{"id":89276,"date":"2020-07-21T13:42:28","date_gmt":"2020-07-21T11:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1"},"modified":"2026-07-05T10:59:44","modified_gmt":"2026-07-05T08:59:44","slug":"kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","title":{"rendered":"Kuidas p\u00e4\u00e4seda IPVPN Bileini kaudu IPSeciga. Osa 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Tere! V <a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/498450\/\" rel=\"nofollow\">eelnevas postituses<\/a> kirjeldasin meie MultiSIM teenuse toimimist osas <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/rezervirovanie-internet-soedineniia\/?utm_source=habr\" rel=\"nofollow\">reserveerimine<\/a> ja <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/obedinenie-mobilnih-setey\/?utm_source=habr\" rel=\"nofollow\">tasakaalustamine<\/a> kanalid. Nagu varem mainitud, \u00fchendame kliente v\u00f5rku VPN-i kaudu ja t\u00e4na r\u00e4\u00e4gin natuke rohkem VPN-ist ja meie v\u00f5imalustest selle valdkonnas.<\/p>\n<p>Alustuseks tuleb m\u00e4rkida, et meil, kui sideoperandil, on oma suur MPLS-v\u00f5rk, mis on fikseeritud side klientide jaoks jagatud kaheks peamiseks segmendiks \u2014 see, mida kasutatakse otse Internetti p\u00e4\u00e4semiseks, ja see, mida kasutatakse isoleeritud v\u00f5rkude loomiseks \u2014 ja just selle MPLS-segmendi kaudu liigub IPVPN (L3 OSI) ja VPLAN (L2 OSI) liiklus meie \u00e4riklientide jaoks.<\/p>\n<p><a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\" rel=\"nofollow\"><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/b5b3d5c28266d1916b7ac93e94d2fe5b.jpg\" alt=\"Kuidas p\u00e4\u00e4seda IPVPN Bileini kaudu IPSeciga. Osa 1\" \/><\/a><a rel=\"nofollow\" name=\"habracut\"><\/a><br \/>\nTavaliselt toimub kliendi \u00fchendamine j\u00e4rgmisel viisil.<\/p>\n<p>Kliendi b\u00fcrood \u00fchendatakse l\u00e4hima \u00e4ri\u00fchingu tarnekeskuse (MEN, PPL, BSS, FTTB jne) kaudu juurdep\u00e4\u00e4suliiniga, mille kaudu kanal suunatakse vastava RE-MPLS ruuteri kaudu transiidiv\u00f5rku, kust me selle suuname kliendi jaoks loodud VRF-i, arvestades liiklusprofiili, mis on kliendile vajalik (profiili sildid valitakse iga juurpordi jaoks, tuginedes ip precedence v\u00e4\u00e4rtustele 0, 1, 3, 5).<\/p>\n<p>Kui mingil p\u00f5hjusel ei suuda me kliendile viimast miili korralikult korraldada, n\u00e4iteks kui kliendi b\u00fcroo asub \u00e4rikeskuses, kus eelistatakse teist teenusepakkujat, v\u00f5i kui meie juurdep\u00e4\u00e4supunkti ei ole l\u00e4heduses, pidi klient varem looma mitu IPVPN-v\u00f5rku erinevate teenusepakkujatega (mis ei ole hindade j\u00e4rgi k\u00f5ige kasulikum arhitektuur) v\u00f5i iseseisvalt lahendama probleemid juurdep\u00e4\u00e4s korraldamisega oma VRF-ile Interneti-v\u00f5rgus.<\/p>\n<p>Paljud tegid seda IPVPN-interneti v\u00e4rava paigaldamisega \u2014 paigaldasid piiri ruuteri (riistvara v\u00f5i mingisuguse Linuxi-p\u00f5hise lahenduse), \u00fchendasid \u00fche pordi IPVPN-kanaliga ja teise Interneti-kanaliga, ning k\u00e4ivitasid sellel oma <a href=\"https:\/\/prohoster.info\/et\/vpn\/\">VPN-serveri<\/a> ja \u00fctles, et nad j\u00e4tavad kasutajad \u00fcmber omaenda VPN-silla. Loomulikult loob selline lahendus ka laenguid: sarnast infrastruktuuri tuleb osata \u00fcles ehitada ja mis k\u00f5ige ebamugavam \u2014 kasutada ja arendada.