????? IPSec ? L2TP ?? Windows 2000

?????? ????????? ?????? ?????????
???? ???????: 265112 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

???? ??? ??????? ???? ???????? IP (IPSec) ???????? ????? ?? ?? ???? ??????? Windows 2000 ? Windows Server 2003. ??? ????? ?????? IPsec ????? ?????? 2 interoperation ???????? Tunneling (L2TP) ?? ?????? ??? ??????.

??????? ????

??? IPsec

?? ????? IPSec ?????? ???????? ????? ???????? ??? ????? ??????? ????? ???????? ?? ??????? ????????. IPSec ????? ?? ???? ?? ?????? ???????? ????? ???????? ????????. ??? ????? ?? ?? ???? ???? ??? ???? ???? ??????? ??? ??? ??????? ?? ???? ???? ???????, ???? ?? ??? ????? ??? ???? ?? ????????? ?????? ??? ??????? ???????? ????? ???????? ??? ???? ???????. ?????? ???? ??? ????? ??? ???????? ??? ???? ???????? ???? ???????? ????? ????? ???? ????? ?? ???? ?? ???? ?????? ??? ????? ?? ???? ??????? ???? ???????? ???????? ???? ???. ???? ???? ????? ????? ??????? ????? ???? ??????? ?? ????? ????????? ??????. ???? ????? ??????? ?? ????? ?? ??? ????????? ????? ??? ???????? IPsec ???? ?????? ???? ???? ????? ?? ?????? ??????.

IPSec ?? ???? ?????? ???? ???? ????????? ??????? ?????? ???? ???? ??? ?????? ?????? ?????? ???? ?????? ??? ???? ?????? IP ??? ????? ?? ???????? ???? ???? ?????? ????????.

???????? ????? IP, ???? IPsec ???? ??? IP ?????? ??????? ????????????? ?????. ????? ??????? ???????? ?? ????? ?????? ?? ???????? IPsec ????? ?? ????? ????? ????? ???????? ??? ??????? ??????? ?????????.

????? IPSec ?? ???? ??????? Windows 2000 ? Windows Server 2003

??? ??? ????? IPsec "?" ????? ?????? ???????? (IKE) ?? Windows 2000 ? Windows Server 2003. ????? ????? ??????? ??? ?????? RFC IPsec (2401 +) ?????? ??? ???? ????? ???--???? ???? ??? ???? RFCs ?? ?? ??? ?????. ?????? ??? ???? ?? ?????? ?? ???? ????? ??????? ???, ??? ???? TCP/IP ???? ??????? ????????? ????? ??????? "?" ????? ??????? ??????? (CAPIv2) ? ??? ??? ???? "??? ????????" ??????? ??? IPsec ??????? ??? ??????.

?????? L2TP ??? IPsec ???? ??????? ?????? ????? IP UDP 1701 ???? ??? ?????. ?? ??? ????? IPsec ?? ???? ??????? Microsoft Windows 98. ?? ??????? IPSec ???????? ??? ????? ?? ???? ??????? Windows 2000 ? Windows Server 2003 jointly ?????? Microsoft Cisco Systems, Inc. ?? ????? L2TP ???? ??????? ?????? Microsoft ? ??????? ?? IPsec ??? Beta 2.

??????

  • ?????? ????? IPSec ???? ????? ????? ????? ???? ???? ??????.
  • ???????? ????? ????? ?????? ???? ?????? (ISAKMP/Oakley) ????? ?????? ??????? ???????? ???? ??? ???? ??????? ?????? ??? ???????? ???? ???????? ?????????? ?? ????????? ????.
  • ???? ??? ???? ???? ?? ?????? ???? ?????? ????? IPSec ?? ISAKMP.
  • ??? ???? IP "?" ???????? ?????? ???? ?? ??? ?????? ????? ???? ???? ??????? ?????.
  • API ?????? ?????? ???? ???? ????? ??? ?????? ????? IPSec ISAKMP ???? ???.
  • ????? ??????? ???? ????? ???? IP ??????? ???????? ???? ???????? ??? ???? IP.

??????? ?? ????????

