{"id":113,"date":"2013-07-25T16:59:33","date_gmt":"2013-07-25T09:59:33","guid":{"rendered":"https:\/\/beta.engisv.info\/?p=113"},"modified":"2020-03-19T20:05:36","modified_gmt":"2020-03-19T13:05:36","slug":"113","status":"publish","type":"post","link":"https:\/\/www.engisv.info\/?p=113","title":{"rendered":"Pfsense Firewall – OpenVPN site to site shared key"},"content":{"rendered":"

C\u00f3 r\u1ea5t nhi\u1ec1u gi\u1ea3i ph\u00e1p k\u1ebft n\u1ed1i site to site, k\u1ebft n\u1ed1i c\u00e1c chi nh\u00e1nh th\u00e0nh vi\u00ean c\u1ee7a m\u1ed9t c\u00f4ng ty th\u00e0nh m\u1ed9t th\u1ec3 th\u1ed1ng nh\u1ea5t qu\u1ea3y l\u00fd t\u1eadp trung. Trong \u0111\u00f3 gi\u1ea3i ph\u00e1p m\u1ea1ng ri\u00eang \u1ea3o VPN l\u00e0 gi\u1ea3i ph\u00e1p gi\u00e1 r\u1ebb, \u0111\u1ed9 b\u1ea3o m\u1eadt kh\u00e1 t\u00f4t. Trong b\u00e0i n\u00e0y T\u00f4i s\u1ebd gi\u1edbi thi\u1ec7u ph\u01b0\u01a1ng ph\u00e1p k\u1ebft n\u1ed1i VPN ngu\u1ed3n m\u1edf tr\u00ean pfSsense.<\/p>\n

M\u00f4 h\u00ecnh:\u00a0pfSense OpenVPN site to site shared key<\/strong><\/p>\n

\"\"<\/p>\n

\u0110\u1ecba ch\u1ec9 IP v\u00e0 t\u00ean mi\u1ec1n \u0111\u01b0\u1ee3c d\u00f9ng:<\/strong><\/p>\n

\n\n\n\n\n\n\n\n\n
<\/td>\n\n

Pfsense site 1<\/p>\n<\/td>\n

Pfsense site 2<\/td>\n<\/tr>\n
Interface<\/td>\nWAN<\/td>\nLAN<\/td>\nWAN<\/td>\nLAN<\/td>\n<\/tr>\n
IP<\/td>\n(DHCP)<\/p>\n

192.168.174.x<\/p>\n

 <\/td>\n

192.168.100.254<\/td>\n(DHCP)<\/p>\n

192.168.174.x<\/p>\n

 <\/td>\n

172.16.0.254<\/td>\n<\/tr>\n
Network<\/td>\n192.168.100.0\/24<\/td>\n172.16.0.0\/24<\/td>\n<\/tr>\n
Gateway<\/td>\n<\/td>\n<\/td>\n<\/tr>\n
\n

DNS<\/p>\n<\/td>\n

\n

DNS forwarder :192.168.174.253<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n<\/div>\n

\n\n\n\n\n\n\n\n\n\n
<\/td>\nISP DNS server<\/td>\nClient site 1<\/td>\nClient site 2<\/td>\n<\/tr>\n
Interface<\/td>\nK\u1ebft n\u1ed1i internet<\/td>\nLAN<\/td>\nLAN<\/td>\n<\/tr>\n
IP<\/td>\n192.168.174.253<\/td>\n192.168.100.1<\/td>\n172.16.0.1<\/td>\n<\/tr>\n
Network<\/td>\n192.168.174.0\/24<\/td>\n192.168.100.0\/24<\/td>\n172.16.0.0\/24<\/td>\n<\/tr>\n
Gateway<\/td>\n192.168.174.2<\/td>\n192.168.100.254<\/td>\n172.16.0.254<\/td>\n<\/tr>\n
DNS<\/td>\n192.168.174.253<\/td>\n192.168.174.253<\/td>\n192.168.174.253<\/td>\n<\/tr>\n
Domain Name<\/td>\nhoanghiepktv.com<\/td>\n<\/td>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n

 <\/p>\n

M\u00f4 t\u1ea3 v\u1ec1 m\u00f4 h\u00ecnh:<\/strong><\/p>\n

    \n
  • M\u00e1y Pfsense site 1 v\u00e0 Pfsense site 1, \u0111\u00f3ng vai tr\u00f2 c\u1ee7a m\u1ed9t OpenVPN server v\u00e0 k\u1ebft n\u1ed1i v\u1edbi nhau b\u1eb1ng OpenVPN.<\/li>\n
  • Client site 1v\u00e0 Client site 2,\u00a0 l\u00e0 m\u00e1y d\u00f9ng \u0111\u1ec3 c\u1ea5u h\u00ecnh c\u00e1c d\u1ecbch v\u1ee5 tr\u00ean Pfsense<\/li>\n
  • DNS ISP server, l\u00e0 m\u00e1y gi\u1ea3 l\u1eadp h\u1ec7 th\u1ed1ng ph\u00e2n gi\u1ea3i t\u00ean mi\u1ec1n c\u1ee7a c\u00e1c nh\u00e0 cung c\u1ea5p d\u1ecbch v\u1ee5. Ph\u00e2n gi\u1ea3i IP m\u1eb7t ngo\u00e0i k\u1ebft n\u1ed1i v\u1edbi internet th\u00e0nh t\u00ean, \u1edf \u0111\u00e2y t\u00ean \u0111\u01b0\u1ee3c gi\u1ea3 l\u1eadp l\u00e0 site1.hoanghiepktv.com v\u00e0 site2.hoanghiepktv.com.<\/li>\n<\/ul>\n

    Video demo<\/a><\/p>\n