???? ??????? IPsec ?????????? ????????? ?????? ????? IPsec ?? "??? ???????"

?????? ????????? ?????? ?????????
???? ???????: 811832 - ??? ???????? ???? ????? ????? ??? ???????.
????? ???? | ?? ????

?? ??? ??????

??????

?? ??? ????? ???? "???? ???????? ??????" (IPsec) ?? Windows 2000 ? Windows XP ? Windows Server 2003 ????? ????? ????? ??????? ???????? ??? ??????. ??? ?? ??????? ?????? ???????? ?????? ?????? ??????? ???????? ??????? ????? ?????????? ??????? ?? ??? ??????. ?? ????? IPsec ????? ?????? ???? ?????? ?????? ???? ????????? ?????? ????? ???????. ???? ?????? ???? ????? ???? ??? ???????? ??????? ??????? ??? ?????? IPsec ????? ??? ?? ??? ??? IPSec, ???? ????? ????? ??????? ??? ?? ????? ?????? ???????? ?? ???? Kerberos ?? ?????? ????? ??? ?????? ??? ???? ??????? ???????? ??????? ?????? ??????? ??????? ????? (PKI).

??? ????? ????????? ????????? ??? ????? ????? ??? IPSec ?? ??????? Microsoft Windows 2000 ? Windows XP ??? ??????. ????? ??????? ??? ???? ?? ?????? ????? ?????? ???????? (IKE) ? Kerberos ??? ??????. ????? ??????? ????? ???? ?? ?????? ?????? "????? ??????" (QoS) ?? ??????? (RSVP) ????? ??? ????? ???? ???? ???????? ?????? IPsec ?? ?? ??? IPsec ????? ??? ???? ???? ??????? ??????? ????? ???? ????? ??????. ????? ?? ????????? ??? ????? ??????? ??? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
253169 ??? ????? ???? ?????? ???? ????--?? ????--?????? IPSec

??????? ????

??? ????? ??? ????????? IPsec ?????? - ???? ??????? ???????? ????? ????? ? ???? ??? ?? ????? ????????? ???? ??? ?????? ?? ??? ??? ??? ???? ??? ????????? ?????????? ???? ????. ???? ?????? ??? ????????? IPsec ?? ????? ??? IPsec ???? ??????? ?? ????, ???? ?? ??? ?????? ???? ?? ??????? ??????? ???? ?????? ????????? ?????????.

???? Microsoft ???? ??????? ?????? ????? ??????? ?? ??? ??????? ?????? ????????? ????????? ?? IPSec. ???? ???? ????? ??? ?? ??????? IPsec ?? ????? ??????? ??? ??? ?? ????? ??? ???? ??????? ??? ????????? ?? ?????? ??? ????????? ??? ??????. ????? ????????? ????????? ?? Kerberos ???? ????????? ?? defeating ????? ???? ???? ??? ?? ??????? ?? ??? IPSec ??????? ????? ??? IPsec. ??? ????? ????????? ?? ???? ????? ????? ???? ???? ???? ?????? ????????.

???? ????????? ????? ?? ??????? ??? ????????? ????? ???? ? ???????? ?????? IPsec ????? ????????
NoDefaultExempt=1
????? ??????? ??? ???? ????? ????????? ???????? ??? ???? ??????? Windows 2000 ? ????? ??? ???? ??????? Windows XP. ??? ??? ??? ????? ??????? ??? ?????? ?? ??? ???????.

????? ????????? IPsec ??????????

???? ?????? ?????? ????? ??????? ??????? ???? ??? ????? ??? ?? ????? ???? ????????? ????????? ??? ????? IPSec ??? ?? ??? ???? ??????? ?? ??? ?? ?????
NoDefaultExempt
??? ??????? ????? ????? .These 0 ??? ????????? ?????????? ???? ??? ??????? ?? ?????? ????? IPSec ?????? ????? ???? ??? ????? ?? ????? ????? ??? IPSec ??????. ??? ????? ????? ????? ?????? ?????? ??? ???? ????? ??? IPSec ??? ????????? ?? ???????.

