS.<\/p>\n

USB Modem \u0431\u044b\u043b \u043a\u0443\u043f\u043b\u0435\u043d \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0441\u043e\u0442\u043e\u0432\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435, \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u044b\u043b\u0430 Huawei E3370. \u041d\u0438\u043a\u0430\u043a\u0438\u0435 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u0438 \u043f\u043e \u043e\u0442\u0432\u044f\u0437\u043a\u0438 \u043e\u0442 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u043c\u044b \u043d\u0435 \u043f\u0440\u043e\u0432\u043e\u0434\u0438\u043b\u0438. \u0412\u0441\u0435 \u0448\u0442\u0430\u0442\u043d\u043e\u0435 \u0438 \u043f\u0440\u043e\u0448\u0438\u0442\u043e \u0441\u0430\u043c\u0438\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u043e\u043c.<\/p>\n

\u0412 \u044f\u0434\u0440\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d \u0446\u0435\u043d\u0442\u0440\u0430\u043b\u044c\u043d\u044b\u0439 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440 Juniper SRX240H.
\n<\/a><\/noindex><\/p>\n

\u0427\u0442\u043e \u0443\u0434\u0430\u043b\u043e\u0441\u044c<\/h4>\n

\n\u0423\u0434\u0430\u043b\u043e\u0441\u044c \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u0442\u044c \u0441\u0445\u0435\u043c\u0443 \u0440\u0430\u0431\u043e\u0442\u044b, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0447\u0435\u0440\u0435\u0437 \u0441\u043e\u0442\u043e\u0432\u043e\u0433\u043e \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430, \u043d\u0435 \u0438\u043c\u0435\u044f \u0441\u0442\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u0430, \u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u043e\u043c \u043c\u043e\u0434\u0435\u043c\u0430 \u0441\u043e\u0437\u0434\u0430\u0442\u044c IPsec \u0441\u043e\u0435\u0434\u0438\u043d\u0435\u043d\u0438\u0435 \u0432 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0437\u0430\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u0435\u0442\u0441\u044f GRE Tunnel. <\/p>\n

\u0414\u0430\u043d\u043d\u0430\u044f \u0441\u0445\u0435\u043c\u0430 \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442\u0441\u044f \u0438 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u043d\u0430 USB \u043c\u043e\u0434\u0435\u043c\u0430\u0445 \u0411\u0438\u043b\u0430\u0439\u043d \u0438 \u041c\u0435\u0433\u0430\u0444\u043e\u043d.<\/p>\n

\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0430\u044f: <\/p>\n

\u0412 \u044f\u0434\u0440\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d Juniper SRX240H
\nLocal Address: 192.168.1.1\/24
\nExternal Address: 1.1.1.1\/30
\nGW: 1.1.1.2<\/p>\n

\u0423\u0434\u0430\u043b\u0435\u043d\u043d\u0430\u044f \u0442\u043e\u0447\u043a\u0430<\/p>\n

Mikrotik hEX S
\nLocal Address: 192.168.152.1\/24
\nExternal Address: Dynamic<\/p>\n

\u041d\u0435\u0431\u043e\u043b\u044c\u0448\u0430\u044f \u0434\u0438\u0430\u0433\u0440\u0430\u043c\u043c\u0430 \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0440\u0430\u0431\u043e\u0442\u044b:<\/p>\n

\"\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435
\n
\n\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Juniper SRX240:<\/p>\n

\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e JUNOS Software Release [12.1X46-D82]<\/p>\n

