{"id":8692,"date":"2022-04-21T14:26:45","date_gmt":"2022-04-21T06:26:45","guid":{"rendered":"https:\/\/pfchina.org\/?p=8692"},"modified":"2024-05-28T15:11:56","modified_gmt":"2024-05-28T07:11:56","slug":"%e4%bd%bf%e7%94%a8%e8%af%81%e4%b9%a6%e8%ae%a4%e8%af%81ipsec-%e7%ab%99%e7%82%b9%e5%88%b0%e7%ab%99%e7%82%b9-vpn%e9%85%8d%e7%bd%ae%e6%8c%87%e5%8d%97","status":"publish","type":"post","link":"https:\/\/pfchina.org\/?p=8692","title":{"rendered":"pfSense\u4f7f\u7528\u8bc1\u4e66\u914d\u7f6eIPsec\u7ad9\u70b9\u5230\u7ad9\u70b9VPN\u6307\u5357"},"content":{"rendered":"<p style=\"text-align: justify;\">\u5728<a href=\"https:\/\/pfchina.org\/?p=7145\" rel=\"bookmark\">pfSense\u7ad9\u70b9\u5230\u7ad9\u70b9IPsec VPN\u53ca\u8def\u7531Internet\u914d\u7f6e\u6307\u5357<\/a>\u91cc\uff0c\u4ecb\u7ecd\u4e86\u4f7f\u7528\u5171\u4eab\u5bc6\u94a5\u65b9\u5f0f\u914d\u7f6eIPsec VPN\u53ca\u8def\u7531Internet\u7684\u8fc7\u7a0b\uff0c\u5728\u672c\u6587\u4e2d\uff0c\u5c06\u4ecb\u7ecd\u4f7f\u7528\u8bc1\u4e66\u6765\u914d\u7f6eIPsec VPN\u7684\u65b9\u6cd5 \u3002\u76f8\u6bd4\u8f83\u9884\u5171\u4eab\u5bc6\u94a5\u7684\u8ba4\u8bc1\u65b9\u5f0f\uff0c\u91c7\u7528\u8bc1\u4e66\u8ba4\u8bc1\u4f1a\u76f8\u5bf9\u590d\u6742\u4e00\u4e9b\uff0c\u4f46\u5b89\u5168\u6027\u65b9\u9762\u4f1a\u6709\u6240\u63d0\u9ad8\u3002\u7531\u4e8e\u4e24\u79cd\u65b9\u6cd5\u53ea\u5728\u8ba4\u8bc1\u65b9\u9762\u4e0d\u76f8\u540c\uff0c\u6240\u4ee5\u672c\u6587\u5c3d\u91cf\u7b80\u5316\u53d9\u8ff0\u8fc7\u7a0b\uff0c\u9664\u6ce8\u660e\u4ee5\u5916\uff0c\u5176\u4ed6\u90fd\u4e0epfSense\u7ad9\u70b9\u5230\u7ad9\u70b9IPsec VPN\u53ca\u8def\u7531Internet\u914d\u7f6e\u6307\u5357\u4e00\u81f4\u3002<\/p>\n<h1 style=\"text-align: justify;\"><span style=\"color: #000000; font-weight: bold;\">\u521b\u5efa\u8bc1\u4e66<\/span><\/h1>\n<p style=\"text-align: justify;\">\u5206\u522b\u5728\u7ad9\u70b9A\u548c\u7ad9\u70b9B\u4e0a\u521b\u5efa\u8bc1\u4e66\u9881\u53d1\u673a\u6784(CA)\u548c\u8bc1\u4e66\u3002\u4e3a\u4e86\u4fbf\u4e8e\u533a\u5206\uff0c\u7ad9\u70b9A\u91c7\u7528\u7684\u6df1\u8272\u4e3b\u9898\uff0c\u7ad9\u70b9B\u91c7\u7528\u7684\u6d45\u8272\u4e3b\u9898\u3002<\/p>\n<h2 style=\"text-align: justify;\">\u7ad9\u70b9A<\/h2>\n<p style=\"text-align: justify;\">\u521b\u5efaCA<\/p>\n<ul style=\"text-align: justify;\">\n<li>\u5bfc\u822a\u5230<strong>\u7cfb\u7edf &gt; \u8bc1\u4e66\u7ba1\u7406<\/strong>\uff0c<strong>CAs<\/strong>\u9009\u9879\u5361<\/li>\n<li>\u70b9\u51fb&#8221; &#8220;<strong>\u6dfb\u52a0<\/strong><\/li>\n<li>\u8bbe\u7f6e\u9009\u9879\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-09-59.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-09-59.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8696\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-09-59.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1145\" height=\"1045\"  sizes=\"auto, (max-width: 1145px) 100vw, 1145px\" \/><\/div><\/a><\/p>\n<p style=\"text-align: justify;\">\u521b\u5efa\u8bc1\u4e66<\/p>\n<ul style=\"text-align: justify;\">\n<li>\u5bfc\u822a\u5230<strong>\u7cfb\u7edf &gt; \u8bc1\u4e66\u7ba1\u7406<\/strong>\uff0c<strong>\u8bc1\u4e66<\/strong>\u9009\u9879\u5361<\/li>\n<li>\u70b9\u51fb&#8221; &#8220;<strong>\u6dfb\u52a0<\/strong><\/li>\n<li>\u8bbe\u7f6e\u9009\u9879\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-16-40.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-16-40.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8697\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-16-40.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1139\" height=\"999\"  sizes=\"auto, (max-width: 1139px) 100vw, 1139px\" \/><\/div><\/a><\/p>\n<ul style=\"text-align: justify;\">\n<li>\u8bc1\u4e66\u5c5e\u6027\u90e8\u5206\uff0c\u8bc1\u4e66\u7c7b\u578b\u9009\u7528\u6237\u8bc1\u4e66\uff0c\u66ff\u4ee3\u540d\u79f0\u5206\u522b\u8f93\u5165\u4e3b\u673a\u540d\u548cIP\u5730\u5740(LAN\u5730\u5740)\uff0c\u8fd9\u90e8\u5206\u4fe1\u606f\u5c06\u5728\u9636\u6bb51\u4e2d\u7528\u4e8e\u8ba4\u8bc1\u4f7f\u7528\u3002<\/li>\n<\/ul>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-17-31.