{"id":10336,"date":"2026-04-29T23:47:39","date_gmt":"2026-04-29T14:47:39","guid":{"rendered":"https:\/\/randyapps.com\/?post_type=blog&p=10336"},"modified":"2026-04-29T23:47:39","modified_gmt":"2026-04-29T14:47:39","slug":"10336","status":"publish","type":"blog","link":"https:\/\/randyapps.com\/ja\/blog\/10336","title":{"rendered":"\u3010Ubuntu\u3011Ubuntu + StrongSwan\u3067IKEv2 VPN\u3092\u69cb\u7bc9\u3057\u305f\u624b\u9806\uff08\u5c02\u7528\u30a2\u30d7\u30ea\u4e0d\u8981\uff06\u4e3b\u8981OS\u5bfe\u5fdc\uff09"},"content":{"rendered":"

<\/p>\n

\u5916\u51fa\u5148\u306e\u30d5\u30ea\u30fcWi-Fi\u3092\u5b89\u5168\u306b\u4f7f\u3044\u305f\u3044\u6642\u3084\u3001\u81ea\u5b85\u30fb\u793e\u5185\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u3078\u30bb\u30ad\u30e5\u30a2\u306b\u30a2\u30af\u30bb\u30b9\u3057\u305f\u3044\u6642\u3001VPN\u304c\u3042\u308b\u3068\u975e\u5e38\u306b\u4fbf\u5229\u3067\u3059\u3088\u306d\u3002<\/p>\n

\u6700\u8fd1\u306fOpenVPN\u3084WireGuard\u306a\u3069\u304c\u4eba\u6c17\u3067\u3059\u304c\u3001\u4eca\u56de\u306f\u5404\u30c7\u30d0\u30a4\u30b9\u306b\u300c\u5c02\u7528\u306e\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u30a2\u30d7\u30ea\u300d\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u306a\u304f\u3066\u6e08\u3080\u300cIKEv2\u300d\u65b9\u5f0f\u3067\u69cb\u7bc9\u3057\u3066\u307f\u307e\u3059\u3002\u3055\u3089\u306b\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u7aef\u672b\u3078\u306e\u9762\u5012\u306a\u300c\u8a3c\u660e\u66f8\u306e\u4e8b\u524d\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u300d\u3082\u4e0d\u8981\u3068\u3057\u3001ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3059\u308b\u3060\u3051\u3067<\/strong>Mac\u3001Windows\u3001iPhone\u3001Android\u306a\u3069\u306b\u6a19\u6e96\u642d\u8f09\u3055\u308c\u3066\u3044\u308b\u6a5f\u80fd\u304b\u3089\u30b5\u30af\u30c3\u3068\u63a5\u7d9a\u3067\u304d\u308b\u306e\u304c\u6700\u5927\u306e\u9b45\u529b\u3067\u3059\u3002<\/p>\n

\u3053\u306e\u8a18\u4e8b\u3067\u306f\u3001\u81ea\u5206\u304cUbuntu\u30b5\u30fc\u30d0\u30fc\u3068StrongSwan\u3092\u4f7f\u3063\u3066IKEv2 VPN\u30b5\u30fc\u30d0\u30fc\u3092\u69cb\u7bc9\u3059\u308b\u969b\u306e\u624b\u9806\u3092\u5099\u5fd8\u9332\u3068\u3057\u3066\u307e\u3068\u3081\u3066\u3044\u307e\u3059\u3002
\n\u203b\u306a\u304a\u3001\u6700\u8fd1\u306eStrongSwan\u516c\u5f0f\u3067\u306f swanctl<\/code> \u3092\u7528\u3044\u305f\u65b0\u3057\u3044\u8a2d\u5b9a\u65b9\u5f0f\u3078\u79fb\u884c\u3057\u3064\u3064\u3042\u308a\u307e\u3059\u304c\u3001\u4eca\u56de\u306f\u3042\u3048\u3066\u30cd\u30c3\u30c8\u4e0a\u306b\u60c5\u5831\u91cf\u304c\u591a\u304f\u3001\u76f4\u611f\u7684\u306b\u8a2d\u5b9a\u3057\u3084\u3059\u3044\u5f93\u6765\u304b\u3089\u306e strongswan-starter<\/code>\uff08ipsec.conf<\/code> \u3092\u4f7f\u3046\u65b9\u5f0f\uff09\u3092\u63a1\u7528\u3057\u3066\u69cb\u7bc9\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/strong><\/p>\n

Web\u30b5\u30fc\u30d0\u30fc\u3092\u7acb\u3066\u305a\u306bLet’s Encrypt\u306e\u8a3c\u660e\u66f8\u3092\u81ea\u52d5\u66f4\u65b0\u3059\u308b\u65b9\u6cd5\u3084\u3001iOS\uff08iPhone\uff09\u7279\u6709\u306e\u8a3c\u660e\u66f8\u306e\u7f60\u3001\u3055\u3089\u306b\u306fWindows\u3084Android\u3082\u542b\u3081\u305f\u5404OS\u3067\u5b89\u5b9a\u3057\u3066\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u300c\u6697\u53f7\u5316\u30b9\u30a4\u30fc\u30c8\uff08ike\/esp\uff09\u306e\u6700\u9069\u5316\u300d\u3068\u3044\u3063\u305f\u30cf\u30de\u308a\u3084\u3059\u3044\u30dd\u30a4\u30f3\u30c8\u306b\u3064\u3044\u3066\u3082\u89e6\u308c\u3066\u3044\u307e\u3059\u306e\u3067\u3001\u540c\u3058\u3088\u3046\u306a\u74b0\u5883\u3092\u69cb\u7bc9\u3057\u3088\u3046\u3068\u3057\u3066\u3044\u308b\u65b9\u306e\u53c2\u8003\u306b\u306a\u308c\u3070\u5b09\u3057\u3044\u3067\u3059\u3002<\/p>\n

1. \u524d\u63d0\u6761\u4ef6\u3068\u30dd\u30fc\u30c8\u306e\u958b\u653e<\/h2>\n