  • ????? ???? IP ???? ????? IP ??? ?? IP ??? ????.
  • ???? ?? ???? ??? ???? IP ??? ??? ?????? ?????? ??????????. ????? ?????? ????? IPSec ??? ????? ????? ???? ???????? ?????? ??????. ???? ?????? ????? IPSec ?? ISAKMP ??????? ????? ???? ? ????? ??????.
  • ISAKMP ????? ????? ???? ??????? ?? ????? ???? ??? ?????? ????? IPSec.
  • ????? ???????? ???? ?????? ???? IPsec (SA). ???? ?????? ????? IPSec SA ??? ?? ????? ???????? ?????? ??.
  • ????? ?? ??????? ??????? ??????? ?????? ?? ???? ???? IP ??????, ???? ?????? ????? ??? ????? SA ????????.

?????? ???? IP

??? ????? ?????? ???? IP ??? ???? IP ?? ???? IPsec ?????? ???????. ???? ??????? ?????? ???? ???? ?????????, ??? ???? ????? ?? ?? unison. ?????? ?????:
  • ????? ???????? ???????? ???? keyed ??????? (HMAC)
  • ????? ???????? ???????? ??? ?????? ???? ???????

????? ??? IPsec

????? ??????? ???? ?????? ???????? ?? Microsoft "(MMC) ???? ???????? ?? ????? ??????? ???? ???? IP ??????? ???????? ????? '???' ???? ????? ??? ?????? ? ???? ?? ???? ?????. ????? ????? ??? ????? ?????? (???????? ??? ???? IP ??? ?????? ???????? "?????? ??????) ?? ??" Active Directory "(???????? ??? ???? IP ???" Active Directory "??????). ??? ????? ????? IPsec ?????? ????? ????? ??? ????? ?? ???? ???? ??? ???? ????? ?? ??????. ????? ??? ???? ???? ?????? ??? ??????? IKE ??????? ??? ??????? ?????? ?????? ??????? ??????? ???????? "?" ????? ?????? ???? IPsec "?" ?????? ????? ????? ???????? ?????????. ???? IPSec ??? ??????? ???? ??? ????? ???? IP.

??? ??? ??? IPsec ????? ??? ???? ??????? IKE ???????? ???? Windows 5 Kerberos ???????? ????????? ????? ??????? ??? ?????. ????? ????? Windows 2000 ? Windows Server 2003 ????? Derrell Piper (??? ?? ???? ?????? ?? ??? ???????). ?? ??? ??????? Kerberos IPsec ??????? ??? ?? ??? IKE ?????? ????????? ??? ?????. ??? ??????? ?? ?????? Kerberos ?? ??????? ???? ??? ?????? ?? ????? ??????--????? ????? ???????--??? ???? ??? ?? ???? ??? ????? ???? ??????? ??? ??????? MIT ??? 5 Kerberos ?? ????? ????????? ?????? ???? ????? ???????? 5 Kerberos. ?????? ??? ???? ?? ?????????? ???? ????? ????? ???????:
http://technet.microsoft.com/en-us/windowsserver/2000/bb735396.aspx
http://technet.microsoft.com/en-us/library/bb742432.aspx
http://www.ietf.org/
???? Microsoft ??????? ??? ??????? ?????? ????? ???? ???????? ?? ?????? ??? ????? ??????. ?? ??? ????? ??????? ??? ??????? ??? ???? ?????. ??? ???? Microsoft ??? ??? ????????? ???? ???????.

API IPsec ????

?? ??? ???? Windows 2000 ? Windows Server 2003 IPsec APIs ???? ?????? ??? ????. IPSec ? IKE ???? - ????? ??? ???? (????? ??????? ? ????? ??????) ?? ??????????? ????? ??? APIs ???????? ??? ?????? ? ???? ???????. IPsec ??? ???? ????? SSL/TLS ???? ??????? ??????? ????? ??????? ?????? ??? ?????????.

????? Windows 2000 ? Windows Server 2003 '???' ?? ?????? ?? ????????? ?????? ?? IPsec ???? ???? ??????? ??? ?????? ?? ??????? ??? ??????. ????? '???' ???????/?????? ????? ???? ?? ?? ??????? ??? ???? ????? ??????? - ????????? ???? ????? ??? ?????????. ????? IPsec ????????? ????? ???? ????? ??? IPSec ?? "Active Directory" ??? ?????? ?????? ??? ????? ????????? ?????? ?????? ????? ???????? ???????? ??? ?? ????? ?? ????? ???????? ???? "??? ????????". ????? ????? ???? ???? ????? ??? IPsec.

???? Microsoft ?????? ??????? ??????? ????? ?? ????????? ?????????? ?? Windows. ????? ??? ???? Windows IPsec "?" ??????? ??????? ??????? ?????? ????? ???? ?????? ???? ??? ?????? Microsoft.