<\/p>\n<p>Elu meie klientidele lihtsustamiseks oleme seadnud \u00fcles centraliseeritud VPN-hubi ja korraldanud IPSeci kaudu Interneti-\u00fchenduse toe, mis t\u00e4hendab, et n\u00fc\u00fcd piisab klientidel ainult oma ruuteri seadistamisest meie VPN-hubi t\u00f6\u00f6ks IPSec-tunneli kaudu igasuguse avaliku Interneti kaudu, ja suuname selle kliendi liikluse tema VRF-i.<\/p>\n<h2>Kellele see sobib<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li>Neile, kellel on juba suur IPVPN-v\u00f5rk ja kes vajavad uute \u00fchenduste loomist kiirelt.<\/li>\n<li>K\u00f5igile neile, kes soovivad mingil p\u00f5hjusel suunata osa liiklust avalikust Internetist IPVPN-i, kuid on varem kokku puutunud tehniliste piirangutega, mis on seotud mitme teenusepakkujaga.<\/li>\n<li>Neile, kellel on hetkel mitu eraldiseisvat VPN-v\u00f5rku erinevatelt teenusepakkujatelt. On kliente, kellel on edukalt korraldatud IPVPN nii Beeline'i, Mega\u0444\u043e\u043d'i kui ka Rostelecom'i jms kaudu. Lihtsamaks muutmiseks v\u00f5ib j\u00e4\u00e4da ainult meie \u00fchise lahenduse juurde. <a href=\"https:\/\/prohoster.info\/et\/vpn\/\">VPN<\/a>, k\u00f5ik muud operaatorite kanalid tuleb suunata internetti, mille j\u00e4rel saab \u00fchendada Beline IPVPN-i IPSec-i ja nende operaatorite internetti.<\/li>\n<li>Neile, kellel on juba IPVPN-v\u00f5rk, mis on kattuvad Internetiga.<\/li>\n<\/ul>\n<p>Kui k\u00f5ik meie juures \u00fcles seada, saavad kliendid t\u00e4ielikku VPN-i tuge, t\u00f5sist infrastruktuuri reserveerimist ning standardseid seadistusi, mis t\u00f6\u00f6tavad igas tuttavas ruuteris (olgu see siis Cisco v\u00f5i Mikrotik, peamine, et see toetaks IPSec\/IKEv2 standardiseeritud autentimismeetodeid). Muide, mis puutub IPSec-i, siis praegu toetame me ainult seda, kuid plaanime avada ka OpenVPN-i ja Wireguardi t\u00e4isfunktsionaalsuse, et kliendid ei s\u00f5ltuks protokollist ja saaksid veelgi lihtsamalt k\u00f5ik meie juurde viia. Samuti soovime hakata \u00fchendama kliente arvutitest ja mobiilseadmetest (operatsioonis\u00fcsteemide integreeritud lahendusi, Cisco AnyConnecti ja strongSwan'i ning sarnaseid). Sellise l\u00e4henemisega v\u00f5ib de facto infrastruktuuri usaldada operaatorile, j\u00e4ttes alles vaid SRV v\u00f5i hosti seadistamise.<\/p>\n<p>Kuidas toimub \u00fchendamise protsess IPSec-re\u017eiimis:<\/p>\n<ol>\n<li>Kliendilt saadetakse taotlus oma juhile, kus on m\u00e4rgitud vajalik \u00fchenduse kiirus, liikluse profiil ja IP-aadressimise parameetrid tunnelile (vaikimisi alamv\u00f5rk maskiga \/30) ning marsruutimise t\u00fc\u00fcp (statika v\u00f5i BGP). Kliendi kontoris kohalikesse v\u00f5rkudesse suunatud marsruutide edastamiseks kasutatakse IKEv2 protokolli etapi mehhanisme IPSecis vastava seadistusega kliendi ruuteris v\u00f5i need kuulutatakse BGP kaudu MPLSis kliendi taotluses n\u00e4idatud eraldiseisva BGP AS-i kaudu. Seega kontrollib klient t\u00e4ielikult oma v\u00f5rgumarsruutide teavet l\u00e4bi kliendi ruuteri seadistuste.<\/li>\n<li>Oma juhilt saab klient kontoandmed, mida on vaja oma VRF-i sissel\u00fclitamiseks:\n<ul>\n<li>VPN-HUB IP-aadress<\/li>\n<li>Kasutajanimi<\/li>\n<li>Tuvastusparool<\/li>\n<\/ul>\n<\/li>\n<li>Seadistab CPE, allpool on n\u00e4idatud kaks n\u00e4idet p\u00f5hiseadistustest:<b class=\"spoiler_title\">Cisco jaoks variant:<\/b><br \/>\ncrypto ikev2 keyring BeelineIPsec_keyring<br \/>\npeer Beeline_VPNHub<br \/>\naddress 62.141.99.183 <i> \u2013VPN-kontsentraator Beeline<\/i><br \/>\npre-shared-key<br \/>\n!