ユーザーズガイド KYOSHO MINI-Z CATAMARAN BOAT

[. . . ] © 2007 Apple Inc. All rights reserved. Mac O S X Server Apple 1 Infinite Loop Cupertino, CA 95014-2084 U. S. A. [. . . ] www. apple. com 163-1480 3 20 2 www. apple. com/jp Apple Apple Inc. ppleScript A ppleShare Apple Apple A AppleTalk Bonjour F Mac irewire i Cal i Tunes ac uickTime W ebObjects Xgrid Macintosh M OS Q Xsan Xserve irMac Finder Apple Inc. Apple Inc. A Java Java Sun Microsystems, Inc. J019-0941/2007-09-01 1 11 11 11 12 12 13 14 14 15 15 17 17 18 19 20 22 25 26 26 26 27 27 28 28 28 28 28 29 29 29 30 30 10. 5 Mac OS X Server PDF PDF 1 LAN LAN LAN DHCP 2 DHCP IP DHCP IP IP DHCP DHCP DHCP DHCP DHCP DHCP DHCP 3 31 31 31 32 32 33 33 34 34 35 36 37 37 37 37 38 41 42 43 3 45 46 46 46 46 47 47 48 49 51 51 52 53 54 55 56 56 57 57 58 58 58 59 DHCP DHCP DHCP DHCP IP DNS DHCP LDAP WINS DHCP DHCP DHCP DHCP DHCP DHCP IP LDAP URL DHCP DHCP OS X Mac DHCP DNS DNS DNS Bonjour DNS DNS DNS DNS DNS Bonjour DNS DNS DNS DNS DNS DNS DNS 4 59 60 60 61 62 62 62 63 64 64 65 65 66 66 67 67 68 68 69 69 70 70 70 73 73 74 74 75 75 4 77 77 79 79 80 80 83 83 84 84 85 86 87 DNS BIND DNS DNS DNS DNS Bonjour TCP/IP DNS DNS DNS DNS DNS DoS DNS DNS NAT 1 IP IP IPv6 5 87 88 89 89 89 90 90 90 91 91 92 92 93 94 94 95 95 96 96 97 97 97 98 99 99 100 100 100 101 101 102 103 103 104 104 104 105 108 NAT Web Apple DoS TCP UDP NAT 5 111 111 112 113 NAT NAT LAN NAT 6 113 113 115 116 116 117 118 118 118 118 120 120 123 6 125 126 126 126 127 127 128 128 129 129 129 130 132 132 133 133 133 133 135 135 137 139 139 139 140 140 141 141 NAT NAT NAT NAT NAT NAT 1 IP LAN LAN VPN VPN LDAP VPN VPN VPN VPN VPN L2TP PPTP VPN VPN VPN VPN VPN IP VPN VPN VPN VPN VPN VPN VPN 7 142 143 147 7 149 149 149 150 150 150 152 152 153 153 153 154 154 154 154 155 155 156 157 157 158 158 158 159 161 161 162 163 163 164 164 164 165 165 165 165 RADIUS RADIUS RADIUS RADIUS RADIUS AirMac AirMac RADIUS RADIUS RADIUS RADIUS RADIUS RADIUS AirMac AirMac AirMac NTP NTP NTP RADIUS RADIUS RADIUS 8 NTP NTP 9 VLAN VLAN IPv6 10 IPv6 IPv6 IPv6 IPv6 IPv6 IPv6 IPv4 to IPv6 8 166 167 179 9 10 Mac OS X Server Mac OS X Server 10. 5 10. 5 Mac OS X Server v10. 5   RADIUS ac OS X Server v10. 5 M RADIUS AirMac NAT ADIUS R ac M OS X Server v10. 5  Bonjour  S onjour Mac O X Server v10. 5 B ac M OS X Server v10. 5   IP 1 2 3 4 5 AT N NAT 1 HCP D DNS DHCP ac OS M X Server    IP 11   6 V PN V PN RADIUS LAN Open 7 RADIUS Directory 8 9 10 NTP V LAN AirMac    VLAN IPv6 IPv6 IPv6 Web Leopard Server Leopard Leopard Server X Mac OS m   12 Mac OS X Server m Mac OS X Server Mac OS X Server X Server Mac O S Web PDF www. apple. com/jp/server/documentation Server Mac OS X UNIX Server AFP NFS FTP SMB Mac OS X iCal iChat ac OS X M ac OS X Server M IMAP P OP SMTP DHCP D VPN NTP IP NS NAT RADIUS 13 Podcast Podcast QuickTime Q uickTime Streaming NetBoot NetInstall Mac OS X Server Windows NT M ac OS X Web WebDAV Xserve W PHP R ebMail Wiki M ySQL uby on Rails Web Mac PDF PDF    Web Web PDF   14  155% 1 115% 2 10. 