\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Juniper<\/b><\/p>\n

interfaces {\n    ge-0\/0\/0 {\n        description Internet-1;\n        unit 0 {\n            family inet {\n                address 1.1.1.1\/30;\n            }\n        }\n    }\n    gr-0\/0\/0 {\n        unit 1 {\n            description GRE-Tunnel;\n            tunnel {\n                source 172.31.152.2;\n                destination 172.31.152.1;\n            }\n            family inet;    \n    vlan {\n        unit 0 {\n            family inet {\n                address 192.168.1.1\/24;\n            }\n        }\n    st0 {\n        unit 5 {\n            description "Area - 192.168.152.0\/24";\n            family inet {\n                mtu 1400;\n            }\n        }\nrouting-options {\n    static {\n        route 0.0.0.0\/0 next-hop 1.1.1.2;\n        route 192.168.152.0\/24 next-hop gr-0\/0\/0.1;\n        route 172.31.152.0\/30 next-hop st0.5;\n    }\n    router-id 192.168.1.1;\n}\nsecurity {\n    ike {\n        traceoptions {\n            file vpn.log size 256k files 5;\n            flag all;\n        }\n        policy ike-gretunnel {\n            mode aggressive;\n            description area-192.168.152.0;\n            proposal-set standard;\n            pre-shared-key ascii-text "mysecret"; ## SECRET-DATA\n        }\n        gateway gw-gretunnel {\n            ike-policy ike-gretunnel;\n            dynamic inet 172.31.152.1;\n            external-interface ge-0\/0\/0.0;\n            version v2-only;\n        }\n    ipsec {\n        }\n        policy vpn-policy0 {\n            perfect-forward-secrecy {\n                keys group2;\n            }\n            proposal-set standard;\n        }\n        vpn vpn-gretunnel {\n            bind-interface st0.5;\n            df-bit copy;\n            vpn-monitor {\n                optimized;\n                source-interface st0.5;\n                destination-ip 172.31.152.1;\n            }\n            ike {\n                gateway gw-gretunnel;\n                no-anti-replay;\n                ipsec-policy vpn-policy0;\n                install-interval 10;\n            }\n            establish-tunnels immediately;\n        }\n    }\n    policies {  \n        from-zone vpn to-zone vpn {\n            policy st-vpn-vpn {\n                match {\n                    source-address any;\n                    destination-address any;\n                    application any;\n                }\n                then {\n                    permit;\n                    log {\n                        session-init;   \n                        session-close;\n                    }\n                    count;\n                }\n            }\n        }\n        from-zone trust to-zone vpn {\n            policy st-trust-to-vpn {\n                match {\n                    source-address any;\n                    destination-address any;\n                    application any;\n                }\n                then {                  \n                    permit;\n                    log {\n                        session-init;\n                        session-close;\n                    }\n                    count;\n                }\n            }\n        }\n        from-zone vpn to-zone trust {\n            policy st-vpn-to-trust {\n                match {\n                    source-address any;\n                    destination-address any;\n                    application any;\n                }\n                then {\n                    permit;\n                    log {\n                        session-init;\n                        session-close;\n                    }\n                    count;\n                }\n            }\n        }\n    zones {                             \n        security-zone trust {\n                vlan.0 {\n                    host-inbound-traffic {\n                        system-services {\n                            all;\n                        }\n                        protocols {\n                            all;\n                        }\n                    }\n                }\n        security-zone vpn {\n            interfaces {\n                st0.5 {\n                    host-inbound-traffic {\n                        protocols {\n                            ospf;\n                        }\n                    }\n                }\n                gr-0\/0\/0.1 {\n                    host-inbound-traffic {\n                        system-services {\n                            all;\n                        }\n                        protocols {\n                            all;        \n                        }\n                    }\n                }\n        security-zone untrust {\n            interfaces {\n                ge-0\/0\/0.0 {\n                    host-inbound-traffic {\n                        system-services {\n                            ping;\n                            ssh;\n                            ike;\n                        }\n                    }\n                }\n            }\n        }\nvlans {                                 \n    vlan-local {\n        vlan-id 5;\n        l3-interface vlan.1;\n    }<\/code><\/pre>\n
