【正文】 銳捷網(wǎng)絡(luò)防火墻典型功能使用手冊 1銳捷網(wǎng)絡(luò)防火墻詳細(xì)實例目 錄第一章 VPN 功能使用 .............................................5 概述 ..........................................................................................................................................................................5 IPSEC VPN 技術(shù)原理簡介 .......................................................................................................................................5 IPSEC VPN 對數(shù)據(jù)包的處理 ...................................................................................................................................6 IPSEC NAT 穿透： .................................................................................................................................................8 密鑰管理（IKE 密鑰協(xié)商） ..................................................................................................................................8 DIFFIEHELLMAN 交換： .......................................................................................................................................10 基于策略和基于路由的 VPN ..............................................................................................................................11 基于路由的雙 VPN 隧道備份（ACTIVE－ACTIVE） .........................................................................................12 網(wǎng)關(guān)－網(wǎng)關(guān) VPN 隧道的建立 .............................................................................................................................15 典型案例： ....................................................................................................................................................16 遠(yuǎn)程訪問 VPN 隧道的建立 ...............................................................................................................................18 典型案例： ..................................................................................................................................................19 RGWALL VPN CA 中心軟件的使用 ................................................................................................................20 RGWALL1600 安全網(wǎng)關(guān) VPN 證書配置 ...............................................................................................20 RGWALL VPN CA 中心軟件 ..................................................................................................................20 PPTP/L2TP 遠(yuǎn)程訪問 VPN 配置方法 ................................................................................................................20 動態(tài)域名..............................................................................................................................................................24 使用動態(tài)域名的動態(tài) RGWALL1600 防火墻 .........................................................................................24 如何注冊 的動態(tài)域名 ................................................................................................................25 常見問題..............................................................................................................................................................25 VPN 不響應(yīng)遠(yuǎn)程的密鑰協(xié)商請求： ........................................................................................................25 VPN 的代理 ID 配置： ..............................................................................................................................25第二章 高可用性 ....................................................26. VRRP 簡介 ......................................................................................................................................................26 VRRP 意義 ....................................................................................................................................................26 VRRP 簡介 ....................................................................................................................................................27 VRRP 工作原理 ............................................................................................................................................27 RGWALL1600 防火墻路由 HA ...................................................................................................................28 ActiveActive 負(fù)載均衡 ................................................................................................................................28 WebUI 配置 ...............................................................................................................................................29 CLI 配置 .....................................................................................................................................................37 ActiveStandby 冗余備份 ............................................................................................................................40 WebUI 配置 ...............................................................................................................................................41 CLI 配置 .....................................................................................................................................................49銳捷網(wǎng)絡(luò)防火墻典型功能使用手冊 2 路由 HA 模式下支持 VRRP 虛地址 IP 和地址屬性同步 .........................................................................51 概述 ..............................................................................................................................................................................51 使用方法 .................................................................................................................................................................51 PVST+簡介 .....................................................................................................................................................52 RGWALL1600 安全網(wǎng)關(guān)多 VLAN 交換環(huán)境冗余備份 ...........................................................