4 OS X Mac PDF 115% CD 155%   PDF Web www. apple. com/jp/server/documentation Mac O X Server S        Open Directory — www. apple. com/jp/server/macosx — www. apple. com/jp/support/macosxserver — www. apple. com/jp/training — discussions. info. apple. co. jp — www. lists. apple. com — www. openldap. org —LDAP 15  SSO w — eb. mit. edu/kerberos/www/ Open Directory w ww. oracle. com/database/berkeley-db/ — LDAP Open Directory   www. rfc-editor. org/rfc/rfc3377. txt —LDAPv3 8 RFC Request for Comments 16 1 1 Mac OS X Server v10. 5  192. 168. x. 1 x 1  DHCP  VPN IP x 0 2 DHCP 92. 168. x. x 1 DHCP 192. 168. x. 2 PN V VPN L2TP x 192. 168. x. 254   192. 168. x. x VPN 17 VPN 192. allow-recursion{ 127. 0. 0. 0/8; [your internal IP range of addresses, like 192. 168. 1. 0/27]; }; }; B IND 3 NS D 69 Bonjour Bonjour Bonjour B onjour Bonjour Bonjour Bonjour B onjour Bonjour Bonjour Bonjour 1 2 3 4 5 Bonjour Bonjour D NS Bonjour 6 DNS D NS DNS DNS MX user-name@reliable. example. com 70 3 NS D MX MX e xample. com example. com 10 reliable. example. com 20 our-backup. example. com 30 last-resort. example. com MX 3 MX M X MX DNS DNS DNS MX MX 1 2 3 4 ISP DNS I SP MX M X NS D 3 NS D 71 5 6 7 8 A A 9 10 11 TXT 255 2 IP ASCII John B 12 13 CNAME 14 CNAME 15 16 17 18 19 72 3 NS D 20 21 22 23 24 OK 7 22 NAT NAT NAT NAT 5 N AT 111 N AT IP DNS NAT DNS NAT IP IP DNS N AT 118 1 NAT DNS IP NAT LAN N AT DNS N AT 113 Mac OS X D NS NAT NAT DNS D NS NAT . local DNS BIND IP BIND 3 NS D 73 192. 168. 12. 14 1 C 3 IP IP 3 IP 3 Web 192. 168. 12. 13 192. 168. 12. 12 DNS A B B C A C A B TTL T ime-to-Live TCP/IP LAN IP IP ISP LAN TCP/IP TCP/IP I ANA IP I P  10. 0. 0. 0 10. 255. 255. 255 10/8  172. 16. 0. 0 172. 31. 255. 255 1 72. 16/12  192. 168. 0. 0 192. 168. 255. 255 1 92. 168/16 IP L AN TCP/IP TCP/IP DNS D NS Web 1 1 IP Web 1 IP 1 mail. example. com IP 1 www. example. com 1 IP ftp. example. com 1 74 3 NS D DNS DNS DNS  mail. example. com  www. example. com  Finder Apple  ftp. example. com Web afp. example. com FTP DNS 1 Web www. server. org www. example. com IP 1 IP 1 DNS DNS DNS Web DNS BIND Paul Albitz C ricket Liu  2006 O’Reilly and Associates  International Software Consortium Web www. isc. org/sw/bind www. isc. org  DNS Resources Directory www. dns. net/dnsrd 3 NS D 75 Request For Comments RFC Request for Comments RFC RFC RFC Web www. ietf. org/rfc. html RFC 1035  A PTR CNAME MX  AAAA R FC 1886 76 3 NS D 4 4 Mac OS X Server Mac OS X Server IP IP IP 77 80 10. 221. 41. 33 IP 10. 221. 41. 33 80 IP 10. 221. 41. 33 Web FTP UDP User Datagram Protocol TCP Transmission Control Protocol TCP UDP I CMP Internet Control Message Protocol Management Protocol IGMP I nternet Group Secure Shell 22 78 4 Mac OS X Server  IP IP IP IP  W eb  ipfw sysctl sysctl PFilter I IPFILTER sysctl /etc/hostconfig 4 79 $ sysctl -w net. inet. ip. fw. enable=1 $ sysctl -w net. inet. ip. fw. enable=0 IPFilter OS X Server Mac IP I P I P 0 9 IP IP IP IP IP IP 0 255 8 92. 168. 12. 12 1 4 80 4 IP IP IP CIDR Classless InterDomain Routing / 1 32 IP IP 1 92. 168. 2. 1/16 16 192. 168 2 2 16 2 I P 4 : 0 CIDR 255 4 81 CIDR CIDR /1 /2 /3 /4 /5 /6 /7 /8 /9 /10 /11 /12 /13 /14 /15 /16 /17 /18 /19 /20 /21 /22 /23 /24 /25 /26 /27 /28 /29 /30 /31 /32 128. 0. 0. 0 192. 0. 0. 0 224. 0. 0. 0 240. 0. 0. 0 248. 0. 0. 0 252. 0. 0. 0 254. 0. 0. 0 255. 0. 0. 0 255. 128. 0. 0 255. 192. 0. 0 255. 224. 0. 0 255. 240. 0. 0 255. 248. 0. 0 255. 252. 0. 