{"id":12264,"date":"2024-03-26T12:46:41","date_gmt":"2024-03-26T04:46:41","guid":{"rendered":"https:\/\/blog.pfchina.org\/?p=12264"},"modified":"2024-03-26T14:08:27","modified_gmt":"2024-03-26T06:08:27","slug":"opnsense%e9%85%8d%e7%bd%aeipsec%e7%ab%99%e7%82%b9%e5%88%b0%e7%ab%99%e7%82%b9vpn%e9%9a%a7%e9%81%93","status":"publish","type":"post","link":"https:\/\/blog.pfchina.org\/?p=12264","title":{"rendered":"OPNsense\u914d\u7f6eIPSec\u7ad9\u70b9\u5230\u7ad9\u70b9VPN\u96a7\u9053"},"content":{"rendered":"<p style=\"text-align: justify;\">IPSec\u662f\u4e00\u7ec4\u901a\u4fe1\u534f\u8bae\uff0c\u7528\u4e8e\u5728\u7f51\u7edc\u4e0a\u63d0\u4f9b\u5b89\u5168\u8fde\u63a5\u3002\u77ed\u8bed\u201cIPsec\u201d\u662f\u7f29\u5199\uff0c\u5176\u4e2d\u201cIP\u201d\u4ee3\u8868\u201cInternet \u534f\u8bae\u201d\uff0c\u201csec\u201d\u4ee3\u8868\u201c\u5b89\u5168\u201d\u3002Internet \u534f\u8bae (IP) \u662f\u7ba1\u7406 Internet \u4e0a\u6570\u636e\u4f20\u8f93\u7684\u666e\u904d\u63a5\u53d7\u7684\u534f\u8bae\u3002IPSec\u901a\u8fc7\u5305\u62ec\u52a0\u5bc6\u548c\u8eab\u4efd\u9a8c\u8bc1\u6765\u589e\u5f3a\u534f\u8bae\u7684\u5b89\u5168\u6027\u3002\u5b83\u7528\u4e8e\u865a\u62df\u4e13\u7528\u7f51\u7edc (VPN)\u3002<\/p>\n<p style=\"text-align: justify;\">OPNsense\u4e3a\u5206\u652f\u673a\u6784\u548c\u8fdc\u7a0b\u7528\u6237\u63d0\u4f9bVPN\u8fde\u63a5\u3002\u53ea\u9700\u4f7f\u7528OPNsense Web\u7528\u6237\u754c\u9762\uff0c\u5373\u53ef\u8f7b\u677e\u8bbe\u7f6e\u5c06\u591a\u4e2a\u5206\u652f\u673a\u6784\u8fde\u63a5\u5230\u4e2d\u592e\u4f4d\u7f6e\u7684\u5355\u4e00\u3001\u5b89\u5168\u7684\u4e13\u7528\u7f51\u7edc\u3002\u53ef\u4ee5\u4e3a\u8fdc\u7a0b\u7528\u6237\u751f\u6210\u548c\u4f7f\u8bc1\u4e66\u5931\u6548\uff0c\u5e76\u4e14\u7528\u6237\u53cb\u597d\u7684\u5bfc\u51fa\u5de5\u5177\u7b80\u5316\u4e86\u5ba2\u6237\u7aef\u914d\u7f6e\u8fc7\u7a0b\u3002<\/p>\n<p style=\"text-align: justify;\">\u7ad9\u70b9\u5230\u7ad9\u70b9VPN\u96a7\u9053\u901a\u8fc7\u4f7f\u7528\u9759\u6001\u516c\u5171 IP \u5730\u5740\u8fde\u63a5\u4e24\u4e2a\u4f4d\u7f6e\u5e76\u5728\u5176\u5404\u81ea\u7684\u7f51\u7edc\u4e4b\u95f4\u8def\u7531\u6d41\u91cf\u3002\u8fd9\u901a\u5e38\u7528\u4e8e\u5728\u7ec4\u7ec7\u7684\u5206\u652f\u673a\u6784\u548c\u603b\u90e8\u4e4b\u95f4\u5efa\u7acb\u8fde\u63a5\uff0c\u5141\u8bb8\u5206\u652f\u673a\u6784\u7528\u6237\u68c0\u7d22\u4f4d\u4e8e\u603b\u90e8\u7684\u7f51\u7edc\u8d44\u6e90\u3002<\/p>\n<p style=\"text-align: justify;\">\u672c\u6559\u7a0b\u5c06\u793a\u8303OPNsense\u9632\u706b\u5899\u914d\u7f6e IPsec \u7ad9\u70b9\u5230\u7ad9\u70b9 VPN \u96a7\u9053\u7684\u8fc7\u7a0b\u3002<\/p>\n<h1 id=\"sample-ipsec-site-to-site-vpn-topology\" class=\"anchor anchorWithStickyNavbar_LWe7\" style=\"text-align: justify;\">\u7f51\u7edc\u62d3\u6251<\/h1>\n<p style=\"text-align: justify;\">\u672c\u6559\u7a0b\u4f7f\u7528\u7684\u7f51\u7edc\u62d3\u6251\u5982\u4e0b\uff1a<\/p>\n<div class=\"ideal-image\" style=\"text-align: justify;\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12275 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053.png\" alt=\"\" width=\"1280\" height=\"537\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053.png 1199w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-300x126.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1024x430.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-768x322.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<p>&nbsp;<\/p>\n<p style=\"text-align: justify;\">\u4e3a\u4e86\u5141\u8bb8IPsec \u96a7\u9053\u8fde\u63a5\uff0c\u5fc5\u987b\u5728\u4e24\u4e2a\u7ad9\u70b9WAN\u63a5\u53e3\u4e0a\u5f00\u653e\u4e0b\u9762\u4e09\u4e2a\u7aef\u53e3\u548c\u534f\u8bae\uff1a<\/p>\n<ul style=\"text-align: justify;\">\n<li>\u7aef\u53e3 4500 \u4e0a\u7684 UDP \u6d41\u91cf (NAT-T)<\/li>\n<li>\u7aef\u53e3 500 \u4e0a\u7684 UDP \u6d41\u91cf (ISAKMP)<\/li>\n<li>\u534f\u8bae ESP<\/li>\n<\/ul>\n<h2>\u901a\u7528\u8bbe\u7f6e<\/h2>\n<p style=\"text-align: justify;\">\u5728SiteA\u548cSiteB\u7684\u4e24\u4e2a OPNsense \u9632\u706b\u5899\u4e0a\u6dfb\u52a0\u8fd9 3 \u6761\u9632\u706b\u5899\u89c4\u5219\u540e\uff0c\u5355\u51fb<strong>\u201c\u5e94\u7528\u66f4\u6539\u201d<\/strong>\u6309\u94ae\u6765\u6fc0\u6d3b\u65b0\u8bbe\u7f6e\u3002<\/p>\n<div class=\"ideal-image\" style=\"text-align: justify;\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12276 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1.png\" alt=\"Applying firewall rules for IPsec Tunnel\" width=\"1280\" height=\"458\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1.png 1583w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1-300x107.