????? ????? ????? ??
NoDefaultExempt=0
:
?? ??? ??????????? ??? ??????
????? ???????????? ???????????????????? ?????????? ??????????? ???????
????? IP ????? ???? ????? IPudp??88??????
?? ????? IP????? IP ????? ??udp88?? ??????
?? ????? IP????? IP ????? ??udp?? 88??????
????? IP ????? ???? ????? IPudp88?? ??????
????? IP ????? ???? ????? IPtcp?? 88??????
?? ????? IP????? IP ????? ??tcp88?? ??????
?? ????? IP????? IP ????? ??tcp?? 88??????
????? IP ????? ???? ????? IPtcp88?? ??????
????? IP ????? ???? ????? IPudp500500 (1)??????
?? ????? IP????? IP ????? ??udp500500??????
????? IP ????? ????RSVP 46 ()??????
?? ????? IP????? IP ????? ??RSVP 46 ()??????
?? ????? IP<multicast>(2)??????
????? IP ????? ??<multicast>??????
?? ????? IP<broadcast>(3) ??????
????? IP ????? ??<broadcast>??????
<?????????? IPv6 ???? ???? ?????? > (5)<???? ?????????? IPv6 ???? ???? > (4)??????
??? ????? ????? IP ???? ?????? ??????? ?? 255.255.255.255. ????? ???? ????? IP ?? ? ???? ?????? ??????? ?? 0.0.0.0.
  1. ????? ??? ?????? ??? ??? ????? IPSec ??? ??????? ??? ?? ???? ??? ??? IPSec SA ???? ???? ISAKMP ??? ?? ??? ??? ????? ??????? ??? ??? IPSec ?????.
  2. ??? ????? ???? ???? ??????? ??????? ???? ???? D ?? ???? ????? ???? ?? 224.0.0.0 ?? 240.0.0.0 ???? ?????? ???????. ????? ??? ???? ?? ?????? IP ?? 224.0.0.0 ??? 239.255.255.255.
  3. ??? ????? ???? ???? ???? ?????? ???? ?? 255.255.255.255 ????? ???? ?????? ?? ??? ????? ??? ???? ?????? ????? ??? ?? ????? IP ??? ???? 1s ????? ?? ?????? ???????.
  4. ?? ????? IPSec ????? ??? IP ??????? 6 (IPv6) ? ???????? ????? ????? ??? IPv6 ???? IPv4 ?? IP ?????????? 41. ?????? ??? ???? ?? ????????? ??? ??? IPv6 ?? Windows? ?? ?????? ???? Microsoft ?????? ??? ?????:
    http://technet.microsoft.com/en-us/network/bb530961.aspx

??? ???? ??????? ?? NoDefaultExempt

??? ?????? ?????? ???? ????????? ????????? ?? ????????? ???????? ?? Windows 2000 ? Windows XP:
?? ??? ??????????? ??? ??????
????? ???????? ????? ??????????? ???????????? ????? ?????? SP2?????? ????? ?????? SP3?????? ????? ?????? SP4
???? ??????? Windows 2000????? ????????? ?????????. ?? ??? ?????? ???????
NoDefaultExempt
.
???? ????????? ?????????, ??? ?????? ???????
NoDefaultExempt
??? 0 ?? 1.
????? ????????? ?????????. ??? ?????? ???????
NoDefaultExempt
? ??? 0 ?? 1.
????? ????????? ?????????. ??? ?????? ???????
NoDefaultExempt
? ??? 0 ?? 1.
????? ???????
NoDefaultExempt=1
???? ????? ????????? Kerb ? RSVP.
Windows XP???? ????????? ?????????, ??? ??????
NoDefaultExempt
??? 0 ?? 1.
???? ????????? ?????????, ??? ??????
NoDefaultExempt
??? 0 ?? 1.
????? ???????
NoDefaultExempt=1
? ???? ???? ?????? ????????? Kerb ? RSVP.