0 255. 254. 0. 0 255. 255. 0. 0 255. 255. 128. 0 255. 255. 192. 0 255. 255. 224. 0 255. 255. 240. 0 255. 255. 248. 0 255. 255. 252. 0 255. 255. 254. 0 255. 255. 255. 0 255. 255. 255. 128 255. 255. 255. 192 255. 255. 255. 224 255. 255. 255. 240 255. 255. 255. 248 255. 255. 255. 252 255. 255. 255. 254 255. 255. 255. 255 4. 29x109 2. 14x109 1. 07x109 5. 36x108 1. 34x108 6. 71x107 3. 35x107 1. 67x107 8. 38x106 4. 19x106 2. 09x106 1. 04x106 5. 24x105 2. 62x105 1. 31x105 65536 32768 16384 8192 4096 2048 1024 512 256 128 64 32 16 8 4 2 1 82 4 I P 3   CIDR  192. 168. 2. 1 192. 168. 2. 1/24 1 92. 168. 2. 1:255. 255. 255. 0 1 4 IP IP 10. 221. 41. 33 10. 221. 41. 33 10. 221. 41. 33/32 10. 221. 41. 33/24 10. 221. 41. 33/22 10. 221. 41. 33 1 10. 221. 41. 33 4 10. 221. 41. 0 10. 221. 41. 255 10. 221. 40. 0 10. 221. 43. 255 IP 3 10. 221. 41. 33 4 83 IP IP 1 IP IP IP ipfw IPv6 ip6fw IPv6 IPv6 IPv6 2 ip6fw /etc/ipfilter/ip_address_groups. plist <key>IPv6Mode</key> <string>DenyAllExceptLocal</string> <key>IPv6Control</key> <true/> IPv6Mode 3  DenyAllExceptLocal  DenyAll  NoRules IPv6Mode IPv6 IPv6Mode DenyAllExceptLocal IPv6 add 1 allow udp from any to any 626 add 1000 allow all from any to any via lo0 add 1100 allow all from any to ff02::/16 65000 deny ipv6 from any to any IPv6Mode DenyAll IPv6 65000 deny ipv6 from any to any IPv6Mode NoRules IPv6 IPv6 ip6fw IPv6 84 4 IPv6Control ip6fw ipfw ip6fw true false true ipfw ipfw 8 7 1 Mac OS X Server BIND Web 8 0 FTP IP 2 IP FTP 3 FTP IP IP IP 87 4 IP 8 8 4 85 5 89 6 93 UDP UDP UDP U DP U DP UDP IP 7 8 9 80 FTP FTP 1 2 3 4 5 86 4     IP IP 2 IP 1 0-net 1 92. 168-net 192. 168. 2. 2 192. 168. 2. 0/24 IP 192. 168. 2. 0:255. 255. 255. 0 IP CIDR 1 2 3 4 5 6 7 IP 8 9 OK ny a 4 87 UDP TCP IP            SSH Web Apple Windows FTP DNS/ ICMP Echo Reply IGMP PPTP VPN L2TP VPN DNS ping  QTSS  iTunes FTP FTP 1 2 3 4 5 6 7 88 4 89 8     1 2 3 4 5 6 9 3 TCP UDP IP 4 89 FTP 1 2 3 4 FTP 1 2 3 4 1 2 3 4 5 6 7 IP 90 4 IP 8 9 OK a ny IP 192. 168. 2. 2 192. 168. 2. 0/24 IP 1 92. 168. 0. 3 IPv4 1 2 3 4   < IP > 92. 168. 0. 2 1 HCP D LAN 5 AT N 121  1 IP 92. 168. 0. 254  2 55. 255. 255. 0  en1  1 92. 168. 0. 1  < >  DNS < ISP >  Web 192. 168. 0. 2  1 92. 168. 0. 3 > 26 5 DHCP 6 7    8 9 NAT 10 11 9 0 T CP T CP <Web < 35 DHCP N AT Ethernet Ethernet DHCP > IP NAT 80 W eb 25 NAT e n0 192. 168. 0. 2 192. 168. 0. 3 2 12 LAN 8 8 Web SMTP 13 14 15 DNS 2 IP ISP 17. 100. 0. 1 www. example. com ail. example. com m A DNS A MX CNAME 192. 168. 0. 2 192. 168. 0. 3 IP www. example. com mail. example. com Web 122 5 AT N NAT DHCP IP IP Ethernet W eb natd NAT natd natd natd Request For Comments RFC Request for Comments RFC RFC RFC NAT Web www. ietf. org/rfc. html   RFC 1631 RFC 3022 5 AT N 123 124 5 AT N 6 VPN 6 Mac O S X Server VPN Virtual Private Network VPN VPN PN V VPN 2 LAN VPN VPN VPN LAN VPN VPN VPN VPN WAN ISP VPN LAN 125 VPN VPN ID Internet Protocol L2TP/IPSec L2TP/IPSec IPSec L Layer Two Tunneling Protocol, Secure 2 2TP/IPSec PPTP P oint–to–Point Tunneling Protocol IPSec C isco L2F Verisign L2TP Mac OS X Server PPTP PPTP K erberos VPN Windows VPN PPTP PPTP PPTP Windows XP 128 Windows 4 0 OS X v10. 