{"id":89276,"date":"2020-07-21T13:42:28","date_gmt":"2020-07-21T11:42:28","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1"},"modified":"2026-07-05T10:59:44","modified_gmt":"2026-07-05T08:59:44","slug":"kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","title":{"rendered":"Ako sa dosta\u0165 do IPVPN Beeline cez IPSec. \u010cas\u0165 1","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<p>Ahoj! V <a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/498450\/\" rel=\"nofollow\">predch\u00e1dzaj\u00facom pr\u00edspevku<\/a> Op\u00edsal som fungovanie na\u0161ich slu\u017eieb MultiSIM v oblasti <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/rezervirovanie-internet-soedineniia\/?utm_source=habr\" rel=\"nofollow\">rezerv\u00e1cie<\/a> a <a href=\"https:\/\/moskva.beeline.ru\/business\/mobile-and-internet\/office-internet\/obedinenie-mobilnih-setey\/?utm_source=habr\" rel=\"nofollow\">vyrovn\u00e1vania<\/a> kan\u00e1lov. Ako bolo spomenut\u00e9, klientov k sieti prip\u00e1jame cez VPN, a dnes v\u00e1m poviem trochu viac o VPN a na\u0161ich mo\u017enostiach v tejto oblasti.<\/p>\n<p>Za\u010dneme t\u00fdm, \u017ee ako oper\u00e1tor telekomunik\u00e1ci\u00ed m\u00e1me vlastn\u00fa obrovsk\u00fa MPLS sie\u0165, ktor\u00e1 je pre klientov s pevnou linkou rozdelen\u00e1 na dve hlavn\u00e9 segmenty \u2014 ten, ktor\u00fd sa pou\u017e\u00edva priamo na pr\u00edstup do siete Internet, a ten, ktor\u00fd sa pou\u017e\u00edva na vytv\u00e1ranie izolovan\u00fdch siet\u00ed \u2014 a pr\u00e1ve cez tento segment MPLS prech\u00e1dza prev\u00e1dzka IPVPN (L3 OSI) a VPLAN (L2 OSI) pre na\u0161ich firemn\u00fdch klientov.<\/p>\n<p><a href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\" rel=\"nofollow\"><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/b5b3d5c28266d1916b7ac93e94d2fe5b.jpg\" alt=\"Ako sa dosta\u0165 do IPVPN Beeline cez IPSec. \u010cas\u0165 1\" \/><\/a><a rel=\"nofollow\" name=\"habracut\"><\/a><br \/>\nObvykle sa pripojenie klienta realizuje nasledovne.<\/p>\n<p>Kancel\u00e1rii klienta je vybudovan\u00e1 pr\u00edstupov\u00e1 linka od najbli\u017e\u0161ieho Bodu Pr\u00edtomnosti siete (uzla MEN, PPL, BSSS, FTTB at\u010f.) a n\u00e1sledne sa kan\u00e1l zapisuje cez prenosov\u00fa sie\u0165 a\u017e k pr\u00edslu\u0161n\u00e9mu RE-MPLS smerova\u010du, kde ho odovzd\u00e1vame do \u0161peci\u00e1lne vytvoren\u00e9ho pre klienta VRF s oh\u013eadom na profil prev\u00e1dzky, ktor\u00fd klient potrebuje (zna\u010dky profilu s\u00fa vyberan\u00e9 pre ka\u017ed\u00fd pr\u00edstupov\u00fd port na z\u00e1klade hodn\u00f4t ip precedence 0,1,3,5).<\/p>\n<p>Ak z nejak\u00fdch d\u00f4vodov nedok\u00e1\u017eeme plne zabezpe\u010di\u0165 posledn\u00fa m\u00ed\u013eu pre klienta, napr\u00edklad ak je kancel\u00e1ria klienta v biznis centre, kde je prioritn\u00fd in\u00fd poskytovate\u013e, alebo ak v bl\u00edzkosti nie je na\u0161a pr\u00edtomnos\u0165, klienti predt\u00fdm museli vytv\u00e1ra\u0165 nieko\u013eko IPVPN siet\u00ed u r\u00f4znych poskytovate\u013eov (nehospod\u00e1rna architekt\u00fara) alebo sa sami zaobera\u0165 ot\u00e1zkami organizovania pr\u00edstupu k svojmu VRF cez sie\u0165 Internet.