\u4eca\u56de\u306fVPN\u63a5\u7d9a\u5c02\u7528\u306e\u74b0\u5883\u3068\u3057\u3066\u3001\u65b0\u305f\u306b\u300c\u3055\u304f\u3089\u306eVPS\uff08\u3055\u304f\u3089\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\uff09\u300d\u3092\u501f\u308a\u307e\u3057\u305f\u3002\u4f5c\u696d\u306e\u524d\u63d0\u3068\u306a\u308b\u69cb\u6210\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002<\/p>\n

    \n
  • \u30b5\u30fc\u30d0\u30fc:<\/strong> \u3055\u304f\u3089\u306eVPS<\/li>\n
  • OS:<\/strong> Ubuntu Server (20.04 \/ 22.04 \/ 24.04\u7b49)<\/li>\n
  • \u30c9\u30e1\u30a4\u30f3:<\/strong> \u30b5\u30fc\u30d0\u30fc\u306eIP\u30a2\u30c9\u30ec\u30b9\u306b\u7d10\u4ed8\u3044\u305f\u72ec\u81ea\u30c9\u30e1\u30a4\u30f3\uff08\u4f8b: vpn.example.com<\/code>\uff09<\/li>\n<\/ul>\n

    \u307e\u305f\u3001\u4f5c\u696d\u3092\u59cb\u3081\u308b\u524d\u306b\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\uff08ufw\u306a\u3069\uff09\u3067\u4ee5\u4e0b\u306e\u30dd\u30fc\u30c8\u3092\u958b\u653e\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n

      \n
    • TCP 80\u756a:<\/strong> Let’s Encrypt\u306e\u8a3c\u660e\u66f8\u53d6\u5f97\u304a\u3088\u3073\u81ea\u52d5\u66f4\u65b0\u7528<\/li>\n
    • UDP 500\u756a:<\/strong> IKEv2\u306e\u901a\u4fe1\u5236\u5fa1\u7528<\/li>\n
    • UDP 4500\u756a:<\/strong> NAT\u8d8a\u3048\u306eIPsec\u901a\u4fe1\u7528<\/li>\n<\/ul>\n

      \u203b\u4ee5\u964d\u3001\u30c9\u30e1\u30a4\u30f3\u540d\uff08vpn.example.com\uff09\u306f\u3054\u81ea\u8eab\u306e\u74b0\u5883\u306b\u5408\u308f\u305b\u3066\u8aad\u307f\u66ff\u3048\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n

      Ubuntu\u6a19\u6e96\u306e\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\uff08ufw\uff09\u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u5834\u5408\u3001\u4ee5\u4e0b\u306e\u30b3\u30de\u30f3\u30c9\u3067\u30dd\u30fc\u30c8\u3092\u958b\u653e\u3067\u304d\u307e\u3059\u3002\uff08\u203b\u3055\u304f\u3089\u306eVPS\u306e\u30d1\u30b1\u30c3\u30c8\u30d5\u30a3\u30eb\u30bf\u30fc\u306a\u3069\u3001\u30b3\u30f3\u30c8\u30ed\u30fc\u30eb\u30d1\u30cd\u30eb\u5074\u306b\u3082\u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u8a2d\u5b9a\u304c\u3042\u308b\u5834\u5408\u306f\u3001\u305d\u3061\u3089\u3082\u540c\u69d8\u306b\u958b\u653e\u3057\u3066\u304a\u3044\u3066\u304f\u3060\u3055\u3044\uff09<\/p>\n

      sudo ufw allow 80\/tcp\r\nsudo ufw allow 500\/udp\r\nsudo ufw allow 4500\/udp\r\n<\/code><\/pre>\n
      2. StrongSwan\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb<\/h2>\n
      \u307e\u305a\u306f\u30e1\u30a4\u30f3\u3068\u306a\u308bVPN\u30b5\u30fc\u30d0\u30fc\u30bd\u30d5\u30c8\u30a6\u30a7\u30a2\u300cStrongSwan\u300d\u3068\u3001\u95a2\u9023\u3059\u308b\u30d7\u30e9\u30b0\u30a4\u30f3\u4e00\u5f0f\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u307e\u3059\u3002\u524d\u8ff0\u306e\u901a\u308a\u3001\u4eca\u56de\u306f\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\uff08ipsec.conf\uff09\u304c\u6271\u3044\u3084\u3059\u3044 strongswan-starter<\/code> \u3092\u660e\u793a\u7684\u306b\u6307\u5b9a\u3057\u3066\u5c0e\u5165\u3057\u307e\u3059\u3002<\/p>\n
      sudo apt update\r\nsudo apt install strongswan strongswan-starter strongswan-pki libcharon-extra-plugins libcharon-extauth-plugins libstrongswan-extra-plugins<\/code><\/pre>\n
      \u3053\u308c\u3067\u672c\u4f53\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u306f\u5b8c\u4e86\u3067\u3059\u304c\u3001\u5b89\u5168\u306a\u901a\u4fe1\u3092\u884c\u3046\u305f\u3081\u306b\u306fSSL\/TLS\u8a3c\u660e\u66f8\u304c\u5fc5\u8981\u306b\u306a\u308b\u305f\u3081\u3001\u6b21\u306f\u305d\u306e\u6e96\u5099\u3092\u9032\u3081\u307e\u3059\u3002<\/p>\n
      3. Let’s Encrypt\u8a3c\u660e\u66f8\u306e\u53d6\u5f97\u3068\u66f4\u65b0\u306e\u81ea\u52d5\u5316<\/h2>\n
      \u7121\u6599\u3067\u4f7f\u3048\u308b\u300cLet’s Encrypt\u300d\u3092\u4f7f\u3063\u3066\u8a3c\u660e\u66f8\u3092\u53d6\u5f97\u3057\u307e\u3059\u3002
      \n\u308f\u3056\u308f\u3056Apache\u3084Nginx\u306a\u3069\u306eWeb\u30b5\u30fc\u30d0\u30fc\u3092\u7acb\u3066\u308b\u306e\u306f\u624b\u9593\u306b\u611f\u3058\u308b\u306e\u3067\u3001Certbot\u306e\u300cStandalone\u30e2\u30fc\u30c9\u300d\u3092\u4f7f\u3044\u3001\u5fc5\u8981\u306a\u77ac\u9593\u3060\u3051\u4e00\u6642\u7684\u306a\u30b5\u30fc\u30d0\u30fc\u3092\u7acb\u3061\u4e0a\u3052\u3066\u53d6\u5f97\u30fb\u66f4\u65b0\u3059\u308b\u5f62\u3092\u3068\u308a\u307e\u3059\u3002<\/p>\n
