{"id":25979,"date":"2025-08-14T15:52:23","date_gmt":"2025-08-14T08:52:23","guid":{"rendered":"https:\/\/new.vacif.com\/en\/?p=25979"},"modified":"2025-08-14T15:52:23","modified_gmt":"2025-08-14T08:52:23","slug":"huong-dan-cau-hinh-ipsec-site-to-site-policy-based-vpn-tren-sophos-firewallv21","status":"publish","type":"post","link":"https:\/\/vacif.com\/en\/huong-dan-cau-hinh-ipsec-site-to-site-policy-based-vpn-tren-sophos-firewallv21\/","title":{"rendered":"H\u01b0\u1edbng d\u1eabn c\u1ea5u h\u00ecnh IPsec Site-to-Site Policy-Based VPN tr\u00ean Sophos Firewall(v21)."},"content":{"rendered":"\n

1.S\u01a1 \u0111\u1ed3 m\u1ea1ng<\/strong>.<\/h2>\n\n\n\n
\"\"<\/figure>\n\n\n\n

2.Overview.<\/h1>\n\n\n\n

B\u00e0i vi\u1ebft n\u00e0y s\u1ebd gi\u00fap b\u1ea1n c\u1ea5u h\u00ecnh IPSec site-to-site gi\u1eefa Head office v\u00e0 Branch office tr\u00ean Sophos Firewall. V\u00ed d\u1ee5 nh\u01b0 m\u00f4 h\u00ecnh m\u1ea1ng \u1edf tr\u00ean m\u00f4 t\u1ea3 k\u1ebft n\u1ed1i gi\u1eefa tr\u1ee5 s\u1edf ch\u00ednh(HQ-Site) v\u00e0 chi nh\u00e1nh v\u0103n ph\u00f2ng(Branch-Site).<\/p>\n\n\n\n

3.C\u1ea5u h\u00ecnh.<\/h1>\n\n\n\n

3.1.\u00a0C\u1ea5u h\u00ecnh tr\u00ean Firewall HQ_Site.<\/h1>\n\n\n\n

a.\u00a0Th\u00eam Local v\u00e0 Remote LAN Network.<\/h3>\n\n\n\n

\u0110\u1ebfn ph\u1ea7n Hosts and services<\/strong> > IP Host<\/strong> > Add<\/strong> \u0111\u1ec3 th\u00eam local and remote LAN network nh\u01b0 h\u00ecnh \u1edf b\u00ean d\u01b0\u1edbi.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

b.T\u1ea1o k\u1ebft n\u1ed1i IPsec VPN \u0111\u1ebfn Firewall Branch_Site.<\/h3>\n\n\n\n

\u0110\u1ebfn ph\u1ea7n Site-to-Site VPN<\/strong> > IPsec<\/strong> v\u00e0 ch\u1ecdn Add<\/strong>. T\u1ea1o k\u1ebft n\u1ed1i v\u1edbi th\u00f4ng s\u1ed1 b\u00ean d\u01b0\u1edbi.<\/p>\n\n\n\n

\u0110\u1eb7t t\u00ean cho k\u1ebft n\u1ed1i VPN v\u00e0 ch\u1ecdn Connection type<\/strong> l\u00e0 Site-to-Site<\/strong> \u0111\u1ed1i v\u1edbi Policy-Based VPN. T\u00edch ch\u1ecdn Active on save<\/strong>, t\u1ea1o firewall rule sau. Ch\u1ecdn Gateway type<\/strong> l\u00e0 Respond only<\/strong> b\u1edfi v\u00ec kh\u1edfi t\u1ea1o t\u1eeb chi nh\u00e1nh s\u1ebd \u0111\u01b0\u1ee3c ph\u1ea3n h\u1ed3i t\u1eeb tr\u1ee5 s\u1edf ch\u00ednh.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Ch\u1ecdn Profile<\/strong>, c\u00f3 th\u1ec3 t\u1ea1o Profile<\/strong> \u1edf Profiles<\/strong> -> IPSec Pprofiles<\/strong> ho\u1eb7c c\u00f3 th\u1ec3 ch\u1ecdn nh\u1eefng Profiles<\/strong> \u0111\u01b0\u1ee3c \u0111\u1ecbnh ngh\u0129a s\u1eb5n tr\u00ean Sophos Firewall.<\/p>\n\n\n\n

Ch\u1ecdn Authentication type<\/strong> l\u00e0 Preshared key<\/strong> v\u00e0 nh\u1eadp c\u00f9ng preshared key tr\u00ean c\u1ea3 2 firewall.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Ch\u1ecdn Listening interface<\/strong> l\u00e0 PortB<\/strong> v\u00e0 Gateway address<\/strong> l\u00e0 WAN IP address <\/strong>c\u1ee7a Firewall ph\u00eda Branch-Site. T\u01b0\u01a1ng t\u1ef1 ch\u1ecdn Local subnet<\/strong> l\u00e0 local_network_192.168.100.0 v\u00e0 Remote subnet<\/strong> l\u00e0 remote_network_192.168.200.0<\/p>\n\n\n\n