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-17-31.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8698\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-17-31.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1137\" height=\"386\"  sizes=\"auto, (max-width: 1137px) 100vw, 1137px\" \/><\/div><\/a><\/p>\n<h2 style=\"text-align: justify;\">\u7ad9\u70b9B<\/h2>\n<p style=\"text-align: justify;\">\u521b\u5efaCA\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-11-05.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-11-05.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8701\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-11-05.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1133\" height=\"1056\"  sizes=\"auto, (max-width: 1133px) 100vw, 1133px\" \/><\/div><\/a><\/p>\n<p style=\"text-align: justify;\">\u521b\u5efa\u8bc1\u4e66\u5982\u4e0b\u56fe\u6240\u793a\uff1a<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-26-52.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-26-52.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8699\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-26-52.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1137\" height=\"996\"  sizes=\"auto, (max-width: 1137px) 100vw, 1137px\" \/><\/div><\/a><\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-27-21.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-27-21.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8700\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-27-21.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1140\" height=\"372\"  sizes=\"auto, (max-width: 1140px) 100vw, 1140px\" \/><\/div><\/a><\/p>\n<h1 style=\"text-align: justify;\">\u5bfc\u5165CA<\/h1>\n<p style=\"text-align: justify;\">\u4e3a\u4e86\u76f8\u4e92\u8fdb\u884c\u8ba4\u8bc1\uff0c\u4e24\u4e2a\u7ad9\u70b9\u7684\u9632\u706b\u5899\u9700\u8981\u5206\u522b\u5bfc\u5165\u5bf9\u65b9\u7684CA\u3002<\/p>\n<p style=\"text-align: justify;\">1\u3001\u5728\u4e24\u4e2a\u7ad9\u70b9\u4e0a\uff0c\u5206\u522b\u5bfc\u51fa\u521b\u5efa\u7684CA\u3002\u70b9\u51fb\u4e0b\u56fe\u6240\u793a\u7684\u56fe\u6807\uff0c\u5bfc\u51faCA\u8bc1\u4e66\u3002<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-10-25.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-10-25.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8702\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-10-25.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1141\" height=\"366\"  sizes=\"auto, (max-width: 1141px) 100vw, 1141px\" \/><\/div><\/a><\/p>\n<p style=\"text-align: justify;\">2\u3001\u5206\u522b\u5bfc\u5165\u5bf9\u65b9\u7684CA\u3002\u5bfc\u822a\u5230<strong>\u7cfb\u7edf &gt; \u8bc1\u4e66\u7ba1\u7406<\/strong>\uff0c<strong>CAs<\/strong>\u9009\u9879\u5361\uff0c\u5355\u51fb\u4e0b\u65b9\u7684\u6dfb\u52a0\u6309\u94ae\uff0c\u5728\u8bc1\u4e66\u6765\u6e90\u9009\u9879\uff0c\u9009\u62e9\u5bfc\u5165\u73b0\u6709\u8bc1\u4e66\u9881\u53d1\u673a\u6784\u3002\u7528\u6587\u672c\u7a0b\u5e8f\u6253\u5f00\u5bf9\u65b9\u7684\u8bc1\u4e66\u6587\u4ef6\uff0c\u5c06\u91cc\u9762\u7684\u5185\u5bb9\u590d\u5236\u5230\u8bc1\u4e66\u6570\u636e\u680f\uff0c\u5e76\u5355\u51fb\u4fdd\u5b58\u3002<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-13-00.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-13-00.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8703\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-13-00.