?????? ?? ????? IPSec ?? Windows 2000 ?Windows XP ????? ???? ?? ???? ???? ??????? ???????.

????? ????????? ?????????

????? ????? ??????? ?????? ??? ????????? ????????? ?? IPSec:
NoDefaultExempt

??? ????????: REG_DWORD
??????: ?????:
Windows 2000: 0-1 ????? ???
Windows XP: 0-1 ????? ???
Windows Server 2003: 0-3 ????? ???
???? (Windows 2000 ? Windows XP) ??????????: 0
???? (Windows Server 2003) ??????????: 3
?????? ???? ???????: ???
??? ????? ???????:
  • ????? ???? 0 ???? ??????? ??????? ? ???? RSVP Kerberos ? IKE ??? ????????? ?? ????? IPSec ???? ?????? (ISAKMP). ??? ?? ????????? ????? ???? Windows 2000 ? Windows XP. ?????? ??? ??????? ??? ??? ??? ???? ??? ??????? ?? ??? IPsec ??????? ?? ???? Windows 2000 ? Windows XP.
  • ????? ???? 1 ???? ???? Kerberos RSVP ???? ????????? ?? ????? IPSec ???? ??? ??????? ???? ???? IKE ? ???? ?? ??????? ???????. ??? ?? ?????? ?????? ??? ??? ?? Windows 2000 ? Windows XP.
  • ????? ???? 2 ???? ???? ??????? ??????? ????? ???? ????????? ?? ????? IPSec ???? ??? ??????? ???? ???? IKE ? Kerberos ?? RSVP. ????? ??? ?? Windows Server 2003.
  • ???? 3 ???? ????????? ?? ????? IPSec ???? ???? IKE ???. ????? ??? ?? Windows Server 2003. ????? Windows Server 2003 ??? ??? ?????? ????????? ??? ????? ?? ??? ???? ????? ??????? ???? ???????.
??? ??? ?????? ?? ????? ?? ?????? ??? ????? ?????? ?? ????? ????? ???????. ??? ???? ?? ???? ?????? ????? ?? ???? ????? ????? ?????? ??? ?????. ????? ???? ?? ???? ??????? ??????? ??????. ?????? ??? ??????? ??????? ??? ???? ???????? ?? ????? ??? ??????. ?? ????? ??????? ????? ?? ???? ???? ?????. ?????? ??? ???? ?? ????????? ??? ????? ??? ???? ???????? ?? ????? ????????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
322756????? ??? ???? ???????? ? ??????? ??????? ?? Windows


????? ????? ??????? ???:
  1. ???? ??? ???? ?? ???? ??? ????? ????? regedit ?? ???? ??? ?????.
  2. ???? ??? ????? ??????? ??????:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\IPSEC

    ?????? ?? Windows Server 2008 ??? Windows Vista ????? ???????:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent
  3. ???? ??? ?????? ?????? ??? IPSEC ? ??? ??? ???? ?? ???? ??? ???? DWORD.
  4. ??? ??? ??????? ?????? NoDefaultExempt.
  5. ????? ???? ?????
    NoDefaultExempt
    ?? 0 ??? 1. ??? ???? ???, ????? ??????? ???? ??? 1 ??? ???? ?????? ??? ??????? ?????? ?????? ??.
  6. ?? ?????? "???? ???????".
  7. ?? Windows XP? ???? ??? ???? ?? ???? ??? ???? ?????? ?? ?? ???? ????? ??????? ??? ????? ??????. ?? Windows 2000 ???? ??? ???? ? ???? ??? ??????? ?? ???? ??? ???? ?????? ?? ?? ???? ????? ??????? ??? ????? ??????.
  8. ???? ????? ??????? ??? ?????.
  9. ????? ?? ?? ?????? ????? ????? IPSec. Windows XP ????? ????? ????? ???? ????????? ??? ?????? ????.

???? ????????? ?????????