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1-1024x367.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1-768x275.png 768w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-1-1536x550.png 1536w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<h2 id=\"2-configuring-phase-1-on-site-a\" class=\"anchor anchorWithStickyNavbar_LWe7\" style=\"text-align: justify;\">\u7ad9\u70b9A\u8bbe\u7f6e<\/h2>\n<p>\u7ad9\u70b9A\u9636\u6bb51\u5e38\u89c4\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-2.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12277 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-2.png\" alt=\"\" width=\"1280\" height=\"942\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-2.png 791w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-2-300x221.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-2-768x565.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/p>\n<p>\u7ad9\u70b9A\u9636\u6bb51\u63d0\u6848\uff08\u8ba4\u8bc1\uff09\u90e8\u5206\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-3.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12278 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-3.png\" alt=\"\" width=\"1280\" height=\"449\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-3.png 769w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-3-300x105.png 300w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<div>\u7ad9\u70b9A\u9636\u6bb51\u63d0\u6848\uff08\u7b97\u6cd5\uff09\u90e8\u5206\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/div>\n<div><\/div>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-4.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12279 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-4.png\" alt=\"\" width=\"1280\" height=\"371\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-4.png 907w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-4-300x87.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-4-768x223.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<div><\/div>\n<div>\u7ad9\u70b9A\u9636\u6bb51\u9ad8\u7ea7\u9009\u9879\u90e8\u5206\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/div>\n<div><\/div>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12280 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5.png\" alt=\"\" width=\"1280\" height=\"821\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5.png 1320w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5-300x193.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5-1024x657.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-5-768x493.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<p>\u5355\u51fb\u9636\u6bb51\u6761\u76ee\u53f3\u4fa7\u7684 \u6309\u94ae\u6dfb\u52a0\u9636\u6bb52\u6761\u76ee\uff1a<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12281 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6.png\" alt=\"\" width=\"1280\" height=\"224\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6.png 1577w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6-300x53.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6-1024x179.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6-768x134.png 768w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-6-1536x269.png 1536w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<p>\u7ad9\u70b9A\u9636\u6bb52\u5e38\u89c4\u90e8\u5206\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-7.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12282 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-7.png\" alt=\"\" width=\"1280\" height=\"975\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-7.png 815w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-7-300x229.