<\/p>\n<p>Mnoh\u00ed to robili pomocou in\u0161tal\u00e1cie IPVPN-internet br\u00e1ny \u2014 in\u0161talovali hrani\u010dn\u00fd smerova\u010d (hardv\u00e9rov\u00fd alebo nejak\u00e9 rie\u0161enie na b\u00e1ze Linuxu), pripojili k nemu jedn\u00fdm portom IPVPN kan\u00e1l a druh\u00fdm \u2014 internetov\u00fd kan\u00e1l, sp\u00fa\u0161\u0165ali na \u0148om svoj <a href=\"https:\/\/prohoster.info\/sk\/vpn\/\">VPN server<\/a> a prip\u00e1jali pou\u017e\u00edvate\u013eov cez svoju vlastn\u00fa VPN br\u00e1nu. Samozrejme, tak\u00e9to sch\u00e9my prin\u00e1\u0161aj\u00fa aj za\u0165a\u017eenia: tak\u00fato infra\u0161trukt\u00faru je potrebn\u00e9 vedie\u0165 budova\u0165 a, \u010do je najnepohodlnej\u0161ie \u2014 prev\u00e1dzkova\u0165 a rozv\u00edja\u0165.<\/p>\n<p>Aby sme na\u0161im klientom u\u013eah\u010dili \u017eivot, zriadili sme centralizovan\u00fd VPN hub a zabezpe\u010dili podporu pripojen\u00ed cez internet pomocou IPSec. Teraz klienti potrebuj\u00fa len nastavi\u0165 svoj router na pr\u00e1cu s na\u0161\u00edm VPN hubom cez IPSec tunel cez ak\u00fdko\u013evek verejn\u00fd internet, a my vyvedieme tento traffic klienta do jeho VRF.<\/p>\n<h2>Pre koho je to u\u017eito\u010dn\u00e9<\/h2>\n<p>&nbsp;<\/p>\n<ul>\n<li>Pre t\u00fdch, ktor\u00ed u\u017e maj\u00fa ve\u013ek\u00fa IPVPN sie\u0165 a potrebuj\u00fa nov\u00e9 pripojenia v kr\u00e1tkych \u010dasov\u00fdch obdobiach.<\/li>\n<li>Pre ka\u017ed\u00e9ho, kto z ak\u00fdchko\u013evek d\u00f4vodov chce prenies\u0165 \u010das\u0165 trafficu z verejn\u00e9ho internetu do IPVPN, ale predt\u00fdm sa stretol s technick\u00fdmi obmedzeniami spojen\u00fdmi s viacer\u00fdmi poskytovate\u013emi slu\u017eieb.<\/li>\n<li>Pre t\u00fdch, ktor\u00ed moment\u00e1lne maj\u00fa nieko\u013eko roztrhnut\u00fdch VPN siet\u00ed od r\u00f4znych oper\u00e1torov. Existuj\u00fa klienti, ktor\u00ed \u00faspe\u0161ne organizovali IPVPN od Beeline, Megafon, Rostelecom at\u010f. Pre jednoduch\u0161ie rie\u0161enie m\u00f4\u017eeme prejs\u0165 len na na\u0161u jedin\u00fa <a href=\"https:\/\/prohoster.info\/sk\/vpn\/\">VPN<\/a>, ostatn\u00e9 kan\u00e1ly od in\u00fdch oper\u00e1torov presun\u00fa\u0165 na internet, po \u010dom sa pripoji\u0165 k IPVPN Beeline cez IPSec a internet t\u00fdchto oper\u00e1torov.<\/li>\n<li>Pre t\u00fdch, ktor\u00ed u\u017e maj\u00fa IPVPN sie\u0165, ktor\u00e1 je aplikovan\u00e1 na internet.