Ch\u00fa \u00fd<\/strong>: Listening interface<\/strong> ph\u1ea3i \u1edf trong WAN zone<\/strong> \u0111\u1ec3 t\u1ea1o k\u1ebft n\u1ed1i VPN.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Nh\u1ea5n save<\/strong>, theo d\u00f5i tr\u1ea1ng th\u00e1i k\u1ebft n\u1ed1i.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

c.T\u1ea1o 1 firewall rule \u0111\u1ec3 cho ph\u00e9p traffic \u0111i v\u00e0o v\u00e0 \u0111i ra qua k\u1ebft n\u1ed1i VPN tr\u00ean HQ_Site.<\/h3>\n\n\n\n

\u0110\u1ebfn ph\u1ea7n Rules and Policies<\/strong> -> Firewall rules<\/strong> ch\u1ecdn New firewall rule<\/strong>.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

Nh\u1ea5n save.<\/strong><\/p>\n\n\n\n

3.2.C\u1ea5u h\u00ecnh tr\u00ean Firewall Branch_Site.<\/h1>\n\n\n\n

a.Th\u00eam Local v\u00e0 Remote LAN Network.<\/h3>\n\n\n\n

\u0110\u1ebfn ph\u1ea7n Hosts and services<\/strong> > IP Host<\/strong> > Add<\/strong> \u0111\u1ec3 th\u00eam local and remote LAN network nh\u01b0 h\u00ecnh \u1edf b\u00ean d\u01b0\u1edbi.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

b.T\u1ea1o k\u1ebft n\u1ed1i IPsec VPN \u0111\u1ebfn Firewall HQ_Site.<\/h3>\n\n\n\n

\u0110\u1ebfn ph\u1ea7n Site-to-Site VPN<\/strong> > IPsec Connections<\/strong> v\u00e0 ch\u1ecdn Add<\/strong>. T\u1ea1o k\u1ebft n\u1ed1i v\u1edbi th\u00f4ng s\u1ed1 b\u00ean d\u01b0\u1edbi.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

          Nh\u1ea5n save<\/strong>, theo d\u00f5i tr\u1ea1ng th\u00e1i k\u1ebft n\u1ed1i.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

c.T\u1ea1o 1 firewall rule \u0111\u1ec3 cho ph\u00e9p traffic \u0111i v\u00e0o v\u00e0 \u0111i ra qua k\u1ebft n\u1ed1i VPN tr\u00ean Branch_Site.<\/h3>\n\n\n\n
\"\"<\/figure>\n\n\n\n

          Nh\u1ea5n save<\/strong>.<\/p>\n\n\n\n

          \u0110\u1ebfn ph\u1ea7n Site-to-Site VPN<\/strong> > IPsec Connections, <\/strong>ki\u1ec3m tra tr\u1ea1ng th\u00e1i k\u1ebft n\u1ed1i.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

4.Ki\u1ec3m tra k\u1ebft n\u1ed1i.<\/h1>\n\n\n\n

\u00a0L\u1ea5y 1 m\u00e1y t\u00ednh trong LAN \u1edf HQ_Site ping \u0111\u1ebfn m\u00e1y t\u00ednh trong LAN \u1edf Branch_Site.<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

V\u00e0 ng\u01b0\u1ee3c l\u1ea1i, L\u1ea5y 1 m\u00e1y t\u00ednh trong LAN \u1edf Branch_Site ping \u0111\u1ebfn m\u00e1y t\u00ednh trong LAN \u1edf HQ_Site.<\/p>\n\n\n\n

\"\"<\/figure>\n","protected":false},"excerpt":{"rendered":"

