{"id":6881,"date":"2026-08-13T17:00:42","date_gmt":"2026-08-13T13:30:42","guid":{"rendered":"https:\/\/parmin.cloud\/blog\/?p=6881"},"modified":"2026-08-13T17:00:42","modified_gmt":"2026-08-13T13:30:42","slug":"%d8%a2%d9%85%d9%88%d8%b2%d8%b4-%d8%b1%d8%a7%d9%87%d8%a7%d9%86%d8%af%d8%a7%d8%b2%db%8c-%d8%b3%d8%b1%d9%88%d8%b1-vpn-%d8%a8%d8%a7-%d9%be%d8%b1%d9%88%d8%aa%da%a9%d9%84-ikev2-%d8%a8%d8%a7-%d8%a7","status":"publish","type":"post","link":"https:\/\/parmin.cloud\/blog\/%d8%a2%d9%85%d9%88%d8%b2%d8%b4-%d8%b1%d8%a7%d9%87%d8%a7%d9%86%d8%af%d8%a7%d8%b2%db%8c-%d8%b3%d8%b1%d9%88%d8%b1-vpn-%d8%a8%d8%a7-%d9%be%d8%b1%d9%88%d8%aa%da%a9%d9%84-ikev2-%d8%a8%d8%a7-%d8%a7\/","title":{"rendered":"\u0622\u0645\u0648\u0632\u0634 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0633\u0631\u0648\u0631 VPN \u0628\u0627 \u067e\u0631\u0648\u062a\u06a9\u0644 IKEv2 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 StrongSwan \u062f\u0631 \u0627\u0648\u0628\u0648\u0646\u062a\u0648 24.04"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\"><strong>\u0645\u0642\u062f\u0645\u0647<\/strong><br>\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc (VPN) \u0628\u0647 \u0634\u0645\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062e\u0648\u062f \u0631\u0627 \u0647\u0646\u06af\u0627\u0645 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0646\u0627\u0627\u0645\u0646 (\u0645\u0627\u0646\u0646\u062f \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc\u200c\u0634\u0627\u067e\u060c \u0641\u0631\u0648\u062f\u06af\u0627\u0647 \u06cc\u0627 \u06a9\u0646\u0641\u0631\u0627\u0646\u0633\u200c\u0647\u0627) \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u0645\u0646 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u0631\u0648\u062a\u06a9\u0644 \u062a\u0628\u0627\u062f\u0644 \u06a9\u0644\u06cc\u062f \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0646\u0633\u062e\u0647 \u06f2 (IKEv2) \u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062a\u0648\u0646\u0644\u200c\u0632\u0646\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 IPSec \u0628\u06cc\u0646 \u0633\u0631\u0648\u0631 \u0648 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\u200c\u0647\u0627\u06cc VPN \u0628\u0627 IKEv2\u060c \u067e\u0631\u0648\u062a\u06a9\u0644 IPSec \u0648\u0638\u06cc\u0641\u0647 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u0631\u0627 \u0628\u0631 \u0639\u0647\u062f\u0647 \u062f\u0627\u0631\u062f. \u067e\u0631\u0648\u062a\u06a9\u0644 IKEv2 \u0628\u0647 \u0635\u0648\u0631\u062a \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0631\u0648\u06cc \u0628\u0631\u062e\u06cc \u067e\u0644\u062a\u0641\u0631\u0645\u200c\u0647\u0627 (\u0645\u0627\u0646\u0646\u062f OS X 10.11 \u0628\u0647 \u0628\u0627\u0644\u0627\u060c iOS 9.1 \u0628\u0647 \u0628\u0627\u0644\u0627 \u0648 \u0648\u06cc\u0646\u062f\u0648\u0632 10) \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc \u0645\u06cc\u200c\u0634\u0648\u062f \u0648 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0646\u0635\u0628 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 \u0627\u0636\u0627\u0641\u06cc \u0646\u062f\u0627\u0631\u062f. \u0647\u0645\u0686\u0646\u06cc\u0646 \u0627\u06cc\u0646 \u067e\u0631\u0648\u062a\u06a9\u0644 \u062f\u0631 \u0628\u0631\u0627\u0628\u0631 \u0642\u0637\u0639\u06cc\u200c\u0647\u0627\u06cc \u0645\u0648\u0642\u062a \u06a9\u0644\u0627\u06cc\u0646\u062a \u0645\u0642\u0627\u0648\u0645\u062a \u0628\u0627\u0644\u0627\u06cc\u06cc \u062f\u0627\u0631\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0627\u06cc\u0646 \u0622\u0645\u0648\u0632\u0634\u060c \u0634\u0645\u0627 \u06cc\u06a9 \u0633\u0631\u0648\u0631 VPN \u0628\u0627 \u067e\u0631\u0648\u062a\u06a9\u0644 IKEv2 \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 StrongSwan \u0631\u0648\u06cc \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0627\u0648\u0628\u0648\u0646\u062a\u0648 24.04 \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u062e\u0648\u0627\u0647\u06cc\u062f \u06a9\u0631\u062f. \u0633\u067e\u0633 \u0646\u062d\u0648\u0647 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0622\u0646 \u0627\u0632 \u0637\u0631\u06cc\u0642 \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627\u06cc \u0648\u06cc\u0646\u062f\u0648\u0632\u060c \u0645\u06a9\u200c\u0627\u0648\u200c\u0627\u0633 (macOS)\u060c \u0627\u0648\u0628\u0648\u0646\u062a\u0648\u060c iOS \u0648 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0631\u0627 \u06cc\u0627\u062f \u0645\u06cc\u200c\u06af\u06cc\u0631\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><em>(\u0646\u06a9\u062a\u0647: \u0627\u0632 \u0622\u0646\u062c\u0627\u06cc\u06cc \u06a9\u0647 \u0646\u0633\u062e\u0647\u200c\u0647\u0627\u06cc \u0642\u062f\u06cc\u0645\u06cc\u200c\u062a\u0631 \u0627\u0648\u0628\u0648\u0646\u062a\u0648 \u0645\u0627\u0646\u0646\u062f 20.04 \u0628\u0647 \u067e\u0627\u06cc\u0627\u0646 \u0639\u0645\u0631 \u062e\u0648\u062f \u0631\u0633\u06cc\u062f\u0647\u200c\u0627\u0646\u062f\u060c \u062f\u0631 \u0627\u06cc\u0646 \u0645\u0642\u0627\u0644\u0647 \u0645\u0631\u0627\u062d\u0644 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0648\u0628\u0648\u0646\u062a\u0648 24.04 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0631\u062f\u0647\u200c\u0627\u06cc\u0645.)<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u067e\u06cc\u0634\u200c\u0646\u06cc\u0627\u0632\u0647\u0627<\/strong><br>\u0628\u0631\u0627\u06cc \u062a\u06a9\u0645\u06cc\u0644 \u0627\u06cc\u0646 \u0622\u0645\u0648\u0632\u0634 \u0628\u0647 \u0645\u0648\u0627\u0631\u062f \u0632\u06cc\u0631 \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u06cc\u062f:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>\u06cc\u06a9 \u0633\u0631\u0648\u0631 \u0627\u0648\u0628\u0648\u0646\u062a\u0648 24.04 \u06a9\u0647 \u0637\u0628\u0642 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0633\u0631\u0648\u0631 \u062f\u0631 <strong>\u067e\u0627\u0631\u0645\u06cc\u0646 \u06a9\u0644\u0648\u062f (Parmin Cloud)<\/strong> \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0634\u062f\u0647 \u0628\u0627\u0634\u062f\u060c \u0634\u0627\u0645\u0644 \u06cc\u06a9 \u06a9\u0627\u0631\u0628\u0631 \u063a\u06cc\u0631 \u0631\u0648\u062a (non-root) \u0628\u0627 \u062f\u0633\u062a\u0631\u0633\u06cc sudo \u0648 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644.