2. x Mac Mac OS X Server L2TP VPN K erberos v5 Authentication Protocol version 2 MS-CHAPv2 VPN MS-CHAPv2 Kerberos Microsoft Challenge Handshake Mac X Server PPTP OS Kerberos Key Distribution Server 126 6 PN V MS-CHAPv2 VPN Windows Mac OS X Server PPTP VPN PPTP RSA Security SecurID / VPN /Preferences/ SystemConfiguration/com. apple. RemoteAccessServers. plist 138 VPN SecurID LDAP LDAP VPN MSCHAPv2 VPN Active Directory Kerberos VPN Linux OpenLDAP LDAP VPN VPN S Mac O X v10. 5 S Mac O X v10. 3. x v10. 4. x Unix L2TP/IPSec X X indows XP X W PPTP X X X X v10. 2. x Mac O S Windows Linux X X X L2TP 8 PPTP 2 1 128 PPTP 40 6 PN V 127 VPN Mac OS X Server VPN VPN DHCP DHCP IP DHCP DHCP 2 5 VPN 2 DHCP IP LAN V PN ISP IP VPN IP VPN VPN L2TP PPTP L2TP NAT IKE NAT Traversal VPN UDP 4500 VPN 1 VPN 128 VPN 127 V PN V PN 2 V PN VPN 3 V PN L2TP 1 29 V PN L2TP over IPSec IP 129 L2TP V PN PPTP 4 PTP P 130 PPTP I P 128 6 PN V 5 V PN V PN 6 V PN 1 32 VPN VPN 1 32 VPN VPN VPN 1 2 3 4 VPN VPN VPN 2   V PN L2TP PPTP VPN V PN VPN IPSec L2TP L2TP IP VPN L2TP VPN PPTP VPN RE E SP G VPN L2TP 1701 VPN  ISAKMP/IKE  500 92. 168-net 1 6 PN V 129 8 8 L2TP 1 2 3 4 5 6 7 8 IP 9 PPP V PN L2TP over IPsec V PN IP 192. 168. 0. 128 L2TP IP DHCP VPN VPN IP IP DHCP IP 192. 168. 0. 255 Kerberos Kerberos M S-C HAPv2 RADIUS IP IP 10 IPSec RADIUS RADIUS RADIUS RADIUS IP IP IPSec 11 PPTP PPTP 40 VPN 128 L2TP IP PPTP 130 6 PN V VPN VPN GRE ESP VPN L2TP  500  1 92. 168-net 8 8 PPTP 1701 IKE 1 2 3 4 5 6 VPN PPTP 128 V PN 40 VPN PPTP 40 0 4 128 7 8 9 PPP IP DHCP VPN VPN IP 192. 168. 0. 128 IP 192. 168. 0. 255 Kerberos Kerberos IP DHCP S-C HAPv2 M RADIUS IP IP 10 RADIUS RADIUS RADIUS RADIUS IP IP 6 PN V 131 VPN DHCP 1 2 3 4 5 DNS 6 7 VPN 2 VPN IP D NS V PN IP IP 192. 168. x. 1   VPN 1 2 3 4 5 6 V PN 132 6 PN V VPN V PN VPN 1 2 3 4 P PTP V PN VPN PPTP L 2TP over IPsec L2TP VPN VPN VPN V PN VPN 1 2 3 4 V PN VPN VPN VPN VPN L AN ISP IP LAN V PN VPN VPN VPN VPN  6 PN V 133   DNS  VPN VPN VPN LAN IP L PR 17. x. x. x VPN VPN Web 1 7. x. x. x W eb URL 17. x. x. x LAN VPN VPN 1 7. 0. 0. 0 255. 0. 0. 0 Private LAN 1 7. x. x. x VPN 17. x. x. x V PN 1 7. x. x. x IP VPN LAN 17. 100. 100. x 1 7. 100. 100. 0 255. 255. 255. 0 Public 17. x. x. x 1 7. 100. 100. x Private ublic P PN V 1 2 VPN VPN 134 6 PN V 3 4 5 6 192. 168. 0. 0 V PN 2 55. 255. 0. 0 7 VPN 8 9 OK VPN VPN VPN VPN Mac OS X Server ACL ACL V PN ACL ACL VPN V PN 1 2 3 4 5 6 7 8 9 IP VPN VPN IP VPN 6 PN V 135 VPN L2TP IP Mac X Server OS VPN PPTP GRE E SP VPN IKE 1 2 3 4 5 6 7 VPN VPN L2TP PPTP U DP TCP V PN L2TP V PN PPTP 8 9 10 IP IP 11 VPN V PN CIDR IP VPN IP IP 12 13 14 15 16 GRE OK C IDR ESP any UDP VPN ISAKMP/IKE 136 6 PN V 17 GRE ESP VPN ISAKMP/IKE G RE - Generic Routing Encapsulation ESP - Encapsulating Security Payload V PN ISAKMP/IKE 500 18 19 20 21 VPN ISAKMP/IKE any a ny any 500 any 1 4 22 23 25 OK VPN ISAKMP/IKE 23 24 GRE ESP LDAP Mac OS X v10. 5 VPN VPN-PPTP LDAP PPTP- PPTP OS X Server Mac Mac O S X Server v10. 3 v 10. 4 VPN v10. 5 LDAP VPN-PPTP LDAP 1 /usr/sbin/vpnaddkeyagentuser V PN LDAP $ sudo /usr/sbin/vpnaddkeyagentuser /LDAPv3/127. 0. 0. 1 VPN DAP L LDAP LDAP IP 17. 221. 67. 87 LDAP $ sudo /usr/sbin/vpnaddkeyagentuser /LDAPv3/17. 221. 67. 