{"id":8167,"date":"2012-07-26T21:07:59","date_gmt":"2012-07-26T21:07:59","guid":{"rendered":"http:\/\/tajdini.net\/blog\/2012\/07\/26\/replication-with-firewall-and-ipsec\/"},"modified":"2012-07-26T21:07:59","modified_gmt":"2012-07-26T21:07:59","slug":"replication-with-firewall-and-ipsec","status":"publish","type":"post","link":"https:\/\/tajdini.net\/blog\/identity-and-active-directory\/replication-with-firewall-and-ipsec\/","title":{"rendered":"Replication \u062f\u0631 \u062d\u0636\u0648\u0631 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0648 IPSec"},"content":{"rendered":"

 <\/p>\n

\u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0633\u0627\u062e\u062a\u0627\u0631 \u062a\u0648\u0632\u06cc\u0639 \u0634\u062f\u0647 (distributed) \u0628\u0631\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a Active Directory Domain Services \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0627 \u0686\u0627\u0644\u0634 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647 \u062f\u0631 \u0631\u0648 \u0628\u0647 \u0631\u0648\u06cc\u06cc \u0628\u0627 Firewall \u0647\u0627 \u067e\u062f\u06cc\u062f\u0627\u0631 \u0645\u06cc \u0634\u0648\u0646\u062f:<\/span><\/p>\n

\u06f1\u066b promote \u06a9\u0631\u062f\u0646 \u0627\u0628\u062a\u062f\u0627\u06cc\u06cc DC \u0647\u0627<\/span><\/p>\n

\u06f2\u066b \u062a\u0631\u0627\u0641\u06cc\u06a9 Replication \u0628\u06cc\u0646 DC \u0647\u0627<\/span><\/p>\n

Active Directory \u0628\u0647 \u067e\u0631\u0648\u062a\u06a9\u0644 RPC \u06cc\u0627 Remote Procedure Call \u0628\u0631\u0627\u06cc replication \u0628\u06cc\u0646 dc \u0647\u0627 \u0648\u0627\u0628\u0633\u062a\u0647 \u0627\u0633\u062a \u0647\u0631 \u0686\u0646\u062f \u062f\u0631 \u0628\u0631\u062e\u06cc \u0634\u0631\u0627\u06cc\u0637 \u0628\u0627 \u067e\u0630\u06cc\u0631\u0634 \u0645\u062d\u062f\u0648\u062f\u06cc\u062a \u062f\u0631 \u062a\u0648\u0627\u0646\u0627\u06cc\u06cc Replication \u06a9\u0631\u062f\u0646 \u0628\u0631\u062e\u06cc \u067e\u0627\u0631\u062a\u06cc\u0634\u0646 \u0647\u0627\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 SMTP \u06cc\u0627 Simple Mail Transfer Protocol \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0645\u0648\u062f. \u0647\u0645\u0627\u0646\u0637\u0648\u0631 \u06a9\u0647 \u0645\u06cc \u062f\u0627\u0646\u06cc\u062f\u060c \u0633\u06cc\u0633\u062a\u0645 \u062a\u062e\u0635\u06cc\u0635 \u067e\u0648\u06cc\u0627\u06cc \u067e\u0648\u0631\u062a RPC \u06cc\u06a9 \u0639\u062f\u062f \u062a\u0635\u0627\u062f\u0641\u06cc \u0628\u0627\u0644\u0627\u06cc \u06f1\u06f0\u06f2\u06f4 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0634\u0645\u0627\u0631\u0647 \u067e\u0648\u0631\u062a \u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u06cc \u06a9\u0646\u062f. \u0628\u0631\u0627\u06cc \u06a9\u0627\u0631\u06a9\u0631\u062f \u0635\u062d\u06cc\u062d \u0632\u06cc\u0631\u0633\u0627\u062e\u062a AC DS \u06cc\u06a9\u06cc \u0627\u0632 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0647\u0627\u06cc \u0632\u06cc\u0631 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0645\u0639\u0645\u0627\u0631\u06cc DMZ \u067e\u06cc\u0634\u0646\u0647\u0627\u062f \u0645\u06cc \u0634\u0648\u062f:<\/span><\/p>\n

\u06f1\u066b \u0627\u062c\u0627\u0632\u0647 \u062f\u0627\u062f\u0646 \u0628\u0647 RPC \u062f\u0631 Firewall \u0631\u0648\u06cc Port address Range \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 Dynamic Port Allocation (\u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u0645\u0648\u0631\u062f \u0646\u06cc\u0627\u0632)<\/span><\/p>\n

\u06f2\u066b \u0645\u062d\u062f\u0648\u062f \u06a9\u0631\u062f\u0646 RPC \u062f\u0631 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0648\u0631\u062a \u0647\u0627\u06cc TCP \u0648 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 \u0647\u0645\u0627\u0646 \u062a\u0639\u062f\u0627\u062f<\/span><\/p>\n

\u06f3\u066b \u06a9\u067e\u0633\u0648\u0644\u0647 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 DC \u0628\u0647 DC \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 IPSec \u0648 \u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 Firewall \u0628\u0631\u0627\u06cc \u0622\u0646<\/span><\/p>\n

\u0647\u0631 \u06a9\u062f\u0627\u0645 \u0627\u0632 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0647\u0627\u06cc \u0641\u0648\u0642\u060c \u0645\u062d\u0627\u0633\u0646 \u0648 \u0645\u0639\u0627\u06cc\u0628 \u062e\u0627\u0635 \u062e\u0648\u062f \u0631\u0627 \u062f\u0627\u0631\u0646\u062f \u06a9\u0647 \u062f\u0631 \u0648\u0636\u0639\u06cc\u062a \u0639\u0645\u0648\u0645\u06cc\u060c \u0631\u0648\u0634 \u0647\u0627\u06cc \u0627\u0646\u062a\u0647\u0627\u06cc \u0644\u06cc\u0633\u062a \u062f\u0627\u0631\u0627\u06cc \u0645\u062d\u0627\u0633\u0646 \u0628\u06cc\u0634\u062a\u0631\u06cc \u0646\u0633\u0628\u062a \u0628\u0647 \u0631\u0648\u0634 \u0627\u0628\u062a\u062f\u0627\u06cc\u06cc \u0647\u0633\u062a\u0646\u062f. \u0644\u0630\u0627 \u0631\u0648\u0634 \u0633\u0648\u0645 \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0628\u0647\u062a\u0631\u06cc\u0646 \u0631\u0648\u0634 \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0631\u0648\u06cc \u0622\u0646 \u062a\u0645\u0631\u06a9\u0632 \u0645\u06cc \u0634\u0648\u062f\u060c \u0647\u0631 \u0686\u0646\u062f \u06a9\u0647 \u062a\u0645\u0627\u0645 \u0631\u0648\u0634 \u0647\u0627 \u0634\u0631\u062d \u062f\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u0646\u062f.<\/span><\/p>\n

Dynamic RPC \u0628\u0647 \u0635\u0648\u0631\u062a \u06a9\u0627\u0645\u0644<\/span><\/h2>\n
\n\n\n\n\n
\u0645\u0632\u0627\u06cc\u0627<\/span><\/td>\n\u0645\u0639\u0627\u06cc\u0628<\/span><\/td>\n<\/tr>\n
\u062a\u0646\u0638\u06cc\u0645\u0627\u062a\u06cc \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a<\/span><\/td>\n\u062a\u0628\u062f\u06cc\u0644 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0647 \u067e\u0646\u06cc\u0631 \u0633\u0648\u0631\u0627\u062e \u062f\u0627\u0631!<\/span>
\u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc \u062a\u0635\u0627\u062f\u0641\u06cc<\/span>
\u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u063a\u06cc\u0631 \u0627\u06cc\u0645\u0646 Firewall<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u0628\u0631\u0627\u06cc \u0622\u0646\u06a9\u0647 Replication \u0628\u062a\u0648\u0627\u0646\u062f \u0628\u0647 \u0637\u0631\u0632 \u0645\u0646\u0627\u0633\u0628\u06cc \u0639\u0645\u0644 \u06a9\u0646\u062f \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u0630\u06a9\u0631 \u0634\u062f\u0647 \u062f\u0631 \u062c\u062f\u0648\u0644 \u0632\u06cc\u0631 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0628\u0627\u0634\u0646\u062f \u06cc\u0627 \u0628\u0647 \u0639\u0628\u0627\u0631\u062a \u062f\u06cc\u06af\u0631 Firewall \u0647\u0627\u06cc \u0628\u06cc\u0646 DC \u0647\u0627 \u062f\u0631 \u0648\u0636\u0639\u06cc\u062a \u0628\u0627\u0632 \u0628\u0627\u0634\u0646\u062f.<\/span><\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\u0646\u0627\u0645 \u0633\u0631\u0648\u06cc\u0633<\/strong><\/span><\/td>\n\u0634\u0645\u0627\u0631\u0647 \u067e\u0648\u0631\u062a\/ \u067e\u0631\u0648\u062a\u06a9\u0644<\/strong><\/span><\/td>\n<\/tr>\n
RPC endpoint mapper<\/span><\/td>\n135\/tcp, 135\/udp<\/span><\/td>\n<\/tr>\n
Network basic input\/output system (NetBIOS) name service<\/span><\/td>\n137\/tcp, 137\/udp<\/span><\/td>\n<\/tr>\n
NetBIOS datagram service<\/span><\/td>\n138\/udp<\/span><\/td>\n<\/tr>\n
NetBIOS session service<\/span><\/td>\n139\/tcp<\/span><\/td>\n<\/tr>\n
RPC dynamic assignment<\/span><\/strong><\/span><\/td>\n1024-65535\/tcp<\/span><\/strong><\/span><\/td>\n<\/tr>\n
Server message block (SMB) over IP (Microsoft-DS)<\/span><\/td>\n445\/tcp, 445\/udp<\/span><\/td>\n<\/tr>\n
Lightweight Directory Access Protocol (LDAP)<\/span><\/td>\n389\/tcp<\/span><\/td>\n<\/tr>\n
LDAP ping<\/span><\/td>\n389\/udp<\/span><\/td>\n<\/tr>\n
LDAP over SSL<\/span><\/td>\n636\/tcp<\/span><\/td>\n<\/tr>\n
Global catalog LDAP<\/span><\/td>\n3268\/tcp<\/span><\/td>\n<\/tr>\n
Global catalog LDAP over SSL<\/span><\/td>\n3269\/tcp<\/span><\/td>\n<\/tr>\n
Kerberos<\/span><\/td>\n88\/tcp, 88\/udp<\/span><\/td>\n<\/tr>\n
Domain Name Service (DNS)<\/span><\/td>\n53\/tcp1, 53\/udp<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u0628\u0627\u0632 \u06a9\u0631\u062f\u0646 Port Address Range \u0644\u0627\u0632\u0645 \u0628\u0631\u0627\u06cc Dynamic Port Allocation \u062f\u0631 RPC \u062f\u0631 \u0627\u06a9\u062b\u0631 \u0645\u062d\u06cc\u0637 \u0647\u0627\u06cc \u0639\u0645\u0644\u06cc\u0627\u062a\u06cc \u0628\u0646\u0627 \u0628\u0631 \u0645\u0633\u0627\u0626\u0644 \u0627\u0645\u0646\u06cc\u062a\u06cc \u063a\u06cc\u0631 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0648 \u0631\u0627\u0647\u06a9\u0627\u0631 \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u062f\u0631 \u0627\u062f\u0627\u0645\u0647 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f.<\/span><\/p>\n