<\/li>\n<\/ul>\n<p>Ak v\u0161etko rozviniete u n\u00e1s, z\u00edskate pln\u00fa podporu pre VPN, v\u00e1\u017ene rezervovanie infra\u0161trukt\u00fary a \u0161tandardn\u00e9 nastavenia, ktor\u00e9 bud\u00fa fungova\u0165 na akomko\u013evek jemu zn\u00e1mom routeri (\u010di u\u017e Cisco, alebo Mikrotik, hlavne, aby spr\u00e1vne podporoval IPSec\/IKEv2 so \u0161tandardizovan\u00fdmi autentifika\u010dn\u00fdmi met\u00f3dami). Mimochodom, pokia\u013e ide o IPSec \u2014 moment\u00e1lne podporujeme len tento, ale v pl\u00e1ne je spusti\u0165 plnohodnotn\u00fa pr\u00e1cu aj na OpenVPN a Wireguard, aby klienti nemali z\u00e1vislos\u0165 od protokolu a mohli ove\u013ea jednoduch\u0161ie presun\u00fa\u0165 v\u0161etko k n\u00e1m, a tie\u017e pl\u00e1nujeme za\u010da\u0165 pripoji\u0165 klientov z po\u010d\u00edta\u010dov a mobiln\u00fdch zariaden\u00ed (vstavan\u00e9 rie\u0161enia v OS, Cisco AnyConnect a strongSwan a podobne). Pri takomto pr\u00edstupe m\u00f4\u017ee infra\u0161trukt\u00faru de facto prevzia\u0165 oper\u00e1tor, pri\u010dom nastavenie SRV alebo hosta zostane len na klientovi.<\/p>\n<p>Ako prebieha proces pripojenia pre re\u017eim IPSec:<\/p>\n<ol>\n<li>Klient zanech\u00e1va \u017eiados\u0165 svojmu mana\u017e\u00e9rovi, v ktorej uv\u00e1dza po\u017eadovan\u00fa r\u00fdchlos\u0165 pripojenia, profil prenosu a parametre adresovania IP pre tunel (predvolene podsiet s maskou \/30) a typ smerovania (statick\u00e9 alebo BGP). Na prenos tr\u00e1s do lok\u00e1lnych siet\u00ed klienta pripojen\u00fdch k kancel\u00e1rii sa pou\u017e\u00edvaj\u00fa mechanizmy IKEv2 f\u00e1zy protokolu IPSec s pr\u00edslu\u0161n\u00fdmi nastaveniami na klientskom smerova\u010di, alebo sa inzeruj\u00fa pomocou BGP v MPLS z ur\u010den\u00e9ho s\u00fakromn\u00e9ho BGP AS, ktor\u00e9 klient uviedol v \u017eiadosti. Tak\u017ee inform\u00e1cie o tras\u00e1ch klientsk\u00fdch siet\u00ed s\u00fa plne kontrolovan\u00e9 klientom prostredn\u00edctvom nastaven\u00ed klientsk\u00e9ho smerova\u010da.<\/li>\n<li>Na odpove\u010f od svojho mana\u017e\u00e9ra klient dost\u00e1va \u00fadaje pre \u00fa\u010dtovanie na zaradenie do svojho VRF vo forme:\n<ul>\n<li>IP adresa VPN-HUB<\/li>\n<li>Prihl\u00e1senie<\/li>\n<li>Heslo pre autentifik\u00e1ciu<\/li>\n<\/ul>\n<\/li>\n<li>Nastavuje CPE, ni\u017e\u0161ie s\u00fa uveden\u00e9 dve varianty z\u00e1kladnej konfigur\u00e1cie:<b class=\"spoiler_title\">Varianta pre Cisco:<\/b><br \/>\ncrypto ikev2 keyring BeelineIPsec_keyring<br \/>\npeer Beeline_VPNHub<br \/>\naddress 62.141.99.183 <i> \u2013VPN koncentr\u00e1tor Bilein<\/i><br \/>\npre-shared-key<br \/>\n!<br \/>\n<i>Pre variant so statick\u00fdm smerovan\u00edm m\u00f4\u017eu by\u0165 trasy do siet\u00ed dostupn\u00fdch cez VPN-hub stanoven\u00e9 v nastaven\u00ed IKEv2 a automaticky sa objavia ako statick\u00e9 trasy v smerovacej tabu\u013eke CPE. Tieto nastavenia je mo\u017en\u00e9 vykona\u0165 aj \u0161tandardn\u00fdm sp\u00f4sobom pomocou statick\u00fdch tr\u00e1s (pozri ni\u017e\u0161ie).<\/i><\/p>\n<p>crypto ikev2 authorization policy FlexClient-author<\/p>\n<p><i>Trasa do siet\u00ed za CPE smerova\u010dom \u2013 povinn\u00e9 nastavenie pri statickom smerovan\u00ed medzi CPE a PE. Prenos \u00fadajov tr\u00e1s na PE sa vykon\u00e1va automaticky pri nadviazan\u00ed tunela prostredn\u00edctvom IKEv2 konfigur\u00e1cie.