[QUESTIONS] => Array
(
[FIO] => Array
(
[CAPTION] => Введите ваше имя
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 198
[FIELD_ID] => 139
[QUESTION_ID] => 139
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[CITY] => Array
(
[CAPTION] => Город
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 199
[FIELD_ID] => 140
[QUESTION_ID] => 140
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[COMPANY] => Array
(
[CAPTION] => Компания
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 200
[FIELD_ID] => 141
[QUESTION_ID] => 141
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[PHONE] => Array
(
[CAPTION] => Телефон
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 201
[FIELD_ID] => 142
[QUESTION_ID] => 142
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[EMAIL] => Array
(
[CAPTION] => E-mail
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 202
[FIELD_ID] => 143
[QUESTION_ID] => 143
[TIMESTAMP_X] => 02.04.2025 11:15:18
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[THEME_EMAIL] => Array
(
[CAPTION] => Тема обращения
[IS_HTML_CAPTION] => N
[REQUIRED] => Y
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 205
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Входящая корреспонденция
[VALUE] => office@qtech.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
[1] => Array
(
[ID] => 206
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Подбор оборудования
[VALUE] => distr@qtech.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 200
[ACTIVE] => Y
)
[2] => Array
(
[ID] => 207
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Покупка оборудования
[VALUE] => distr@qtech.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 300
[ACTIVE] => Y
)
[3] => Array
(
[ID] => 208
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Взять оборудование в тест
[VALUE] => distr@qtech.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 400
[ACTIVE] => Y
)
[4] => Array
(
[ID] => 209
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Техническая поддержка
[VALUE] => qtech.intradesk.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 500
[ACTIVE] => Y
)
[5] => Array
(
[ID] => 210
[FIELD_ID] => 146
[QUESTION_ID] => 146
[TIMESTAMP_X] => 10.07.2023 16:31:28
[MESSAGE] => Гарантийное обслуживание
[VALUE] => guarantee@qtech.ru
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 600
[ACTIVE] => Y
)
)
[VALUE] =>
)
[THEME_EMAIL_HIDDEN] => Array
(
[CAPTION] =>
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 211
[FIELD_ID] => 147
[QUESTION_ID] => 147
[TIMESTAMP_X] => 29.09.2022 19:39:49
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => hidden
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] =>
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[TEXT] => Array
(
[CAPTION] => Ваше сообщение...
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 203
[FIELD_ID] => 144
[QUESTION_ID] => 144
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => textarea
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[check] => Array
(
[CAPTION] =>
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 204
[FIELD_ID] => 145
[QUESTION_ID] => 145
[TIMESTAMP_X] => 29.09.2022 18:14:54
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] =>
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[FILES] => Array
(
[CAPTION] =>
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 232
[FIELD_ID] => 158
[QUESTION_ID] => 158
[TIMESTAMP_X] => 10.11.2022 15:06:06
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] =>
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[INN] => Array
(
[CAPTION] => ИНН
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 238
[FIELD_ID] => 164
[QUESTION_ID] => 164
[TIMESTAMP_X] => 24.08.2023 09:01:39
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[MANAGER] => Array
(
[CAPTION] => Ваш менеджер QTECH
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 239
[FIELD_ID] => 165
[QUESTION_ID] => 165
[TIMESTAMP_X] => 24.08.2023 09:01:59
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[COOP_TYPE] => Array
(
[CAPTION] => Тип сотрудничества*
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 240
[FIELD_ID] => 166
[QUESTION_ID] => 166
[TIMESTAMP_X] => 24.08.2023 09:02:46
[MESSAGE] => Конечный заказчик
[VALUE] =>
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
[1] => Array