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1141\" height=\"813\"  sizes=\"auto, (max-width: 1141px) 100vw, 1141px\" \/><\/div><\/a><\/p>\n<p style=\"text-align: justify;\">\u4fdd\u5b58\u540e\uff0cCAs\u9009\u9879\u5361\u4e0b\uff0c\u5c06\u4f1a\u51fa\u73b0\u4e24\u4e2a\u7ad9\u70b9\u7684CA\u4fe1\u606f\u3002\u4e0b\u56fe\u5206\u522b\u662f\u7ad9\u70b9A\u548c\u7ad9\u70b9B\u7684CA\u5217\u8868\uff1a<\/p>\n<p style=\"text-align: justify;\"><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-24-28.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-24-28.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8704\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-10-24-28.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1136\" height=\"404\"  sizes=\"auto, (max-width: 1136px) 100vw, 1136px\" \/><\/div><\/a><\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-13-49-39.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-13-49-39.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8707\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-13-49-39.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1141\" height=\"405\"  sizes=\"auto, (max-width: 1141px) 100vw, 1141px\" \/><\/div><\/a><\/p>\n<h1>\u4fee\u6539\u9636\u6bb51\u8bbe\u7f6e<\/h1>\n<p style=\"text-align: justify;\">\u4fee\u6539\u7ad9\u70b9A\u548c\u7ad9\u70b9B\u7684\u9636\u6bb51\u8bbe\u7f6e\uff0c\u5c06\u63d0\u6848(\u8ba4\u8bc1)\u6539\u4e3aMutual certificate(\u76f8\u4e92\u8bc1\u4e66)\uff0c\u5e76\u8c03\u6574\u76f8\u5e94\u7684\u9009\u9879\u8bbe\u7f6e\u3002\u6839\u636e\u91c7\u7528\u8ba4\u8bc1ID\u7c7b\u578b\u7684\u4e0d\u540c\uff0c\u6709\u4e09\u79cd\u76f8\u4e92\u8ba4\u8bc1\u65b9\u5f0f\uff1a<\/p>\n<p>1\u3001\u4f7f\u7528ASN.1\u4e13\u6709\u540d\u79f0\u3002\u4f7f\u7528\u8bc1\u4e66\u4e2d\u7684ASN.1\u4e13\u6709\u540d\u79f0\u6765\u76f8\u4e92\u8ba4\u8bc1\u3002ASN.1\u4e13\u6709\u540d\u79f0\u53ef\u4ee5\u5728\u8bc1\u4e66\u5217\u8868\u5355\u51fb\u8bc1\u4e66\u8be6\u7ec6\u4fe1\u606f\u56fe\u6807\u67e5\u770b\uff0c\u5982\u4e0b\u56fe\u6240\u793aDN\u540e\u9762\u7684\u5185\u5bb9\uff1a<\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-14-04-30.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-14-04-30.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8712\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-14-04-30.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"561\" height=\"395\"  sizes=\"auto, (max-width: 561px) 100vw, 561px\" \/><\/div><\/a><\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-22-06.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-22-06.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8708\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-22-06.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1144\" height=\"328\"  sizes=\"auto, (max-width: 1144px) 100vw, 1144px\" \/><\/div><\/a><\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-25-01.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-25-01.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8709\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-25-01.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1138\" height=\"340\"  sizes=\"auto, (max-width: 1138px) 100vw, 1138px\" \/><\/div><\/a><\/p>\n<p>2\u3001\u4f7f\u7528FQDN\u3002\u4f7f\u7528\u5728\u8bc1\u4e66\u521b\u5efa\u65f6\uff0c\u5728\u8bc1\u4e66\u5c5e\u6027\u7684\u66ff\u4ee3\u540d\u79f0\u90e8\u5206\u8f93\u5165\u7684FQDN\u6765\u8fdb\u884c\u8ba4\u8bc1\u3002<\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-51.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-51.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8713\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-51.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1141\" height=\"330\"  sizes=\"auto, (max-width: 1141px) 100vw, 1141px\" \/><\/div><\/a><\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-07.