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-7-768x585.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<div><\/div>\n<div>\u7ad9\u70b9A\u9636\u6bb52\u63d0\u6848\u53ca\u9ad8\u7ea7\u9009\u9879\u90e8\u5206\u8bbe\u7f6e\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/div>\n<div><\/div>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-8.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12283 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-8.png\" alt=\"\" width=\"1280\" height=\"958\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-8.png 838w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-8-300x224.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-8-768x575.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<p style=\"text-align: justify;\">\u6309\u7167\u4ee5\u4e0b\u6b65\u9aa4\u5728\u7ad9\u70b9A \u4e0a\u5feb\u901f\u542f\u7528IPsec \u670d\u52a1\uff1a<\/p>\n<p>\u5bfc\u822a\u5230VPN\u00a0\u2192\u00a0IPSec\u00a0\u2192\u96a7\u9053\u8bbe\u7f6e\u3002\u9009\u4e2d\u9875\u9762\u5e95\u90e8\u7684\u542f\u7528 IPsec\u9009\u9879\u3002\u5355\u51fb\u9875\u9762\u53f3\u4e0a\u89d2\u7684\u5e94\u7528\u66f4\u6539\u6309\u94ae\uff0c\u6fc0\u6d3b IPsec \u96a7\u9053\u8bbe\u7f6e\u3002<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12284 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9.png\" alt=\"\" width=\"1280\" height=\"591\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9.png 1582w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9-300x138.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9-1024x473.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9-768x354.png 768w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-9-1536x709.png 1536w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<h2 id=\"5-configuring-phase-1-on-site-b\" class=\"anchor anchorWithStickyNavbar_LWe7\" style=\"text-align: justify;\">\u7ad9\u70b9B\u8bbe\u7f6e<\/h2>\n<p style=\"text-align: justify;\">\u7ad9\u70b9B\u9636\u6bb51\u8bbe\u7f6e\uff0c\u9664\u5e38\u89c4\u9009\u9879\u8fdc\u7a0b\u7f51\u5173\u4e0d\u540c\u4ee5\u5916\uff0c\u5176\u4ed6\u90e8\u5206\u53ef\u53c2\u7167\u7ad9\u70b9A\u8fdb\u884c\u8bbe\u7f6e\u3002<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-10.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12285 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-10.png\" alt=\"\" width=\"1280\" height=\"931\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-10.png 793w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-10-300x218.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-10-768x559.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<p style=\"text-align: justify;\">\u7ad9\u70b9B\u9636\u6bb52\u8bbe\u7f6e\u9664\u8fdc\u7a0b\u7f51\u7edc\u5730\u5740\u4e0d\u540c\u4ee5\u5916\uff0c\u5176\u4ed6\u90e8\u5206\u53c2\u7167\u7ad9\u70b9A\u8fdb\u884c\u8bbe\u7f6e\uff1a<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-11.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12286 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-11.png\" alt=\"\" width=\"1280\" height=\"976\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-11.png 813w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-11-300x229.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-11-768x586.png 768w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<div>\u53c2\u7167\u7ad9\u70b9A\u8bbe\u7f6e\uff0c\u5feb\u901f\u542f\u7528IPsec\u670d\u52a1\u3002<\/div>\n<h2 id=\"8-adding-firewall-rule-for-lan-access-on-both-site\" class=\"anchor anchorWithStickyNavbar_LWe7\" style=\"text-align: justify;\">\u6dfb\u52a0\u9632\u706b\u5899\u89c4\u5219<\/h2>\n<p>\u5728\u4e24\u4e2a\u7ad9\u70b9\u4e0a\uff0c\u5206\u522b\u6dfb\u52a0\u5141\u8bb8\u8bbf\u95ee\u7684\u89c4\u5219\u3002\u5bfc\u822a\u5230\u9632\u706b\u5899&gt;\u89c4\u5219&gt;IPsec\u63a5\u53e3\uff0c\u6dfb\u52a0\u5141\u8bb8\u8bbf\u95eeLAN net\u7684\u89c4\u5219\u3002<\/p>\n<div class=\"ideal-image\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12287 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12.png\" alt=\"Defining firewall rule for LAN access\" width=\"1280\" height=\"404\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12.png 1577w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12-300x95.