<\/li>\n<\/ul>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f1 \u2014 \u0646\u0635\u0628 StrongSwan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 StrongSwan \u0631\u0627 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645. StrongSwan \u06cc\u06a9 \u062f\u06cc\u0645\u0648\u0646 (Daemon) \u0645\u062a\u0646\u200c\u0628\u0627\u0632 IPSec \u0627\u0633\u062a \u06a9\u0647 \u0645\u0627 \u0622\u0646 \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0633\u0631\u0648\u0631 VPN \u062e\u0648\u062f \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f. \u0645\u0627 \u0647\u0645\u0686\u0646\u06cc\u0646 \u06a9\u0627\u0645\u067e\u0648\u0646\u0646\u062a \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u06a9\u0644\u06cc\u062f \u0639\u0645\u0648\u0645\u06cc (PKI) \u0631\u0627 \u0646\u0635\u0628 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645 \u062a\u0627 \u0628\u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u0645\u0631\u062c\u0639 \u0635\u062f\u0648\u0631 \u06af\u0648\u0627\u0647\u06cc (Certificate Authority \u06cc\u0627 CA) \u0628\u0631\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a \u062e\u0648\u062f \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u0645.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 \u06a9\u0634 \u067e\u06a9\u06cc\u062c \u0645\u062d\u0644\u06cc \u0631\u0627 \u0628\u0647\u200c\u0631\u0648\u0632\u0631\u0633\u0627\u0646\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631\u0647\u0627 \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt install strongswan strongswan-pki libcharon-extra-plugins libcharon-extauth-plugins libstrongswan-extra-plugins<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u067e\u06a9\u06cc\u062c <code>libcharon-extauth-plugins<\/code> \u0627\u0637\u0645\u06cc\u0646\u0627\u0646 \u062d\u0627\u0635\u0644 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0628\u062a\u0648\u0627\u0646\u0646\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0645\u0634\u062a\u0631\u06a9 \u0628\u0627 \u0633\u0631\u0648\u0631 \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a \u06a9\u0646\u0646\u062f. \u067e\u06a9\u06cc\u062c <code>libstrongswan-extra-plugins<\/code> \u0646\u06cc\u0632 \u0628\u0631\u0627\u06cc \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u06cc StrongSwan \u0627\u0632 \u0645\u062c\u0645\u0648\u0639\u0647\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0645\u0646\u062d\u0646\u06cc \u0628\u06cc\u0636\u0648\u06cc (Elliptic Curve) \u06a9\u0647 \u0627\u0632 \u043a\u0440\u0438\u043f\u062a\u0648\u06af\u0631\u0627\u0641\u06cc Curve25519 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f\u060c \u0634\u0627\u0645\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f2 \u2014 \u0627\u06cc\u062c\u0627\u062f \u0645\u0631\u062c\u0639 \u0635\u062f\u0648\u0631 \u06af\u0648\u0627\u0647\u06cc (CA)<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9 \u0633\u0631\u0648\u0631 IKEv2 \u0628\u0631\u0627\u06cc \u0645\u0639\u0631\u0641\u06cc \u062e\u0648\u062f \u0628\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627 \u0628\u0647 \u06cc\u06a9 \u06af\u0648\u0627\u0647\u06cc (Certificate) \u0646\u06cc\u0627\u0632 \u062f\u0627\u0631\u062f. \u0628\u0631\u0627\u06cc \u06a9\u0645\u06a9 \u0628\u0647 \u0627\u06cc\u062c\u0627\u062f \u06af\u0648\u0627\u0647\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632\u060c \u067e\u06a9\u06cc\u062c <code>strongswan-pki<\/code> \u0634\u0627\u0645\u0644 \u0627\u0628\u0632\u0627\u0631\u06cc \u0628\u0647 \u0646\u0627\u0645 <code>pki<\/code> \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u0627\u06cc \u062a\u0648\u0644\u06cc\u062f CA \u0648 \u06af\u0648\u0627\u0647\u06cc\u200c\u0647\u0627\u06cc \u0633\u0631\u0648\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 \u0686\u0646\u062f \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0628\u0631\u0627\u06cc \u0630\u062e\u06cc\u0631\u0647 \u062a\u0645\u0627\u0645 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0631\u0648\u06cc \u0622\u0646\u200c\u0647\u0627 \u06a9\u0627\u0631 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f. \u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0628\u0627 \u0628\u0631\u062e\u06cc \u0627\u0632 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u200c\u0647\u0627\u06cc \u0645\u0648\u062c\u0648\u062f \u062f\u0631 <code>\/etc\/ipsec.d<\/code> \u0645\u0637\u0627\u0628\u0642\u062a \u062f\u0627\u0631\u062f\u060c \u062c\u0627\u06cc\u06cc \u06a9\u0647 \u062f\u0631 \u0646\u0647\u0627\u06cc\u062a \u062a\u0645\u0627\u0645 \u0645\u0648\u0627\u0631\u062f \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0631\u0627 \u0628\u0647 \u0622\u0646\u062c\u0627 \u0645\u0646\u062a\u0642\u0644 \u062e\u0648\u0627\u0647\u06cc\u0645 \u06a9\u0631\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>mkdir -p ~\/pki\/{cacerts,certs,private}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u0645\u062c\u0648\u0632\u0647\u0627 \u0631\u0627 \u0642\u0641\u0644 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc \u062e\u0635\u0648\u0635\u06cc \u0634\u0645\u0627 \u062a\u0648\u0633\u0637 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062f\u06cc\u06af\u0631 \u062f\u06cc\u062f\u0647 \u0646\u0634\u0648\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>chmod 700 ~\/pki<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u06a9\u0647 \u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0631\u0627 \u062f\u0627\u0631\u06cc\u0645\u060c \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u0645 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u0631\u06cc\u0634\u0647 (Root Key) \u062a\u0648\u0644\u06cc\u062f \u06a9\u0646\u06cc\u0645. \u0627\u06cc\u0646 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f RSA 4096 \u0628\u06cc\u062a\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0627\u0645\u0636\u0627\u06cc \u06af\u0648\u0627\u0647\u06cc \u0631\u06cc\u0634\u0647 CA \u0645\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u0634\u0648\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pki --gen --type rsa --size 4096 --outform pem &gt; ~\/pki\/private\/ca-key.