{"id":4306,"date":"2020-01-05T15:03:00","date_gmt":"2020-01-05T12:03:00","guid":{"rendered":"http:\/\/vahamartti.fi\/blog\/?p=4306"},"modified":"2020-01-05T15:14:41","modified_gmt":"2020-01-05T12:14:41","slug":"ipsec-xauth-ikev1-vpnn-kayttoonotto-draytek-vigor-2960-reitittimessa","status":"publish","type":"post","link":"https:\/\/vahamartti.fi\/blog\/?p=4306","title":{"rendered":"IPsec XAuth (IKEv1) VPN:n k\u00e4ytt\u00f6\u00f6notto DrayTek Vigor 2960 reitittimess\u00e4"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Esimerkin kuvat on otettu DrayTek Vigor 2960 firmware versio 1.4.4:n k\u00e4ytt\u00f6liittym\u00e4st\u00e4. <\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>Jotta voit k\u00e4ytt\u00e4\u00e4 VPN:\u00e4\u00e4, tarvitset kiinte\u00e4n IP-osoitteen tai voit k\u00e4ytt\u00e4\u00e4 Dynaamista DNS:\u00e4\u00e4, esimerkiksi\u00a0<a rel=\"noreferrer noopener\" href=\"http:\/\/vahamartti.fi\/blog\/?p=4277\" target=\"_blank\">DrayDDNS<\/a>. <\/li><li>Aktivoidaan IPsec palvelu: Remote Access => Remote Access Control, t\u00e4pp\u00e4 kohtaan Enable IPsec Service <\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"951\" height=\"260\" src=\"http:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/ipsec_enable_service.png\" alt=\"\" class=\"wp-image-4315\" srcset=\"https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/ipsec_enable_service.png 951w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/ipsec_enable_service-253x69.png 253w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/ipsec_enable_service-768x210.png 768w\" sizes=\"auto, (max-width: 951px) 100vw, 951px\" \/><\/figure>\n\n\n\n<ol class=\"wp-block-list\" start=\"3\"><li>Luodaan IPsec VPN profiili: VPN and Remote Access => VPN Profiles => IPsec, Paina +Add <\/li><li>Annetaan profiilille nimi, enabloidaan profiili, sallitaan yhteys et\u00e4k\u00e4ytt\u00e4j\u00e4lle (t\u00e4pp\u00e4 kohtaan For Remote Dial-In User: Enable), sek\u00e4  m\u00e4\u00e4ritet\u00e4\u00e4n paikallisen verkon IP \/ aliverkonpeite, johon yhteytt\u00e4 ollaan luomassa.<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"659\" src=\"http:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_profile-1024x659.png\" alt=\"\" class=\"wp-image-4310\" srcset=\"https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_profile-1024x659.png 1024w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_profile-253x163.png 253w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_profile-768x494.png 768w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_profile.png 1047w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<ol class=\"wp-block-list\" start=\"5\"><li>M\u00e4\u00e4ritet\u00e4\u00e4n PSK-avain (PreShared Key): VPN and Remote Access =&gt; IPsec General Setup, sy\u00f6t\u00e4 haluamasi avain kohtaan &#8217;IPsec User Preshared Key&#8217;. Vahvan avaimen voit halutessasi generoida esimerkiksi <a rel=\"noreferrer noopener\" aria-label=\"RandomKeygenin (opens in a new tab)\" href=\"https:\/\/randomkeygen.com\/\" target=\"_blank\">RandomKeygenin<\/a> sivuilla (esimerkiksi kohdasta CodeIgniter Encryption Keys).<\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"762\" height=\"341\" src=\"http:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_psk.png\" alt=\"\" class=\"wp-image-4312\" srcset=\"https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_psk.png 762w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_psk-253x113.png 253w\" sizes=\"auto, (max-width: 762px) 100vw, 762px\" \/><\/figure>\n\n\n\n<ol class=\"wp-block-list\" start=\"6\"><li>Luodaan k\u00e4ytt\u00e4j\u00e4profiili, eli k\u00e4ytt\u00e4j\u00e4tunnus ja salasana: User Management =&gt; User Profile. M\u00e4\u00e4ritell\u00e4\u00e4n k\u00e4ytt\u00e4j\u00e4nimi, aktivoidaan tili (Enable), salasana, sek\u00e4 aktivoidaan XAuth k\u00e4ytt\u00f6 IPsec User Settings:in alta ko. k\u00e4ytt\u00e4j\u00e4lle. <\/li><\/ol>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"600\" height=\"848\" src=\"http:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_user.png\" alt=\"\" class=\"wp-image-4313\" srcset=\"https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_user.png 600w, https:\/\/vahamartti.fi\/blog\/wp-content\/uploads\/2020\/01\/xauth_user-179x253.png 179w\" sizes=\"auto, (max-width: 600px) 100vw, 600px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">Reitittimen p\u00e4\u00e4n asetukset ovat t\u00e4ss\u00e4.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">P\u00e4\u00e4telaitteella, esimerkiksi matkapuhelimessa tulee en\u00e4\u00e4 m\u00e4\u00e4ritell\u00e4 VPN palvelimen osoite, k\u00e4ytt\u00e4j\u00e4tunnus, salasana, IKE sek\u00e4 yhteyden tyyppi (IPsec XAuth).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">P\u00e4\u00e4teohjelmia eri alustoille l\u00f6ytyy DtayTekin&nbsp;<a rel=\"noreferrer noopener\" href=\"https:\/\/www.draytek.com\/products\/smart-vpn-client\/\" target=\"_blank\">sivuilta<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Esimerkin kuvat on otettu DrayTek Vigor 2960 firmware versio 1.4.4:n k\u00e4ytt\u00f6liittym\u00e4st\u00e4. Jotta voit k\u00e4ytt\u00e4\u00e4 VPN:\u00e4\u00e4, tarvitset kiinte\u00e4n IP-osoitteen tai voit k\u00e4ytt\u00e4\u00e4 Dynaamista DNS:\u00e4\u00e4, esimerkiksi\u00a0DrayDDNS. Aktivoidaan IPsec palvelu: Remote Access => Remote Access Control, t\u00e4pp\u00e4 kohtaan Enable IPsec Service Luodaan IPsec VPN profiili: VPN and Remote Access => VPN Profiles => IPsec, Paina +Add Annetaan profiilille &hellip; <a href=\"https:\/\/vahamartti.fi\/blog\/?p=4306\" class=\"more-link\">Jatka lukemista <span class=\"screen-reader-text\">IPsec XAuth (IKEv1) VPN:n k\u00e4ytt\u00f6\u00f6notto DrayTek Vigor 2960 reitittimess\u00e4<\/span> <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[30,384],"tags":[1071,1059,306,1073],"class_list":["post-4306","post","type-post","status-publish","format-standard","hentry","category-saatoa","category-vinkit","tag-dtaytek","tag-vigor-2960","tag-vpn","tag-xauth"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/p1fteB-17s","jetpack_sharing_enabled":true,"jetpack-related-posts":[],"_links":{"self":[{"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4306","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4306"}],"version-history":[{"count":4,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4306\/revisions"}],"predecessor-version":[{"id":4316,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=\/wp\/v2\/posts\/4306\/revisions\/4316"}],"wp:attachment":[{"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4306"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4306"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vahamartti.fi\/blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4306"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}