87 6 PN V 137 2 VPN LDAP LDAP LDAP LDAP LDAP PPTP V PN VPN SecurID SecurID L 2TP PPTP www. rsasecurity. com P PTP 3 4 VPN VPN RSA Security VPN SecurID 1 SecurID SecurID VPN / var/ace sdconf. rec X Server Mac OS 1 a b c d e f g h i 2 / sudo mkdir /var/ace / / Dock F inder /var/ace ace SecurID ace s dconf. rec VPN EAP-SecurID 138 6 PN V PPTP 1 2 # sudo serveradmin settings vpn:Servers:com. apple. ppp. pptp:PPP:AuthenticatorEAPPlugins:_array_index : 0 = "EAP-RSA" # sudo serveradmin settings vpn:Servers:com. apple. ppp. pptp:PPP:AuthenticatorProtocol:_array_index:0 = "EAP" L2TP 1 2 # sudo serveradmin settings vpn:Servers:com. apple. ppp. l2tp:PPP:AuthenticatorEAPPlugins:_array_index : 0 = "EAP-RSA" # sudo serveradmin settings vpn:Servers:com. apple. ppp. l2tp:PPP:AuthenticatorProtocol:_array_index:0 = "EAP" 3 VPN VPN VPN VPN VPN VPN PPTP L2TP 1 2 3 4 PN V VPN VPN 2 VPN VPN   6 PN V 139 VPN 1 2 3 4 5 6 V PN VPN VPN vpnd. log VPN V PN V PN / var/log/ppp/ 1 2 3 4 V PN VPN VPN V PN     IP IP 1 2 3 4 PN V 140 6 PN V VPN VPN VPN LAN   VPN   VPN  192. 168. 0. 0/24  DHCP  L 2TP p rDwkj49fd!254 IP IP 192. 168. 0. 0:255. 255. 255. 0 1 92. 168. 0. 3–192. 168. 0. 127 1 DNS IP 92. 168. 0. 2 L 2TP gateway. example. com 1 92. 168. 0. 0 192. 168. 0. 255 LAN VPN 1 V PN 1 2 3 4 5 L2TP over IPSec 6 7 8 IP DHCP V PN IP 192. 168. 0. 128 L2TP VPN VPN IP DHCP IPSec IP 192. 168. 0. 255 prDwkj49fd!254 IPSec 9 10 6 PN V 141 11 12 LAN DNS IP VPN 192. 168. 0. 2 13 14 2 VPN 9 0 1 VPN L2TP 8 8 2 VPN 3 VPN 4 5 3 X Mac OS 1 2 V PN L 2TP over IPSec 3 4 5 VPN VPN DNS g ateway. example. com < IP > 6 < 7 OK > <prDwkj49fd!254> 142 6 PN V V PN LAN 1 V PN LAN 1 41   IP 1 92. 168. 0. 15 A pple 141    1 12 IP 3 VPN 192. 168. 0. 15 / 255. 255. 255. 255 VPN VPN 2 DNS Apple VPN 2 LAN VPN LAN s2svpnadmin LAN site-to-site VPN admin Mac OS X Server s2svpnadmin s2svpnadmin s2svpnadmin sudo LAN s2svpnadmin LAN s2svpnadmin 6 PN V 143 VPN PPTP L2TP/IPSec VPN 2  L VPN 2TP   p rDwkj49fd!254  VPN LAN 1 A. B. C. D  VPN LAN 2 W. X. Y. Z 1 1 IP 92. 168. 0. 1 1 2 IP 92. 168. 20. 1 1 IP 192. 168. 0. 255 1 92. 168. 0. 0:255. 255. 0. 0  2 IP 192. 168. 20. 255 1 92. 168. 20. 0/24 192. 168. 0. 0:255. 255. 0. 0  192. 168. 0. 2 DNS IP IP IP    192. 168. 0. 0 192. 168. 20. 0 L2TP 1 LAN s2svpnadmin s2svpnadmin LAN ite_1 s 2 1 $ sudo s2svpnadmin 2 3 Configure a new site-to-site server 1 4 1 W. X. Y. Z IP A. B. C. D IP 1 A. B. C. D 5 W. X. Y. Z s 2 6 prDwkj49fd!254 c 7 8 192. 168. 20. 0 9 144 6 PN V 1 CIDR 1 192. 168. 0. 0 2 CIDR 10 2 11 CIDR 12 192. 168. 0. 0 1 192. 168. 2. 0/24 1 2 4 192. 168. 20. 0 CIDR 1 192. 168. 2. 0/24 R eturn 2 4 LAN LAN 7 13 y 12 site_1 14 1 2 s2svpnadmin 2 IP 1 2 L2TP VPN 8 8 IP IP 9 0 2 1701 IKE NAT Traversal 4500 3 1 IP UDP 1 2 sakmp i 2 UDP 2 6 PN V 145 2 1 i sakmp 3 sp e 1 2 4 e sp 2 1 5 pencap i 1 2 6 i pencap 2 1 7 re g 1 2 8 re g 2 1 146 6 PN V 93 4 5 3 VPN VPN 1 2 3 V PN s2svpnadmin 4 VPN LAN ping LAN L2TP/IPSec IETF Internet Engineering Task Force Web Request For Comments RFC R equest for Comments RFC RFC L2TP/IPSec w ww. ietf. org/ids. by. wg/ipsec. html RFC Web www. ietf. org/rfc. html R FC 2661 R FC 2637  L2TP  PPTP  Kerberos 5 RFC 1510 6 PN V 147 148 6 PN V 7 RADIUS 7 Open Directory RADIUS ADIUS R emote Authentication Dial In User Service R RADIUS Open Directory ADIUS R Open Directory AirMac RADIUS AirMac AirMac Protocol AirMac Open Directory EAP AirMac Extensible Authentication RADIUS AirMac RADIUS RADIUS RADIUS RADIUS 149 1 R ADIUS R ADIUS 2 A irMac RADIUS 3 A irMac 150 R ADIUS RADIUS AirMac RADIUS AirMac 152 A irMac 152 A irMac 4 RADIUS 5 R ADIUS RADIUS RADIUS 152 AirMac 153 RADIUS RADIUS RADIUS RADIUS RADIUS 1 2 3 4 RADIUS RADIUS AirMac AirMac RADIUS A irMac RADIUS RADIUS RADIUS Mac OS X Server v10. 