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06a9\u0644\u06cc\u062f\u06cc \u06a9\u0647 \u0628\u0647 \u062a\u0627\u0632\u06af\u06cc \u062a\u0648\u0644\u06cc\u062f \u06a9\u0631\u062f\u06cc\u0645\u060c \u06af\u0648\u0627\u0647\u06cc \u0631\u06cc\u0634\u0647 CA \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u0648 \u0627\u0645\u0636\u0627 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pki --self --ca --lifetime 3650 --in ~\/pki\/private\/ca-key.pem \\\n    --type rsa --dn \"CN=VPN root CA\" --outform pem &gt; ~\/pki\/cacerts\/ca-cert.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0644\u06af <code>--lifetime 3650<\/code> \u062a\u0636\u0645\u06cc\u0646 \u0645\u06cc\u200c\u06a9\u0646\u062f \u06a9\u0647 \u06af\u0648\u0627\u0647\u06cc \u0631\u06cc\u0634\u0647 CA \u0628\u0631\u0627\u06cc \u06f1\u06f0 \u0633\u0627\u0644 \u0645\u0639\u062a\u0628\u0631 \u062e\u0648\u0627\u0647\u062f \u0628\u0648\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f3 \u2014 \u062a\u0648\u0644\u06cc\u062f \u06af\u0648\u0627\u0647\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631 VPN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u06cc\u06a9 \u06af\u0648\u0627\u0647\u06cc \u0648 \u06a9\u0644\u06cc\u062f \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631 VPN \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645. \u0627\u06cc\u0646 \u06af\u0648\u0627\u0647\u06cc \u0628\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06af\u0648\u0627\u0647\u06cc CA \u06a9\u0647 \u0628\u0647 \u062a\u0627\u0632\u06af\u06cc \u062a\u0648\u0644\u06cc\u062f \u06a9\u0631\u062f\u06cc\u0645\u060c \u0627\u0635\u0627\u0644\u062a \u0633\u0631\u0648\u0631 \u0631\u0627 \u062a\u0627\u06cc\u06cc\u062f \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 \u06cc\u06a9 \u06a9\u0644\u06cc\u062f \u062e\u0635\u0648\u0635\u06cc \u0628\u0631\u0627\u06cc \u0633\u0631\u0648\u0631 VPN \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pki --gen --type rsa --size 4096 --outform pem &gt; ~\/pki\/private\/server-key.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633\u060c \u06af\u0648\u0627\u0647\u06cc \u0633\u0631\u0648\u0631 VPN \u0631\u0627 \u0628\u0627 \u06a9\u0644\u06cc\u062f CA \u0627\u06cc\u062c\u0627\u062f \u0648 \u0627\u0645\u0636\u0627 \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u062f\u0633\u062a\u0648\u0631 \u0632\u06cc\u0631\u060c \u0641\u06cc\u0644\u062f <strong>Common Name (CN)<\/strong> \u0648 <strong>Subject Alternate Name (SAN)<\/strong> \u0631\u0627 \u0628\u0627 \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 \u06cc\u0627 \u0622\u062f\u0631\u0633 IP \u0633\u0631\u0648\u0631 VPN \u062e\u0648\u062f \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>pki --pub --in ~\/pki\/private\/server-key.pem --type rsa \\\n    | pki --issue --lifetime 1825 \\\n        --cacert ~\/pki\/cacerts\/ca-cert.pem \\\n        --cakey ~\/pki\/private\/ca-key.pem \\\n        --dn \"CN=server_domain_or_IP\" --san server_domain_or_IP \\\n        --flag serverAuth --flag ikeIntermediate --outform pem \\\n    &gt;  ~\/pki\/certs\/server-cert.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u0646\u06a9\u062a\u0647: \u0627\u06af\u0631 \u0627\u0632 \u0622\u062f\u0631\u0633 IP \u0628\u0647 \u062c\u0627\u06cc \u0646\u0627\u0645 \u062f\u0627\u0645\u0646\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0628\u0627\u06cc\u062f \u0686\u0646\u062f\u06cc\u0646 \u0648\u0631\u0648\u062f\u06cc <code>--san<\/code> \u0631\u0627 \u0645\u0634\u062e\u0635 \u06a9\u0646\u06cc\u062f. \u062e\u0637 \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u0646\u0627\u0645 \u0645\u062a\u0645\u0627\u06cc\u0632\u06a9\u0646\u0646\u062f\u0647 (<code>--dn<\/code>) \u0628\u0627\u06cc\u062f \u0628\u0627 \u0648\u0631\u0648\u062f\u06cc\u200c\u0647\u0627\u06cc \u0627\u0636\u0627\u0641\u06cc \u0645\u0627\u0646\u0646\u062f \u0632\u06cc\u0631 \u0627\u0635\u0644\u0627\u062d \u0634\u0648\u062f:<\/em><br><code>--dn \"CN=IP address\" --san @IP_address --san IP_address \\<\/code><br>\u062f\u0644\u06cc\u0644 \u0627\u06cc\u0646 \u0648\u0631\u0648\u062f\u06cc <code>--san @IP_address<\/code> \u0627\u0636\u0627\u0641\u06cc \u0627\u06cc\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0631\u062e\u06cc \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627 \u0647\u0646\u06af\u0627\u0645 \u0628\u0631\u0631\u0633\u06cc \u0647\u0648\u06cc\u062a \u0633\u0631\u0648\u0631\u060c \u0628\u0631\u0631\u0633\u06cc \u0645\u06cc\u200c\u06a9\u0646\u0646\u062f \u06a9\u0647 \u0622\u06cc\u0627 \u06af\u0648\u0627\u0647\u06cc TLS \u0647\u0645 \u062f\u0627\u0631\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc DNS \u0648 \u0647\u0645 \u0648\u0631\u0648\u062f\u06cc \u0622\u062f\u0631\u0633 IP \u0627\u0633\u062a \u06cc\u0627 \u062e\u06cc\u0631.