1.S\u01a1 \u0111\u1ed3 m\u1ea1ng. 2.Overview. B\u00e0i vi\u1ebft n\u00e0y s\u1ebd gi\u00fap b\u1ea1n c\u1ea5u h\u00ecnh IPSec site-to-site gi\u1eefa Head office v\u00e0 Branch office tr\u00ean Sophos Firewall. V\u00ed d\u1ee5 nh\u01b0 m\u00f4 h\u00ecnh m\u1ea1ng \u1edf tr\u00ean m\u00f4 t\u1ea3 k\u1ebft n\u1ed1i gi\u1eefa tr\u1ee5 s\u1edf ch\u00ednh(HQ-Site) v\u00e0 chi nh\u00e1nh v\u0103n ph\u00f2ng(Branch-Site). 3.C\u1ea5u h\u00ecnh. 3.1.\u00a0C\u1ea5u h\u00ecnh tr\u00ean Firewall HQ_Site. a.\u00a0Th\u00eam Local v\u00e0 Remote […]<\/p>\n","protected":false},"author":2,"featured_media":26020,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_eb_attr":"","ocean_post_layout":"","ocean_both_sidebars_style":"","ocean_both_sidebars_content_width":0,"ocean_both_sidebars_sidebars_width":0,"ocean_sidebar":"","ocean_second_sidebar":"","ocean_disable_margins":"enable","ocean_add_body_class":"","ocean_shortcode_before_top_bar":"","ocean_shortcode_after_top_bar":"","ocean_shortcode_before_header":"","ocean_shortcode_after_header":"","ocean_has_shortcode":"","ocean_shortcode_after_title":"","ocean_shortcode_before_footer_widgets":"","ocean_shortcode_after_footer_widgets":"","ocean_shortcode_before_footer_bottom":"","ocean_shortcode_after_footer_bottom":"","ocean_display_top_bar":"default","ocean_display_header":"default","ocean_header_style":"","ocean_center_header_left_menu":"","ocean_custom_header_template":"","ocean_custom_logo":0,"ocean_custom_retina_logo":0,"ocean_custom_logo_max_width":0,"ocean_custom_logo_tablet_max_width":0,"ocean_custom_logo_mobile_max_width":0,"ocean_custom_logo_max_height":0,"ocean_custom_logo_tablet_max_height":0,"ocean_custom_logo_mobile_max_height":0,"ocean_header_custom_menu":"","ocean_menu_typo_font_family":"","ocean_menu_typo_font_subset":"","ocean_menu_typo_font_size":0,"ocean_menu_typo_font_size_tablet":0,"ocean_menu_typo_font_size_mobile":0,"ocean_menu_typo_font_size_unit":"px","ocean_menu_typo_font_weight":"","ocean_menu_typo_font_weight_tablet":"","ocean_menu_typo_font_weight_mobile":"","ocean_menu_typo_transform":"","ocean_menu_typo_transform_tablet":"","ocean_menu_typo_transform_mobile":"","ocean_menu_typo_line_height":0,"ocean_menu_typo_line_height_tablet":0,"ocean_menu_typo_line_height_mobile":0,"ocean_menu_typo_line_height_unit":"","ocean_menu_typo_spacing":0,"ocean_menu_typo_spacing_tablet":0,"ocean_menu_typo_spacing_mobile":0,"ocean_menu_typo_spacing_unit":"","ocean_menu_link_color":"","ocean_menu_link_color_hover":"","ocean_menu_link_color_active":"","ocean_menu_link_background":"","ocean_menu_link_hover_background":"","ocean_menu_link_active_background":"","ocean_menu_social_links_bg":"","ocean_menu_social_hover_links_bg":"","ocean_menu_social_links_color":"","ocean_menu_social_hover_links_color":"","ocean_disable_title":"default","ocean_disable_heading":"default","ocean_post_title":"","ocean_post_subheading":"","ocean_post_title_style":"","ocean_post_title_background_color":"","ocean_post_title_background":0,"ocean_post_title_bg_image_position":"","ocean_post_title_bg_image_attachment":"","ocean_post_title_bg_image_repeat":"","ocean_post_title_bg_image_size":"","ocean_post_title_height":0,"ocean_post_title_bg_overlay":0.5,"ocean_post_title_bg_overlay_color":"","ocean_disable_breadcrumbs":"default","ocean_breadcrumbs_color":"","ocean_breadcrumbs_separator_color":"","ocean_breadcrumbs_links_color":"","ocean_breadcrumbs_links_hover_color":"","ocean_display_footer_widgets":"default","ocean_display_footer_bottom":"default","ocean_custom_footer_template":"","ocean_post_oembed":"","ocean_post_self_hosted_media":"","ocean_post_video_embed":"","ocean_link_format":"","ocean_link_format_target":"self","ocean_quote_format":"","ocean_quote_format_link":"post","ocean_gallery_link_images":"on","ocean_gallery_id":[],"footnotes":""},"categories":[70,618],"tags":[334],"class_list":["post-25979","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-firewall","category-huong-dan","tag-sophos-firewall","entry","has-media"],"_links":{"self":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/25979","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/comments?post=25979"}],"version-history":[{"count":1,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/25979\/revisions"}],"predecessor-version":[{"id":26026,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/posts\/25979\/revisions\/26026"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media\/26020"}],"wp:attachment":[{"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/media?parent=25979"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/categories?post=25979"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/vacif.com\/en\/wp-json\/wp\/v2\/tags?post=25979"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}