???? ?????? ?????? ??? ???? ??????? Windows 2000 ?? Windows XP IPSec ???? ?? ?????? ????? ????? ???? ??? ??????? ????. ??? ????? ???? ????? ???? ??? ??? ??????? ????????? ????? ???? ????? ?????? ???????. ??? ????? ??? ??????? ???? ????? ??? ??? ??? ????? ????????? IPSec ????? ??? ???????:
Source Address:		Any
Source Mask:		0.0.0.0
Destination Address:	My IP Address (10.10.1.2)
Destination Mask:	(255.255.255.255)
Protocol:		Any
Source Port:		Any
Destination Port:	Any
Mirrored:		No
??? ????? ??????? ?? ??? ?????? ??? ??? ???? ???? ????? ??????? ??????? ???? ?? ???????? ??? 10.10.1.2 ????? IP. ??? ??????? ??????? ???? ????????? ?????????? ??? ????? ???? ??????? ???.

???? ??????? IKE

??????? IKE ????? ??? ???? ?????? ??????? UDP 500. ????? IKE ????? ??? ????? ?? ?????? ?? ?? ????? ?????? ????? ????????? ??????? IKE. ?? ???? ????? ???????? IKE ??? ????? ??????? IKE ???? ?? ???? ???? ?????. ??? ???? ?? ???? ??????? ????? IKE ?????? ????? UDP ?? TCP ?????? ????. ???? IKE ??? IPsec ????? ????? ?????? ?? ??? ??? ??? ???? ??? ???? ?????. ???? ??????? IKE ??????? ?? ??????? ?????? ??? ????? IPSec ? IPSec ??? ??????? ????? ??????? ??? ?? ??? ?????? ?? ???? ?????? ???? ???? IKE ???? ?? ????? ?????? ??? ??? ???? ????? ???? ??????? ???????.

?????? IKE ???????? ???????? ??? ?? ???? ??? ??? ?????? (DoS) avoidance. ???? ?????? Service Pack 3 ?????? ?? Windows 2000 ? Windows XP ????? DoS ??????? avoidance IKE flooding ???????. ?? ???? ????? IKE ???? ????? ?? "???? IPsec" ? "?????? ????? IPSec. ???? ????? IKE ?????? ????? ????? IPsec ?? ???? ????? ??? ????? ????? IPsec.

??? ?????? ?? ???????? IKE ? ??? ?????? ???? ????? IPsec ????? ??? ?? ???????? ??? ??????:
  • ???? ??????? ???? ????? ??? ???? ???? UDP 500 ??? ???? ??????? ?? ???????? ??????????.
  • ????? ???? ????? TCP/IP ??????? ??? ????? ??????. ??????? "????? ???" ?? ?? ?????? ????? UDP ???????? ??? UDP 500. ?????? ??? ???? ?? ????????? ??? ??????? ??? ?????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    309798????? ????? TCP/IP ??????? ?? Windows 2000
    ??????? ????? netstat ?a ????? ??? ????? UDP.
  • ??? Windows XP ???? ????? ???? ????? ????? ?????? (ICF) ??? ????? ?????? ???? ?? ???? ?????? ???????. ???? ????? ????? ????? ????? UDP ??? UDP 500.?????? ??? ???? ?? ????????? ??? ICF ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
    283673????? ????? ?? ????? ????? ???? ??????? ?? Windows XP

???? ??????? Kerberos ?????????

????? ??? ?????? ?? ??? ?????? ???? ???? ???? ?????? ??????? ??? ??????? ?????? ???? ??????? ???????? ????? ???? ???? Kerberos ???? ??? ????? ???? ??????? ???. ???? ?????? ???? ??????? ????? ?????? ??????? UDP ?? TCP ???? ?????? ?????? ?????? 88 ??? ?????? ??? ?? ???? ?????? ?? 10.10.1.2. ??? ????? ??? ???? UDP ? TCP ??? ?? ???? ??????? ????. ??? ??? ??????? ?????? ????? ???????
NoDefaultExempt
???? ?????. ?? ???? ??????? ???? ????? ?? ???? ????? ??????? ?? ?? ?? ?? ???? ??? ???? ???? ?? ????? ???????? ??? ?????? ?????? ???? ?????? ???? ???????? ????? Kerberos.