      # Certbot\u306e\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\r\nsudo apt install certbot\r\n<\/code><\/pre>\n
      \u3053\u3053\u3067\u8a3c\u660e\u66f8\u3092\u53d6\u5f97\u3057\u307e\u3059\u304c\u3001iOS\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u63a5\u7d9a\u3059\u308b\u4e88\u5b9a\u304c\u3042\u308b\u5834\u5408\u306f\u5c11\u3057\u6ce8\u610f\u304c\u5fc5\u8981\u3067\u3059\u3002<\/strong><\/p>\n
      \n    \ud83d\udca1 \u3010\u5099\u5fd8\u3011iOS\uff08iPhone\/iPad\uff09\u304b\u3089\u306e\u63a5\u7d9a\u306b\u95a2\u3059\u308b\u7279\u6709\u306e\u7f60<\/strong>
      \n    \u73fe\u5728\u3001Let’s Encrypt\u3067\u666e\u901a\u306b\u8a3c\u660e\u66f8\u3092\u53d6\u5f97\u3059\u308b\u3068\u300cECDSA\u5f62\u5f0f\u300d\u3068\u3044\u3046\u3088\u308a\u8efd\u91cf\u306a\u8a3c\u660e\u66f8\u304c\u767a\u884c\u3055\u308c\u307e\u3059\u3002\u3057\u304b\u3057\u3001iOS\u306eVPN\u6a5f\u80fd\uff08IKEv2\uff09\u306e\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u8981\u4ef6\u3068\u306e\u517c\u306d\u5408\u3044\u306a\u306e\u304b\u3001\u30b5\u30fc\u30d0\u30fc\u5074\u304cECDSA\u8a3c\u660e\u66f8\u3092\u4f7f\u3063\u3066\u3044\u308b\u3068\u3001iPhone\u304b\u3089\u306e\u63a5\u7d9a\u304c\uff08\u30a8\u30e9\u30fc\u30e1\u30c3\u30bb\u30fc\u30b8\u7b49\u3082\u51fa\u305a\u306b\uff09\u5f3e\u304b\u308c\u3066\u3057\u307e\u3046\u73fe\u8c61\u306b\u906d\u9047\u3059\u308b\u3053\u3068\u304c\u3042\u308a\u307e\u3059\u3002
      \n    \u305d\u306e\u305f\u3081\u3001\u4eca\u56de\u306f\u30b3\u30de\u30f3\u30c9\u3067\u660e\u793a\u7684\u306b\u5f93\u6765\u306e\u300cRSA\u5f62\u5f0f\u300d\u3092\u6307\u5b9a\u3057\u3066\u53d6\u5f97\u3059\u308b\u3053\u3068\u3067\u3001\u3053\u306e\u554f\u984c\u3092\u56de\u907f\u3057\u307e\u3059\u3002\n<\/p><\/blockquote>\n
      \u5b9f\u969b\u306bRSA\u5f62\u5f0f\u3067\u53d6\u5f97\u3059\u308b\u969b\u306e\u30b3\u30de\u30f3\u30c9\u306f\u4ee5\u4e0b\u306e\u901a\u308a\u3067\u3059\u3002\uff08\u203b\u30c9\u30e1\u30a4\u30f3\u540d\u306f\u3054\u81ea\u8eab\u306e\u74b0\u5883\u306b\u5408\u308f\u305b\u3066\u8aad\u307f\u66ff\u3048\u3066\u304f\u3060\u3055\u3044\uff09<\/p>\n
      sudo certbot certonly --standalone -d vpn.example.com --key-type rsa<\/code><\/pre>\n
      \u8a3c\u660e\u66f8\u306e\u914d\u7f6e\u3068\u81ea\u52d5\u66f4\u65b0\uff08\u30d5\u30c3\u30af\uff09\u306e\u8a2d\u5b9a<\/h3>\n
      StrongSwan\u306e\u8a2d\u5b9a\u304b\u3089Let’s Encrypt\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3092\u76f4\u63a5\u6307\u5b9a\u3057\u305f\u304f\u306a\u308a\u307e\u3059\u304c\u3001Ubuntu\u306e\u300cAppArmor\u300d\u3068\u3044\u3046\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u6a5f\u69cb\u306e\u5236\u9650\u306b\u3088\u308a\u3001\u6a29\u9650\u30a8\u30e9\u30fc\u3067\u8d77\u52d5\u3067\u304d\u306a\u304f\u306a\u3063\u3066\u3057\u307e\u3044\u307e\u3059\u3002
      \n\u305d\u306e\u305f\u3081\u3001\u8a3c\u660e\u66f8\u306fStrongSwan\u306e\u6240\u5b9a\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\uff08\/etc\/ipsec.d\/<\/code>\uff09\u306b\u30b3\u30d4\u30fc\u3057\u3066\u4f7f\u7528\u3057\u307e\u3059\u3002<\/p>\n
      Ubuntu\u3067Certbot\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3059\u308b\u3068\u3001\u88cf\u5074\u3067\u306f\u81ea\u52d5\u7684\u306b certbot.timer<\/code> \u3068\u3044\u3046systemd\u306e\u30bf\u30a4\u30de\u30fc\u304c\u7a3c\u50cd\u3057\u3001\u6709\u52b9\u671f\u9650\u304c\u8fd1\u3065\u304f\u3068\u5b9a\u671f\u7684\u306b\u8a3c\u660e\u66f8\u306e\u66f4\u65b0\u51e6\u7406\u3092\u8d70\u3089\u305b\u3066\u304f\u308c\u307e\u3059\u3002
