[index] AT-AR1050V コマンドリファレンス 5.5.4
AMFネットワーク名 | AMF001 | ||
AMFマスター | スイッチA | ||
AMFバックアップ用外部メディア | SDHCカード | ||
AMF仮想リンク1 | 172.16.0.1(ルーターA:AMFメンバー) - 172.16.0.2(ルーターB:AMFメンバー) | ||
AMF仮想リンク2 | 172.16.0.5(ルーターA:AMFメンバー) - 172.16.0.6(ルーターC:AMFメンバー) | ||
ISP接続用ユーザー名 | user@isp1 | user@isp2 | user@isp3 |
ISP接続用パスワード | isppasswd1 | isppasswd2 | isppasswd3 |
PPPoEサービス名 | 指定なし | 指定なし | 指定なし |
WAN側IPアドレス | 10.0.0.1/32 | 10.0.0.2/32 | 10.0.0.3/32 |
WAN側物理インターフェース | eth1 | eth1 | eth1 |
WAN側(ppp0)IPアドレス | 10.0.0.1/32 | 10.0.0.2/32 | 10.0.0.3/32 |
LAN側(vlan1)IPアドレス | 192.168.1.254/24 | 192.168.100.254/24 | 192.168.200.254/24 |
トンネル(tunnel0)IPアドレス | 172.16.0.1/30 | 172.16.0.2/30 | 172.16.0.6/30 |
トンネル(tunnel1)IPアドレス | 172.16.0.5/30 |
interface eth1 encapsulation ppp 0
interface ppp0 keepalive ppp username user@isp1 ppp password isppasswd1 ip address 10.0.0.1/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.1.254/24
atmf network-name AMF001 atmf virtual-link id 1 ip 172.16.0.1 remote-id 1 remote-ip 172.16.0.2 atmf virtual-link id 2 ip 172.16.0.5 remote-id 2 remote-ip 172.16.0.6
interface port1.0.1 switchport atmf-link
zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network tunnel ip subnet 172.16.0.0/30 interface tunnel0 ip subnet 172.16.0.4/30 interface tunnel1
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1
application esp protocol 50
application isakmp protocol udp dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret-1 address 10.0.0.2 crypto isakmp key secret-2 address 10.0.0.3
interface tunnel0 mtu 1300 tunnel source 10.0.0.1 tunnel destination 10.0.0.2 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.1/30 ip tcp adjust-mss 1260
interface tunnel1 mtu 1300 tunnel source 10.0.0.1 tunnel destination 10.0.0.3 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.5/30 ip tcp adjust-mss 1260
ip route 0.0.0.0/0 ppp0 ip route 192.168.100.0/24 tunnel0 ip route 192.168.100.0/24 Null 254 ip route 192.168.200.0/24 tunnel1 ip route 192.168.200.0/24 Null 254
end
interface eth1 encapsulation ppp 0
interface ppp0 keepalive ppp username user@isp2 ppp password isppasswd2 ip address 10.0.0.2/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.100.254/24
atmf network-name AMF001 atmf virtual-link id 1 ip 172.16.0.2 remote-id 1 remote-ip 172.16.0.1
interface port1.0.1 switchport atmf-link
zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.100.0/24 network tunnel ip subnet 172.16.0.0/30 interface tunnel0
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.2
application esp protocol 50
application isakmp protocol udp dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret-1 address 10.0.0.1
interface tunnel0 mtu 1300 tunnel source 10.0.0.2 tunnel destination 10.0.0.1 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.2/30 ip tcp adjust-mss 1260
ip route 0.0.0.0/0 ppp0 ip route 192.168.1.0/24 tunnel0 ip route 192.168.1.0/24 Null 254
end
interface eth1 encapsulation ppp 0
interface ppp0 keepalive ppp username user@isp3 ppp password isppasswd3 ip address 10.0.0.3/32 ip tcp adjust-mss pmtu
interface vlan1 ip address 192.168.200.254/24
atmf network-name AMF001 atmf virtual-link id 2 ip 172.16.0.6 remote-id 2 remote-ip 172.16.0.5
interface port1.0.1 switchport atmf-link
zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.200.0/24 network tunnel ip subnet 172.16.0.4/30 interface tunnel0
zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.3
application esp protocol 50
application isakmp protocol udp dport 500
firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect
nat rule 10 masq any from private to public enable
crypto isakmp key secret-2 address 10.0.0.1
interface tunnel0 mtu 1300 tunnel source 10.0.0.3 tunnel destination 10.0.0.1 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.6/30 ip tcp adjust-mss 1260
ip route 0.0.0.0/0 ppp0 ip route 192.168.1.0/24 tunnel0 ip route 192.168.1.0/24 Null 254
end