?????? ?? ?????? ?? ??????? ???? ?????? ?????? ?? ??? ?????? ??? ?? ???? ??? ??????? ????? ???? ?????? ??? 88 ??? ???? ???????? ??????? ????????. ???? ????? ?????? ?? ??????? ???? ?????? ????? ????? ICMP ??????? ?????? ??? ??????? ??? ???? TCP ?? UDP ??? ?????. ??? ?? ??? IPsec ???? ???? ICMP, ?? ????? ????? ???? ????? ?????? ?????. ??????? ???? ???? ???????? ???? "?????? ??????" ?????? ?? ?? ???? ?????? ???? ??? ??????? ????????? ??? ???? ???????.

??? Kerberos ????? ????????? ? ????? ?? ???? ??????? IPSec ?????? ???? ??? ?????? ???????? ?????? Kerberos ?? IKE, ??? ?? ???? ???????? ??????? ??? IPsec ???????:
  • ??????? ???? ?????? ?????? Kerberos IKE ??
    NoDefaultExempt=1
    ?? ???? ??????? ?? ??????? ???? ??? ??????? ?????? Kerberos IKE ??? ????? ??? ???? ????? ??????? ???. ??????? ?????? ??????? IKE ????? ?? Kerberos ??? ??? ?????.
  • ??? ????? ????????? ????? ????? ???? Kerberos ? 389 UDP ?? ???? ?????? IP DC ??? ????? ?? ??? IPsec. ??? ???????? ?? ???? 2003? ?? ???? Microsoft IPSec ????? ???? ?????? ?? ??? ???? ??? ????? ???? ?????? ????? ??, ????? ????? ????? ??? IPsec ?????? ????? ???? ???? ?????? IP ???? ???? ?????? ???? ????. ?? ????? ??? ?????? ???? ????? ??????? ??? ??? ???? ??? ????? ?????? ?? ?????? IP DCs. DC ???? ???? ??? DCs (?????? IP ?????). ??? ???????? ????? ????? ????? ?? ??? ???? DC ?? ???? ?? ???? ????? ?? ???? ???? ????? ?????? IP ??????. ??? ???? ?????? ????? ?????? ??????? ??? ??? ???? ??????? ???? ??? DNS ?????? ?????? ???? ?? ???? ????? ????? ???? ????? ????. ???? ??? ??????? ??? ?? ??? ?????? ????? DNS ??? ???? ?????? IP ?????? ?? ?????? ?? ????? ????? ????? IP ?? ???????. ???? ?? ????? ?????? IP ??? ??????? ????? ????? ??????? ?? ???????. ??? ????? ????? DC ????? ?? ????? ???? ????? ???? ?? ????? ????? ??????? ???. ???? Microsoft ???????? ????? ????? ????? ????? ?? DC ???? ?? ???? ???? ?? ??? ???????? ??? ????? ??? IPsec. ???? ?? ?? ??? ????? ???? ??????? ???? ??? ??? ??????? ?????? ?? ????? ?????? IP ?????? ?????? ?????.
????? ?? ????????? ??? ??????? ??? ????? ?????? ??????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
254949??? IPSec ???? ?????? ???? ???? ?????? ?????? ????? ???? ???? ?????? ???? ???? ??????

???? ??????? RSVP

?? ????? ???? ??? ??? ?????? ?????? flooding ?? ????? ????? RSVP ?????????? ?? ??? ??? 10.10.1.2 ????? ??? ???? ??????? ?????? RSVP. ??? ?? ????? IP ????????? ?? ?????? ?????? ?? ????? ??? ?????? ????? IPsec ?????? ??????? ???? ??????? ?? ??????.

???????? RSVP ???????? IP 46. ??? ???????? ????? ???????? ????????? ?? ??? ??? ?????? ??????? ?? ????? ??????? ????? ?????? ????????.