5 RADIUS ADIUS R 150 7 ADIUS R RADIUS 1 2 3 4 5 6 RADIUS RADIUS R ADIUS a S SL 1024 b c d 20 e f 7 8 9 RADIUS 10 7 ADIUS R 151 11 RADIUS RADIUS 12 AirMac RADIUS RADIUS AirMac RADIUS RADIUS AirMac 64 RADIUS 1 2 3 4 5 AirMac 6 AirMac A irMac A irMac IP AirMac R ADIUS IP 7 AirMac A irMac RADIUS AirMac RADIUS 1 2 3 4 5 AirMac R ADIUS AirMac AirMac 6 OK 152 7 ADIUS R RADIUS RADIUS A irMac 1 2 3 4 5 RADIUS R ADIUS OK 6 RADIUS RADIUS 1 2 3 4 5 6 radiusd __ R ADIUS RADIUS RADIUS RADIUS RADIUS AirMac 1 7 ADIUS R 153 2 3 4 R ADIUS RADIUS RADIUS RADIUS RADIUS RADIUS R ADIUS RADIUS 1 2 3 4 R ADIUS RADIUS RADIUS 1 2 3 4 5 radiusconfig R ADIUS radiusd RADIUS RADIUS RADIUS ACL S 154 7 ADIUS R RADIUS 1 2 3 4 5 6 7 8 R ADIUS RADIUS RADIUS RADIUS AirMac AirMac AirMac AirMac 1 2 3 4 5 AirMac 6 R ADIUS AirMac RADIUS AirMac AirMac 1 2 7 ADIUS R 155 3 4 5 AirMac R ADIUS 6 AirMac A irMac AirMac 1 2 3 4 5 AirMac 6 7 8 9 10 SSID R ADIUS 156 7 ADIUS R 8 NTP 8 NTP Network Time Protocol NTP NTP Cookie Web NTP NTP Stratum 1 UTC Universal Time Coordinated UTC NTP UTC UTC Stratum 2 LAN 3 NTP Stratum 3 UTC 157 NTP Mac OS X Server NTP NTP NTP time. apple. com NTP Stratum 2 NTP 123 N TP UDP 4 NTP 1 2 3 4 5 6 7 NTP NTP 1 2 3 4 5 158 8 TP N t ime. example. com IP 6 NTP w ww. ntp. org Web Web NTP s upport. ntp. org/bin/view/Servers/WebHome Request For Comments RFC Request for Comments RFC R FC RFC NTP Web 3 www. ietf. org/rfc. html RFC 1305 8 TP N 159 160 8 TP N 9 VLAN 9 LAN VLAN Virtual Local Area Network VLAN LAN Mac OS X Server PCI Xserve G5 VLAN Xserve Ethernet I EEE Ethernet 802. 1q VLAN 802. 1q VLAN VLAN VLAN VLAN 02. 1Q 8 Ethernet LAN V LAN V Xserve G5 VLAN 1 2 3 4 VLAN 161 5 6 VLAN V LAN 1 4094 VID VLAN VID 7 8 9 VLAN ID V ID VLAN www. ieee. org VLAN IEEE standards. ieee. org/getieee802/download/802. 1Q-1998. pdf 162 9 LAN V 10 IPv6 10 IP IPv4 32 43 IPv6 I nternet Protocol Version 6 Internet Protocol Internet Protocol   IPv4  IP IP version 4 IPv4 IPv4 AT N 2 3x1038 IPv6 IPv6 IPv4 NAT Network Address Translation IPv6 AT N IPv6 IPv6 IPv4 OS Mac X Server IPv6 Mac OS X Server Pv6 I  DNS BIND   POP/IMAP/SMTP 163  Windows S MB/CIFS  Web Apache 2 Mac OS X Server p ing6 traceroute6 I Pv6 IPv6 IPv6 I Pv6 IP IPv6 IPv6 IPv6 IPv4 IPv4 IPv6 xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx 4 10 I Pv6 16 16 IPv6 E3C5:0000:0000:0000:0000:4AC8:C0A8:6420 E3C5:0:0:0:0:4AC8:C0A8:6420 IPv6 E3C5::4AC8:C0A8:6420 0 0 IPv6 4 IPv4 2 I Pv6 IPv4 E3C5::4AC8:192. 168. 100. 32 164 10 Pv6 I IPv6 IPv6 2 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:1 IPv4 127. 0. 0. 