(
[ID] => 241
[FIELD_ID] => 166
[QUESTION_ID] => 166
[TIMESTAMP_X] => 24.08.2023 09:02:46
[MESSAGE] => Партнер/Дистрибьютор
[VALUE] =>
[FIELD_TYPE] => dropdown
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 200
[ACTIVE] => Y
)
)
[VALUE] =>
)
[ADDRESS] => Array
(
[CAPTION] => Адрес объекта установки оборудования
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 242
[FIELD_ID] => 167
[QUESTION_ID] => 167
[TIMESTAMP_X] => 24.08.2023 09:03:21
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[NAME_OWNER] => Array
(
[CAPTION] => Наименование заказчика*
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 243
[FIELD_ID] => 168
[QUESTION_ID] => 168
[TIMESTAMP_X] => 24.08.2023 09:03:50
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[INN_OWNER] => Array
(
[CAPTION] => ИНН заказчика
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 244
[FIELD_ID] => 169
[QUESTION_ID] => 169
[TIMESTAMP_X] => 24.08.2023 09:04:16
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[OWNER_CITY] => Array
(
[CAPTION] => Город заказчика*
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 245
[FIELD_ID] => 170
[QUESTION_ID] => 170
[TIMESTAMP_X] => 24.08.2023 09:04:39
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] => class="form-control"
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
[TEMPLATE] => Array
(
[CAPTION] =>
[IS_HTML_CAPTION] => N
[REQUIRED] => N
[IS_INPUT_CAPTION_IMAGE] => N
[HTML_CODE] =>
[STRUCTURE] => Array
(
[0] => Array
(
[ID] => 246
[FIELD_ID] => 171
[QUESTION_ID] => 171
[TIMESTAMP_X] => 24.08.2023 09:05:04
[MESSAGE] =>
[VALUE] =>
[FIELD_TYPE] => text
[FIELD_WIDTH] => 0
[FIELD_HEIGHT] => 0
[FIELD_PARAM] =>
[C_SORT] => 100
[ACTIVE] => Y
)
)
[VALUE] =>
)
)
[SUBMIT_BUTTON] =>
[APPLY_BUTTON] =>
[RESET_BUTTON] =>
[REQUIRED_STAR] => *
[CAPTCHA_IMAGE] => 
[CAPTCHA_FIELD] =>
[CAPTCHA] =>
)
)
Настройка L2TP Over IPsec на маршрутизаторах QTECH QSR-1920/2920/3920
Технология L2TP на маршрутизаторах QTECH обычно используется в тех случаях, когда необходимо организовать защищенный удаленный доступ для работников компании.
Преимущества технологии L2TP
- Не требуются дополнительные лицензии для оборудования. Максимальное количество одновременных подключений пользователей ограничено возможностями самого оборудования.
- Настройка подключения на стороне пользователя производится во встроенном клиенте в любой операционной системе, будь то Windows, Mac или Linux. Не нужно устанавливать дополнительное программное обеспечение.
Настройка L2TP на корпоративных маршрутизаторах QTECH позволяет сэкономить организациям с точки зрения цены решения.
Большую часть настроек будем выполнять в консоли.
1. Начнем с установки белого статического IP-адреса.
interface gigabitethernet0
ip address 100.1.1.1 255.255.255.252
2. Определяем диапазон адресов для удалённых L2TP-пользователей.
Первым делом задаем диапазон IP-адресов. Адреса из данного диапазона будут присваиваться удалённым клиентам.
QSR(config)#ip local pool L2TP_POOL 10.10.10.20 10.10.10.80
3. Создаем виртуальные интерфейсы.
Создаём интерфейс Loopback, который будет выступать шлюзом для удалённых клиентов.
QSR(config)#interface loopback0
QSR(config)#ip address 10.10.10.10 255.255.255.255
Создаём интерфейс Virtual-Template – это шаблон для подключения L2TP-клиентов.
QSR(config)#interface virtual-template0
QSR(config)#encapsulation ppp
QSR(config)#ppp authentication ms-chap-v2
QSR(config)#peer default ip address pool L2TP_POOL
QSR(config)#ip unnumbered loopback0
QSR(config)#mtu 1500
QSR(config)#exit
4. Задаем параметры шифрования
На данном этапе требуется задать параметры шифрования для траффика и задать общий ключ для удалённых клиентов.
Общий ключ для клиентов «QTECH»
QSR(config)#crypto ike key QTECH any
QSR(config)#crypto ike proposal ike_l2tp
QSR(config-ike-prop)#encryption 3des
QSR(config-ike-prop)#group group2
QSR(config-ike-prop)#exit
QSR(config)#crypto ipsec proposal ipsec_l2tp
QSR(config-ipsec-prop)#esp 3des sha1
QSR(config-ipsec-prop)#mode transport
QSR(config-ipsec-prop)# exit
QSR(config)#crypto tunnel TUN_L2TP
QSR(config-tunnel)#local address 100.1.1.1
QSR(config-tunnel)#peer any
QSR(config-tunnel)#set authentication preshared
QSR(config-tunnel)#set ike proposal ike_l2tp
QSR(config-tunnel)#set ipsec proposal ipsec_l2tp
QSR(config-tunnel)#exit
5. Настраиваем криптополитику.