<br \/>\n<i>Statilise marsruutimise valiku puhul saab Vpn-hubi kaudu ligip\u00e4\u00e4setavate v\u00f5rkude marsruudid m\u00e4\u00e4rata IKEv2 seadistuses, ja need kuvatakse automaatselt staatiliste marsruutidena CE marsruuditabelis. Neid seadeid on v\u00f5imalik m\u00e4\u00e4rata ka klassikalisel viisil, nagu on allpool toodud.<\/i><\/p>\n<p>crypto ikev2 authorization policy FlexClient-author<\/p>\n<p><i>Marsruutide seadistamine CE marsruuteri kaudu on kohustuslik, kui kasutatakse staatilist marsruutimist CE ja PE vahel. Marsruutide andmete edastamine PE-le toimub automaatselt IKEv2 tunnelite avamisel.<\/i><\/p>\n<p>route set remote ipv4 10.1.1.0 255.255.255.0 <i> \u2013 Kohalik kontori v\u00f5rk<\/i><br \/>\n!<br \/>\ncrypto ikev2 profile BeelineIPSec_profile<br \/>\nidentity local<br \/>\nauthentication local pre-share<br \/>\nauthentication remote pre-share<br \/>\nkeyring local BeelineIPsec_keyring<br \/>\naaa authorization group psk list group-author-list FlexClient-author<br \/>\n!<br \/>\ncrypto ikev2 client flexvpn BeelineIPsec_flex<br \/>\npeer 1 Beeline_VPNHub<br \/>\nclient connect Tunnel1<br \/>\n!<br \/>\ncrypto ipsec transform-set TRANSFORM1 esp-aes 256 esp-sha256-hmac<br \/>\nmode tunnel<br \/>\n!<br \/>\ncrypto ipsec profile default<br \/>\nset transform-set TRANSFORM1<br \/>\nset ikev2-profile BeelineIPSec_profile<br \/>\n!<br \/>\ninterface Tunnel1<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013 Tunnel adresse<\/i><br \/>\ntunnel source GigabitEthernet0\/2 <i> \u2013 Interneti juurdep\u00e4\u00e4su liides<\/i><br \/>\ntunnel mode ipsec ipv4<br \/>\ntunnel destination dynamic<br \/>\ntunnel protection ipsec profile default<br \/>\n!<br \/>\n<i>Klientide privaatsete v\u00f5rkude marsruudid, mis on saadaval Beeline'i VPN-keskuse kaudu, saab m\u00e4\u00e4rata staatiliselt.<\/i><\/p>\n<p>ip route 172.16.0.0 255.255.0.0 Tunnel1<br \/>\nip route 192.168.0.0 255.255.255.0 Tunnel1<\/p>\n<p><b class=\"spoiler_title\">Variant Huawei jaoks (ar160\/120):<\/b><br \/>\nike local-name<br \/>\n#<br \/>\nacl name ipsec 3999<br \/>\nrule 1 permit ip source 10.1.1.0 0.0.0.255 <i> \u2013 Kohalik kontori v\u00f5rk<\/i><br \/>\n#<br \/>\naaa<br \/>\nteenuse skeem IPSEC<br \/>\nroute set acl 3999<br \/>\n#<br \/>\nipsec ettepanek ipsec<br \/>\nesp autentimise algoritmo sha2-256<br \/>\nesp kr\u00fcpteerimise algoritmo aes-256<br \/>\n#<br \/>\nike ettepanek default<br \/>\nkr\u00fcpteerimise algoritmo aes-256<br \/>\ndh group2<br \/>\nautentimise algoritmo sha2-256<br \/>\nautentimise meetod eelnevalt jagatud<br \/>\nintegriteedi algoritmo hmac-sha2-256<br \/>\nprf hmac-sha2-256<br \/>\n#<br \/>\nike peer ipsec<br \/>\neelnevalt jagatud v\u00f5ti simple<br \/>\nkohalik identifikaatori t\u00fc\u00fcp fqdn<br \/>\nkaug-ide t\u00fc\u00fcp ip<br \/>\nkaug-osa 62.141.99.183 <i> \u2013VPN-kontsentraator Beeline<\/i><br \/>\nteenuse skeem IPSEC<br \/>\nconfig-exchange request<br \/>\nconfig-exchange set accept<br \/>\nconfig-exchange set send<br \/>\n#<br \/>\nipsec profiil ipsecprof<br \/>\nike-peer ipsec<br \/>\nettepanek ipsec<br \/>\n#<br \/>\nliides Tunnel0\/0\/0<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013 Tunnel adresse<\/i><br \/>\ntunnel-protokoll ipsec<br \/>\nallikas GigabitEthernet0\/0\/1 <i> \u2013 Interneti juurdep\u00e4\u00e4su liides<\/i><br \/>\nipsec profiil ipsecprof<br \/>\n#<br \/>\n<i>Klientide privaatsete v\u00f5rkude marsruudid, mis on saadaval Beeline'i VPN-keskuse kaudu, saab m\u00e4\u00e4rata staatiliselt.