RPC \u0686\u06af\u0648\u0646\u0647 \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f\u061f<\/span><\/h3>\n

\u0633\u0631\u0648\u06cc\u0633 RPC\u060c \u062e\u0648\u062f \u0631\u0627 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 UUID \u06cc\u0627 universal unique ID \u062f\u0631 Registery \u062a\u0646\u0638\u06cc\u0645 \u0645\u06cc \u06a9\u0646\u062f. UUID \u0647\u0627 \u0628\u0633\u06cc\u0627\u0631 \u0634\u0628\u06cc\u0647 \u0628\u0647 GUID \u0647\u0627 \u0647\u0633\u062a\u0646\u062f. \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u0633\u0631\u0648\u06cc\u0633 RPC \u0627\u0633\u062a\u0627\u0631\u062a \u0645\u06cc \u0634\u0648\u062f\u060c \u06cc\u06a9 \u067e\u0648\u0631\u062a \u0622\u0632\u0627\u062f \u0631\u0627 \u0628\u0647 \u0635\u0648\u0631\u062a \u0631\u0646\u062f\u0645 \u0628\u0627 UUID \u062e\u0648\u062f \u062f\u0631 Registery \u062b\u0628\u062a \u0645\u06cc \u06a9\u0646\u062f \u0648 \u0639\u0645\u0631 \u0627\u06cc\u0646 \u0627\u062e\u062a\u0635\u0627\u0635 \u067e\u0648\u0631\u062a \u0628\u0631\u0627\u0628\u0631 \u0628\u0627 \u0639\u0645\u0631 \u0633\u0631\u0648\u06cc\u0633 \u0627\u0633\u062a.<\/span><\/p>\n

\u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0645\u06cc \u062e\u0648\u0627\u0647\u062f \u0628\u0627 \u06cc\u06a9 \u0633\u0631\u0648\u06cc\u0633 RPC \u0627\u0631\u062a\u0628\u0627\u0637 \u0628\u0631\u0642\u0631\u0627\u0631 \u06a9\u0646\u062f\u060c \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062a\u0639\u06cc\u06cc\u0646 \u06a9\u0646\u062f \u06a9\u0647 \u0633\u0631\u0648\u06cc\u0633 \u0631\u0648\u06cc \u06a9\u062f\u0627\u0645 \u067e\u0648\u0631\u062a \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06a9\u062a\u06cc\u0648 \u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc\u060c \u0627\u0628\u062a\u062f\u0627 \u0631\u0648\u06cc \u067e\u0648\u0631\u062a \u06f1\u06f3\u06f5 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0633\u0631\u0648\u06cc\u0633 Port Mapper \u06cc\u0627 Endpoint Mapper \u06cc\u06a9 \u0627\u062a\u0635\u0627\u0644 (Connection)\u062c\u0647\u062a \u062a\u0639\u06cc\u06cc\u0646 \u067e\u0648\u0631\u062a \u0628\u0631\u0627\u06cc RPC \u0635\u0648\u0631\u062a \u0645\u06cc \u06af\u06cc\u0631\u062f \u0648 \u0627\u062a\u0635\u0627\u0644 \u0628\u0633\u062a\u0647 \u0645\u06cc \u0634\u0648\u062f \u0648 \u0633\u067e\u0633 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u067e\u0648\u0631\u062a \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0632 Port Mapper \u06cc\u06a9 \u0627\u062a\u0635\u0627\u0644 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 RPC \u0628\u0631\u0642\u0631\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f. \u0627\u0632 \u0622\u0646\u062c\u0627 \u06a9\u0647 \u0646\u0645\u06cc \u062a\u0648\u0627\u0646 \u062f\u0627\u0646\u0633\u062a \u0686\u0647 \u067e\u0648\u0631\u062a\u06cc \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062a\u0645\u0627\u0645 \u067e\u0648\u0631\u062a \u0647\u0627 \u0628\u0627\u0632 \u0628\u0627\u0634\u062f.<\/span><\/p>\n

Limited RPC<\/span><\/h2>\n
\n\n\n\n\n
\n

\u0645\u0632\u0627\u06cc\u0627<\/strong><\/span><\/p>\n<\/td>\n

\n

\u0645\u0639\u0627\u06cc\u0628<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n

\u0627\u0645\u0646\u06cc\u062a \u0628\u06cc\u0634\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 Dynamic RPC<\/span><\/td>\n\u0646\u06cc\u0627\u0632 \u0628\u0647 \u0648\u06cc\u0631\u0627\u06cc\u0634 Registry \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 \u0633\u0631\u0648\u0631 \u0647\u0627<\/span>
\u0646\u0641\u0648\u0630\u06af\u0631 \u067e\u0633 \u0627\u0632 \u0634\u0646\u0627\u0633\u0627\u06cc\u06cc \u067e\u0648\u0631\u062a \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0627\u0632 \u0622\u0646 \u0633\u0648\u0621 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u062f<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0627\u0645\u0646\u06cc\u062a \u0628\u0647 \u0635\u0648\u0631\u062a \u06a9\u0644\u06cc \u0628\u0647\u0628\u0648\u062f \u067e\u06cc\u062f\u0627 \u0645\u06cc \u06a9\u0646\u062f \u0627\u0645\u0627 \u0646\u06cc\u0627\u0632\u0645\u0646\u062f \u0648\u06cc\u0631\u0627\u06cc\u0634 Registry \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 DC \u0647\u0627 \u0627\u0633\u062a. \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a Registry \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631\u0647\u0627\u06cc\u06cc \u0647\u0645\u0627\u0646\u0646\u062f REG.EXE \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u0634\u0648\u0646\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0634\u0631\u0627\u06cc\u0637 \u0628\u0627\u06cc\u062f \u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a \u0628\u0631\u0627\u06cc AD Replication \u0648 Sysvol file Replication \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0634\u0648\u062f. IANA \u0631\u0646\u062c \u06f4\u06f9\u06f1\u06f5\u06f2 \u062a\u0627 \u06f6\u06f5\u06f5\u06f3\u06f5 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a Dynamic \u0648 private \u062f\u0631 \u0646\u0638\u0631 \u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a. \u0634\u0645\u0627 \u0628\u0627\u06cc\u062f \u067e\u0648\u0631\u062a \u0647\u0627\u06cc\u06cc \u06a9\u0647 \u0628\u0647 \u0635\u0648\u0631\u062a \u0645\u062a\u062f\u0627\u0648\u0644 \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0646\u06af\u0631\u0641\u062a\u0647 \u0627\u0633\u062a \u0631\u0627 \u0628\u0631\u0627\u06cc \u0645\u0646\u0638\u0648\u0631 \u062f\u0631 \u0646\u0638\u0631 \u0628\u06af\u06cc\u0631\u06cc\u062f. \u0645\u0633\u0626\u0648\u0644\u0627\u0646 \u0627\u0645\u0646\u06cc\u062a\u06cc \u0634\u0628\u06a9\u0647 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u067e\u06cc\u0634 \u062a\u0631 \u0644\u06cc\u0633\u062a\u06cc \u0627\u0632 \u0627\u06cc\u0646 \u067e\u0648\u0631\u062a \u0647\u0627 \u0631\u0627 \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0646\u0638\u0648\u0631 \u062f\u0631 \u0646\u0638\u0631 \u06af\u0641\u062a\u0647 \u0628\u0627\u0634\u0646\u062f.<\/span><\/p>\n

\u0628\u0631\u0627\u06cc \u0648\u06cc\u0631\u0627\u06cc\u0634 \u067e\u0648\u0631\u062a \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a \u062f\u0631 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u062f\u0631 Registry \u0631\u0641\u062a\u0647 \u0648 \u06cc\u06a9 DWORD \u062c\u062f\u06cc\u062f \u0628\u0647 \u0646\u0627\u0645 TCP\/IP Port (\u0628\u0627 \u0641\u0627\u0635\u0644\u0647) \u0648 \u0645\u0642\u062f\u0627\u0631 \u067e\u0648\u0631\u062a \u0645\u0637\u0644\u0648\u0628 \u0628\u0633\u0627\u0632\u06cc\u062f:<\/span><\/p>\n

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\NTDS\\Parameters\\<\/span><\/p>\n

\u0628\u0631\u0627\u06cc File Replication Service \u062f\u0631 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u062f\u0631 Registry \u06cc\u06a9 DWORD \u062c\u062f\u06cc\u062f \u0628\u0647 \u0646\u0627\u0645 RPC TCP\/IP Port Assignment \u0628\u0627 \u0645\u0642\u062f\u0627\u0631 \u067e\u0648\u0631\u062a \u0645\u0637\u0644\u0648\u0628 \u0628\u0633\u0627\u0632\u06cc\u062f:<\/span><\/p>\n

HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\NTFRS\\Parameters\\<\/span><\/p>\n

Distributed File Services Replication Service \u0634\u0627\u0645\u0644 \u0627\u0628\u0632\u0627\u0631 dfsrdiag.exe \u0631\u0648\u06cc \u062e\u0637 \u0641\u0631\u0645\u0627\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f\u060c \u067e\u0648\u0631\u062a RPC \u06a9\u0647 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u06cc\u062a \u0648 Replication \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f \u0631\u0627 \u0633\u062a \u06a9\u0646\u06cc\u062f. \u0627\u06cc\u0646 \u0645\u062b\u0627\u0644 \u0631\u0627 \u062f\u0646\u0628\u0627\u0644 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n

dfsrdiag StaticRPC \/port: nnnnn \/Member: Branch01.sales.contoso.com<\/span><\/p>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0645\u062b\u0627\u0644 nnnnn \u0645\u0639\u0631\u0641 \u06cc\u06a9 \u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a RPC \u0627\u0633\u062a \u06a9\u0647 DFSR \u0628\u0631\u0627\u06cc Replication \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f. Branch01.sales.contoso.com \u0645\u0639\u0631\u0641 \u0646\u0627\u0645 DNS \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631 \u0647\u062f\u0641 \u0627\u0633\u062a. \u0627\u06af\u0631 \u0627\u0632 \u0627\u06cc\u0646 \u0633\u0648\u06cc\u06cc\u0686 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0646\u0634\u0648\u062f\u060c \u0627\u0628\u0632\u0627\u0631 \u0647\u0645\u0627\u0646 \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631 \u0631\u0627 \u0628\u0627 \u0639\u0646\u0648\u0627\u0646 \u0647\u062f\u0641 \u062f\u0631 \u0646\u0638\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f.<\/span><\/p>\n