RSVP ?? ???? ??????? Windows 2000

?????? Windows 2000 ???????? RSVP ?????? ???????:
  • ??? ????? ???? ?????? ???? ?????? QoS. ??? ???? ???? ??????? ?? ????? ????????? ???? ???? ??? Windows 2000 Server. ??? ?? ????? ? ????? ????? ???? ???? RSVP.
  • ??? ????? ???? RSVP "???? ??????" (QoS). ?????????? ??? ?????? ???? ????? ????? autostart. ????? ??? ??????? ?????? ?????? ?????? Rsvp.exe ?????? RSVP ??? ???????? ?? unloads ??? ??? ???? ???? ???? ???? ?? ????? RSVP ???????. ????? ???????? Rsvp.exe ???? ???? ??? ?????? ????? QoS.
  • ??? ?????? ???? ????? ?? ???? ???? ????? GQoS. ????? ???????? Rsvp.exe ???? ????? ?????? ?????? ????? ?????? ???? ???????.
  • ?????? ????? pathping ?r ???????? RSVP ?????? ?? ??? ???? ????? ??????? ?????? ????? RSVP.
?????? ??? ???? ?? ????????? ??? ????? ????? ???????? RSVP ?????? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
247103????? ????? ?????? RSVP
??? ??????? ???? QoS RSVP ?? ???? ?????? ????? RSVP ??? ??????? ???????? ?????????.

RSVP ?? ???? ??????? Windows XP

?? ????? ???????? RSVP ?? Windows XP. ??? ????? ?? ?? ??? ????? ???? RSVP "???? ??????" (QoS) ???? ???????, ???? ??? ????? ????? ????. ?????? ?? ????? ?? ?????? ????? ???????? RSVP ????????. ?? ???? ???? RSVP ??? ?????????? ???????? ??? ???? ?????? TCPIP IP ????? ??? 46. ???? ?? ??? ????? ??? ????? ???????. ??? ?? ??? ??? ????? ???? QoS RSVP ??? ???????? TCP/IP ???? ????? ?????? RSVP ??????? ? ?? ?? ?????? ???? "???? ??? ????? ??????" ICMP ?? ?????????.

?????? Windows XP ??? ???????? RSVP ??? ????? pathping ?r ?????? ???????? RSVP ?????? ?? ??? ???? ????? ??????? ?????? ????? RSVP.

????? ????? RSVP ?????

??? ????? ??????? ?????? IPsec ??????? ?? ????? ?????? ?? ???? ??????? ???????? RSVP
NoDefaultExempt=1
????? ??????? ??? ????? ????????? RSVP ?? IPsec. ????? ?? ???? ????? ????? ???? QoS RSVP ?? ????? RSVP ??? ????????.?????? ??? ???? ?? ????????? ??? ????? ?????? ???? ???? ??? ??? ??????? ?????? ?????? ?? "????? ??????? ?? Microsoft:
247103????? ????? ?????? RSVP
?? ???? ??? ????? ???????? RSVP ???? ????? ????? ??????? ???? ???? ?? ??? IPsec ?????? ???????? IP 46 ??? ?????? ?????? ??????? ????????. ???? RSVP ??????? ?? ????? ??????? ? ??? ???? Microsoft ???????? IPSec ??????? ??? ?????? RSVP. ?????? ???? ????? ??????? RSVP ????? ??????? ????? ?? ???? ????? ?????? IPSec.

???? ???? ?? ??????? ??????? ???????

????? ??? ?????? ??????? ??????? ????? ?????? ?? ????? ???? ??????? ?????? ?????? ???? ????? ??????? ??????? ??? ????? ???? ????? IP ????? ??????? ????? (10.10.1.2). Windows 2000 ? Windows XP IPsec ????? ?? ???? ??????? ????? ???? ???? ??????? ??????? ?? ????.