      \n\u3055\u3089\u306b\u3001Certbot\u306b\u306f\u300c\u8a3c\u660e\u66f8\u304c\u6b63\u5e38\u306b\u66f4\u65b0\u3055\u308c\u305f\u30bf\u30a4\u30df\u30f3\u30b0\u3067\u3060\u3051\u3001\u7279\u5b9a\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u5b9f\u884c\u3059\u308b\u300d\u3068\u3044\u3046\u4fbf\u5229\u306a\u6a5f\u80fd\uff08renewal-hooks\uff09\u304c\u5099\u308f\u3063\u3066\u3044\u307e\u3059\u3002\/etc\/letsencrypt\/renewal-hooks\/deploy\/<\/code> \u3068\u3044\u3046\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u5185\u306b\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u914d\u7f6e\u3057\u3066\u304a\u304f\u3060\u3051\u3067\u3001\u66f4\u65b0\u5b8c\u4e86\u6642\u306b\u81ea\u52d5\u3067\u305d\u308c\u3092\u5b9f\u884c\u3057\u3066\u304f\u308c\u308b\u4ed5\u7d44\u307f\u3067\u3059\u3002<\/p>\n
      \u4eca\u56de\u306f\u3053\u306e\u6a5f\u80fd\u3092\u5229\u7528\u3057\u3066\u3001\u8a3c\u660e\u66f8\u304c\u65b0\u3057\u304f\u306a\u308b\u305f\u3073\u306b\u3001\u6240\u5b9a\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u3078\u306e\u30b3\u30d4\u30fc\u4f5c\u696d\u3068StrongSwan\u306e\u518d\u8aad\u307f\u8fbc\u307f\u3092\u5b8c\u5168\u81ea\u52d5\u5316\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n
      sudo nano \/etc\/letsencrypt\/renewal-hooks\/deploy\/strongswan-reload.sh<\/code><\/pre>\n
      \u4ee5\u4e0b\u306e\u30b9\u30af\u30ea\u30d7\u30c8\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n
      #!\/bin\/bash\r\n# \u8a3c\u660e\u66f8\u3092StrongSwan\u306e\u30c7\u30a3\u30ec\u30af\u30c8\u30ea\u306b\u30b3\u30d4\u30fc\r\ncp -f \/etc\/letsencrypt\/live\/vpn.example.com\/fullchain.pem \/etc\/ipsec.d\/certs\/\r\ncp -f \/etc\/letsencrypt\/live\/vpn.example.com\/chain.pem \/etc\/ipsec.d\/cacerts\/\r\ncp -f \/etc\/letsencrypt\/live\/vpn.example.com\/privkey.pem \/etc\/ipsec.d\/private\/\r\n\r\n# StrongSwan\u306e\u30b5\u30fc\u30d3\u30b9\u3092\u6b62\u3081\u305a\u306b\u8a3c\u660e\u66f8\u3060\u3051\u518d\u8aad\u307f\u8fbc\u307f\u3055\u305b\u308b\r\nipsec rereadall\r\n<\/code><\/pre>\n
      \u4f5c\u6210\u5f8c\u3001\u5b9f\u884c\u6a29\u9650\u3092\u4ed8\u4e0e\u3057\u3001\u521d\u56de\u306e\u8a3c\u660e\u66f8\u914d\u7f6e\u306e\u305f\u3081\u306b\u624b\u52d5\u30671\u56de\u5b9f\u884c<\/strong>\u3057\u3066\u304a\u304d\u307e\u3059\u3002<\/p>\n
      sudo chmod +x \/etc\/letsencrypt\/renewal-hooks\/deploy\/strongswan-reload.sh\r\nsudo \/etc\/letsencrypt\/renewal-hooks\/deploy\/strongswan-reload.sh\r\n<\/code><\/pre>\n
      \u3053\u308c\u3067\u3001\u8a3c\u660e\u66f8\u306e\u6e96\u5099\u3068\u81ea\u52d5\u5316\u306e\u4ed5\u7d44\u307f\u304c\u5b8c\u6210\u3057\u307e\u3057\u305f\u3002<\/p>\n
      4. StrongSwan\u306e\u8a2d\u5b9a<\/h2>\n
      \u6e96\u5099\u3067\u304d\u305f\u8a3c\u660e\u66f8\u3092\u4f7f\u3063\u3066\u3001StrongSwan\u306e\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\uff08\u30cd\u30c3\u30c8\u30ef\u30fc\u30af\u30eb\u30fc\u30eb\u3068\u8a8d\u8a3c\u60c5\u5831\uff09\u3092\u7de8\u96c6\u3057\u3066\u3044\u304d\u307e\u3059\u3002<\/p>\n
      ipsec.conf \u306e\u7de8\u96c6<\/h3>\n
      \u3053\u3053\u3067\u3001\u901a\u4fe1\u306e\u6697\u53f7\u5316\u30b9\u30a4\u30fc\u30c8\uff08ike<\/code> \u3068 esp<\/code>\uff09\u3092\u660e\u793a\u7684\u306b\u6307\u5b9a\u3057\u3066\u304a\u304d\u307e\u3059\u3002\u7701\u7565\u3057\u3066\u3082\u81ea\u52d5\u3067\u9078\u3070\u308c\u307e\u3059\u304c\u3001\u660e\u793a\u7684\u306b\u6307\u5b9a\u3057\u3066\u672b\u5c3e\u306b !<\/code> \u3092\u3064\u3051\u308b\u3053\u3068\u3067\u3001\u300c\u53e4\u304f\u3066\u5f31\u3044\u6697\u53f7\u5316\u65b9\u5f0f\u300d\u3067\u306e\u63a5\u7d9a\u3092\u5b8c\u5168\u306b\u62d2\u5426\u3057\u3001\u4e3b\u8981OS\uff08iOS\/Mac\/Windows\/Android\uff09\u304c\u597d\u3080\u6700\u65b0\u306e\u5b89\u5168\u3067\u9ad8\u901f\u306a\u6697\u53f7\u5316\u901a\u4fe1\u3060\u3051\u3092\u5f37\u5236\u3059\u308b\u3053\u3068\u304c\u3067\u304d\u307e\u3059\u3002<\/p>\n
      sudo nano \/etc\/ipsec.conf<\/code><\/pre>\n
      config setup\r\n    uniqueids=never\r\n\r\nconn ikev2-vpn\r\n    auto=add\r\n    mobike=no\r\n    compress=no\r\n    type=tunnel\r\n    keyexchange=ikev2\r\n    ike=aes256gcm16-prfsha256-ecp256,aes256-sha256-modp2048!\r\n    esp=aes256gcm16-ecp256,aes256-sha256!\r\n    fragmentation=yes\r\n    forceencaps=yes\r\n    rekey=yes\r\n    left=%any4\r\n    leftid=@vpn.example.com\r\n    leftcert=fullchain.pem\r\n    leftsendcert=always\r\n    leftsubnet=0.0.0.0\/0\r\n    right=%any4\r\n    rightid=%any\r\n    rightauth=eap-mschapv2\r\n    rightsourceip=10.10.10.0\/24\r\n    rightdns=8.8.8.8,8.8.4.4\r\n    rightsendcert=never\r\n    eap_identity=%identity\r\n    reauth=no\r\n    ikelifetime=24h\r\n    lifetime=24h\r\n    dpddelay=30s\r\n    dpdtimeout=120s\r\n    dpdaction=clear\r\n<\/code><\/pre>\n