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u06a9\u0647 \u062a\u0645\u0627\u0645 \u0641\u0627\u06cc\u0644\u200c\u0647\u0627\u06cc TLS\/SSL \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632 StrongSwan \u0631\u0627 \u062a\u0648\u0644\u06cc\u062f \u06a9\u0631\u062f\u06cc\u0645\u060c \u0622\u0646\u200c\u0647\u0627 \u0631\u0627 \u0628\u0647 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc <code>\/etc\/ipsec.d\/<\/code> \u0645\u0646\u062a\u0642\u0644 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo cp -r ~\/pki\/* \/etc\/ipsec.d\/<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f4 \u2014 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc StrongSwan<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">StrongSwan \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0628\u0627 \u0686\u0646\u062f \u0646\u0645\u0648\u0646\u0647 \u062f\u0627\u0631\u062f\u060c \u0627\u0645\u0627 \u0645\u0627 \u0628\u0627\u06cc\u062f \u0628\u06cc\u0634\u062a\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0631\u0627 \u062e\u0648\u062f\u0645\u0627\u0646 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u0645. \u0627\u0628\u062a\u062f\u0627 \u0641\u0627\u06cc\u0644 \u067e\u06cc\u0634\u200c\u0641\u0631\u0636 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0631\u062c\u0639 \u067e\u0634\u062a\u06cc\u0628\u0627\u0646\u200c\u06af\u06cc\u0631\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo mv \/etc\/ipsec.conf{,.original}<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u062c\u062f\u06cc\u062f \u0648 \u062e\u0627\u0644\u06cc \u0627\u06cc\u062c\u0627\u062f \u0648 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f (\u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0627\u0632 <code>nano<\/code> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nano \/etc\/ipsec.conf<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><em>\u0646\u06a9\u062a\u0647: \u0647\u0646\u06af\u0627\u0645 \u06a9\u0627\u0631 \u0628\u0627 VPN \u0647\u0627\u06cc IPSec\u060c \u0642\u0631\u0627\u0631\u062f\u0627\u062f\u0647\u0627 \u0633\u0645\u062a \u0686\u067e (left) \u0628\u0647 \u0633\u06cc\u0633\u062a\u0645 \u0645\u062d\u0644\u06cc (\u0633\u0631\u0648\u0631) \u0648 \u0633\u0645\u062a \u0631\u0627\u0633\u062a (right) \u0628\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a\u200c\u0647\u0627\u06cc \u0631\u06cc\u0645\u0648\u062a (\u0645\u0648\u0628\u0627\u06cc\u0644 \u0648 \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631\u0647\u0627) \u0627\u0634\u0627\u0631\u0647 \u062f\u0627\u0631\u062f.<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 \u0628\u0647 StrongSwan \u0645\u06cc\u200c\u06af\u0648\u06cc\u06cc\u0645 \u06a9\u0647 \u0648\u0636\u0639\u06cc\u062a \u062f\u06cc\u0645\u0648\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062f\u06cc\u0628\u0627\u06af \u0644\u0627\u06af \u06a9\u0646\u062f \u0648 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u062a\u06a9\u0631\u0627\u0631\u06cc \u0631\u0627 \u0645\u062c\u0627\u0632 \u06a9\u0646\u062f:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\/etc\/ipsec.conf<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>config setup\n    charondebug=\"ike 1, knl 1, cfg 0\"\n    uniqueids=no<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u06cc\u06a9 \u0628\u062e\u0634 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0628\u0631\u0627\u06cc VPN \u062e\u0648\u062f \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645 \u0648 \u0628\u0647 StrongSwan \u0645\u06cc\u200c\u06af\u0648\u06cc\u06cc\u0645 \u06a9\u0647 \u062a\u0648\u0646\u0644\u200c\u0647\u0627\u06cc IKEv2 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>conn ikev2-vpn\n    auto=add\n    compress=no\n    type=tunnel\n    keyexchange=ikev2\n    fragmentation=yes\n    forceencaps=yes<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u062a\u0634\u062e\u06cc\u0635 \u0642\u0637\u0639\u06cc \u0647\u0645\u062a\u0627 (Dead-peer detection) \u0631\u0627 \u0628\u0631\u0627\u06cc \u067e\u0627\u06a9\u0633\u0627\u0632\u06cc \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u0645\u0639\u0644\u0642 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>    dpdaction=clear\n    dpddelay=300s\n    rekey=no<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u0647\u0627\u06cc IPSec \u0633\u0645\u062a \u00ab\u0686\u067e\u00bb (\u0633\u0631\u0648\u0631) \u0631\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>    left=%any\n    leftid=@server_domain_or_IP\n    leftcert=server-cert.pem\n    leftsendcert=always\n    leftsubnet=0.0.0.0\/0<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\"><em>(\u0646\u06a9\u062a\u0647: \u0647\u0646\u06af\u0627\u0645 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc <code>leftid<\/code>\u060c \u0627\u06af\u0631 \u0627\u0632 \u062f\u0627\u0645\u0646\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f \u0639\u0644\u0627\u0645\u062a <code>@<\/code> \u0631\u0627 \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f (\u0645\u062b\u0644\u0627\u064b <code>@vpn.example.com<\/code>). \u0627\u06af\u0631 \u0627\u0632 IP \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0639\u0644\u0627\u0645\u062a <code>@<\/code> \u0631\u0627 \u062d\u0630\u0641 \u06a9\u0646\u06cc\u062f \u0648 \u0641\u0642\u0637 IP \u0631\u0627 \u0628\u0646\u0648\u06cc\u0633\u06cc\u062f).<\/em><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u0647\u0627\u06cc \u0633\u0645\u062a \u00ab\u0631\u0627\u0633\u062a\u00bb (\u06a9\u0644\u0627\u06cc\u0646\u062a) \u0631\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0645\u06cc\u200c\u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>    right=%any\n    rightid=%any\n    rightauth=eap-mschapv2\n    rightsourceip=10.10.10.0\/24\n    rightdns=8.8.8.8,8.8.4.4\n    rightsendcert=never<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062f\u0631 \u0646\u0647\u0627\u06cc\u062a\u060c \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0627\u0639\u062a\u0628\u0627\u0631 \u0627\u0632 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0648 \u0627\u0644\u06af\u0648\u0631\u06cc\u062a\u0645\u200c\u0647\u0627\u06cc \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc (Cipher Suites) \u0631\u0627 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>    eap_identity=%identity\n    ike=chacha20poly1305-sha512-curve25519-prfsha512,aes256gcm16-sha384-prfsha384-ecp384,aes256-sha1-modp1024,aes128-sha1-modp1024,3des-sha1-modp1024!