<\/i><\/p>\n<p>route set remote ipv4 10.1.1.0 255.255.255.0 <i> \u2013Lok\u00e1lna sie\u0165 kancel\u00e1rie<\/i><br \/>\n!<br \/>\ncrypto ikev2 profile BeelineIPSec_profile<br \/>\nidentity local<br \/>\nauthentication local pre-share<br \/>\nauthentication remote pre-share<br \/>\nkeyring local BeelineIPsec_keyring<br \/>\naaa authorization group psk list group-author-list FlexClient-author<br \/>\n!<br \/>\ncrypto ikev2 client flexvpn BeelineIPsec_flex<br \/>\npeer 1 Beeline_VPNHub<br \/>\nclient connect Tunnel1<br \/>\n!<br \/>\ncrypto ipsec transform-set TRANSFORM1 esp-aes 256 esp-sha256-hmac<br \/>\nmode tunnel<br \/>\n!<br \/>\ncrypto ipsec profile default<br \/>\nset transform-set TRANSFORM1<br \/>\nset ikev2-profile BeelineIPSec_profile<br \/>\n!<br \/>\ninterface Tunnel1<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013Adresa tunela<\/i><br \/>\ntunnel source GigabitEthernet0\/2 <i> \u2013Pr\u00edstupov\u00fd rozhranie na Internet<\/i><br \/>\ntunnel mode ipsec ipv4<br \/>\ntunnel destination dynamic<br \/>\ntunnel protection ipsec profile default<br \/>\n!<br \/>\n<i>Trasy do s\u00fakromn\u00fdch siet\u00ed klienta, dostupn\u00fdch cez VPN koncentr\u00e1tor Bilein, m\u00f4\u017eu by\u0165 nastaven\u00e9 staticky.<\/i><\/p>\n<p>ip route 172.16.0.0 255.255.0.0 Tunnel1<br \/>\nip route 192.168.0.0 255.255.255.0 Tunnel1<\/p>\n<p><b class=\"spoiler_title\">Varianta pre Huawei (ar160\/120):<\/b><br \/>\nike local-name<br \/>\n#<br \/>\nacl name ipsec 3999<br \/>\npravidlo 1 povoli\u0165 ip zdroj 10.1.1.0 0.0.0.255 <i> \u2013Lok\u00e1lna sie\u0165 kancel\u00e1rie<\/i><br \/>\n#<br \/>\naaa<br \/>\nsch\u00e9ma slu\u017eby IPSEC<br \/>\nnastavenie trasy acl 3999<br \/>\n#<br \/>\nipsec n\u00e1vrh ipsec<br \/>\nesp autentifika\u010dn\u00fd algoritmus sha2-256<br \/>\nesp \u0161ifrovac\u00ed algoritmus aes-256<br \/>\n#<br \/>\nike n\u00e1vrh predvolen\u00fd<br \/>\n\u0161ifrovac\u00ed algoritmus aes-256<br \/>\ndh skupina2<br \/>\nautentifika\u010dn\u00fd algoritmus sha2-256<br \/>\nmet\u00f3da autentifik\u00e1cie pre-shared<br \/>\nalgoritmus integrity hmac-sha2-256<br \/>\nprf hmac-sha2-256<br \/>\n#<br \/>\nike partner ipsec<br \/>\npre-shared-key jednoduch\u00e9<br \/>\ntyp lok\u00e1lneho id fqdn<br \/>\ntyp vzdialen\u00e9ho id ip<br \/>\nvzdialen\u00e1 adresa 62.141.99.183 <i> \u2013VPN koncentr\u00e1tor Bilein<\/i><br \/>\nsch\u00e9ma slu\u017eby IPSEC<br \/>\nconfig-exchange po\u017eiadavka<br \/>\nconfig-exchange nastavi\u0165 akceptova\u0165<br \/>\nconfig-exchange nastavi\u0165 odosiela\u0165<br \/>\n#<br \/>\nipsec profil ipsecprof<br \/>\nike-partner ipsec<br \/>\nn\u00e1vrh ipsec<br \/>\n#<br \/>\nrozhranie Tunnel0\/0\/0<br \/>\nip address 10.20.1.2 255.255.255.252 <i> \u2013Adresa tunela<\/i><br \/>\ntunelov\u00fd protokol ipsec<br \/>\nzdroj GigabitEthernet0\/0\/1 <i> \u2013Pr\u00edstupov\u00fd