?? ???? ????? ???????? ????? ?????? ????? ??? IPsec. Ipsecpol.exe ?? ???? ??? ????? ?? Microsoft Windows 2000 Resource Kit ???? ????? ????????? ?? ????? ??? ??????? ?????? (????? ??? ????? ???????? ??????). ?? ???? "????? ?????" ??? ????? ??????? "? ????? ??????? ?????/debug /v /test:ipsec netdiag.exe ??????? ?????? ??? IPsec ????? ??? ??? ??? (??? ??? ?? ?? ????? ????? ?? ??? ???????? ???? ??? ?????? ????? ??????????).

?????? ???????? ??? (???? ???????? ??????? ??????) ? ???? ???? Microsoft ??? APIs ???? ???? API ????? plumb ?????? ????? ??? ??????. Microsoft ???? ????? API ??? ?????? ????? ????? ?????? ???????? ????? ????. ????? ??? ?????? ???? ?? ???? ?????? ????????? ????? ?????? ??? ?? plumb ??? ??? ???? IPsec ???????? ?????? ????? ??????? "".

??? ???? ????? ????? ??? ?????? IPsec ??? ????/???? ?????? ??? ?? ?? ?? ????? API ????? ??? ????? ?????. ??? ???? ???????? ???????? ???? ?????? ??? ?????? ??? ????? ???? ???? ?????? ?? ??? ??? ?? ???? ??????. ?????? ??? ???? ?? ?????????? ???? ???? ?????? ??? ?????:
http://www.ietf.org/proceedings/01aug/slides/ipsp-3/
???? Microsoft ??????? ??? ??????? ?????? ????? ???? ???????? ?? ?????? ??? ????? ??????. ?? ??? ????? ??????? ??? ??????? ??? ???? ?????. ??? ???? Microsoft ??? ??? ????????? ???? ???????.

interoperation IPsec

?????????? ?????? ?????? ???????? (VPN) ???? Microsoft ?????? IPsec ??? ?? ??? ?????????? ??? ?????? ?? ???? L2TP/IPsec ?? ???? ? ??????????? ??????? ??? ?????? (?????? ?????? VPN ?? ??? ????? ???? ????? ??? ??????? ?? RFC ? ???? ?? ????? IKECFG ?? XAUTH) ??? ????? ?? ???? ????? IP ???? ?????? IPsec ???????? ???? ?? ????? ????? ?????? ?????. ?????? ??? ???? ?? ????????? ??? ????? ??? IPSec ?? Windows 2000? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
252735????? ????? ????? IPsec ?? ???? ??????? Windows 2000
??? ????? ?? ?? ?????? ????? ????? ????? ?????? ?????? ????? IPSec ???????????? ??????? (??? ???? ????? ????? ??? ????) ? ??? ????? ??? ??? ?????? ?? ??? Microsoft. ?? ??? ????? ????? ??????? ??????? ???????? IPsec. ???? ??? ????? ?????? ???????? ?????? ???. ?? ?? ????? ????? ??????? ?? ????? ?????? ????? ??????? ????????:
http://www.icsa.net
http://www.vpnc.org
Windows 2000 ? Windows Server 2003 ??? ??? ??????? ??? ?? ?? ??? ??? ????. ??? ?????? ????????? interoperation ???????? ????????? ?? ??? ??????? ???????? ????? ????? ?????? ??????? IPsec ???? ?? ??? ??? ???? ????? Microsoft ?????? ??? ??????? ?? ??? ???????.

??????? ??????? ???????? ????????

  • ???????? ??????:
    ????? ????? ????? ????????? ?????? ?????? ???????? ??? ????? IKE ? ????? ??????? ?????? ???????? (??? ??? ?????? ??????? ?? ????????? ??????? ?? ????? ???????) ??????? ?????? (??? DES ? 3DES MD5 ? PFS).
  • ???????? ?????? ??????? ????????:
    ???? ????? ?????? ??????? ????? ?? ???????? ?????? ???????? ???????. ????? ??? ?? ??? ?? ??? ?????? ?? workshops ??????? ??????? ???????? ?????? ? ???? ????? ?? ??? ?? ?? ???? ????? ?????? ??????.
    ???? ?? workshops Interoperation ?????? ?? ?????? ????????? ???????? ????? ????????. ????? 2195 ??????? ?????? ?? ???? ??????? Windows 2000 ? ?? ???????? ?? workshop ??????. workshop ????? interoperation ??? ?????? ?? ????? ????? workshops ???????? ???????? ?? ?????. ???? ??????? ??? ???? ????????? ?????? ????????? ???????? ?????? ??? ???.
  • ?????? ?????? ??????? ????????:
    ???? ?????? ???? ?????? ?? ????? ?? ??????? ????? (????? ????? ???????) ? ?????? "operationally ??" (?? ??? ???????? ?????? ?????? ?????? ????????? ???? ???? ???????). ?????? ??? ???????? feasible ??? ??????????? ??? ?????? ??? ???? ??? ??? ??????? ?????? ?? ???????? ??? ?????? ????? ??? ???????? ????? ???? ?????? ?????.