\n    esp=chacha20poly1305-sha512,aes256gcm16-ecp384,aes256-sha256,aes256-sha1,3des-sha1!<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0646\u0647\u0627\u06cc\u06cc \u0628\u0627\u06cc\u062f \u0628\u0647 \u0634\u06a9\u0644 \u0632\u06cc\u0631 \u0628\u0627\u0634\u062f. \u067e\u0633 \u0627\u0632 \u062a\u0627\u06cc\u06cc\u062f \u0635\u062d\u062a \u062e\u0637\u0648\u0637\u060c \u0641\u0627\u06cc\u0644 \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0628\u0646\u062f\u06cc\u062f:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\/etc\/ipsec.conf<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>config setup\n    charondebug=\"ike 1, knl 1, cfg 0\"\n    uniqueids=no\n\nconn ikev2-vpn\n    auto=add\n    compress=no\n    type=tunnel\n    keyexchange=ikev2\n    fragmentation=yes\n    forceencaps=yes\n    dpdaction=clear\n    dpddelay=300s\n    rekey=no\n    left=%any\n    leftid=@server_domain_or_IP\n    leftcert=server-cert.pem\n    leftsendcert=always\n    leftsubnet=0.0.0.0\/0\n    right=%any\n    rightid=%any\n    rightauth=eap-mschapv2\n    rightsourceip=10.10.10.0\/24\n    rightdns=8.8.8.8,8.8.4.4\n    rightsendcert=never\n    eap_identity=%identity\n    ike=chacha20poly1305-sha512-curve25519-prfsha512,aes256gcm16-sha384-prfsha384-ecp384,aes256-sha1-modp1024,aes128-sha1-modp1024,3des-sha1-modp1024!\n    esp=chacha20poly1305-sha512,aes256gcm16-ecp384,aes256-sha256,aes256-sha1,3des-sha1!<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f5 \u2014 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0627\u062d\u0631\u0627\u0632 \u0647\u0648\u06cc\u062a VPN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u0631\u0648\u0631 VPN \u0645\u0627 \u0627\u06a9\u0646\u0648\u0646 \u0628\u0631\u0627\u06cc \u067e\u0630\u06cc\u0631\u0634 \u0627\u062a\u0635\u0627\u0644\u0627\u062a \u06a9\u0644\u0627\u06cc\u0646\u062a \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0627\u0645\u0627 \u0647\u0646\u0648\u0632 \u0647\u06cc\u0686 \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0627\u06cc (Credentials) \u062a\u0639\u0631\u06cc\u0641 \u0646\u06a9\u0631\u062f\u0647\u200c\u0627\u06cc\u0645. \u0628\u0627\u06cc\u062f \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u0647 \u0646\u0627\u0645 <code>ipsec.secrets<\/code> \u0631\u0627 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u0645:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nano \/etc\/ipsec.secrets<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0628\u062a\u062f\u0627 \u0628\u0647 StrongSwan \u0645\u06cc\u200c\u06af\u0648\u06cc\u06cc\u0645 \u06a9\u0644\u06cc\u062f \u062e\u0635\u0648\u0635\u06cc \u0633\u0631\u0648\u0631 \u06a9\u062c\u0627\u0633\u062a:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>: RSA \"server-key.pem\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633\u060c \u0627\u0639\u062a\u0628\u0627\u0631\u0646\u0627\u0645\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0631\u0628\u0631 \u0631\u0627 \u062a\u0639\u0631\u06cc\u0641 \u06a9\u0646\u06cc\u062f (\u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u062f\u0644\u062e\u0648\u0627\u0647 \u062e\u0648\u062f \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f):<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>your_username : EAP \"your_password\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u0628\u0646\u062f\u06cc\u062f. \u0633\u067e\u0633 \u0633\u0631\u0648\u06cc\u0633 VPN \u0631\u0627 \u0631\u06cc\u200c\u0627\u0633\u062a\u0627\u0631\u062a \u06a9\u0646\u06cc\u062f \u062a\u0627 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0627\u0639\u0645\u0627\u0644 \u0634\u0648\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo systemctl restart strongswan-starter<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f6 \u2014 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0648 IP Forwarding<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0627 \u062a\u06a9\u0645\u06cc\u0644 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc StrongSwan\u060c \u0628\u0627\u06cc\u062f \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0631\u0627 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u0645 \u062a\u0627 \u062a\u0631\u0627\u0641\u06cc\u06a9 VPN \u0631\u0627 \u0639\u0628\u0648\u0631 \u062f\u0627\u062f\u0647 \u0648 \u0641\u0648\u0631\u0648\u0627\u0631\u062f \u06a9\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0631\u0627\u0647\u0646\u0645\u0627\u06cc \u0631\u0627\u0647\u200c\u0627\u0646\u062f\u0627\u0632\u06cc \u0627\u0648\u0644\u06cc\u0647 \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0631\u062f\u0647 \u0628\u0627\u0634\u06cc\u062f\u060c \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 UFW \u0634\u0645\u0627 \u0641\u0639\u0627\u0644 \u0627\u0633\u062a. \u0627\u0628\u062a\u062f\u0627 \u062a\u0631\u0627\u0641\u06cc\u06a9 SSH \u0631\u0627 \u0645\u062c\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow OpenSSH<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u0642\u0648\u0627\u0646\u06cc\u0646\u06cc \u0628\u0631\u0627\u06cc \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u067e\u0648\u0631\u062a\u200c\u0647\u0627\u06cc \u0627\u0633\u062a\u0627\u0646\u062f\u0627\u0631\u062f IPSec (500 \u0648 4500 UDP) \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw allow 500,4500\/udp<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u0628\u0627\u06cc\u062f \u0631\u0627\u0628\u0637 \u0634\u0628\u06a9\u0647 \u0639\u0645\u0648\u0645\u06cc (Public Interface) \u0633\u0631\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u067e\u06cc\u062f\u0627 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>ip route show default<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0631\u0627\u0628\u0637 \u0639\u0645\u0648\u0645\u06cc \u0634\u0645\u0627 \u062f\u0631 \u062e\u0631\u0648\u062c\u06cc \u0628\u0639\u062f \u0627\u0632 \u06a9\u0644\u0645\u0647 <code>dev<\/code> \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f (\u0645\u062b\u0644\u0627\u064b <code>eth0<\/code>).