1 IPv6 IPv6 1 1 Ethernet IPv6 IPv6 IPv6 IPv6 IPv4 IP 1 1 1 IPv6 IPv6 IPv6    IPv6 IPv4 FF 255 IPv6 IPv4 to IPv6 Mac OS X Server IPv4 to IPv6 1 IPv4-to-IPv6 IP 6 4 I Pv6 IPv4 IPv4 NAT 6 1 2 I SP IP 4 10 I Pv6 165 3 4 5 6 4 6 IPv6 IPv6 Web Web IPv6 w ww. ipv6forum. com w ww. ipv6. org Request For Comments RFC Request for Comments RFC RFC RFC Web www. ietf. org/rfc. html Web 29 IPv6 RFC www. ipv6. org/specs. html IP 166 10 Pv6 I ACL Access Control List 1 MS Challenge Handshake Authentication Protocol C HAP CHAP Challenge Handshake Authentication Protocol CHAP DHCP Dynamic Host Configuration Protocol DHCP IP DHCP DHCP IP IP DHCP DHCP DNS Domain Name System DNS DNS DNS I P IP D omain Name System IP D omain Name System IP Domain Name System DNS Dynamic Host Configuration Protocol DHCP EAP Extensible Authentication Protocol Ethernet 1 1 TCP/IP Ethernet ID MAC 167 FTP File Transfer Protocol FTP FTP F TP GB 30 1, 073, 741, 824 2 orld Wide Web W eb W P I HTML HTTP Hypertext Transfer Protocol eb W HTTP TTP Hypertext Transfer Protocol H IANA Internet Assigned Numbers Authority ICMP Internet Control Message Protocol ICMP 2 IEEE Institute of Electrical and Electronics Engineers, Inc. [. . . ] 168. 0. 0:255. 255. 0. 0  2 IP 192. 168. 20. 255 1 92. 168. 20. 0/24 192. 168. 0. 0:255. 255. 0. 0  192. 168. 0. 2 DNS IP IP IP    192. 168. 0. 0 192. 168. 20. 0 L2TP 1 LAN s2svpnadmin s2svpnadmin LAN ite_1 s 2 1 $ sudo s2svpnadmin 2 3 Configure a new site-to-site server 1 4 1 W. X. Y. Z IP A. B. C. D IP 1 A. B. C. D 5 W. X. Y. Z s 2 6 prDwkj49fd!254 c 7 8 192. 168. 20. 0 9 144 6 PN V 1 CIDR 1 192. 168. 0. 0 2 CIDR 10 2 11 CIDR 12 192. 168. 0. 0 1 192. 168. 2. 0/24 1 2 4 192. 168. 20. 0 CIDR 1 192. 168. 2. 0/24 R eturn 2 4 LAN LAN 7 13 y 12 site_1 14 1 2 s2svpnadmin 2 IP 1 2 L2TP VPN 8 8 IP IP 9 0 2 1701 IKE NAT Traversal 4500 3 1 IP UDP 1 2 sakmp i 2 UDP 2 6 PN V 145 2 1 i sakmp 3 sp e 1 2 4 e sp 2 1 5 pencap i 1 2 6 i pencap 2 1 7 re g 1 2 8 re g 2 1 146 6 PN V 93 4 5 3 VPN VPN 1 2 3 V PN s2svpnadmin 4 VPN LAN ping LAN L2TP/IPSec IETF Internet Engineering Task Force Web Request For Comments RFC R equest for Comments RFC RFC L2TP/IPSec w ww. ietf. org/ids. by. wg/ipsec. html RFC Web www. ietf. org/rfc. html R FC 2661 R FC 2637  L2TP  PPTP  Kerberos 5 RFC 1510 6 PN V 147 148 6 PN V 7 RADIUS 7 Open Directory RADIUS ADIUS R emote Authentication Dial In User Service R RADIUS Open Directory ADIUS R Open Directory AirMac RADIUS AirMac AirMac Protocol AirMac Open Directory EAP AirMac Extensible Authentication RADIUS AirMac RADIUS RADIUS RADIUS RADIUS 149 1 R ADIUS R ADIUS 2 A irMac RADIUS 3 A irMac 150 R ADIUS RADIUS AirMac RADIUS AirMac 152 A irMac 152 A irMac 4 RADIUS 5 R ADIUS RADIUS RADIUS 152 AirMac 153 RADIUS RADIUS RADIUS RADIUS RADIUS 1 2 3 4 RADIUS RADIUS AirMac AirMac RADIUS A irMac RADIUS RADIUS RADIUS Mac OS X Server v10. 5 RADIUS ADIUS R 150 7 ADIUS R RADIUS 1 2 3 4 5 6 RADIUS RADIUS R ADIUS a S SL 1024 b c d 20 e f 7 8 9 RADIUS 10 7 ADIUS R 151 11 RADIUS RADIUS 12 AirMac RADIUS RADIUS AirMac RADIUS RADIUS AirMac 64 RADIUS 1 2 3 4 5 AirMac 6 AirMac A irMac A irMac IP AirMac R ADIUS IP 7 AirMac A irMac RADIUS AirMac RADIUS 1 2 3 4 5 AirMac R ADIUS AirMac AirMac 6 OK 152 7 ADIUS R RADIUS RADIUS A irMac 1 2 3 4 5 RADIUS R ADIUS OK 6 RADIUS RADIUS 1 2 3 4 5 6 radiusd __ R ADIUS RADIUS RADIUS RADIUS RADIUS AirMac 1 7 ADIUS R 153 2 3 4 R ADIUS RADIUS