interoperation L2TP/IPsec

???? ??????? ?? 2661 RFC Windows 2000 ? Windows Server 2003 ("???????? ????? ??????"). RFC 2661 ???? ??? ?? ???? ???? L2TP ????? ?? IPsec ???? ?? ???? ?????? ??? ????? ????? ?????? ???. ????? ????? ?????? ?????? ??? ????? ?? ???? ????? ?????? ?????? ????? ???? ???? L2TP ?? IPSec. ???? ????????? ????? ?????? ??????? ?? ?????? ?????? ???????? ??????? (IETF) ????? ?? ??????? ???????? ????? ????? ??.

??? ???? ?????? ??????? L2TP ?? IPSec ??? ??? ????? (?? ???? ??? RFC ????? ??) ? ??? ?? ??? ?????? interoperation ??? ????? ????? Windows ???????? L2TP/IPsec.

?????? ?????? ????????? ???????? ??? ????? ???? ???? L2TP ???????? IPsec ?? Windows 2000 ? Windows Server 2003 ???? ??? ??????? ?? ???????? ???? ??????:
  • ??? ??????? ???????? ?? ??? ?????? ?????????-???? ??????? ????? ??? ??????? ?????? ????????.
  • ??? ??????? ??? ??? IPsec ?????? L2TP ???? ??????.
  • ??? ??????? ???? UDP 1701 ????? ?????? ???????. ??? ??? negotiable.
?????? Microsoft ?? ?????? ?? IPsec ??? ? L2TP/IPsec ?? ???????? ??????? ????? ??? ??? ???????. ???? ??? ?????? "????? ??????? ?? Microsoft" ??? ?? ?????? ??? ???????. ?? ?????? ???? Microsoft ?????? ??? ????? ?????? ??? ???? ????????? interoperation ????????:
http://support.microsoft.com
?? ?????? ???????? ??? ???????? interoperation ?? Windows 2000 ? Windows Server 2003 ??? ??? Microsoft ?? ?? ???? ???? ???? ?????? ?? ???? ???.

??????

Microsoft ???????? ??? ??????? ?????? ?? ???? ??????? ?? ?? ??????? ??????? ???? ?? ??????? ???????? ????????? ??????? (???) ?????????? ????????. ?????? Microsoft ???? ????? ?????????? ??????? ??? ??????? ????????. ??? ?? ????? ?? ??? ???? ?????? ????? ?????????? ????? ??????? Resource Kit ?????????? ??????? ???? IPsec ?????????? ??????. ??? ????? IPSec ? IKE IETF RFC ?????? ?????? ????? ????? ?? ???? ?? ????? ???? ???? ??? ???? ??? scrutiny ???? ??? ??? ?? ??? ?????????? ????????.

???? Microsoft ???????? ??? ???? ???? ????????? ???????:
  • ?? ?????? ???? ??????? "??????? ?????" ?????? ??? ??????? ??????? 3DES ???? ????? ????????? ???? ????? ??????? IPsec. ????? ????? ??? ?? ???? Microsoft ?????? ??? ?????:
    http://windowsupdate.microsoft.com/
    .
  • ???? ?? ?? ????? IPsec ????? 3DES ??? ??? ???? ???????? ??????? IPsec ???????. ????? DES ?????? ?? insufficiently ??? ?? ??????? ???????. ??????? ????? ??????? 3DES ?? ?????? ???? ??????? ????? IPsec ?????? ????????? ???? ????? ????? ???? ??? ?????? IPsec ??????.
  • ????? ????? "??? ??????" ?????? ????? ?????? ?????? ?????? ??????? ??? ???????? ?? ??????? ???????? ?? IPSec 541 ? 542.
  • ?????? ??? ?????? ????? ?? IPsec ??????.
  • ??????? ??? ???? ???? ???? (????? ?? ??????) ?????? ??? ???? ????????? ???????? ?????? ??????? ???? ?????????. ????? ??????? ?????? ?????????? ??? ??? ??????? ????? ??? ?????? (?? ???? ??????) ?????? ?? ????? ????? ??? ??????? ???????. ???? ????? "????? ??? ????????" ???? ??????? ???????? ??????.
  • ??? ????? ?????? ??? ??? IPSec, ???? ????? ??????? ?? Microsoft (http://support.microsoft.com/search ) ?????? ??? ?????? ??????? ???? ??????? ???????? ???????.
  • ???? ??? ???? "???? Microsoft ??? ???" (http://www.microsoft.com/technet/security) ?????? ??? ??? ?? ??????? ?????? ??????.
  • ???? secure@microsoft.com ??? ??? ????? ?? ?????? ????? ??? ????? ???? reproducible. ?????? ????? ??? ???????? ???? ??? ???? ??? ????? ?? ?????????.