      \u203b leftid<\/code> \u306e\u90e8\u5206\u306f\u3054\u81ea\u8eab\u306e\u30c9\u30e1\u30a4\u30f3\u540d\u306b\u5408\u308f\u305b\u3001\u5148\u982d\u306b @<\/code> \u3092\u4ed8\u3051\u307e\u3059\u3002<\/p>\n
      \ud83d\udca1 \u3010\u3061\u3087\u3063\u3068\u3057\u305f\u6ce8\u610f\u30dd\u30a4\u30f3\u30c8\u30fb\u6697\u53f7\u5316\u8a2d\u5b9a\uff08ike\/esp\uff09\u306b\u3064\u3044\u3066\u3011<\/h3>\n
      \u5b9f\u306f\u4eca\u56de\u3001\u69cb\u7bc9\u306e\u4e2d\u3067\u4e00\u756a\u82e6\u52b4\u3057\u305f\u306e\u304c\u3053\u306e ike<\/code> \u3068 esp<\/code>\uff08\u6697\u53f7\u5316\u30b9\u30a4\u30fc\u30c8\uff09\u306e\u6307\u5b9a\u3067\u3057\u305f\u3002
      \n\u3053\u3053\u3092\u7701\u7565\u3057\u305f\u308a\u3001\u3068\u308a\u3042\u3048\u305a\u4f55\u3067\u3082\u7e4b\u304c\u308b\u3088\u3046\u306b\u3068\u9577\u3044\u30ea\u30b9\u30c8\u3092\u66f8\u3044\u3066\u3057\u307e\u3046\u3068\u3001\u9006\u306b\u300c\u6570\u6642\u9593\u5f8c\u306b\u7a81\u7136\u5207\u65ad\u3055\u308c\u308b\uff08\u9375\u66f4\u65b0\uff1arekey\u306e\u5931\u6557\uff09\u300d\u3084\u300cWindows\u3084Android\u304b\u3089\u3060\u3051\u306a\u305c\u304b\u7e4b\u304c\u3089\u306a\u3044\u300d\u3068\u3044\u3063\u305f\u8b0e\u306e\u30c8\u30e9\u30d6\u30eb\u306b\u30cf\u30de\u308a\u3084\u3059\u304f\u306a\u308a\u307e\u3059\u3002<\/p>\n
      \u4eca\u56de\u8a2d\u5b9a\u3057\u305f\u77ed\u30442\u884c\u306f\u3001iOS\u3001Mac\u3001Windows\u3001Android\u306e\u3059\u3079\u3066\u304c\u5171\u901a\u3057\u3066\u5bfe\u5fdc\u3067\u304d\u308b\u3001\u5b89\u5168\u3067\u9ad8\u901f\u306a\u6697\u53f7\u5316\u65b9\u5f0f\uff08\u6700\u5927\u516c\u7d04\u6570\uff09\u3060\u3051\u3092\u53b3\u9078<\/strong>\u3057\u305f\u3082\u306e\u3067\u3059\u3002\u672b\u5c3e\u306b !<\/code> \u3092\u3064\u3051\u308b\u3053\u3068\u3067\u300c\u3053\u308c\u4ee5\u5916\u306e\u53e4\u3044\u6697\u53f7\u306f\u7d76\u5bfe\u306b\u53d7\u3051\u4ed8\u3051\u306a\u3044\u300d\u3068\u5f37\u5236\u3055\u305b\u3066\u304a\u308a\u3001\u3053\u308c\u306b\u3088\u308a\u5168\u30c7\u30d0\u30a4\u30b9\u3067\u975e\u5e38\u306b\u5b89\u5b9a\u3057\u3066\u63a5\u7d9a\u30fb\u9375\u66f4\u65b0\u304c\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u307e\u3057\u305f\u3002\u3082\u3057\u63a5\u7d9a\u304c\u5b89\u5b9a\u3057\u306a\u3044\u5834\u5408\u306a\u3069\u306f\u3001\u3053\u306e\u6307\u5b9a\u3092\u898b\u76f4\u3057\u3066\u307f\u308b\u3053\u3068\u3092\u304a\u3059\u3059\u3081\u3057\u307e\u3059\u3002<\/p>\n
      \ud83d\udca1 \u3010\u3061\u3087\u3063\u3068\u3057\u305f\u6ce8\u610f\u30dd\u30a4\u30f3\u30c8\u30fb\u5b9f\u904b\u7528\u3092\u5b89\u5b9a\u30fb\u624b\u8efd\u306b\u3059\u308b\u3053\u3060\u308f\u308a\u3011<\/h3>\n
      \u4eca\u56de\u306e\u8a2d\u5b9a\u3067\u306f\u3001\u30b9\u30de\u30db\u3084PC\u3067\u5feb\u9069\u306b\u5b9f\u904b\u7528\u3059\u308b\u305f\u3081\u306b\u3001\u3044\u304f\u3064\u304b\u3053\u3060\u308f\u308a\u306e\u30c1\u30e5\u30fc\u30cb\u30f3\u30b0\u3092\u65bd\u3057\u3066\u3044\u307e\u3059\u3002\u7279\u306b\u8907\u6570\u306eOS\u3067\u5b89\u5b9a\u30fb\u624b\u8efd\u306b\u5229\u7528\u3059\u308b\u305f\u3081\u306b\u4ee5\u4e0b\u306e\u9805\u76ee\u304c\u91cd\u8981\u3067\u3057\u305f\u3002<\/p>\n
        \n
      • Let’s Encrypt\uff08\u516c\u7684\u8a3c\u660e\u66f8\uff09\u306e\u63a1\u7528\u7406\u7531<\/strong>