\u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06a9\u0647 \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 DC \u0647\u0627 \u0627\u0639\u0645\u0627\u0644 \u0634\u0648\u062f. \u062f\u0631 Windows Server 2000, 2003 \u0646\u06cc\u0627\u0632 \u0628\u0647 restart \u0634\u062f\u0646 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u062a\u0627 NTDS \u0628\u0627 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u062c\u062f\u06cc\u062f \u0627\u062c\u0631\u0627 \u0634\u0648\u062f. \u0627\u0645\u0627 \u062f\u0631 Windows Server 2008 \u0648 \u062c\u062f\u06cc\u062f \u062a\u0631\u060c \u062a\u0646\u0647\u0627 Restart \u0634\u062f\u0646 Active Directory Domain Services \u06a9\u0641\u0627\u06cc\u062a \u0645\u06cc \u06a9\u0646\u062f \u0632\u06cc\u0631\u0627\u060c \u0627\u06cc\u0646 \u0639\u0645\u0644 \u0633\u0628\u0628 \u0645\u06cc \u0634\u0648\u062f\u060c NTFSR \u0646\u06cc\u0632 Restart \u0634\u0648\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u0648\u062c\u0648\u062f\u060c \u0647\u0645\u0686\u0646\u0627\u0646 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0633\u0631\u0648\u06cc\u0633 DFS Replication \u0628\u0647 \u0635\u0648\u0631\u062a \u062f\u0633\u062a\u06cc Restart \u0634\u0648\u062f.<\/span><\/p>\n

\u0627\u06a9\u0646\u0648\u0646 \u0628\u0647 \u062c\u0627\u06cc \u0628\u0627\u0632 \u0628\u0648\u062f\u0646 \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u06f1\u06f0\u06f2\u06f4-\u06f6\u06f5\u06f5\u06f3\u06f5\/tcp \u0628\u0631\u0627\u06cc RPC dynamic assignment \u06a9\u0627\u0641\u06cc \u0627\u0633\u062a \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u0632\u06cc\u0631 \u0631\u0648\u06cc \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0627\u0632 \u0628\u0627\u0634\u062f.<\/span><\/p>\n

\n\n\n\n\n\n\n
\n

\u0646\u0627\u0645 \u0633\u0631\u0648\u06cc\u0633 <\/strong><\/span><\/p>\n<\/td>\n

\n

\u0634\u0645\u0627\u0631\u0647 \u067e\u0648\u0631\u062a<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n

RPC static port \u0628\u0631\u0627\u06cc AD replication<\/span><\/td>\n\u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a\/TCP<\/span><\/td>\n<\/tr>\n
RPC static port \u0628\u0631\u0627\u06cc FRS \u06cc\u0627<\/span><\/td>\n\u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a\/TCP<\/span><\/td>\n<\/tr>\n
RPC static port for DFS Replication<\/span><\/td>\n\u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a\/TCP<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u0646\u06a9\u062a\u0647 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647 \u0622\u0646 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0645\u0686\u0646\u0627\u0646 \u0628\u0647 \u0633\u0631\u0648\u06cc\u0633 Port Mapper \u0646\u06cc\u0627\u0632 \u0627\u0633\u062a\u060c \u0632\u06cc\u0631\u0627 \u06a9\u0644\u0627\u06cc\u0646\u062a RPC \u0646\u0645\u06cc \u062f\u0627\u0646\u062f \u0627\u0632 \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u062b\u0627\u0628\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u062f\u0647 \u0627\u0633\u062a \u0627\u0645\u0627 Port Mapper \u0647\u0645\u0648\u0627\u0631\u0647 \u06cc\u06a9 \u067e\u0648\u0631\u062a \u062b\u0627\u0628\u062a \u0631\u0627 \u0628\u0627\u0632 \u0645\u06cc \u06af\u0631\u062f\u0627\u0646\u062f.<\/span><\/p>\n

RPC UUID Filtering Firewalls<\/span><\/h2>\n
\n\n\n\n\n
\u0645\u0632\u0627\u06cc\u0627<\/span><\/td>\n\u0645\u0639\u0627\u06cc\u0628<\/span><\/td>\n<\/tr>\n
\u0627\u0645\u0646\u06cc\u062a \u0628\u06cc\u0634\u062a\u0631 \u0646\u0633\u0628\u062a \u0628\u0647 Dynamic RPC<\/span>
\u0641\u0642\u0637 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0647\u0627\u06cc\u06cc \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u06a9\u0647 \u062a\u0648\u0633\u0637 \u0627\u062f\u0645\u06cc\u0646 \u0645\u062c\u0627\u0632 \u0634\u062f\u0647 \u0627\u0646\u062f\u060c \u0639\u0628\u0648\u0631 \u0645\u06cc \u06a9\u0646\u062f<\/span><\/td>\n		\u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc timing \u06a9\u0644\u0627\u06cc\u0646\u062a \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0633\u0628\u0628 error \u0647\u0627\u06cc \u06af\u0627\u0647 \u0648 \u0628\u06cc \u06af\u0627\u0647 \u0634\u0648\u062f<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u06a9\u0644\u0627\u0633 \u062c\u062f\u06cc\u062f\u06cc \u0627\u0632 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0647\u0627 \u0628\u0631\u0627\u06cc \u0645\u062f\u06cc\u0631\u0627\u0646 \u0634\u0628\u06a9\u0647 \u062f\u0631 \u062f\u0633\u062a\u0631\u0633 \u0627\u0633\u062a \u06a9\u0647 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0622\u0646\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u0646\u062f \u0645\u0639\u06cc\u0646 \u06a9\u0646\u0646\u062f \u062f\u0631 \u0633\u0631\u0627\u0633\u0631 \u0634\u0628\u06a9\u0647 \u06a9\u062f\u0627\u0645 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0647\u0627 \u0628\u0631\u0627\u06cc RPC \u0645\u062c\u0627\u0632 \u0627\u0646\u062f. \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627 \u0648 \u067e\u0627\u0633\u062e \u0647\u0627\u06cc RPC \u0631\u0627 \u0645\u0627\u0646\u06cc\u062a\u0648\u0631 \u0645\u06cc \u06a9\u0646\u062f \u0648 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0645\u0648\u0641\u0642\u06cc\u062a \u0622\u0645\u06cc\u0632 \u0628\u0627\u0634\u062f \u0648 \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0645\u062c\u0627\u0632 \u0628\u0627\u0634\u062f\u060c \u06cc\u06a9 \u062c\u062f\u0648\u0644 \u0627\u0632 \u0648\u0631\u0648\u062f\u06cc \u0633\u0631\u0648\u0631 \u0647\u0627\u06cc RPC \u0634\u0646\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0648 \u0628\u0647 RPC Session \u0647\u0627 \u0631\u0627 bind \u0645\u06cc \u06a9\u0646\u062f. \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 Partner \u0628\u0647 \u06cc\u06a9 \u067e\u0648\u0631\u062a \u06a9\u0627\u0646\u06a9\u062a \u0645\u06cc \u0634\u0648\u062f\u060c \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0631 \u0627\u0633\u0627\u0633 \u062f\u0631\u062e\u0648\u0627\u0633\u062a \u0647\u0627\u06cc \u0642\u0628\u0644\u06cc Port Mapper \u0622\u0646 \u0631\u0627 Allow \u0645\u06cc \u06a9\u0646\u062f. \u0647\u0645\u0686\u0646\u0627\u0646 \u067e\u0648\u0631\u062a \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631\u06cc \u06a9\u0647 \u062f\u0631 \u0641\u0648\u0642 \u0628\u0647 \u0622\u0646 \u0627\u0634\u0627\u0631\u0647 \u0634\u062f\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0628\u0627\u0632 \u0628\u0627\u0634\u0646\u062f.<\/span><\/p>\n

\u0644\u06cc\u0633\u062a \u0627\u06cc\u0646\u062a\u0631\u0641\u06cc\u0633 \u0647\u0627\u06cc\u06cc RPC \u06a9\u0647 \u062f\u0631 \u0645\u062d\u06cc\u0637 \u0627\u06a9\u062a\u06cc\u0648\u062f\u0627\u06cc\u0631\u06a9\u062a\u0648\u0631\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u062f.<\/span><\/p>\n

\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\n

\u0646\u0627\u0645<\/strong><\/span><\/p>\n<\/td>\n

\n

UUID<\/strong><\/span><\/p>\n<\/td>\n

\n

\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06cc \u0645\u062a\u0639\u0627\u0631\u0641<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n

MS NT Directory DRS Interface<\/span><\/td>\ne3514235-4b06-11d1-ab04-00c04fc2dcd2<\/span><\/td>\nAD Replication<\/span><\/td>\n<\/tr>\n
MS NT Directory NSP Interface<\/span><\/td>\nf5cc5a18-4264-101a-8c59-08002b2f8426<\/span><\/td>\nOutlook Address book, \u0627\u062e\u062a\u06cc\u0627\u0631\u06cc<\/span><\/td>\n<\/tr>\n
LSA RPC<\/span><\/td>\n12345778-1234-abcd-ef00-0123456789ab<\/span><\/td>\nLocal Security Authority<\/span><\/td>\n<\/tr>\n
Netlogon<\/span><\/td>\n12345678-1234-abcd-ef00-01234567cffb<\/span><\/td>\nRemote Logon<\/span><\/td>\n<\/tr>\n
SAM RPC<\/span><\/td>\n12345778-1234-abcd-ef00-0123456789ac<\/span><\/td>\nSecurity Accounts Manager<\/span><\/td>\n<\/tr>\n
NTDS Backup Interface<\/span><\/td>\necec0d70-a603-11d0-96b1-00a0c91ece30<\/span><\/td>\nAD Backup, \u0627\u062e\u062a\u06cc\u0627\u0631\u06cc<\/span><\/td>\n<\/tr>\n
NTDS Restore Interface<\/span><\/td>\n16e0cf3a-a604-11d0-96b1-00a0c91ece30<\/span><\/td>\nAD Restore, \u0627\u062e\u062a\u06cc\u0627\u0631\u06cc<\/span><\/td>\n<\/tr>\n
File Replication Service<\/span><\/td>\nf5cc59b4-4264-101a-8c59-08002b2f8426<\/span><\/td>\nFRS Replication<\/span><\/td>\n<\/tr>\n
File Replication API<\/span><\/td>\nd049b186-814f-11d1-9a3c-00c04fc9b232<\/span><\/td>\nFRS Administration<\/span><\/td>\n<\/tr>\n
DFS Replication Service<\/span><\/td>\n897e2e5f-93f3-4376-9c9c-fd2277495c27<\/span><\/td>\nDFS-R Interface<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u06cc\u0646 \u0631\u0648\u0634 \u0631\u0627 \u0631\u0647\u06cc\u0627\u0641\u062a Limited RPC \u062a\u0631\u06a9\u06cc\u0628 \u06a9\u0646\u06cc\u062f \u06a9\u0646\u06cc\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062a\u0631\u06a9\u06cc\u0628 \u0628\u0631\u0627\u06cc \u06af\u0645\u0646\u0627\u0645\u06cc \u0628\u06cc\u0634\u062a\u0631 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f\u060c \u067e\u0648\u0631\u062a \u0633\u0631\u0648\u0631 \u0631\u0627 \u0628\u0631 \u06cc\u06a9 \u0627\u0633\u0627\u0633 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f\u060c \u0628\u062f\u0648\u0646 \u0622\u0646\u06a9\u0647 \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0631\u0627 \u0628\u0627\u0632 \u067e\u06cc\u06a9\u0631\u0628\u0646\u062f\u06cc \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06a9\u067e\u0633\u0648\u0644\u0647 \u06a9\u0631\u062f\u0646 \u062f\u0631 IPSec<\/span><\/h2>\n
\n\n\n\n\n
\u0645\u0632\u0627\u06cc\u0627<\/span><\/td>\n\u0645\u0639\u0627\u06cc\u0628<\/span><\/td>\n<\/tr>\n
\u0628\u0647\u062a\u0631\u06cc\u0646 \u0627\u0645\u0646\u06cc\u062a \u0627\u0632 \u062f\u06cc\u062f\u06af\u0627\u0647 firewall<\/span>
\u0633\u06cc\u0627\u0633\u062a \u0647\u0627\u06cc \u062c\u062f\u0627\u0633\u0627\u0632\u06cc \u0634\u062f\u0647<\/span>
\u06cc\u06a9 \u062f\u0644\u06cc\u0644 \u062e\u0648\u0628 \u0628\u0631\u0627\u06cc \u067e\u06cc\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc PKI \u06cc\u0627 Public Key infrastructure\u060c \u0627\u06af\u0631 \u0645\u0637\u0644\u0648\u0628 \u0628\u0627\u0634\u062f.<\/span><\/td>\n		\u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0633\u06cc\u0627\u0633\u062a IPsec \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 \u0633\u0631\u0648\u0631 \u0647\u0627<\/span>
\u0645\u0645\u06a9\u0646 \u0627\u0633\u062a\u060c \u0645\u062f\u06cc\u0631\u0627\u0646 Firewall \u0627\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Tunnel \u0632\u06cc\u0627\u062f \u062e\u0648\u0634\u062d\u0627\u0644 \u0646\u0634\u0648\u0646\u062f<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