\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Mikrotik hEX S:<\/p>\n
\u0412\u0435\u0440\u0441\u0438\u044f \u041f\u041e RouterOS [6.44.3]<\/p>\n
\u041a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f Mikrotik<\/b><\/p>\n
\/ip address\nadd address=172.31.152.1\/24 comment=GRE-Tunnel interface=gre-srx network=172.31.152.0\nadd address=192.168.152.1\/24 comment=Local-Area interface=bridge network=192.168.152.0\n\n\/interface gre\nadd comment=GRE-Tunnel-SRX-HQ !keepalive local-address=172.31.152.1 name=gre-srx remote-address=172.31.152.2\n\n\/ip ipsec policy group\nadd name=srx-gre\n\n\/ip ipsec profile\nadd dh-group=modp1024 dpd-interval=10s name=profile1\n\n\/ip ipsec peer\nadd address=1.1.1.1\/32 comment=GRE-SRX exchange-mode=aggressive local-address=172.31.152.1 name=peer2 profile=profile1\n\n\/ip ipsec proposal\nset [ find default=yes ] enc-algorithms=aes-256-cbc,aes-128-cbc,3des\nadd enc-algorithms=aes-128-cbc,3des name=proposal1\n\n\/ip route\nadd distance=10 dst-address=192.168.0.0\/16 gateway=gre-srx\n\n\/ip ipsec identity\nadd comment=IPSec-GRE my-id=address:172.31.152.1 peer=peer2 policy-template-group=srx-gre secret=mysecret\n\n\/ip ipsec policy\nset 0 disabled=yes\nadd dst-address=0.0.0.0\/0 proposal=proposal1 sa-dst-address=1.1.1.1 sa-src-address=172.31.152.1 src-address=172.31.152.0\/30 tunnel=yes\n\n\/ip address\nadd address=172.31.152.1\/24 comment=GRE-Tunnel interface=gre-srx network=172.31.152.0\nadd address=192.168.152.1\/24 comment=Local-Area interface=bridge network=192.168.152.0\n<\/code><\/pre>\n
\n\u0420\u0435\u0437\u0443\u043b\u044c\u0442\u0430\u0442: 
\n\u0421\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b Juniper SRX<\/p>\n
netscreen@srx240> ping 192.168.152.1  \nPING 192.168.152.1 (192.168.152.1): 56 data bytes\n64 bytes from 192.168.152.1: icmp_seq=0 ttl=64 time=29.290 ms\n64 bytes from 192.168.152.1: icmp_seq=1 ttl=64 time=28.126 ms\n64 bytes from 192.168.152.1: icmp_seq=2 ttl=64 time=26.775 ms\n64 bytes from 192.168.152.1: icmp_seq=3 ttl=64 time=25.401 ms\n^C\n--- 192.168.152.1 ping statistics ---\n4 packets transmitted, 4 packets received, 0% packet loss\nround-trip min\/avg\/max\/stddev = 25.401\/27.398\/29.290\/1.457 ms<\/code><\/pre>\n
\n\u0421\u043e \u0441\u0442\u043e\u0440\u043e\u043d\u044b Mikrotik<\/p>\n
net[admin@GW-LTE-] > ping 192.168.1.1 \n  SEQ HOST                                     SIZE TTL TIME  STATUS                                                                                                                                               \n    0 192.168.1.1                                56  64 34ms \n    1 192.168.1.1                                56  64 40ms \n    2 192.168.1.1                                56  64 37ms \n    3 192.168.1.1                                56  64 40ms \n    4 192.168.1.1                                56  64 51ms \n    sent=5 received=5 packet-loss=0% min-rtt=34ms avg-rtt=40ms max-rtt=51ms <\/code><\/pre>\n
<\/p>\n
\u0412\u044b\u0432\u043e\u0434\u044b<\/h3>\n
\n\u041f\u043e\u0441\u043b\u0435 \u043f\u0440\u043e\u0434\u0435\u043b\u0430\u043d\u043d\u043e\u0439 \u0440\u0430\u0431\u043e\u0442\u044b \u043c\u0443 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u0442\u0430\u0431\u0438\u043b\u044c\u043d\u044b\u0439 VPN<\/a> Tunnel, \u0438\u0437 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0439 \u0441\u0435\u0442\u0438 \u043d\u0430\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432\u0441\u0435 \u0441\u0435\u0442\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043d\u0430\u0445\u043e\u0434\u0438\u0442\u044c\u0441\u044f \u0437\u0430 juniper, \u0438 \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043e\u0431\u0440\u0430\u0442\u043d\u043e.<\/p>\n
\u041d\u0435 \u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0443\u044e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u0432 \u0434\u0430\u043d\u043d\u043e\u0439 \u0441\u0445\u0435\u043c\u0435 IKE2, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u043b\u0430 \u0441\u0438\u0442\u0443\u0430\u0446\u0438\u044f \u0447\u0442\u043e \u043f\u043e\u0441\u043b\u0435 \u043f\u0435\u0440\u0435\u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0438 \u0442\u043e\u0433\u043e \u0438\u043b\u0438 \u0438\u043d\u043e\u0433\u043e \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043d\u0435 \u043f\u043e\u0434\u043d\u0438\u043c\u0430\u0435\u0442\u0441\u044f IPSec.
\n