copy running-config startup-config
」の書式で実行します。awplus# copy running-config startup-config ↓ Building configuration... [OK]
awplus# write memory ↓ Building configuration... [OK]
awplus(config)# log buffered level informational facility local5 ↓
awplus# show log | include Firewall ↓
! interface eth1 encapsulation ppp 0 ! interface ppp0 keepalive ppp username user@isp1 ppp password isppasswd1 ip address 10.0.0.1/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.1.254/24 ! atmf network-name AMF001 atmf virtual-link id 1 ip 172.16.0.1 remote-id 1 remote-ip 172.16.0.2 atmf virtual-link id 2 ip 172.16.0.5 remote-id 2 remote-ip 172.16.0.6 ! interface port1.0.1 switchport atmf-link ! zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.100.0/24 ip subnet 192.168.200.0/24 network tunnel ip subnet 172.16.0.0/30 interface tunnel0 ip subnet 172.16.0.4/30 interface tunnel1 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.1 ! application esp protocol 50 ! application isakmp protocol udp dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret-1 address 10.0.0.2 crypto isakmp key secret-2 address 10.0.0.3 ! interface tunnel0 mtu 1300 tunnel source 10.0.0.1 tunnel destination 10.0.0.2 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.1/30 ip tcp adjust-mss 1260 ! interface tunnel1 mtu 1300 tunnel source 10.0.0.1 tunnel destination 10.0.0.3 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.5/30 ip tcp adjust-mss 1260 ! ip route 0.0.0.0/0 ppp0 ip route 192.168.100.0/24 tunnel0 ip route 192.168.100.0/24 Null 254 ip route 192.168.200.0/24 tunnel1 ip route 192.168.200.0/24 Null 254 ! end
! interface eth1 encapsulation ppp 0 ! interface ppp0 keepalive ppp username user@isp2 ppp password isppasswd2 ip address 10.0.0.2/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.100.254/24 ! atmf network-name AMF001 atmf virtual-link id 1 ip 172.16.0.2 remote-id 1 remote-ip 172.16.0.1 ! interface port1.0.1 switchport atmf-link ! zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.100.0/24 network tunnel ip subnet 172.16.0.0/30 interface tunnel0 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.2 ! application esp protocol 50 ! application isakmp protocol udp dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret-1 address 10.0.0.1 ! interface tunnel0 mtu 1300 tunnel source 10.0.0.2 tunnel destination 10.0.0.1 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.2/30 ip tcp adjust-mss 1260 ! ip route 0.0.0.0/0 ppp0 ip route 192.168.1.0/24 tunnel0 ip route 192.168.1.0/24 Null 254 ! end
! interface eth1 encapsulation ppp 0 ! interface ppp0 keepalive ppp username user@isp3 ppp password isppasswd3 ip address 10.0.0.3/32 ip tcp adjust-mss pmtu ! interface vlan1 ip address 192.168.200.254/24 ! atmf network-name AMF001 atmf virtual-link id 2 ip 172.16.0.6 remote-id 2 remote-ip 172.16.0.5 ! interface port1.0.1 switchport atmf-link ! zone private network lan ip subnet 192.168.1.0/24 ip subnet 192.168.200.0/24 network tunnel ip subnet 172.16.0.4/30 interface tunnel0 ! zone public network wan ip subnet 0.0.0.0/0 interface ppp0 host ppp0 ip address 10.0.0.3 ! application esp protocol 50 ! application isakmp protocol udp dport 500 ! firewall rule 10 permit any from private to private rule 20 permit any from private to public rule 30 permit isakmp from public.wan.ppp0 to public.wan rule 40 permit isakmp from public.wan to public.wan.ppp0 rule 50 permit esp from public.wan.ppp0 to public.wan rule 60 permit esp from public.wan to public.wan.ppp0 protect ! nat rule 10 masq any from private to public enable ! crypto isakmp key secret-2 address 10.0.0.1 ! interface tunnel0 mtu 1300 tunnel source 10.0.0.3 tunnel destination 10.0.0.1 tunnel protection ipsec tunnel mode ipsec ipv4 ip address 172.16.0.6/30 ip tcp adjust-mss 1260 ! ip route 0.0.0.0/0 ppp0 ip route 192.168.1.0/24 tunnel0 ip route 192.168.1.0/24 Null 254 ! end
(C) 2019 - 2024 アライドテレシスホールディングス株式会社
PN: 613-002735 Rev.AD