??? ????????? ?????? ??? ??????? ??????? ?? ???? ? ?????? ???? ??? ????? ???????? ?????? ????????? ???? ??????? ????? ???? ????? IPsec ???? ?? ????????? ?? ?????? ??????. ????? ??????? ?? ???? ??? ?????? ??????? ??????? ?????? ???? ???????? ???? ?????? ??? ???? ??? ????? ???? ????? ???????? ?????????? ?? ????? ????? ???? ??? ??????? ???? ??????? ??????? ?? ???? ?????? ???????. ?? ??? ??????? ??? IPsec ???? ?????? ???? ??????? ??? ? ?????? ???????? ??? ????? ?? ??????? ???? ????? ????? ?? IPSec ??? ? ? ????? ?? ????? ?? ??????? ??????? ??????? ?? ??????? ???? ???? ???? ????? ????????? ???? ?????? ??????? ??????? ??????. ??? ?? ???? ?????? ????? IKE ????? ???? ???? ????? ???? SA ???? ???? ???? ??????? ???????. ?? ?????? ????? ????? ???? TCP ??? ????? ???????? ????? ???? ??????? ??????? ?? ???? ??????? ?????? ????? ????? IPsec. ??? ??? ???????? ?? ???????? ???? ????? ??????? ???? ???? ????? ????? ??????? ??????? ?? ???? ?? ???? ??????? ?????? ??? ??????? ?? ??? ???????? ??? ??? ??????? ???????? ??? ?????? ??? ???? ??????? ????? ????.

???? Microsoft ?? ??????? IPsec ?????? ????? ???? ??????? ????? ??????? ?? ????? ???? ??????? ?????? ????? ???? ?? ??? ?????? ??????? ??? IPsec ??????? ?? ?????.

????? ??????? ???????? ??? TCP/IP ????? ????? ??????? ???? ?????? ???? ???? IP ????? ??????? ???? ?? ???? ??????? ????? ???? ???? ??????? ??????? ?? ????. ?? Windows 2000 ?Windows XP ??????? ???????? ???? ?????? UDP ???? ????? raw ???? ??????? ???? ???? ???? ???? ??? ?? ????? ??? ??????? ??? ???????. ???? ???????? ??? ?? ?? ???? ????? ????? 2644 RFC ????? ???? ???? ???? ??? ????? ???????. ???? ????? ?????? ?? ???? ???? ???? ?? ??? ??????? ?? ???????? ??????:
  • ????? ?? ???????? ? ??? ??? IP ?????? ?? ????? 255.255.255.255.
  • ?? Directed ????? ?????? - ??? ??? ??? ????? IP ?????? x.y.255.255 ?? x.y.z.255 ?? ????? ?????? ??????? ????????.
????? ??????? ????? ???? ??????? ?????? ??? ???????? ???? ?????? ???. ????? ?? ??? ??????? ???? ???? ??????? ??????? ????? ??????? ?? ???? ??????? ?????. ?? ??????? ????????? ?????? ?????????? ?????? ???? ???? IP ????? ??????? ??? ?????? IP ??????? ???????.

?????? ??????? UDP ???? ????? ????? ???? ???? ???? ???? ??????? ??????? ????? netstat:
  • ???? ??????? Windows 2000: netstat - a -p UDP ???? ???? ????? ??? ??????? ??? ??? ???????.
  • Windows XP: ?p ?ao netstat UDP-ao ???? ??? ??????? ???? ??????? ???????? ?? ?????? ??? ??????? ???? ?????? ??????? ????????.

?? ??????? ??????? ???? ???? ???? ??????? ??????? ?


??? ????? ??????? ???? ???? ?? ???? TCPIP ????? ???? ?????? ??????? ??????? ???????. ??? ?? ??? ????? ???????? ????? ??? ????? ?? ???? ???? ??? ????? ????? ??????? ??????? ???????. ??? ???? ??????? ??????? ???? ?? ???? ????? ????? ?? ???? ???? ??????? (?????? ??????) ? ?????? ?????? ???? IP ?? ???? UDP. ??? ?? ???? ????????? ??? ????? ?? ?? ????? ???? ???? ??????? ??????? ??????? ??? ???? ??????? ???? ???? ?????? ??? ??? ???? ??????? ???? ???? ??????? ??????? ??????? ???? ???????. ????? ??????? ??????? ???? ?? ???? ????????? ?????? ??????:
  • ???? ??????? Windows 2000: ???? ????? ????????
  • Windows XP:
    1. ???? ??? ???? ?? ???? ??? ????? ????? cmd ?? ???? ??? ?????.
    2. ???? netsh interface ip ????? ?????? ?? ?? ???? ENTER.