IPSec \u06cc\u06a9 \u0631\u0648\u0634 \u0633\u0627\u062f\u0647 \u0628\u0631\u0627\u06cc \u06a9\u067e\u0633\u0648\u0644\u0647 \u06a9\u0631\u062f\u0646 \u0648 \u062d\u0645\u0644 \u062a\u0631\u0627\u0641\u06cc\u06a9 RPC \u0627\u0632 Firewall \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u062f. \u062f\u0631 \u06a9\u0646\u0627\u0631 \u0633\u0627\u062f\u0647 \u0634\u062f\u0646 \u062d\u0645\u0644 \u0628\u0633\u062a\u0647 \u0647\u0627\u06cc RPC\u060c \u0645\u0632\u0627\u06cc\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0647\u0645\u0686\u0648\u0646 \u0628\u0647\u0628\u0648\u062f \u0627\u0645\u0646\u06cc\u062a \u0628\u0647 \u062f\u0644\u06cc\u0644 Mutual Authentication \u062f\u0631 IPSec \u0628\u06cc\u0646 DC \u0647\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f. \u0628\u0647 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a\u060c \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 kerberos \u06cc\u0627 Certificate \u0647\u0627\u06cc \u0645\u0627\u0634\u06cc\u0646 DC \u067e\u06cc\u0634 \u0627\u0632 \u0647\u0631 \u0627\u0646\u062a\u0642\u0627\u0644 \u0627\u0637\u0644\u0627\u0639\u0627\u062a\u06cc \u0645\u06cc \u062f\u0627\u0646\u062f \u06a9\u0647 \u0628\u0627 \u0686\u0647 \u06a9\u0633\u06cc \u062f\u0631 \u0627\u0631\u062a\u0628\u0627\u0637 \u0627\u0633\u062a.<\/span><\/p>\n

\u0627\u06cc\u0646 \u0645\u0637\u0644\u0628 \u0646\u0634\u0627\u0646 \u0645\u06cc \u062f\u0647\u062f \u06a9\u0647 \u0686\u06af\u0648\u0646\u0647 \u06cc\u06a9 IPSec Policy \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 Microsoft Managment Console \u06cc\u0627 MMC \u0633\u0627\u062e\u062a\u0647 \u0634\u0648\u062f. \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 IPSECPOL.EXE \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f\u060c \u0633\u0627\u062e\u062a Policy \u0631\u0627 \u0627\u0633\u06a9\u0631\u06cc\u067e\u062a \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u067e\u06cc\u0634 \u0627\u0632 \u0634\u0631\u0648\u0639 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062f\u0631 \u0645\u0648\u0631\u062f \u0622\u0646\u06a9\u0647 \u0627\u0632 IPSec Certificates \u0628\u0631\u0627\u06cc Authentication \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0634\u0648\u062f \u06cc\u0627 \u0627\u0632 Kerberos \u062a\u0635\u0645\u06cc\u0645 \u06af\u06cc\u0631\u06cc \u0634\u0648\u062f. \u062c\u0647\u062a \u0628\u0647\u0631\u0647 \u06af\u06cc\u0631\u06cc \u0627\u0632 Kerberos Authentication \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0647\u0631 \u06a9\u0627\u0645\u067e\u06cc\u0648\u062a\u0631 \u062f\u0631 \u06cc\u06a9 \u062f\u0627\u0645\u06cc\u0646 \u0628\u0627\u0634\u0646\u062f \u0648 \u0628\u0631\u0627\u06cc \u0641\u0627\u0632 Domain Controller Promotion \u06cc\u0627 DCPromo \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0631\u0627\u0647\u06a9\u0627\u0631 \u062f\u06cc\u06af\u0631\u06cc \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f. Point-to Point Tunneling Protocol \u06cc\u0627 PPTP \u0628\u0647 \u062e\u0648\u0628\u06cc \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u06a9\u0627\u0631 \u0645\u06cc \u06a9\u0646\u062f \u0648 \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0645\u0634\u0631\u0648\u062d \u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0631\u0627\u06cc IPSec Replication \u06cc\u0627 PPTP DC Promotion \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0641\u0627\u06cc\u0631\u0648\u0627\u0644 \u0628\u0647 \u0635\u0648\u0631\u062a \u0632\u06cc\u0631 \u062a\u0646\u0638\u06cc\u0645 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/span><\/p>\n

\n\n\n\n\n\n\n\n\n\n\n
\n

\u0646\u0627\u0645 \u0633\u0631\u0648\u06cc\u0633<\/strong><\/span><\/p>\n<\/td>\n

\n

\u0634\u0645\u0627\u0631\u0647 \u067e\u0648\u0631\u062a<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n

Domain Name Service (DNS)<\/span><\/td>\n53\/tcp, 53\/udp<\/span><\/td>\n<\/tr>\n
PPTP establishment (\u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 PPTP)<\/span><\/td>\n1723\/tcp<\/span><\/td>\n<\/tr>\n
GRE, generic routing encapsulation (\u062f\u0631 \u0635\u0648\u0631\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 PPTP)<\/span><\/td>\nIP protocol 47<\/span><\/td>\n<\/tr>\n
Kerberos<\/span><\/td>\n88\/tcp, 88\/udp<\/span><\/td>\n<\/tr>\n
IKE, Internet Key Exchange<\/span><\/td>\n500\/udp<\/span><\/td>\n<\/tr>\n
IPSec ESP, encapsulated security payload<\/span><\/td>\nIP protocol 50<\/span><\/td>\n<\/tr>\n
IPSec AH, authenticated header<\/span><\/td>\nIP protocol 51<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n

\u0686\u0646\u0627\u0646\u0686\u0647 \u0628\u0631\u0627\u06cc Authentication \u062f\u0631 IPSec \u0627\u0632 Certificate \u0628\u0647 \u062c\u0627\u06cc kerberos \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0631\u0627 \u0637\u0648\u0631\u06cc \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f \u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 Kerberos \u062f\u0631\u0648\u0646 IPSec \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.<\/span><\/p>\n

\u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 IPSec \u062f\u0631 NAT \u06a9\u0627\u0631 \u0646\u062e\u0648\u0627\u0647\u062f \u06a9\u0631\u062f \u0632\u06cc\u0631\u0627\u060c IPSec \u0627\u0632 IP Address \u062f\u0631 \u0632\u0645\u0627\u0646 \u0645\u062d\u0627\u0633\u0628\u0647 Check Sum \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u062f \u0648 Packet \u0647\u0627\u06cc IPSec \u0627\u06cc \u06a9\u0647 Source Address \u0622\u0646 \u0647\u0627 \u062a\u0648\u0633\u0637 NAT \u062a\u063a\u06cc\u06cc\u0631 \u0645\u06cc \u06cc\u0627\u0628\u0646\u062f \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0639\u062f\u0645 \u0635\u062d\u062a Check Sum \u062f\u0631 \u0645\u0642\u0635\u062f Discard (\u062f\u0648\u0631 \u0627\u0646\u062f\u0627\u062e\u062a\u0647) \u0645\u06cc \u0634\u0648\u0646\u062f.<\/span><\/p>\n

Domain Controller Promotion \u0628\u0627 PPTP Tunnel<\/span><\/h2>\n

\u0627\u06af\u0631 \u0645\u06cc \u062e\u0648\u0627\u0647\u06cc\u062f PPTP Tunnel \u0628\u0631\u0627\u06cc \u0641\u0627\u0632 Promotion \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f\u060c \u0628\u0627\u06cc\u062f RRAS \u0631\u0627 \u0631\u0648\u06cc \u0634\u0628\u06a9\u0647 \u062f\u0627\u062e\u0644\u06cc \u062a\u0646\u0638\u06cc\u0645 \u0646\u0645\u0627\u06cc\u06cc\u062f. RRAS \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u0631\u0648\u06cc \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u062f\u0627\u062e\u0644\u06cc \u06cc\u0627 \u0631\u0648\u06cc \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u062f\u06cc\u06af\u0631 \u0627\u062c\u0631\u0627 \u0634\u0648\u062f. \u062c\u0647\u062a \u0633\u0627\u062f\u0647 \u0633\u0627\u0632\u06cc \u0627\u06cc\u0646 \u0627\u0645\u0631\u060c \u0628\u0647\u062a\u0631 \u0627\u0633\u062a RRAS \u0631\u0648\u06cc \u0647\u0645\u0627\u0646 Subnet \u0627\u06cc \u0628\u0627\u0634\u062f \u06a9\u0647 Root Domain Controller \u0631\u0648\u06cc \u0622\u0646 \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u0631\u0648\u0634 \u0646\u06cc\u0627\u0632\u06cc \u0628\u0647 \u0645\u062f\u06cc\u0631\u06cc\u062a Route \u0648\u062c\u0648\u062f \u0646\u062e\u0648\u0627\u0647\u062f \u062f\u0627\u0634\u062a.<\/span><\/p>\n