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-07.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8716\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-29-07.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1137\" height=\"325\"  sizes=\"auto, (max-width: 1137px) 100vw, 1137px\" \/><\/div><\/a><\/p>\n<p>3\u3001\u4f7f\u7528IP\u5730\u5740\u3002\u4f7f\u7528\u5728\u8bc1\u4e66\u521b\u5efa\u65f6\uff0c\u5728\u8bc1\u4e66\u5c5e\u6027\u7684\u66ff\u4ee3\u540d\u79f0\u90e8\u5206\u8f93\u5165\u7684IP\u5730\u5740\u6765\u8fdb\u884c\u8ba4\u8bc1\u3002<\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-42.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-42.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8717\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-42.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1135\" height=\"314\"  sizes=\"auto, (max-width: 1135px) 100vw, 1135px\" \/><\/div><\/a><\/p>\n<p><a href=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-21.png\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-21.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-8714\" data-original=\"https:\/\/pfchina.org\/wp-content\/uploads\/2022\/04\/2022-04-21-09-31-21.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" width=\"1139\" height=\"314\"  sizes=\"auto, (max-width: 1139px) 100vw, 1139px\" \/><\/div><\/a><\/p>\n<p>\u4ee5\u4e0a\u4e09\u79cd\u8ba4\u8bc1ID\u7c7b\u578b\u7ecf\u8fc7\u6d4b\u8bd5\uff0c\u90fd\u53ef\u4ee5\u6b63\u5e38\u8ba4\u8bc1\u5e76\u5efa\u7acb\u8fde\u63a5\uff0c\u91c7\u7528\u4efb\u610f\u4e00\u79cd\u5373\u53ef\u3002<\/p>\n<p>\u4f7f\u7528\u8bc1\u4e66\u8ba4\u8bc1\u76f8\u6bd4\u5171\u4eab\u5bc6\u94a5\u8ba4\u8bc1\u5efa\u7acbIPsec VPN\u96a7\u9053\u591a\u4e86\u4e00\u4e2a\u521b\u5efaCA\u548c\u8bc1\u4e66\u7684\u8fc7\u7a0b\uff0c\u63d0\u6848(\u8ba4\u8bc1)\u9009\u9879\u7684\u8bbe\u7f6e\u4e0d\u540c\uff0c\u9664\u6b64\u4ee5\u5916\uff0c\u4e24\u8005\u7684\u5176\u4ed6\u8bbe\u7f6e\u5b8c\u5168\u76f8\u540c\uff0c\u8fd9\u91cc\u5c31\u4e0d\u518d\u8d58\u8ff0\u4e86\u3002<\/p>\n<p>\u76f8\u5173\u6587\u7ae0\uff1a<\/p>\n<ul>\n<li><a href=\"https:\/\/docs.netgate.com\/pfsense\/en\/latest\/recipes\/ipsec-s2s-tls.html\">\u5e26\u6709\u8bc1\u4e66\u8eab\u4efd\u9a8c\u8bc1\u7684IPsec \u7ad9\u70b9\u5230\u7ad9\u70b9VPN\u793a\u4f8b<\/a><\/li>\n<li><a href=\"https:\/\/pfchina.org\/?p=7145\" rel=\"bookmark\">pfSense\u7ad9\u70b9\u5230\u7ad9\u70b9IPsec VPN\u53ca\u8def\u7531Internet\u914d\u7f6e\u6307\u5357<\/a><\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>\u5728pfSense\u7ad9\u70b9\u5230\u7ad9\u70b9IPsec VPN\u53ca\u8def\u7531Internet\u914d\u7f6e\u6307\u5357\u91cc\uff0c\u4ecb\u7ecd\u4e86\u4f7f\u7528\u5171\u4eab\u5bc6\u94a5\u65b9\u5f0f\u914d\u7f6eIPs [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"image","meta":{"footnotes":""},"categories":[28],"tags":[166],"class_list":["post-8692","post","type-post","status-publish","format-image","hentry","category-pfsense","tag-ipsec","post_format-post-format-image"],"_links":{"self":[{"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/8692","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=8692"}],"version-history":[{"count":1,"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/8692\/revisions"}],"predecessor-version":[{"id":12679,"href":"https:\/\/pfchina.org\/index.php?rest_route=\/wp\/v2\/posts\/8692\/revisions\/12679"}],"wp:attachment":[{"href":"https:\/\/pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=8692"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=8692"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pfchina.org\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=8692"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}