RADIUS RADIUS RADIUS RADIUS R ADIUS RADIUS 1 2 3 4 R ADIUS RADIUS RADIUS 1 2 3 4 5 radiusconfig R ADIUS radiusd RADIUS RADIUS RADIUS ACL S 154 7 ADIUS R RADIUS 1 2 3 4 5 6 7 8 R ADIUS RADIUS RADIUS RADIUS AirMac AirMac AirMac AirMac 1 2 3 4 5 AirMac 6 R ADIUS AirMac RADIUS AirMac AirMac 1 2 7 ADIUS R 155 3 4 5 AirMac R ADIUS 6 AirMac A irMac AirMac 1 2 3 4 5 AirMac 6 7 8 9 10 SSID R ADIUS 156 7 ADIUS R 8 NTP 8 NTP Network Time Protocol NTP NTP Cookie Web NTP NTP Stratum 1 UTC Universal Time Coordinated UTC NTP UTC UTC Stratum 2 LAN 3 NTP Stratum 3 UTC 157 NTP Mac OS X Server NTP NTP NTP time. apple. com NTP Stratum 2 NTP 123 N TP UDP 4 NTP 1 2 3 4 5 6 7 NTP NTP 1 2 3 4 5 158 8 TP N t ime. example. com IP 6 NTP w ww. ntp. org Web Web NTP s upport. ntp. org/bin/view/Servers/WebHome Request For Comments RFC Request for Comments RFC R FC RFC NTP Web 3 www. ietf. org/rfc. html RFC 1305 8 TP N 159 160 8 TP N 9 VLAN 9 LAN VLAN Virtual Local Area Network VLAN LAN Mac OS X Server PCI Xserve G5 VLAN Xserve Ethernet I EEE Ethernet 802. 1q VLAN 802. 1q VLAN VLAN VLAN VLAN 02. 1Q 8 Ethernet LAN V LAN V Xserve G5 VLAN 1 2 3 4 VLAN 161 5 6 VLAN V LAN 1 4094 VID VLAN VID 7 8 9 VLAN ID V ID VLAN www. ieee. org VLAN IEEE standards. ieee. org/getieee802/download/802. 1Q-1998. pdf 162 9 LAN V 10 IPv6 10 IP IPv4 32 43 IPv6 I nternet Protocol Version 6 Internet Protocol Internet Protocol   IPv4  IP IP version 4 IPv4 IPv4 AT N 2 3x1038 IPv6 IPv6 IPv4 NAT Network Address Translation IPv6 AT N IPv6 IPv6 IPv4 OS Mac X Server IPv6 Mac OS X Server Pv6 I  DNS BIND   POP/IMAP/SMTP 163  Windows S MB/CIFS  Web Apache 2 Mac OS X Server p ing6 traceroute6 I Pv6 IPv6 IPv6 I Pv6 IP IPv6 IPv6 IPv6 IPv4 IPv4 IPv6 xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx:xxxx 4 10 I Pv6 16 16 IPv6 E3C5:0000:0000:0000:0000:4AC8:C0A8:6420 E3C5:0:0:0:0:4AC8:C0A8:6420 IPv6 E3C5::4AC8:C0A8:6420 0 0 IPv6 4 IPv4 2 I Pv6 IPv4 E3C5::4AC8:192. 168. 100. 32 164 10 Pv6 I IPv6 IPv6 2 0:0:0:0:0:0:0:0 0:0:0:0:0:0:0:1 IPv4 127. 0. 0. 1 IPv6 IPv6 1 1 Ethernet IPv6 IPv6 IPv6 IPv6 IPv4 IP 1 1 1 IPv6 IPv6 IPv6    IPv6 IPv4 FF 255 IPv6 IPv4 to IPv6 Mac OS X Server IPv4 to IPv6 1 IPv4-to-IPv6 IP 6 4 I Pv6 IPv4 IPv4 NAT 6 1 2 I SP IP 4 10 I Pv6 165 3 4 5 6 4 6 IPv6 IPv6 Web Web IPv6 w ww. ipv6forum. com w ww. ipv6. org Request For Comments RFC Request for Comments RFC RFC RFC Web www. ietf. org/rfc. html Web 29 IPv6 RFC www. ipv6. org/specs. html IP 166 10 Pv6 I ACL Access Control List 1 MS Challenge Handshake Authentication Protocol C HAP CHAP Challenge Handshake Authentication Protocol CHAP DHCP Dynamic Host Configuration Protocol DHCP IP DHCP DHCP IP IP DHCP DHCP DNS Domain Name System DNS DNS DNS I P IP D omain Name System IP D omain Name System IP Domain Name System DNS Dynamic Host Configuration Protocol DHCP EAP Extensible Authentication Protocol Ethernet 1 1 TCP/IP Ethernet ID MAC 167 FTP File Transfer Protocol FTP FTP F TP GB 30 1, 073, 741, 824 2 orld Wide Web W eb W P I HTML HTTP Hypertext Transfer Protocol eb W HTTP TTP Hypertext Transfer Protocol H IANA Internet Assigned Numbers Authority ICMP Internet Control Message Protocol ICMP 2 IEEE Institute of Electrical and Electronics Engineers, Inc. [. . . ]