???? Microsoft ?? ??? ???????

?????? ??? inquiries ??????? ???? Waggener Edstrom ?? 425-637-9097. ????? ??? inquiring ??? ???? IPsec ???????. ????? ?????? ??? ??????? ??????? ??????? ???????? ???????? ?????? ?????? ???????.

?????? ??? IPsec ?????? ?? ???? Windows ??????? ?????? ????? ????? ???? ???????? ??? ipsecreq@microsoft.com.

????? Microsoft ?? ?????????? ????? ?? ?????? ??? ??????? ????? Windows 2000 "????? ???? ?? ?????? ?????? ??? ?????? ??????? ???? ???? 2000 Windows. ??? ??? ??????? ????? ?????? ??? ?? ??? ???? ??????? Windows 2000 ?? Windows Server 2003 IPSec "??????????? ????? ??? ????? ?? ????? ??? ???? ????? ??????? ??? ???? ??? Microsoft ??????. ?????? ??? ??????? ??? ?????? ??? Microsoft "? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://support.microsoft.com/default.aspx?scid=fh;EN-US;CNTACTMS
????? Microsoft ??????? ???????? ?????? ?????? ??????? ?? ?????? ???????. ??? ???? ?? ????? ???? ??????? ?????? ? ??? ?? ????? ?????? ??. ?????? ??? ??? ????? ??? ??????? ???? ???????? ?????? ???? ???? ?????. ??? ??? ???? IPsec ??????? ?? ?????? interoperation ???? ????? ??? ????????? ????????? ?????? "????? ????? Microsoft" ?????? ??? ????? ????? ????? ???????. ??? ????????? ? ????? ????? ???? ???????? ??? ????? ???????? ??? ???? ?????? interoperation ? ???? ????? ??? ?? ?? ???? ? ??? ??? ???.

????????? ??????? (?? ?? ?? Windows 2000 Professional ? Server) ????? ??? ??? ??????? IPsec ???? ??? ????? ???? ????? ?? ???? ?????????. ????????? ??????? ?????? ????? ?? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/windowsserver/2000/bb735359.aspx
??? ????? ?????? ??????? ????????? ????? ????? IPsec Windows 2000 Server Resource Kit. ?????? ??? ??????? ??? Windows 2000 Resource Kit ???? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/reskit/default.mspx
????? ??????? ????? ??? ??????? IPSec ?????? ???? ???? ?? ????? ??? ????? ???????? ??? ?????? ?? ????????? ??? ??????? "?? ???? Microsoft ?????? ??? ?????:
http://www.microsoft.com/downloads/details.aspx?familyid=501a48d5-a3ee-4094-aeb4-16bbff098810
????? ?????? ??????? ???? ????? Windows 2000 microsoft.public.win2000.networking.????? ?? ?????????? ???? ??? ????? ???????? ??????? ?????? ?? "????? ??????? ?? Microsoft:
257225IPsec ??????? ??????? ???????? ?? ???? ??????? Microsoft Windows 2000 Server
259335??????? ????? ???????? L2TP/IPSec ???????? ?? ???? ??????? Windows 2000
248750??? ??? IPSec ????? L2TP/IPSec
?????? ??? ??????? ??? ????? ??? ???? ??????? Windows 2000 ?????? ?????? ???????? "?" ????? ??????? ??????? ???????? VPN ???? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/library/bb742565.aspx

???????

???? ???????: 265112 - ????? ??? ??????: 30/?????/1428 - ??????: 11.6
????? ???
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
????? ??????: 
kbmt kbinfo kbipsec kbnetwork KB265112 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????265112

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com