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633 \u0641\u0627\u06cc\u0644 <code>\/etc\/ufw\/before.rules<\/code> \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0642\u0648\u0627\u0646\u06cc\u0646 \u0645\u0633\u06cc\u0631\u06cc\u0627\u0628\u06cc \u0633\u0637\u062d \u067e\u0627\u06cc\u06cc\u0646 (NAT) \u0631\u0627 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0646\u0632\u062f\u06cc\u06a9 \u0628\u0647 \u0628\u0627\u0644\u0627\u06cc \u0641\u0627\u06cc\u0644 (\u0642\u0628\u0644 \u0627\u0632 \u062e\u0637 <code>*filter<\/code>)\u060c \u0628\u0644\u0648\u06a9 \u0632\u06cc\u0631 \u0631\u0627 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f. <strong>\u062f\u0642\u062a \u06a9\u0646\u06cc\u062f \u06a9\u0647 <code>eth0<\/code> \u0631\u0627 \u0628\u0627 \u0646\u0627\u0645 \u0631\u0627\u0628\u0637 \u0634\u0628\u06a9\u0647 \u062e\u0648\u062f \u062c\u0627\u06cc\u06af\u0632\u06cc\u0646 \u06a9\u0646\u06cc\u062f:<\/strong><\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>*nat\n-A POSTROUTING -s 10.10.10.0\/24 -o eth0 -m policy --pol ipsec --dir out -j ACCEPT\n-A POSTROUTING -s 10.10.10.0\/24 -o eth0 -j MASQUERADE\nCOMMIT\n\n*mangle\n-A FORWARD --match policy --pol ipsec --dir in -s 10.10.10.0\/24 -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1361:1536 -j TCPMSS --set-mss 1360\nCOMMIT\n\n*filter\n:ufw-before-input - &#91;0:0]\n:ufw-before-output - &#91;0:0]\n:ufw-before-forward - &#91;0:0]\n:ufw-not-local - &#91;0:0]<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0633\u067e\u0633\u060c \u067e\u0633 \u0627\u0632 \u062a\u0639\u0627\u0631\u06cc\u0641 <code>*filter<\/code> \u0648 \u0632\u0646\u062c\u06cc\u0631\u0647\u200c\u0647\u0627\u060c \u0628\u0644\u0648\u06a9 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0639\u0628\u0648\u0631 \u062a\u0631\u0627\u0641\u06cc\u06a9 ESP \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>-A ufw-before-forward --match policy --pol ipsec --dir in --proto esp -s 10.10.10.0\/24 -j ACCEPT\n-A ufw-before-forward --match policy --pol ipsec --dir out --proto esp -d 10.10.10.0\/24 -j ACCEPT<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u0648 \u0628\u0628\u0646\u062f\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06a9\u0646\u0648\u0646 \u067e\u0627\u0631\u0627\u0645\u062a\u0631\u0647\u0627\u06cc \u06a9\u0631\u0646\u0644 \u0634\u0628\u06a9\u0647 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0641\u0639\u0627\u0644 \u06a9\u0631\u062f\u0646 \u0641\u0648\u0631\u0648\u0627\u0631\u062f\u06cc\u0646\u06af (IP Forwarding) \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f. \u0641\u0627\u06cc\u0644 <code>\/etc\/ufw\/sysctl.conf<\/code> \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo nano \/etc\/ufw\/sysctl.conf<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0637\u0648\u0637 \u0632\u06cc\u0631 \u0631\u0627 \u0628\u0647 \u0627\u0646\u062a\u0647\u0627\u06cc \u0641\u0627\u06cc\u0644 \u0627\u0636\u0627\u0641\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>net\/ipv4\/ip_forward=1\nnet\/ipv4\/conf\/all\/accept_redirects=0\nnet\/ipv4\/conf\/all\/send_redirects=0\nnet\/ipv4\/ip_no_pmtu_disc=1<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 \u0631\u0627 \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0646\u06cc\u062f. \u0633\u067e\u0633 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0631\u0627 \u063a\u06cc\u0631\u0641\u0639\u0627\u0644 \u0648 \u0645\u062c\u062f\u062f\u0627\u064b \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u0627\u06cc\u0646 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0627\u0639\u0645\u0627\u0644 \u0634\u0648\u0646\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo ufw disable\nsudo ufw enable<\/code><\/pre>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0645\u0631\u062d\u0644\u0647 \u06f7 \u2014 \u062a\u0633\u062a \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 VPN<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u062a\u0635\u0627\u0644\u060c \u0627\u0628\u062a\u062f\u0627 \u0628\u0627\u06cc\u062f \u06af\u0648\u0627\u0647\u06cc CA \u06a9\u0647 \u0633\u0627\u062e\u062a\u0647\u200c\u0627\u06cc\u062f \u0631\u0627 \u0631\u0648\u06cc \u062f\u0633\u062a\u06af\u0627\u0647 \u06a9\u0644\u0627\u06cc\u0646\u062a \u062e\u0648\u062f \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f. \u0645\u062d\u062a\u0648\u06cc\u0627\u062a \u0641\u0627\u06cc\u0644 \u06af\u0648\u0627\u0647\u06cc \u0631\u0627 \u0645\u0634\u0627\u0647\u062f\u0647 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>cat \/etc\/ipsec.d\/cacerts\/ca-cert.pem<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u062e\u0631\u0648\u062c\u06cc \u0631\u0627 (\u0634\u0627\u0645\u0644 \u062e\u0637\u0648\u0637 <code>-----BEGIN CERTIFICATE-----<\/code> \u0648 <code>-----END CERTIFICATE-----<\/code>) \u062f\u0631 \u06cc\u06a9 \u0641\u0627\u06cc\u0644 \u0628\u0627 \u0646\u0627\u0645 <code>ca-cert.pem<\/code> \u0631\u0648\u06cc \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631 \u062e\u0648\u062f \u0630\u062e\u06cc\u0631\u0647 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0627\u062a\u0635\u0627\u0644 \u0627\u0632 \u0648\u06cc\u0646\u062f\u0648\u0632:<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u06a9\u0644\u06cc\u062f\u0647\u0627\u06cc <code>WINDOWS+R<\/code> \u0631\u0627 \u0641\u0634\u0627\u0631 \u062f\u0647\u06cc\u062f\u060c <code>mmc.exe<\/code> \u0631\u0627 \u062a\u0627\u06cc\u067e \u06a9\u0646\u06cc\u062f \u0648 \u06a9\u0646\u0633\u0648\u0644 \u0645\u062f\u06cc\u0631\u06cc\u062a \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0627\u0632 \u0645\u0646\u0648\u06cc File \u0628\u0647 <code>Add or Remove Snap-in<\/code> \u0628\u0631\u0648\u06cc\u062f\u060c <code>Certificates<\/code> \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0631\u062f\u0647 \u0648 Add \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f.