ܼ

FortiGate 60 / 90DؤSSL VPN硣

Ķ

ϰʲδĶˤơ


  • FortiGate 90Dv5.2.10,build 0742,161129(GA)

[Setup Wizard]ѤƴŪϹԤ
SSL VPNδäȤʤ[Setup Wizard]˽äƹԤ

󥿡ե

֤ꤵƤ[ϡɥå]顢Ƥ줿󥿡ե򳰤ȤɬפȤʤ롣

  • 1. wan1ˤϥ󥿡ͥå³Ԥ

  • 2. internal1LAN¦ΥȥȤԤ

    Ǥդ̾Τ
    ɥå󥰥⡼ޥ˥奢
    IP/ͥåȥޥ192.168.1.254/255.255.255.0
    PING

    fortigate_19.jpg

Firewall֥Ȥ

Firewallݥꥷ˻Ѥ륢ɥ쥹Ԥ

SSL VPN饤¦Υɥ쥹

  • 1. [ݥꥷ&֥] [֥] [Create New]򳫤
  • 2. 饤¦Υɥ쥹

    ̾Ǥդ̾ΤSSL-VPN_Client01
    IP/ͥåȥޥ
    ֥ͥå/IPϰVPN Client˳Ƥ륢ɥ쥹ϰϤ172.26.1.0/255.255.255.0
    󥿡եany

    fortigate_21.jpg

LAN¦Υɥ쥹

  • 1. [ݥꥷ&֥] [֥] [Create New]򳫤
  • 2. LAN¦Υɥ쥹

    ̾Ǥդ̾ΤSSL-VPN_local-address
    IP/ͥåȥޥ
    ֥ͥå/IPϰLAN¦ΥĤ륢ɥ쥹ϰϤ192.168.1.0/255.255.255.0
    󥿡եLAN¦Υ󥿡եinternal1

    fortigate_16.jpg

桼롼פ

SSL VPN³Ԥ桼θ˻Ѥ륰롼פ롣
Ŭڤ˥롼פ뤳Ȥˤ桼VPNݡͿ륢ɥ쥹ڤؤ椬ǽȤʤ롣

  • 1. [桼&ǥХ] [桼] [桼롼] [Create New]򳫤
  • 2. 桼롼פ

    ̾SSL-VPN01
    ե
    СϿѤߤΥ桼¸ߤˤ򤹤롣

    fortigate_22.jpg

SSL VPN³Ԥ桼롣

  • 1. [桼&ǥХ] [桼] [桼] [Create New]򳫤
  • 2. 桼

    桼̾VPNݡ˥󤹤륢̾Ͽ
    ̵桼̵ꤹˤϥå
    ѥVPNݡ˥󤹤ݤΥѥɤϿ
    Υ桼򥰥롼פɲ°륰롼פ򤹤롣

    fortigate_20.jpg

Firewallݥꥷ

  • 1. [ݥꥷ&֥] [ݥꥷ] [Create New]򳫤
  • 2. SSL VPN³ФFirewallݥꥷ

    ϥ󥿡եssl.root(SSL VPN Interface
    ɥ쥹all
    SSL-VPN01
    ϥ󥿡եinternal1
    襢ɥ쥹SSL-VPN_local-address
    ӥALL
    NATͭͭ

    fortigate_18.jpg

SSL VPNݡ

ݡ

SSL VPN³κݤ˻ѤݡԤ
ݡʣ뤳ȤǤ뤿ᡢ1ĤεǤ桼롼ʣΥݡ뤳Ȥǽ

  • 1. [VPN] [SSL] [ݡ] [Create New]򳫤
  • 2. ݡ

    ȥͥ⡼ͭå
    ץåȥȥͥ󥰤ͭå
    롼ƥ󥰥ɥ쥹VPN³˥Ĥ륢ɥ쥹ꤹSSL-VPN_local-address
    IPסVPN³˥饤¦ʧФɥ쥹ꤹSSL-VPN_Client01
    Web⡼ɤͭWebݡ̤Ѥˤϥå
    ݡåݡ̾ɽǤդΥå
    ơݡο礤ĴʣΥݡˤϿѤƤʬ䤹
    ڡ쥤ݡΥڡɽѹĹβ̡ʥ֥åȤʤɡˤĵǤ1ȥ⡼ɡĹβ̡PCʤɡˤĵǤ2ȥ⡼ɤɤȻפ

    fortigate_23.jpg

ݡư

SSL VPN³κݤ˻ѤݡԤ
ݡʣ뤳ȤǤ뤿ᡢ1ĤεǤ桼롼ʣΥݡ뤳Ȥǽ

  • 1. [VPN] [SSL] []򳫤
  • 2. ݡư

    • ³ ݡư֤
      Listen륤󥿡ե³Ȥʤ륤󥿡եwan1
      ListenݡSSL VPNݡΥݡֹꤹ롣FortiGateδ̤HTTPSѤƤ뤿ᡢƱΥݡȤǤ϶礹뤿դɬס̾ϥ󥿡ͥå¦̤˥뤿ᡢHTTPSꤷƤϤʤ
      ΥۥȤ¤ˤ
      ɥ ưȤ

    • ȥͥ⡼ 饤
      饤¦˳Ƥ륢ɥ쥹
      ɥ쥹ϰ饤¦ؤΥɥ쥹γˡ
      IPϰFirewall֥ȤȤ饤ȥɥ쥹ꤹ롣SSL-VPN01_Client01
      DNS饤ȤͿDNSλ

    • ǧ/ݡޥåԥ
      桼롼פȥݡΥޥåԥ󥰤
      桼/롼桼桼ϥ롼פ
      ݡƤݡ

      fortigate_24.jpg

桼ʣΥݡ

桼³¤ˤϡǧ/ݡޥåԥ󥰡פˤʣȤ߹碌뤳ȤǼ¸롣

  • ǧ/ݡޥåԥ
    fortigate_25.jpg

ȥå   Խ ʬ ʎގ̎ ź ʣ ̾ѹ   ǽ   إ   ǽRSS
Last-modified: 2017-01-23 () 10:28:16 (122d)