\u0628\u0631\u0627\u06cc \u062a\u0646\u0638\u06cc\u0645 RRAS\u060c \u06a9\u0646\u0633\u0648\u0644 Routing And Remote Access \u0631\u0627 \u0628\u0627\u0632 \u06a9\u0646\u06cc\u062f \u0648 \u0631\u0648\u06cc \u0646\u0648\u062f Server \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0646\u06cc\u062f \u0648 \u06af\u0632\u06cc\u0646\u0647 Configure and Enablle Routing and Remote Access \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f \u0633\u067e\u0633 \u06af\u0632\u06cc\u0646\u0647 \u06cc Manually Configured Server \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\"active<\/a><\/span><\/p>\n

\u0627\u06a9\u0646\u0648\u0646 \u067e\u0633 \u0627\u0632 \u06a9\u0644\u06cc\u06a9 \u0631\u0648\u06cc + \u0628\u0627\u06cc\u062f \u06a9\u0646\u0633\u0648\u0644 MMC \u0645\u0634\u0627\u0628\u0647 \u0632\u06cc\u0631 \u0628\u0627\u0634\u062f:<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u0627\u06a9\u0646\u0648\u0646 \u0631\u0648\u06cc \u0646\u0648\u062f Server \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0646\u06cc\u062f \u0648 Properties \u0628\u06af\u06cc\u0631\u06cc\u062f. \u062f\u0631 TAB (\u0632\u0628\u0627\u0646\u0647) IP \u0631\u0648\u06cc Static Address Pool \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0646\u06cc\u062f \u0648 \u0633\u067e\u0633 \u0631\u0646\u062c IP Address \u0647\u0627\u06cc Internal \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u0631\u0648\u06cc \u0646\u0648\u062f Port \u062f\u0631 \u06a9\u0646\u0633\u0648\u0644 \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0646\u06cc\u062f \u0648 \u0633\u067e\u0633 Properties \u0628\u06af\u06cc\u0631\u06cc\u062f. \u0627\u06af\u0631 Direct Access \u0631\u0627 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f\u060c \u0646\u0647 Remote Access \u0646\u0647 Dial on Demand \u0645\u062c\u0627\u0632 \u0646\u062e\u0648\u0627\u0647\u0646\u062f \u0628\u0648\u062f. \u0627\u06af\u0631 \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u06cc\u06a9 Modem \u0631\u0648\u06cc \u0633\u0631\u0648\u0631 \u0645\u062a\u0635\u0644 \u0645\u06cc \u0634\u0648\u06cc\u062f\u060c Dial on demand \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f. \u0627\u06af\u0631 \u0628\u0647 \u0628\u06cc\u0634\u062a\u0631 \u0627\u0632 \u06f5 \u067e\u0648\u0631\u062a \u0646\u06cc\u0627\u0632 \u0646\u062f\u0627\u0631\u06cc\u062f\u060c \u0644\u0627\u0632\u0645 \u0646\u06cc\u0633\u062a PPTP \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631\u06cc \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

RRAS \u0627\u06a9\u0646\u0648\u0646 \u0628\u0631\u0627\u06cc \u067e\u0630\u06cc\u0631\u0634 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0647\u0627\u06cc \u0648\u0631\u0648\u062f\u06cc PPTP \u0628\u0631\u0627\u06cc Promote \u06a9\u0631\u062f\u0646 Domain Controller \u0622\u0645\u0627\u062f\u0647 \u0627\u0633\u062a. \u067e\u06cc\u0634 \u0627\u0632 \u0622\u0646\u06a9\u0647 \u06cc\u06a9 DC \u0631\u0627 \u062f\u0631 Perimeter Network \u06cc\u0627 External network \u0631\u0627\u0647 \u0627\u0646\u062f\u0627\u0632\u06cc \u06a9\u0646\u06cc\u062f\u060c \u06cc\u06a9 \u06a9\u0627\u0646\u06a9\u0634\u0646 \u062c\u062f\u06cc\u062f \u0628\u0631\u0627\u06cc PPTP Tunnel \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u06cc\u0645. \u062f\u0631 \u0627\u0646\u062c\u0627\u0645 Wizard \u062f\u0631 \u0646\u0638\u0631 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f:<\/span><\/p>\n

\u06f1) \u06af\u0632\u06cc\u0646\u0647 Connect to a private network throgh Internet \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f2) \u0647\u06cc\u0686 \u06a9\u0627\u0646\u06a9\u0634\u0646 \u0627\u0648\u0644\u06cc\u0647 \u0627\u06cc \u0631\u0627 dial \u0646\u06a9\u0646\u06cc\u062f. (initial connection)<\/span><\/p>\n

3) \u0622\u062f\u0631\u0633 IP \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 RRAS \u0631\u0627 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 \u0645\u0642\u0635\u062f \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f4) \u06af\u0632\u06cc\u0646\u0647 \u062f\u0633\u062a\u0631\u0633\u06cc \u0628\u0647 \u06a9\u0627\u0646\u06a9\u0634\u0646 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0645\u0627\u0645 \u06a9\u0627\u0631\u0628\u0631\u0627\u0646 \u062a\u0646\u0638\u06cc\u0645 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f5) \u06a9\u0627\u0646\u06a9\u0634\u0646 \u0631\u0627 share \u0646\u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f6) \u0646\u0627\u0645 \u06a9\u0627\u0646\u06a9\u0634\u0646 \u062f\u0644\u062e\u0648\u0627\u0647 \u0627\u0633\u062a.<\/span><\/p>\n

\u06f7) \u06af\u0632\u06cc\u0646\u0647 Include Windows Logon Domain \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f.<\/span><\/p>\n

\u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 DCPromo \u0645\u0631\u0627\u062d\u0644 \u0646\u0635\u0628 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

Domain Controller Promotion \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 IPSec \u0648 Machine Certificates<\/span><\/h3>\n

\u0634\u0645\u0627 \u0627\u06cc\u0646 \u0631\u0647\u06cc\u0627\u0641\u062a \u0631\u0627 \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u062f\u0631 \u0646\u0638\u0631 \u0628\u06af\u06cc\u0631\u06cc\u062f \u0627\u06af\u0631 \u06cc\u06a9\u06cc \u0627\u0632 \u0634\u0631\u0627\u06cc\u0637 \u0632\u06cc\u0631 \u062f\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648\u06cc \u0634\u0645\u0627 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f:<\/span><\/p>\n

\u06f1) \u0634\u0645\u0627 \u0646\u0645\u06cc \u062e\u0648\u0627\u0647\u06cc\u062f\/ \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u0627\u0632 PPTP \u0628\u0631\u0627\u06cc Promotion \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u062a\u06cc\u062f.<\/span><\/p>\n

\u06f2) \u062a\u0631\u062c\u06cc\u062d \u0645\u06cc \u062f\u0647\u06cc\u062f Kereberos \u0627\u0632 \u0645\u06cc\u0627\u0646 Firewall \u062f\u0627\u0631\u0627\u06cc permit \u0646\u0634\u0648\u062f.<\/span><\/p>\n

\u06f3) \u0628\u0647 \u062f\u0646\u0628\u0627\u0644 \u06cc\u06a9 \u062f\u0644\u06cc\u0644 \u062e\u0648\u0628 \u0628\u0631\u0627\u06cc \u0645\u062c\u0647\u0632 \u0634\u062f\u0646 \u0628\u0647 \u0632\u06cc\u0631\u0633\u0627\u062e\u062a PKIs \u0647\u0633\u062a\u06cc\u062f.<\/span><\/p>\n

\u0627\u0628\u062a\u062f\u0627 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a Certificates \u0631\u0627 \u0631\u0648\u06cc \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u0647\u0627 \u0646\u0635\u0628 \u0634\u0648\u062f \u062a\u0627 \u0627\u0645\u06a9\u0627\u0646 IPSec Authentication \u0627\u06cc\u062c\u0627\u062f \u0634\u0648\u062f. \u062a\u0645\u0627\u0645 Certificate \u0647\u0627 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062a\u0648\u0633\u0637 Certificate Authority \u06cc\u0627 CA \u0628\u0647 \u0635\u0648\u0631\u062a Signed \u0628\u0627\u0634\u0646\u062f. \u0627\u06af\u0631 CA \u06cc\u06a9 Windows CA \u0628\u0627\u0634\u062f\u060c \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0648\u06cc\u0698\u06af\u06cc Auto-Enrollment \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f. \u0627\u0644\u0628\u062a\u0647 \u0645\u06cc \u062a\u0648\u0627\u0646 \u0627\u0632 \u0647\u0631 CA\u062f\u06cc\u06af\u0631\u06cc \u06a9\u0647 \u062f\u0627\u0631\u0627\u06cc \u0627\u0639\u062a\u0628\u0627\u0631 \u0628\u0627\u0634\u062f \u0646\u06cc\u0632 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0631\u062f. \u0639\u0645\u0648\u0645\u0627\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0647\u0627\u06cc \u0645\u0634\u062e\u0635\u06cc \u0627\u0632 IPSec transport mode \u0645\u0633\u062a\u062b\u0646\u06cc \u0645\u06cc \u0634\u0648\u0646\u062f:<\/span><\/p>\n

\u06f1) broadcast : \u0628\u0647 \u062f\u0644\u06cc\u0644 \u0622\u0646\u06a9\u0647 \u0641\u0631\u0633\u062a\u0646\u062f\u0647 \u062a\u0645\u0627\u0645 \u062f\u0631\u06cc\u0627\u0641\u062a \u06a9\u0646\u0646\u062f\u0647 \u0647\u0627 \u0631\u0627 \u0646\u0645\u06cc \u062f\u0627\u0646\u062f\u060c \u0646\u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0631 IPSec Filter \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.<\/span><\/p>\n

\u06f2) Multicast: \u0645\u0634\u0627\u0628\u0647 Broadcast<\/span><\/p>\n

3) RSVP \u06cc\u0627 Resource reSerVation Protocol: \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062c\u0647\u062a Qos Marking \u0645\u0633\u062a\u062b\u0646\u06cc \u06af\u0631\u062f\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u0648\u062c\u0648\u062f \u06cc\u06a9 IPSec Packet \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0631 RSVP Packet \u0628\u0627\u0634\u062f.<\/span><\/p>\n

\u06f4) IKE \u06cc\u0627 Internet Key Exchange: \u067e\u0631\u0648\u062a\u06a9\u0644 IPSec \u0628\u0631\u0627\u06cc \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u067e\u0627\u0631\u0627\u0645\u062a\u0631 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0648 \u0627\u0646\u062c\u0627\u0645 \u062a\u0628\u0627\u062f\u0644 \u06a9\u0644\u06cc\u062f \u0628\u0647 \u0622\u0646 \u0648\u0627\u0628\u0633\u062a\u0647 \u0627\u0633\u062a \u0648 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a IKE \u0628\u0631 \u062d\u0633\u0628 \u0646\u06cc\u0627\u0632 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc (encrypt) \u0634\u062f\u0647 \u0627\u0646\u062f.<\/span><\/p>\n