???????? IPsec ?? ???? ????? ????? ????????

Windows XP? ?? ???? ????? ????? ?????? (ICF) ????? ??????? ?????? ?????? ???? ???? ???? ????. ICF ???? ???? ???? ???? ??????? ??????? ????? ??????? ?? Windows XP SP1. ??? ???? ICF ??? ??? ???? ???? ????? ?????? IPSec AH ?? ESP ?? ??? ????? "??" ???. ???? IPsec ?? ???? ???? ????? ???? ICF. ??? ????? IKE ????? ICF. ????? ???? ICF ??? ???? ???? ???? IKE (???? UDP 500) ??????? ? ?? ????? ?????????? IPsec AH ?? ESP ???? ???? ???? TCP ?? UDP ??? ??? IPsec decapsulated ?? ?????? ??????. ??? ??? IPSec ???? ???? ??????, ??? ?????? ICF ????? ?? ????? ??? ????? ???? ?? ??????? IPsec.

???? ??? ????? IPsec ?? ICF ????? ?????? ??????? ????????. ??? ???? ??????? ???? ????? ICF ???? ???? TCP 445 ?? ?? ????? IP ?? ?? ??? ??????? ???? ????? IPsec ????? ??? ????? ??? ?????? ?????? ?????? ???? ????? ???. ???? ??? ?? ???? ?? ????? IPSec ??????? ??? ?????? ?? ??? ?? ???? ???? ???? ????? ????? ICF ?? ?? ????????? ??????? ??????? ??? ???? ????? ?????? IKE ??????? ??? (???? UDP 500) (???? TCP 445) ??????? ??????? SMB.

?????

?????? ??? ???? ?? ????????? ??? ????? TCP/IP ??? ????? ?????? Windows 2000 TCP/IP Detailed ???????. ?????? ????? ?? ?????? ???? Microsoft ?????? ??? ?????:
http://technet.microsoft.com/en-us/library/bb726981.aspx
????? ?? ????????? ??? ???? IP "? ???? ??? ????? ???????? ??????? ?????? ??" ????? ??????? ?? Microsoft:
253169??? ????? ???? ?????? ???? ????--?? ????--?????? IPSec
254728?? ???? IPSec ???? ???? Kerberos ??? ????? ?????? ???????
308127????? ??? ??????? ?????? ?? "???? ????? ??????? ???????" ?? Windows XP
810207??? ????? ????????? ????????? IPSec ?? Windows Server 2003

???????

???? ???????: 811832 - ????? ??? ??????: 01/???/1429 - ??????: 7.2
????? ???
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Datacenter Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows XP Professional
????? ??????: 
kbmt kbfirewall kbprb kbinfo KB811832 KbMtar
????? ????
???: ??? ????? ??? ?????? ???????? ?????? ????? ???? ????? ?????????? ????? ?? ????????? ?????? ????. ???? ???? ?????????? ???? ?? ???????? ???????? ?????? ????????? ????? ????????? ???????? ????? ???????? ?????? ?? ?????? ??? ?? ???????? ???????? ?? ????? ??????? ?????? ??? ??????? ?????? ??. ?????? ?? ???? ??? ??????? ???????? ????? ?? ???? ????? ?????? ??? ????? ??? ????? ??????? ?? ????? ?? ?????? ??? ??? ??????? ??????? ?? ????? ????? ????? ????? ?????. ?? ????? ???? ?????????? ??????? ??? ????? ?? ??????? ?? ????? ?????? ?? ??? ????? ?? ????? ??????? ?? ???????? ?? ??? ???????. ???? ???? ?????????? ???????? ??? ????? ?????? ??????? ??????
???? ??? ????? ??????? ?????? ??????????811832

????? ???????

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com