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12-1024x323.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12-768x243.png 768w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-12-1536x485.png 1536w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<h2 id=\"9-viewing-ipsec-tunnel-status\" class=\"anchor anchorWithStickyNavbar_LWe7\" style=\"text-align: justify;\">\u67e5\u770b\u96a7\u9053\u72b6\u6001<\/h2>\n<p style=\"text-align: justify;\">\u8981\u67e5\u770b\u5f53\u524dIPsec VPN\u96a7\u9053\u72b6\u6001\uff0c\u53ef\u4ee5\u5bfc\u822a\u5230VPN\u00a0\u2192\u00a0IPsec\u00a0\u2192\u72b6\u6001\u603b\u89c8\u8fdb\u884c\u67e5\u770b\u3002<\/p>\n<div class=\"ideal-image\" style=\"text-align: justify;\"><a href=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13.png\"><img loading=\"lazy\" decoding=\"async\" class=\"wp-image-12288 alignnone\" src=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13.png\" alt=\"Viewing IPsec Tunnel Status\" width=\"1280\" height=\"438\" srcset=\"https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13.png 1595w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13-300x103.png 300w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13-1024x351.png 1024w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13-768x263.png 768w, https:\/\/blog.pfchina.org\/wp-content\/uploads\/2024\/03\/opnsense\u914d\u7f6eipsec\u7ad9\u70b9\u5230\u7ad9\u70b9vpn\u96a7\u9053-13-1536x526.png 1536w\" sizes=\"auto, (max-width: 1280px) 100vw, 1280px\" \/><\/a><\/div>\n<div class=\"theme-admonition theme-admonition-tip admonition_xJq3 alert alert--success\" style=\"text-align: justify;\">\n<div class=\"admonitionHeading_Gvgb\">\u5982\u679c\u96a7\u9053\u6ca1\u6709\u51fa\u73b0\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u5728\u4e24\u4e2a\u7ad9\u70b9\u4e0a\u91cd\u65b0\u542f\u52a8\u670d\u52a1\u3002<\/div>\n<\/div>\n<h2>\u63d0\u5347\u96a7\u9053\u6027\u80fd<\/h2>\n<p style=\"text-align: justify;\"><span class=\"VIpgJd-yAWNEb-VIpgJd-fmcmS-sn54Q\">\u6839\u636e\u8d1f\u8f7d\uff08\u5355\u6d41\u6216\u591a\u6d41 IPsec\uff09\uff0c\u542f\u7528IPsec\u4e0a\u7684\u591a\u7ebf\u7a0b\u52a0\u5bc6\u6a21\u5f0f\u5bf9\u63d0\u5347\u96a7\u9053\u6027\u80fd\u662f\u6709\u76ca\u7684\u3002\u6b64\u6a21\u5f0f\u5c06\u52a0\u5bc6\u6570\u636e\u5305\u5206\u5e03\u5728\u591a\u4e2a\u5904\u7406\u5668\u4e0a\uff0c\u5f53\u4ec5\u4f7f\u7528\u4e00\u4e2a\u96a7\u9053\u65f6\uff0c\u63d0\u5347\u5c24\u5176\u660e\u663e\u3002\u53ef\u4ee5<\/span>\u5bfc\u822a\u81f3\u7cfb\u7edf\u2192\u8bbe\u7f6e\u2192\u53ef\u8c03\u53c2\u6570\u6765\u6dfb\u52a0\u6216\u4fee\u6539\u4ee5\u4e0b\u53c2\u6570\u5373\u53ef\u3002<\/p>\n<pre class=\"code\">net.inet.ipsec.async_crypto = 1<\/pre>\n<p><a href=\"https:\/\/www.zenarmor.com\/docs\/network-security-tutorials\/how-to-configure-ipsec-site-to-site-vpn-tunnel-on-opnsense\">\u539f\u6587\u5730\u5740<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>IPSec\u662f\u4e00\u7ec4\u901a\u4fe1\u534f\u8bae\uff0c\u7528\u4e8e\u5728\u7f51\u7edc\u4e0a\u63d0\u4f9b\u5b89\u5168\u8fde\u63a5\u3002\u77ed\u8bed\u201cIPsec\u201d\u662f\u7f29\u5199\uff0c\u5176 &hellip; <a href=\"https:\/\/blog.pfchina.org\/?p=12264\">\u7ee7\u7eed\u9605\u8bfb <span class=\"meta-nav\">&rarr;<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[4],"tags":[166],"class_list":["post-12264","post","type-post","status-publish","format-standard","hentry","category-opnsense","tag-ipsec"],"_links":{"self":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/12264","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12264"}],"version-history":[{"count":16,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/12264\/revisions"}],"predecessor-version":[{"id":12294,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/12264\/revisions\/12294"}],"wp:attachment":[{"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12264"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12264"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12264"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}