\u06f5) Kerberos: \u062a\u0631\u0627\u0641\u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 Kerberos \u0628\u0647 \u062e\u0648\u062f\u06cc \u062e\u0648\u062f \u0627\u06cc\u0645\u0646 \u0634\u062f\u0647 \u0627\u0633\u062a \u0648 \u0645\u0645\u06a9\u0646 \u0627\u0633\u062a \u0628\u0631\u0627\u06cc Machine Authentication\u062a\u0648\u0633\u0637 IPSec \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f.<\/span><\/p>\n

\u062d\u062a\u06cc \u0627\u06af\u0631 \u062f\u0631 IPSec Filter \u0645\u0634\u062e\u0635 \u06af\u0631\u062f\u062f \u06a9\u0647 \u062a\u0645\u0627\u0645 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a encapsulate \u0634\u0648\u062f\u060c \u0645\u0648\u0627\u0631\u062f \u0630\u06a9\u0631 \u0634\u062f\u0647 \u0645\u0633\u062a\u062b\u0646\u06cc \u0645\u06cc \u06af\u0631\u062f\u0646\u062f. \u0642\u0631\u0627\u0631 \u062f\u0627\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 Kerberos \u062f\u0631 IPSec \u067e\u0633 \u0627\u0632 \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u06cc\u06a9 \u0645\u0627\u0634\u06cc\u0646 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 DC \u062a\u0639\u0631\u06cc\u0641 \u0634\u062f\u0647 \u0628\u0627\u0634\u062f \u0645\u0634\u06a9\u0644\u06cc \u0627\u06cc\u062c\u0627\u062f \u0646\u062e\u0648\u0627\u0647\u062f \u06a9\u0631\u062f \u0627\u0645\u0627 \u0646\u0647 \u0628\u0631\u0627\u06cc \u0645\u0627\u0634\u06cc\u0646\u06cc \u06a9\u0647 \u0647\u0646\u0648\u0632 \u0628\u0647 \u0639\u0646\u0648\u0627\u0646 DC \u062a\u0639\u0631\u06cc\u0641 (promote) \u0646\u0634\u062f\u0647 \u0627\u0633\u062a. \u0628\u0647 \u0647\u0645\u06cc\u0646 \u062f\u0644\u06cc\u0644 \u0627\u0633\u062a \u06a9\u0647 \u0627\u0632 Machine Certificates \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f. \u0628\u0631\u0627\u06cc \u0622\u0646\u06a9\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0647\u0627\u06cc \u0627\u0633\u062a\u062b\u0627\u06cc \u067e\u06cc\u0634 \u0641\u0631\u0636 \u0631\u0627 \u062a\u063a\u06cc\u06cc\u0631 \u062f\u0647\u06cc\u062f \u0628\u0647 \u0645\u0633\u06cc\u0631 \u0632\u06cc\u0631 \u062f\u0631 Registry \u0631\u0641\u062a\u0647 \u0648 \u06af\u0632\u06cc\u0646\u0647 \u06cc NoDefaultExempt \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n

HKEY_LOCAL_MACHINE<\/span>
SYSTEM\\<\/span>
CurrentControlSet\\<\/span>
Services\\<\/span>
IPSEC\\<\/span><\/p>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0635\u0648\u0631\u062a \u062a\u0631\u0641\u06cc\u06a9 Kerberos \u0648 RSVP \u062f\u0631 IPSec \u0642\u0631\u0627\u0631 \u062e\u0648\u0627\u0647\u0646\u062f \u06af\u0631\u0641\u062a. \u0686\u0646\u0627\u0646\u0686\u0647 \u062a\u0635\u0645\u06cc\u0645 \u06af\u0631\u0641\u062a\u0647 \u0627\u06cc\u062f \u0627\u0632 \u0627\u06cc\u0646 \u0631\u0647\u06cc\u0627\u0641\u062a \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u06a9\u0646\u06cc\u062f\u060c \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u062a\u0645\u0627\u0645 \u0645\u0631\u0627\u062d\u0644 IPSec Transport Mode \u0628\u0631\u0627\u06cc DC 2 DC Traffic \u0631\u0627 \u067e\u06cc\u0634 \u0627\u0632 Promotion \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f:<\/span><\/p>\n

\u06f1) \u0627\u06af\u0631 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a\u060c \u062a\u0631\u0627\u0641\u06cc\u06a9 kerberos \u0631\u0627 \u062f\u0631 IPSec \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

\u06f2) CA \u0631\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f<\/span><\/p>\n

\u06f3) Machine Certificates \u0647\u0627\u06cc \u0644\u0627\u0632\u0645 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0645\u0627\u0645 DC \u0647\u0627 \u0648 DC \u0647\u0627\u06cc \u06a9\u0627\u0646\u062f\u06cc\u062f\u0627 \u0646\u0635\u0628 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f4) \u0645\u0631\u0627\u062d\u0644 IPSec Transport Mode \u0628\u0631\u0627\u06cc DC 2 DC Traffic \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

\u06f5) \u0645\u0631\u0627\u062d\u0644 Promotion \u0631\u0627 \u0631\u0648\u06cc DC \u06a9\u0627\u0646\u062f\u06cc\u062f\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

\u06f6) \u0627\u062a\u0645\u0627\u0645 \u2013 \u0627\u0646\u062c\u0627\u0645 \u062f\u0631\u0633\u062a Replication \u0631\u0627 \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

* \u0645\u0646\u0638\u0648\u0631 \u0627\u0632 DC \u06a9\u0627\u0646\u062f\u06cc\u062f\u0627\u060c \u0645\u0627\u0634\u06cc\u0646\u06cc \u0627\u0633\u062a \u06a9\u0647 \u0642\u0631\u0627\u0631 \u0627\u0633\u062a DC \u0634\u0648\u062f.<\/span><\/p>\n

\u0645\u0642\u0627\u06cc\u0633\u0647 \u062f\u0648 \u0645\u062a\u062f \u0628\u0631\u0627\u06cc Promotion<\/span><\/h3>\n\n\n\n\n\n\n\n
\n

PPTP Tunnel<\/strong><\/span><\/p>\n<\/td>\n

\n

IPSec \u0628\u0627 Machine Certificates<\/strong><\/span><\/p>\n<\/td>\n<\/tr>\n

\u0633\u0631\u06cc\u0639 \u0648 \u0622\u0633\u0627\u0646<\/span><\/td>\n\u06cc\u06a9 \u062f\u0644\u06cc\u0644 \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc PKIs<\/span><\/td>\n<\/tr>\n
\u0646\u06cc\u0627\u0632 \u0628\u0647 \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u062a\u0631\u0627\u0641\u06cc\u06a9 kerberos \u0627\u0632 Firewall<\/span><\/td>\n\u0627\u0645\u06a9\u0627\u0646 \u0634\u0627\u0645\u0644 \u06a9\u0631\u062f\u0646 Kerberos \u062f\u0631 IPSec<\/span><\/td>\n<\/tr>\n
\u0646\u06cc\u0627\u0632\u0647 \u0628\u0647 \u0627\u062c\u0627\u0632\u0647 \u0639\u0628\u0648\u0631 \u062a\u0631\u0627\u0641\u06cc\u06a9 PPTP \u062f\u0631 Firewall<\/span><\/td>\n\u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627\u06cc \u06a9\u0645\u062a\u0631\u06cc \u062f\u0631 Firewall \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0645\u062c\u0648\u0632 \u0639\u0628\u0648\u0631 \u062f\u0627\u0631\u0646\u062f<\/span><\/td>\n<\/tr>\n
\u0631\u0648\u0634 \u0645\u062c\u0632\u0627 \u0628\u0631\u0627\u06cc Replication \u0648 Promotion \u0648 \u0646\u06cc\u0627\u0632 \u0628\u0647 IPSec \u0648 PPTP<\/span><\/td>\n\u062a\u06a9 \u0645\u0631\u062d\u0644\u0647 \u0627\u06cc<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

\u0646\u0645\u06cc \u062a\u0648\u0627\u0646 \u0647\u06cc\u0686 \u06cc\u06a9 \u0627\u0632 \u0631\u0648\u0634 \u0647\u0627 \u0631\u0627 \u0627\u0631\u062c\u062d \u062f\u0627\u0646\u0633\u062a \u0648 \u062f\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627\u06cc \u0645\u062e\u062a\u0644\u0641 \u0631\u0648\u0634 \u0628\u0647\u062a\u0631 \u0645\u062a\u0645\u0627\u06cc\u0632 \u0627\u0633\u062a.<\/span><\/p>\n

\u062a\u0646\u0638\u06cc\u0645 IPSec Transport Mode \u0628\u0631\u0627\u06cc DC 2 DC Traffic<\/span><\/h3>\n

\u062f\u0631 \u0627\u06cc\u0646 \u0645\u0631\u062d\u0644\u0647 \u0642\u0635\u062f \u062f\u0627\u0631\u06cc\u0645 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a\u06cc \u0631\u0627 \u0631\u0648\u06cc \u062a\u0645\u0627\u0645 DC \u0647\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0647\u06cc\u0645 \u06a9\u0647 \u0627\u0631\u062a\u0628\u0627\u0637\u0627\u062a \u0622\u0646 \u0647\u0627 \u062a\u0648\u0633\u0637 IPSec \u0635\u0648\u0631\u062a \u06af\u06cc\u0631\u062f. \u0628\u0627 \u0627\u06cc\u0646 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0645\u062c\u0648\u0632 \u0639\u0628\u0648\u0631 \u062a\u0631\u0627\u0641\u06cc\u06a9 IPSec \u0648 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0647\u0627\u06cc \u0645\u0631\u062a\u0628\u0637 \u0631\u0648\u06cc Firewall \u062f\u0627\u062f\u0647 \u0634\u0648\u062f. \u062a\u0648\u062c\u0647 \u062f\u0627\u0634\u062a\u0647 \u0628\u0627\u0634\u06cc\u062f \u06a9\u0647 \u0642\u0635\u062f \u0633\u0627\u062e\u062a IPSec Tunnel \u0631\u0627 \u0646\u062f\u0627\u0631\u06cc\u0645 \u0648 \u0627\u0632 IPSec Transport Mode \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u0631\u0648\u06cc \u0647\u0631 \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a IPSec Policy \u0627\u06cc\u062c\u0627\u062f \u0634\u0648\u062f. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0646\u0638\u0648\u0631 \u062f\u0631 \u06a9\u0646\u0633\u0648\u0644 Local Security Policy \u062f\u0631 Administrative Tools \u0631\u0641\u062a\u0647 \u0648 \u062f\u0631 Node (\u06af\u0631\u0647) IP Security Policies on local Machine \u062f\u0631 \u0633\u0627\u062e\u062a\u0627\u0631 \u062f\u0631\u062e\u062a\u06cc \u06a9\u0644\u06cc\u06a9 \u0645\u06cc \u06a9\u0646\u06cc\u0645. \u0627\u0628\u062a\u062f\u0627 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u06cc\u06a9 Filter List \u0648 Action \u0627\u06cc\u062c\u0627\u062f \u06af\u0631\u062f\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

