SSTP VPN を試す

Article
10/16/2007

SSTP (Sercure Socket ?????? ?????) ?????? VPN ?????????HTTPS ??????????????????????????????????????????? Windows ? VPN ???? PPTP, L2TP ????????????????????Windows Server 2008 ??????????? SSTP ??????????Windows Server 2008 RC0 ????????????????

[????]

SSTP ????
- Windows Server Beta 3 ?????????
- ??? VPN ??????VPN ??????? HTTPS ???????????????????
  - ???? NAT ??????????????
  - Web Proxy ??????????????????VPN ????
    ??????????????????????????????
  - ??? 443 ???????
- ??? TechNet Magazine ? The Cable Guy ????????????
  - TechNet Magazine > June 2007
    The Cable Guy: Secure Socket ?????? ?????https://www.microsoft.com/technet/technetmag/issues/
    2007/06/CableGuy/default.aspx?loc=jp
- ??????????????????????????PPTP, L2TP/IPSec, SSTP ???? VPN ????????????
????
- ??? (??)
  Routing and Remote Access Blog
  - https://blogs.technet.com/rrasblog/
- Windows Server 2008 Step-by-Step Guides (??)
  - https://www.microsoft.com/downloads/details.aspx?FamilyID=518d870c-fa3e-4f6a-97f5-acaf31de6dce&DisplayLang=en
  - Deploying SSTP Remote Access Step by Step Guide.doc

[????]

Step-by-Step Guide ?????????????????????
Virtual PC (??? Virtual Server) ?????VPN ????? VPN ??????? 2 ??????????
VPN ????
- Windows Server 2008 RC0
- ??????????????2??1???????????????1????????????????
- ????????????
VPN ??????
- Windows Vista SP1 ????
- ??????????????1????????????????
- ????????????????????
- ?????????Windows Server 2008 RC0 ???????????????????
??????
- ??????????? 192.168.100.0/24 ???
- ?????????????10.0.0.0/24 ???
?????????

[????]

????·????
- ??????????????? IP ???????
- ???????? ws08rc0 ???
- ?????? example01.jp ????Active Directory ????????????
- VPN ??????????????
  - ??????????????????????????????????????????????
  - ??????????????????????????????????????????????????
- ???????????????????
????·???????
- ?????????????????????Active Directory ???????????
  - ????????????? Web ????????????????????????????????
  - ???????????? CA???? CA ???
- HTTPS ????????????????????????
  - ?????? Step-by-Step ??????
  - IIS ????? Web ?????????????????????????
  - ???? Web ????????????????????????????????????????????????????????????????????????

[VPN ???????]

?????
- ????????????????????????????????????????????
- ????????????????????????????????
??????????????????
- ??????????????→?????????????????????→????????????????????????????????????????????????????
- ???????? (?????????? VPN) ???
- VPN ????????????
- VPN ?????????????????????????????? 192.168.100.0/24 ?????????????
- ???????????????? IP ??????????
- ???? Radius ????????

[VPN ?????????]

VPN ?????
- ????????????????????????????→???????????????→????????????????????
- ??????????? VPN ????????????
- ?????????? (VPN) ?????????????????????????????????
- ?????????????????????????????????????????????????????
SSTP ??????
- ?????????????????????? VPN ?????? SSTP ???
?????????????
- ?????????????????????????????????????????Web ????????????????????

[?????? ]

????????????????????????
???????????

(???????????????????????????????×????????)
Web ????? HTTPS ???????????????????????????????????????????????
- FQDN (ws08rc01.example01.jp) ???????????? SSTP ??????IP ???? (192.168.100.1) ????????
ping ????????????????
- ????????????????? IP ???? 10.0.0.1 ??? (10.0.0.0/24 ???????? VPN ?????????????)
- ?????????????????????????????????
- ???????? VPN ????????? IP ??????VPN ??????????????????????????????
- ????????SSTP ?????1????????
- VPN ???? HTTPS ??????????
  - ??????? netstat ????
    ????? ???? ???? ?????? ??
    TCP 192.168.100.1:443 192.168.100.2:49277 ESTABLISHED
- ????????????????
  - netsh http show urlacl ????
    ???? URL            : https://+:443/sra_{xxx--xxxx}/
            ????: NT SERVICE\SstpSvc
                ????: Yes
                ??: Yes
            ????: BUILTIN\Administrators
                ????: No
                ??: No
            ????: NT AUTHORITY\SYSTEM
                ????: Yes
                ??: Yes
                SDDL: D:(A;;GA;;;S-1-5-xx--xxx)(A;;GR;;;BA)(A;;GA;;;SY)

[???]

SSTP ????? VPN ??????????????????????
??? VPN ?????????SSTP ?????????????

SSTP VPN を試す

Additional resources