SSTP VPN を試す

SSTP (Sercure Socket ?????? ?????) ?????? VPN ?????????HTTPS ??????????????????????????????????????????? Windows ? VPN ???? PPTP, L2TP ????????????????????Windows Server 2008 ??????????? SSTP ??????????Windows Server 2008 RC0 ????????????????

[????]

• SSTP ????
  • Windows Server Beta 3 ?????????
  • ??? VPN ??????VPN ??????? HTTPS ???????????????????
    • ???? NAT ??????????????
    • Web Proxy ??????????????????VPN ????
      ??????????????????????????????
    • ??? 443 ???????
  • ??? TechNet Magazine ? The Cable Guy ????????????
    • TechNet Magazine > June 2007
      The Cable Guy: Secure Socket ?????? ?????https://www.microsoft.com/technet/technetmag/issues/
      2007/06/CableGuy/default.aspx?loc=jp
  • ??????????????????????????PPTP, L2TP/IPSec, SSTP ???? VPN ????????????
• ????
  • ??? (??)
    Routing and Remote Access Blog
    • https://blogs.technet.com/rrasblog/
  • Windows Server 2008 Step-by-Step Guides (??)
    • https://www.microsoft.com/downloads/details.aspx?FamilyID=518d870c-fa3e-4f6a-97f5-acaf31de6dce&DisplayLang=en
    • Deploying SSTP Remote Access Step by Step Guide.doc

[????]

• Step-by-Step Guide ?????????????????????
• Virtual PC (??? Virtual Server) ?????VPN ????? VPN ??????? 2 ??????????
• VPN ????
  • Windows Server 2008 RC0
  • ??????????????2??1???????????????1????????????????
  • ????????????
• VPN ??????
  • Windows Vista SP1 ????
  • ??????????????1????????????????
  • ????????????????????
  • ?????????Windows Server 2008 RC0 ???????????????????
• ??????
  • ??????????? 192.168.100.0/24 ???
  • ?????????????10.0.0.0/24 ???
• ?????????
   

[????]

• ????·????
  • ??????????????? IP ???????
  • ???????? ws08rc0 ???
  • ?????? example01.jp ????Active Directory ????????????
  • VPN ??????????????
    • ??????????????????????????????????????????????
      
    • ??????????????????????????????????????????????????
  • ???????????????????
• ????·???????
  • ?????????????????????Active Directory ???????????
    • ????????????? Web ????????????????????????????????
    • ???????????? CA???? CA ???
  • HTTPS ????????????????????????
    • ?????? Step-by-Step ??????
    • IIS ????? Web ?????????????????????????
    • ???? Web ????????????????????????????????????????????????????????????????????????
      

[VPN ???????]

• ?????
  • ????????????????????????????????????????????
  • ????????????????????????????????
    
• ??????????????????
  • ??????????????→?????????????????????→????????????????????????????????????????????????????
    
  • ???????? (?????????? VPN) ???
    
  • VPN ????????????
  • VPN ?????????????????????????????? 192.168.100.0/24 ?????????????
    
  • ???????????????? IP ??????????
    
  • ???? Radius ????????

[VPN ?????????]

• VPN ?????
  • ????????????????????????????→???????????????→????????????????????
  • ??????????? VPN ????????????
    
  • ?????????? (VPN) ?????????????????????????????????
  • ?????????????????????????????????????????????????????
    
• SSTP ??????
  • ?????????????????????? VPN ?????? SSTP ???
     
• ?????????????
  • ?????????????????????????????????????????Web ????????????????????

[?????? ]

• ????????????????????????
• ???????????
  
   
  (???????????????????????????????×????????)
• Web ????? HTTPS ???????????????????????????????????????????????
  • FQDN (ws08rc01.example01.jp) ???????????? SSTP ??????IP ???? (192.168.100.1) ????????
    
• ping ????????????????
  • ????????????????? IP ???? 10.0.0.1 ??? (10.0.0.0/24 ???????? VPN ?????????????)
     
  • ?????????????????????????????????
  • ???????? VPN ????????? IP ??????VPN ??????????????????????????????
    
  • ????????SSTP ?????1????????
    
    
  • VPN ???? HTTPS ??????????
    • ??????? netstat ????
      ?????  ???? ????          ??????        ??
      TCP    192.168.100.1:443      192.168.100.2:49277    ESTABLISHED
  • ????????????????
    • netsh http show urlacl ????
      ???? URL            : https://+:443/sra_{xxx--xxxx}/
              ????: NT SERVICE\SstpSvc
                  ????: Yes
                  ??: Yes
              ????: BUILTIN\Administrators
                  ????: No
                  ??: No
              ????: NT AUTHORITY\SYSTEM
                  ????: Yes
                  ??: Yes
                  SDDL: D:(A;;GA;;;S-1-5-xx--xxx)(A;;GR;;;BA)(A;;GA;;;SY)

[???]

• SSTP ????? VPN ??????????????????????
• ??? VPN ?????????SSTP ?????????????

Comments

• Anonymous
  January 01, 2003
  まだまだ途中ですが、自分的におさえておいたほうがよさそうな情報をメモします。 #...

• Anonymous
  January 01, 2003
  PingBack from http://ghillie-suits.info/?p=24175