Filter List \u0645\u0639\u06cc\u0646 \u0645\u06cc \u06a9\u0646\u062f \u06a9\u0647 \u0686\u0647 IP Address\u060c \u067e\u0648\u0631\u062a\u060c \u067e\u0631\u0648\u062a\u06a9\u0644 \u0628\u0631\u0627\u06cc \u0627\u0632 IPSec \u0628\u0647\u0631\u0647 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f. \u062f\u0631 \u0627\u06cc\u0646\u062c\u0627 \u0642\u0635\u062f \u062f\u0627\u0631\u06cc\u0645 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0631\u0627 \u0628\u06cc\u0646 DC\u0647\u0627 \u0641\u0642\u0637 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u0645. (\u0646\u0647 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0628\u06cc\u0646 DC \u0647\u0627 \u0648 \u06a9\u0644\u0627\u06cc\u0646\u062a \u0647\u0627) \u0633\u067e\u0633 \u062f\u0631 \u0642\u0633\u0645\u062a \u0633\u0645\u062a \u0631\u0627\u0633\u062a \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0631\u062f\u0647 \u0648 \u06af\u0632\u06cc\u0646\u0647 Manage IP filter lists and filter actions \u0631\u0627 \u0645\u06cc \u0632\u0646\u06cc\u0645. \u062f\u0631 \u0632\u0628\u0627\u0646\u0647 \u06cc Manage IP List Filter \u06cc\u06a9 \u0644\u06cc\u0633\u062a \u0641\u06cc\u0644\u062a\u0631 \u062c\u062f\u06cc\u062f \u0627\u0636\u0627\u0641\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645. \u0648\u0627\u0636\u062d \u0627\u0633\u062a \u06a9\u0647 \u06cc\u06a9 \u0644\u06cc\u0633\u062a \u0641\u06cc\u0644\u062a\u0631 \u0634\u0627\u0645\u0644 \u062a\u0639\u062f\u0627\u062f\u06cc \u0641\u06cc\u0644\u062a\u0631 \u0627\u0633\u062a \u06a9\u0647 \u0647\u0631 \u0641\u06cc\u0644\u062a\u0631 \u0627\u0634\u0627\u0631\u0647 \u0628\u0647 \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u06a9\u0647 \u0628\u0627 \u0622\u0646 \u0642\u0635\u062f Replication \u062f\u0627\u0631\u06cc\u0645 \u0645\u06cc \u06a9\u0646\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u06af\u0632\u06cc\u0646\u0647 \u06cc Add \u0631\u0627 \u0645\u06cc \u0632\u0646\u06cc\u0645 \u0648 \u0633\u067e\u0633 \u0628\u0627 \u062a\u0648\u062c\u0647 \u0628\u0647 \u0645\u0631\u0627\u062d\u0644 \u0632\u06cc\u0631 \u06cc\u06a9 \u0641\u06cc\u0644\u062a\u0631 \u0644\u06cc\u0633\u062a \u0628\u0631\u0627\u06cc DC Replication \u0627\u06cc\u062c\u0627\u062f \u0645\u06cc \u06a9\u0646\u06cc\u0645:<\/span><\/p>\n

\u06f1) \u0627\u0646\u062a\u062e\u0627\u0628 My IP Address \u0628\u0631\u0627\u06cc Source<\/span><\/p>\n

2) \u0627\u0646\u062a\u062e\u0627\u0628 A specific IP Address \u0628\u0631\u0627\u06cc Destination \u0648 \u0648\u0627\u0631\u062f \u06a9\u0631\u062f\u0646 IP \u06cc\u06a9 \u0633\u0631\u0648\u0631 \u062f\u06cc\u06af\u0631<\/span><\/p>\n

\u06f3) \u0627\u0646\u062a\u062e\u0627\u0628 Any \u0628\u0631\u0627\u06cc protocol type<\/span><\/p>\n

\u0645\u0631\u0627\u062d\u0644 \u0631\u0627 \u0628\u0631\u0627\u06cc \u062a\u0645\u0627\u0645 DC \u0647\u0627 \u06a9\u0647 \u0642\u0635\u062f Replication \u0628\u0627 \u0622\u0646 \u0647\u0627 \u0631\u0627 \u062f\u0627\u0631\u06cc\u0645 \u0627\u0646\u062c\u0627\u0645 \u0645\u06cc \u062f\u0647\u06cc\u0645 \u0648 \u062f\u0631 \u067e\u0627\u06cc\u0627\u0646 Close \u0631\u0627 \u0645\u06cc \u0632\u0646\u06cc\u0645.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u0633\u067e\u0633 \u062f\u0631 \u0632\u0628\u0627\u0646\u0647 \u06cc Manage Filter Action \u062f\u06a9\u0645\u0647 Add \u0631\u0627 \u0645\u06cc \u0632\u0646\u06cc\u0645. \u062f\u0631 \u0627\u0646\u062c\u0627\u0645 \u0645\u0631\u0627\u062d\u0644 Wizard \u06af\u0632\u06cc\u0646\u0647 \u06cc Negotiate Security \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u06cc \u06a9\u0646\u06cc\u0645 \u0648 Do not communicate with computers that do not support IPSec \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 Encapsulated Secure Payload \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u0645\u06cc \u06a9\u0646\u06cc\u0645. \u0686\u06a9 \u0628\u0627\u06a9\u0633 Edit Properties \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f \u0686\u0648\u0646 \u0642\u0635\u062f \u062f\u0627\u0631\u06cc\u0645 \u062a\u0646\u0638\u06cc\u0645\u0627\u062a \u0631\u0627 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u0645. \u062f\u0631 properties\u06af\u0632\u06cc\u0646\u0647 \u06cc Accept unsecured communication, but always respond using IPSec \u0631\u0627 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u0646\u0645\u0648\u062f\u0647.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u0627\u06a9\u0646\u0648\u0646 \u0645\u06cc \u062a\u0648\u0627\u0646 IPSec Policy \u0631\u0627 \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0646\u0638\u0648\u0631 \u062f\u0631 \u0642\u0633\u0645\u062a \u0633\u0645\u062a \u0686\u067e \u06a9\u0646\u0633\u0648\u0644 Local Security Policy \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0631\u062f\u0647 \u0648 \u06af\u0632\u06cc\u0646\u0647 \u06cc Create IP Security Policy \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f \u0648 \u0645\u0631\u0627\u062d\u0644 Wizard \u0631\u0627 \u067e\u06cc\u0634 \u0628\u06af\u06cc\u0631\u06cc\u062f. \u06af\u0632\u06cc\u0646\u0647 Activate The default response rule \u0631\u0627 \u063a\u06cc\u0631 \u0641\u0639\u0627\u0644 \u06a9\u0646\u06cc\u062f. \u0627\u06a9\u0646\u0648\u0646 \u0634\u0645\u0627 \u06cc\u06a9 Policy \u0627\u06cc\u062c\u0627\u062f \u06a9\u0631\u062f\u0647 \u0627\u06cc\u062f \u06a9\u0647 \u0634\u0627\u0645\u0644 \u0647\u06cc\u0686 \u0642\u0627\u0646\u0648\u0646\u06cc \u0646\u06cc\u0633\u062a. \u0642\u0627\u0646\u0648\u0646 \u0647\u0627 \u0627\u0632 \u0627\u0639\u0645\u0627\u0644 action \u0647\u0627 \u0631\u0648\u06cc Filter List \u0647\u0627 \u0628\u0647 \u0648\u062c\u0648\u062f \u0645\u06cc \u0622\u06cc\u0646\u062f. \u0628\u0631\u0627\u06cc \u0627\u06cc\u0646 \u0645\u0646\u0638\u0648\u0631 \u062f\u0631 properties \u0645\u0631\u0628\u0648\u0637 \u0628\u0647 policy \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u062f\u0631 \u0632\u0628\u0627\u0646\u0647 Rules \u06af\u0632\u06cc\u0646\u0647 Add \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u062f\u0631 \u0627\u0646\u062c\u0627\u0645 \u0645\u0631\u0627\u062d\u0644 wizard \u0645\u0631\u0628\u0648\u0637\u0647 \u06af\u0632\u06cc\u0646\u0647 This rule does not specify a tunnel \u0631\u0627 \u0632\u062f\u0647 \u0648 \u0633\u067e\u0633 Network Interface \u0645\u0646\u0627\u0633\u0628 \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u0627\u06a9\u062b\u0631 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0647\u0627 LAN \u0627\u0633\u062a. Filter List \u0648 Action \u06a9\u0647 \u067e\u06cc\u0634 \u062a\u0631 \u0633\u0627\u062e\u062a\u06cc\u062f \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f \u0648 \u062f\u0631 \u0645\u0631\u062d\u0644\u0647 Authentication Method:<\/span><\/p>\n

– \u0627\u06af\u0631 \u0627\u0632 PPTP Tunnel \u0628\u0631\u0627\u06cc DCPromo \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u062f\u060c \u06af\u0632\u06cc\u0646\u0647 \u06cc Kerberos V5 protocol<\/span><\/p>\n

– \u0627\u06af\u0631 \u0627\u0632 Machine Certificates \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u062f\u060c \u06af\u0632\u06cc\u0646\u0647 \u06cc Use a certificate from this Certificate Authority \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f \u0648 \u0633\u067e\u0633 CA\u06a9\u0647 \u0627\u0632 \u0622\u0646 Certificate \u062f\u0631\u06cc\u0627\u0641\u062a \u0634\u062f\u0647 \u0627\u0633\u062a \u0631\u0627 \u0627\u0646\u062a\u062e\u0627\u0628 \u06a9\u0646\u06cc\u062f. \u062f\u0631 \u067e\u0627\u06cc\u0627\u0646 \u0628\u0627\u06cc\u062f \u06cc\u06a9 Rule \u062f\u0631 policy \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0628\u0627\u0634\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u062f\u0631 \u067e\u0627\u06cc\u0627\u0646 \u0644\u0627\u0632\u0645 \u0627\u0633\u062a \u0633\u06cc\u0627\u0633\u062a \u0627\u06cc\u062c\u0627\u062f \u0634\u062f\u0647 \u0641\u0639\u0627\u0644 \u06af\u0631\u062f\u062f. \u0631\u0648\u06cc Doamin Controller Policy \u06a9\u0644\u06cc\u06a9 \u0631\u0627\u0633\u062a \u06a9\u0631\u062f\u0647 \u0648 Assing \u0631\u0627 \u0628\u0632\u0646\u06cc\u062f. \u067e\u0631\u062f\u0627\u0632\u0634 IPSec \u0628\u0644\u0627\u062f\u0631\u0646\u06af \u0634\u0631\u0648\u0639 \u0645\u06cc \u06af\u0631\u062f\u062f.<\/span><\/p>\n