rozhranie na Internet<\/i><br \/>\nipsec profil ipsecprof<br \/>\n#<br \/>\n<i>Trasy do s\u00fakromn\u00fdch siet\u00ed klienta, dostupn\u00e9 cez VPN koncentr\u00e1tor Beeline, m\u00f4\u017eu by\u0165 stanoven\u00e9 staticky<\/i><\/p>\n<p>ip statick\u00e1 trasa 192.168.0.0 255.255.255.0 Tunnel0\/0\/0<br \/>\nip statick\u00e1 trasa 172.16.0.0 255.255.0.0 Tunnel0\/0\/0<\/li>\n<\/ol>\n<p>V\u00fdsledn\u00e1 sch\u00e9ma komunik\u00e1cie vyzer\u00e1 pribli\u017ene takto:<\/p>\n<p><img decoding=\"async\" style=\"display: block; margin: 0 auto;\" src=\"\/wp-content\/uploads\/2020\/07\/8083e9190bdcdd816ac3014d7b7f5de4.jpg\" alt=\"Ako sa dosta\u0165 do IPVPN Beeline cez IPSec. \u010cas\u0165 1\" \/><\/p>\n<p>Ak klient nem\u00e1 nejak\u00e9 pr\u00edklady z\u00e1kladnej konfigur\u00e1cie, zvy\u010dajne mu pom\u00e1hame s ich vytvoren\u00edm a rob\u00edme ich dostupn\u00fdmi pre ostatn\u00fdch.<\/p>\n<p>Zost\u00e1va pripoji\u0165 CPE k internetu, spravi\u0165 ping na odpovedaj\u00facu \u010das\u0165 VPN tunela a niektor\u00fd hostite\u013e vo vn\u00fatri VPN a v\u0161etko, m\u00f4\u017eeme pova\u017eova\u0165 za pripojenie \u00faspe\u0161n\u00e9.<\/p>\n<p>V nasleduj\u00facom \u010dl\u00e1nku sa podel\u00edme o to, ako sme skombinovali t\u00fato sch\u00e9mu s IPSec a MultiSIM z\u00e1lohovan\u00edm pomocou CPE Huawei: in\u0161talujeme na\u0161im klientom na\u0161e CPE Huawei, v ktorom m\u00f4\u017ee by\u0165 pou\u017eit\u00fd nielen k\u00e1blov\u00fd internetov\u00fd kan\u00e1l, ale aj 2 r\u00f4zne SIM karty a CPE automaticky prestavuje IPSec tunel bu\u010f cez k\u00e1blov\u00fd WAN alebo cez r\u00e1dio (LTE#1\/LTE#2), \u010d\u00edm realizuje vysok\u00fa dostupnos\u0165 kone\u010dnej slu\u017eby.<\/p>\n<p>Osobitn\u00e9 po\u010fakovanie za pr\u00edpravu tohto \u010dl\u00e1nku (a, vlastne, autorom t\u00fdchto technick\u00fdch rie\u0161en\u00ed) kolegom z n\u00e1\u0161ho RnD!<\/p>\n<p>Zdroj: <a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/beeline\/blog\/510154\/\">habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>\u041f\u0440\u0438\u0432\u0435\u0442! \u0412 \u043f\u0440\u0435\u0434\u044b\u0434\u0443\u0449\u0435\u043c \u043f\u043e\u0441\u0442\u0435 \u044f \u043e\u043f\u0438\u0441\u0430\u043b \u0440\u0430\u0431\u043e\u0442\u0443 \u043d\u0430\u0448\u0435\u0433\u043e \u0441\u0435\u0440\u0432\u0438\u0441\u0430 MultiSIM \u0432 \u0447\u0430\u0441\u0442\u0438 \u0440\u0435\u0437\u0435\u0440\u0432\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0438 \u0431\u0430\u043b\u0430\u043d\u0441\u0438\u0440\u043e\u0432\u043a\u0438 \u043a\u0430\u043d\u0430\u043b\u043e\u0432. \u041a\u0430\u043a \u0431\u044b\u043b\u043e \u0443\u043f\u043e\u043c\u044f\u043d\u0443\u0442\u043e, \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 \u043a \u0441\u0435\u0442\u0438 \u043c\u044b \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0430\u0435\u043c \u0447\u0435\u0440\u0435\u0437 VPN, \u0438 \u0441\u0435\u0433\u043e\u0434\u043d\u044f \u044f \u0440\u0430\u0441\u0441\u043a\u0430\u0436\u0443 \u043d\u0435\u043c\u043d\u043e\u0433\u043e \u0431\u043e\u043b\u044c\u0448\u0435 \u043f\u0440\u043e VPN \u0438 \u043d\u0430\u0448\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u044d\u0442\u043e\u0439 \u0447\u0430\u0441\u0442\u0438. \u041d\u0430\u0447\u0430\u0442\u044c \u0441\u0442\u043e\u0438\u0442 \u0441 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u0443 \u043d\u0430\u0441 \u043a\u0430\u043a \u0443 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0432\u044f\u0437\u0438 \u0435\u0441\u0442\u044c \u0441\u0432\u043e\u044f \u043e\u0433\u0440\u043e\u043c\u043d\u0430\u044f MPLS-\u0441\u0435\u0442\u044c, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":89277,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-89276","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 5.0.3 - aioseo.com -->\n\t<meta name=\"description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442!\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 5.0.3\" \/>\n\t\t<meta property=\"og:locale\" content=\"sk_SK\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"\u041f\u0440\u0438\u0432\u0435\u0442!\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-07-21T11:42:28+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2026-07-05T08:59:44+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Ako sa dosta\u0165 do IPVPN Beeline cez IPSec. \u010cas\u0165 1 | ProHoster","description":"Ahoj!","canonical_url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sk_SK","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u043e\u043f\u0430\u0441\u0442\u044c \u0432 IPVPN \u0411\u0438\u043b\u0430\u0439\u043d \u0447\u0435\u0440\u0435\u0437 IPSec. \u0427\u0430\u0441\u0442\u044c 1 | ProHoster","og:description":"\u041f\u0440\u0438\u0432\u0435\u0442!","og:url":"https:\/\/prohoster.info\/sk\/blog\/administrirovanie\/kak-popast-v-ipvpn-bilajn-cherez-ipsec-chast-1","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-07-21T11:42:28+00:00","article:modified_time":"2026-07-05T08:59:44+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"89276","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 13:13:28","updated":"2022-09-30 17:39:06","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/89276","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/comments?post=89276"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/89276\/revisions"}],"predecessor-version":[{"id":182465,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/posts\/89276\/revisions\/182465"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media\/89277"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/media?parent=89276"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/categories?post=89276"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sk\/wp-json\/wp\/v2\/tags?post=89276"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}