        \u300c\u30aa\u30ec\u30aa\u30ec\u8a3c\u660e\u66f8\uff08\u81ea\u5df1\u7f72\u540d\u8a3c\u660e\u66f8\uff09\u300d\u3067VPN\u3092\u7acb\u3066\u308b\u3068\u3001\u63a5\u7d9a\u3059\u308b\u3059\u3079\u3066\u306e\u7aef\u672b\u306b\u4e8b\u524d\u306b\u8a3c\u660e\u66f8\u30d5\u30a1\u30a4\u30eb\u3092\u9001\u308a\u8fbc\u3093\u3067\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u30fb\u4fe1\u983c\u8a2d\u5b9a\u3092\u3059\u308b\u3068\u3044\u3046\u975e\u5e38\u306b\u624b\u9593\u306a\u4f5c\u696d\u304c\u767a\u751f\u3057\u307e\u3059\u3002\u4eca\u56de\u306fLet’s Encrypt\u3068\u3044\u3046\u3001\u521d\u3081\u304b\u3089\u5404OS\u306b\u4fe1\u983c\u3055\u308c\u3066\u3044\u308b\u516c\u7684\u8a3c\u660e\u66f8\u3092\u4f7f\u7528\u3059\u308b\u3053\u3068\u3067\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u8a3c\u660e\u66f8\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u4f5c\u696d\u3092\u5b8c\u5168\u306b\u30bc\u30ed<\/strong>\u306b\u3057\u3066\u3044\u307e\u3059\u3002<\/li>\n
      • rightauth=eap-mschapv2<\/code>\uff08ID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\uff09<\/strong>
        \u516c\u7684\u8a3c\u660e\u66f8\u3068\u3053\u306e\u30d1\u30b9\u30ef\u30fc\u30c9\u8a8d\u8a3c\uff08EAP\uff09\u3092\u7d44\u307f\u5408\u308f\u305b\u308b\u3053\u3068\u3067\u3001\u6a19\u6e96\u7684\u306aWeb\u30b5\u30a4\u30c8\u306b\u30ed\u30b0\u30a4\u30f3\u3059\u308b\u3088\u3046\u306a\u611f\u899a\u3067\u3001ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u307f\u3067\u5373\u5ea7\u306bVPN\u63a5\u7d9a\u3092\u958b\u59cb\u3067\u304d\u307e\u3059\u3002<\/li>\n
      • uniqueids=never<\/code>\uff08\u540c\u6642\u63a5\u7d9a\u306e\u8a31\u53ef\uff09<\/strong>
        \u540c\u3058\u30e6\u30fc\u30b6\u30fc\u540d\u3067\u8907\u6570\u53f0\uff08Mac\u3068iPhone\u306a\u3069\uff09\u304b\u3089\u540c\u6642\u306b\u63a5\u7d9a\u3057\u3066\u3082\u3001\u305d\u308c\u305e\u308c\u3092\u72ec\u7acb\u3057\u305f\u30bb\u30c3\u30b7\u30e7\u30f3\u3068\u3057\u3066\u6271\u3044\u3001\u5207\u65ad\u3092\u9632\u304e\u307e\u3059\u3002<\/li>\n
      • mobike=no<\/code>\uff08Windows\u3084NAT\u74b0\u5883\u3078\u306e\u5bfe\u5fdc\uff09<\/strong>
        \u30e2\u30d0\u30a4\u30eb\u5411\u3051\u306e\u56de\u7dda\u5207\u308a\u66ff\u3048\u6a5f\u80fd\u3092\u30aa\u30d5\u306b\u3057\u3066\u3044\u307e\u3059\u3002\u4e00\u898b\u4e0d\u4fbf\u305d\u3046\u3067\u3059\u304c\u3001\u3053\u308c\u3092\u30aa\u30d5\u306b\u3059\u308b\u3053\u3068\u3067Windows\u6a19\u6e96\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u3068\u306e\u76f8\u6027\u554f\u984c\u3084\u3001NAT\u74b0\u5883\u4e0b\u3067\u306e\u4e0d\u5b89\u5b9a\u306a\u6319\u52d5\u304c\u5287\u7684\u306b\u6539\u5584\u3055\u308c\u307e\u3059\u3002<\/li>\n
      • left\/right=%any4<\/code><\/strong>
        IPv4\u5c02\u7528\u306b\u56fa\u5b9a\u3059\u308b\u3053\u3068\u3067\u3001\u30e2\u30d0\u30a4\u30eb\u56de\u7dda\u3067\u306eIPv6\u7af6\u5408\u306b\u3088\u308b\u901a\u4fe1\u30c8\u30e9\u30d6\u30eb\u3092\u56de\u907f\u3057\u3066\u3044\u307e\u3059\u3002<\/li>\n
      • reauth=no<\/code> \/ rekey=yes<\/code> \/ lifetime=24h<\/code><\/strong>
        \u4e00\u77ac\u901a\u4fe1\u304c\u5207\u308c\u308b\u300c\u518d\u8a8d\u8a3c\u300d\u3092\u907f\u3051\u3001\u88cf\u5074\u3067\u306e\u300c\u9375\u66f4\u65b0\u300d\u306e\u307f\u3092\u884c\u3046\u3053\u3068\u3067\u3001\u30d0\u30c3\u30c6\u30ea\u30fc\u6d88\u8cbb\u3092\u6291\u3048\u3064\u3064\u30b7\u30fc\u30e0\u30ec\u30b9\u306a\u901a\u4fe1\u3092\u7dad\u6301\u3057\u307e\u3059\u3002<\/li>\n<\/ul>\n
        ipsec.secrets \u306e\u7de8\u96c6<\/h3>\n
        \u79d8\u5bc6\u9375\u306e\u6307\u5b9a\u3068\u3001\u63a5\u7d9a\u3059\u308b\u305f\u3081\u306e\u30e6\u30fc\u30b6\u30fc\u540d\u30fb\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u8a2d\u5b9a\u3057\u307e\u3059\u3002\u63a5\u7d9a\u3092\u884c\u3046\u5404\u30c7\u30d0\u30a4\u30b9\u306e\u8a2d\u5b9a\u753b\u9762\u306b\u3001\u3053\u3053\u3067\u8a2d\u5b9a\u3057\u305f\u60c5\u5831\u3092\u5165\u529b\u3059\u308b\u3053\u3068\u306b\u306a\u308a\u307e\u3059\u3002<\/p>\n
        sudo nano \/etc\/ipsec.secrets<\/code><\/pre>\n
        # \u79d8\u5bc6\u9375\u306e\u6307\u5b9a\uff08RSA\u3092\u6307\u5b9a\uff09\r\n: RSA \"privkey.pem\"\r\n\r\n# \u63a5\u7d9a\u7528\u306e\u30a2\u30ab\u30a6\u30f3\u30c8\u60c5\u5831\uff08\u30e6\u30fc\u30b6\u30fc\u540d : EAP \"\u30d1\u30b9\u30ef\u30fc\u30c9\"\uff09\r\nmy_vpn_user : EAP \"my_super_secret_password\"\r\n<\/code><\/pre>\n