Задаём имя «L2TP_POLICY».
QSR(config)#crypto policy L2TP_POLICY
QSR(config-policy)#flow host 100.1.1.1 any udp 1701 any ipv4-tunnel TUN_L2TP
exit
6. Настраиваем авторизацию удалённых L2TP-клиентов.
Здесь возможны разные варианты, возможна авторизация локальная или через сервер авторизации Radius.
Для локальной авторизации:
Создаём пользователя на маршрутизаторе для локальной авторизации.
Логин: client
Пароль: client
local-user client class network
QSR(config-user-network-client)#password 0 client
QSR(config-user-network-client)#service-type ppp
QSR(config-user-network-client)#exit
Далее создаём домен для авторизации и аутентификации.
Присваиваем имя «LOCAL_L2TP»
domain LOCAL_L2TP
QSR(config-isp-LOCAL_L2TP)#aaa authentication ppp local
QSR(config-isp-LOCAL_L2TP)#aaa authorization ppp local
QSR(config-isp-LOCAL_L2TP)#exit
Для авторизации через Radius-server:
Назначаем имя группы серверов «RadiusServer»
IP-адрес Radius сервера 172.16.1.1
Ключ от сервера QtechServer
QSR(config)#aaa server group radius RadiusServer
QSR(config-sg-radius-RadiusServer)#server 172.16.1.1 acct-port 1813 auth-port 1812 key 0 QtechServer
exit
Создаём домен для авторизации через Radius, задаём имя домена «Radius_L2TP»
QSR(config)#domain Radius_L2TP
QSR(config-isp-Radius_L2TP)#aaa authentication ppp radius-group RadiusServer
QSR(config-isp-Radius_L2TP)#aaa authorization ppp radius-group RadiusServer
QSR(config-isp-Radius_L2TP)#aaa accounting ppp start-stop radius-group RadiusServer
Exit
Для авторизации удалённых клиентов через Radius, дополнительно укажите название домена в шаблоне virtual-template.
QSR(config)#interface virtual-template0
QSR(config)#encapsulation ppp
QSR(config)#ppp authentication ms-chap-v2 RADIUS_L2TP
7. Запуск сервера L2TP.
Требуется запустить VPDN и активировать все настройки:
QSR(config)#vpdn enable
QSR(config)#vpdn-group L2TP_VPDN
QSR(config-vpdn)#accept-dialin
QSR(config-vpdn-acc-in)#protocol l2tp
QSR(config-vpdn-acc-in)#virtual-template 0
QSR(config-vpdn-acc-in)#exit
QSR(config-vpdn)#local name QSR
QSR(config-vpdn)#no l2tp tunnel authentication
QSR(config-vpdn)#lcp renegotiation always
QSR(config-vpdn)#exit
8. Подключение удалённого клиента с операционной системой windows к L2TP-серверу.
Разбираемся на ОС Windows 10.
Нажмите кнопку Пуск и выберите Параметры> Сеть и Интернет> VPN> Добавить VPN-подключение.
Ранее созданный на маршрутизаторе общий ключ
Ip адрес L2TP-сервера
Вводим данные пользователя.
Логин и пароль от локальной учетной записи
|
При успешном подключении видим, что соединение выполнено.
Проверить введенные данные можно в сведениях о сетевом подключении.
После выполнения перечиленных действий, работа по настройке корпоративного маршрутизатора QTECH завершена.
Маршрутизатор, 8 портов 10/100/1000BASE-T (LAN), 1 порт 100/1000BASE-X SFP (WAN), 1 порт USB 2.0, 2 слота, встроенный БП, 100-240В
Маршрутизатор, 24 порта 10/100/1000BASE-T (LAN), 4 порта комбо 1000BASE-T\SFP (WAN), 1 порт USB 2.0 (на передней панели), 1 порт RS-232 (RJ45), 1 порт Micro USB (на передней панели) (консоль), 4 слота MX9, 2 встроенных БП, 100-240В AC
Маршрутизатор, 1 порт Micro-USB, 1 порт USB 2.0, 1 порт RS-232 (RJ45) (консоль), 1 слот для карт 3ESP, 6 слотов для карт 3RMB, 2 сменных БП (поставляются отдельно), 100-240В AC
Автор:
Парфёнов А.А.
QTECH 2023 г.
Вид оборудования: Маршрутизаторы для корпоративных сетей