<\/i><\/p>\n<p>ip route-static 192.168.0.0 255.255.255.0 Tunnel0\/0\/0<br \/>\nip route-static 172.16.0.0 255.255.0.0 Tunnel0\/0\/0<\/li>\n<\/ol>\n<p>Saadud \u00fchendusskeem n\u00e4eb v\u00e4lja umbes selline:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/8083e9190bdcdd816ac3014d7b7f5de4.jpg\" alt=\"Kuidas p\u00e4\u00e4seda IPVPN Bileini kaudu IPSeciga. Osa 1\" \/><\/p>\n<p>Kui kliendil puuduvad m\u00f5ningad p\u00f5hilise konfiguratsiooni n\u00e4ited, siis aitame tavaliselt nende koostamisel ja teeme need kergesti k\u00e4tte saadavaks teistele.<\/p>\n<p>Dial-up CPE on the Internet is yet to be connected, a ping to the VPN tunnel's response part and any host within the VPN must be established, and that's it; we can consider the connection made.<\/p>\n<p>In the next article, we will explain how we combined this scheme with IPSec and MultiSIM failover using Huawei CPE: we install our Huawei CPE for clients, which can utilize not only a wired internet connection but also 2 different SIM cards, with CPE automatically restructuring the IPSec tunnel either through wired WAN or via radio (LTE#1\/LTE#2), achieving high reliability of the resultant service.<\/p>\n<p>Special thanks to our RnD colleagues for preparing this article (and, of course, to the authors of these technical solutions)!<\/p>\n<p>Allikas: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-21T11:42:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-05T08:59:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas p\u00e4\u00e4seda Bilan IPVPN-i kaudu IPSeci kaudu. Osa 1 | ProHoster","description":"Hi! In the previous post, I described how our MultiSIM service works in the context of failover and channel balancing. As mentioned, we connect clients to the network via VPN, and today I will share a bit more about VPN and our capabilities in this regard. It\u2019s worth starting with the fact that, as a telecom operator, we have our extensive MPLS network.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c,","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-21T11:42:28+00:00","article:modified_time":"2026-07-05T08:59:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:13:28","updated":"2022-09-30 17:39:06"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/89276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=89276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/89276\/revisions"}],"predecessor-version":[{"id":182465,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/89276\/revisions\/182465"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/89277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=89276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=89276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=89276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}