\u0418\u0441\u0442\u043e\u0447\u043d\u0438\u043a: habr.com<\/a><\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0426\u0435\u043b\u044c \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c VPN Tunnel \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Mikrotik \u0438 Juniper \u043b\u0438\u043d\u0435\u0439\u043a\u0438 SRX. \u0427\u0442\u043e \u0438\u043c\u0435\u0435\u043c \u0418\u0437 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u043e\u0432 \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430 \u0432\u0438\u043a\u0438, \u043c\u043e\u0434\u0435\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IPSec, \u043d\u0430 \u043d\u0430\u0448 \u0432\u0437\u0433\u043b\u044f\u0434 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u0430\u044f \u0438 \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0430\u044f, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e Mikrotik hEXS. USB Modem \u0431\u044b\u043b \u043a\u0443\u043f\u043b\u0435\u043d \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0441\u043e\u0442\u043e\u0432\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435, \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u044b\u043b\u0430 Huawei […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-35161","post","type-post","status-publish","format-standard","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47IPSec GRE tunneli loomine Mikrotik hEX S ja Juniper SRX vahel USB modemi kaudu | ProHoster","description":"Eesm\u00e4rk On vaja korraldada VPN tunnel kahe seadme vahel, nagu Mikrotik ja Juniper SRX seeria. Mida me omame Valisime Mikrotiku lehelt mudeli, mis suudab toetada IPSec riistvaralist kr\u00fcpteerimist, meie arvates on see piisavalt kompaktne ja odav, nimelt Mikrotik hEXS. USB modem osteti l\u00e4himast mobiilioperaatorist, mudel oli Huawei.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sozdanie-ipsec-gre-tunnelya-mezhdu-mikrotik-hex-s-i-juniper-srx-cherez-usb-modem","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0421\u043e\u0437\u0434\u0430\u043d\u0438\u0435 IPSec GRE \u0442\u0443\u043d\u043d\u0435\u043b\u044f \u043c\u0435\u0436\u0434\u0443 Mikrotik hEX S \u0438 Juniper SRX \u0447\u0435\u0440\u0435\u0437 USB \u041c\u043e\u0434\u0435\u043c | ProHoster","og:description":"\u0426\u0435\u043b\u044c \u041d\u0435\u043e\u0431\u0445\u043e\u0434\u0438\u043c\u043e \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u0442\u044c VPN Tunnel \u043c\u0435\u0436\u0434\u0443 \u0434\u0432\u0443\u043c\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u043c\u0438, \u0442\u0430\u043a\u0438\u0445 \u043a\u0430\u043a Mikrotik \u0438 Juniper \u043b\u0438\u043d\u0435\u0439\u043a\u0438 SRX. \u0427\u0442\u043e \u0438\u043c\u0435\u0435\u043c \u0418\u0437 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u043e\u0432 \u0432\u044b\u0431\u0440\u0430\u043b\u0438 \u043d\u0430 \u0441\u0430\u0439\u0442\u0435 \u043c\u0438\u043a\u0440\u043e\u0442\u0438\u043a\u0430 \u0432\u0438\u043a\u0438, \u043c\u043e\u0434\u0435\u043b\u044c \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0441\u043c\u043e\u0436\u0435\u0442 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u0438\u0432\u0430\u0442\u044c \u0430\u043f\u043f\u0430\u0440\u0430\u0442\u043d\u043e\u0435 \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 IPSec, \u043d\u0430 \u043d\u0430\u0448 \u0432\u0437\u0433\u043b\u044f\u0434 \u043e\u043d\u0430 \u043e\u043a\u0430\u0437\u0430\u043b\u0430\u0441\u044c \u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e \u043a\u043e\u043c\u043f\u0430\u043a\u0442\u043d\u0430\u044f \u0438 \u043d\u0435\u0434\u043e\u0440\u043e\u0433\u0430\u044f, \u0430 \u0438\u043c\u0435\u043d\u043d\u043e Mikrotik hEXS. USB Modem \u0431\u044b\u043b \u043a\u0443\u043f\u043b\u0435\u043d \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u043c \u0441\u043e\u0442\u043e\u0432\u043e\u043c \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0435, \u043c\u043e\u0434\u0435\u043b\u044c \u0431\u044b\u043b\u0430 Huawei","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/sozdanie-ipsec-gre-tunnelya-mezhdu-mikrotik-hex-s-i-juniper-srx-cherez-usb-modem","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:02:40+00:00","article:modified_time":"2019-10-31T19:02:40+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"35161","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-04 14:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 02:09:53","updated":"2026-02-04 14:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35161","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=35161"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35161\/revisions"}],"predecessor-version":[{"id":156671,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/35161\/revisions\/156671"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=35161"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=35161"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=35161"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}