04.03.2013 Views

NetdefendOS_2.27.01_Firewall_User_Manual_RUS

NetdefendOS_2.27.01_Firewall_User_Manual_RUS

NetdefendOS_2.27.01_Firewall_User_Manual_RUS

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

Message ID : 0x00000000<br />

Packet length : 224 bytes<br />

# payloads : 8<br />

Payloads:<br />

SA (Security Association)<br />

Payload data length : 52 bytes<br />

DOI : 1 (IPsec DOI)<br />

Proposal 1/1<br />

Protocol 1/1<br />

Protocol ID : ISAKMP<br />

SPI Size : 0<br />

Transform 1/1<br />

Transform ID : IKE<br />

Encryption algorithm : DES<br />

Key length : 56<br />

Hash algorithm : MD5<br />

Authentication method : Pre-Shared Key<br />

Group description : MODP 1024<br />

Life type : Seconds<br />

Life duration : 43200<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 8f 9c c9 4e 01 24 8e cd f1 47 59 4c 28 4b 21 3b<br />

Description : SSH Communications Security QuickSec 2.1.0<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 27 ba b5 dc 01 ea 07 60 ea 4e 31 90 ac 27 c0 d0<br />

Description : draft-stenberg-ipsec-nat-traversal-01<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 61 05 c4 22 e7 68 47 e4 3f 96 84 80 12 92 ae cd<br />

Description : draft-stenberg-ipsec-nat-traversal-02<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 44 85 15 2d 18 b6 bb cd 0b e8 a8 46 95 79 dd cc<br />

Description : draft-ietf-ipsec-nat-t-ike-00<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : cd 60 46 43 35 df 21 f8 7c fd b2 fc 68 b6 a4 48<br />

Description : draft-ietf-ipsec-nat-t-ike-02<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 90 cb 80 91 3e bb 69 6e 08 63 81 b5 ec 42 7b 1f<br />

Description : draft-ietf-ipsec-nat-t-ike-02<br />

VID (Vendor ID)<br />

Payload data length : 16 bytes<br />

Vendor ID : 7d 94 19 a6 53 10 ca 6f 2c 17 9d 92 15 52 9d 56<br />

Description : draft-ietf-ipsec-nat-t-ike-03<br />

Шаг 3. Клиент начинает обмен ключами<br />

Сервер принимает предложение на этом уровне, и клиент начинает обмен ключами. Помимо этого,<br />

используются механизмы обнаружения NAT detection payloads, чтобы выяснить, используется ли<br />

NAT.<br />

IkeSnoop: Received IKE packet from 192.168.0.10:500 Exchange type :<br />

Identity Protection (main mode) ISAKMP Version : 1.0<br />

Flags :<br />

Cookies : 0x6098238b67d97ea6 -> 0x5e347cb76e95a<br />

Message ID : 0x00000000<br />

Packet length : 220 bytes<br />

# payloads : 4<br />

Payloads:<br />

KE (Key Exchange)<br />

Payload data length : 128 bytes<br />

NONCE (Nonce)<br />

Payload data length : 16 bytes<br />

NAT-D (NAT Detection)<br />

Payload data length : 16 bytes<br />

NAT-D (NAT Detection)<br />

Payload data length : 16 bytes<br />

403

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!