        strongswan.conf \u306e\u7de8\u96c6\uff08\u901a\u4fe1\u8a70\u307e\u308a\u5bfe\u7b56\u3068\u5b89\u5b9a\u5316\uff09<\/h3>\n
        \u63a5\u7d9a\u306e\u5b89\u5b9a\u6027\u3092\u9ad8\u3081\u308b\u305f\u3081\u306b\u3001\u5168\u4f53\u8a2d\u5b9a\u30d5\u30a1\u30a4\u30eb\u3082\u8abf\u6574\u3057\u307e\u3059\u3002\u7279\u306b\u30d1\u30b1\u30c3\u30c8\u30b5\u30a4\u30ba\u304c\u5927\u304d\u304f\u306a\u308b\u3053\u3068\u3067\u7279\u5b9a\u306e\u30b5\u30a4\u30c8\u304c\u898b\u3089\u308c\u306a\u304f\u306a\u308b\u300c\u30d1\u30b1\u30c3\u30c8\u8a70\u307e\u308a\uff08MTU\/MSS\u554f\u984c\uff09\u300d\u3092\u9632\u3050\u8a18\u8ff0\u3092\u8ffd\u52a0\u3057\u307e\u3059\u3002<\/p>\n
        sudo nano \/etc\/strongswan.conf<\/code><\/pre>\n
        charon {\r\n        load_modular = yes\r\n        keep_alive = 15\r\n\r\n        plugins {\r\n                include strongswan.d\/charon\/*.conf\r\n\r\n                # MTU\u3068MSS\u306e\u5236\u9650\uff08\u30d1\u30b1\u30c3\u30c8\u8a70\u307e\u308a\u5bfe\u7b56\uff09\r\n                kernel-netlink {\r\n                        mtu = 1380\r\n                        mss = 1340\r\n                }\r\n        }\r\n}\r\n\r\ninclude strongswan.d\/*.conf\r\n<\/code><\/pre>\n
        5. \u30d5\u30a1\u30a4\u30a2\u30a6\u30a9\u30fc\u30eb\u3068\u30d1\u30b1\u30c3\u30c8\u8ee2\u9001\u306e\u8a2d\u5b9a<\/h2>\n
        VPN\u7aef\u672b\u304c\u30b5\u30fc\u30d0\u30fc\u7d4c\u7531\u3067\u30a4\u30f3\u30bf\u30fc\u30cd\u30c3\u30c8\u3078\u629c\u3051\u3089\u308c\u308b\u3088\u3046\u306b\u3001IPv4\u8ee2\u9001\u3068NAT\u306e\u8a2d\u5b9a\u3092\u884c\u3044\u307e\u3059\u3002<\/p>\n
        sudo nano \/etc\/sysctl.conf<\/code><\/pre>\n
        net.ipv4.ip_forward=1<\/code> \u3092\u6709\u52b9\u5316\u3057\u3001\u53cd\u6620\u3055\u305b\u307e\u3059\u3002<\/p>\n
        sudo sysctl -p<\/code><\/pre>\n
        \u6b21\u306b\u3001ufw<\/code> \u3067\u30d1\u30b1\u30c3\u30c8\u8ee2\u9001\u30ec\u30d9\u30eb\u3067\u3082MSS\u306e\u6700\u9069\u5316\u3092\u884c\u3044\u3001IPsec\u901a\u4fe1\u3092\u8a31\u53ef\u3057\u307e\u3059\u3002<\/p>\n
        sudo nano \/etc\/ufw\/before.rules<\/code><\/pre>\n
        # --- \uff08\u30d5\u30a1\u30a4\u30eb\u306e\u5148\u982d\u4ed8\u8fd1\u306b\u8ffd\u8a18\uff09 ---\r\n*nat\r\n-A POSTROUTING -s 10.10.10.0\/24 -o eth0 -m policy --pol ipsec --dir out -j ACCEPT\r\n-A POSTROUTING -s 10.10.10.0\/24 -o eth0 -j MASQUERADE\r\nCOMMIT\r\n\r\n*mangle\r\n-A FORWARD --match policy --pol ipsec --dir in -s 10.10.10.0\/24 -o eth0 -p tcp -m tcp --tcp-flags SYN,RST SYN -m tcpmss --mss 1361:1536 -j TCPMSS --set-mss 1360\r\nCOMMIT\r\n\r\n# --- \uff08\u65e2\u5b58\u306e *filter \u30d6\u30ed\u30c3\u30af\u5185\u306b\u8ffd\u8a18\uff09 ---\r\n-A ufw-before-forward --match policy --pol ipsec --dir in --proto esp -s 10.10.10.0\/24 -j ACCEPT\r\n-A ufw-before-forward --match policy --pol ipsec --dir out --proto esp -d 10.10.10.0\/24 -j ACCEPT\r\n<\/code><\/pre>\n
        ufw\u3092\u518d\u8aad\u307f\u8fbc\u307f\u3057\u3001\u30b5\u30fc\u30d3\u30b9\u3092\u518d\u8d77\u52d5\u3057\u3066\u5b8c\u4e86\u3067\u3059\u3002<\/p>\n
        sudo ufw reload\r\nsudo systemctl restart strongswan-starter<\/code><\/pre>\n
        \ud83d\udca1 \u304a\u307e\u3051\uff1aMTU\u3068MSS\u306e\u8a2d\u5b9a\u5024\u304c2\u7b87\u6240\u3067\u9055\u3046\u7406\u7531<\/h2>\n
        strongswan.conf<\/code>\uff081340\uff09\u3068 ufw<\/code>\uff081360\uff09\u3067\u6570\u5024\u304c\u9055\u3046\u306e\u306f\u3001\u5165\u308a\u53e3\u3067\u53b3\u3057\u3081\u306b\u7d5e\u308a\u3001\u51fa\u53e3\u3067\u6700\u7d42\u30c1\u30a7\u30c3\u30af\u3092\u3059\u308b\u3068\u3044\u3046\u300c\u4e8c\u6bb5\u69cb\u3048\u306e\u9632\u885b\u7b56\u300d\u3092\u3068\u3063\u3066\u3044\u308b\u304b\u3089\u3067\u3059\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u74b0\u5883\u306b\u3088\u3089\u305a\u30d1\u30b1\u30c3\u30c8\u8a70\u307e\u308a\u306e\u306a\u3044\u5b89\u5b9a\u3057\u305f\u901a\u4fe1\u3092\u5b9f\u73fe\u3057\u3066\u3044\u307e\u3059\u3002<\/p>\n
        6. \u5404\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u306e\u63a5\u7d9a\u78ba\u8a8d<\/h2>\n