<\/li>\n\n\n\n<li><code>Computer Account<\/code> \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0631\u062f\u0647 \u0648 <code>Local Computer<\/code> \u0631\u0627 \u062a\u0627\u06cc\u06cc\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u062f\u0631 \u0628\u062e\u0634 <code>Trusted Root Certification Authorities<\/code>\u060c \u06af\u0648\u0627\u0647\u06cc <code>ca-cert.pem<\/code> \u0631\u0627 Import \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0628\u0647 <code>Network and Sharing Center<\/code> \u0628\u0631\u0648\u06cc\u062f\u060c <code>Set up a new connection or network<\/code> \u0631\u0627 \u0632\u062f\u0647 \u0648 <code>Connect to a workplace<\/code> \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0622\u062f\u0631\u0633 IP \u06cc\u0627 \u062f\u0627\u0645\u0646\u0647 \u0633\u0631\u0648\u0631 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0647 \u0648 \u0645\u062a\u0635\u0644 \u0634\u0648\u06cc\u062f. \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631\u06cc \u06a9\u0647 \u062f\u0631 \u0645\u0631\u062d\u0644\u0647 \u06f5 \u0633\u0627\u062e\u062a\u06cc\u062f \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0627\u062a\u0635\u0627\u0644 \u0627\u0632 \u0645\u06a9\u200c\u0627\u0648\u200c\u0627\u0633 (macOS):<\/strong><\/p>\n\n\n\n<ol class=\"wp-block-list\">\n<li>\u0631\u0648\u06cc \u0641\u0627\u06cc\u0644 \u06af\u0648\u0627\u0647\u06cc \u062f\u0627\u0628\u0644\u200c\u06a9\u0644\u06cc\u06a9 \u06a9\u0646\u06cc\u062f \u062a\u0627 \u062f\u0631 <code>Keychain Access<\/code> \u0628\u0627\u0632 \u0634\u0648\u062f.<\/li>\n\n\n\n<li>\u0631\u0648\u06cc \u06af\u0648\u0627\u0647\u06cc \u0648\u0627\u0631\u062f \u0634\u062f\u0647 \u062f\u0627\u0628\u0644\u200c\u06a9\u0644\u06cc\u06a9 \u06a9\u0631\u062f\u0647 \u0648 \u0628\u062e\u0634 <code>IP Security (IPSec)<\/code> \u0631\u0627 \u0631\u0648\u06cc <code>Always Trust<\/code> \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f.<\/li>\n\n\n\n<li>\u0628\u0647 <code>System Preferences > Network<\/code> \u0628\u0631\u0648\u06cc\u062f \u0648 \u0628\u0627 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc \u0639\u0644\u0627\u0645\u062a <code>+<\/code> \u06cc\u06a9 \u0627\u062a\u0635\u0627\u0644 VPN \u0627\u0632 \u0646\u0648\u0639 <code>IKEv2<\/code> \u0628\u0633\u0627\u0632\u06cc\u062f.<\/li>\n\n\n\n<li>\u0622\u062f\u0631\u0633 \u0633\u0631\u0648\u0631 \u0648 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc\/\u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u0648\u0627\u0631\u062f \u0648 \u0645\u062a\u0635\u0644 \u0634\u0648\u06cc\u062f.<\/li>\n<\/ol>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0627\u062a\u0635\u0627\u0644 \u0627\u0632 \u0627\u0648\u0628\u0648\u0646\u062a\u0648:<\/strong><br>StrongSwan \u0631\u0627 \u0631\u0648\u06cc \u06a9\u0644\u0627\u06cc\u0646\u062a \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo apt update\nsudo apt install strongswan libcharon-extra-plugins<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u06af\u0648\u0627\u0647\u06cc CA \u0631\u0627 \u06a9\u067e\u06cc \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>sudo cp \/tmp\/ca-cert.pem \/etc\/ipsec.d\/cacerts<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 <code>\/etc\/ipsec.secrets<\/code> \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0631\u062f\u0647 \u0648 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u062e\u0648\u062f \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>your_username : EAP \"your_password\"<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0641\u0627\u06cc\u0644 <code>\/etc\/ipsec.conf<\/code> \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>config setup\n\nconn ikev2-rw\n    right=server_domain_or_IP\n    rightid=server_domain_or_IP\n    rightsubnet=0.0.0.0\/0\n    rightauth=pubkey\n    leftsourceip=%config\n    leftid=username\n    leftauth=eap-mschapv2\n    eap_identity=%identity\n    auto=start<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">\u0628\u0631\u0627\u06cc \u0627\u062a\u0635\u0627\u0644 \u062f\u0633\u062a\u0648\u0631 <code>sudo systemctl start strongswan-starter<\/code> \u0631\u0627 \u0627\u062c\u0631\u0627 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0627\u062a\u0635\u0627\u0644 \u0627\u0632 iOS \u0648 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f:<\/strong><br>\u0641\u0627\u06cc\u0644 \u06af\u0648\u0627\u0647\u06cc \u0631\u0627 \u0628\u0631\u0627\u06cc \u062e\u0648\u062f \u0627\u06cc\u0645\u06cc\u0644 \u06a9\u0646\u06cc\u062f\u060c \u0631\u0648\u06cc \u0622\u0646 \u0636\u0631\u0628\u0647 \u0632\u062f\u0647 \u0648 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f. \u0633\u067e\u0633 \u062f\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a VPN \u062f\u0633\u062a\u06af\u0627\u0647 \u062e\u0648\u062f\u060c \u06cc\u06a9 \u0627\u062a\u0635\u0627\u0644 \u0627\u0632 \u0646\u0648\u0639 <code>IKEv2<\/code> \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647 \u0648 \u0622\u062f\u0631\u0633 \u0633\u0631\u0648\u0631 \u0628\u0647 \u0647\u0645\u0631\u0627\u0647 \u0646\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u06cc \u0648 \u0631\u0645\u0632 \u0639\u0628\u0648\u0631 \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u0627\u0646\u062f\u0631\u0648\u06cc\u062f \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 \u0627\u067e\u0644\u06cc\u06a9\u06cc\u0634\u0646 StrongSwan \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h3 class=\"wp-block-heading\">\u0631\u0641\u0639 \u0645\u0634\u06a9\u0644\u0627\u062a \u0627\u062a\u0635\u0627\u0644<\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u06af\u0631 \u0642\u0627\u062f\u0631 \u0628\u0647 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 VPN \u0646\u06cc\u0633\u062a\u06cc\u062f\u060c \u0646\u0627\u0645 \u0633\u0631\u0648\u0631 \u06cc\u0627 \u0622\u062f\u0631\u0633 IP \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f. \u0622\u062f\u0631\u0633 \u0633\u0631\u0648\u0631 \u0628\u0627\u06cc\u062f \u0628\u0627 <code>Common Name (CN)<\/code> \u06a9\u0647 \u0647\u0646\u06af\u0627\u0645 \u0627\u06cc\u062c\u0627\u062f \u06af\u0648\u0627\u0647\u06cc \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0631\u062f\u06cc\u062f \u0645\u0637\u0627\u0628\u0642\u062a \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u062f. \u0627\u06af\u0631 \u0627\u0632 IP \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f\u060c \u0645\u0637\u0645\u0626\u0646 \u0634\u0648\u06cc\u062f \u0647\u0646\u06af\u0627\u0645 \u0633\u0627\u062e\u062a \u06af\u0648\u0627\u0647\u06cc \u0627\u0632 \u0647\u0631 \u062f\u0648 \u0641\u0644\u06af <code>--san @IP_address<\/code> \u0648 <code>--san IP_address<\/code> \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f\u0647\u200c\u0627\u06cc\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0647\u0645\u0686\u0646\u06cc\u0646 \u0628\u0631\u0631\u0633\u06cc \u06a9\u0646\u06cc\u062f \u06a9\u0647 \u0645\u0642\u062f\u0627\u0631 <code>leftid<\/code> \u062f\u0631 \u0641\u0627\u06cc\u0644 <code>\/etc\/ipsec.conf<\/code> \u0627\u06af\u0631 \u0627\u0632 \u062f\u0627\u0645\u0646\u0647 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f \u062f\u0627\u0631\u0627\u06cc \u0639\u0644\u0627\u0645\u062a <code>@<\/code> \u0628\u0627\u0634\u062f \u0648 \u0627\u06af\u0631 \u0627\u0632 IP \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc\u200c\u06a9\u0646\u06cc\u062f \u0628\u062f\u0648\u0646 <code>@<\/code> \u0628\u0627\u0634\u062f.<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>\u0646\u062a\u06cc\u062c\u0647\u200c\u06af\u06cc\u0631\u06cc<\/strong><br>\u062f\u0631 \u0627\u06cc\u0646 \u0622\u0645\u0648\u0632\u0634\u060c \u0634\u0645\u0627 \u06cc\u06a9 \u0633\u0631\u0648\u0631 VPN \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0631\u0648\u062a\u06a9\u0644 IKEv2 \u0648 \u0646\u0631\u0645\u200c\u0627\u0641\u0632\u0627\u0631 StrongSwan \u0633\u0627\u062e\u062a\u06cc\u062f. \u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc\u200c\u062a\u0648\u0627\u0646\u06cc\u062f \u0645\u0637\u0645\u0626\u0646 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0641\u0639\u0627\u0644\u06cc\u062a\u200c\u0647\u0627\u06cc \u0622\u0646\u0644\u0627\u06cc\u0646 \u0634\u0645\u0627\u060c \u0641\u0627\u0631\u063a \u0627\u0632 \u0627\u06cc\u0646\u06a9\u0647 \u06a9\u062c\u0627 \u0647\u0633\u062a\u06cc\u062f \u0648 \u0628\u0627 \u0686\u0647 \u062f\u0633\u062a\u06af\u0627\u0647\u06cc \u0628\u0647 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0645\u062a\u0635\u0644 \u0645\u06cc\u200c\u0634\u0648\u06cc\u062f\u060c \u0627\u0645\u0646 \u0648 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u0634\u062f\u0647 \u0628\u0627\u0642\u06cc \u062e\u0648\u0627\u0647\u062f \u0645\u0627\u0646\u062f.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u0627\u0632 \u0647\u0645\u0631\u0627\u0647\u06cc \u0634\u0645\u0627 \u0628\u0627 <a href=\"https:\/\/parmin.cloud\/\"><strong>\u067e\u0627\u0631\u0645\u06cc\u0646 \u06a9\u0644\u0648\u062f<\/strong><\/a> \u0633\u067e\u0627\u0633\u06af\u0632\u0627\u0631\u06cc\u0645.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u0645\u0642\u062f\u0645\u0647\u06cc\u06a9 \u0634\u0628\u06a9\u0647 \u062e\u0635\u0648\u0635\u06cc \u0645\u062c\u0627\u0632\u06cc (VPN) \u0628\u0647 \u0634\u0645\u0627 \u0627\u062c\u0627\u0632\u0647 \u0645\u06cc\u200c\u062f\u0647\u062f \u062a\u0627 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u062e\u0648\u062f \u0631\u0627 \u0647\u0646\u06af\u0627\u0645 \u0639\u0628\u0648\u0631 \u0627\u0632 \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u0646\u0627\u0627\u0645\u0646 (\u0645\u0627\u0646\u0646\u062f \u0634\u0628\u06a9\u0647\u200c\u0647\u0627\u06cc \u06a9\u0627\u0641\u06cc\u200c\u0634\u0627\u067e\u060c \u0641\u0631\u0648\u062f\u06af\u0627\u0647 \u06cc\u0627 \u06a9\u0646\u0641\u0631\u0627\u0646\u0633\u200c\u0647\u0627) \u0628\u0647 \u0635\u0648\u0631\u062a \u0627\u0645\u0646 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u06a9\u0646\u06cc\u062f. \u067e\u0631\u0648\u062a\u06a9\u0644 \u062a\u0628\u0627\u062f\u0644 \u06a9\u0644\u06cc\u062f \u0627\u06cc\u0646\u062a\u0631\u0646\u062a \u0646\u0633\u062e\u0647 \u06f2 (IKEv2) \u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0645\u06a9\u0627\u0646 \u062a\u0648\u0646\u0644\u200c\u0632\u0646\u06cc \u0645\u0633\u062a\u0642\u06cc\u0645 IPSec \u0628\u06cc\u0646 \u0633\u0631\u0648\u0631 \u0648 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0631\u0627 \u0641\u0631\u0627\u0647\u0645 \u0645\u06cc\u200c\u06a9\u0646\u062f. \u062f\u0631 \u067e\u06cc\u0627\u062f\u0647\u200c\u0633\u0627\u0632\u06cc\u200c\u0647\u0627\u06cc VPN &hellip;<\/p>\n","protected":false},"author":9,"featured_media":6882,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[258,215,148,150,9],"tags":[],"class_list":["post-6881","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ubuntu","category-server","category-network","category-linux","category-9"],"_links":{"self":[{"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/posts\/6881","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/users\/9"}],"replies":[{"embeddable":true,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/comments?post=6881"}],"version-history":[{"count":0,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/posts\/6881\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/media\/6882"}],"wp:attachment":[{"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/media?parent=6881"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/categories?post=6881"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/parmin.cloud\/blog\/wp-json\/wp\/v2\/tags?post=6881"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}