title: ÐÐ±ÑÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ðµ ÑÐ¸Ð»Ð¸Ð°Ð»Ð¾Ð² Ð¿ÑÐµÐ´Ð¿ÑÐ¸ÑÑÐ¸Ñ Ð² ÐµÐ´Ð¸Ð½ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÑÐµÐ´Ñ
title: Ð²ÑÐ¿ÑÑÐºÐ½Ð°Ñ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð°Ñ ÑÐ°Ð±Ð¾ÑÐ° Ð±Ð°ÐºÐ°Ð»Ð°Ð²ÑÐ°
titleType: Subtitle
title: Combining the branches of the enterprise into a single information environment
Creators: name: ÐÐµÐ»ÐµÐ½ÑÑÐµÐ², ÐÐ»ÐµÐºÑÐ°Ð½Ð´Ñ
Publisher: name: Ð¡Ð°Ð½ÐºÑ-ÐÐµÑÐµÑÐ±ÑÑÐ³ÑÐºÐ¸Ð¹ Ð¿Ð¾Ð»Ð¸ÑÐµÑÐ½Ð¸ÑÐµÑÐºÐ¸Ð¹ ÑÐ½Ð¸Ð²ÐµÑÑÐ¸ÑÐµÑ ÐÐµÑÑÐ° ÐÐµÐ»Ð¸ÐºÐ¾Ð³Ð¾
Year: 2023
Subjects: Ð»Ð¾ÐºÐ°Ð»ÑÐ½Ð°Ñ Ð²ÑÑÐ¸ÑÐ»Ð¸ÑÐµÐ»ÑÐ½Ð°Ñ ÑÐµÑÑ
Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ðµ ÑÐ¾ÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ðµ
Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ñ ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ
Ð¼Ð°ÑÑÑÑÑÐ¸Ð·Ð°ÑÐ¸Ñ
local area network
secure connection
encryption protocols
routing

description: Ð¢ÐµÐ¼Ð° Ð²ÑÐ¿ÑÑÐºÐ½Ð¾Ð¹ ÐºÐ²Ð°Ð»Ð¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ: Â«ÐÐ±ÑÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ðµ ÑÐ¸Ð»Ð¸Ð°Ð»Ð¾Ð² Ð¿ÑÐµÐ´Ð¿ÑÐ¸ÑÑÐ¸Ñ Ð² ÐµÐ´Ð¸Ð½ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÑÐµÐ´ÑÂ».ÐÐ±ÐµÑÐ¿ÐµÑÐ¸ÑÑ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾ÑÑÑ Ð¿ÐµÑÐµÐ´Ð°Ð²Ð°ÐµÐ¼Ð¾Ð¹ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¸ Ð¼ÐµÐ¶Ð´Ñ ÑÐ¸Ð»Ð¸Ð°Ð»Ð°Ð¼Ð¸ ÑÐ²Ð»ÑÐµÑÑÑ Ð¿ÐµÑÐ²Ð¾ÑÑÐµÐ¿ÐµÐ½Ð½Ð¾Ð¹ Ð·Ð°Ð´Ð°ÑÐµÐ¹. Ð£Ð´Ð°Ð»ÐµÐ½Ð½ÑÐ¹ Ð´Ð¾ÑÑÑÐ¿ Ðº ÑÐ¸Ð»Ð¸Ð°Ð»Ð°Ð¼ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐ¸ ÑÐ°ÐºÐ¶Ðµ Ð´Ð¾Ð»Ð¶ÐµÐ½ Ð±ÑÑÑ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½ÑÐ¼. ÐÐ»Ñ ÑÑÐ¾Ð³Ð¾ Ð¿ÑÐ¸ Ð¿Ð¾Ð´ÐºÐ»ÑÑÐµÐ½Ð¸Ð¸ Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼Ð¾ Ð¿ÑÐ¸Ð¼ÐµÐ½ÑÑÑ Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ñ ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ SSL VPN/IPSec, Ð¿ÑÐ¸ ÑÑÐ»Ð¾Ð²Ð¸Ð¸, Ð¾Ð±ÑÐ·Ð°ÑÐµÐ»ÑÐ½Ð¾Ð¹ Ð´Ð²ÑÑÑÐ°ÐºÑÐ¾ÑÐ½Ð¾Ð¹ Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸. Ð¢Ð¾ ÐµÑÑÑ, ÐºÐ¾Ð¼Ð¿Ð»ÐµÐºÑÐ½Ð¾, Ð´Ð»Ñ Ð·Ð°ÑÐ¸ÑÑ ÑÐµÑÐµÐ¹ Ð¿ÐµÑÐµÐ´Ð°ÑÐ¸ Ð´Ð°Ð½Ð½ÑÑ ÐºÐ¾ÑÐ¿Ð¾ÑÐ°ÑÐ¸Ð²Ð½Ð¾Ð¹ ÑÐµÑÐ¸ Ð´Ð¾Ð»Ð¶Ð½Ñ Ð±ÑÑÑ Ð¸ÑÐ¿Ð¾Ð»ÑÐ·Ð¾Ð²Ð°Ð½Ñ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸Ð¸: Ð°ÑÑÐµÐ½ÑÐ¸ÑÐ¸ÐºÐ°ÑÐ¸Ð¸ Ð¸ ÑÐ¿ÑÐ°Ð²Ð»ÐµÐ½Ð¸Ñ Ð´Ð¾ÑÑÑÐ¿Ð¾Ð¼, Ð° ÑÐ°ÐºÐ¶Ðµ ÑÑÐ½Ð½ÐµÐ»Ð¸ÑÐ¾Ð²Ð°Ð½Ð¸Ñ Ð¼ÐµÐ¶Ð´Ñ ÑÐ¸Ð»Ð¸Ð°Ð»Ð°Ð¼Ð¸ Ð¸ ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ ÑÑÐ°ÑÐ¸ÐºÐ°, Ð¿ÑÐ¾ÑÐ¾Ð´ÑÑÐµÐ³Ð¾ Ð¿Ð¾ ÑÑÐ½Ð½ÐµÐ»Ñ.ÐÐ»Ñ Ð´Ð¾ÑÑÐ¸Ð¶ÐµÐ½Ð¸Ñ Ð¿Ð¾ÑÑÐ°Ð²Ð»ÐµÐ½Ð½Ð¾Ð¹ ÑÐµÐ»Ð¸ Ð¸ Ð´Ð»Ñ Ð¿ÑÐµÐ´Ð¾ÑÐ²ÑÐ°ÑÐµÐ½Ð¸Ñ ÑÐ³ÑÐ¾Ð· Ð½ÐµÐ¾Ð±ÑÐ¾Ð´Ð¸Ð¼Ð¾ Ð²ÑÐ¿Ð¾Ð»Ð½Ð¸ÑÑ ÑÐ»ÐµÐ´ÑÑÑÐ¸Ðµ Ð·Ð°Ð´Ð°ÑÐ¸:1) Ð½Ð°ÑÑÑÐ¾Ð¸ÑÑ Ð²Ð¸ÑÑÑÐ°Ð»ÑÐ½ÑÐµ ÑÐ°ÑÑÐ½ÑÐµ ÑÐµÑÐ¸ (VPN - ÑÑÐ½Ð½ÐµÐ»ÐµÐ¹) Ð´Ð»Ñ ÑÐ¾Ð·Ð´Ð°Ð½Ð¸Ñ Ð·Ð°ÑÐ¸ÑÐµÐ½Ð½Ð¾Ð³Ð¾ ÑÐ¾ÐµÐ´Ð¸Ð½ÐµÐ½Ð¸Ñ Ð¼ÐµÐ¶Ð´Ñ ÑÐ·Ð»Ð°Ð¼Ð¸ (ÑÐ¸Ð»Ð¸Ð°Ð»Ð°Ð¼Ð¸);2) Ð¾Ð±ÐµÑÐ¿ÐµÑÐ¸ÑÑ ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ðµ ÑÑÐ°ÑÐ¸ÐºÐ° VPN-ÑÑÐ½Ð½ÐµÐ»Ñ.ÐÑÐ½Ð¾Ð²Ð½Ð°Ñ ÑÐµÐ»Ñ ÑÑÐ¾Ð¹ ÑÐ°Ð±Ð¾ÑÑ Ð·Ð°ÐºÐ»ÑÑÐ°Ð»Ð°ÑÑ Ð² Ð¸Ð·ÑÑÐµÐ½Ð¸Ð¸ Ð¿Ð¾Ð´ÑÐ¾Ð±Ð½Ð¾Ð¹ Ð½Ð°ÑÑÑÐ¾Ð¹ÐºÐ¸ Ð¸ Ð¼ÐµÑÐ¾Ð´Ð¾Ð² ÑÐ°Ð·Ð²ÐµÑÑÑÐ²Ð°Ð½Ð¸Ñ Internet Key Exchange Version 2 (IKEv2), FlexVPN, Ð¾ÑÐµÐ½Ð¸ÑÑ Ð¸ Ð¿ÑÐ¾Ð°Ð½Ð°Ð»Ð¸Ð·Ð¸ÑÐ¾Ð²Ð°ÑÑ ÑÑÐ°Ð²Ð½ÐµÐ½Ð¸Ðµ ÑÑÐ¸Ñ ÑÐµÑÐ½Ð¾Ð»Ð¾Ð³Ð¸Ð¹. Ð¢Ð°ÐºÐ¶Ðµ ÑÐµÐ»ÑÑ Ð±ÑÐ»Ð¾ ÑÐ°Ð·Ð²ÐµÑÐ½ÑÑÑ FlexVPN Ð² ÑÐµÐ°Ð»ÑÐ½Ð¾Ð¹ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½Ð¾Ð¹ ÑÑÐµÐ´Ðµ Ð¸ Ð¾Ð±ÑÐµÐ´Ð¸Ð½Ð¸ÑÑ ÑÐ¸Ð»Ð¸Ð°Ð»Ñ Ð¿ÑÐµÐ´Ð¿ÑÐ¸ÑÑÐ¸Ñ Ð² ÐµÐ´Ð¸Ð½ÑÑ Ð¸Ð½ÑÐ¾ÑÐ¼Ð°ÑÐ¸Ð¾Ð½Ð½ÑÑ ÑÑÐµÐ´Ñ.Ð ÑÐµÐ·ÑÐ»ÑÑÐ°ÑÐµ ÑÐ°Ð±Ð¾ÑÑ Ð²ÑÐ¿Ð¾Ð»Ð½ÐµÐ½Ñ Ð²ÑÐµ Ð·Ð°Ð´Ð°ÑÐ¸ Ð¸ Ð¿Ð¾ÐºÐ°Ð·Ð°Ð½Ð° ÑÑÑÐ¸ÐºÑÐ¸Ð²Ð½Ð¾ÑÑÑ Ð½Ð°ÑÑÑÐ¾Ð¹ÐºÐ¸ VPN, Ð¿ÑÐ¾ÑÐ¾ÐºÐ¾Ð»Ð¾Ð² ÑÐ¸ÑÑÐ¾Ð²Ð°Ð½Ð¸Ñ IKEv2/IPSec. ÐÐ¾Ð´ÑÐ¾Ð±Ð½Ð¾Ðµ ÑÐ°Ð·Ð²ÐµÑÑÑÐ²Ð°Ð½Ð¸Ðµ FlexVPN Ñ Ð¿Ð¾Ð¼Ð¾ÑÑÑ Ð¼Ð°ÑÑÑÑÑÐ¸Ð·Ð°ÑÐ¾ÑÐ¾Ð² Cisco, Ð° ÑÐ°ÐºÐ¶Ðµ ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ñ Â ÑÐµÑÐ²ÐµÑÐ° Ð¸ ÐºÐ»Ð¸ÐµÐ½ÑÐ°, Ð½Ð°ÑÑÑÐ¾ÐµÐ½Ð° ÑÐ¾Ð¿Ð¾Ð»Ð¾Ð³Ð¸Ñ ÑÐµÑÐ¸, Ð² ÐºÐ¾ÑÐ¾ÑÐ¾Ð¹ Ð¾Ð¿Ð¸ÑÐ°Ð½Ñ Ð¾ÑÐ½Ð¾Ð²Ð½ÑÐµ Ð¿Ð°ÑÐ°Ð¼ÐµÑÑÑ, ÑÐ°ÐºÐ¸Ðµ ÐºÐ°Ðº ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ñ Ð¸Ð¼ÐµÐ½Ð¸ ÑÐ¾ÑÑÐ°, ÐºÐ¾Ð½ÑÐ¸Ð³ÑÑÐ°ÑÐ¸Ñ IP-Ð°Ð´ÑÐµÑÐ°.
description: The theme of the final qualifying work: âCombining the branches of the enterprise into a single information environment.âEnsuring the security of information transmitted between branches is a paramount task. Remote access to corporate network branches must also be secure. To do this, when connecting, you must use the SSL VPN / IPSec encryption protocols, subject to mandatory two-factor authentication. That is, in an integrated manner, to protect the data transmission networks of the corporate network, technologies should be used: authentication and access control, as well as tunneling between branches and encrypting traffic passing through the tunnel.To achieve this goal and to prevent threats, it is necessary to perform the following tasks:1) configure virtual private networks (VPN - tunnels) to create a secure connection between nodes (branches);2) Encrypt VPN tunnel traffic.The main purpose of this work was to study the detailed configuration and deployment methods of Internet Key Exchange Version 2 (IKEv2), FlexVPN, evaluate and analyze the comparison of these technologies. Also, the goal was to deploy FlexVPN in a real information environment and unite the branches of the enterprise into a single information environment.As a result of the work, all tasks were completed and the effectiveness of VPN configuration, IKEv2 / IPSec encryption protocols was shown. Detailed deployment of FlexVPN using Cisco routers, as well as server and client configuration, network topology is configured, which describes the basic parameters such as hostname configuration, IP address configuration.