        \u30b5\u30fc\u30d0\u30fc\u5074\u306e\u6e96\u5099\u304c\u3067\u304d\u305f\u3089\u3001\u624b\u5143\u306e\u30c7\u30d0\u30a4\u30b9\u304b\u3089\u63a5\u7d9a\u3057\u3066\u307f\u307e\u3057\u3087\u3046\u3002OS\u6a19\u6e96\u306eVPN\u8a2d\u5b9a\u753b\u9762\uff08iPhone\u306a\u3089\u300c\u8a2d\u5b9a > \u4e00\u822c > VPN\u300d\u306a\u3069\uff09\u304b\u3089\u8a2d\u5b9a\u3092\u4f5c\u6210\u3057\u307e\u3059\u3002<\/p>\n
          \n
        • \u30bf\u30a4\u30d7 \/ VPN\u69cb\u6210:<\/strong> IKEv2<\/li>\n
        • \u8aac\u660e:<\/strong> \u4efb\u610f\u306e\u540d\u524d\uff08\u4f8b: \u81ea\u5b85VPN\uff09<\/li>\n
        • \u30b5\u30fc\u30d0\u30fc:<\/strong> \u30b5\u30fc\u30d0\u30fc\u306e\u30c9\u30e1\u30a4\u30f3\u540d\uff08\u4f8b: vpn.example.com<\/code>\uff09\u307e\u305f\u306fIP\u30a2\u30c9\u30ec\u30b9<\/li>\n
        • \u30ea\u30e2\u30fc\u30c8ID:<\/strong> ipsec.conf<\/code> \u5185\u306e leftid<\/code> \u3067\u6307\u5b9a\u3057\u305f\u6587\u5b57\u5217\u3002\u203b\u4eca\u56de\u306e\u4f8b\u306a\u3089\u3001\u5148\u982d\u306e @<\/code> \u3092\u9664\u3044\u305f vpn.example.com<\/code> <\/li>\n
        • \u30ed\u30fc\u30ab\u30ebID:<\/strong> \u7a7a\u6b04\u306e\u307e\u307e\u3067OK<\/li>\n
        • \u30e6\u30fc\u30b6\u30fc\u8a8d\u8a3c:<\/strong> \u30e6\u30fc\u30b6\u30fc\u540d\uff08\u307e\u305f\u306f\u8a3c\u660e\u66f8\u3067\u306f\u306a\u304f\u300c\u8a2d\u5b9a\u300d\u7b49\uff09\u3092\u9078\u629e<\/li>\n
        • \u30e6\u30fc\u30b6\u30fc\u540d \/ \u30d1\u30b9\u30ef\u30fc\u30c9:<\/strong> ipsec.secrets<\/code> \u3067\u8a2d\u5b9a\u3057\u305f\u3082\u306e<\/li>\n<\/ul>\n
          \u3053\u308c\u3067\u63a5\u7d9a\u30dc\u30bf\u30f3\u3092\u62bc\u3057\u3001\u300c\u63a5\u7d9a\u6e08\u307f\u300d\u306b\u306a\u308c\u3070\u6210\u529f\u3067\u3059\uff01
          \n\u524d\u8ff0\u306e\u901a\u308a\u3001\u516c\u7684\u8a3c\u660e\u66f8\uff08Let’s Encrypt\uff09\u3092\u6b63\u3057\u304f\u30bb\u30c3\u30c8\u30a2\u30c3\u30d7\u3057\u3066\u3044\u308b\u305f\u3081\u3001\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u3067\u8a3c\u660e\u66f8\u3092\u30a4\u30f3\u30b9\u30c8\u30fc\u30eb\u3057\u305f\u308a\u3001\u30d7\u30ed\u30d5\u30a1\u30a4\u30eb\u3092\u30c0\u30a6\u30f3\u30ed\u30fc\u30c9\u3057\u305f\u308a\u3059\u308b\u624b\u9593\u306f\u4e00\u5207\u3042\u308a\u307e\u305b\u3093\u3002<\/strong>ID\u3068\u30d1\u30b9\u30ef\u30fc\u30c9\u3092\u5165\u529b\u3059\u308b\u3060\u3051\u3067\u3001\u3059\u3050\u306b\u5b89\u5168\u306a\u901a\u4fe1\u304c\u59cb\u307e\u308a\u307e\u3059\u3002<\/p>\n
          \u307e\u3068\u3081<\/h2>\n
          iOS\u7279\u6709\u306e\u7f60\u3084Windows\u3068\u306e\u76f8\u6027\u3001\u30d1\u30b1\u30c3\u30c8\u8a70\u307e\u308a\u306a\u3069\u3001\u5b9f\u904b\u7528\u3067\u30cf\u30de\u308b\u30dd\u30a4\u30f3\u30c8\u306f\u3044\u304f\u3064\u304b\u3042\u308a\u307e\u3057\u305f\u304c\u3001\u4e00\u5ea6\u69cb\u7bc9\u3057\u3066\u3057\u307e\u3048\u3070\u5c02\u7528\u30a2\u30d7\u30ea\u3082\u30af\u30e9\u30a4\u30a2\u30f3\u30c8\u5074\u306e\u8a3c\u660e\u66f8\u3082\u4e0d\u8981\u3067\u3001\u4e3b\u8981OS\u3059\u3079\u3066\u304b\u3089ID\/\u30d1\u30b9\u30ef\u30fc\u30c9\u306e\u307f\u3067\u5feb\u9069\u306b\u7e4b\u304c\u308b\u6700\u5f37\u306eVPN\u74b0\u5883\u304c\u624b\u306b\u5165\u308a\u307e\u3059\u3002\u305c\u3072\u8a66\u3057\u3066\u307f\u3066\u304f\u3060\u3055\u3044\u3002<\/p>\n
          <\/p>","protected":false},"author":2,"featured_media":0,"template":"","meta":{"_acf_changed":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0},"class_list":["post-10336","blog","type-blog","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/randyapps.com\/ja\/wp-json\/wp\/v2\/blog\/10336","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/randyapps.com\/ja\/wp-json\/wp\/v2\/blog"}],"about":[{"href":"https:\/\/randyapps.com\/ja\/wp-json\/wp\/v2\/types\/blog"}],"author":[{"embeddable":true,"href":"https:\/\/randyapps.com\/ja\/wp-json\/wp\/v2\/users\/2"}],"wp:attachment":[{"href":"https:\/\/randyapps.com\/ja\/wp-json\/wp\/v2\/media?parent=10336"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}