\"active-directory-replication-over-firewalls\"<\/a><\/span><\/p>\n

\u0622\u0632\u0645\u0627\u06cc\u0634 IPSec Policy<\/span><\/h4>\n

\u062f\u0631 \u067e\u0627\u06cc\u0627\u0646 \u067e\u0633 \u0627\u0632 \u0622\u0646\u06a9\u0647 \u062d\u062f\u0627\u0642\u0644 \u0631\u0648\u06cc \u062f\u0648 \u0645\u0627\u0634\u06cc\u0646 \u0645\u0631\u0627\u062d\u0644 \u0631\u0627 \u0627\u0646\u062c\u0627\u0645 \u062f\u0627\u062f\u06cc\u062f\u060c \u0633\u06cc\u0627\u0633\u062a \u0633\u0627\u062e\u062a\u0647 \u0634\u062f\u0647 \u0631\u0627 \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f. \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u0627\u0628\u0632\u0627\u0631 IPSECMON.EXE \u0645\u06cc \u062a\u0648\u0627\u0646\u06cc\u062f \u062f\u0631 \u0632\u0645\u0627\u0646\u06cc \u062f\u0648 \u0645\u0627\u0634\u06cc\u0646 \u062f\u0631 IPSec Connection \u0642\u0631\u0627\u0631 \u062f\u0627\u0631\u0646\u062f IPSec \u0631\u0627 \u0645\u0627\u0646\u06cc\u062a\u0648\u0631 \u06a9\u0646\u06cc\u062f:<\/span><\/p>\n

\u06f1) \u062f\u0633\u062a\u0648\u0631 ipsecmon \u0631\u0627 \u0648\u0627\u0631\u062f \u06a9\u0646\u06cc\u062f. \u06cc\u06a9 \u0631\u0627\u0628\u0637 \u06af\u0631\u0627\u0641\u06cc\u06a9\u06cc \u0628\u0627\u0632 \u062e\u0648\u0627\u0647\u062f \u0634\u062f. \u062f\u0631 \u0642\u0633\u0645\u062a Option \u06af\u0632\u06cc\u0646\u0647 Refresh Rate \u0631\u0627 \u0628\u0647 \u06cc\u06a9 \u062b\u0627\u0646\u06cc\u0647 \u0648\u06cc\u0631\u0627\u06cc\u0634 \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f2) \u0628\u0627 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0627\u0632 \u062f\u0633\u062a\u0648\u0631 ping \u2013t IP_Address \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u062f\u06cc\u06af\u0631 \u0631\u0627 ping \u06a9\u0646\u06cc\u062f.<\/span><\/p>\n

\u06f3) \u062f\u0631 \u0627\u0628\u0632\u0627\u0631 \u06af\u0631\u0627\u0641\u06cc\u06a9\u06cc IPSecMon \u0645\u0628\u0627\u062f\u0644\u0647 \u06a9\u0644\u06cc\u062f \u0648 \u0628\u0631\u0642\u0631\u0627\u0631\u06cc \u0627\u0631\u062a\u0628\u0627\u0637 \u0631\u0627 \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u062f\u0647\u06cc\u062f.<\/span><\/p>\n

\u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u062f\u0631\u0633\u062a \u0627\u0632 IPSec<\/span><\/h4>\n

\u0628\u0627 \u0627\u0646\u06a9\u0647 \u0634\u0627\u06cc\u062f \u0637\u0631\u0627\u062d \u0647\u0627\u06cc IPSec \u0627\u06cc\u0646 \u0645\u0648\u0631\u062f \u0631\u0627 \u062f\u0631 \u0646\u0638\u0631 \u0646\u062f\u0627\u0634\u062a\u0646\u062f\u060c IPSec \u06cc\u06a9 \u067e\u0631\u0648\u062a\u06a9\u0644 \u0645\u0646\u0627\u0633\u0628 \u0628\u0631\u0627\u06cc \u06a9\u067e\u0633\u0648\u0644\u0647 \u06a9\u0631\u062f\u0646 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0647\u0627\u06cc \u067e\u06cc\u0686\u06cc\u062f\u0647 \u0627\u0633\u062a. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u0645\u0627 \u0628\u0627 \u0622\u0646\u06a9\u0647 \u0628\u0631\u0627\u06cc \u06a9\u067e\u0633\u0648\u0644\u0647 \u06a9\u0631\u062f\u0646 \u0648 \u0647\u0645\u0686\u0646\u06cc\u0646 \u0631\u0645\u0632\u0646\u06af\u0627\u0631\u06cc \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0628\u06cc\u0646 \u062f\u0648 \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u0627\u0632 \u0622\u0646 \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u06a9\u0646\u06cc\u0645\u060c \u0646\u062d\u0648\u0647 \u0627\u0646\u062c\u0627\u0645 \u0645\u0627 \u0628\u0647 \u0631\u0648\u0634\u06cc \u0628\u0648\u062f \u06a9\u0647 \u062a\u0645\u0627\u0645 \u062a\u0631\u0627\u0641\u06cc\u06a9 \u0628\u06cc\u0646 \u062f\u0648 \u062f\u0627\u0645\u06cc\u0646 \u06a9\u0646\u062a\u0631\u0644\u0631 \u0645\u0646\u062a\u0642\u0644 \u0645\u06cc \u0634\u0648\u062f. \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u062f \u0627\u0632 pre-shared Key \u0628\u062d\u062b\u06cc \u0639\u0646\u0648\u0627\u0646 \u0646\u0634\u062f \u0632\u06cc\u0631\u0627\u060c \u062f\u0627\u0631\u0627\u06cc \u0631\u06cc\u0633\u06a9 \u0647\u0627\u06cc \u0627\u0645\u0646\u06cc\u062a\u06cc \u0642\u0648\u06cc \u0627\u0633\u062a \u0648 \u062a\u0648\u0635\u06cc\u0647 \u0646\u0645\u06cc \u06af\u0631\u062f\u062f.<\/span><\/p>\n

AD DS \u062f\u0631 Perimeter Network<\/span><\/h3>\n

Perimeter Network \u06cc\u0627 DMZ \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u06cc\u06a9 \u0646\u0627\u062d\u06cc\u0647 \u067e\u0631 \u0686\u0627\u0644\u0634 \u0628\u0631\u0627\u06cc \u0637\u0631\u0627\u062d\u06cc \u0634\u0628\u06a9\u0647 \u0628\u0627\u0634\u062f. \u0627\u0645\u0631\u0648\u0632\u0647 \u0628\u0633\u06cc\u0627\u0631\u06cc \u0627\u0632 \u06a9\u0627\u0631\u0628\u0631\u062f \u0647\u0627\u06cc \u0633\u0628\u0628 \u0634\u062f\u0647 \u0627\u0633\u062a \u06a9\u0647 \u0646\u06cc\u0627\u0632 \u0628\u0647 \u0648\u062c\u0648\u062f DC \u062f\u0631 DMZ \u0628\u0627\u0634\u062f. IPSec \u0646\u06cc\u0632 \u0645\u06cc \u062a\u0648\u0627\u0646\u062f \u062f\u0631 \u0627\u06cc\u0646 \u0633\u0646\u0627\u0631\u06cc\u0648 \u06a9\u0645\u06a9 \u06a9\u0646\u0646\u062f\u0647 \u0628\u0627\u0634\u062f \u0648 \u0628\u0631\u0627\u06cc Lock Down \u06a9\u0631\u062f\u0646 \u06cc\u06a9 Server \u0645\u0648\u0631\u062f \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0642\u0631\u0627\u0631 \u06af\u06cc\u0631\u062f. \u0631\u0627\u0647\u06a9\u0627\u0631 \u0647\u0627 \u0648 \u0637\u0631\u0627\u062d\u06cc \u0647\u0627\u06cc \u062f\u06cc\u06af\u0631 \u0646\u06cc\u0632 \u0648\u062c\u0648\u062f \u062f\u0627\u0631\u062f \u06a9\u0647 \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f.<\/span><\/p>\n

\u062a\u0627\u0631\u06cc\u062e\u0686\u0647: \u0627\u06cc\u0646 \u0645\u0637\u0644\u0628 \u062a\u0631\u062c\u0645\u0647 \u0627\u06cc \u0627\u0633\u062a \u0628\u0627 \u0628\u0631\u062e\u06cc \u062a\u063a\u06cc\u06cc\u0631\u0627\u062a \u0628\u0631 \u0645\u0637\u0644\u0628 \u201cActive Directory Replication Over Firewalls\u201d \u062f\u0631 Microsoft Technet Wiki. \u0645\u0637\u0644\u0628 \u0645\u0630\u06a9\u0648\u0631 \u0627\u0632 Tech Library \u0645\u0646\u062a\u0642\u0644 \u0634\u062f\u0647 \u0627\u0633\u062a. \u0631\u0627\u0647\u06a9\u0627\u0631 \u0647\u0627\u06cc \u062c\u062f\u06cc\u062f \u062a\u0631\u06cc \u062f\u0631 \u0648\u06cc\u0646\u062f\u0648\u0632 \u0633\u0631\u0648\u0631 \u06f2\u06f0\u06f0\u06f8 \u0645\u0648\u062c\u0648\u062f \u0627\u0633\u062a \u06a9\u0647 \u062f\u0631 \u0622\u06cc\u0646\u062f\u0647 \u062f\u0631 \u0645\u0637\u0627\u0644\u0628 \u0645\u062c\u0632\u0627\u06cc\u06cc \u0645\u0648\u0631\u062f \u0628\u0631\u0631\u0633\u06cc \u0642\u0631\u0627\u0631 \u0645\u06cc \u06af\u06cc\u0631\u0646\u062f.<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"

  \u0632\u0645\u0627\u0646\u06cc \u06a9\u0647 \u0627\u0632 \u06cc\u06a9 \u0633\u0627\u062e\u062a\u0627\u0631 \u062a\u0648\u0632\u06cc\u0639 \u0634\u062f\u0647 (distributed) \u0628\u0631\u0627\u06cc \u0632\u06cc\u0631\u0633\u0627\u062e\u062a Active Directory Domain Services \u0627\u0633\u062a\u0641\u0627\u062f\u0647 \u0645\u06cc \u0634\u0648\u062f\u060c \u0628\u0627 \u0686\u0627\u0644\u0634 \u0642\u0627\u0628\u0644 \u062a\u0648\u062c\u0647 \u062f\u0631 \u0631\u0648 \u0628\u0647 \u0631\u0648\u06cc\u06cc […]<\/p>\n","protected":false},"author":1,"featured_media":8157,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[226,230],"tags":[125,249,230,264,268,277],"class_list":["post-8167","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-identity-and-active-directory","category-penetration-testing","tag-active-directory","tag-firewall","tag-penetration-testing","tag-persian","tag-routing","tag-vpn-and-tunneling"],"_links":{"self":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8167","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/comments?post=8167"}],"version-history":[{"count":0,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/posts\/8167\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media\/8157"}],"wp:attachment":[{"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/media?parent=8167"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/categories?post=8167"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/tajdini.net\/blog\/wp-json\/wp\/v2\/tags?post=8167"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}