[index] AT-AR1050V コマンドリファレンス 5.5.4
ISP接続用ユーザー名 | user@isp | ||
ISP接続用パスワード | isppasswd | ||
PPPoEサービス名 | 指定なし | ||
WAN側IPアドレス | 動的割り当て(IPCP) | ||
接続形態 | 端末型 | ||
CUG接続用ユーザー名 | userA | userB | userC |
CUG接続用パスワード | passwdA | passwdB | passwdC |
WAN側IPアドレス | 10.1.1.1/32 | 10.1.1.2/32 | 10.1.1.3/32 |
WAN側物理インターフェース | eth1 | eth1 | eth1 |
WAN側(ppp0)IPアドレス | 10.1.1.1/32 | 10.1.1.2/32 | 10.1.1.3/32 |
WAN側(ppp1)IPアドレス | 接続時にISPから取得 | ||
LAN側(vlan1)IPアドレス | 192.168.10.1/24 | 192.168.20.1/24 | 192.168.30.1/24 |
interface eth1 encapsulation ppp 0 encapsulation ppp 1
interface ppp0 ppp ipcp dns request keepalive ppp username userA ppp password passwdA ip address 10.1.1.1/32 ip tcp adjust-mss pmtu
interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@isp ppp password isppasswd ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.10.1/24
zone private network lan ip subnet 172.16.0.0/30 ip subnet 172.17.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24
zone public network ppp0 ip subnet 0.0.0.0/0 interface ppp0 network ppp1 ip subnet 0.0.0.0/0 interface ppp1
application esp protocol 50
application isakmp protocol udp sport 500 dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret-ab address 10.1.1.2 crypto isakmp key secret-ac address 10.1.1.3
interface tunnel0 ip address 172.16.0.1/30 tunnel source 10.1.1.1 tunnel destination 10.1.1.2 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300
interface tunnel1 ip address 172.17.0.1/30 tunnel source 10.1.1.1 tunnel destination 10.1.1.3 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300
ip route 0.0.0.0/0 ppp1 ip route 10.1.1.2/32 ppp0 ip route 10.1.1.3/32 ppp0 ip route 192.168.20.0/24 tunnel0 ip route 192.168.20.0/24 null 254 ip route 192.168.30.0/24 tunnel1 ip route 192.168.30.0/24 null 254
end
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ppp username userB ppp password passwdB ip address 10.1.1.2/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.20.1/24
zone private network lan ip subnet 172.16.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24
zone public network internet ip subnet 0.0.0.0/0 interface tunnel0 network ppp0 ip subnet 0.0.0.0/0 interface ppp0
application esp protocol 50
application isakmp protocol udp sport 500 dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect
crypto isakmp key secret-ab address 10.1.1.1
interface tunnel0 ip address 172.16.0.2/30 tunnel source 10.1.1.2 tunnel destination 10.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300
ip route 0.0.0.0/0 tunnel0 ip route 10.1.1.1/32 ppp0
end
interface eth1 encapsulation ppp 0
interface ppp0 ppp ipcp dns request keepalive ppp username userC ppp password passwdC ip address 10.1.1.3/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.30.1/24
zone private network lan ip subnet 172.17.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24
zone public network internet ip subnet 0.0.0.0/0 interface tunnel0 network ppp0 ip subnet 0.0.0.0/0 interface ppp0
application esp protocol 50
application isakmp protocol udp sport 500 dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect
crypto isakmp key secret-ac address 10.1.1.1
interface tunnel0 ip address 172.17.0.2/30 tunnel source 10.1.1.3 tunnel destination 10.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300
ip route 0.0.0.0/0 tunnel0 ip route 10.1.1.1/32 ppp0
end
copy running-config startup-config
」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! interface eth1 encapsulation ppp 0 encapsulation ppp 1 ! interface ppp0 ppp ipcp dns request keepalive ppp username userA ppp password passwdA ip address 10.1.1.1/32 ip tcp adjust-mss pmtu ! interface ppp1 ppp ipcp dns request keepalive ip address negotiated ppp username user@isp ppp password isppasswd ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.10.1/24 ! zone private network lan ip subnet 172.16.0.0/30 ip subnet 172.17.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ! zone public network ppp0 ip subnet 0.0.0.0/0 interface ppp0 network ppp1 ip subnet 0.0.0.0/0 interface ppp1 ! application esp protocol 50 ! application isakmp protocol udp sport 500 dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret-ab address 10.1.1.2 crypto isakmp key secret-ac address 10.1.1.3 ! interface tunnel0 ip address 172.16.0.1/30 tunnel source 10.1.1.1 tunnel destination 10.1.1.2 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300 ! interface tunnel1 ip address 172.17.0.1/30 tunnel source 10.1.1.1 tunnel destination 10.1.1.3 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300 ! ip route 0.0.0.0/0 ppp1 ip route 10.1.1.2/32 ppp0 ip route 10.1.1.3/32 ppp0 ip route 192.168.20.0/24 tunnel0 ip route 192.168.20.0/24 null 254 ip route 192.168.30.0/24 tunnel1 ip route 192.168.30.0/24 null 254 ! end
! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ppp username userB ppp password passwdB ip address 10.1.1.2/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.20.1/24 ! zone private network lan ip subnet 172.16.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ! zone public network internet ip subnet 0.0.0.0/0 interface tunnel0 network ppp0 ip subnet 0.0.0.0/0 interface ppp0 ! application esp protocol 50 ! application isakmp protocol udp sport 500 dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect ! crypto isakmp key secret-ab address 10.1.1.1 ! interface tunnel0 ip address 172.16.0.2/30 tunnel source 10.1.1.2 tunnel destination 10.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300 ! ip route 0.0.0.0/0 tunnel0 ip route 10.1.1.1/32 ppp0 ! end
! interface eth1 encapsulation ppp 0 ! interface ppp0 ppp ipcp dns request keepalive ppp username userC ppp password passwdC ip address 10.1.1.3/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.30.1/24 ! zone private network lan ip subnet 172.17.0.0/30 ip subnet 192.168.10.0/24 ip subnet 192.168.20.0/24 ip subnet 192.168.30.0/24 ! zone public network internet ip subnet 0.0.0.0/0 interface tunnel0 network ppp0 ip subnet 0.0.0.0/0 interface ppp0 ! application esp protocol 50 ! application isakmp protocol udp sport 500 dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.ppp0 to public.ppp0 rule 40 permit esp from public.ppp0 to public.ppp0 protect ! crypto isakmp key secret-ac address 10.1.1.1 ! interface tunnel0 ip address 172.17.0.2/30 tunnel source 10.1.1.3 tunnel destination 10.1.1.1 tunnel mode ipsec ipv4 tunnel protection ipsec ip tcp adjust-mss 1260 mtu 1300 ! ip route 0.0.0.0/0 tunnel0 ip route 10.1.1.1/32 ppp0 ! end
(C) 2019 - 2024 アライドテレシスホールディングス株式会社
PN: 613-002735 Rev.AD